Sources Sought - Technical Analytical Support.pdf

***The Government is seeking industry feedback, recommendations, and best practices during the market intelligence phase of this effort***

Title: Defense Cyber Crime Center (DC3) Technical and Analytical Support

Current Task Order GSQ0017AJ0021, GSA Alliant 2

Current Contractor: Lockheed Martin Corporation

Contemplated Acquisition Strategy: To Be Determined (TBD)

General Information:

1 The Department of Defense Cyber Crime Center (DC3) was unofficially formed in 1998 as an entity under the Department of the Air Force (AF). The initial operational capability brought together the Defense Computer Forensics Laboratory (DC3/CFL) and the Defense Computer

Investigations Training Program (DCITP). DC3 is now designated as a National Cyber Center by the National Security Presidential Directive 54 / Homeland Security Presidential Directive 23 and a Department of Defense (DoD) Center of Excellence by DoD Directive (DoDD) 5505.13E with the mission to set the standards in digital and multimedia (D/MM) forensics, develop and deliver specialized cyber investigative training, and serve as a focal point for information sharing on cybersecurity (CS) matters across the DoD.

The Secretary of the AF serves as the DoD Executive Agent for these activities and the Inspector

General of the United States (U.S.) AF provides overall program management.

2. This SSS is solely intended to obtain Market Research information in accordance with the Federal Acquisition Regulation (FAR) Part 10 and its supplements to assist the Government in formulating an acquisition strategy for procurement of these mission-critical services.

3. This SSS does not constitute a Request for Proposal (RFP), a commitment to issue an RFP in the future, or an award of a contract for these services. Respondents are advised that the United States Government will not pay or reimburse costs of preparing the information provided in response to this SSS.

4. Responses to this SSS are to be submitted by e-mail only, no later than 19 Nov 2020 to rachelle.booker@us.af.mil All responses from prospective offerors should include the return e-mail address, firm name, mailing address, telephone number and point of contact within the body of the response. Responses are limited to 10 pages, single-sided, and Times New Roman 10 point font.

Scope of Work:

1. The scope of this effort is to support six of the eight DC3 Directorates. The six directorates are outlined below:

COMPUTER FORENSICS LABORATORY (DC3/CFL)

Support Digital Multi-Media (D/MM) forensic examinations, device repair, data extraction, and expert testimony for DoD agencies Support intrusion and malware analysis.

TECHNICAL SOLUTIONS DEVELOPMENT (DC3/TSD)

Tailor software and system solutions engineered to the specific requirements of digital forensic mailto:rachelle.booker@us.af.mil examiners and cyber intrusion analysts. Validate commercial off-the-shelf (COTS), Government off-the-shelf (GOTS), and custom developed software/hardware before it can be used in a forensic process. In addition, DC3/TSD functions as the DoD repository for cyber CI tools.

DOD-DEFENSE INDUSTRIAL BASE COLLABORATIVE INFORMATION SHARING

ENVIRONMENT (DC3/DCISE)

Support DC3 with assisting Defense Industrial Base (DIB) companies to safeguard DoD content and intellectual property residing on or transiting their unclassified networks. The contractor shall develop and share actionable threat products, and performs cyber analysis, diagnostics, and remediation consults for DIB Partners.

CYBER CRIME CENTER ANALYTICAL GROUP (DC3-AG)

Perform technical analyses supporting the investigations and operations of national Law

Enforcement/Counter Intelligence (LE/CI) agencies. The primary agencies served are the Air

Force Office of Special Investigations (AFOSI), Naval Criminal Investigative Service (NCIS) and the Federal Bureau of Investigation (FBI).

Support DC3’s role as a member of the National Cyber Investigative Joint Task Force (NCIJTF) including collaborative analytical and technical exchanges with subject matter experts (SMEs) from LE/CI, Computer Network Defense (CND), United States Intelligence Community (USIC), and IA agencies. The purpose of these information exchanges is to enable proactive LE/CI cyber operations.

VULNERABILITY DISCLOSURE PROGRAM (DC3/VDP)

Support DC3’s role in the Vulnerability Disclosure Policy approved by the Secretary of Defense and the Department of Justice which authorizes private-sector cybersecurity researchers (AKA

Hackers) to scan public-facing DoD web sites for vulnerabilities.

DC3 is the sole focal point for receiving vulnerability reports and interacting with researchers.

DC3 ensures that reports are delivered to the system owner and remediation personnel as quickly as possible.

BUSINESS AND TECHNOLOGY OPERATIONS (DC3/BTO)

BTO is the support element of DC3 and provides five functions: human resources, security administration, information technology (IT), cyber security, and logistics that enable operations in a complex dynamic cyber environment. This requirement is supports two of the five: information technology (IT), cyber security.

Instructions for Responses:

1. In response to this SSS, interested vendors are requested to provide the following information:

(1) General:

a. Describe past Department of Defense (DoD) acquisition support experiences

b. Address:

1. How you will protect all proprietary or company private information, trade secrets, confidential information, or restricted data received in connection with the work;

2. How you will disclose OCI’s and/or improper use or attempts to use the information for any other purpose other than that to which it was furnished.

c. Describe past experience on similar DoD contracts with a magnitude of 175-250 personnel

(2) Personnel:

a. ~120 personnel (mostly in technical fields) with a minimum security clearance of

SECRET. If not, how many can you provide?

b. An additional ~100 personnel with a security clearance of TOP SECRET (with handling and storage up to TOP SECRET), ~50 of which have Sensitive

Compartmented Information (SCI) and Special Access Program (SAP) eligibility. If not, how many can you provide?

c. How would you plan to staff this effort and what process is used by your company to recruit and retain top quality subject matter expert personnel?

d. What teaming arrangements strategies (if any) would you utilize for an effort of this size?

(3) Facilities:

a. Non-SCIF workspaces for 100-125 contract personnel, with handling and storage up to SECRET. If not, then how many personnel can you accommodate?

b. Non-SCIF workspaces for 30-50 contract personnel, with handling and storage up to

TOP SECRET. If not, then how many personnel can you accommodate?

c. Sensitive Compartmented Information Facility (SCIF) and Special Access Program

(SAP) workspaces for 30-50 contract personnel at one location that can be subdivided into 3 physically semi-separated areas (with handling and storage up to TOP

SECRET) If not, then how many personnel can you accommodate and at what locations?

d. Confirm SCIF and SAP facility existence, availability, and accreditation

e. Confirm existing contractor facility clearance of TOP SECRET

f. The Government is conducting required services at a designated location within

Linthicum, Maryland. Where are your facilities located? How quickly can personnel get to the Linthicum, Maryland from these facilities during work hours between 0800 and 1700? Would you need to lease new or additional space to meet the Government need?

(4) Can you provide necessary infrastructure support to include Virtual Private Network

(VPN), phone lines, equipment, computers, office furniture, supplies, etc. for required personnel?

Requested Information (all information request is optional)

In addition to providing a tailored capabilities statement and experience examples, interested vendors are asked to submit the following information:

A. Vendor Info Requested

1. Name of Business

2. DUNS and Cage Code

3. Business Type: SB/Large

4. POC/Phone number/Email

B. Small Business Subcontracting opportunities:

1. Given the scope of the subject PWS, as written; can your company perform this requirement as the Prime, a Subcontractor or a Joint Business Venture (Teaming

Arrangement)?

2. What Section(s)/Percentage of the PWS can your company perform as the Prime, Subcontractor or a Teaming Arrangement?

3. Does your company have recent and relevant Past Performance Information (PPI) to confirm your experience as a Prime, a Subcontractor or Joint Business Venture performing the required services in the PWS?

4. What is the Size of your company (to include socio-economic status), given the designated NAICS?

5. Does your company anticipate any Subcontracting opportunities in the performance of this requirement?

C. Supporting Documentation (optional but preferred)

1. Provide examples of supporting Fortune 100 to 500 companies (CEO’s/upper management) and/or DoD (any branch) or Federal Senior Leadership (including

MAJCOM or Combatant Command level) in Facilities Management, Human Resources and Human Capital, Policy and Public Affairs, Financial Management, Standardizing

DC3 Program Management, and Business Processes and Tools

(enterprise impact, not staff augmentation).

2. Provide program oversight experience for contracts valued between $45 - 50 Million

3. Current industry practices surrounding Facilities Management, Human Resources and

Human Capital, Policy and Public Affairs, Financial Management, Standardizing DC3

Program Management, and Business Processes and Tools

D. Questions to Industry

1. What contracts have you supported/are supporting in the DoD that are similar in scope and size to this requirement?

2. What innovative Information technology/cyber security solutions does your company provide? Examples of success.

3. Please speak to your current Digital/Multimedia forensic capabilities.

4. What innovative tools, resources, and techniques do you have to re-verse engineer malware?

5. Please discuss any engagement with the DoD regarding vulnerability sharing and/or ethical hacking initiatives.

Note: Please DO NOT provide generic capability statements; they will be deleted. The Government is seeking well defined responses with supporting documentation to assist with developing the acquisition strategy. All responses must be submitted via email to the contacts identified below.

***All information provided is optional; however, it will be used to assisting the Government in determining its acquisition strategy. Do not include proprietary or classified information***

Please direct any questions you may have regarding this notice in writing to the Contracting

Officer, Brandy Sanghott, at brandy.sanghott@us.af.mil.

mailto:brandy.sanghott@us.af.mil