SOW for Exec course 09 March 2022.docx

FEDERAL BUREAU OF INVESTIGATION

Cyber Readiness Section (CRS), Cyber Education and Training Unit (CETU), Executive Management Cybersecurity Course For the Cyber Division

Statement of Work 3/9/2021

FEDERAL BUREAU OF INVESTIGATION

STATEMENT OF WORK

1. Introduction Background CETU currently offers cyber training to executives called the Cyber Executive Training Program. As part of this program, CETU provides training merging together the FBI executive management responsibilities and incident response, and the private sector responsibilities and responses relating to cyber-attacks and threats. The goal is to provide FBI executives with an understanding and perspective of the C level executives in order to foster better relationships with private sector partners. These relationships are key to building trust among the FBI and the private sector, as well as aiding sharing information for investigations. It is important that FBI executives understand the language, motivation, and have high-level technical knowledge of private sector companies in order to fully understand the threats private sector companies face. CETU would like to partner with a University or private sector company to give FBI Executives a high-level cybersecurity course that will provide insight into the current posture of C Level Executives.

Scope The selected contractor shall be required to provide support services in the following areas to assist the Cyber Readiness Section (CRS) and CETU with providing a high-level cybersecurity course in the greater Washington D.C. area. The training will cover various aspects of cybersecurity for executives and will provide students with an opportunity to sit for an exam and receive a certification.

Objectives The general objective of this acquisition is for the selected contractor to provide executive leadership with a high-level overview of various aspects of Cybersecurity Management in the private sector.

Executive Management Cybersecurity Course The training would include 2 days of classroom instruction. This course will be at a high level of instruction targeted at C level executives. Students would be provided the opportunity to sit for an exam and certification. This course would include the following topics:

· Why is cybersecurity important?

· Identify considerations for cybersecurity management

· Cybersecurity situational awareness

· Identify key frameworks of cybersecurity

· National Institute of Standards and Technology (NIST) framework

· Key cybersecurity risk management concepts and tradeoffs

· Assess and understand the roles and responsibilities of Executive Management, C Level Executives, and Board Members

· Ways to measure and assess cybersecurity practices

· Incident Response procedures from the private sector perspective.

· Language and vocabulary used by CISO, CTO, etc.

· Understanding tradeoffs between security, privacy, and accessibility; and understanding the organization's priorities within them.

Requirements/Specifications This is a non-personal services contract. The Government shall not exercise any supervision or control over Contractor employees performing the services herein. Such contract service providers shall be accountable solely to the selected contractor who, in turn is responsible to the Government.

Task Descriptions Deliver an in-person Cybersecurity Oversight Course for the Business Executive in the greater Washington, DC area.

Task 2– Position Qualifications All instructors must be subject matter experts in the field of cybersecurity at the executive management level.

Place of Performance The primary place of performance will be at the in the greater Washington, DC area or Huntsville, AL.

Period of Performance The period of performance for this effort will be one year base period with four additional option periods.

Hours of Operation The selected contractor's workday will be eight work hours a day in accordance with the developed course agenda. Flexibility within the normal workday shall be coordinated with the Contract Officer's Representative (COR) and the FBI's Course Program Manager.

Deliverables Deliver at least four Cybersecurity Oversight for the Business Executive courses per year.

Government Furnished Equipment or Information The Government will not provide Contractor personnel assigned to this contract with a typical working environment, including office furniture and furnishings, secure and unclassified telephone service, storage for classified and unclassified materials, use of the Government's mail and courier services, and access to copiers, fax machines, personal computers (PCs) and related software.

Government Representatives Contracting Officer Representative The COR will be identified via letter of COR delegation authority issued by the Contracting Officer (CO) for this contract. The COR is responsible, as applicable, for: receiving all deliverables; inspecting and accepting the supplies or services provided hereunder in accordance with the terms and conditions of this contract; providing direction to the selected contractor which clarifies the contract effort, filling in details or otherwise furnishing information necessary to accomplish the SOW; evaluating performance; and certifying all invoices/vouchers for acceptance of the supplies or services furnished for payment.

The COR does not have the authority to alter or modify the selected contractor's obligations, contract terms, conditions, specifications, or cost. If as a result of technical discussions, it is in the Government’s best interest to alter/change contractual obligations or the SOW, the CO will issue such changes.

The COR for this effort is:

Name:

Title:

Address:

Phone:

Email:

Contracting Officer The CO is the appointed authority to bind the Government to the extent of the authority delegated. Direction that will modify the scope, schedule, terms and conditions, funding, or any other action that may modify the agreement as originally entered into with the Government must be given only by the CO.

This contract will be administered by:

Name:

Title:

Unit:

Address:

Phone:

Email:

Travel Instruction for course will be based in the greater Washington Metropolitan area.

Section 508 Compliance In accordance with Section 508 of the Rehabilitation Act of 1973 (29 U.S.C. 794d) and the Architectural and Transportation Barriers Compliance Board Electronic and Information Technology (EIT) Accessibility Standards (36 CFR part 1194), all EIT services supplied as part of this contract shall meet the applicable accessibility standards at 36 CFR part 1194. Contractor shall provide detailed evidence that services provided have the capacity to be compliant in all technical standards outlined in 36 CFR part 1194 subsections 1194.21 through 1194.26.

image1.jpg image2.png