Additional Questions and Answers.pdf

1. 1.6.6 Special Requirements. "Contractor shall remain within a 50-mile radius of the place of performance in order to quickly respond and support the training."" What is the purpose of this constraint? Is this only during the CULEX or the entire period of performance? This is for the days where training runs later than usual and the instructor has to be flexible to fulfill our training requirements.

This will typically be for the exercise portions

2. Is training limited to Columbus, GA and Destin, FL? CULEX is in Destin and

Mode 1 &3 in Columbus but Mode 6 as well as Mode 3 (PGL) are unspecified. All training will be in Columbus, GA except the CULEX which will be in Destin, FL

3. 1.4.9 "The Contractor will not be responsible for exercise participant or role player transportation." Is this support expected to be in an administrative fashion or are we providing transportation that supports the role players persona in the exercise? This is protecting the contractor from being held responsible for any transportation of role players or participants.

4. 4.2.2 "The contractor will be prepared to brief the findings of the aforementioned

SIGINT survey of all training areas during a follow on planning conference through Video or Tele-Conference." Will this be a NIPR VTC or are you expecting the contractor to have access to a secure VTC? This will be a VTC over a non-governmental network. If the VTC requires secure communications, it will be supplied by the unit.

Q12. Reference "Attacks." Do you want your personnel to conduct offensive cyber operations against a given network? Yes

Q13. Reference "Surveillance/ Surveillance Devices." Do you want your personnel to build devices based on off-the-shelf equipment or custom-designed tools? Do you want your personnel to build self-contained systems/ component-based systems/ stay-behind systems/ covert systems? The students will build devices based on COTS hardware and software. They will be stay behind systems configured for covert installment.

Q14. Reference "Custom Programming Capabilities." Do you need your personnel to develop their pre-made scripting for use, OR do they need to perform real-time, on-the-fly coding.

Develop pre-made scripting. Intent is to understand basic scripts to improve surveillance efforts

Q15. Reference "Signature Reduction Techniques": Do your personnel need to be capable of MAC/ IP spoofing/ masking/ Obfuscation of intrusion/ operations against a given network/ Emulating a different threat actor to assist in non-attribution of attack Yes