SANS_PWS.DOCX

PERFORMANCE WORK STATEMENT (PWS)

(This is for the SAT and below)

The contractor shall provide all required essentials for online on demand courses for the COARNG Cyber Protection Team to conduct a SANS SEC 506, FOR 500 & 572 online on demand training, exam vouchers and a net wars lab package.

The North American Industry Classification System (NAICS) code assigned to this procurement is 611420.

Purpose The new Cyber Protection Team (CPT) based in Colorado has industry specific training requirements to enable them to be mission ready and deployable to engage in cyber missions. This requirement is calling for SANS SEC 506, FOR 500 & 572 online on demand training, exam vouchers and a net wars lab package.

Period of Performance SEC 506 1 year voucher from date of purchase FOR 500 1 year voucher from date of purchase FOR 572 1 year voucher from date of purchase

Place of Performance Online On demand training

Government Furnished Equipment N/A

Quality Assurance (QA) The Government shall evaluate the contractor’s performance in accordance with the Quality Assurance Surveillance Plan (QASP) to ensure that the contractor has performed in accordance with the performance standards.

Requirements The following services and supporting materials are required to satisfy mission-critical requirements: The contractor shall: provide Online Live Training for SANS SEC 506, FOR 500 & 572 training for 5 participants each. Additionally, the vendor will provide corresponding GIAC test vouchers per each corresponding course and a SANS netwars subscription for each participating student. Training must be equivalent on an accreditation level they have to meet the U.S. Secretary of Education and the Council for Higher Education Accreditation

More specifically, training should accomplish baseline requirements for each course:

Course Syllabus Each course syllabus can be found at the bellow link describing the requirements for this training requirement.

SANS SEC 506 - https://www.sans.org/ondemand/course/securing-linux-unix SANS FOR 500 – https://www.sans.org/ondemand/course/windows-forensic-analysis SANS FOR 572 - https://www.sans.org/ondemand/course/advanced-network-forensics-analysis

The vendor proposal shall include a standardized course outline, references of previous instruction, and proof of being a SANS certified Provider. Will be validated with the SANS Institute.

Government POC after Award (Do not contact directly during solicitation timeframe) The assigned customer POC for this contract is:

CPT Matthew Gaskins Phone:

Email: matthew.c.gaskins.mil@mail.mil

Alternate Andrew Gray Phone: 720-250-1103 Email: andrew.s.gray.civ@mail.mil Contractor Manpower Reporting Application (CMRA):

The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the Colorado Army National Guard via a secure data collection site.

The contractor shall completely fill in all required data fields using the following web address: http://www.ecmra.mil/. Reporting inputs shall be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year, beginning with 2013. Contractors may direct questions to the help desk at http://www.ecmra.mil.

Quality Assurance Plan

Performance Requirements Summary The Performance Requirements Summary includes performance standards to determine contractor performance. The chart below lists the contracts primary service requirements, their acceptable quality levels and the methods of government surveillance. While there are several contract requirements not listed in the chart below, failure to list a requirement below does not negate the contractor’s obligation to perform all contract requirements.

Contracts Deliverable Requirements Listing