The United States Property and Fiscal Office (USPFO) for Utah is seeking sources to conduct operation training on practical web application security with an emphasis on Burp Suite Pro and the practical application of these capabilities in advanced real world web application discovery and exploitation scenarios starting the 12th of July 2021 through the 16th of July 2021. Contracting Office Address: Utah National Guard, USPFO-UT, Purchasing and Contracting Office, 12953 S Minuteman Drive Draper, Utah 84020. Introduction: This is a SOURCES SOUGHT notice to determine the availability and technical capability of small businesses (to include the following subsets, Small Disadvantaged Businesses (SDB), HubZONE, Certified 8(a), Service Disabled Veteran-Owned Small Businesses (SDVOSB), and Woman Owned Small Businesses) to provide operational training on practical web application security with an emphasis on Burp Suite Pro and the practical application of these capabilities in advanced real world web application discovery and exploitation scenarios starting the 12th of July 2021 through the 16th of July 2021 to support a CyberShield exercise for the Utah National Guard located at Camp Williams in Bluffdale Utah. Disclaimer: This Sources Sought is for informational purposes only. This is not a request for proposal. It does not constitute a solicitation and shall not be construed as a commitment by the Government. Responses in any form are not offers and the Government is under no obligation to award a contract as a result of this announcement. Any information submitted by respondents to this notice is considered voluntary. Required Capabilities: Interested offerors are requested to submit a maximum ten (10) page statement of their company's capabilities and expertise with respect to the following: 1. Capability of the Contractor to provide supervision, all labor, tools, materials, equipment, and incidentals required to conduct operational training on Practical Web Application Security with an emphasis on Burp Suite Pro and the practical application of these capabilities in advanced real world web application discovery. and exploitation scenarios starting the 12th of July 2021 through the 16th of July 2021. 2. Capability of Contractor to ensure all training consists of comprehensive training on the latest open source tools and manual techniques for performing end-to-end discovery and exploitation of web applications. 3. Capability of contractor to provide verbal instruction and hands-on practice in a laboratory environment and be flexible on instruction hours due to the virtual instructions crossing multiple time zones in the U.S. 4. Capability of the Contractor to provide necessary training materials (hard/softcopy guides, manuals, workbooks, textbook, etc.), including hardware and software, to students on the first day of class. 5. Any other relevant information that is not listed herein upon which the Government should consider in developing its minimum specifications and finalizing its market research. Sources Sought: The anticipated North American Classification System Code (NAICS) for this requirement is 611430 Professional & Management Development Training (or very similar NAICS code) which has a Small Business Size Standard of $12 million (https://www.sba.gov/sites/default/files/files/Size_Standards_Table.pdf). This Sources Sought Synopsis is requesting responses to the following criteria ONLY from small businesses that can provided the required services under the NAICS Code identified. The current intent is to award a firm-fixed price (FFP) commercial purchase order for the requisite training. To assist the USPFO-UT P&C Office in making a determination regarding the level of participation by small business in any subsequent procurement that may result from this Sources Sought, you are also encouraged to provide information regarding your plans to use Joint Venturing (JV) or partnering to meet the training requirements. You should provide information on how you would envision your company's areas of expertise and those of any proposed JV/partner would be combined to meet the specific requirements contained in this announcement. In order to make a determination for a small business set-aside, two or more qualified and capable small business concerns must submit responses that demonstrate their qualifications. Responses must demonstrate the company's ability to perform in accordance with the Limitations on subcontracting clause (FAR 52.219-14). SUBMISSION DETAILS: Responses should include: 1) Business name and address 2) Name of company representative and their business title 3) Type of Small Business 4) Cage Code 5) Contract vehicles that may be available to the Government for the procurement of the services required, to include any other Government Agency contract vehicles. (This information is for market research only and does not preclude your company from responding to this notice.) Contractors who wish to respond to this notice should send responses via email NLT May 10, 2021 at 1:00PM Mountain Standard Time (MST) to john.b.merlette.civ@mail.mil. Interested businesses should submit a brief capabilities statement package (no more than ten pages) demonstrating ability to perform the services listed herein. Proprietary information and trade secrets, if any, must be clearly marked on all materials. All information received that is marked Proprietary will be handled accordingly. Please be advised that all submissions become Government property and will not be returned. The Government shall not be held liable for any damages incurred if proprietary information is not properly identified.
