Information Technology (IT) Information Assurance Support and Management Services, Defense Distribution Center (DDC), New Cumberland PA

The Defense Distribution Center (DDC) located in New Cumberland PA requires Information Technology (IT) information assurance support and management services. The contractor shall provide analysis of and support to the configuration management process, information assurance vulnerability alerts (IAVA), Department of Defense Information Assurance Certification and Accreditation Process (DIACAP), Defense Logistics Agency (DLA), and DLA J6N Computer Incident Response Team (CIRT) functions in support of DDC networks. The Contractor shall perform the following tasks associated with Vulnerability Management: 1. Analyze the current VM process and provided recommendations to make the process comply with DoD, DLA, DDC and NIST IA security policies and best practices , including: Roles and responsibilities, Remediation, Cross organizational reporting, Coordinating the Base lining assets, Vulnerability scanning, Developing and assessing metrics and Dissemination of Vulnerability Taskings, Alerts, and Bulletins. 2. Conduct network vulnerability assessments when requested by the COTR to determine if software and system configurations. 3. Serve as a member of the CIRT providing support for response, mitigation, and recovery from incidents. 4. Prepare risk assessments for known and emerging vulnerabilities including cost to the organization to remediate or mitigate possibility of exploitation, and damage if exploited. 5. Coordinate with J6N/DDC personnel to ensure J6N's timely compliance and reporting with DoD and DLA directives and reporting requirements. 6. Analyze time extension requests and provide the J6N Information Assurance Manager (IAM) with recommendations for approval/disapproval. 7. Assist the IAM in analyzing DIACAP vulnerabilities and provide recommendations for appropriate remediation or mitigation actions or develop verbiage in support of exception requests. 8. Analyze vulnerability scan results for problems, issues and provide recommendations for correcting or mitigating. 9. Perform continuous network monitoring operations for identification of on-going attacks against J6N DDC networks and/or interconnected systems using DoD mandated and other approved tool sets; provide real-time analysis, response and reporting to DLA HQ/NOSC on network attacks and security incidents; correlate network events with supporting network data, threat data, and technical vulnerability information; maintain global situational awareness of Information Assurance events threatening J6N Area of Responsibility; and draft event/incident reports (Event Assessment Reports, Item of Interest, etc.) to document and report significant network events affecting J6N networks. Create IA/CND incident and status slides for briefs, and track and report INFOCON changes, including actions taken by HQ/Subordinate Commands/Components. 10. Identify and report areas of concern that impact time, cost, scope or execution of VM related tasks. 11. Prepare documentation in the form of whitepapers and/or fact sheets, spreadsheets and performing the research necessary to compose documentation. Contract period is anticipated to be from 01 November 2009 to 31 October 2010, with four (4) one year option periods. This acquisition shall be set-aside 100% for Small Businesses. The North American Industry Classification System (NAICS) code for this effort is 541513 with a small business size standard of $25,000,000. To receive an award resulting from solicitations issued after May 31, 1998, your company must be registered in the Central Contractor Registration (CCR) database. Contractors may obtain information on registration and annual confirmation requirements by calling +1 (555) 000-0000 or via the Internet at http://www.ccr.gov. The Government intends to award a contract resulting from this solicitation to the responsible offeror using the lowest priced technically acceptable source selection process. The solicitation will provide the evaluation factors for award. Failure to submit all the information requested by the solicitation may result in the proposal being eliminated from consideration for award. It is recommended that any interested parties register at this site for updates, as the Government will post any documents or amendments at the Federal Business Opportunities website. It is anticipated that Solicitation SP3300-09-R-0046 will be posted to this site on or about the week of August 24, 2009. Amendments to the Solicitation will also be posted to this site. Prospective offerors are cautioned concerning their responsibility to access the website for any amendments that may be issued under this RFP. There will be no advance notification of amendment issuance. Prospective offerors are advised to consult the website frequently to check for any amendments. Amendments may be issued up until the proposal due date. Failure to acknowledge amendments may render your proposal ineligible for award.