Cyber Security Engineering Support Services

Background
This is a SOURCES SOUGHT / MARKET RESEARCH notice to request information for Government planning purposes only. Responses will assist the Government in planning its acquisition strategy for a potential future acquisition. The Government is not committed to issue a solicitation or award a contract as a result of this announcement. Naval Surface Warfare Center Dahlgren Division (NSWCDD) Dam Neck Activity (DNA) is seeking qualified and capable potential vendors. Capability Statements and questions shall be provided via email to: Elizabeth.s.bailey13.civ@us.navy.mil and matthew.aponte.civ@us.navy.mil by close of business (COB) on 15 January 2024. This is not a request for proposals (RFP) and does not obligate the Government to award a contract or task order.

Work Details
The NSWCDD and the NSWCDD-DNA provides research, development, Test & Evaluation (T&E), analysis, systems engineering, integration, and certification of complex naval warfare systems. NSWCDD DNA’s work is focused on providing engineering, acquisition, logistical, and Cyber Security (CS) support to the Navy, Marine Corps, Special Warfare Coalition, and Joint Forces.

The Contractor shall provide CS Engineering support to NSWCDD, NSWCDD DNA, associated partners (both afloat and ashore) and sponsors. Requirements include Cyber Engineering and Analysis, Risk Management Framework and CyberSAFE activities, compliance and security posture verification, system software baselines maintenance, cyber hygiene maintenance onboard fleet vessels and in lab environments, code analysis, supply chain vulnerability analysis, compliance tracking across networks and systems, system policies documentation, traceability from system design to validation, support interchange meetings and working groups.

Additionally, the Contractor shall develop and conduct tests to evaluate compliance with CS specifications and requirements; conduct vulnerability assessments using approved tools such as ACAS; perform assessments as a Blue Team to identify vulnerabilities; conduct Red Team assessments in joint and fleet exercises; perform threat modeling based on current architectures; utilize commercial and open-source network Cyber assessment tools; support training of Red Teams; conduct cyber exercise planning and execution; identify gaps in Red Team capabilities; support full spectrum of activities associated with Penetration Testing.

Period of Performance
The resultant contract will have a twelve-month Base Year (BY) and four twelve-month Option Year (OY) periods for a total of sixty months.

Place of Performance
Work is to be primarily performed on-site at Government facility located at NSWC Dahlgren Division, Dam Neck Activity, Virginia Beach, Virginia. Additional support locations to include Dahlgren, Virginia; Mayport, Florida; Huntsville, Alabama; San Diego, California; and other CONUS/OCONUS fleet concentration areas as needed.