DOI - KnowBe4 Security Awareness Training - MRAS

The Department of the Interior (DOI), through the Office of the Chief Information Officer (OCIO), is seeking to continue its subscription to KnowBe4's Enterprise Awareness Training Program. This initiative is part of a broader effort to enhance the cybersecurity posture of the DOI by integrating comprehensive training and assessment tools designed to mitigate risks associated with phishing and other cyber threats.

For over five years, DOI's OCIO has utilized KnowBe4's platform to conduct baseline testing using mock attacks, provide engaging interactive training, and perform continuous assessments through simulated phishing attacks. This program is vital in building a more resilient and secure organization by increasing employee awareness and education regarding phishing tools and techniques. The primary goal is to ensure the safekeeping of DOI's infrastructure and data against potential cybersecurity vulnerabilities.

The CSOC Phishing Program managed under this contract includes modules for social engineering, spear-phishing, and ransomware attacks. It also features a Simulated Phishing Platform designed to deploy relevant campaigns across DOI. These campaigns are critical in showcasing realistic cybersecurity attack scenarios, thereby enhancing employees' ability to make safe decisions consistently. Furthermore, the program provides enterprise-level security awareness training through skills-based assessments, with continuous assessments reported at user, federated, and enterprise levels for visibility into phishing trends within DOI.

The contractor will be responsible for providing access, support, and maintenance for KnowBe4's Enterprise Awareness Training products during the specified period of performance from July 28, 2024, to July 27, 2025. The requirement includes delivering 80,000 units of KnowBe4 Security Awareness Training (SKU: KMSATPN-K12-G) as part of this ongoing effort to fortify DOI's defense mechanisms against evolving cyber threats.