Marine Corps Red Team (MCRT) Cloud Infrastructure

Background
The Marine Corps Red Team (MCRT) is tasked with evaluating and assessing the security and defense of the United States Marine Corps (USMC) protected cyberspace against adversarial tactics and techniques.

This contract aims to provide the necessary cloud infrastructure to support these operations, which have been critical since the MCRT's implementation of AWS cloud infrastructure in December 2014. The MCRT has conducted over 300 missions utilizing this infrastructure, which has been reviewed and certified by the National Security Agency (NSA) and United States Cyber Command (USCYBERCOM).

Work Details
The contract requires continued infrastructure to emulate adversarial techniques in a manner that is external to the Marine Corps Enterprise Network. Key requirements include:
1. Non-Attribution: Operations must not be identifiable by Marine Corps network defenders as part of Red Team activities.
2. Flexibility: The infrastructure must adapt to changing conditions in cyberspace and emulate various cyber adversaries.
3. Security: It must protect sensitive information from penetration tests or threat emulation operations.
4. Operational Integrity: Access to configuration information must be restricted solely to MCRT personnel.
5. Compatibility: Data logging solutions must integrate with existing MCRT logging systems.
6. Generality: The infrastructure should provide generalized computing resources for developing new capabilities.
7. Offensive Operations: It should facilitate MCRT-generated network traffic consistent with adversarial actions.

Period of Performance
The anticipated period of performance is for a 1-year base period, plus one 1-year option period.

Place of Performance
The services will be performed using Amazon Web Services (AWS) cloud infrastructure.