NAVAIR and NAWC Platform Security and Support Services   5

The requirement is to provide various types of support including: acquisition security (ACQSEC) support; security modeling; program security management - physical security, personnel security, information security, industrial security, communications security (COMSEC), operations security (OPSEC), security classifications guides, program protection plan (PPP), and incident response; trusted systems and network (TSN) criticality analysis, anti-counterfeiting, supply chain risk management and software assurance; cybersecurity - cyber risk assessment (CRA) and risk management framework (RMF) processes, system survivability key performance parameter (KPP) requirements development, CYBERSAFE, and cyber testing; anti-tamper (AT) critical program information (CPI) assessment; AT system analysis and requirements development including attack and countermeasure tree; international programs security support (foreign disclosure and foreign visits) - technology transfer policy, foreign disclosure, export control, foreign visits, foreign partner security assessments, and end use monitoring; physical security/force protection/anti-terrorism/emergency management; system security engineering (SSE) - translating policy requirements in the above areas into system requirements, specs, design, development, test, sustainment and export of secure platforms and systems; configuration control; and requirements validation.