Inactive
Total Small Business Set-Aside (FAR 19.5)
Notice ID:0011555715
SOURCES SOUGHT SYNOPSIS THIS IS A Sources Sought Notice ONLY. The U.S. Government desires to procure Advanced Hacking Methodologies Training on a small business set-aside basis, provided 2 or more qua...
SOURCES SOUGHT SYNOPSIS THIS IS A Sources Sought Notice ONLY. The U.S. Government desires to procure Advanced Hacking Methodologies Training on a small business set-aside basis, provided 2 or more qualified small businesses respond to this sources sought synopsis with information sufficient to support a set-aside. Your responses to the information requested will assist the Government in determining the appropriate acquisition method, including whether a set-aside is possible. We encourage all small business concerns, in all socioeconomic categories (including, 8(a) Business Development Program, Small Disadvantage Business, Historically Underutilized Business Zone, Service-Disabled Veteran-Owned, Women-Owned Small Business concerns), to identify their capabilities in meeting the requirement at a fair market price. This notice is issued solely for information and planning purposes – it does not constitute a Request for Quote (RFQ)/Invitation for Bid (IFB)/Request for Proposal (RFP) or a promise to issue an RFQ, IFB or RFP in the future. This notice does not commit the U.S. Government to contract for any supply or service. Further, the U.S. Government is not seeking quotes, bids or proposals at this time and will not accept unsolicited proposals in response to this sources sought notice. The U.S. Government will not pay for any information or administrative costs incurred in response to this notice. Submittals will not be returned to the responder. Not responding to this notice does not preclude participation in any future RFQ or IFB or RFP, if any is issued. If a solicitation is released, it will be synopsized on the Government wide Point of Entry. It is the responsibility of potential offerors to monitor the Government wide Point of Entry for additional information pertaining to this requirement. The anticipated NAICS code(s) is/are: 611420 – Computer Training with a Small Business Size Standard of $12.0M. BACKGROUND: The contractor shall provide: Advanced Hacking Methodologies Training Learning Outcome: Given a native OS and a training range, the student will employ hacking methodologies to successfully breach highly restricted / well defended networks. 1) Understand various operating systems (OS) and services 2) Understand vulnerabilities and common vulnerabilities exposures (CVE) 3) Understand advanced OS commands and advanced programming 4) Use multiple information gathering techniques to identify and enumerate targets running various operating systems and services. 5) Identify and exploit cross-site scripting (XSS), Structured Query Language (SQL) injection, and file inclusion vulnerabilities in web applications 6) Submit a comprehensive penetration test report 7) Write complex scripts in PowerShell, Python, and Bash 8) Analyze, correct, modify, cross-compile, and port public exploit code 9) Maintain in-depth notes and screenshots 10) Execute organized attacks in a controlled and focused manner 11) Modify existing exploit code 12) Perform network pivoting and data ex-filtration In response to this sources sought, please provide: 1. Name of the firm, point of contact, phone number, email address, DUNS number, CAGE code, a statement regarding small business status (including small business type(s)/certifications(s) such as SDB, 8(a), HUBZone, SDVOSB, WOSB, etc.), and the corresponding NAICS code. If the company has a GSA Schedule provide the schedule number. 2. Identify whether your firm is interested in competing for this requirement as a prime contractor or not. Identify subcontracting, joint ventures or teaming arrangement that will be pursued, if any. 3. Identify what percentage of work will be performed by the small business prime contractor and all similarly situated entity subcontractors. Note: In accordance with FAR 52.219-14 Limitations on Subcontracting (DEVIATION 2020-O0008) “Similarly situated entity” means a first-tier subcontractor, including an independent contractor, that has the same small business program status as that which qualified the prime contractor for the award and that is considered small for the NAICS code the prime contractor assigned to the subcontract the subcontractor will perform. An example of a similarly situated entity is a first-tier subcontractor that is a HUBZone small business concern for a HUBZone set-aside. 4. Identify type(s)/certifications(s) such as SDB, 8(a), HUBZone, SDVOSB, WOSB, etc.) of the proposed subcontractors. 5. Information in sufficient detail regarding previous experience (indicate whether as a prime contractor or subcontractor) on similar requirements (include size, scope, complexity, timeframe, government or commercial), pertinent certifications, etc., that will facilitate making a capability determination. 6. Identify how the Army can best structure these contract requirements to facilitate competition by and among small business concerns. 7. Recommendations to improve the approach/specifications/draft PWS/PRS to acquiring the identified items/services. 8. Identify any condition or action that may be having the effect of unnecessarily restricting competition with respect to this acquisition. Please contact the MICC Advocate for Competition, Archina Twitty, at archina.t.twitty.civ@mail.mil or 706-791-1896, if you believe that this action is unreasonably restricting competition. Include the subject of the acquisition, this announcement, and the MICC POC information from the FedBizOpps notice. Provide the specific aspects that unreasonably restrict competition and the rationale for such conclusion.
