Attachment 22: Sample Task Cybersecurity Pkg Update

Sample Task #1

Medical Treatment Facility (MTF) Military Construction (MILCON) Cybersecurity Engineering and Cybersecurity Assessments.

This sample task is similar in format to a typical United States Army Information Systems Engineering Command (USAISEC) Task Order. This is a Cost Plus Fixed Fee (CPFF) Task Order. The Background Section includes information about the sample task and is intended to provide sufficient information to the Offerors. The Applicable Documents Section is representative of the documents that would be pertinent to conducting the Task Order work. The Requirements Section contains several products typical for most Task Orders.

In response to this sample task, include a detailed technical approach describing how you would solve the requirements. For this sample task, the period of performance (PoP) will be 12 months as that is representative of USAISEC Task Orders. The Offerors will use January 1, 2027, as a start date for this sample task.

The Offeror shall provide a narrative response describing the Technical Approach, as described in Section 3 of this sample task. The sample task response shall be accompanied by the documents detailed below.

Quality Control Plan and associated task checklist(s) tailored for this sample task; Work Breakdown Structure (WBS) for this sample task (which shall include the Basis of Estimate (BOE)); Project work schedule (using MS Project 2013) for this sample task; and Risk Mitigation Plan tailored for this sample task.

The WBS shall include a minimum of a three-level breakdown and a BOE. The BOE shall include the labor categories and hours required to complete the Sample Task as proposed and the rationale to support the labor estimates. The BOE shall NOT include any labor rates or cost information inclusive of material, travel or other direct costs (ODCs). NOTE: The Quality Control Plan and the Risk Mitigation Plan are included within the Sample Task 30 page limitation. The associated task checklist(s), the WBS and BOE file and the Project Work Schedule file are NOT included in the Sample Task page limitations. A notional work breakdown structure is included to illustrate a sample three-level breakdown.

BACKGROUND.

NOTE: The work to be performed for this sample task will only cover Cybersecurity Security Engineering (SE) for the replacement Medical Treatment Facility (MTF) network and Security Control Assessments (SCA) for 3 systems. The tasks are described in Section 4 of this document. All other MILCON phases such as furnish, install, and system test are being performed by the US Army Corps of Engineers (USACE) or other stakeholders. Section 1 is strictly initial background information collected by USAISEC from the MTF staff of the MILCON effort. The MILCON background information is subject to change as the MILCON is under a design/build approach. Additional information that the Offeror feels is needed for its proposal will need to be gathered via performance of the sample task.