2023-0034 Support to DCIS Cyber Defence Project - FPC (NS) - FRI 12 May

End Contract Date: 30 November 2023

Required Security Clearance: NATO SECRET

Annex A – Bidding instructions

Your technical quotation shall be submitted as follows:

a. A compliancy matrix clearly stating how your bid meets the requirements outlined in article 2 of the SOW.

b. Resumes/CVs and attestation of the contractor’s proposed personnel for the execution of the contract.

c. Any other appropriate technical information to determine whether your bid meets the requirements outlined in article 2 of the SOW.

Annex B – Statement of Work

1. INTRODUCTION

The NCI Agency (NCIA) has been established with a view to meeting the collective requirements of some or all NATO nations in the fields of capability delivery and service provision related to Consultation, Command & Control as well as Communications, Information and Cyber Defence functions, thereby also facilitating the integration of Intelligence, Surveillance, Reconnaissance, Target Acquisition functions and their associated information exchange.

In order to execute this work, the NCI Agency is seeking additional support through contracted resources for the work undertaken by the NATO Integrated Mobile Service Center (NIMS) in the area of Cyber Security in the area of Deployable CIS (DCIS). This Statement of Work (SOW) specifies the required skillset and experience.

2. TASKS

This is a completion contract for an estimated cost of 30K EUR. The contracted company must be able to deliver effectively and efficiently with minimal supervision. NCIA is looking to contract a feasibility study for Full Packet Capture technology (FPC) in Deployable CIS (DCIS).

In particular the incumbent is supposed to produce the above mentioned study based on FPC technology used in NATO (more details below) and its value produced for analysis of cyber incidents, mapping the constraints that Deployable CIS faces, and also produce a view on alternative solutions that can (partly or fully) be used as replacement for current FPC technology in DCIS.

Among others, the following tasks are expected:

• Review technical documentation of current FPC installation in NATO (and how it is used) and provide a summary of the technology;
• Determine the (unique) added value that current FPC provides to Cyber Security;
• Analyse the constraints for Deployable CIS and how they influence the current FPC technology (or vice versa, how the current FPC technology would perform in DCIS).
• Provide an analysis / assessment of the feasibility to include current FPC technology in / for DCIS.
• Provide an analysis of alternative technical solution that could deliver the same (or similar) value added like FPC, and what the caveats are.
• Summarise the study and provide proposal for next steps.

3. SKILLSETS

[See Requirements]

4. WORK EXECUTION AND PAYMENT

The work will be executed off-site at the contractor’s own office.

Progress review meetings shall be held regularly, at least once per week, with the NCI Agency task lead.

Project Step: 1st Draft

Completion Date: End of 06/2023

Payment Schedule: Upon completion and acceptance of project step

Amount: 20%

Project Step: 2nd Draft

Completion Date: End of 07/2023

Payment Schedule: Upon completion and acceptance of project step

Amount: 20%

Project Step: Final Draft

Completion Date: End of 08/2023

Payment Schedule: Upon completion and acceptance of project step

Amount: 20%

Project Step: 1st Release Candidate

Completion Date: End of 09/2023

Payment Schedule: Upon completion and acceptance of project step

Amount: 20%

Project Step: 2nd Release Candidate

Completion Date: End of 10/2023

Payment Schedule: Upon completion and acceptance of project step

Amount: 10%

Project Step: Final Product with End of Contract

Completion Date: End of 11/2023

Payment Schedule: Upon completion and acceptance of project step

Amount: 10%

Invoices shall be accompanied with a Deliverable Acceptance Sheet (Annex D) signed by the project authority.

5. TRAVEL

There may be a requirement for short-term travel to attend/support meetings/workshops in NCIA Braine l’ Alleud, Belgium or NCIA The Hague, Netherlands. A travel line will be added to the PO to cover travel costs if and when is required. Travel expenses will be claimed following NCIA Travel Directive.

6. SECURITY AND NON-DISCLOSURE AGREEMENT

The contracted individuals must be in possession of a security clearance of NATO Secret or above. The signature of a Non-Disclosure Agreement between the contractors contributing to this task and NCIA will be required prior to execution.

Requirements

. SKILLSETS

The required skillset of the personnel for the production of the study are the following:

• A currently active NATO SECRET security clearance
• Technical skills, especially:
  • Knowledge of FPC technology, especially RSA Netwitness;
  • Knowledge of Deployable CIS and supporting technologies / systems (DPoP, MAF, Satcom, etc.) and their constraints;
• Familiarity with NATO organisational and political structures and relationships with NATO and Partner nations;
• Ability to independently produce and edit technical documentation and scientific reports in English;
• Excellent communications skills;
• Proven record of accomplishment in similar feasibility studies in NCIA and/or NATO advantageous.