U.S. Environmental Protection Agency, Program Contract Service Center (3803R), 401 M Street, SW, Washington, DC 20460-0001

U -- COMPUTER SECURITY AWARENESS TRAINING SOL PR-98-02350 DUE 062598 POC Valoree S. Lilley, lilley.valoree@epamail.epa.gov E-MAIL: click on the above to contact the contract specialist, lilley.valoree@epamail.epa. The Environmental Protection Agency under the Simplified Acquisition Procedures of FAR part 13, intends to issue a sole source purchase order to Computer Security Institute, San Francisco, CA. The EPA is FACNET certified. The Computer Security Act of 1987 requires that each Federal agency provide for mandatory periodic training in computer security awareness and accepted computer security practices for all employees who are involved with the management, use, or operation of each Federal computer system within or under the supervision of that agency. OMB Circular A-130 further mandates that this requirement includes contractor personnel. The contractor will present uniform training to the widest possible EPA audience, the contractor shall conduct information security awareness training at each EPA Regional office, the National Enforcement Investigations Center, Denver, Colorado, RTP, North Carolina, Cincinnati, Ohio, Las Vegas, Nevada, and EPA Headquarters, Washington, DC. Audiences for this training will include EPA employees, SEE Program employees (Senior Environmental Employees) and EPA contractor personnel. Two types of training will be conducted at each location. First, a 45 minute training session shall be conducted for executives and senior managers. Second, three two-hour training sessions shall be conducted for the remaining EPA personnel, EPA contractors, and SEE Program employees (see attached agenda items). Due to the number of personnel located at EPA Headquarters, the contractor shall conduct the two types of training twice at EPA Headquarters, Washington, DC. Training is to be completed by December 31, 1998. The two types of training shall address the curriculum framework for Security Basics and Literacy found in the NIST Special Publication #800-16, Information Technology Security Training Requirements. The Project Officer (PO) or Alternate PO will accompany the contractor to each of the scheduled locations. The PO will arrange each of the briefings with the appropriate EPA personnel at the host locations. EPA will provide the necessary equipment and materials (e.g., audio/visual, flip charts, etc.) to support the presentations. The contractor shall provide overhead transparencies, video tapes, and presentation graphics files if necessary. The contractor shall provide the PO with two types of awareness training agenda handouts -- one for executives and senior managers and one for the remainder of EPA employees and contractors (general audience). The PO will ensure that a sufficient number of agenda handouts are prepared for each of the locations visited. Deliverables: Draft Presentation Agenda Handouts for Managers and General Audiences Due -July 1, 1998. Final Presentation Agenda Handouts for Managers and General Audiences Due -July 15, 1998 Presentations at EPA Locations Cited. NO SOLICITATION IS AVAILABLE. All questions should be directed VIA E-MAIL to the contract specialist. PHONE CALLS WILL NOT BE ACCEPTED. SEE Note 22 (0148)

Loren Data Corp. http://www.ld.com (SYN# 0121 19980601\U-0004.SOL)