Department of Transportation, Transportation Administrative Service Center (TASC), Acquisition Services, SVC-180, 400 7th Street SW, Room 5106, Washington, DC 20590

D -- WEB-BASED SECURITY AWARENESS TRAINING DUE 030599 POC Mark Welch, 202-366-4971 The Transportation Administrative Service Center (TASC), an organization within the United States Department of Transportation (DOT), is seeking sources able to provide web-based security awareness training (commercial-off-the-shelf solutions are preferred) which is compliant with the requirements for such training described in the Computer Security Act of 1987 and DOT H 1350.277, Guide for the Department of Transportation Computer Security Training and Orientation Program. In accordance with DOT H 1350.277, end user training shall include awareness training in computer security basics, security planning and management, and systems life cycle management; and performance level training in computer security policies and procedures, and contingency planning. This training must be geared to the average end-user and cover computer security basics tailored for the Federal Government environment to include applicable OMB and NIST computer security policies. In addition, the training must be compatible with the policies that are established in DOT H 1350.2, Departmental Information Resources Management Manual (DIRMM), DOT H 1350.250, DOT Information Systems Security (ISS) Guide, and DOT H 1350.251, DOT Network Security Guide. The software must be designed to permit the addition of additional modules and updates to allow for its use in subsequent years for annual refresher training. The training must be able to be accessed with a variety of standard web-browser software both from the DOT intranet as well as via the Internet including access via common carriers and common ISPs. The software must be able to be hosted on TASC Computer Center's IBM 9672 computer under the Domino Go Webserver software which is supported by the OS/390 Unix Services facilities available in the OS/390 operating system software and should not require the installation of any code on a user's workstation. The software must have the capability to pre-register users for the training and prohibit access to the training by any non-registered users. The software must also have the capability to monitor the progress of each user and produce reports of training status for each individual user. This reporting should be available by customer organization. The software should also be able to provide each individual user with an indication of how well they did with the training. This can be communicated via a score, percentage, or other measure that will allow the user to know how well they understood and comprehended the information presented in the training course. The software should also present the user at the end of a course with a survey designed to capture the users comments regarding the training provided. Sources interested in this requirement should send all relevant commercial literature (e.g., description of the services and products offered, specifications, price lists, etc.) and any other necessary information that demonstrates the above requirements of the SOW can be met. Information should be submitted (two copies are requested) by March 5,1999 to Department of Transportation, TASC Acquisition Services, 400 7th Street, S.W. Room 5106, Washington, DC 20590, to the attention of Mark T. Welch. Sources must indicate whether they are a large business, small business, or 8(a) business under SIC code 7372. The Government does not intend to pay for information furnished in response hereto Posted 02/18/99 (W-SN299765). (0049)

Loren Data Corp. http://www.ld.com (SYN# 0030 19990222\D-0011.SOL)