U.S. Environmental Protection Agency, Program Contract Service Center (3803R), 401 M Street, SW, Washington, DC 20460-0001

U -- PUBLIC KEY INFRASTRUCTURE (PKI) TRAINING SOL RFQ-dc-00-00082 DUE 042800 POC Yvonne Stiso/stiso.yvonne@epa.gov/Contract Specialist WEB: Click here to access a copy of the RFQ, Http://www.epa.gov/oamhpod1/oppts_grp/dc0000082/index.htm. E-MAIL: Click here to contact the Contracting Officer, lilley.valoree@epa.gov. The Environmental Protection Agency is seeking a contractor to provide Public Key Infrastructure (PKI) training. In accordance with FAR Part 13 Simplified Acquisition Procedures, this requirement is RESERVED EXCLUSIVELY FOR SMALL BUSINESS CONCERNS. The SIC code for this requirement is 8243. The EPA is FACNET certified. You may e-mail the Contract Specialist at: stiso.yvonne@epa.gov. Two copies of the proposal must be submitted by the due date. US MAIL ADDRESS is- US EPA, Attn: Yvonne D. Stiso, Contract Specialist, 1200 Pennsylvania Ave., NW, Mail Code 3803R, Washington, DC 20460. HANDCARRY (such as FedEx) should be submitted to: Ronald Reagan Building, Attn: Yvonne D. Stiso, Contract Specialist, 1300 Pennsylvania Ave., NW, Bid and Proposal Room- 6th Floor, Room 61107, Washington, DC 20004. Proposals are due no later than 12:00pm/EST, April 28, 2000. TITLE: PUBLIC KEY INFRASTRUCTURE (PKI) TRAINING, STATEMENT OF WORK: This Statement of Work outlines details of the training course to be delivered to the Office of Inspector General, Office of Audit, ADP Audit and Assistance staff (OIG, OA, AAAS). This training would provide the AAAS the necessary knowledge to assist with recognizing, assessing, analyzing and auditing the security measures needed or used in government information systems. Project Period: Length of Course (estimate three days) BACKGROUND:Security of the Environmental Protection Agency's Information Infrastructure is of great importance to the Agency. For the EPA to effectively carry out its mission, the information in the Infrastructure must be accurate, authentic, private, and available when needed. Today, most security-enabled technologies employ public key cryptography as an integral part of their security services. As the use of security-enabled technology expands, a Public Key Infrastructure is required to support its use. Public Key Infrastructures are becoming one of the cornerstones of information security in e-government, e-commerce, and e-business applications. PKIs are being deployed to provide security to electronic mail, web-based services, and a wide range of client-server applications. OBJECTIVES:1. The ADP Audit and Assistance staff will gain an understanding of the PKI architecture. 2. The course attendees should learn how to implement, manage, and audit the application. TASKS: 1. The contractor shall provide EPA/OIG/OA/AAAS PKI training at the location provided by EPA, (Washington, D.C.area) during the week of September 18-21, 2000, for up to 20 EPA employees. Training equipment will be provided by EPA. The contractor shall also provide EPA (in advance of the course) with one (1) copy of the course materials so that EPA can make additional copies to supply the course attendees. 2. The contractor will provide training to the ADP Audit and Assistance staff on the concepts and mechanisms involved in auditing a Public Key Infrastructure (PKI), and address implementation and management of the PKI. 3. The contractor shall provide a cryptography update covering the types of encryption available, data concealment, key lengths and key escrow, and define digital certificate. Explain the elements of a PKI, including certification authority, key histories, key backup and recovery, certificate revocation, automatic key update, certificate repository, non-repudiation, cross certification and client software. Explain the importance of each piece, and how each one integrates into a PKI solution. 4. Explain and/or demonstrate audit steps of a PKI. DELIVERABLES: 1. PKI Training (estimate three days) for an audience of 20 EPA government employees in the Washington, D.C. area during the week of September 18-21, 2000. 2. Related course materials (i.e., participant manual). EVALUATION CRITERIA: EPA will evaluate submissions based on cost and the following evaluation criteria: 1. Demonstrate knowledge of PKI experience and security expertise. Experience in providing an innovative and informative learning environment. 2. Provide the training at the requestor's location during the week of Sep. 18-21, 2000. 3. Ability to customize the training so that attendees gain knowledge in an audit of the PKI application. See numbered Note 1. Posted 04/12/00 (W-SN444312). (0103)

Loren Data Corp. http://www.ld.com (SYN# 0097 20000414\U-0001.SOL)