U.S. Environmental Protection Agency, Program Contract Service Center (3803R), 401 M Street, SW, Washington, DC 20460-0001

U -- PUBLIC KEY INFRASTRUCTURE (PKI) TRAINING SOL RFQ-DC-00-00131 DUE 071300 POC Yvonne D. Stiso/Contract Specialist/stiso.yvonne@epa.gov WEB: Click here to access a copy of the RFQ, Http://www.epa.gov/oamhpod1/oppts_grp/dc0000131/index.htm. E-MAIL: Click here to contact the Contract Specialist, stiso.yvonne@epa.gov. The U.S. Environmental Protection Agency is seeking a contractor to provide Public Key Infrastructure (PKI) training. This requirement will be filled in accordance with FAR Part 13 Simplified Acquisition Procedures under Full and Open Competition. The SIC code for this requirement is 8243. The EPA is FACNET certified. You may e-mail the Contract Specialist at : stiso.yvonne@epa.gov. NO PHONE CALLS WILL BE ACCEPTED. TWO (2) copies of the proposal must be submitted by the due date. US Mail Address is -- US EPA, Attn: Yvonne D. Stiso, Contract Specialist, 1200 Pennsylvania Ave., NW, Mail Code 3803R, Washington, DC 20460. HANDCARRY (such as FedEx) should be submitted to: US EPA- Ronald Reagan Building, Attn: Yvonne D. Stiso, Contract Specialist, 1300 Pennsylvania Ave., NW, Mail Code 3803R, Bid and Proposal Room, 6th Floor, Room 61107, Washington, DC 20004. Proposals are due no later than 3:00 PM/EST on the due date. TITLE: PUBLIC KEY INFRASTRUCTURE (PKI) TRAINING, STATEMENT OF WORK: This Statement of Work outlines details of the training course to be delivered to the Office of Inspector General, Office of Audit, ADP Audit and Assistance staff (OIG, OA, AAAS). This training would provide the AAAS the necessary knowledge to assist with recognizing, assessing, analyzing and auditing the security measures needed or used in government information systems. Project Period: Length of Course (estimate three days) Background: Security of the Environmental Protection Agency's Information Infrastructure is of great importance to the Agency. For the EPA to effectively carry out its mission, the information in the Infrastructure must be accurate, authentic, private, and available when needed. Today, most security-enabled technologies employ public key cryptography as an integral part of their security services. As the use of security-enabled technology expands, a Public Key Infrastructure is required to support its use. Public Key Infrastructures are becoming one of the cornerstones of information security in e-government, e-commerce, and e-business applications. PKIs are being deployed to provide security to electronic mail, web-based services, and a wide range of client-server applications. Objectives 1. The ADP Audit and Assistance staff will gain an understanding of the PKI architecture. 2. The course attendees should learn how to implement, manage, and audit the application. TASKS: 1.The contractor shall provide EPA/OIG/OA/AAAS PKI training at the location provided by EPA, (Washington, D.C. area). Training equipment will be provided by EPA. The contractor shall also provide EPA (in advance of the course) course materials so that EPA can make additional copies to supply the course attendees. 2. The contractor will provide training to the ADP Audit and Assistance staff on the concepts and mechanisms involved in auditing a Public Key Infrastructure (PKI), and address implementation and management of the PKI. 3. The contractor shall provide a cryptography update covering the types of encryption available, data concealment, key lengths and key escrow, and define digital certificate. Explain the elements of a PKI, including certification authority, key histories, key backup and recovery, certificate revocation, automatic key update, certificate repository, non-repudiation, cross certification and client software. Explain the importance of each piece, and how each one integrates into a PKI solution. 4. Explain and/or demonstrate audit steps of a PKI. Deliverables 1. PKI Training (estimate three days) for an audience of 20 EPA government employees in the Washington, D.C. area. 2. Related course materials (i.e., participant manual). Evaluation Criteria EPA will evaluate submissions based on the following evaluation criteria: 1. Demonstrate knowledge of PKI experience and security expertise. Experience in providing an innovative and informative learning environment. 2.Provide the training at the requestor's location during the week of Sep. 18-21, 2000. 3. Ability to customize the training so that attendees gain knowledge in an audit of the PKI application. Posted 06/26/00 (W-SN468611). (0178)

Loren Data Corp. http://www.ld.com (SYN# 0094 20000628\U-0003.SOL)