2024-0224 Network and Cyber Security for Learning Environment (NS) - TUE 29 Oct

Deadline Date: Tuesday 29 October 2024

Requirement: Network and Cyber Security for Academy Learning Environment

Location: Oeiras, PT

Full Time On-Site: Yes

Time On-Site: 100%

Period of Performance: 2024 BASE: As soon as possible not later than 02 December 2024 (tentative) with possibility to exercise the following options:

2025 Option: 1st January 2025 until 31st December 2025

2026 Option: 1st January 2026 until 31st December 2026

Required Security Clearance: NATO SECRET

INTRODUCTION

The NATO Communications and Information Academy (NCI Academy) located in Portugal, Belgium and The Netherlands reinforces NATO’s technological edge through excellence in Cyberspace learning.

The NCI Academy has the Academy Learning Environment, which is the toolset associated with all back-end learning and development activities, the transfer of knowledge from trainers to students and the support of the student learning process. To secure the Academy Learning Environment, there is a team responsible for all activities related to the operation and maintenance of this infrastructure. In addition to setting up courses, maintaining them and deploying them as they iterate, the team is also responsible for running projects to ensure that the Academy Learning Environment is state of the art.

SCOPE OF WORK

The NCI Academy is looking to outsource the networking and cyber security of the ALE CIS. The service contractor will work closely with the Technical Capability Support Section, the NCI Academy Account Holders, the CIS Support Unit Lisbon, and the Asset Programme Management Office.

The services shall be primarily provided onsite at the NCI Academy in Oeiras.

The contractor shall find solutions for improvement of the network.

The contractor shall report to the NCI Academy Technical Capability Support Section Head or designated representative lead on the progress of the Networking and Cyber Security.

The contractor shall provide advice to the Technical Capability Support Section Head for the continuous improvement of the Networking and Cyber Security of the ALE capability and procedures.

The contractor will be part of a team and will provide the service using an Agile and iterative approach during multiple sprints.

Each sprint is planned for a duration of 1 week.

The contractor shall develop and execute a monthly plan together with Technical Capability Support Section to implement the capability in an agile manner with each month delivering a minimum viable product. The work shall include the items listed below:

• Supports projects or change initiatives through the preparation of technical plans and application of design principles to network design. Aligns network design solutions with enterprise and solution architecture standards (including security);
• Undertakes or supervises complex installations and de-installations of networks or its components, including handover to operations;
• Uses network management software and tools to investigate and diagnose network problems, collect performance statistics and create reports;
• Maintains the network support process and checks that all requests for support are dealt with according to agreed procedures;
• Configures tools and/or creates scripts to automate the provisioning, testing and deployment of new and changed infrastructure. Maintains operational procedures and checks that they are executed following agreed standards;
• Ensures network configurations are applied to meet operational requirements in line with agreed procedures, applying the configuration baselines determined by the Service Lines, when available;
• Creates, edits and manages network access control lists and other security controls on network devices (such as firewalls, routers, switches and intrusion prevention systems), applying the  configuration baselines determined by the NATO Cyber Security Centre, when available;
• Assist in the tasks of cybersecurity protection and defence; and provide general support for cybersecurity;
• Develops procedures and standards for installation and handover to maintain and improve the installation service;
• Monitors the external environment to gather intelligence on emerging technologies. Assesses and documents the impacts, threats and opportunities to the organization;
• Performs other duties as may be required.

The content and scope of each sprint will be agreed during the sprint-planning meeting, in writing, based on the activities mentioned above.

DELIVERABLES AND PAYMENT MILESTONES

The NCI Academy team reserves the possibility to exercise the described options, depending on the project priorities and requirements.

The payment shall be dependent upon successful acceptance of the Delivery Acceptance Sheet (DAS) – (Annex A) including the EBA Receipt number.

Invoices shall be accompanied with a Delivery Acceptance Sheet (Annex A) signed by the Contractor and line manager.

2024 BASE: 1 November 2024 to 31 December 2024

Deliverable:  3 sprints of support. Number of sprints is estimated considering a starting date as 02 December 2024. This will be adjusted depending on the actual start date.

Payment Milestones: Upon completion of each fourth sprint and at the end of the work.

2025 OPTION: 01 January 2025 to 31 December 2025

Deliverable: Up to 48 sprints of Networking and Cyber Security support.

Payment Milestones: Upon completion of each fourth sprint and at the end of the work.

2026 OPTION: 01 January 2026 to 31 December 2026

Deliverable: Up to 48 sprints of Networking and Cyber Security support.

Payment Milestones: Upon completion of each fourth sprint and at the end of the work.

COORDINATION AND REPORTING

The contractor shall participate in status update meetings, sprint planning, and other meetings, physically in the office, or in person via electronic means using Conference Call capabilities, according to line manager’s instructions.

For each sprint to be considered as complete and payable, the contractor must report the outcome of his/her work during the sprint, first verbally during the retrospective meeting and then in written within three (3) days after the sprint’s end date. The format of this report will be aligned the line manager mentioning briefly the work held and the development achievements during the sprint.

Acceptance of each sprint completion will be documented in Annex A – Delivery Acceptance Sheet.

SCHEDULE

This task order will be active immediately after signing of the contract by both parties.

The BASE period of performance is as soon as possible but not later than 02 December 2024 and will end no later than 31st December 2024

If the 2025 option is exercised, the period of performance is 01st January 2025 to 31st December 2025.

If the 2026 option is exercised, the period of performance is 01st January 2026 to 31st December 2026.

CONSTRAINTS

All the deliverables provided under this statement of work will be based on NCI Agency templates or agreed with the line manager.

All documentation will be stored under configuration management and/or in the provided NCI Agency tools.

All the deliverables of this project will be considered NATO UNCLASSIFIED.

Part of the work may involve handling classified networks, therefore, a security clearance at the right level is expected for the contractor(s) undertaking this service. This security must be in place before applying for this contract to be considered compliant.

SECURITY

The security classification of the service will be up to NATO SECRET.

The contractor providing the services under this SOW is required to hold a valid NATO SECRET security clearance

PRACTICAL ARRANGEMENTS

The contractor will be required to provide the service on-site in NCI Academy Oeiras (PRT)

Travel costs are out of scope and will be borne by the NCI Agency separately in accordance to the provisions of the AAS+ Framework Contract. He or she will provide services under the direction and guidance of the NCI Academy Technical Capability Support Section Head or their designated representative.

This service must be accomplished by ONE contractor.

QUALIFICATIONS

[See Requirements]

Requirements

SECURITY

• The contractor providing the services under this SOW is required to hold a valid NATO SECRET security clearance

QUALIFICATIONS

• Delivery of the services under this SOW requires the following qualifications and experience:
• Higher vocational training in a relevant discipline with 4 years post-related experience, or a secondary educational qualification with 6 years post-related experience;
• ITIL foundation certification;
• CISCO CCNA (Routing and Switching) certification;
• Hands on experience in managing computer networks (switching, routing, firewalls and VPN concentrators);
• Development of network documentation;
• Development of network architectures;
• Experience in troubleshooting network installations.
• Must have recent experience undertaking cyber related activities on a NATO accredited system.
• Must have recent experience working for the NCI Agency with good knowledge of ACO and ACT.

Desirable qualifications and experience

• Experience in administering a network within the NATO enterprise.
• Good technical knowledge of NATO CIS Security governance and policy for local area network and enterprise networks.
• Cybersecurity training and/or certifications, such as COMPTIA Security+.
• Prior experience of working in an international environment comprising both military and civilian elements.

Language Proficiency

• Level 3 English language skills according to NATO STANAG 6001: Listening (3); Speaking (2); Reading (3); and Writing (2) or according to Common European Framework of Reference for Language level B2-C1/Upper Intermediate-Advanced level)