PERFORMANCE WORK STATEMENT
The CI CDM Project complements the overall Department of Treasury and IRS security tool strategy, and provides continuous monitoring, diagnostics, and mitigation capabilities which are designed to strengthen Federal government networks and systems.
The scope of this Performance Work Statement (PWS) describes the professional services the Contractor shall provide to the IRS in support of the CI CDM Program implementation efforts to fortify the agency's existing IT security posture and to create a dashboard view of tool data for analysis and responsive action by operational teams. Additionally, the contractor shall provide direct Operational and Maintenance support of existing CDM tools within IRS CI’s accreditation boundary. The Contractor shall provide expertise and services to support CDM in every phase.
The CI CDM Program being executed has the following goals for the awarded contractor with respect to the work that needs to be conducted in support of the CI and the IRS:
- The Contractor shall provide expertise and services in analysis and assist in the revision of baselines and/or the reengineering of organizational processes and strategies.
- The Contractor shall provide expertise and services to lead the execution of CDM processes related to integration of new tools into the CI environment, maintenance of current tools, tool migration and documentation updates for both legacy and new tools.
- The Contractor shall provide expertise and services in support of all CI CDM related activities and back fill and augment government staff wherein resources are stretched to maintain CI procedures and activities while CDM is being implemented.
- The Contractor shall provide expertise and services related to the configuration of tools, management and storage of data, transfer of data between CI systems for the CDM Dashboard, and assistance in analytical reporting and in the analysis of outputs.
- The contractor shall provide security expertise and services in leveraging CI CDM to help establish security Tactics, Techniques and Procedures (TTP) associates with supporting security operations.
- The Contractor shall develop strategies, propose recommendations and execute remediation activities for weaknesses and gaps in addition to assisting in the closure of risk identification and audit findings by agencies including but not limited to, CI Continuous Monitoring tools, TIGTA, GAO and internal controls assessment findings.
- The Contractor shall provide expertise and services in execution of transition management activities and knowledge transfer.
- The Contractor shall provide security documentation to support CI’s CDM and security program for implementation and transition into operational state.
- Collaborate with CI for data and Task Order changes needed at the orientation meeting and continually through the life of the Task Order.
Full PWS is available as Attachment