Expected tasks within the scope of this SIN include but are not limited to: Conducting and/or supporting authorized penetration testing on enterprise • network assets Analyzing site/enterprise Computer Network Defense policies and • configurations and evaluate compliance with regulations and enterprise directives Assisting with the selection of cost-effective security controls to mitigate • risk (e.g., protection of information, systems, and processes) (B) 132-45B Incident Response Expected tasks within the scope of this SIN include but are not limited to: Collect intrusion artifacts (e.g., source code, malware, and trojans) and use • discovered data to enable mitigation of potential Computer Network Defense incidents within the enterprise Perform command and control functions in response to incidents • Correlate incident data to identify specific vulnerabilities and make • recommendations that enable expeditious remediation (C) 132-45C Cyber Hunt Expected tasks within the scope of this SIN include but are not limited to: Collecting intrusion artifacts (e.g., source code, malware, and trojans) and • use discovered data to enable mitigation of potential Computer Network Defense incidents within the enterprise Coordinating with and provide expert technical support to enterprise-wide • Computer Network Defense technicians to resolve Computer Network Defense incidents
Expected tasks within the scope of this SIN include but are not limited to: • Conducting and/or supporting authorized penetration testing on enterprise network assets • Analyzing site/enterprise Computer Network Defense policies and configurations and evaluate compliance with regulations and enterprise directives • Assisting with the selection of cost-effective security controls to mitigate risk (e.g., protection of information, systems, and processes) (B) 132-45B Incident Response Expected tasks within the scope of this SIN include but are not limited to: • Collect intrusion artifacts (e.g., source code, malware, and trojans) and use discovered data to enable mitigation of potential Computer Network Defense incidents within the enterprise • Perform command and control functions in response to incidents • Correlate incident data to identify specific vulnerabilities and make recommendations that enable expeditious remediation (C) 132-45C Cyber Hunt Expected tasks within the scope of this SIN include but are not limited to: • Collecting intrusion artifacts (e.g., source code, malware, and trojans) and use discovered data to enable mitigation of potential Computer Network Defense incidents within the enterprise • Coordinating with and provide expert technical support to enterprise-wide Computer Network Defense technicians to resolve Computer Network Defense incidents
CDM_TOOLS_SIN_Draft_Significant_Solicitation_Changes_0.docx