2.1.5 Sub-task 5 DNSSEC Testing and Deployment Roll-out Plan 18 – 2.2 Task 2 Set Up Test Lab 19 – 2.2.1 Sub-task 1 Test Lab Installation 19 – 2.2.2 Sub-task 2 Test Lab Connectivity to NIST/DHS/Sparta SNIP System 20 – 2.3 Task 3 Convert, Test, and Archive DNSSEC Servers 21 – 2.3.1 Sub-task 1 Implementation Checklists for DNS Security 21 – 2.3.2 Sub-task 2 Test Plans for DNS Threats 23 – 2.3.3 Sub-task 3 DNSSEC Key Generation and Management Procedures 24 – 2.3.4 Sub-task 4 Conversion of Production Zone DNS Servers 25 – 2.3.5 Sub-task 5 Test and Archive DNSSEC Servers in the Test Lab 26 – 2.3.6 Sub-task 6 Convert, Test, and Archive DNSSEC Servers for Each Site 27 – 2.4 Task 4 DNSSEC Deployment/Cutover of Agency Production Zones 27 – 2.5 Task 5 Procedures for Administration of DNSSEC 28 –Operational 2.6 Task 6 Authentication of Agency Email System with DKIM and SPF 28 – 2.6.1 Sub-task 1 Authentication Planning and System Analysis 29 – 2.6.2 Sub-task 2 Deployment/Cutover of Authentication System 30 – 2.6.3 Sub-task 3 of Email Authentication System 31 –Administration 3 Labor Types 33 3.1 Personnel Requirements 33 3.2 Proposed Personnel 34 3.3 Special Qualifications and Certifications 35 4 Task 2 Set UP Test Lab 36 – 5 Travel and Direct Costs (ODC / Un-priced Items) 39 5.1 Travel 39 5.2 Other Direct Cost (ODC / Un-priced Items) 39
2.1.5 Sub-task 5 – DNSSEC Testing and Deployment Roll-out Plan 18 2.2 Task 2 – Set Up Test Lab 19 2.2.1 Sub-task 1 – Test Lab Installation 19 2.2.2 Sub-task 2 – Test Lab Connectivity to NIST/DHS/Sparta SNIP System 20 2.3 Task 3 – Convert, Test, and Archive DNSSEC Servers 21 2.3.1 Sub-task 1 – Implementation Checklists for DNS Security 21 2.3.2 Sub-task 2 – Test Plans for DNS Threats 23 2.3.3 Sub-task 3 – DNSSEC Key Generation and Management Procedures 24 2.3.4 Sub-task 4 – Conversion of Production Zone DNS Servers 25 2.3.5 Sub-task 5 – Test and Archive DNSSEC Servers in the Test Lab 26 2.3.6 Sub-task 6 – Convert, Test, and Archive DNSSEC Servers for Each Site 27 2.4 Task 4 – DNSSEC Deployment/Cutover of Agency Production Zones 27 2.5 Task 5 –Operational Procedures for Administration of DNSSEC 28 2.6 Task 6 – Authentication of Agency Email System with DKIM and SPF 28 2.6.1 Sub-task 1 – Authentication Planning and System Analysis 29 2.6.2 Sub-task 2 – Deployment/Cutover of Authentication System 30 2.6.3 Sub-task 3 –Administration of Email Authentication System 31 3 Labor Types 33 3.1 Personnel Requirements 33 3.2 Proposed Personnel 34 3.3 Special Qualifications and Certifications 35 4 Task 2 – Set UP Test Lab 36 5 Travel and Direct Costs (ODC / Un-priced Items) 39 5.1 Travel 39 5.2 Other Direct Cost (ODC / Un-priced Items) 39
DNS_Security_Deployment_Connections_II_SOW_Template.docx