SKILLS, KNOWLEDGE, EXPERIENCE REQUIRED:

• Required skillset of the proposed contractor is extensive knowledge and experience (more than 5 years) in the following areas:
• General, wide breadth knowledge of cyber security principles, best practices, concepts and technology;
• Solid knowledge of cyber security, including boundary protection, encryption, identity and access management, monitoring and detection, incidence response, vulnerability assessments, and risk management;
• Familiarity with system accreditation and deployment of CIS;
• Knowledge and experience in testing and validating that contracted deliveries; meet the security requirements and fulfil the intended use-cases;
• Familiarity with NATO security policy and supporting directives is desirable;
• Familiarity with PILAR (tool for security risk assessment) is desirable;
• Familiarity with NGCS and its subsystems is desirable;
• Familiarity with NWSVTC and NSVoS is desirable.
• Ability to work independently and in teams to achieve the desired goals;
• Ability to take ownership of tasks and strong motivation to accomplish them to the end.

• Gaining familiarity with the relevant NATO security directives as indicated by the NCSC PoC (two directives, approximately 170 pages in total);
• Gaining familiarity with previous versions of the descriptions of the NATO General Communication System (NGCS), NATO Wide Studio VideoTeleConferencing (NWSVTC), and NATO Secure Voice Services (NSVoS) (seven documents, approximately 250 pages in total);
• Gaining familiarity with provided examples of Security Requirement Statements and Security Test and Verification Plans, including reviewing the sample template (unpopulated) in Enclosure 2.