NRC 's Quarterly Business Seminar Introducing “BIZ Corner”

1. NRC 's Quarterly Business SeminarIntroducing “BIZ Corner” Hosted by: The Small Business Program

2. Seminar Agenda • Introduction • Agency Mission, Goals and Objectives • Small Business Program • Tools, Services and Opportunities • Contracts Program Overview • Program Office Presentation – Computer Security Office • Legal Perspective • Tips • “BIZ Corner”

3. To license and regulate the nation’s civilian use of byproduct, source and special nuclear materials to ensure adequate protection of public health and safety, promote the common defense and security, and protect the environment. Our Mission 3

4. Who We Are The Energy Reorganization Act of 1974 established the independent U.S. NRC to regulate commercial uses of nuclear material Other duties of the former Atomic Energy Commission were assigned to Department of Energy 4

5. Safety: Ensure the protection of public health and safety and the environment Security: Ensure the secure use andmanagement of radioactive material NRC Mission Goals 5

6. Nuclear reactors - commercial power reactors, research and test reactors, new reactor designs Nuclear materials - nuclear reactor fuel, radioactive materials for medical, industrial and academic use Nuclear waste - transportation, storage and disposal of nuclear material and waste, decommissioning of nuclear facilities Nuclear security – physical security of nuclear facilities and materials from sabotage or attacks NRC Regulates 6

7. Establish rules and regulations Issue licenses Provide oversight through inspection, enforcement and evaluation of operational experience Conduct research to provide support for regulatory decisions Respond to emergencies NRC Primary Functions 7

8. Major Program Offices Office of Nuclear Reactor Regulation Office of New Reactors Office of Nuclear Material Safety and Safeguards Office of Nuclear Regulatory Research Office of Nuclear Security & Incident Response Office of Federal and State Materials and Environmental Management Programs 8

9. Major Program Offices Office of Investigations Office of International Programs Computer Security Office Office of the Chief Financial Officer Office of Information Services Office of Human Resources 9

10. NRC Profile NRC Budget $1.07 billion for FY 2010 $1.05 billion for FY 2011 $1.05 billion for FY 2012 NRC Headquarters, Rockville, MD Over 4,000 employees; almost 3,000 at HQ Region I - King of Prussia, Pennsylvania Region II - Atlanta, Georgia Region III - Lisle, Illinois Region IV - Arlington, Texas 10

11. What NRC Buys Information technology, products, services and solutions Administrative support Engineering support Technical research & assistance Construction Auditing & financial management Training 11

12. What Other Agencies Buy on Behalf of the NRC Research and development in the physical, engineering, and life sciences Leasing EEO investigative support services IT support services Administrative support services Research and laboratory support services 12

13. What Other Agencies Buy on Behalf of the NRC • Payroll and contractor payment support services • Acquisition and contract management support services NOTE: In accordance with FAR 4.606(b), interagency agreements may be reported to the Federal Procurement Data System-Next Generation (FPDS-NG); however, agencies who procure on behalf of the NRC may recognize the funding agency in such reporting. In FY 2010, approximately $65 million dollars of NRC funded acquisitions were awarded by other agencies through interagency agreements.

14. Acquisition/Small Business • FY 2008: U.S. Small Business Administration (SBA) “Green” or excellent ratings of NRC Small Business Procurement Scorecard Plans and performance – more than $169M • FY 2009: SBA “B” rating - more than $225M funded • FY 2010: more than $257M funded

15. Small Business Goals & Accomplishments

16. Laws, Executive Orders and Implementing Regulations • Small Business Act, as amended • Small Business Jobs Act of 2010 • Executive Orders • FAR Part 19 • NRC Supplemental Acquisition Regulations • Management Directives

17. SmallBusinesses Are Important! Presidential Proclamation, 5/20/2010, declared small business serve as the engine of this great country’s prosperity and are a proud reflection of our character Critical to the economic well-being of our communities and to the security of the Nation

18. Small Businesses Are Important! • Creates virtually all of the net new jobs added to • the economy • Provides 67 % of workers with their first jobs • Employs 53% of the private work force • Accounts for 51% of private sector output • Accounts for 47% of all sales in the country

19. Small Businesses Are Important! Produces 40% of the gross national products Represents 96% of all U.S. exporters Invents more than half the Nation’s technological innovation, while accounting for 28% of jobs in high technology sectors Are critical to the Nation’s supplier base, flexible and competitive Dedicate senior management to contract support and performance

20. Small Business Program Our Role Our Customers Portfolio of Programs Tools & Services 20

21. Small Business Program: Our Role • Conducts acquisition and data oversight; recommends acquisition and small business prime and subcontract goals and strategies, recommends set-asides and sources; counsels and trains agency contract and program officials; and supports agency market research efforts • Engages in outreach and communications in support of congressional, Federal, State and local governments and private business organizations • Delivers training, counseling and technical assistance to the business community

22. Small Business Program: Our Customers • “Other than Small Businesses” or Large Businesses, Non-Profits, and Universities • Trade Associations, Chambers of Commerce, and other private organizations • Congress • Federal agencies, State, local, and county governments

23. Portfolio of Small Business Programs • 8(a) Sole Source & Competitive • Service-Disabled Veteran-Owned Sole Source & Set-Aside • HUBZone Sole source & Set-Aside • Veteran Small Business Support • Woman-Owned Small Business Set-Aside • Total Small Business Set-Aside • Partial Small Business Set-Aside • Subcontracting Programs and Plans

24. Small Business Program: Tools & Services • Market research and capability reviews • Acquisition strategy assistance • Counseling, assistance and outreach • SB Federal, Congressional, local government, and business sponsored Procurement Fairs • Liaison between agency officials and business community

25. Small Business Program: Tools & Services • Represents agency to other Federal agencies, Congress, Federal task forces and on other matters • Annual Forecast of NRC Contracting Opportunities: http://www.nrc.gov/about-nrc/contracting/forecast.html • Quarterly Business Seminar & “BIZ Corner” • NRC Website: http://www.nrc.gov • Negotiates Socioeconomic Goals with SBA: www.sba.gov

26. NRC’s Public Webpage Click Here Click here

27. Small Business Webpage Click Here Click here

28. Forecast of Contract Opportunities

29. Forecast of Contract OpportunitiesPart I

30. Forecast of Contract OpportunitiesPart II

31. Forecast of Contract OpportunitiesPart III

32. Office of Administration (ADM)Division of Contracts (DC) DC’s Role DC Organization Applicable Regulations, Policies and Procedures Used by DC How DC Procures Supplies and Services and Manages its Grants and Agreements 32 32

33. DC’s Role Develop and implement NRC acquisition policies and procedures Direct and coordinate acquisition and financial assistance activities Provide advice and assistance to NRC program officials Provide oversight for NRC’s regional procurement activities Develop and administer overall agency guidance for contracting activities with the U.S. Department of Energy (DOE) laboratories and other agencies Provide oversight to ensure that appropriate procedures are followed in placing and monitoring DOE laboratory agreements and agreements with other agencies Oversee acquisition training, certification and career development programs Oversee the NRC SmartPay2 Purchase Card Program Develop policy and procedures and oversee NRC practices to ensure compliance with OMB Circular A-76 and the FAIR Act 33

34. DC Organization • DC is a Division in ADM (see org chart at http://www.nrc.gov/about-nrc/organization/admfuncdesc.html) • DC personnel are Contracting Officers and Contract Specialists that manage NRC acquisitions of supplies and services as well as NRC grants; also have Procurement Analysts that manage NRC Acquisition Regulation (NRCAR) and supplemental policies and procedures • DC Branches • Information, Management and Technology (IMT) Branch • Research, Resources and Grants (RRG) Branch • Materials, Security and Administration (MSA) Branch • Reactors, Safety and Licensing (RSA) Branch 34

36. Applicable Regulations, Policies and Procedures used by DC Federal Acquisition Regulation (FAR) (48 CFR Chapter 1) (www.acquisition.gov/far) NRC Acquisition Regulation (NRCAR) (48 CFR Chapter 20) (http://www.nrc.gov/about-nrc/contracting/48cfr-ch20.html) Volume 11 of NRC Management Directives (http://www.nrc.gov/reading-rm/doc-collections/management-directives/volumes/vol-11.html) Internal Policies and Procedures 2 CFR 215: Uniform Administrative Requirements for Grants and Agreements with Institutions of Higher Education, Hospitals, and Other Non-Profit Organizations (OMB Circular A–110) 36

37. How DC Procures Supplies and Servicesand Manages its Financial Assistance Program • Open Market • Up to $25k: http://www.nrc.gov/about-nrc/contracting/general/notice.html and , for EIT products and maintenance renewals, www.fedbid.com • Over $25k: www.fbo.gov and , for EIT products and maintenance renewals, www.fedbid.com • Statutory exceptions (e.g., 8(a) sole source, SDVOSB sole source) • GSA Federal Supply Schedules (GSA e-BUY at https://www.ebuy.gsa.gov/advgsa/advantage/ebuy/start_page.do or by contacting GSA FSS contractors directly) • NASA Solutions for Enterprise-Wide Procurement (SEWP) IV Governmentwide Acquisition Contract (GWAC) • Grants and Agreements (2 CFR 215): http://www.nrc.gov/about-nrc/grants.html 37

38. Questions? 38

39. Program Office Presents: The Computer Security Office Our Role Our Organization 39

40. Patrick D. Howard, Chief Information Security Officer March 3, 2011 Computer Security Office:Overview and NRC IT Security Services Requirements

41. CSO Mission & Vision • Mission: Provide a robust cyber security program for the protection of NRC cyber assets in support of the agency mission • Vision: To lead the federal government in cyber security excellence

42. CSO Organization

43. Policy & Training Team • Develops, coordinates and maintains the NRC IT Security Program policy • Communicates IT security policies, directives and requirements to NRC staff • Manages computer security awareness, training, and education program

44. Compliance Oversight Team • Reviews system certification packages and makes recommendations to the DAA • Tracks and provides oversight and support for the C&A efforts across NRC • Reviews and approves security documentation. • Tracks POA&Ms for quality of content and practicality and timeliness of remediation • Ensures that NRC computer security activities comply with FISMA and OMB guidance

45. Situational Awareness/ Incident Response Team • Receives, monitors, and reports computer security incidents • Monitors vulnerabilities, maintains awareness of the threat to NRC IT assets, and disseminates information regarding threats and vulnerabilities • Monitors intrusion detection/prevention systems • Interfaces with OIS/ICOD on prioritizing implementation of security patches • Communicates security alerts, software vulnerability reports, vendor patch notifications, and virus alerts • Evaluates and recommends IT security tools and security best practices • Conducts penetration testing and vulnerability scanning

46. CSO Goals • Reduce risks to NRC cyber assets • Responsiveness in the interpretation and application of security policy and guidance • Clear and frequent communication of the IT Security Program implementation status and policies • Involvement early in the system development life cycle to assist in defining business requirements for security

47. IT Security Service Requirements • QUESTION: What are typical IT security services NRC procures? • ANSWER: • Security Documentation Development/Update (SSP, RA, POA&M) • Security Test & Evaluation (ST&E) • System Contingency Plan Development/Update/Testing • Vulnerability Scanning • Continuous Monitoring Activities • Process/Procedure Development • IV&V

48. Trends in IT Security Services • QUESTION: What basic trends do you see in the types of IT security services the agency acquires? • ANSWER: Reduced costs resulting from mature methodologies, repeatable processes, and availability of automated tools

49. Forecast for IT Security Services • QUESTION: What is NRC’s forecast for R&D, IT & Cybersecurity or Professional Services? • ANSWER: • Will continue to have needs for NIST-based IT security needs for system-level security • Anticipate continuing needs for IT security related process improvement support • Expect needs for enterprise risk management support in response to NIST SP 800-39

50. Major IT Security Services Acquisitions • QUESTION:What major acquisitions are on the horizon? • ANSWER: • CISSS Re-Compete (FY11) • SITSOSS Re-Compete (FY12)