NRC s Quarterly Business Seminar Introducing BIZ Corner

NRC 's Quarterly Business Seminar Introducing “BIZ Corner” Hosted by: The Small Business Program 1

Seminar Agenda • Introduction • Agency Mission, Goals and Objectives • Small Business Program v Tools, Services and Opportunities • Contracts Program Overview • Program Office Presentation – Computer Security Office • Legal Perspective • Tips • “BIZ Corner” 2

Our Mission To license and regulate the nation’s civilian use of byproduct, source and special nuclear materials to ensure adequate protection of public health and safety, promote the common defense and security, and protect the environment. 3

Who We Are • The Energy Reorganization Act of 1974 established the independent U. S. NRC to regulate commercial uses of nuclear material • Other duties of the former Atomic Energy Commission were assigned to Department of Energy 4

NRC Mission Goals • Safety: Ensure the protection of public health and safety and the environment • Security: Ensure the secure use and management of radioactive material 5

NRC Regulates • Nuclear reactors - commercial power reactors, research and test reactors, new reactor designs • Nuclear materials - nuclear reactor fuel, radioactive materials for medical, industrial and academic use • Nuclear waste - transportation, storage and disposal of nuclear material and waste, decommissioning of nuclear facilities • Nuclear security – physical security of nuclear facilities and materials from sabotage or attacks 6

NRC Primary Functions • Establish rules and regulations • Issue licenses • Provide oversight through inspection, enforcement and evaluation of operational experience • Conduct research to provide support for regulatory decisions • Respond to emergencies 7

Major Program Offices • Office of Nuclear Reactor Regulation • Office of New Reactors • Office of Nuclear Material Safety and Safeguards • Office of Nuclear Regulatory Research • Office of Nuclear Security & Incident Response • Office of Federal and State Materials and Environmental Management Programs 8

Major Program Offices • • • Office of Investigations Office of International Programs Computer Security Office of the Chief Financial Officer Office of Information Services Office of Human Resources 9

NRC Profile • NRC Budget v$1. 07 billion for FY 2010 v$1. 05 billion for FY 2011 v$1. 05 billion for FY 2012 • NRC Headquarters, Rockville, MD • Over 4, 000 employees; almost 3, 000 at HQ • Region I - King of Prussia, Pennsylvania • Region II - Atlanta, Georgia • Region III - Lisle, Illinois • Region IV - Arlington, Texas 10

What NRC Buys • Information technology, products, services and solutions • Administrative support • Engineering support • Technical research & assistance • Construction • Auditing & financial management • Training 11

What Other Agencies Buy on Behalf of the NRC • Research and development in the physical, engineering, and life sciences • Leasing • EEO investigative support services • IT support services • Administrative support services • Research and laboratory support services 12

What Other Agencies Buy on Behalf of the NRC • Payroll and contractor payment support services • Acquisition and contract management support services NOTE: In accordance with FAR 4. 606(b), interagency agreements may be reported to the Federal Procurement Data System-Next Generation (FPDS-NG); however, agencies who procure on behalf of the NRC may recognize the funding agency in such reporting. In FY 2010, approximately $65 million dollars of NRC funded acquisitions were awarded by other agencies through interagency agreements. 13

Acquisition/Small Business • FY 2008: U. S. Small Business Administration (SBA) “Green” or excellent ratings of NRC Small Business Procurement Scorecard Plans and performance – more than $169 M • FY 2009: SBA “B” rating - more than $225 M funded • FY 2010: more than $257 M funded 14

Small Business Goals & Accomplishments 15

Laws, Executive Orders and Implementing Regulations • • • Small Business Act, as amended Small Business Jobs Act of 2010 Executive Orders FAR Part 19 NRC Supplemental Acquisition Regulations Management Directives 16

Small Businesses Are Important! • Presidential Proclamation, 5/20/2010, declared small business serve as the engine of this great country’s prosperity and are a proud reflection of our character • Critical to the economic well-being of our communities and to the security of the Nation 17

Small Businesses Are Important! • Creates virtually all of the net new jobs added to the economy • Provides 67 % of workers with their first jobs • Employs 53% of the private work force • Accounts for 51% of private sector output • Accounts for 47% of all sales in the country 18

Small Businesses Are Important! • Produces 40% of the gross national products • Represents 96% of all U. S. exporters • Invents more than half the Nation’s technological innovation, while accounting for 28% of jobs in high technology sectors • Are critical to the Nation’s supplier base, flexible and competitive • Dedicate senior management to contract support and performance 19

Small Business Program • Our Role • Our Customers • Portfolio of Programs • Tools & Services 20

Small Business Program: Our Role • Conducts acquisition and data oversight; recommends acquisition and small business prime and subcontract goals and strategies, recommends set-asides and sources; counsels and trains agency contract and program officials; and supports agency market research efforts • Engages in outreach and communications in support of congressional, Federal, State and local governments and private business organizations • Delivers training, counseling and technical assistance to the business community 21

Small Business Program: Our Customers • “Other than Small Businesses” or Large Businesses, Non-Profits, and Universities • Trade Associations, Chambers of Commerce, and other private organizations • Congress • Federal agencies, State, local, and county governments 22

Portfolio of Small Business Programs • 8(a) Sole Source & Competitive • Service-Disabled Veteran-Owned Sole Source & Set. Aside • HUBZone Sole source & Set-Aside • Veteran Small Business Support • Woman-Owned Small Business Set-Aside • Total Small Business Set-Aside • Partial Small Business Set-Aside • Subcontracting Programs and Plans 23

Small Business Program: Tools & Services • Market research and capability reviews • Acquisition strategy assistance • Counseling, assistance and outreach • SB Federal, Congressional, local government, and business sponsored Procurement Fairs – Liaison between agency officials and business community 24

Small Business Program: Tools & Services • Represents agency to other Federal agencies, Congress, Federal task forces and on other matters • Annual Forecast of NRC Contracting Opportunities: http: //www. nrc. gov/aboutnrc/contracting/forecast. html • Quarterly Business Seminar & “BIZ Corner” • NRC Website: http: //www. nrc. gov • Negotiates Socioeconomic Goals with SBA: www. sba. gov 25

NRC’s Public Webpage k Clic here re k He Clic 26

Small Business Webpage re k He Clic e Cli r k he c 27

Forecast of Contract Opportunities 28

Forecast of Contract Opportunities Part I 29

Forecast of Contract Opportunities Part II 30

Forecast of Contract Opportunities Part III 31

Office of Administration (ADM) Division of Contracts (DC) • DC’s Role • DC Organization • Applicable Regulations, Policies and Procedures Used by DC • How DC Procures Supplies and Services and Manages its Grants and Agreements 32

DC’s Role • Develop and implement NRC acquisition policies and procedures • Direct and coordinate acquisition and financial assistance activities • Provide advice and assistance to NRC program officials • Provide oversight for NRC’s regional procurement activities • Develop and administer overall agency guidance for contracting activities with the U. S. Department of Energy (DOE) laboratories and other agencies • Provide oversight to ensure that appropriate procedures are followed in placing and monitoring DOE laboratory agreements and agreements with other agencies • Oversee acquisition training, certification and career development programs • Oversee the NRC Smart. Pay 2 Purchase Card Program • Develop policy and procedures and oversee NRC practices to ensure compliance with OMB Circular A-76 and the FAIR Act 33

DC Organization • DC is a Division in ADM (see org chart at http: //www. nrc. gov/aboutnrc/organization/admfuncdesc. html) • DC personnel are Contracting Officers and Contract Specialists that manage NRC acquisitions of supplies and services as well as NRC grants; also have Procurement Analysts that manage NRC Acquisition Regulation (NRCAR) and supplemental policies and procedures • DC Branches – – Information, Management and Technology (IMT) Branch Research, Resources and Grants (RRG) Branch Materials, Security and Administration (MSA) Branch Reactors, Safety and Licensing (RSA) Branch 34

35

Applicable Regulations, Policies and Procedures used by DC • Federal Acquisition Regulation (FAR) (48 CFR Chapter 1) (www. acquisition. gov/far) • NRC Acquisition Regulation (NRCAR) (48 CFR Chapter 20) (http: //www. nrc. gov/about-nrc/contracting/48 cfr-ch 20. html) • Volume 11 of NRC Management Directives (http: //www. nrc. gov/reading-rm/doccollections/management-directives/volumes/vol-11. html) • Internal Policies and Procedures • 2 CFR 215: Uniform Administrative Requirements for Grants and Agreements with Institutions of Higher Education, Hospitals, and Other Non-Profit Organizations (OMB Circular A– 110) 36

How DC Procures Supplies and Services and Manages its Financial Assistance Program • Open Market – Up to $25 k: http: //www. nrc. gov/about-nrc/contracting/general/notice. html and , for EIT products and maintenance renewals, www. fedbid. com – Over $25 k: www. fbo. gov and , for EIT products and maintenance renewals, www. fedbid. com – Statutory exceptions (e. g. , 8(a) sole source, SDVOSB sole source) • GSA Federal Supply Schedules (GSA e-BUY at https: //www. ebuy. gsa. gov/advgsa/advantage/ebuy/start_page. do or by contacting GSA FSS contractors directly) • NASA Solutions for Enterprise-Wide Procurement (SEWP) IV Governmentwide Acquisition Contract (GWAC) • Grants and Agreements (2 CFR 215): http: //www. nrc. gov/about-nrc/grants. html 37

Questions? 38

Program Office Presents: The Computer Security Office • Our Role • Our Organization 39

Computer Security Office: Overview and NRC IT Security Services Requirements Patrick D. Howard, Chief Information Security Officer March 3, 2011 40

CSO Mission & Vision Mission: Provide a robust cyber security program for the protection of NRC cyber assets in support of the agency mission Vision: To lead the federal government in cyber security excellence 41

CSO Organization Computer Security Office Patrick D. Howard Director/ Chief Information Security Officer Policy, Standards and Training Team FISMA Compliance and Oversight Team Cyber Situational Awareness, Analysis and Response Team Kathy Lyons-Burke Team Leader Paul Ricketts Team Leader Thorne Graham Team Leader 42

Policy & Training Team Develops, coordinates and maintains the NRC IT Security Program policy Communicates IT security policies, directives and requirements to NRC staff Manages computer security awareness, training, and education program 43

Compliance Oversight Team Reviews system certification packages and makes recommendations to the DAA Tracks and provides oversight and support for the C&A efforts across NRC Reviews and approves security documentation. Tracks POA&Ms for quality of content and practicality and timeliness of remediation Ensures that NRC computer security activities comply with FISMA and OMB guidance 44

Situational Awareness/ Incident Response Team Receives, monitors, and reports computer security incidents Monitors vulnerabilities, maintains awareness of the threat to NRC IT assets, and disseminates information regarding threats and vulnerabilities Monitors intrusion detection/prevention systems Interfaces with OIS/ICOD on prioritizing implementation of security patches Communicates security alerts, software vulnerability reports, vendor patch notifications, and virus alerts Evaluates and recommends IT security tools and security best practices Conducts penetration testing and vulnerability scanning 45

CSO Goals Reduce risks to NRC cyber assets Responsiveness in the interpretation and application of security policy and guidance Clear and frequent communication of the IT Security Program implementation status and policies Involvement early in the system development life cycle to assist in defining business requirements for security 46

IT Security Service Requirements QUESTION: What are typical IT security services NRC procures? ANSWER: Security Documentation Development/Update (SSP, RA, POA&M) Security Test & Evaluation (ST&E) System Contingency Plan Development/Update/Testing Vulnerability Scanning Continuous Monitoring Activities Process/Procedure Development IV&V 47

Trends in IT Security Services QUESTION: What basic trends do you see in the types of IT security services the agency acquires? ANSWER: Reduced costs resulting from mature methodologies, repeatable processes, and availability of automated tools 48

Forecast for IT Security Services QUESTION: What is NRC’s forecast for R&D, IT & Cybersecurity or Professional Services? ANSWER: Will continue to have needs for NIST-based IT security needs for system-level security Anticipate continuing needs for IT security related process improvement support Expect needs for enterprise risk management support in response to NIST SP 800 -39 49

Major IT Security Services Acquisitions QUESTION: What major acquisitions are on the horizon? ANSWER: CISSS Re-Compete (FY 11) SITSOSS Re-Compete (FY 12) 50

Vendor Availability QUESTION: Are you having difficulty finding small businesses to compete for a specific acquisition or contract? ANSWER: The NRC Computer Security Office currently has a competent stable of small businesses on which it relies 51

Current Partners QUESTION: Who are NRC’s major prime contractors for IT security and are there subcontracting opportunities? ANSWER: MAR, Inc. (CISSS) Knowledge Consulting Group (SITSOSS) 52

Small Businesses at NRC QUESTION: Can you provide examples of small businesses that are prime contractors? ANSWER: All NRC IT security prime contractors are small businesses. 53

Questions ? ? ? 54

The Office of General Counsel Presents: Legal Perspective 55

Office of General Counsel • Contracting and Small Business Update Special NRC Contract Provisions/Clauses • Conflict of Interest (COI) • NRC Acquisition Regulation 2052. 2009 -570 www. nrc. gov/about-nrc/contracting/48 cfrch 20. html - Same technical area - Same or similar matter - Potential bias • Legal Update 56

Small Business Program • Tips 57

Tips On Conducting Business • Know your own market, your customers and their needs! • Develop an appropriate marketing plan and strategy to accomplish business objectives • Develop appropriate tools to implement strategy (register with databases, develop good capability statements) • Know the rules (e. g. , Federal Acquisition Regulations (FAR) and NRC Acquisition Regulations) 58

Tips On Conducting Business • Know your niche and company strengths – Debriefs, win or lose • Focus on past performance, target similar agencies • Know your customer’s agency forecast • Work with the Small Business, Project, and Contracts Offices • Don’t discount subcontracting or simplified acquisition options 59

Tips On Conducting Business • Present a professional image: – Capability statements & brochures – Company Website – Past performance is key • Maximize use of Federal programs: – Get on GSA’s Federal Supply Schedule, GWAC’s – Get certified! – Register on FBO 60

Tips On Conducting Business • Know potential conflict of interests issues • Participate in outreach activities and Market! 61

Quarterly Business Seminar & “BIZ Corner” 62

Market Research & Market Surveys Respond to market research and demonstrate interest, potential capacity and capability. 63

Key Sources of Assistance • NRC Small Business Program and Division of Contracts • Small Business Administration – Small Business Development Centers – SCORE: www. score. org – Women’s Business Centers: www. womenbiz. gov – Center for Veterans Enterprise: www. vetbiz. gov 64

Key Sources of Assistance Procurement Technical Assistance Programs – MD PTAP: www. mdptap. umd. edu – VA PTAP: www. vaptap. org • Other agency Small Business Offices: www. osdbu. gov • Minority Business Development Agency: www. mbda. gov • State and local Government resources • Chambers of Commerce 65

Outreach Events for FY 2011 • December 13, 2010 - Contract Connections at FDA, White Oak, Silver Spring, MD: hweschke@choosemaryland. org • February 28, 2011 - National Business Promotions & Conference Inc. Breakfast, Fairfax, VA: http: //www. nbpci. com/ • March 2, 2011 - Women Impacting Public Policy Celebratory Luncheon, Washington, DC: http: //www. wipp. org/events/event_details. asp? id=1 45375 66

Outreach Events for FY 2011 • March 8 -10, 2011 NRC Regulatory Information Conference, Rockville, MD: www. nrc. gov • March 16, 2011 - Minority Enterprise Executive Council Award, Washington, DC: www. meecouncil. com • March 24, - Veterans Institute for Procurement, National Program, Potomac, MD: www. mccc. md. com 67

Outreach Events for FY 2011 • April 1, 2011 - American Small Business Coalition Government Contracting Event, Chevy Chase, MD: http: //www. theasbc. org/events/event_details. asp ? id=145767 • April 7, 2011 - Northern Virginia Technology Council (NVTC) Event, Herndon, VA: http: //www. nvtc. org/events/geteventinfo. php? eve nt=ECEVT-7 68

Outreach Events for FY 2011 • May 4, 2011 - Congressional Procurement Conference & Expo, Rockville, MD: www. mcccmd. com • April 21, 2011 - 21 st Annual OSDBU Conference, Chantilly, VA: http: //www. fbcinc. com/osdbu/ 69

Regulatory Information Conference 70

Contact Information: NRC’s Small Business Program: (800) 903 -SBCR(7227) smallbusiness@nrc. gov NRC’s Division of Contracts (301) 492 -3600 71

Questions? 72

BIZ Corner 73