2024-0178 Provision of Crypto Custodian Support Ser.(CTS) NETHERLANDS - 18 Feb

Deadline Date:  Tuesday 18 February 2025
 
Requirement:  Provision of Crypto Custodian Support Service
 
Location:  Brunssum, NETHERLANDS
 
Full-Time On-Site:  Yes
 
Time On-Site:  100%
 
Not to Exceed:  2025 BASE: NTE 61,605 EUR
 
Required Start Date: 1 April,2025
 
Required Security Clearance:  NATO COSMIC TOP SECRET
 
Introduction:
The purpose of this Statement of Work (SoW) is to describe the Crypto Custodian Services to the NCIA Agency, NATO Commands and National Accredited entities.
Due to heavy workload related to CDA (Crypto Distribution Agency) services Crypto Support Services are required for the period of 01 April 2025 until 31 Dec 2025 (with the possibility to exercise option years as outlined above) in order to be in compliance with the agreed timelines described in the 2025 SLA.
NCI Agency CIS Support Unit (CSU) Brunssum, located in Brunssum (NLD) enables end-to-end CIS services as it installs, operates, maintains and supports the full range of CIS capabilities during peacetime, crisis and war throughout its allocated Area of Responsibility (AOR) and as otherwise directed.
Due to increasing NATO exercise activity, CSU Brunssum is seeking for Local and AOR Crypto support.
 
High Level Description:
Contractor’s personnel will provide the services as part of an existing team of people supporting the NCIA CSU Brunssum Crypto Distribution Agency and Crypto Cell Services and locations and will not be working independently. It is to augment current capability within the Crypto Custodian team.
The contractor will support the CSU Brunssum Crypto activities and duties providing first line support and assistance to Crypto Account, Sub Account and Hand Receipt Holders through the systems and equipment provided by NCIA.
Contractor’s personnel will operate under the guidance of the COMSEC Officer and fulfil Tasks and Work Orders related to Crypto.
The Contractor’s personnel will support only those items registered in the CARDS Database and assigned to the CDA Brunssum Account for handling Crypto.
The Contractor’s personnel will provide direct support to Couriers with the production of Courier Certificates.
The Contractor’s personnel will provide Cyber Security Indoctrination in relation to handling, storing, operating the Crypto equipment when those are inside or outside the NATO premises. Perform in coordination with the Alternate Crypto Custodians routine and emergency destructions or dispositions of Crypto material. For this purpose in case of emergency the duty location can be different and emergency processes per NATO Regulations will be implemented.
The Contractor’s personnel will be responsible for the physical security of the Crypto Vault and safeguard of the Crypto Material and document the processes by following the processes in accordance with NATO Directives.
The Contractor’s personnel will activate, revoke, upgrade and downgrade at the user level the access rights on Base Access Control Systems and Electronic Key Systems installed at NCIA Brunssum.
 
Practical Arrangements:

• This is a completion-type contract which requires one Contractor with complementary skills to complete the work.
• NCIA will provide necessary site access and permission.
• NCIA will perform a full Health & Safety induction and Security Briefing (conducted by local NCIA CSU element) at the first possible opportunity for the Contractor to attend. The Contractor shall give their full attention and confirm the have understood the brief.
• The Contractor shall perform the work as described in this statement of work.
• The Contractor shall handle the equipment with due care to prevent damage and also in line with NATO Security Directives
• The Contractor shall install the equipment following provided guidance to meet the requirements.
• The Contractor shall minimize the impact to the end users during the execution of the work.
• The Contractor shall bring, without delay, to the attention of the Point of Contact onsite any issues preventing the execution of the work.
• The Contractor shall be courteous and professional in dealing with NATO staff.
• The Contractor will report to and receive guidance from the Point of Contact on-site.
• The Contractor shall follow the working procedures, business hours and observe the official holidays only.
• The Contractor will provide services in line with the NATO Crypto Authorities schedule (classified) which will be provided at a later stage after on-boarding of the personnel.
• The Contractor shall provide a progress report on request of POC onsite.
• The CSU POC (or authorised person) will provide on-the-job training to the Contractor.
• The Contractor shall undertake the work at Joint Force Command Brunssum site, Brunssum, The Netherlands, working at NCI Agency CSU Brunssum and if required travel to other locations within NATO boundaries. This requires access to the Base, subject to additional rules and procedures. This travel will be billed to the purchaser by the service provider separately in accordance with the terms and conditions of the framework agreement and is considered an addition to the overall cost of the bid.
• The security details of the Contractor are to be provided to the site at least 2 weeks prior to work commencing.
• The Contractor shall ensure confidentiality, integrity and availability of the artefacts entrusted to them at all times including but not limited to documentation, manuals, guides, procedures, software components, installation media, binaries, scripts, etc.
• In any suspected or confirmed security (including cybersecurity) incident regardless of the scope and impact, the Contractor shall notify the POC and stop any activities under this SOW until further guidance from the NCI Agency (e.g. in case of physical/cyber breach)

• Provide an onsite Health & Safety induction brief and site familiarization brief;
• Day-to-day direction and instruction to the Contractor while on site;
• Requirements and forms for access to Joint Force Command Brunssum.

• The Contractor personnel shall possess valid Personal Security Clearance at COSMIC TOP SECRET level for the duration of the Contract performance to allow autonomy in movement within the site.

• Vocational training in relevant discipline of NATO Physical Security, Information Assurance Security or Cryptographic Security with 2 years of post-related experience or a secondary educational qualification with 4 years post-related experience.
• At least 2 years of experience in a NATO or National HQ as Crypto Custodian and experience in Cyber/IT Security department/area.
• Proven experience in crypto administration and CARDS
• Experience in cyber monitoring systems, MAILGUARD and EPO reports.
• Strong knowledge in Access Control systems BRI and TRAKA systems
• Strong teamwork skills and proficiency in English (STANAG 3-3-3)