DoD/DISA Cybersecurity Proposal Compliance Gap Analysis

Scope & objectives alignment (Cybersecurity Management for J-9 HaC)

Sections 3–5

Exec summary, scope across isolated/NIPRNet/SIPRNet; VM, endpoint protection/scanning, automation, governance

Fully Covered

Good mission alignment; mirrors objectives language.

Cross-cutting performance requirements

Section 6 (For all tasks)

Present/Responsive; PSR; schedules; TTPs; Ecosystem tickets; OJT; meetings; sensitive data handling; on-call

Partially Covered

Missing explicit 30-minute response window; COOP participation is not explicitly committed; tool list coverage not complete.

Task Areas 1–7 (core)

Sections 6.1–6.7

TA1/2/3/4-7 described with similar language

Fully Covered

Strong mirroring of subtasks and deliverables; minor mismatches noted later.

Optional Task Areas 8–17

Sections 6.8–6.17

Not substantively addressed (except general RMF and audit support statements; SCRM section is addressed separately)

Not Covered

May be acceptable if proposal intentionally only covers required tasks; risk if solicitation expects capability for all (or if exercised).

Task Area 18 (Task Order Management)

Section 6.18

Program mgmt, staffing, accountability, training, transition-in/out, GFP inventory commitments

Partially Covered

Does not address OCI mitigation plan, whistleblower affirmation, non-disclosure statement requirement explicitly.

Task Area 19 (After-hours support)

Sections 6.18.6–6.18.7

On-call 2-hour start; notify at 3.5 hours; COR authorization language included

Fully Covered

Also includes 'authorized up to three emergent situations' nuance—proposal partially covers; see gap table.

Tools (DISA toolchain)

Section 6 tool list

Mentions Ecosystem; endpoint tools (ESS, MDE/MDfS); scanners (generic)

Partially Covered

Does not explicitly mention many required tools (ACAS, ESPS, DITPR, eMASS, CMRS, GIAP, SNAP, PPSM, STIG Viewer, WAF F5, IronPort, Splunk, TrueSight).

Security & clearance requirements / DD254 / visits

Section 11; VAL/VAR/VTN

Secret facility clearance (DCSA) and personnel requirements; 72-hour visit coordination; locked zip/password method; notify COR of unauthorized release

Partially Covered

Does not explicitly commit to processing via DISS to SMO DKABAA10 & SMO DKADAL; lacks some VAL content requirements; does not mention no-escort rule details.

Place of performance, remote waivers, travel controls

Section 8

Locations listed; remote waiver process; no travel reimbursement <50 miles; TAR 10 days prior; expenses within 30 days

Fully Covered

Well aligned.

Transition-in/out timing

Section 13(g), 6.18.4

50% within 2 weeks; 100% within 30 days; phase-out meeting 120 days; plan 90 days

Fully Covered

Good alignment.

GFP management & reporting

Section 12

Joint inventory; final inventory report 90 business days before end; FAR 45/DFARS reporting

Partially Covered

Does not explicitly commit to MSR listing Make/Model/Serial/End Warranty/Barcode; PIEE/GFP module reporting not mentioned.

SCRM plan and 5-day update trigger

Section 13(h)

Dedicated SCRM section with 5 business day update triggers and events

Fully Covered

Matches requirement closely.

Section 508 electronic content accessibility

Section 14 (E205/WCAG 2.0 A/AA)

Dedicated Section 508 section with WCAG 2.0 A/AA; document checks

Fully Covered

Good; could add mention of E205.3 categories but not required.

OCI / NDA / Whistleblower notice affirmation

Section 13(b),(c),(j)

Not addressed

Not Covered

Material compliance risk; often a go/no-go or responsibility determination input.

Personnel present/responsive in chat/email/collab tools (Jabber, GVS, Teams, Outlook) during duty hours

SOW §6 (first bullets)

Commits to presence/responsiveness on approved collaboration tools during duty hours

Partial

Name the required tools explicitly (Jabber, GVS, Teams, Outlook) and confirm access/usage across enclaves.

30-minute response window when not in meetings/tasks prohibiting access

SOW §6

States will be responsive and balance meetings/tasks; no numeric SLA

Gap

Add explicit commitment to 30-minute response window and how measured/monitored.

Provide project schedules and PSR with milestones/activities/risks/challenges

SOW §6; Deliverables list

States will provide project schedules and PSRs with milestones/risks/challenges

Covered

Ensure deliverable cadence aligns (monthly/weekly as required) in management plan.

Create/maintain TTPs, work instructions/job aids, user guides

SOW §6

Commits to TTPs, work instructions, job aids, user guides and refinement

Covered

—

Monitor/maintain/submit ticket updates, change requests, documentation in Ecosystem

SOW §6

Commits to manage work through Ecosystem; complete tickets/changes/docs

Covered

—

Provide in-depth on-the-job training to DISA Cyber LOB workforce

SOW §6

Commits to in-depth OJT and knowledge transfer

Covered

—

Participate in meetings for applicable functions

SOW §6

Commits to stakeholder meetings, CAB, audits, coordination up to daily where specified

Covered

—

Research/provide input to/participate in Cyber LOB COOP activities

SOW §6

COOP not explicitly mentioned

Gap

Add explicit COOP participation commitment and artifact support.

Follow applicable TTPs/work instructions; support implementation/sustainment/authorization/assessment activities

SOW §6

General governance/compliance/RMF statements; follow DISA procedures implied

Partial

Add explicit 'follow applicable TTPs/work instructions' and support authorization/assessment activities across tasks.

Properly use DISA cybersecurity tools (enumerated list)

SOW §6

Mentions some tools (ESS, Ecosystem; scanners)

Partial

Explicitly address full toolchain list and how staff are trained/certified/current versions.

Provide audience-targeted accurate feedback to RFIs

SOW §6

Mentions stakeholder coordination and reporting; not explicit for RFIs

Partial

Add explicit RFI response process and quality control.

Recommend improvements in efficiency/effectiveness for cyber activities/processes/docs

SOW §6

Commits to continuous improvement, automation, lessons learned

Covered

—

On-call support estimated ~33 hours/month

SOW §6 (bullet)

On-call described; no estimate acknowledged

Partial

Acknowledge estimated 33 hrs/month and staffing/coverage assumptions.

Sensitive data handling for CUI/PII/HIPAA/PCI

SOW §6

Explicitly mentions CUI/PII/HIPAA/PCI and handling discipline

Covered

—

Complete/submit all deliverables timely

SOW §6

Commits to disciplined deliverable production and quality checks

Covered

—

Obtain DoD-approved IA certification prior to engagement; additional certs within 6 months

SOW §6

Commits to IA certs satisfied prior; additional within six months

Covered

—

TA1 Cyber Automation Database

Automation for DB VM; XML reporting; DB security controls; Tier III support; A&A for Strategic Partners; peer code reviews; Govt repo

Mirrors subtasks; mentions Tier III; repo; peer review; toolkit & documentation

Partial

Does not explicitly state 'Maintain development environment and ensure compliance with all relevant security guidance' (implied). Explicitly mentions Tier III; includes A&A mention in other sections? In TA1 it does not clearly commit to 'Provide A&A for Strategic Partners'—add explicit.

TA2 Endpoint Protection Mgmt

Operate ESS & MDE/MDfS; rogue/removable storage; mass storage docs; DoS issues; queries/reports; insider threat; upgrades; vendor support; audits

Mirrors items strongly; includes privileged accounts; dashboards; mass storage docs; insider threat indicators

Covered

—

TA3 Endpoint Scanning Mgmt

Operate scanners; schedules; configs; resolve scan failures; reports; performance impacts; audits

Mirrors items; mentions best practices and DISA privileged access policies; deliverables listed

Covered

—

TA4 Application VA

App specialist support + VA + compliance validation/support; CAB up to daily; SRG/STIG; audits

Combined TA4–7 approach; mentions CAB; SRG/STIG; audit support; reports cadence

Partial

Solicitation has some confusing DB/web wording in TA4. Proposal should explicitly separate App vs DB vs Web vs OS roles/deliverables for evaluator clarity.

TA5 Database VA

DB specialist + VA + compliance; A&A and SSP documentation deliverables

Mentions DB VA and where applicable A&A/SSP documentation

Partial

Add explicit commitment that TA5 includes A&A Documentation and SSP Documentation deliverables (solicitation lists them).

TA6 Web VA

Web specialist + VA + compliance; WAF/F5 context appears in tool list

General web VA included

Partial

Does not mention WAF/F5 or web-specific tooling; add explicit tool familiarity where relevant.

TA7 OS VA

OS specialist + VA + compliance; includes Windows/Unix/Mainframe/Network/Cloud technologies

General OS VA included; mentions UNIX, and isolated environments; not explicit mainframe/network/cloud OS scope

Partial

Add explicit scope statement for OS vulnerabilities including Windows/Unix/Mainframe/Network devices/Cloud technologies as listed.

TA8 Cyber Security Configuration Validation (Optional)

Validate OE build specs, checklists, tool installs, scans, tracking DB updates, approvals/denials

Not addressed

Gap

If offering optional tasks, add approach and staffing; otherwise explicitly state 'not proposed' to avoid ambiguity.

TA9 Cyber Automation OS (Optional)

Windows/UNIX admin; automation; tier 2 app support; A&A for Strategic Partners

Not addressed

Gap

Same as above.

TA10 Incident Response (Optional)

Monitoring/alerting/log retention; audit log reviews; chain of custody; spillage; CSSP escalation; IR kit

Not addressed (only general anomalous event reports, AARs)

Gap

Add IR capability statement or clarify not included.

TA11 RMF DBA (Optional)

DBA support for RMF database; VB scripting; sustain performance; audit controls DB deliverable

Not addressed

Gap

—

TA12 Network VA (Optional)

Network specialist, VA, compliance

Not addressed

Gap

—

TA13 UNIX/Linux VA (Optional)

UNIX/Linux specialist; VA; compliance; network monitoring software oversight

Not addressed

Gap

—

TA14 Cyber Admin & Support (Optional)

Orders (~200/yr), standardization, ITSM/ITIL, process improvement, metrics programs, QA

Not addressed (some metrics/process improvement language)

Gap

If DISA evaluates breadth, add explicit capability; otherwise clarify not offered.

TA15 Strategic Partner Integration (Optional)

Planning and operations support for Strategic Partners; SRF/Letter Estimate; DITPR registration; PPSM; distribution of docs

Not addressed (general strategic partner coordination mentioned)

Partial

Proposal mentions coordination with Strategic Partners but not the specific SRF/DITPR/PPSM/portal tasks.

TA16 Mainframe ISSO (Optional)

ISSO duties; SSP; audit data; control validations; mainframe products; import STIG outputs

Not addressed

Gap

—

TA17 Cyber Threat Planning (Optional)

Audit coordination ~150/yr; MRL/DRL; CO/asset lists; comm plans; self-assessments

Not addressed (general audit participation)

Partial

Proposal covers audit support broadly but not audit program management artifacts (MRL/DRL, comm plan, scheduling).

TA18 Task Order Mgmt

Resource mgmt; personnel accountability; mandatory training; phase-out plan; cyber threat security for NPI

Covers staffing/transition/accountability/training; NPI protections and reporting included

Partial

Missing OCI mitigation plan requirement, NDA signing, and whistleblower rights affirmation deliverable.

TA19 After-Hours Support

2-hr start; notify at 3.5 hrs; 1 week/month rotation max; seek COR authorization; up to 3 emergent events if COR unavailable

Covers 2-hr start and 3.5-hr notify and COR authorization

Partial

Does not explicitly include 'authorized to remedy up to three emergent situations if COR unavailable then notify ACORs by COB next business day'—add to be safe. Also does not mention 1-week/month max rotation.

OCI identification and OCI Mitigation Plan for CO approval; update and notify CO within 24 hours of newly identified OCI

SOW §13(b)

Not mentioned

Material omission

Add a section: commit to submit OCI Mitigation Plan, continuous monitoring, and 24-hour notification to Contracting Officer for new OCIs.

Non-disclosure statement signing requirement

SOW §13(c)

General nondisclosure language; does not state signing NDA/statement

Omission

Explicitly state company and staff will sign required non-disclosure statement and flow down to subs.

Whistleblower rights notification affirmation 60 days prior to PoP end

SOW §13(j)

Not mentioned

Omission

Add compliance statement and internal process to provide written affirmation to COR with forum/means.

30-minute responsiveness window

SOW §6

Not included

Measurable SLA missing

Add explicit '30-minute response when not in meetings or when tasks prevent access' and how tracked.

COOP participation

SOW §6

Not included

Omission

Add explicit commitment to research/participate in COOP activities and exercises.

Full DISA toolchain usage (explicit)

SOW §6 tool list

Partial tool mentions only

Coverage weakness

Add enumerated tool familiarity/operations statement and training plan for ACAS/ESPS/DITPR/eMASS/CMRS/GIAP/SNAP/PPSM/STIG Viewer/WAF F5/IronPort/Splunk/TrueSight.

Security visit processing specifics (DISS routing IDs, VAR package contents, VTN details)

SOW §11.4

Partially mentioned (locked zip, 72 hours)

Compliance detail gap

Add explicit commitment to DISS processing to SMO DKABAA10 & SMO DKADAL; VAR package includes IOM, DD254 good standing, signed VAL; VTN contents.

GFP reporting in MSR with required fields (Make/Model/Serial/End warranty/Barcode) and PIEE/GFP Module reporting events

SOW §12

General FAR45/DFARS; joint inventory; final report

Compliance detail gap

Add explicit MSR GFP inventory fields and acceptance/reporting via PIEE GFP module / DFARS 252.245-7005 event reporting.

After-hours support constraints: 1 week/month max rotation; flex hours for routine maintenance; authorization up to 3 emergent situations if COR unavailable and ACOR notification

SOW §6 bullet; §6.18.6–6.18.7

Covers 2-hr start and 3.5-hr notify; mentions COR authorization; does not mention 1-week/month max rotation or 'up to 3 emergent situations' rule

Detail omission

Add explicit on-call rotation/coverage rules and the 'up to three emergent situations' authorization/notification pathway.

Duty hours coverage window 7:00am–6:00pm EST M–F

SOW §9

Mentions duty hours generally; not explicit window

Clarity gap

Add explicit alignment to 7am–6pm EST primary coverage and staffing plan for that window.

Final security clearances obtained by start of performance

SOW §9

States interim or final Secret eligibility at contract start; does not explicitly say final by start of performance (proposal says work performed at Secret; prime holds final FCL)

Potential conflict/ambiguity

Clarify personnel will meet the solicitation requirement for final clearances by start of performance (or explain how interim eligibility aligns if solicitation allows).

Access for Government IT inspection/audit of contractor facilities, systems, documentation, personnel

SOW §11.6.10

Not mentioned

Omission

Add explicit consent/plan for facilitating Government access for inspections/audits/vulnerability testing, including preservation of evidence.

Personnel clearance requirement ambiguity (interim vs final)

SOW §9: 'All contractors’ final security clearances shall be obtained by start of performance' and §11.2 allows interim/final eligibility at start (table referenced but not provided)

Proposal: personnel have interim or final Secret clearance eligibility at contract start; Secret level work; prime has final Secret facility clearance

Could be interpreted as not committing to 'final' by start if SOW requires final adjudication

Add explicit statement: all personnel requiring Secret access will possess final Secret clearance by start of performance, unless Government allows interim per position table—then state compliance with that table.

Optional tasks not addressed

Tasks 8–17 listed as Optional

Proposal focuses on 1–7 plus mgmt/after-hours

If Government expects capability narrative for optional tasks, evaluators may mark down

Either (a) add brief capability for each optional task or (b) explicitly state not proposed/unpriced unless exercised.

Tool operations breadth

SOW tool list includes ACAS, ESPS, eMASS, CMRS, GIAP, SNAP, PPSM, Splunk, TrueSight, etc.

Proposal mentions ESS, MDE/MDfS, Ecosystem; scanners generic

May appear as incomplete understanding of environment; tool usage is a core discriminator

Add a tool-specific operations subsection mapping tools to tasks and staff roles.

A&A for Strategic Partners (Task 1 and Task 9 optional)

Task 1 includes 'Provide A&A for Strategic Partners'

Proposal says scope includes A&A documentation 'where applicable' and task 4–7 includes A&A/SSP where applicable; Task 1 section does not clearly state A&A for Strategic Partners

Could be scored as missed subtask

Add explicit A&A support commitment in Task 1 narrative.

Report/deliverable specificity for TA5 (A&A + SSP deliverables)

Task 5 deliverables explicitly include A&A Documentation and SSP Documentation

Proposal says 'where applicable'

Potentially seen as hedging

State TA5 will deliver A&A and SSP documentation as required by Government for supported systems.

COOP participation omission

SOW §6 includes COOP activities

Not mentioned

Minor but explicit SOW requirement

Add COOP bullet under cross-cutting commitments.

On-call monthly hours estimate acknowledgment

SOW §6: on-call estimated ~33 hours/month

Not acknowledged

May affect staffing realism and price realism

Acknowledge estimate and describe coverage model and reporting of hours/events.

R-01

Responsiveness requirement could be deemed non-compliant

Missing explicit 30-minute response window commitment

Medium

High

High

Add explicit SLA and monitoring method in communications section.

R-02

Responsibility determination / contractual compliance risk due to missing OCI plan commitment

OCI requirements not addressed

Medium

High

High

Add OCI Mitigation Plan commitment + 24-hour notification process; flowdown to subs.

R-03

Evaluator downgrade for incomplete toolchain coverage

Many required DISA tools not mentioned

High

Medium

High

Add tool-by-tool capability matrix and training/current version approach.

R-04

Security processing noncompliance risk (VAL/VAR/VTN)

Not all required fields/process IDs stated

Medium

Medium

Medium

Add explicit VAL/VAR/VTN compliance checklist and DISS routing.

R-05

GFP management audit finding risk

MSR GFP inventory fields and PIEE reporting not explicitly committed

Medium

Medium

Medium

Add GFP management subsection committing to PIEE GFP module events and MSR inventory fields.

R-06

Scope mismatch if optional tasks are exercised

Optional tasks 8–17 not addressed

Low-Medium

High

Medium

Clarify optional task posture; add capability addenda if intending to support.

R-07

Personnel clearance timing dispute

Ambiguity around 'final clearance by start' vs interim eligibility

Medium

High

High

Clarify compliance with §9 and §11.2 table; add staffing pipeline plan.

R-08

On-call expectations misalignment

Not acknowledging 33 hrs/month estimate or 1-week/month max rotation

Medium

Medium

Medium

Add explicit on-call coverage assumptions and rotation rules; include authorization edge cases.

R-09

COOP requirement overlooked during performance

Not explicitly planned/owned

Low

Medium

Low-Medium

Add COOP participation plan and designate role/responsibility.

R-10

Whistleblower affirmation deliverable missed near end of PoP

Not addressed in proposal management plan

Low

Medium

Low-Medium

Add compliance calendar item and responsible party; commit to provide affirmation 60 days prior.

After Action Report per incident

All tasks

Explicitly listed in proposal artifacts

Covered

—

Audit support documents

All tasks

Explicitly listed

Covered

—

Cybersecurity tool (current version) certification and/or training as published by DoD

All tasks

Not explicit; general training/certs statements

Partial

Add explicit commitment to maintain current-version tool training/certifications as published.

Job aids

All tasks

Explicitly listed

Covered

—

Monthly Status Report (MSR)

All tasks

Mentions MSRs and reporting

Covered

Ensure MSR includes remote waiver status and mandatory training updates per SOW.

Meeting minutes

All tasks

Explicitly listed

Covered

—

Lessons learned

All tasks

Explicitly listed

Covered

—

Process flowcharts

All tasks

Explicitly listed

Covered

—

Project schedules

All tasks

Explicitly listed

Covered

—

Reports from anomalous events

All tasks

Explicitly listed

Covered

—

RMF support documents

All tasks

Explicitly listed

Covered

—

Project Status Report (PSR)

All tasks

Explicitly listed

Covered

—

TTPs

All tasks

Explicitly listed

Covered

—

Technical interpretations

All tasks

Explicitly listed

Covered

—

Training support documents

All tasks

Explicitly listed

Covered

—

Updated security procedures

All tasks

Explicitly listed

Covered

—

White papers

All tasks

Explicitly listed

Covered

—

TA1: Completed UNIX Database Toolkit

Task 1

Explicitly committed

Covered

—

TA1: Database Toolkit Documentation

Task 1

Explicitly committed

Covered

—

TA1: Peer code review process & findings documentation

Task 1

Explicitly committed

Covered

—

TA2: Compliance reports & trending analysis

Task 2

Explicitly committed (reports/dashboards/trending)

Covered

—

TA2: Current registered device documentation

Task 2

Explicitly committed

Covered

—

TA2: Security Violation Reports

Task 2

Explicitly committed

Covered

—

TA2: Weekly Metrics

Task 2

Explicitly committed

Covered

—

TA3: Metrics & trending analysis reports

Task 3

Explicitly committed

Covered

—

TA3: Scan systems list (Gov provided)

Task 3

Explicitly committed

Covered

—

TA3: Scan failures report

Task 3

Explicitly committed

Covered

—

TA3: Scanning vulnerability reports

Task 3

Explicitly committed

Covered

—

TA4/6/7: Daily/Weekly/Monthly/Quarterly/Annual vulnerability analysis reports

Tasks 4/6/7

Explicitly committed

Covered

—

TA5: VA reports + A&A Documentation + SSP Documentation

Task 5

Mentions A&A/SSP 'where applicable'

Partial

Make explicit for TA5 to match solicitation deliverables.

TA11: Comprehensive Audit Controls Database

Task 11 (Optional)

Not addressed

Gap

Only needed if proposing optional Task 11.

TA10: Weekly metrics + MSR

Task 10 (Optional)

Not addressed

Gap

Only if optional task proposed.

TA14: Orders reports; Process gap analysis; Updated security metric analysis procedures; metrics reports

Task 14 (Optional)

Not addressed

Gap

Only if optional task proposed.

TA17: Meeting minutes report; communication plan; gap analysis; MRL/DRL responses; submit CO/asset list

Task 17 (Optional)

Not addressed

Gap

Only if optional task proposed.

TA18: Phase-Out Transition Plan

Task 18

Committed with specific timing

Covered

—

TA18: Final GFE/GFP Inventory Report

Task 18

Committed

Covered

Ensure aligns to '90 business days' requirement.

TAR (Travel Authorization Request)

Task 18 deliverables / Travel section

Committed (10 days prior)

Covered

—

Travel Expense Report

Task 18 deliverables / Travel section

Committed (within 30 days)

Covered

—

VAL (Visit Authorization Letter)

Task 18 deliverables / Security section

Committed in principle

Partial

Add explicit commitment to VAL/VAR/VTN package contents and DISS routing, plus locked zip/password two-email method (already partially included).

MSR: remote waiver status reporting details

Travel section

Committed

Covered

Should include required fields: Name, SOW tasks, remote location, primary PoP.

Cross-Cutting Performance Requirements (Section 4)

SOW §6 30-minute response window

Add: 'We will meet the 30-minute response window when not in meetings or performing tasks prohibiting access; responses tracked via ticket timestamps/Teams presence and reported in MSR/PSR.'

High

Cross-Cutting Performance Requirements (Section 4)

SOW §6 COOP

Add explicit COOP participation and support for COOP updates/exercises; identify COOP POC.

Medium

Tools & Tool Proficiency subsection

SOW §6 tool list

Add a table mapping each DISA tool (ESS/ACAS/ESPS/Ecosystem/DITPR/eMASS/CMRS/GIAP/SNAP/PPSM/STIG Viewer/WAF F5/IronPort/Splunk/TrueSight) to task areas and staff roles; include training/current version approach.

High

Security & Clearance Compliance (Section 6)

SOW §11.4 VAL/VAR/VTN specifics

Add explicit DISS processing to SMO DKABAA10 and SMO DKADAL; include VAR package contents and VTN content requirements; reiterate locked zip + password separate email.

High

Program Management (Section 5)

SOW §13(b) OCI

Add OCI Mitigation Plan commitment for CO approval; continuous OCI identification; 24-hour CO notification; flowdown.

High

Program Management (Section 5)

SOW §13(j) Whistleblower affirmation

Add compliance commitment and deliverable timing/format.

Medium

GFP Management subsection

SOW §12

Add MSR GFP listing fields (Make/Model/Serial/End Warranty/Barcode) and PIEE GFP module event reporting; annual and 30-days-before-expiration reporting.

High

After-Hours Support (Section 4)

SOW §6.18.6–6.18.7 specifics

Add: 1-week/month max rotation, flex-time for routine maintenance, 'up to three emergent situations if COR unavailable then notify ACORs by COB next business day'.

Medium

Task Area 5 narrative

TA5 deliverables

Make explicit A&A Documentation and SSP Documentation deliverables commitment for DB vulnerability analysis.

Medium

Period of Performance coverage

SOW §9 duty hours

Add explicit alignment to 7:00am–6:00pm EST primary coverage and staffing model.

Low-Medium