02 SOW - 1305M2-22-Q-00486 - UAS Management System.pdf

STATEMENT OF WORK

UAS (Uncrewed Aircraft System) Fleet Management Application

1305M2-22-Q-00486

PURPOSE

OMAO’s UxS Operations Center (UxSOC), Uncrewed Aircraft Systems Division (UASD), located at the Aircraft Operations Center, Lakeland, FL, is seeking a comprehensive COTS UAS management software package.

The UAS Division is a leader in the Federal UAS community and partners with other Federal agencies such as the Department of Interior and the Department of Agriculture as well as academic institutions to include Kansas State University. Using both existing market research, standard requirement definitions for UAS management software and their own research and testing, OMAO has a definitive requirement to manage the UAS fleet, pilot currency, and for a fleet management solution

TECHNICAL REQUIREMENTS:.

NOAA UAS program assets include platforms of different types, sizes, operational complexity, manufacturing countries of origin, flight capabilities, and personnel with different platform qualifications with variable levels of specific platform experience.

The proposed software solution shall support efficient tracking of UAS lifecycle operations, pilot records, and maintenance management of UAS program assets. Particular technical requirements for a software-based enterprise UAS solution include, but are not limited to:

• Compatibility with desktop, notebook and mobile platforms

• Ability to collect and manage UAS fleet and personnel data (pilots licenses and training records)

• Dashboards for comprehensive viewing/monitoring of critical metrics, including flight hours, time to maintenance, sortie times, and pilot information

• Mapping interface for viewing assets spatially in context of navigation charts, weather data, etc.

• Capability to provide alerts regarding OEM parts and safety recommendations

• FAA compliant pilot and maintenance logs

• Detailed pilot certification status and alerts

• Reports on pilot, company, UAS, and maintenance information

• UAS maintenance readiness status, alerts, and reports

• System fleet data, including hours, cycles, and usage.

• Alerts regarding manufacturing component issues or failures and notifications when issues are detected

• Equipment warranty tracking

• Capability to export data for customized reporting

IT REQUIREMENTS:

• Must be hosted on a NOAA authorized GovCloud-FedRAMP certified vendor authorized at FISMA High Impact level.

• Compliance with Qualys Secure Sockets Layer (SSL) and web server configuration standards.

• Evidence of PCI compliance.

• All development shall be performed by United States citizens located in the United

States.

• All development staff shall have criminal background checks prior to employment.

• Firewalls implemented, access controls in place. Logging in place and monitored.

• Daily vulnerability scans and patching mitigations in place.

• Compliance with GovCloud host’s best practices with evidence of continuous monitoring in place.

• Continuous monitoring strategy required to ensure ongoing assurance of security requirement integrity.

o The vendor has agreed to OMAO performing regular and recurring web application scanning and will document details in a Memorandum of Agreement

(MOA)

• Application scanning on semi or annual basis.

• Must grade as “Low Impact” score on the FISMA Impact Level Determination (SP800-

60 Analysis and FIPS199 Categorization) and satisfy the following NIST SP 800-60, Volume II information types for Operators SaaS application.

o C.3.1.1 Facilities, Fleet, and Equipment Management Information Type Facilities, Fleet, and Equipment management involves the maintenance, administration, certification, and operation of office buildings, fleets, machinery, and other capital assets considered as possessions of the Federal government. Impacts to some information and information systems associated with facilities, fleet, and equipment management may affect the security of some key national assets (e.g., nuclear power plants, dams, and other government facilities). The following recommended provisional categorization of the facilities, fleet, and equipment management information type is particularly subject to change where critical infrastructure elements or key national assets are involved: Security Category = {(confidentiality, Low), (integrity, Low), (availability, Low)} o C.3.4.2 Inventory Control Information Type Inventory control refers to the tracking of information related to procured assets and resources with regards to quantity, quality, and location. The recommended security categorization for the inventory control information type is as follows: Security Category = o C.3.4.3 Logistics Management Information Type Logistics management involves the planning and tracking of personnel and their resources in relation to their availability and location. The recommended security categorization for the logistics management information type is as follows: Security Category = o D.13.1 Training and Employment Information Type Training and Employment includes programs of job or skill training, employment services and placement, and programs to promote the hiring of marginal, unemployed, or low-income workers. Additionally, training information can include special training for personnel involved in Federal government operations (e.g., astronaut training).

The recommended provisional categorization of the training and employment information type follows: 163 Security Category = {(confidentiality, Low), (integrity, Low), (availability, Low)}

PERFORMANCE SCHEDULE / DELIVERABLES:

Period Start date End date Base Period 10 May 2022 09 May 2023 Option I 10 May 2023 09 May 2024 Option II 10 May 2024 09 May 2025 Option III 10 May 2025 09 May 2026 Option IV 10 May 2026 09 May 2027

Deliverables:

- All licenses will be functional upon the date of delivery

- All software maintenance will be operational upon the date of award