1.1.4 Statement of Objectives--Disaster Satellite Contract Re-Compete.pdf

1 Department of Homeland Security

Federal Emergency Management Agency

FEMA Form 146

October 2023

STATEMENT OF OBJECTIVES

1. PURPOSE: The resulting task order on the General Services Administration (GSA) Commercial Complex SATCOM Solutions (CS3) Contract will continue the critical support for the Department of Homeland Security (DHS) Special Event Activity Rating (SEAR) Level I and II events and FEMA Operational Communications Response and Recovery missions. This contract will support the FEMA Disaster Emergency Communications (DEC) Division, DHS Protective Security Advisor (PSA) Program, FEMA Incident Management Assistance Teams (IMAT), FEMA Urban Search and Rescue (US&R), FEMA Disaster Emergency Support Team (DEST), and FEMA Individual Assistance (IA) programs with primary managed Geostationary Obit(GEO)Ku and secondary optional Low Earth Orbit (LEO)Ku/Ka/L and Medium Earth Orbit (MEO)Ku/Ka satellite services, and two government-owned, contractor operated Ku satellite ground entry points. LEO satellite services should include, but not limited to the following: Blackjack, Kuiper, OneWeb, and Starlink while MEO satellite services should include the O3b mPower satellite constellation. The primary consideration of LEO and MEO satellite services is geographical availability with low user (TCP) latency compared to GEO satellite services. Increase user data rates for LEO and MEO satellite services is a secondary, but important consideration. Offerors shall respond with a detailed Performance Work Statement (PWS) and documenting how the offeror will meet the requirements of the SOO.

2. SCOPE: The Government requires integrated Contingency Satellite Services using existing government-furnished satellite terminal equipment and two ground entry points. Services consist of the following: 1) Configuration, maintenance, management, and repair of two government-furnished ground entry points(GEP's); 2) Dedicated, non-preemptable (“private network”) Ka/Ku bandwidth;

3) the ability to surge contingency satellite services capability to rapidly support emerging/expanding disaster Response and Recovery missions; 4) Access to a 24x7x365 Time Division Multiple Access (TDMA) managed network with technical support, commercial Internet, and optional public phone service; 5) HVAC. UPS,generator maintenance; 6) Optional dedicated back-haul to a DHS point of presence (POP); 7) Optional redundant LEO/MEO services to increase bandwidth demand in critical recovery missions.

Vendor shall configure, maintain, manage, troubleshoot, and repair, as needed, these critical GEPs currently located in Emmitsburg, MD, and San Diego, CA. The Offeror shall provide documentation on all processes, schedules, response times, and personnel qualifications to support

2.1.1 through 2.1.6 below. Firm-fixed pricing shall be used.

2.1.1. Initial, routine, and as-needed configuration of software, firmware, and hardware necessary to support DEC Division operations, to include all changes effecting remote satellite management equipment.

2.1.2. Regular and critical emergency onsite and remote preventive maintenance of both GEPs and all associated software, firmware, and hardware.

2.1.3. Management of the GEPs to support DEC Division operations to include optimization of operational network(s), failover between the two sites, and implementation of severe weather protective measures.

2 Department of Homeland Security

FEMA Form 146

October 2023

2.1.4. Continuous monitoring and timely detection, troubleshooting, and repair of the GEPs and all associated software, firmware, and hardware.

2.1.5. Offeror shall provide a web Portal to analyze network and equipment usage and operations to recommend solutions to optimize network performance.

2.1.6. Technology refresh will be required during the life of this contract. This will require the purchase, installation, configuration, and management of relevant new equipment.

2.2. FEMA requires dedicated, non-preemptable Ka/Ku commercial satellite communications (SATCOM) bandwidth on an “always on” basis to support FEMA mission training, equipment testing, exercises, and operational responses. Services shall support the Continental United States (CONUS), Hawaii, Alaska, Puerto Rico, deep Pacific region including Guam, and the United States (U.S.) Virgin Islands (“50-state” network).

2.3. FEMA requires the ability to surge contingency satellite services to support short-notice and no-notice disaster response operations. Specific requirements of surge services are included in 2.3.1 through 2.3.3 below. The offeror shall provide documentation as to the amount of preemptable and non-preemptable bandwidth they have will enter into agreements to have available. The offeror shall provide details as to the process and procedures to expand the network from steady state architecture to multiple levels of surge in support of critical operations. In addition, the details of the transition process to reduce the network in levels back to the steady-state network shall be provided. Finally, the Offeror shall provide a list of any and all satellites proposed to support this surge capability.

2.3.1. A guaranteed/reserved 50-state surge capacity for dedicated, non-preemptable commercial Ka/Ku bandwidth available within 24 hours of request for CONUS, Hawaii, Alaska, Puerto Rico, and the U.S. Virgin Islands.

2.3.2. Non-reserved 50-state capacity for commercial Ka/Ku bandwidth available within 48 hours of request for CONUS, Hawaii, Alaska, Puerto Rico, and the U.S. Virgin Islands.

2.3.3. Non-reserved capacity for dedicated, non-preemptable commercial Ka/Ku or C bandwidth available within 48 hours of request for the American Samoa, the Commonwealth of the Northern Marianas Islands, and Guam (“Pacific Area”)'.

Pacific Area bandwidth shall be quoted as a commercially-owned, commercially operated solution.

2.4. Commercial internet with a “global” IP scheme.

2.5. Access to managed network services supported by a Network Operations Center

(NOC)/Technical Assistance Center (TAC).

2.6. Optional services (see 4.9).

3. PERIOD AND PLACE OF PERFORMANCE: Period of performance is on/about 01 Aug 2024 – 31 July 2025 (base year), 01 Aug 2025 – 31 July 2026 (option year 1), 01 Aug 2026

– 31 July 2027 (option year 2), and 01 Aug 2027 – 31 July 2028 (option year 3). Place of Performance is CONUS plus Alaska, Hawaii, 3 Department of Homeland Security

FEMA Form 146

October 2023

Puerto Rico, U.S. Virgin Islands, American Samoa, Commonwealth of the Northern Marianas Islands, and Guam.

The base year includes a 30-day transition period. During this period, all preparations shall be completed to begin delivery of all services defined in this SOO on 01September 2024, without disrupting the delivery of services under the legacy contracts.

4. PERFORMANCE OBJECTIVES, GOALS, AND OUTCOMES:

4.1. Task 1 – Ground Entry Points. The offeror shall be responsible for configuration, maintenance, operation, and repair of DEC Division’s two GEPs. Additionally, the offeror shall provide engineering support to optimize network performance. Remote and onsite access to the GEPs necessary to execute this contract shall be coordinated between the government and the awardee. The offeror shall document in detail under Task 1 of the PWS how the offeror intends to meet the requirements under this task.

Details of DEC Division’s ground entry points are contained in Attachment A – Satellite

Ground Entry Points.

4.1.1. Configuration management. Initial, routine, and as-needed configuration of software, firmware, and hardware necessary to support DEC Division operations, to include all changes effecting remote satellite terminal equipment. This shall include connectivity between the GEPs and the offeror’s data center(s).

At contract start, FEMA shall be responsible for circuits supporting the GEPs.

Currently, there are four government-provided T-3's circuits, two at each GEP. At present, two circuit connects each GEP to the vendor’s primary/alternate NOC via private MPLS network while the other circuit provides public Internet access..

DEC Division may still require coordination with the awardee if Multi-Protocol Label Switching (MPLS) or Managed Trusted Internet Protocol Service (MTIPS) are implemented by FEMA. Optionally, the government may ask the awardee to manage the installation of MPLS or MTIPS circuits.

Initial configuration shall be completed such that services under this contract will begin 01 Aug 2024 without disruption to services under the expiring contract, which terminates on 31 July 2024. Access to government sites necessary to perform initial configuration during the transition period shall be coordinated by the government in consultation with the awardee.

4.1.2. Onsite and remote preventive maintenance. Regular and emergency onsite and remote preventive maintenance of both GEPs and all associated software, firmware, hardware, ancillary equipment, and any as-needed ground maintenance.

Regular onsite maintenance shall be completed every fourth month and no less than three times per year.

4.1.3. Operations management. Operational remote management of the GEPs 24x7x365 to support DEC Division operations to include optimization of operational network(s), failover between the two GEPs, and implementation of severe weather protective measures. GEPs may operate independently or as Primary/Alternate depending on mission needs.

4 Department of Homeland Security

FEMA Form 146

October 2023

4.1.4. Monitoring, detection, troubleshooting, and repair. Continuous monitoring and timely detection, troubleshooting, and repair of the GEPs and all associated software, firmware, and hardware.

4.1.4.1. Continuous remote monitoring shall be 24x7x365 and shall be capable of detecting faults, environment conditions, and network degradation, and alerting of appropriate staff in a timely manner. Faults, environmental condition alarm, and network degradation that impact DEC Division operations shall be reported, at a minimum, to the FEMA Contracting Officer (CO) and Contracting Officer Representative(s) (COR) via email within 15 minutes.

4.1.4.2. Engineering support for remote troubleshooting, if required, shall be available within 2 hours of initial fault detection, environmental condition alarm, or network degradation severe enough to degrade DEC Division operations.

4.1.4.3. If emergency onsite troubleshooting is required, the offeror shall have qualified personnel onsite within 12 hours of NETC GEP and 24 hours of Pt. Loma GEP initial fault detection, environmental condition alarm, or network degradation severe enough to degrade DEC Division operations.

4.1.4.4. If immediate onsite repair is not possible, the offeror shall propose a detailed technical solution to include all parts, materials, and labor required within 6 hours of initial fault detection, environmental condition alarm, or network degradation severe enough to degrade DEC Division operations. Repairs to equipment under warranty will be coordinated by the Contractor at no cost to the Government. Invoices for work not performed under warranty shall be itemized.

4.1.4.5. Upon receipt of all parts and materials under 4.1.4.4., the offeror shall have 12 hours to begin or coordinate onsite repair(s). Repair(s) shall be completed within 24 hours unless by prior agreement between the offeror and the CO.

4.1.5. Engineering support. The government may require engineering support to analyze network and equipment usage and operations, and to provide recommended solutions to optimize network performance to include but not limited to: firmware, software, hardware, settings, and configurations.

4.2. Task 2 – General Service and Capability.

4.2.1. Flexibility/Optimization (Network). The offeror shall show how they will structure and adjust the space segment for maximum operations efficiencies based on mission needs and performance requirements. Timeline for offeror to process and disseminate updated transmission plans is 8 hours from receipt of request. Changes in the space segment that require installation of new option

5 Department of Homeland Security

FEMA Form 146

October 2023 files for remote terminals must be approved by the CO(s) or COR(s) prior to implementation.

4.2.2. Terminal Flexibility/Optimization (Remote terminals). The offeror shall show how they will dynamically adjust remote terminal assignments, add remote terminals, and remove remote terminals to maximize operations efficiencies based on mission need. Timeline for offeror to process and disseminate updated option files is 2 hours from receipt of request.

4.2.3. Priority Configuration. The offeror shall show how they will, based on government direction, establish priority of remotes within the network to meet mission needs.

4.2.4. Network Monitoring and Reporting. The offeror shall show how they will collect and deliver near real-time monitoring, fault/incident/outage reporting, and information access across the entire FEMA Response and Recovery network to ensure effective and efficient operations, performance, and availability consistent with commercial best practice. The offeror's network monitoring capability should meet the following metrics at a minimum:

• Anomalies that may disrupt network services

• Satellite interference data

• Satellite spectrum data

• Bandwidth utilization

• All satellite network equipment under this contract

The offeror shall provide a contractor-owned and operated Network Operations Center (NOC) providing global 24x7x365 coordination, system health monitoring, and management of the Network, components, and subsystems.

The offeror shall also report faults/incidents/outages to the CO(s), the COR(s), the DEC Division Operations Officer, and the 6 FEMA MERS Operations Centers via email within 15 minutes. Updates of such information shall be provided to the Government upon change, upon request, or every two hours from initial report, until incident resolution. Upon incident resolution, the contractor shall provide a Summary of Action Report, summarizing the incident, corrective actions taken, and incident resolution, to the CO(s) and COR(s).

4.2.5. Government Read-only Monitoring. The offeror shall describe in their proposal their ability to provide to the government read-only access (e.g. CNO license) that allows the government to view both real-time and historical network and terminal technical performance.

4.2.6. Continuity of Operations Plan. The offeror shall describe in their proposal their continuity of operations plan (also known as a Business Continuity Plan) and failover timeline for partial or full restoration of capabilities should their

6 Department of Homeland Security

FEMA Form 146

October 2023 primary Data Center, Network Operations Center (if not co-located), or satellite transponder space be rendered unusable.

4.2.7. Remote terminal configuration. The offeror shall include any recommended/required software/firmware updates to GFE remotes required to optimize performance to include modulation and coding scheme.

4.3. Task 3 – Transponded Capacity Technical Performance:

4.3.1. Required Space Segment Quality. Required Space Segment Quality. The space segment is defined as the end-to-end path from the FEMA-operated satellite remote terminal to the contractor-provided public Internet connection and includes all associated equipment in between. The offeror shall include levels of proposed performance during operations to include, at a minimum, (1) Bit Error Rate, (2) Packet Loss, (3) Latency, and (4) Jitter. Offerors shall provide documented expertise managing performance metrics, measurements, thresholds, and documented procedures to maintain a responsive, 24x7x365 NOC providing configuration, technical assistance, training, and management of deployed Adaptive TDMA satellite systems in conjunction with the identified performance standards and indicators.

4.3.1.1. Link Budgets. Link budgets shall be submitted for each GEP.

Link budgets shall also be submitted for two remote terminals found in Attachment B – Remote Terminals—MCOV-112 and FCV-61— at five specific locations for the 50-state network: Anchorage, AK; Honolulu, HI;

Chicago, IL; Tampa, FL; and San Juan, PR.

Business case: During the disaster response to Typhoon Mawar in May 2023, the N-IMAT Red team utilized a Hawkeye III Lite terminal (see Attachment B) in Guam and had extreme difficulties establishing a solid network link with Horizons 3e , even though on paper this should have been possible. Offerors shall address this real-world business case by explaining what steps they would take to provide quality service to this terminal in the territory of Guam.

4.3.1.2. Bit Error Rates. The link margin must support a minimum bit error rate (BER) performance of 10E-8 with an availability of 99.5% or better, enhance link robustness, and counter the effects of rain fade and other propagation effects as well as antenna pointing errors and collateral degradations in accordance with IEEE engineering standards.

4.3.1.3. Packet Loss. Offeror shall identify the maximum allowable packet loss that impacts immediate operations and as measured over a 12-hour period to include notification thresholds. When the threshold is reached, the offeror shall implement troubleshooting procedures with the effected terminal(s) and notify the CO(s) and COR(s).

4.3.1.4. Latency. Offeror shall identify the maximum allowable latency that impacts immediate operations and as measured over a 12-hour period to include notification thresholds. Latency is measured from the remote

7 Department of Homeland Security

FEMA Form 146

October 2023 satellite terminal to entry into the public internet and includes any latency introduced by the offeror-provided internet service provider. End users of FEMA satellite services primarily connect to their home networks through Virtual Private Network (VPN) connections over public internet. When the latency threshold is reached, the offeror shall implement troubleshooting procedures and notify the CO(s) and COR(s).

4.3.1.5. Jitter. Offeror shall identify the maximum allowable jitter that impacts immediate operations and as measured over a 12-hour period to include notification thresholds. When the threshold is reached, the offeror shall implement troubleshooting procedures and notify the CO(s) and COR(s).

4.3.1.6. Interference/Jamming. The offeror shall describe their plan to meet performance requirements and minimize all interference and jamming that will have any negative impact on the network.

4.3.1.7. Orbit. The offeror’s service shall be comprised of station-kept satellites.

Inclined orbit satellites will not be accepted.

4.3.2. Required Space Segment Capacity. FEMA DEC Division requires an “always on” 50-state contingency satellite service. FEMA DEC Division also requires a guaranteed contingency 50-state satellite service surge capacity that can be available to FEMA within 24 hours of request. Finally, FEMA DEC Division requires non-reserved 50-state and separate Pacific Area satellite service surge capacity to be available within 48 hours of request. Having "best effort” is no longer a consideration in the Pacific Area. All capacity shall be quoted in megahertz (MHz). Offerors shall provide documented proof of ownership, lease agreement, or contingent agreement detailing available bandwidth to meet the (1) guaranteed/non-preemptable and (2) non-guaranteed/non-preemptable requirements. Contingent agreements must be in place at the time of task order award and remain throughout the life of the task order.

4.3.2.1. Always-On 50-state Space Segment Capacity. FEMA DEC Division requires support for a minimum of 25 terminals with always-on contingency satellite services using dedicated, non-preemptable GEO Ku-band space segment capacity covering CONUS, Hawaii, Alaska, Puerto Rico, and the U.S. Virgin Islands. The offeror shall state the minimum Ku-band space segment capacity to include time slot structure that can support this requirement. Bandwidth shall be contiguous within any proposed transponder(s). Offerors may propose a one- or two-satellite solution but the two GEPs must be capable of operating both independently and in a primary/alternate configuration.

4.3.2.2. Guaranteed/Reserved 50-state Surge Space Segment Capacity. FEMA DEC Division requires guaranteed/reserved, contingency satellite services using surge GEO Ku-band space segment capacity available within 24 hours of request covering CONUS, Hawaii, Alaska, Puerto Rico, and the U.S.

8 Department of Homeland Security

FEMA Form 146

October 2023

Virgin Islands. This capacity, once delivered, must be dedicated and non-preemptable. Addition of this capacity shall not require more than a change of option file for remote terminals. The offeror shall provide the total available Ku-band space segment capacity that can be guaranteed (if any), reservation fee (if any), and the cost of service for one week, one month, and 3 months per MHz. Guaranteed/Reserved Surge must be available to both GEPs.

4.3.2.3. Non-reserved 50-state Space Segment Capacity. FEMA DEC Division requires contingency satellite services using Ku-band space segment capacity available within 48 hours of request covering CONUS, Hawaii, Alaska, Puerto Rico, and the U.S. Virgin Islands. This capacity, once delivered, must be dedicated and non-preemptable. Additionally, this capacity shall not require more than a change of new option file, antenna pointing, and/or polarization for remote terminals. The GEPs may be operated independently to satisfy this requirement (point at more than one satellite). The offeror shall provide the cost of service for one week, one month, and 3 months per MHz.

4.3.2.4. Non-reserved Pacific Area Space Segment Capacity. FEMA DEC Division requires contingency satellite services within 48 hours of request covering American Samoa, the Commonwealth of the Northern Marianas Islands, and Guam. "Best effort" practices no longer acceptable in the Pacific area of operations. Ku-band is preferred but C-band is acceptable.

This capacity, once delivered, must be dedicated and non-preemptable.

This shall be a commercially-owned, commercially-operated solution.

The offeror shall provide the band and cost of service for one week, one month, and 3 months per MHz. The offeror shall identify and include any licensing fees required for C-band service.

4.3.3. Required Space Segment Coverage. Offerors shall provide EIRP and G/T coverage maps with clearly depicted and labeled contour lines. 100% of the coverage area requirement shall be met throughout the life of the task order.

Meeting the coverage area is defined as closing the satellite links and meeting the elevation angle requirements for all terminals operating within the defined coverage area. The minimum acceptable look angle is 12.5 degrees. Please address the business case in 4.3.1.1.

4.3.4. Quality of Service (QoS). The offeror shall show how they will provide the ability to provision terminals with end-to-end QoS from the remote terminal through the offeror's network. An example of FEMA QoS requirements is provided in Table 1 Below.

9 Department of Homeland Security

FEMA Form 146

October 2023

Table 1: Example of FEMA QoS values

Priority Description DSCP Value

1 Routing Protocol 48 2 Radio over Internet Protocol (RoIP) 40 3 Voice Payload 46 4 Video Conference (VTC) 34 5 Streaming Video 32 6 Call Signaling 24 7 Management (This is our management traffic (SSH) NOT

NMS traffic) NMS traffic should always be top priority within the iDirect network

4.3.5. Reliability/Availability. The offeror shall meet an operational availability for Transponder Bandwidth of 99.999% as specified over each 30-day period, calculated daily for the previous 30 days. The offeror shall include a Satellite Availability Report in their proposal covering the previous 30 days, the previous year, and the lifetime of the satellite. The offeror shall meet a link availability of 99.5% for Adaptative TDMA satellite links throughout the life of the contract.

4.3.6. Configuration Control. Once the network is established and validated, the awardee may not implement configuration changes or updates that could render terminals out of service without prior coordination and approval from the CO(s) or COR(s). This includes software, firmware, or hardware changes, IP changes, RF changes, and/or architecture changes, etc. Requests for changes shall be sent to the CO(s) and COR(s) via email with voice call follow-up to the Primary COR, Alternate COR, Primary CO, or alternate CO, respectively.

4.3.7. Transmission Plan. The awardee shall provide a transmission plan within 14 days of award. Timeline for the awardee to process and disseminate updated transmission plans is 8 hours from receipt of activation/deactivation of surge bandwidth. A copy of all such plans shall be provided to the CO(s) and COR(s).

4.3.7.1. General Information to be included in the transmission plan:

• Contractor Name/Logo

• Date of Transmission Plan

• Transmission Plan Revision with effective date(s)

• Contractor NOC Contact Info (phone number and email)

• Lease Begin and End Date

• Satellite(s) Name and Orbital Position included on lease

• Leased Bandwidth MHz

• Segmentation of Bandwidth capacity between in routes/out routes

10 Department of Homeland Security

FEMA Form 146

October 2023

4.4. Task 4 – Commercial Internet Access. The offeror shall provision business class commercial public internet access at a minimum of 100 Mbps. Vendor will connect this circuit to customer's security cameras for unmanned monitoring. This public internet connection shall be access controlled and protected with intrusion detection and intrusion prevention. This commercial internet access shall include 2048 public routable Internet Protocol (IP) addresses, commonly referred to as Classless Inter- Domain Routing (CIDR) 21, for the government terminals. These shall be configured using a “global” scheme such that IP addresses shall not change whether the GEPs are being operated independently or in Primary/Alternate mode, or whether the GEPs are pointing to the same or different satellites. Stated another way, remote terminals should never have to change router configurations or IPs. FEMA will provide an IP assignment matrix for implementation of the IP scopes for the terminals in the network.

This will be presented once the contractor identifies the address block(s) available.

The contractor shall provide any recommended changes to the IP assignment Matrix within 30 days of the task order award. Changes must be approved by the COR(s).

4.5. Task 5 – Network Operations Center (NOC)/Technical Assistance (TA) Support

Requirements. The offeror shall provide a 24x7x365 Network Operations Center and Technical Support system with skilled staff, consistent with industry best practices.

4.5.1. The NOC/TA shall be adequately staffed 24x7x365 to support FEMA DEC

Division’s mission requirements. Staff shall be technically proficient in accordance with industry best practice. Staff shall be English-speaking.

4.5.2. The offeror shall describe their NOC/TA procedures to include: system health monitoring; management of the DEC Division GEPs; management of the space segment; commissioning, activation, deactivation, reconfiguration, and prioritizing of remote terminals; event alerting and reporting; response time to calls and escalation procedure to the next tier for any problems encountered on the network. Engineering support must be available within two (2) hours of initial call, if required (during disaster operations some FEMA remote terminals support lifesaving and life-safety operations).

Note: NOC/TA responsiveness, technical proficiency, and delays in escalating to engineering support are most consistent sources of complaints with previous providers.

4.6. Task 6 – Staff Qualifications. The offeror shall provide the validated education, proficiencies, certifications, experience, and other qualifications for all staff intended to support this task order. Please do not include personal identifying information (i.e.

home addresses, personal phone numbers, etc.). Staff supporting this task order should be in accordance with industry best practice.

4.6.1. The GEPs physically reside within secure government facilities: the National

Emergency Training Center (NETC) in Emmitsburg, MD, and the Naval Information Warfare Center Pacific (NIWC) in San Diego, CA. Personnel visiting these sites must meet access requirements. Vendor is also responsible for sub-contractors to meet military base access as needed.

4.7. Task 7 – Information Assurance. The offeror shall document in their proposal their information assurance policies and practices. The offeror shall configure all contractor-managed equipment and provide all information necessary related to the GEPs to meet

11 Department of Homeland Security

FEMA Form 146

October 2023 the compliance requirements of the Federal Information Security Management Act of 2002 (FISMA) and DHS Sensitive Systems Policy Directive 4300 series. For detailed cybersecurity information, please refer to Attachment D-Safeguarding of Sensitive

Information and Attachment E- FEMA/DHS Additional Clauses. The contractor may be subject to Government and/or independent verification of compliance.

4.7.1. Minimum Security Controls. The offeror shall continually monitor and verify Information Assurance compliance so long as the task order is in effect. The contractor may be subject to Government and/or independent verification of compliance.

4.7.2. Electro Magnetic Interference (EMI)/Radio Frequency Interference (RFI) identification, characterization, and geo-location. All provided services shall be supported by EMI/RFI identification, characterization, and geo-location capability to support resolution of purposeful and accidental incidents of interference.

4.7.2.1. The offeror shall report the existence of EMI/RFI to the COR(s) and the MERS Operations Centers within 15 minutes of detection. Updates of such information shall be provided to the government upon change, upon request, or every two hours from initial report, until incident resolution.

4.7.2.2. Upon incident resolution, the offeror shall provide a Summary of Action Report, summarizing the incident, corrective actions taken, and incident resolution, to the CO(s), COR(s), and the MERS Operations Centers.

4.8. Task 8 – Reporting. The offeror shall document how they will provide incident reporting, disaster reporting, and a monthly report to the CO(s) and COR(s).

4.8.1. Incident Reporting. Incident reporting shall be done in accordance with all sections of the Statement of Objectives. At a minimum, any trouble tickets (or whichever incident reporting method that is used) shall be provided to the CO(s) and COR(s) by email upon creation, and a summary of the incident including all actions taken shall be provided by email when the incident is resolved.

4.8.2. Disaster Reporting. During an active disaster response, the offeror shall provide a daily report by email containing at a minimum:

• Significant events over the last 24 hours

• Ongoing issues

• Upstream and Downstream bandwidth utilization (traffic summary) by network segment (This is used to plan purchases of additional bandwidth or retire surge bandwidth that is no longer required)

4.8.3. Monthly Status Report. The offeror shall provide a monthly report by email in .pdf format containing at a minimum:

• Status of ground entry points

• Number of active terminals using the services leased

12 Department of Homeland Security

FEMA Form 146

October 2023

• Bandwidth usage

• Downtimes/outages (to include any relevant trouble ticket number, carrier, start and stop time of trouble event in Greenwich Mean Time (GMT), summary of event, and credit given to the customer)

• EMI/RFI Incidents regardless of whether downtime was incurred (to include any relevant trouble ticket number, carrier, start and stop time of incident in GMT, and summary of event)

• Performance requirements compliance

• Troubleshooting/customer assistance provided

• Planned changes

4.9. Task 9 – Optional Services

4.9.1. Optional Commercial Internet Access. The offeror shall price additional commercial public internet access in 100 Mbps increments and include in their price listing as an optional CLIN. This public internet connection shall be access controlled and protected with intrusion detection and intrusion prevention. The offeror shall describe in their proposal a method to detect and notify the government of high utilization rates of leased public internet bandwidth requiring the temporary purchase of additional bandwidth.

4.9.2. Optional Telephone Access. The offeror shall price DID phone numbers in 10 and 50 phone number increments and include in their price listing as an optional CLIN. This PSTN access shall use Cisco VoIP (SIP and/or SCCP) and analog protocol for Fax I STE. This shall enable remote terminals to connect to the PSTN and shall be provisioned for long distance and international dialing.

4.9.3. Optional Satellite Professional Engineering Support. The offeror shall provide optional additional Satellite Professional Engineering Support to the Division priced by the hour. Professional engineering support shall include strategic or preliminary planning for FEMA to deploy SATCOM services in support of various scenarios, support for new equipment testing and configurations, and network engineering planning.

4.9.4. Optional Terminals added to a LEO/MEO network. It is projected that FEMA will add Ka-band multi-satellite system antennas such as a Starlink or Kymeta terminal to a LEO constellation in the future. The offeror shall price adding 25 additional terminals to the network, which should include any fees or associated documentation.

4.9.5. Optional hardware and software CLINs. The offeror shall provide CLINs for the purchase of hardware and software necessary to maintain, provide spares, or upgrade the GEPs and remote terminals. These CLINs should be by individual class or type of equipment.

4.9.6. XipLink Annual Maintenance CLIN. FEMA DEC Division currently utilizes XipLink (1) XA-30K-R hub appliance and 207 XA-500C remotes to provide acceleration and encryption of FEMA Enterprise Network traffic. The offeror

13 Department of Homeland Security

FEMA Form 146

October 2023 shall price annual renewal of the maintenance and service agreement. See Attachment A for requirements.

HVAC and Generator Maintenance. FEMA DEC requires critical maintenance on HVAC and 30 KW generator equipment which includes, but not limited to: air filter replacement, system cleaning, and inspections. For any emergency repairs, performance will be evaluated on how quickly the vendors respond according to contract.

4.9.8. Optional Terrestrial Circuits. Nominally, FEMA will order terrestrial circuits through a separate, existing agency contract, and all circuits supporting the DEC Division GEPs will be government provided. However, DEC division seeks the option, as unfunded CLINs, to purchase terrestrial circuits through this contract vehicle. These circuits shall include:

4.9.8.1. An MPLS connection, at a minimum, between the two GEPs and two separate,redundant data center/NOC. Additional sites may be required.

4.9.8.2. A dedicated OneNet circuit, at a minimum, between each GEP to a DHS Point of Presence (POP). Each circuit shall be a minimum of 100 Mbps carrier Ethernet. For the purpose of proposals only, offerors can use the DHS POP at Stennis Space Center, Mississippi, and Clarksville, Virginia for planning purposes.

4.10. Other Pertinent Information or Special Considerations.

4.10.1. Engineering Change Quotes. In the event that a re-configuration of network services (DID's, IP's, Teleports, Datacenters, space segment, etc.) is required, a notification shall be provided to the government consisting of an engineering change proposal (ECP), including evidence of equivalent net present value (NPV). The ECP shall include link budgets, draft transmission plan, and a transition plan for the new services and shall not be implemented until approved by the CO. Requests will be sent to the CO(s) and COR(s).

4.10.2. Identification of Potential Conflicts of Interest. No relationships or activities exist that may cause a conflict of interest, prevent the contractor to objectively perform work, or present an unfair competitive advantage.

4.10.3. Identification of Non-Disclosure Requirements. No sensitive or proprietary information shall be made available to the awardee during contract or task order execution. The awardee shall not divulge mission-specific information to others, including other Government agencies, without prior approval from CO.

4.10.4. Government-Furnished Equipment (GFE). All GFE is listed and described in Attachment A – Satellite Ground Entry Points and Attachment B – Remote

Terminals.

4.10.5. Training. FEMA DEC Division may require optional iDirect Hub training at the technical and/or the operator level. Such training may be provided onsite or remote if possible.

5. SECURITY CONSIDERAIONS:

5.1. Security: All personnel require access to information up to the sensitive but unclassified, for official use only (FOUO) levels. Contractor must ensure contractor employees’ receive a favorably adjudicated public trust suitability prior to entry on duty

4.9.7

4.10.6 Additional Clauses. All additional clauses are listed and described in Attachment E- FEMA/DHS Additional Clauses

14 Department of Homeland Security

FEMA Form 146

October 2023

(EOD). All individuals will be U.S. citizens. The contractor shall follow the standards established within DHS and FEMA policy.

5.2. Unauthorized Disclosure Of Classified Or Unclassified Information:

5.2.1. Contractors and Subcontractors who are working on this contract shall receive Unauthorized Disclosure of Classified or Unclassified Information training.

5.2.1.1. Access to the training can be obtained at:

https://securityawareness.usalearning.gov/unauthorizedrefresher/index.htm

5.2.2. Send the certificate of completion to the FEMA Contracting Officer Representative no later than 30 calendar days after awarded contract. New employees entering the contract must receive the briefing within ten (10) business days of joining the contract.

5.3. OPSEC Training:

5.3.1. Contractors and Subcontractors who are working on this contract shall receive the OPSEC Awareness Brief.

5.3.1.1. Access to the briefing can be obtained at:

http://cdsetrain.dtic.mil/opsec

5.3.2. Send the certificate of completion to the FEMA Contracting Officer Representative no later than 30 calendar days after awarded contract. New employees entering the contract must receive the briefing within ten (10) business days of joining the contract.

5.4. Insider Threat Training:

5.4.1. Insider Threat training for Contractors can be found at:

http://cdsetrain.dtic.mil/itawareness/index.htm

5.4.2. Certificate of training is required for all cleared contractor employees who are working with classified or unclassified information. All certificates must be sent to the assigned FEMA Contracting Officer Representative, before the Contractor or Subcontractor is granted access to classified or unclassified information but no later than 30 calendar days after awarded contract. All cleared contractor personnel are required to recertify Insider Threat training annually thereafter. New employees entering the contract must receive the briefing within ten (10) business days of joining the contract.

5.5. For Official Use Only (FOUO) Information:

5.5.1. In accordance with DHS Management Directive 11042.1 contractors, consultants and others to whom access is granted will abide by 11042.1; DHS policy regarding the identification and safeguarding of sensitive but unclassified information originated within DHS. It also applies to other https://securityawareness.usalearning.gov/unauthorizedrefresher/index.htm http://cdsetrain.dtic.mil/opsec http://cdsetrain.dtic.mil/itawareness/index.htm

15 Department of Homeland Security

FEMA Form 146

October 2023 sensitive but unclassified information received by DHS from other government and non-governmental activities.

5.5.2. The contractor will:

5.5.2.1. Be aware of and comply with the safeguarding requirements for “For Official Use Only” (FOUO) information as outlined in this directive.

5.5.2.2. Participate in formal classroom or computer based training sessions presented to communicate the requirements for safeguarding FOUO and other sensitive but unclassified information.

5.5.2.3. Be aware that divulging information without proper authority could result in administrative or disciplinary action.

5.5.3. Contractors and Consultants shall execute a DHS Form 11000-6, Sensitive but Unclassified Information Non¬ Disclosure Agreement (NDA), as a condition of access to such information. Other individuals not assigned to or contractually obligated to DHS, but to whom access to information will be granted, may be requested to execute an NDA as determined by the applicable program manager. Execution of the NDA shall be effective upon date of the DHS Policy and not applied retroactively.

5.6. Unauthorized Disclosure of Classified or Unclassified Information:

5.6.1. Contractors and Subcontractors who are working on this contract shall receive the Unauthorized Disclosure of Classified or Unclassified Information training.

5.6.1.1. Access to the training can be obtained at:

https://securityawareness.usalearning.gov/unauthorizedrefresher/index.htm

5.6.2. Send the certificate of completion to the FEMA Contracting Officer

Representative no later than 30 calendar days after awarded contract. New employees entering the contract must receive the briefing within ten (10) business days of joining the contract.

5.7. Foreign Travel and Government-Issued Equipment

5.7.1. Per DHS and FEMA IT policy, FEMA employees and contractors are not authorized to take government-issued equipment, including cell phones, computers, or tablets such as iPads, outside of the United States regardless of the reason for travel. If government-issued equipment is required for official foreign travel, FEMA government employees may request a temporary loaner device through the Mobility Service Center Office of the Chief Information Officer, Service Center for the duration of their trip. FEMA contractors must contact their contracting officer’s representative (COR) for further guidance.

5.7.1.1. If your device is detected as operating outside of the United States and its territories it will be disabled, and your information will be forwarded to the Office of Professional Responsibility for review.

https://securityawareness.usalearning.gov/unauthorizedrefresher/index.htm

16 Department of Homeland Security

FEMA Form 146

October 2023

5.8. Background Investigations

5.8.1 All contractor personnel who require access to DHS or FEMA information systems, routine access to DHS or FEMA facilities, or access to sensitive information, including but not limited to Personally Identifiable Information (PII), shall be subject to a full background investigation commensurate with the level of the risk associated with the job function or work being performed. FEMA’s Personnel Security Division (PSD) will determine the risk designation for each contractor position by comparing the functions and duties of the position against those of a same or similar federal position, applying the same standard for evaluating the associated potential for impact on the integrity and efficiency of federal service.

5.9. Low Risk without Information System Access

5.9.1 Contractor personnel occupying positions or performing functions with a Low Risk designation and who do not require access to DHS or FEMA information systems may undergo a Tier 1 investigation with a credit check and must receive a favorable adjudication thereof from FEMA PSD prior to performing work under this contract.

(also reference Facility Access).

6.1. Moderate Risk

6.0. Low Risk with Information System Access

6.0.1 Contractor personnel occupying positions or performing functions with a Low Risk designation and who require access to DHS or FEMA information systems shall undergo a Tier 2 Suitability Background Investigation (T2) and must receive a favorable adjudication thereof from FEMA PSD prior to performing work under this contract.

6.2. High Risk

6.1.1 Contractor personnel occupying positions or performing functions with a Moderate Risk designation shall undergo a Tier 2 Suitability Background Investigation (T2) and must receive a favorable adjudication thereof from FEMA PSD prior to performing work under this contract.

6.3. Background Investigation Process

6.2.1 Contractor personnel occupying positions or performing functions with a High Risk designation shall undergo a Tier 4 Suitability Background Investigation (T4) and must receive a favorable adjudication thereof from FEMA PSD prior to performing work under this contract.

17 Department of Homeland Security

FEMA Form 146

October 2023

6.3.1 Contractor personnel occupying positions or performing functions with a High Risk designation shall undergo a Tier 4 Suitability Background Investigation (T4) and must receive a favorable adjudication thereof from FEMA PSD prior to performing work under this contract.

Contractor personnel who already have a favorably adjudicated background investigation, may be eligible to perform work under this contract without further processing by FEMA PSD if:

the investigation was completed within the last five years, it meets or exceeds the minimum requirement for the position they will occupy or functions they will perform on this contract, the contractor personnel have not had a break in employment since the prior favorable adjudication, and, FEMA PSD has verified the investigation and confirmed that no new derogatory information has been disclosed which may require a reinvestigation.

FEMA PSD will notify the COR of the names of the contractor personnel eligible to work based on prior, favorable adjudication. The COR will, in turn, notify the Contractor of the names of the favorably adjudicated contractor personnel, at which time the favorably adjudicated contractor personnel will be eligible to begin work under this contract.

For those contractor personnel who do not have an acceptable, prior, favorable adjudication or who otherwise require reinvestigation, FEMA PSD will issue an electronic notification via email directly to the contractor applicant/personnel that contains the following documents, which are incorporated into this contract by reference, along with a link to the Office of Personnel Management’s (OPM) Electronic Questionnaires for Investigation Processing (e-QIP) system and instructions for submitting the necessary information:

Standard Form 85P, “Questionnaire for Public Trust Positions” Optional Form 306, “Declaration for Federal Employment” SF 87, “Fingerprint Card” (2 copies) DHS Form 11000-6, “Non-Disclosure Agreement” DHS Form 11000-9, “Disclosure and Authorization Pertaining to Consumer Reports Pursuant to the Fair Credit Reporting Act”

FEMA PSD will only accept complete packages consisting of all of the above document and Standard Form 85P, which must be completed electronically through the Office of Personnel Management’s e-QIP system. The Contractor is responsible for ensuring that all contractor personnel timely and properly submit all required background information.

18 Department of Homeland Security

FEMA Form 146

October 2023

Once contractor personnel have properly submitted the complete package of all required background information, FEMA’s Personnel Security Division, at its sole discretion, may grant contractor personnel temporary eligibility to perform work under this contract prior to completion of the full background investigation if the Personnel Security Division’s initial review of the contractor personnel’s background information reveals no issues of concern. In such cases, FEMA’s Personnel Security Division will provide notice of such temporary eligibility to the COR who will then notify the Prime Contractor, at which time the identified contractor personnel will be temporarily eligible to begin work under this contract. Neither the Prime Contractor nor the contractor personnel has any right to such a grant of temporary eligibility. The grant of such temporary eligibility shall not be considered as assurance that the contactor personnel will remain eligible to perform work under this contract upon completion of and final adjudication of the full background investigation.

Upon favorable adjudication of the full background investigation, FEMA’s Personnel Security Division will update the contractor personnel’s security file and take no further action. In any instance where the final adjudication results in an unfavorable determination FEMA’s Personnel Security Division will notify the contractor personnel directly, in writing, of the decision and will provide the COR with the name(s) of the contractor personnel whose adjudication was unfavorable. The COR will then forward that information to the Contractor. Contractor personnel who receive an unfavorable adjudication shall be ineligible to perform work under this contract. Unfavorable adjudications are final and not subject to review or appeal.

6.4. Continued Eligibility and Reinvestigation

6.4.1 Eligibility determinations based on a Low Risk T1, Moderate Risk T2S or High Risk T4 are valid for five years from the date that the investigation was completed and closed. Contractor personnel required to undergo a background investigation to perform work under this contract shall be ineligible to perform work under this contract upon the expiration the background investigation unless and until the contractor personnel have undergone a reinvestigation and FEMA’s Personnel Security Division has renewed their eligibility to perform work under this contract.

6.5. Exclusion by Contracting Officer

6.5.1 The Contracting Officer, independent of FEMA’s Personnel Security Division, may direct the Contractor be excluded from working on this contract.