2__SON_1305M225Q0075.pdf

Universal Sonar Mount Replacement for the NRTs Statement of Need 1305M225Q0075

1.0 Objectives

The National Oceanic and Atmospheric Administration’s (NOAA) Navigation Response Branch (NRB) requires the procurement of replacement Universal Sonar Mount (USM) sonar mounting hardware for hydrographic survey and emergency response work.

• Background: NOAA’s Navigation Response Branch (NRB) is responsible for the operation mobile hydrographic surveying units known as the Navigation Response Teams (NRTs). These teams deploy to coastal areas to conduct hydrographic surveys for post severe weather events and routine nautical charting surveys. These surveys include searching for and identifying obstructions that may impede maritime operations and commerce. NRB’s currently owned USM sonar mounting hardware installed on the Navigation Response Team’s (NRT) survey vessels is nearing its end-of-life, and requires replacement. The sonar data collected by the NRTs is used to “clean up” NOAA’s navigational charts by confirming or disproving charted wrecks, rocks and other obstructions. The aging USM equipment is in need of replacement so the NRTs can continue their emergency response and nautical charting missions.

• Scope: This procurement is for the replacement of the USM sonar mounting systems and one replacement foil pole and clamp kit with transducer and IMU sensor plates:

o 6 – Hightower Sonar Mount systems with hinge and gear drive option o 1 – Indexed Foil Pole clamps kit, 4” Foil Pole (72’ length), Kongsberg EM2040C transducer mounting plate w/ SVS, Applanix IMU IP68 Mounting Plate o Any associated shipping or packing fees for safe arrival at destination

• Compatibility: The USM equipment listed in the ‘Scope’ section above must be 100% compatible with the currently used welded mounting plates installed on the NRTs. These welded plates are permanently affixed to the gunwales of the NRTs and are specifically designed to accept USM sonar mounting equipment only.

2.0 Technical Requirements

2.1 General Specifications -

• Sonar Mount – Part Number SD-540-02-13-B, Hightower mount, Hinge option, 13” X-Axis pole length

• Gear Drive – Part Number SD-540-8100, Gear Drive Kit for Hightower sonar mount

• Clamps – Part Number 540-F40-9019-I, Hightower 4.0” Foil Clamp Assembly, Indexed

• Pole – Part Number 800-F40-9072, Foil Pole, 4.0” Foil, 72” length

• Transducer Plate – Part Number 500-106-9032-R1, Kongsberg EM2040C with SVS Assembly

• IMU Sensor Plate – Part Number 500-105-9006, Applanix IP68 IMU Sensor

2.2 Other Requirements

• Warranty o Provide manufacturer’s warranty on upgraded items of at least 12 months from the date of government acceptance.

3.0 Delivery

• Vendor shall deliver the USM equipment to the following addresses:

o Two (2) SD-540-02-13-B, two (2) SD-540-8100, one (1) 540-F40-

9019-I, one (1) 800-F40-9072, one (1) 500-106-9032-R1, one (1) 500-105-9006 to the following destination:

LTJG Rob Sobelsohn NOAA NRT Gulfport 836 N Harbor Road Gulfport, MS 39501 o One (1) SD-540-02-13-B and one (1) SD-540-8100 to each of the following destinations:

LTJG Ashley Howell - NRT Seattle NOAA - Western Regional Center 7600 Sand Point Way NE

SEATTLE, WA 98115

LT Carly Robbins - NOAA NRT PAX Naval Air Station Patuxent River C/O West Basin Marina 46970 Bauhof Rd, Patuxent River, MD 20670

LT Mark Meadows NRT New London

1 CHELSEA ST

C/O USCG RDC

NEW LONDON, CT 06320

James Kirkpatrick NRT Fernandina Beach 324 N 15th St Fernandina Beach, FL 32034

4.0 IT Security Requirements

The Assessment and Authorization (A&A) requirements of Clause 48 CFR 1352.239-72 do not apply, and a Security Accreditation Package is not required.

The following is a list of relevant information the Department of Commerce (DOC) Information Technology (IT) Security takes into consideration when assessing the security requirements and risk for procuring IT products and services.

a) The Contractor shall only supply Information Technology (e.g., hardware, software, firmware, etc.) and/or product license and shall not require the use of any contractor owned equipment. The contractor will not have remote access to any government owned equipment. The Contractor shall ensure the acquiring Information Technology provided disables “phone home” or similar capabilities.

b) Product support and supporting documentation allows for the sanitization of the acquiring Information Technology and/or product license upon the disposal of the product. Product shall allow the use one of the approved methods for secure destruction of data/information including unclassified but sensitive information.

Approved methods include NIST Special Publications 800-88 Guidelines for Media Sanitization (https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800- 88r1.pdf) or the National Security Agency in the Media Destruction Guidance (https://www.nsa.gov/Resources/Media-Destruction-Guidance/).

c) The acquiring information technology is engineered for trustworthy and security that is consistent with the engineering-based trustworthy secure solutions as outlined in NIST Special Publication 800-160 Version 1, Revision 1 Engineering Trustworthy Secure Systems (https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-

160v1r1.pdf) and NIST Special Publication 800-160, Volume 2, Revision 1 Developing Cyber-Resilient Systems: A Systems Security Engineering Approach (https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-160v2r1.pdf).

d) The acquiring information technology complies with Office of Management and Budget Memorandum M-07-18 Ensuring New Acquisitions Include Common Security Configurations and the Federal Acquisitions Regulations (FAR) 39.101(d) regulations require NIST common security configuration checklists including United States Government Configuration Baseline (USGCB) initiative. More information is available at National Checklist Program (NCP), (https://nvd.nist.gov/ncp/repository), the U.S.

government repository of publicly available security checklists (or benchmarks) that provide detailed low-level guidance on setting the security configuration of operating systems and applications. The acquiring information technology considers the following requirements:

i. Software procured meets the standard installation, operation, maintenance, updates and/or patching of software shall not alter the configuration settings from the approved USGCB/other secure configuration.

ii. Applications designed for normal end users run in the standard user context without elevated system administration privileges.

iii. Supporting documentation or reference(s) that describes the security capabilities, the design and development processes and the testing and evaluation procedures used by the product or services being provided for this acquisition.

iv. Supporting documentation or reference(s) that describes all product or service updates and enhancements as they are implemented. The product or service supporting documentation could be the user and system administrator guides, which is documents the functional properties of the security controls employed to permit the analysis and testing of the security controls.

e) The acquiring information technology complies with the Homeland Security Presidential Directive 12 (HSPD-12) Policy for a Common Identification Standard for Federal Employees and Contractors requirements from FAR 4.1302 stating: (a) In order to comply with Federal Information Processing Standard (FIPS) 201-3 Personal Identity Verification (PIV) of Federal Employees and Contractors (https://doi.org/10.6028/NIST.FIPS.201-3), agencies must purchase only approved personal identity verification products and services, (b) Agencies may acquire the approved products and services from the GSA, Federal Supply Schedule 70, Special Item Number (SIN) 132-62, HSPD-12 Product and Service Components, in accordance with ordering procedures outlined in FAR Subpart 8.4.

f) The acquiring information technology complies with Internet Protocol Version 6 (IPv6) requirements from FAR part 11.002 requirements that state the agency Chief Information Officer can waive this requirement provided the acquisition requirements documents the appropriate technical capabilities defined in the USGv6 Profile available in the NIST Special Publication (SP) 500-267 (https://www.nist.gov/programs-projects/usgv6-program) and the corresponding declarations of conformance. To meet this requirement each DOC acquisition of IP protocol technology must express requirements for IPv6 capabilities in terms of the USGv6 Profile (i.e., using the USGV6 Capabilities Check List) and vendors must be required to document their product’s support of the requested capabilities through the USGv6 test program (https://www.nist.gov/programs-projects/usgv6-program/usgv6-revision-1) using the USGv6 Suppliers Declaration of Conformity.