20220118_SABRE SOO Draft.pdf

// Unclassified //

Secret and Below Releasable Environment (SABRE)

Integration and Operationalization

DRAFT STATEMENT OF OBJECTIVES (SOO)

18 January 2022

1 BACKGROUND

The Secretary of the Air Force is designated, via DoD Directive 5101.22E, as the DoD Executive Agent (EA) for the DoD Mission Partner Environment (MPE). The Secretary of the Air Force, Concepts, Development, and Management, Mission Partner Capabilities Office (SAF/CDMX) established the Mission Partner Capabilities Office (MPCO) to execute the DoD MPE responsibilities and functions in accordance with law, regulation, policy, as outlined in DoDD 5101.22E. Following MPCO analysis of the 55+ MPE enclaves and the individual support structures associated with each MPE enclave, MCPO made the determination to consolidate the MPE enclaves and support structures into one globally available MPE Information Technology environment supporting Secret and Below Releasable information and services.

2. PURPOSE

The Government has a requirement to integrate and operationalize a previously developed prototype, referred to as the Secret and Below Releasable Environment (SABRE) v1.0, into a fully functional DoD Zero Trust Architecture (ZTA). The DoD ZTA is a Data Centric Security Access Control enabled Cloud environment capable of supporting Warfighter collaboration with US and foreign Mission Partners.

SABRE is the DoD Cloud based instantiation of a Federated Mission Networking compliant MPE enterprise. SABRE is built on a Zero Trust architecture and utilizes Identity, Credential and Access Management (ICAM) and data labelling/tagging to achieve logical separation of data managed through enterprise level Data Centric Security based access controls.

The Government requires expertise in engineering, transition, implementation, and integration of requirements to operationalize SABRE and its federation requirements moving towards service maturity, which is anticipated in approximately 2-3 years. The Government requires support in executing specified requirements relevant to this Cloud infrastructure and operational environment, and supporting engagements between Government stakeholders.

3. Scope

Currently the MPCO Architecture and Engineering Division is developing the initial SABRE Cloud baseline under a separate Capability Discovery and Innovation contract in coordination with the National Security Agency (NSA) and USCYBERCOM. This effort is being accomplished using Agile SAFe V5 and DevSecOps frameworks.

The scope of work asked for under this effort will transition a prototype, initially known as SABRE v1.0, developed under the Capability Discovery and Innovation contract to an operational environment by installing it in designated data centers and performing the necessary engineering to integrate it with DISA and commercial transport capabilities, a specific cross domain solution (the trusted networking environment), points of presence/access points and support the necessary Risk Management

Framework (RMF) actions to achieve full accreditation of SABRE v1.0 or a future version. In addition, work may include the design, development and installation of a point of presence/access point as required to interconnect existing infrastructure to SABRE V1.0. The following provides additional specificity:

• The Government has a requirement to transition SABRE from a prototype to 24/7 operations.

• The Government also has a requirement to deploy to operation of a Virtual Private Cloud (VPC) to implement classified MPE network; and deployment planning/execution activities and site installations. The anticipated services include:

o Migration of existing network based MPE capabilities into the operational SABRE Cloud o Build of SABRE inside of designated data centers capable of supporting the required

Cloud infrastructure and on-premise data center integration activities o Integration of SABRE’s architecture with the MPCO’s Trusted Network Environment®

(TNE) Cross Domain Solution (CDS). The result of this effort will be a multimode Virtual Private Cloud which supports rapid human to human and NPE collaboration and data exchange between the US and its partners.

The Government may require contractor support with all related network engineering efforts for deployment planning and execution approvals for the SABRE Cloud. The Contractor shall support end users at CCMD and other foreseeable deployment locations in Network Operations and Security Operations functions through a centralized NOSC location to be determined by MPCO.

4. REQUIRED RESULTS AND PERFORMANCE OBJECTIVES

MPCO requires expertise and support with MPE deployment, operation, cybersecurity defensive operations, and ongoing modernization, management, integration and evolution of SABRE. Including the following:

1. Perform all engineering planning, design, execution activities as part of a unified Agile SAFe

V5 DEVSECOPS.

2. Procure hardware/software if applicable to operationalize SABRE

3. Integrate SABRE into the MPE ZTA Cloud.

4. Plan the migration of Government identified extant MPE network capabilities into the MPE ZTA Cloud. This does not include engineering for an extant capability to perform inside SABRE, but the planning for and execution of elements such as: movement of users and data, tagging and labelling of information.

5. Perform local on-site installations into designated data centers as well as on-going acquisition engineering and operations (remote/in-person as required). Potential sites include Hawaii, Florida, Europe, and the National Capital Region (NCR).

6. Develop SABRE capability recommendations and perform integration activities in a rapid manner applying SAFe agile approaches. The contractor may be asked to assist MPCO in analyzing core services (including email, web services (file share), and chat), other mission applications, and cross domain security (CDS) capabilities, as well as overall enterprise security parameters to assist MPCO in the ongoing grooming of the SABRE Feature backlog.

7. Include the provision of a DevSecOps environment in the deployment of SABRE to support Agile development activities, to include developmental and preproduction test, and validation and verification activities, to ensure zero defects prior to version release to the SABRE operational baseline.

8. Coordinate with the Dreamport development team for the training of contractor personnel in the various applications that make up the SABRE technical baseline to ensure the contractor teams ability to properly manage the 24/7 functions required in the SABRE Global Network, Operations and Security Center (GNOSC) prior to those individuals assuming NOSC duties.

9. Develop a plan to transition to sustainment

10. Participate in MPCO’s Systems Engineering (SE) forums and provide value-added recommendations to the management of the MPE Portfolio and Feature Prioritization.

11. Establish Standard Operating Procedures (SOP) & accreditation artifacts for SABRE’s Risk Management Framework initiatives to ensure a fully functional and hardened enterprise baseline is continuously achieved in the operational nodes.

12. Provide analysis of federation techniques for potential use to connect SABRE to various existing operational and test US and Mission Partner networks.

13. Evaluate and recommend data centric solutions for ongoing SABRE requirements and identify new (Federated Mission Network) FMN requirements for inclusion into the developmental feature backlog.

14. Develop DevSecOps release plan per Agile SAFe.

15. Identify the core Acquisition Programming Interface (APIs) required to support secure execution of existing and new Command and Control and Intelligence mission applications in the SABRE. While the modification of these applications is the responsibility of the identified program of record office for each, the Government may require contractor assistance in maintaining awareness of the complexity and associated timelines for completion of each mission application effort and execute compliance testing with Coalition Interoperability Assurance and Validation (CIAV) and other authorities identified by the Government prior to their being permitted to execute natively within the SABRE environment.

16. Conduct formal capability-validation testing events to verify the functionality and flexibility of the SABRE Cloud against Government dictated system requirements to be provided to the Contractor from the MPCO Architecture and Engineering Division.

17. Execute SABRE Virtual Private Cloud deployment to existing On–Premise DoD Data Centers as directed by MPCO. Team with MPCO to plan and implement a hybrid cloud architecture solution once Commercial classified Cloud offerings come into alignment with DoD ZT reference architecture (RA) concepts for data protection.

18. Support MPCO to establish Tactics, Techniques and Procedures (TTPs) for transition to operations and for migration of existing net-centric MPE capabilities into the SABRE Cloud as additional On-Prem VPCs are approved by the DoD MPE Executive Steering Committee (ESC) and Senior Leader Board (SLB). Network to Cloud migration could include more than 55 separate warfighting networks.

19. Establish and operate an MPE future state GNOSC to support 24/7 operations beginning with the stand-up of the SABRE Cloud core node in May/June of 2022 and ensure the NOSC is capable of supporting the growth in operations as additional On-Prem Virtual Private Cloud Nodes are added to the SABRE Cloud over time.

• This will include the requirement to Operate, Maintain, Sustain and Defend the SABRE Cloud on a 24/7 basis. The contractor may be asked to collaborate with the Government and the current contractor team developing V1.0 of SABRE to ensure the contractor personnel identified to perform this task are fully trained prior to assuming these duties in the full design, integration and software configurations as well as all procedures required to maintain the SABRE ZT infrastructure. Patching and Stigs and the DEVSECOPS processes that must be followed IAW the overall MPCO approved Agile SAFe processes will be part of this training.

20. Conduct site surveys, as required by and in conjunction with MPCO, to existing (or new) DoD datacenters to evaluate for power, space, cooling, security, etc.

21. Assist MPCO and provide a lead POC (alternate is also preferred) for each SABRE On Prem VPC Node for each install (includes assisting with security/connectivity).

22. Prepare required documentation for site accreditation activities required for physical deployments.

23. Maintain SABRE’s initial Integrated Master Schedule (IMS) and once established, Agile Technical Roadmap, Epic, Capability, Feature and User Story backlogs to include efforts mentioned in this PWS. Additionally, maintain significant program milestones including, but not limited to: development work, site installs, significant testing events, cloud/network connectivity, testing events/exercises/demos and critical SABRE dependencies.

24. Provide MPCO recommendations for a Model Based Systems Engineering (MBSE) capability to support the Information Technology Service Management (ITSM) based Lifecycle Management and Continuous Improvement activities and the resources required to equip and staff this capability within MPCO.

25. Identify accelerated paths to field continuous and incremental capabilities in response to customers’ mission needs in accordance with the Agile processes. For example, provide recommendations to MPCO where synergies can be gained, schedules can be accelerated and new technical solutions should be explored based on mapping of all emerging FMN spiral specifications and other MPE requirements, working with Mission Application Program of Record offices to support their integration into the SABRE ZT DCS infrastructure IAW the identified DoD implementation priorities, plan and execute the assessment of Mission Partner federation to the SABRE enterprise IAW the identified DoD priorities.

5. Period of Performance

a. Up to 36 months

6. Constraints

a. Underfunded requirement

b. Contractor will need to work collaboratively with other contractors

c. Performance required at Contractor Facility and Government Installations

d. Agile SAFe experience and expertise required

e. Aggressive schedule to achieving goals