20240618_DRAFT_CACHQ_SOW.pdf

Contract #: TBD Version Date: 14 May 2024

Combined Arms Center Headquarters (CAC-HQ)

Statement of Work Wireless Network WIDS Survey and Design

SUMMARY:

The Fort Leavenworth Combined Arms Center (CAC) requires a facility wireless network system in order to meet changing technologies, mission requirements, regulatory guidance, and RMF security controls. Wireless network technologies would allow CAC the ability to complete their mission and collaborate throughout our facility with our laptops and Government cell phones. In addition, this capability would allow the CAC to meet the current STIG Benchmark for the Network Infrastructure Policy STIG: JIE-ICAN-107 Vul ID: V-59237, which states the requirement for continuous scanning and states “Interview the site AO. Determine if the scanning by a Wireless Intrusion Detection System (WIDS) is continuous or periodic. Verify that the ICAN's WIDS scanning system meets the following requirements:

For Continuous WIDS scanning:

• Verify the site has installed a continuous-scanning WIDS system.

• Verify the WIDS is set up to scan continuously 24 hours/day, 7 days/week to detect authorized and unauthorized activity.

• Verify the WIDS includes a location sensing protection scheme for authorized and unauthorized wireless devices.

For Periodic WIDS scanning:

• Verify that the AO has determined the frequency of the scans.

• Review the AO-approved wireless risk assessment.

If the radio frequency spectrum is not scanned periodically for unauthorized WLAN devices, this is a finding.

DoDI 8420.01 Paragraph 3.9. WLAN INSTRUSION DETECTION AND PREVENTION.

DoD Components must ensure a WIDS/WIPS is implemented that allows for monitoring of WLAN activity and the detection of WLAN-related policy violations on all unclassified and classified DoD wired and wireless LANs in accordance with the CSfC Campus WLAN CP, Intrusion Detection and Prevention System SRG, Network Infrastructure Policy STIG, and Paragraph 3.10.

DA PAM 25-2-9, paragraph 2-2. Wireless local area network requirements

d. All wired and wireless networks require the use of Wireless Intrusion Detection Systems (WIDS), capable of location detection of both authorized and unauthorized wireless devices. All systems will provide 24/7 continuous scanning and monitoring

DRAFT

(see para 2-1e). Appointed CAC and NEC personnel will respond to all WIDS alerts, maintain reports, and document actions taken. Maintain WIDS logs and documented actions for a minimum of 1 year. For incidents, the appointed CAC and NEC personnel will review the incoming event data, identify what type of activity is occurring, and determine if an anomalous event shall be treated as a reportable cyber event or incident. For further guidance on incident handling refer to Chairman of the Joint Chiefs of Staff Manual (CJCSM) 6510.01B.

REQUIREMENT:

The Government request a quote to perform a site survey to determine current conditions and provide a design for a wireless facility network. This survey and design will then be used for the installation requirement to meet future operations by installing NIPRNET DODIN wireless facility network and include WIDS monitoring capabilities. The design deliverable shall include identifying the equipment, warranty, training, and complete diagram for the RMF installation requirement. Controller to support 450 end users or more at CAC Fort Leavenworth. We have attached a building diagram for reference. Must meet Wifi 6E standards.

Must be IAW the ICAN Wireless standards with all security regulations and within RFM compliance for DoD. Listed below is a building square footage and wireless hardware that can be interchanged and submitted. No brand name required for the submission only salient characteristics. Must be TAA compliant and on the DISA APL.

Examples of items for use: Up to 150 AP's, 3,000 clients, equipment only, full turnkey contract with training.

Deliverable:

1. The Government requires a design utilizing current as-built drawings to specify quantity of equipment and equipment locations for a wireless facility network.

2. Bill of Material (BOM) for required equipment. Specifying brand name equipment is not necessary, the Government is requesting salient characteristics for required equipment.

Initial installation will cover approximately 21,000 square feet. Once the survey has been completed an additional solicitation will follow for the installation of the approved system.

The Contractor is responsible for performing the site survey while the facility is open, between the hours of 0700-1630 hrs. Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings.

U.S. Holidays: Work shall not be performed on U.S. federally recognized holidays occurring during the normal workweek unless otherwise directed by the Contracting Officer. When a U.S. holiday occurs on a Saturday or a Sunday, the holiday is observed on the preceding Friday or following Monday, respectively.

New Year’s Day January 1st M. L. King Memorial Day 3rd Monday in Jan Presidents Day 3rd Monday in February Memorial Day last Monday in May Juneteenth June 19th Independence Day July 4th Labor Day 1st Monday in September Columbus Day 2nd Monday in October Veteran’s Day November 11th Thanksgiving Day 4th Thursday in November Christmas Day December 25th

The contractor will not be issued access badges for the site survey and design. They will need to coordinate building access and escort with the designated point of contact for CAC HQ.

Location:

415 Sherman Ave Bldg #52, Fort Leavenworth, Kansas 66027.