A14_MR_-_Attachment_3_-_RFI_SOW_-_TAK_I_Hosting_and_aaS_Draft_1.docx

Attachment 3 – RFI SOW Department of the Interior (DOI), Office of Wildland Fire (OWF)

Statement of Work (SOW) Cloud Hosting and Technical Support of the Team Awareness Kit (TAK) Server

1. Introduction and Objective The Office of Wildland Fire (OWF) seeks to establish a cloud hosting and technical support environment for a Team Awareness Kit (TAK) Server with High Availability and High Reliability. The cloud environment must support up to 18,000 concurrent users while including secure and integrated user onboarding and identity management systems. The contractor will provide necessary cloud resources and technical support, ensuring that all components and services adhere to Federal Information Security Management Act (FISMA) High baselines, as well as pertinent NIST, FedRAMP High, and other relevant security and compliance requirements. The Government will retain responsibility for FISMA application controls and overall project management.

2. Scope of Services The Contractor shall:

· Cloud Hosting Architecture: Design and implement a secure cloud hosting solution for an enterprise-grade TAK Server 5.2 (or the latest version) capable of high availability and resilience for 18,000 concurrent users.

· Security Infrastructure: Maintain a security boundary that meets or exceeds FISMA High standards, including full encryption of data in transit and at rest, multi-factor authentication, and continuous monitoring aligned with NIST 800-53 Rev 5 controls.

· Control Implementation Statements: Develop detailed control implementation statements for all applicable NIST 800-53 Rev 5 security and privacy controls, articulating the implementation, monitoring, and validation in the TAK environment.

· Configuration Baseline: Establish, document, and maintain a secure configuration baseline for all TAK Server components, adhering to DISA STIGs, CIS Benchmarks, or equivalent best practices.

· Identity and Access Management (IAM): Provide a robust, policy-driven IAM solution integrated with the TAK environment to manage user lifecycle, onboarding, offboarding, and role-based access.

· Integration with Government Assets: Ensure integration with Government-furnished equipment and networks, clarifying security control responsibilities.

· Support Model Development: Implement a comprehensive operational support model, including Tier 2/3 technical support for incident response, routine maintenance, and patch management.

· Documentation and Reporting: Deliver detailed system documentation and ongoing compliance reporting consistent with FISMA and NIST requirements.

3. Functional and Technical Requirements

· Performance: The TAK Server solution must manage the ingestion, processing, and dissemination of streaming situational awareness information to 18,000 concurrent users with sub-second latency for critical updates.

· Scaling Capabilities: Automated scaling capabilities must handle operational spikes without service degradation.

· Integrated Identity Management: The IAM system must be fully integrated with the TAK Server for managing user attributes and permissions while adhering to FISMA High standards.

· Authentication Controls: Control mechanisms must support CAC/PIV, multi-factor authentication, and align with Government Identity, Credential, and Access Management (ICAM) directives.

· Threat Detection: Continuous diagnostics and mitigation tools must provide real-time threat detection, logging, and incident response.

· Data Management: Implement full data lifecycle management with audit trails, versioning, and secure storage to comply with DOI retention policies.

· Backup and Disaster Recovery: Provide backup and disaster recovery solutions with defined recovery time and point objectives.

· Interoperability Assurance: Ensure integration with on-premises and cloud-hosted geospatial data feeds, external sensors, and TAK-enabled devices.

· Standard Compliance: Maintain open standards compliance for compatibility with various TAK clients, plug-ins, and associated services.

· Service Level Agreement: Ensure 99.9% uptime SLA for TAK Server and IAM services during mission-critical operations, with defined response and resolution times for support tickets.

4. Project Management and Delivery Project Planning and Onboarding

· Kickoff Meeting: Conduct a kickoff meeting within 10 business days of contract award to establish project goals and outlines.

· Project Management Plan: Provide a comprehensive project management plan covering schedule, risk management, and communications.

Milestones and Deliverables

· Phase 1: Architecture Design & Security Review (System Security Plan, Authority to Operate approach, initial compliance check).

· Phase 2: System Implementation & Configuration (TAK Server, IAM integration, performance scaling tests, initial user training).

· Phase 3: Security Authorization & Operational Acceptance (penetration tests, final ATO, and go-live).

· Phase 4: Ongoing Operations & Maintenance (continuous monitoring, periodic compliance reports, and system enhancements).

Reporting Requirements

· Monthly Status Reports: Provide monthly updates on system health, performance, security posture, and compliance.

· Quarterly Risk Assessments: Conduct quarterly reviews of risk assessments and recommendations for continuous improvement.

5. Government-Furnished Information and Services The OWF will provide relevant policies, reference architectures, and security control baselines. The OWF will facilitate required network connections and provide necessary credentials for integration with existing identity management systems.

6. Acceptance Criteria

· Delivery and approval of all required documentation.

· Successful completion of performance and security testing.

· Achievement and maintenance of an Authorization to Operate (ATO) at FISMA High levels.

· Demonstrable alignment with contractually defined SLAs and specified user adoption metrics.

Appendix (For Option A and B)

1. TAK Server Source Code: TAK Server Source Code

2. TAK Server Configuration Guide: TAK Server Configuration Guide

3. TAK Server Interconnect (Requested Service is in Green Outline) image1.png