Attachment 0001 - INOC PWS - High Level.pdf

Integrated Network Operations Center Performance Work Statement (Top level)

Request For Information October 5, 2020

1. Introduction/Background

1.1. Background

1.1.1 Sustainment Tactical Network (STN): Product Lead – Unified Network Capabilities and Integration (PdL UNCI) STN provides DoD users a network and network support to access DoD/Army Sustainment Information/Management Support Systems (Global Combat Support System - Army, Conditioned Based Maintenance, AirCraft Notebook, Transportation Coordinators – Automated Information for Movement System, General Fund Enterprise Business System, Integrated Personnel and Pay System – Army, etc.) from anywhere around the world.

1.1.2 Users supported: The Sustainment Tactical Network (STN) supports about 20,000 worldwide users accessing DoD sustainment/support systems via about 3,700 VSATs to a commercial SATCOM network or links at DoD Tactical Network locations (such as RHNs) using Ku, Ka or X bands. The commercial network is accessed via 15 satellites with six landing sites. Landing sites are linked to DoD network via fiber to 2 NIPRNET access points. Users link to VSATs directly or through Combat service support Automated Information System Interface (CAISI) systems.

1.1.3. Commercial Satellite Network: The long-haul terrestrial interconnectivity, satellite bandwidth, and satellite teleport services are procured through Defense Information Systems Agency (DISA). Users access sustainment information/management support systems via this commercial satellite network. Future plans include supplementing the commercial SATCOM with use of DoD tactical network to access these systems.

1.1.4. Services provided: Voice, data, and video services are determined by mission/user requirements and currently include:

• Secure Internet Protocol (IP) Router Network (SIPRNET)

• Non-Secure IP Router Network (NIPRNET)

• Hosting Managed Services:

o Secure and Non-Secure Video Teleconferencing (VTC) o Microsoft domain email o Inherent in-network Managed Voice over IP (VoIP) Service o Secure and non-secure VoIP with Defense Switching Network (DSN) gateway access

1.1.5. Operational requirements/parameters: PdL UNCI efforts include all functions/process/operations to maintain/operate systems and the network from user devices (laptops, notebooks, etc) to the DoD network access points.

1.1.6. Satellite terminals: Satellite terminals supported include VSAT Hawkeye II and GATR Inflatable Satellite Antenna (ISA). PdL UNCI is currently in the acquisition process to purchase modernized terminals (beginning in FY24). There are a total of about 3,700 VSATs, with about 3,500 active VSATs on the network.

1.1.7. Combat service support Automated Information System Interface (CAISI): CAISI is a deployable Local Area Network (LAN) supporting logistics systems used over an area of support and provides Line of Sight(LOS)/relays to VSATs. There are about 29,500 CAISI devices in the Army inventory.

2.0 Objective:

2.1. Scope of functions: PdL UNCI plans to award a services contract supporting the STN which encompasses the following areas:

2.1.1 Network Operations of Sustainment Tactical Network (STN): Perform all functions required to maintain the operational availability of the network 24 x 7 by users accessing the system from locations around the world. Functions include system/network administration and ability to operate from a COOP site.

2.1.2. Help Desk: Provide a help desk accessible 24 x 7 by users around the world.

2.1.3. Technical Assistance: Provide technical leads to perform maintenance/analysis on issues/corrective actions required by users to access network at GWOT locations.

2.1.4. Security/Cyber Security: Perform security functions/maintain cyber security of network and implement cyber requirements to include directives/support to address ARCYBER.

2.1.5. Additional customers: Support other Army/DoD customers with access to/use of STN.

2.2. Objective for start of contract: Contract would be required to be fully operational to maintain network and all associated functions identified in the SOW (to include help desk and technical support) on or before March 11, 2022.

2.3. POP: It is anticipated contract will include a base year (March 11, 2022 to March 10, 2023) and four additional one year option periods.

2.4. Place of Performance

2.4.1. Contractor personnel supporting: Network Operations, Help Desk functions (24 x 7), and reimbursable customers using the STN will be located at Rock Island Arsenal (RIA), Illinois (Dept of Army facility);

2.4.2. Contractor personnel providing “on site” technical assistance will be located at Southwest Asia (SWA) locations and others based on potential future DoD/DA responses to Global War On Terror (GWOT).

3. Documents:

3.1. US Army Cyber Command (ARCYBER) network security standards (DoDI 8500.01)

3.2. DoDI 5000.XX “Cyber Security” (pending publication; previous ref DoDI 5000.02 encl 14 “Cybersecurity in the Defense Acquisition System”)

3.3. DoDI 5000.71 “Acquisition of IT”

3.4. RMF, NIST 800.37

4. Requirements:

4.1. Network Operations of Sustainment Tactical Network (STN):

4.1.1. Maintain 24 x 7 operational capability of Sustainment Tactical Network:

Provide access to Enterprise Information Systems (Global Combat Support System – Army, Conditioned Based Maintenance, AirCraft Notebook, Transportation Coordinators – Automated Information for Movement System, General Fund Enterprise Business System, Integrated Personnel and Pay System – Army, etc.) from user devices located around the world.

4.1.2. Manage network (System/Network Administration): Control access to network from user devices. Perform Network and System Administration. Provide Configuration Management & Documentation (to include hardware/software diagrams/location data). Incorporate physical/software updates/adjustments required to include requirements at 6 landing sites and 2 network access points (landing sites/access points based on another contract). Adjust network to address changes to Information systems accessed from STN users.

4.1.3. COOP site transfer/operations: Ability to transfer operations from primary site to government provided COOP site (location still to be determined). Contractor shall perform, at minimum, a semi-annually COOP exercise transferring operations to the government designated site that tests all the critical steps required to maintain operations. This includes transfer of contractor personnel to the COOP site during the exercise.

4.1.4. Surge Capability: Ability to respond to unexpected surge requirements with adequate numbers of qualified employees. STN is used by warfighters located around the world supporting military operations. Changes in operational tempo may result in an unexpected increase in workload. Contractor must possess ability to meet surge requirements.

4.1.5. Property Accountability. Contractor will maintain records/detailed records to document property – specific items (manufacturer/product number/serial number), locations of items (specific address to include building/room), etc.

4.1.6. Host Nation Agreements – Satellite Bandwidth: Contractor will coordinate/obtain HNA support services that provide the ability of PdM WESS and support customer’s systems to operate satellite terminals.

4.2. Help Desk:

4.2.1. Coverage: Contractor will provide a help desk with 24 x 7 coverage to respond to user issues/errors/challenges with accessing/using/operations of the STN. Historically the help desk responds to approx. 68 calls per day (78 call per day Mon-Fri) and 125 emails, with an average time to respond of about 20 minutes.

4.2.2. Trouble Ticket: Contractor will maintain a trouble ticket system to identify and track issues, trends and maintenance of the INOC voice, data and video services and deployed systems. Contractor will provide to government query/summary requests of data recorded in system.

4.3. Technical Assistance:

4.3.1. On-location assistance with network: Contractor will provide technical leads to perform maintenance/analysis on issues/corrective actions for SWA/GWOT located STN components (STN VSATs (legacy and modernization), Legacy CAISI systems and LT modernization suites)

4.3.2. On-location assistance with network/systems set up: Contractor will provide technical leads to assist users in the set-up, activation, operational testing, adjustments and tear-down of STN components and software required to maintain users ability to access applications.

4.4. Security/COMSEC/Cyber Security:

4.4.1. COMSEC: Contractor will complete efforts required to ensure COMSEC compliance.

Maintain Cryto equipment inventory, COMSEC containers, manage COMSEC keys, and complete/maintain COMSEC documentation.

4.4.2. Cyber Security: Contractor will perform functions to meet US Army Cyber Command (ARCYBER) network security standards (DoDI 8500.01), DoDI 5000.XX “Cyber Security” (pending publication; previous ref DoDI 5000.02 encl 14 “Cybersecurity in the Defense Acquisition System”), and DoDI 5000.71 “Acquisition of IT”), and RMF, NIST 800.37.

Documentation and plans required to execute and complete the below tasks shall be drafted by the contractor for approval by a Government POC. Phase responsibilities:

4.4.2.1. RMF Phase I, Categorize Information Systems: Contractor shall execute the following Tasks: Task 1, Determine the information system’s security categorization of the information system (IS) based on the types of information the IS will store, process, and transmit; Task 2, Describe and annotate the IS itself and its boundaries within the system’s security documentation; Task 3, Register the IS with the appropriate management office (e.g. APMS).

4.4.2.2. RMF Phase II, Select Security Controls: Contractor shall execute the following Tasks:

Task 1, Select initial set of baseline security controls or common controls for the IS based on its security categorization; Task 2, Identify and select required security controls for the IS based on its security categorization; Task 3, Develop a continuous monitoring plan for each control’s implementation and effectiveness; Task 4, Support the Authorization Official Designated Representative (Gvt POC) in developing the Systems Security Plan (SSP).

4.4.2.3. RMF Phase III, Implementing Security Controls: Contractor shall execute the following Tasks: Task 1, implement security controls and ensure their compliance as a result of security control assessments; Task 2, Document how the security controls are deployed in the IS and the environment of operations.

4.4.2.4. RMF Phase IV, Assess Security Controls: Contractor shall execute the following Tasks:

Task 1, Support the Senior Information Security Officer (Sr ISO) in the development of a detailed assessment plan for conducting control assessments; Task 2, Responsible for the assessment of controls for proper implementation and compliance; Task 3, Support the Sr ISO in the development of the Assessment Reports; Task 4, Support the Information Owner (gvt POC), in the development and execution of plans to remediate deficiencies.

4.4.2.5. RMF Phase V, Authorizing the Information System: Contractor shall execute the following Tasks: Task 1, Support the development and execution of Plans of Action and Milestones; Task 2, Support the System Owner (Govt POC) in assembling the complete set of documentation for the authorization package; Task 3, Support the evaluation of the authorization package documentation; Task 4, Support the Authorizing Official in reviewing the authorization package for Risk Determination.

4.4.2.6. RMF Phase VI, Monitoring Security Controls: Contractor shall execute the following Tasks IAW NIST 800.37: Task 1, Support the Authorizing Official Designated Representative develop a detailed plan to monitor changes to the IS on an ongoing basis; Task 2, Support Assessors implement the continuous monitoring program and reassess required controls for effectiveness; Task 3, Support the Authorizing Official Designated Representative implement risk responses to assessment findings; Task 4, Support the System owner in tracking, annotating, updating security and privacy plans, assessment reports, and POAMs on an ongoing basis; Task 5, Support the System Owner on the reporting of status and activities of the system’s continuous monitoring program; Task 6, Utilize automated support tools to provide risk-related information in support of the Authorizing Officials responsibility to manage ongoing authorization.

4.5. Customer Support/Network access: