Attachment 1.pdf
PDF 305 KB Posted
- Attached to
- On-Premise SAS/SAS-C Maintenance/Security
- Solicitation number
- FA4610250016
About this file
This Statement of Work (SOW) details system administration and security requirements for the Safety Analysis System (SAS) at Vandenberg Space Force Base. The contract seeks a contractor to provide comprehensive on-premises maintenance and support for both unclassified SAS and classified SAS-C systems, with key responsibilities including daily system upkeep, cybersecurity compliance, and ongoing maintenance to support launch safety operations. Critical requirements include possessing a minimum SECRET security clearance, expertise in operating systems like Red Hat Enterprise Linux and Windows, familiarity with virtualization software, and ability to implement continuous monitoring practices in accordance with Department of Defense cybersecurity standards.
The contractor must collaborate with Information System Security Officers, conduct system administration tasks such as applying updates, configuring systems, managing user accounts, and performing security tests, with a focus on minimizing operational disruptions. The performance period is one year following contract award, with an emphasis on supporting the SLD30 Launch Safety office's mission-critical infrastructure that generates launch safety products like debris risk estimates, hazard area definitions, and mission abort criteria. Contractors must ensure timely response to maintenance requests, work primarily on-site, and support the ongoing Authorization to Operate (ATO) process for the SAS-C system.
View the file
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Statement of Work (SOW) for
On-Premises SAS System Administration and Security Vandenberg Space Force Base (VSFB)
1. SCOPE: This Statement of Work (SOW) describes the On-premise Safety Analysis System (SAS) system administration, maintenance and security to provide professional support rather than rely on Safety analysts to perform these activities. This includes both the unclassified SAS and classified SAS-C system. In addition to system administration, this will ensure ongoing Cyber Security/Authority to Operate (ATO) compliance for Vandenberg Space Force Base (VSFB) users.
1.1 Background: The SLD30 Launch Safety office relies on an on-premises infrastructure, consisting of computers, networking equipment, servers, and high-performance compute clusters, to meet the stringent requirements for ensuring the safety of life and property during launch operations. This critical infrastructure generates a range of vital products, including estimates of debris, toxic, and blast risks, definitions of hazard and caution areas, mission abort criteria, collision avoidance launch wait periods, and autonomous flight safety control data. In compliance with the Federal Information System Modernization Act (FISMA), the SAS systems are required to obtain an Authorization to Operate (ATO), which involves ongoing monitoring for cybersecurity vulnerabilities and the implementation of corrective action policies. Notably, only the classified SAS-C system is currently undergoing the ATO process, while the other on-premises SAS system has yet to initiate this process.
1.2 Objective: This Statement of Work (SOW) is designed to deliver comprehensive system administration, maintenance, and security support for the SLD 30 SAS and SAS-C systems, enabling SLD30 Safety analysts to focus on their primary responsibilities while offloading system administration tasks to experienced administrators, thereby achieving enhanced system stability, security, and analyst productivity in order to meet the increasing demands of the launch schedule.
2. REQUIREMENTS:
2.1 On-Premises SAS/SAS-C Maintenance
2.1.1 The contractor shall furnish all labor, management, and maintenance necessary to provide system administration of both on-premises SAS and SAS-C.
2.1.2 The contractor shall perform most of their work on-premises since the SAS systems are not accessible via an external connection.
2.1.3 The contractor shall be responsible for the daily maintenance and upkeep of the on-premises systems, encompassing a range of tasks including, but not limited to:
applying operating system updates and patches, upgrading and installing application software and computer hardware, configuring systems to ensure optimal performance, backing up critical data, troubleshooting technical issues and providing timely technical support to employees, creating, managing, and administering system permissions and user accounts, conducting regular security tests and ongoing security monitoring to identify and mitigate potential vulnerabilities, and maintaining the integrity and functionality of networks and network file systems.
2.1.4 The contractor shall possess expertise in the installation, administration, and maintenance of various operating systems and tools, including Red Hat Enterprise Linux (RHEL), Windows 10/11 SIPRNet/NIPRNet Standard Desktop Configuration (SDC), Windows Server 2016 and 2019 or later, as well as collaboration platforms such as Confluence Wiki and version control systems like GitLab.
2.1.5 The contractor shall be familiar with virtualization software such as VMware.
Familiarity with Xenserver is desired.
2.1.6 Familiarity with XD Air media security is desired.
2.1.7 The contractor shall conduct all work in accordance with industry-recognized standards and best practices, consistent with those outlined in the System Administrator guidelines available on the DoD Cyber Exchange, to ensure the highest level of quality, security, and compliance.
2.1.8 The contractor shall collaborate with the requester/customer to coordinate and schedule installation times that optimize mission requirements, ensuring minimal disruption to ongoing operations and maximizing system availability.
2.1.9 The contractor shall ensure that all maintenance and service calls are addressed in a timely manner, with service technicians responding to on-site work requests within three (3) business days of initial contact, to minimize system downtime and optimize operational efficiency
2.2 Cyber Security / ATO Compliance
2.2.1 The contractor shall perform all work using industry standards, to include Security Controls as specified in NIST 800-53 and approved by the system owner and ISSM.
2.2.2 The contractor shall implement continuous monitoring practices, in accordance with Department of Defense (DoD) standards, to proactively identify and mitigate potential cyber threats, thereby reducing the risk of cyber breaches and ensuring the security and integrity of the On-Premise SAS/SAS-C systems.
2.2.3 The contractor shall gather and furnish system artifacts for the SAS-C system, as specified by the Information Systems Security Engineer (ISSE), in a timely and comprehensive manner, to support ongoing security assessments and compliance requirements. For the SAS-C system, the contractor shall work with the ISSE to implement security controls and ensure that vulnerabilities are identified and addressed in a timely manner.
2.2.4 The contractor shall collaborate with the Information System Security Officer (ISSO) and Information System Security Manager (ISSM) to ensure that all configuration changes to the SAS-C system are properly coordinated, documented, and approved in accordance with the established Configuration Management Policy, to maintain the security, integrity, and compliance of the system.
2.3 Security Requirements and Qualifications
2.3.1 Contractor personnel assigned to perform work under this contract shall possess and maintain a minimum SECRET security clearance throughout the contract duration, as specified in the DD Form 254, Department of Defense Contract Security Classification Specification, which outlines the security requirements for this effort. The Unit
File details come from the government source that posted it. Updated .