Attachment 1 Revised SOW 28 Aug 25.pdf

STATEMENT OF WORK (SOW)

FOR

Data Center Backup & Recovery Solution SERVICES

AT

COLUMBUS AIR FORCE BASE, MISSISSIPPI

Revised 28 August 2025

Attachment 1: Statement of Work

1. DESCRIPTION OF SERVICES

Columbus AFB requires technical refresh to the existing network backup solution located at 139 F Loop, Columbus AFB, MS Bldg. 932. The contractor shall provide all personnel, equipment, installation, configuration management, labor, material, documentation, and services in support of the program. Services include project management and systems engineering services in support of the design, site preparation/development, equipment installation and optimization, acceptance testing, and warranty. Project should be completed within 30 days of award.

2. BACKGROUND

The existing CAFB data backup appliance is past end-of-life and has failed. Due to its end-of-life status, the manufacturer no longer supports the device and replacement parts are no longer available. The base has no capability to back up or restore any data stored on base servers. Failure to replace it will result in an inability to restore files, databases and print services in the event of hardware failure. This issue also places the base in a non-compliant state, regarding the COOP and DRP. Columbus AFB. 14CS requests the execution of an all-in-one backup solution with updated software and two hardware appliances. This solution will fix backup and restoration issues for all servers and data as well as meet compliance with CIIP/DRP and provide redundant, geo-diverse capability.

3. TECHNICAL REQUIREMENTS

Technical requirements for Columbus AFB Data Center Backup Solution.

1. The management and deployment system for the Data Center/Backup Storage solution shall support multi-vendor solution.

2. The backup solution shall have the ability for multi-factor authentication and/or CAC integration.

3. The backup solution shall provide the ability to perform various forms of data backups including full, incremental, archiving, and snapshots, as well as provide multiple means of scheduling.

4. The backup solution should be able to recover data from single files to databases to fully restore virtual machines.

5. The backup solution should be able to backup data from both Windows and Linux devices.

6. The backup solution shall consist of two hardware devices to be in geographically separate locations yet managed via the same system web console.

7. The backup solution must be required to encrypt all data in flight and at rest with no ability to change or alter the encryption choice.

8. The backup solution must offer that data, once written, cannot be modified or deleted.

9. The backup solution must run on a hardened O/S that is immutable or resistant to cyberattacks like ransomware.

10. The backup solution should provide a minimum of 80TB of raw storage and be scalable to add more.

11. The backup solution shall be futured proofed to support cloud-based backups, if necessary.

12. The backup solution supports DISA STIG compliance and listed on the DISA Approved Products Listing.

13. The backup solution shall support zero trust capabilities.

14. The backup solution will be a turnkey solution with training provided to customers/administrators.

4. SITE PREPARATION GUIDELINES

Unless otherwise identified in Demarcation, the contractor shall be responsible for all necessary site preparation/development. Site preparation includes all site work, building modifications, electrical wiring, AC Power, and grounding systems. Power, RU surveys for Primary and Alternate locations.

4.1.1. General Guidelines:

The contractor shall meet the following minimum Government guidelines:

4.1.2 Cable Marking:

The contractor shall apply markings to all cables in accordance with ANSI/TIA Standard Installation Practices for connectors and cables. The cable shall be marked with a metal tag or similar non-fading item at the building entrance and at the antenna. Additional markings shall be provided on the interior of the structure at any point in the cable where a connector is utilized. These markings may be plastic or heat-shrink and must be indelible.

4.1.3 Grounding Guidelines:

If required by the proposed technical solution, the contractor shall meet the following minimum Government guidelines: In the event of a conflict between the following and the National/State code, National/State code shall supersede.

This will apply to the antenna system only, not user equipment that is improperly grounded.

• The contractor shall ensure that all equipment is electrically bonded, grounded, and protected in accordance with the National Electric Code.

• The contractor shall provide all grounding and lightning protection equipment, including surge arrestors, to comply with the requirements of all equipment being installed and connected as part of the system.

• Building conductors shall be used to bond the various pieces of equipment, conduit, trays, etc. together.

5. IMPLEMENTATION SERVICES

5.1 Schedule:

The offeror shall provide a detailed working schedule for accomplishing the requirements of this SOO in MS Project format which includes all Government activities. The schedule shall identify all critical milestones and deliverables for the final design, integration, installation, and testing of the system. The milestones and schedule shall be described with reference to days after receipt of notice to proceed.

5.2 Program Management:

Program Management shall be provided throughout the design and implementation of the system

5.3 System Engineering:

Systems engineering services shall be provided from the preliminary system design through the completion of system implementation, security evaluation, and functional testing. As a minimum, system engineering services shall include the following:

• System design

• Implementation

• Acceptance testing

• Final (as-built) system documentation

5.4 Project Status Review (PSR) Meetings:

The contractor shall participate in weekly (or as decided by the IPT) PSR meetings. The contractor shall include any existing action items for both the Government and contractor.

5.5 Transportation of System Equipment:

The Government will provide a “Ship-to” address and temporary storage/staging area.

The contractor shall be responsible for inventory and reconciliation of all shipments, which will be coordinated with and verified by a Government representative. The contractor shall transport all equipment from the temporary storage area to the installation destination.

5.6 QUALITY ASSURANCE (QA), TESTING:

5.6.1 Quality Assurance:

The contractor shall provide a Quality Assurance Evaluator (QAE) for the entire life of the project. The QAE shall assist the government representative in performing random spot checks and in performing system acceptance tests. The QAE shall be responsible for identifying system and outside plant deficiencies and/or discrepancies throughout the life of the project. A Status Report will be submitted, indicating project progress/statuses and listings of any deficiencies/discrepancies found and actions to correct them.

5.6.2 Acceptance Tests:

The Contractor shall provide the Acceptance Test Plan and Report for the effort.

Acceptance Test shall include:

• The awarded vendor will develop a test plan to include verification of all technical requirement deliverables as depicted in Par 3

• Contractor verification testing (CVT) and government acceptance testing (GAT) may be performed concurrently

• CVT results will be provided to the onsite PM, 14 CS/SCXP

The contractor shall have 15 days after completion of the System Acceptance Testing to research, develop, and document the resolution of all discrepancies. The contractor shall provide in writing a detailed explanation to the Government engineer/ Project Leader/QA representative of how the discrepancy will be resolved including any changes to the radio programming or the system databases. Upon direction of the Project Leader, the contractor shall implement the proposed resolution and perform the portion of the Acceptance Test that previously failed.

5.7 As-Built Documentation:

The Contractor shall provide full documentation on the installed system.

5.8 Acceptance:

Formal system acceptance shall be granted after completion of the acceptance test. Final acceptance shall be required at a minimum:

• Completion of all facility work, component installation, installation, testing, and as built documentation.

• Acceptance of system facilities, individual systems, and equipment by Communications Squadron and management personnel. Correction of any operational, performance, or workmanship defects shall be at the sole expense of the contractor.

• Successful completion of Acceptance Testing.

5.9 Enterprise-Wide Contractor Manpower Reporting Application (ECMRA) The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract via a secure data collection site. The contractor is required to completely fill in all required data fields using the following web address http://www.ecmra.mil.

Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs from October 1 through September 30.

While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the ECMRA help desk.

6 LOGISTICS REQUIREMENTS

6.1 Spares:

Spares are not required under this effort.

6.2 Warranty:

The contractor shall provide a one-year manufacturer’s standard commercial. The warranty shall commence at the date of final system acceptance. The contractor shall provide a warranty for the workmanship on the installation for a period of 12 months from date of site acceptance/signing of the AFTO 747 by the customer.

7. SECURITY:

7.1. Security Clearances:

Some of the work required will require access to secure areas. The Contractor shall be expected to work in areas that process classified. The base will provide escorts where required. The contractor may elect to use personnel with security clearances (Secret level) to speed installation.

7.2. Conditions:

Conditions caused by Force Majeure (acts of war, terrorism, nature, etc.) should be addressed on an as needed basis. The contractor shall anticipate that in the event of heightened alert; access may be denied for approximately three to five days. The contractor shall also anticipate that during periods of heightened alert, time required to access may increase.

7.3. Key Control/Combinations:

The Contractor shall establish and implement methods of assuring control and safeguard of all Government keys or lock combinations issued to the Contractor. GOVERNMENT KEYS SHALL NOT BE DUPLICATED. See FAR 52.245-2(e)(2).

7.3.1. Notification:

The Contractor shall immediately notify the site security police and the CO of any occurrences of lost or duplicated keys or compromise of combinations.

7.3.2. Security Clearances and Background Checks, and Related Items:

The contractor will coordinate with the installation regarding need for items in this section. The primary work area does not require security clearance.

7.3.2.1 Nominations:

Nominations shall contain full identifying data on the nominee, a statement that he/she meets citizenship requirements, a description of the applicant’s current clearance, and the investigative basis (National Agency Check, Background Investigation, or Single Scope Background Investigation) for the clearance.

7.3.2.2 Contractor Consent to Background Checks:

The Contractor and, as applicable, subcontractor shall not employ persons for work on this contract if such employee is identified as a potential threat to the health, safety, security, general wellbeing or operational mission of the installation and its population, nor shall the Contractor or subcontractor employ persons under this contract who have an outstanding criminal warrant as identified by Law Enforcement Agency Data System (LEADS) through the National Crime Information Center. LEADS checks will verify if a person is wanted by local, state, and federal agencies. All Contractor and subcontractor personnel who do not consent to a LEADS check will be denied access to the installation.

Information required to conduct a LEADS check includes full name, driver’s License number, and/or social security number, date of birth of the person entering the installation, and completion of a background check questionnaire. The Contractor shall provide this information, Contractors Consent for Background Check, and shall submit it in conjunction with the Contractor’s request for either base or vehicle passes.

Completion of a successful LEADS check does not invalidate the requirement for an escort when Contractor or subcontractor personnel are working within controlled or restricted areas.

Contractors shall ensure their employees and those of their subcontracts have the proper credentials allowing them to work in the United States. Persons later found to be undocumented, or illegal aliens will be remanded to the proper authorities. The Contractor shall not be entitled to any compensation for delays or expenses associated with complying with the provisions of this clause. Furthermore, nothing in this clause shall excuse the Contractor from proceeding with the contract as required.

7.3.2.3 Badges:

The Contractor is required to provide identification badges with photo of employee for their employees. All Contractor personnel shall wear these badges while on duty on the government site. Badges are required to identify the individual, company name, and be clearly and distinctly marked as contractor. Size, color, style, etc. are to be mutually agreed to by the Contractor and the Government. The Contractor’s identification badge will not be used as an entry requirement for installation entry or into any government designated controlled or restricted area.

7.3.2.4 Contractor Registration of Vehicles:

All Contractors or contractor employees’ vehicles used for the performance of this contract shall comply with all local, state and federal regulations. Additionally, any pass shall be surrendered to Security Forces upon demand to positively identify a person’s need to be on a federal installation.

7.3.2.5 Access to installation during force Protection Conditions (FPCONs):

Contractors will be assigned a mission essential designation IAW requirements contained in Installation Security Instructions. Only the installation commander or the unit commander requesting contract support will assign the mission essential designation.

7.3.3. Restricted Areas:

Specific written permission to enter such areas is granted under the authority of the installation Commander or his designated representative. If work is required in a restricted area, the Contractor shall implement local base procedures for entry to Air Force controlled/restricted areas where contractor personnel will work. An AF Form 2586, Unescorted Entry Authorization Certificate, must be completed and signed by the sponsoring agency’s Security Manager before a Restricted Area Badge will be issued.

7.3.4. Non-disclosure Agreements:

To safeguard information, the contractor shall enter into non-disclosure agreements with the local security manager responsible.

7.3.5. Property Protection:

The Contractor shall be responsible for safeguarding all government property, classified information, and controlled forms provided for contractor use. At the end of each work period, all government facilities, equipment, and materials shall be secured.

When not under the direct control of contractor personnel, all government facilities, equipment, and materials utilized by contractor personnel shall be secured.

7.3.6. Industrial Security:

The Contractor shall comply with all pertinent instructions, directives, and regulations, as provided by the Government, to ensure the proper implementation of the contractor’s industrial security program. This includes clearance procedures, visitors’ security, inspections, violations, education, classification, international security programs and operations.

7.3.7. Listing of Employees:

The Contractor shall maintain a current listing of employees. The list shall include the employee’s name, social security number and level of security clearance. The list shall be validated and signed by the Program Manager and provided to the government Security Officer and Special Security Office (SSO) within 10 days of the contract award.

An updated listing shall be provided when an employee’s status or information changes.

7.3.8. Accident/Incident Reporting and Investigation:

The contractor shall record and report all available facts relating to each instance of accidental damage to Government property or injury to either Contractor or Government personnel to the Base Safety Office unless otherwise stated in the SOO. The Contractor shall secure the scene of any accident and wreckage until released by the accident investigative authority through the Contracting Officer. If the Government elects to investigate the incident, the Contractor shall cooperate fully and assist the Government personnel until the investigation is completed.

7.3.9. Subcontractor Safety:

The Contractor shall be responsible for ensuring subcontractors satisfy the safety and health requirements set forth in OSHA standards, any local procedures, and other provisions of this contract.

7.3.10. Contractor-Furnished Property And Equipment (CFP/CFE):

7.3.10.1 Identification / Marking:

The Contractor shall clearly mark all Contractor-Furnished Property and Equipment (CFP/CFE) with their company's name, contract/task order number, and project number.

The Contractor shall place a easily read, very visible, sign (minimum 8.5" x 11") on large containers, construction equipment, or un-manned rental vehicles while on the

Government installation indicating the company name; contract/task order number;

project title; and both the Contractor and Site POC's names and local telephone numbers.

7.3.10.2 Transportation and Storage of Material/Equipment:

The Contractor shall transport and store all CFM and CFE required to perform contract requirements.

8. DELIVERABLE REQUIREMENTS

All deliverables are subject to Government acceptance and approval. They shall meet professional standards, and the requirements set forth in this Task Order. All deliverables shall be produced using recommended software tools/versions as accepted by the Government. The Contractor shall submit the following deliverables:

CDRL Data Item Title A001 Communication-Computer

Systems Installation Records (CSIRs)

A002 Work Schedule A003 Status Report A004 Meeting Minutes A005, A006

Test Plan/Report

9. PERIOD OF PERFORMANCE

30 Days after the contract award.

10. PLACE OF PERFORMANCE

Columbus AFB, MS NCC Building 932

8. DELIVERABLE REQUIREMENTS