Attachment 1 - SOO NetApp Filer Replacement 28May26.docx

JWICS Tier 2 Filer Replacement Statement of Objectives

1. Description

a. System Description: The 17th Training Support Squadron JWICS Tier 2 network NetApp Storage appliances have reach End of Life (EOL) and End of Support (EOS). We are requesting the upgrade of the current Tier 2 NetApp storage equipment with current models, with 3 years of warranty. The performance of this contract will be inside a Sensitive Compartmented Information Facility (SCIF) and the company(s) authorized to perform this work must have a Top Secret Facility Clearance Letter (FCL).

b. Scope of Work: The contractor shall perform all tasks necessary to accomplish the installation and configuration of the NetApp appliances in building 523 room 113A datacenter, to include all data migration services. These tasks are outlined in section 9, General Tasks and section 11, Specific Tasks below. As an overview, the contractor must:

i. Utilize this Statement of Objectives to create and deliver a Statement of Work (SOW), detailing how the vendor will meet all objectives within. The SOW will be utilized by the Government to determine acceptability of the proposal.

ii. Deliver all items listed in Attachment 1 Equipment List.

iii. Perform an inventory of equipment

iv. Stage and prepare equipment for installation

v. Perform requirements and systems analysis

vi. Develop implementation plan and schedule

vii. Install and configure NetApp storage systems and associated equipment, listed in contract award documentation, in building 523 Room 113A datacenter. This project will be replacing outdated equipment in this location.

viii. Migrate all current data, to include any CIFS, NFS, and other file structure and data from the old NetApp equipment to the new NetApp equipment.

ix. STIG and Scan and provide security required documentation.

x. Remove and dispose of all packing materials.

xi. Provide Logical and physical drawings of installed hardware upon completion.

xii. Provide Logical and physical configurations of installed software upon completion.

xiii. Provide all other installation and configuration documents for installed software and hardware upon completion.

Location: The storage equipment will be in the 17 TRSS primary datacenter in building 523 Room 113a.

c. Purpose: This project is to replace EOL equipment on the JWICS (classified) network.

2. PERSONNEL: Contractor personnel shall present a neat appearance and be easily recognized. This shall be accomplished by wearing distinctive clothing bearing the name of company or by wearing appropriate badges that contain the company name and employee name. Employees must have SCI-DCID 6/4 eligibility and be indoctrinated for SI/TK access. In accordance with Department of Defense Manual (DoDM) 5105.21, volume 3, employee eligibility must be verified using the Joint Personnel Adjudication System (JPAS) (or successor system) (reference Enclosure 2, section 3, paragraph f of DoDM 5105.21, volume 3). Scattered Castles (SC) may also be used for employees deemed eligible by the non-DoD Intelligence Community (NSA, CIA, NGA, et al). The employee may be indoctrinated locally if needed if the employee has the appropriate eligibility. The company must possess a current Facility Clearance Letter (FCL). In accordance with DoDM 5105.21, volume 3, FCL requirements for access to SCI. Contractor personnel may not be permitted access to SCI based on an interim TOP SECRET FCL. The DoD Component or agency must have a valid contractual requirement to sponsor the contractor for a TOP SECRET FCL for access to SCI. The contractor company must possess a final TOP SECRET FCL. The CSSO must meet SCI eligibility requirements and be indoctrinated for SCI. Contractor employees, to perform work on SCI contracts, must meet SCI eligibility requirements and be indoctrinated for SCI. The contract representative must appoint a local staff member as the local representative as liaison between the company and the Special Security Office. Contractor shall ensure personnel are compliant with REAL ID Act of 2005 for the purpose of gaining access to Goodfellow Air Force Base.

a. Suitability Investigations. Contractor personnel shall successfully complete, as a minimum, a National Agency Check with Written Inquiries (NACI), before operating government furnished workstations, being given government information, or being given access to multiple government buildings. These investigations shall be submitted by the government at no additional cost to the contractor. The contractor shall comply with the DoD 5200.2-R, Personnel Security Program, and AFI 33-119, Electronic Mail (E-Mail) Management and Use, requirements.

b. Listing of Employees. The contractor shall maintain a current listing of employees. The list shall include employee's name, social security number, and date of investigation if contract work involves unescorted entry to Air Force restricted or other sensitive areas designated by the installation commander. The list shall be validated and signed by the company Facility Security Officer (FSO) and provided to the contracting officer and ISPM prior to the contract start date. Updated listings shall be provided when an employee's status or information changes.

c. Freedom of Information Act Program (FOIA). The contractor shall comply with DoD Regulation 5400.7/Air Force Supplement, DoD Freedom of Information Act Program, requirements.

d. Additional Security Requirements. In accordance with DoD 5200.01 and AFI 16-1404, the contractor shall comply with AFMAN 33-282, Computer Security (COMPUSEC); AFSSI 7700, Emission Security (EMSEC); applicable AFKAGs, AFIs, and AFSSIs for Communication Security (COMSEC); and AFI 10-701, Operations Security (OPSEC).

e. Controlled Unclassified Information (CUI) Requirements. The contractor is required to protect controlled unclassified information and/or indicators that may reveal classified information, sensitive or critical information or information that can be collected in aggregate to identify vulnerabilities. Specifically, the contractor is prohibited from disclosing, without express permission from the United States Air Force, any floor plans, schematics, or any other documents containing information or information gleaned from said documents on any government facilities or its contents regardless of whether it is part of the infrastructure or otherwise.

f. OPSEC Requirements. The contractor is required to protect controlled unclassified information and/or indicators that may reveal classified information, sensitive or critical information or information that can be collected in aggregate to identify vulnerabilities. Specifically, the contractor is prohibited from disclosing, without express permission from the United States Air Force, any structured process that identifies critical information, analyzes friendly actions, integrates threat analysis and risk assessments that helps personnel apply protective measures to mitigate unacceptable risk. The basis for the OPSEC program is AFI 10-701.

3. QUALITY CONTROL: The contractor shall insure that all work performed under this (SOO) meets the quality established in section 9, General Tasks, and section 11, Specific Tasks.

4. PHYSICAL SECURITY:

a. Vehicle Passes: The Contractor shall obtain vehicle passes for each vehicle used on Goodfellow AFB (GAFB) during the performance period. The necessary applications for vehicle passes can be obtained by contacting the 17th Contracting Squadron Contract Officer (CO) or with the Government Project Manager (GPM). Before starting the work, the Contractor shall provide a list of all personnel that will work on GAFB, (include Social Security number and driver’s license number and state), to permit security screening. Any workers not cleared will be identified, and not permitted to work on GAFB.

b. Government Property: The Contractor shall be responsible for safeguarding Government property associated with the required work. Facilities, equipment, and materials shall be secured at the close of each work period.

5. HOURS OF OPERATION: The contractor shall perform the on-site tasks of this SOO during a normal day. These hours are normally defined as 0730 to 1630 Central Standard Time, Monday through Friday, except Federal Holidays. Requests for changes or exceptions to this work schedule may be submitted to the CO for coordination with the GPM as required. These requests will be evaluated and approved or declined by the CO after coordinating with the GPM, based on impact to the cost, scope, and schedule of the project.

6. CONSERVATION OF UTILITIES: The Contractor shall instruct employees in utilities conservation practices and shall be responsible for operating under conditions, which preclude the waste of Government utilities.

7. GOVERNMENT FURNISHED UTILITIES AND SERVICES: The Government shall provide without costs to the Contractor, the utilities necessary (limited to water & electricity) to accomplish the tasks specified in this work description.

8. CONTRACTOR FURNISHED EQUIPMENT, PARTS, MATERIALS, and SERVICES: Except for the utilities, services and equipment specifically stated to be Government furnished, the contractor shall provide all personnel, equipment, tools, transportation, and supervision required.

9. GENERAL TASKS:

a. The Contractor shall confine operations at the site to areas permitted by law, ordinances, permits, and contract documents and shall not encumber the site with any materials or equipment without prior written authorization for exact location of each. Any deviation from or changes to the terms outlined in the contract (including this SOO) are subject to the approval of the CO or their designee (i.e., Contracting Officer Representative (COR) or GPM).

b. The Contractor shall plan operations to keep temporary work from blocking access to completed work. If, however, conflict with normal traffic access occurs, the contractor shall provide temporary bypass routing until such temporary work is completed.

c. During the performance of the work within the requirements of this contract and until final completion and acceptance thereof, the Contractor shall exercise the utmost care to avoid accident or injury to persons or property. The contractor shall place and maintain all necessary barriers and safeguards, including watchmen, if necessary, about the work site for the prevention of accidents and shall take all precautions required to protect personnel and property to include the public and properties adjacent to the work site.

d. The Contractor shall provide a full-time quality control function to assure themself and the Government that all materials and workmanship are in strict accordance with industry standards and this SOO. Installation and materials shall conform to the requirements of applicable codes. The Contractor shall maintain adequate quality control capability regardless of the volume of workload. All work performed by the Contractor shall be inspected and approved by the Government before final acceptance by the Government.

e. Upon completion of all work the Contractor shall request a final inspection. The Government shall inspect all work before acceptance. All work identified during the final inspection not meeting the criteria specified by this SOO shall be repaired by the Contractor at no additional cost to the Government.

10. SPECIFICATIONS: It is the contractor’s full responsibility to inventory equipment to ensure the correct material and amount required to perform the stated requirements under the terms of this SOO and technical exhibits, PRIOR TO INSTALLATION BEGINNING. This product will be installed with the manufacturers recommended methods and must be installed by a professional who is knowledgeable of this specific product to prevent exclusion of manufacturer’s warranty.

11. SPECIFIC TASKS: The contractor shall provide all equipment, hardware, software, material, labor, documentation, tools, test plans, transportation, lodging, and staff needed to complete this project. Any existing equipment or components removed during contractor execution shall remain the property of the government. The contractor shall accomplish all tasks required to complete this system upgrade, including overall Project Management, and all planning/installation phases:

· Project Management

· System Analysis, Design, and Project Planning

· Physical equipment installation and configuration, secure environment

· Data transfer/migration Project Management: The contractor shall assign a dedicated Contractor Project Manager (CPM) to work with the Government Project Manager (GPM), to provide oversight for on-site project planning and execution.

a. The CPM shall:

b. Project Management Documentation: At the conclusion of the project execution, provide final revisions of project management documentation, consisting of:

(1) Project Management Plan

(2) Project Management Schedule

(3) Project Risk Management Plan and Report

(4) Project Change Management Plan, including approved and rejected project change requests

System Analysis, Design, and Project Planning: The contractor shall travel to Goodfellow AFB, TX to perform a pre-installation system assessment, conduct a design working group to establish initial design baseline for implementation, and initiate project management activities including project planning and scheduling.

a. System Analysis: The system analysis will consist of an onsite visit to survey current architecture and environment and capture as-built documentation as needed to support the system design and planning stages of this phase.

c. System Design: During this activity the contractor shall conduct an onsite design working group with the government staff to review the System Analysis results and develop the implementation design. The deliverable from this activity will be the initial system design plans and documents.

d. Planning: The CPM will conduct a Kickoff meeting with the Goodfellow COR and the government support personnel, systems engineers, and the GPM. This Kickoff meeting will initiate the project planning and scheduling for the remaining phases based on the projected outcomes of the System Design activity. The CPM will consolidate inputs and deliverables from the System Assessment and System Design activities and will submit these documents to the CO and GPM for review and acceptance according to the following sequence and schedule:

(1) The contractor shall submit draft system design and project planning documentation to the CO and GPM for review not later than five (5) business days after the completion of the initial system assessment.

(2) The CO and GPM will review and provide comments to the design and project planning documentation to the contractor not later than five (5) business days after the submission of the draft documentation.

(3) The contractor will incorporate CO and GPM’s comments/corrections and submit final system design and project planning documentation to the CO and GPM not later than five (5) business days after receipt of draft version comments.

(4) The CPM will submit electronic copies of draft and final documentation in Microsoft Word. The CPM will submit Project schedules in Microsoft Project.

(5) The start date for the Phase II will be no later than five (5) business days after completion of Phase I.

Physical Equipment Installation and Configuration, Secure Environment: The contractor shall provide all equipment, hardware and software, material, labor, documentation (including all documents and deliverables listed in this SOO), tools, test plans, test reports, test equipment, transportation, lodging, administrative support, Project Management, and any off-site space and staff needed to complete this project. Any existing equipment or components removed during contractor execution of this project shall remain the property of the government and will be provided to the government staff prior to the completion of this project.

(1) Installation and Configuration

(a) All installation and configuration tasks will be performed on Goodfellow AFB, TX by the contractor. The contractor shall perform the installation in accordance with (IAW) the system design and project planning documentation as specified in Phase I implementation final documentation.

(b) During this phase of the project the contractor, will be required to:

(i) Install and configure storage hardware into Building 523 room 113a primary datacenter.

(ii) Validate all server, storage, and network functionality.

1. Contractor will execute applicable tests to check proper functionality and performance thresholds. These tests shall be developed by the Contractor, approved by the Government, and verified by the Government SME.

a. Ensure storage functionality.

b. Ensure proper migration of all other data hosted on EOL system to new system.

c. Assist government system administrator personnel in configuration and scheduling of back up schedules from Tier 1 to Tier 2 storage appliances.

d. If any issues are present, mitigate and document resolution.

(2) Secure Environment: The contractor shall secure the storage environment to meet any DISA Security Technical Implementation Guides (STIG) which will be provided during the initial planning phase of this effort (Phase I).

(a) Will apply the most current STIGS to all NetApp hosts.

(b) The Contractor will be required to use the most current DISA SCAP tool and STIG Viewer to verify that they have properly applied the STIGS.

(c) Completion of the current STIG checklist is met when there are no CAT1 findings and a 90% pass rate.

(3) Assessment and Authorization (A&A) Documentation: The contractor shall develop the following documentation and diagrams which will be used to by system Cybersecurity personnel on Goodfellow AFB, TX to complete the updates to the system A&A package. Minimum information to be documented and provided is:

(a) Diagrams of the logical and physical network Infrastructure

(b) Logical dataflow diagram

(c) List of used ports, protocols, and services utilized by the system.

(d) Rack elevation drawing

(e) Software version and hardware information

(f) Security documentation “.ckl” or XCCDF files from SCAP results

Data Migration/Transfer: During this phase, the contractor shall transfer all data currently housed on the existing NetApp Tier 2 storage to the replacement NetApp Tier 2 storage. The contractor will be responsible for the following:

(1) Transfer all data currently stored on the existing Tier 2 storage to the newly installed equipment.

(2) Ensure all current snapshot schedules are intact and recreate if needed.

(3) Create, if required, DNS entries to keep the file paths for JWICS file data intact.

End state of this project will be a physical replacement of EOL NetApp equipment, with full migration of data hosted on EOL system to new fully configured and fully functional storage equipment.

12. PERIOD OF PERFORMANCE: All equipment must be delivered within 30 calendar days after contractor receipt of order (with exception to manufacturer-caused delivery delays out of the contractor's control). Once all equipment has been delivered, all work outlined within these installation instructions must be accomplished within 60 business days. The project kick-off meeting and planning and design workshops are estimated to take no more than 5 business days and should begin no later than 10 business days after product delivery. The contractor is responsible for analyzing the tasks outlined in these installation instructions and developing a plan to complete the work after the project kick-off meeting. All work defined in these installation instructions will be conducted during the hours of operation stated above and during normal working days. Exceptions to this constraint will be submitted to the Contracting Officer and GPM in writing no later than ten (10) business days prior to the event. All activities, including delivery of final system documentation and security documentation must be completed within the Period of Performance stated within the contract documentation.

Attachment 1 – Equipment List:

image1.emf