Attachment 1 - SOW_Airfield_Management_Telephone_Recording_System 20Jul26.pdf

Statement of Work (SOW)

60th Operations Support Squadron (60 OSS)

Travis AFB, CA

20 July 2026

Project Title: Airfield Management Telephone Recording System

1.0 Background

This Statement of Work outlines the requirements for the procurement, installation, and configuration of a turnkey telephone and voice recording solution for 60 OSS Airfield Management operations. The system is required to record mandated communication lines on a 24/7 basis to ensure operational integrity, support incident investigation, and maintain a comprehensive record of critical voice communications. To guarantee secure and seamless integration into Air Force and joint Department of Defense (DoD) networks, the technical solution must meet strict federal cryptographic standards and hold active DoD interoperability certifications.

2.0 Scope of Work

The contractor shall provide, install, and configure a complete (Brand Name Only) Eventide Communications LLC NexLog 740 Digital Transformation (DX) telephone recording system that meets all technical, security, and support requirements detailed in this SOW. The solution must be capable of simultaneously recording both analog and Voice over IP (VoIP) channels using a highly resilient, fault-tolerant architecture. The contractor is responsible for ensuring the system is fully operational and meets the acceptance criteria upon completion of the installation.

3.0 Technical Requirements

The supplied system must be the Eventide Communications LLC NexLog 740 DX FIPS Rel. 4.0 (Tracking Number [TN] 2235702), which is listed on the Department of Defense Information Network (DoDIN) Approved Products List (APL) as evaluated and certified by the Joint Interoperability Test Command (JITC). No substitutes or uncertified systems will be accepted. Must be Original Equipment Manufacturer (OEM) authorized, certified and trained, provider, distributer and installer.

3.1 Recording Capacity and Interoperability

• Mandated Recording: The system must be configured to record a minimum of five (5) designated phone lines continuously (24 hours a day, 7 days a week) for mission-critical airfield operations.

• Channel Capability: The system must deliver:

• Eight (8) analog recording channels.

• Eight (8) Voice over IP (VoIP) recording channels.

• Channel expansion capability in minimum bundles of eight (8) channels per recorded resource.

• JITC Certified Interoperability: To prevent the need for local network waivers or custom integrations, the recorder must hold active JITC Interoperability (IO) Certification (originally certified September 25, 2023, with subsequent DoDIN APL maintenance) verifying seamless interoperability across five (5) core interface variants:

1. VoIP/SIP

2. Analog

3. Avaya

4. Cisco

5. Oracle SBC

3.2 System Hardware

The core recording system must be delivered with the following minimum hardware configuration:

• Operating System: Security Hardened Linux with Admin Control

• Encryption: Certified FIPS140-2/3 encryption base system

• Chassis: 3U rack-mountable form factor.

• Processor: Minimum Intel Core i5 CPU or equivalent.

• Memory: 16GB DDR4 RAM.

• Storage: 2 x 2TB Hot-Swappable Solid State Drives (SSD) configured in a hardware RAID 1 array for complete storage redundancy.

• Optical Drive: 1 x DVD Multi-Drive for offline data archiving, compliance backups, or transfer.

• Networking: 2 x 100/1000 Mbps Ethernet Network Ports.

• Power Supply: Dual Hot-Swappable 120-240VAC 50/60Hz power supplies.

• Interface: NexLog DX-Series Security Hardened Linux software, web- based configuration manager

• Front Panel: Integrated audio controls and an amplified speaker for direct local playback and monitoring.

• Origin: The system must be "Made in the USA" with full domestic support to comply with supply chain security requirements.

3.3 System Software and Security

The solution must utilize the native NexLog DX-Series Security Hardened Linux software suite and adhere to strict military-grade security controls:

• Operating System: NexLog DX-Series Security Hardened Linux with full administrative control provided to authorized government personnel, including optional OS shell access control for site administrators.

• Management Interface: A secure, web-based configuration manager for system administration, playback, configuration, and rapid search and export.

• Cryptographic & Encryption Compliance: The system must utilize FIPS 140-2 or FIPS 140-3 compliant cryptographic modules featuring NIST-validated encryption built upon a FIPS-recognized Linux distribution. This must ensure the highest level of protection for sensitive security parameters, cryptographic keys, and both data-at-rest and data-in-transit.

• DoD Cybersecurity Standards:

• The system must support NIST 800-53 security disposition reporting to facilitate Risk Management Framework (RMF) assessments.

• The system must include built-in support for Security Assertion Markup

Language (SAML) Single Sign-On (SSO) and advanced role-based access control (RBAC).

• The software must provide robust chain-of-custody integrity logs for all exported audio and operational reviews.

• Deployment Integrity: The system must be deployed and configured in the exact manner detailed in the official deployment guide and comply with the Conditions of Fielding (CoF) as outlined in the Cybersecurity Assessment Report

(CAR).

4.0 Support and Maintenance

The contractor shall provide comprehensive long-term sustainment support as part of this procurement:

• Initial Warranty: A minimum of a one-year (12-month) hardware and software warranty shall be included, effective from the date of system acceptance.

• Software Updates: An ongoing Eventide DX Software Update Subscription (DXSUS) is required to provide access to critical DX-Series software enhancements, security patches, and operating system updates.

• Technical Support: An active subscription for Tier 2 and Tier 3 Technical Support (DXSUP-S) must be included to assist Airfield Management with advanced troubleshooting and system issues.

5.0 Deliverables

The following deliverables shall be provided by the contractor:

1. One (1) fully installed, configured, and operational FIPS140 + JITC certified Eventide Communications LLC NexLog 740 DX telephone recording system meeting all technical specifications in Section 3.0.

2. All necessary administrator and user documentation, deployment guides, and manuals.

3. Official proof of active DoDIN APL listing (TN 2235702) and JITC / FIPS 140- 2/3 certification letters.

4. Documentation confirming active Eventide DXSUS (Software Update) and DXSUP-S (Tier 2/3 Technical Support) subscriptions.

6.0 Period and Place of Performance

• Period of Performance: delivery and installation to be completed within 30 days of contract award.

• Place of Delivery and Performance: 401 Burgan Blvd, Building P4, Room 106, Travis AFB, CA 94535.

7.0 Acceptance Criteria

The system installation will be accepted by the government upon successful demonstration of the following:

• The hardware and software are physically installed, configured, and hardened according to the JITC-approved deployment guide and this SOW.

• Successful 24/7 recording, local playback via the front panel, and web-based playback of all five (5) mandated phone lines.

• Demonstrated simultaneous recording functionality for both analog and VoIP channels.

• Government personnel are able to successfully authenticate and manage the system through the secure web interface using role-based access.

• All deliverables listed in Section 5.0 are received and verified.