Attachment 1 - Statement of Requirements Digital Forensic Workstations.pdf

Statement of Requirements

Digital Forensic Workstations

25 July 2024

United States Coast Guard

CG-7213 DOMEX

1.0 GENERAL.

1.1 SCOPE.

This procurement is for replacement of the aging inventory of Digital Forensic Workstations to support the USCG’s Digital Forensic Laboratories and offices.

1.2 BACKGROUND.

The CG DOMEX/DF program employs digital forensics workstations at each of its laboratories and field offices conducting digital forensics work. These workstations are extremely robust as the digital forensic software used for extracting data from devices such as computers, hard drives, and smartphones, as well as rapidly reviewing video files for support of investigations, require the most powerful processing capabilities available on the market. The forensic workstations also must include a comprehensive write blocker and a large capacity RAID storage device, as it is important to be able to extract and store large amounts information. For this reason, this procurement cannot be satisfied through existing Coast Guard contracts. The intent of this procurement is to replace the aging existing stock of computers with workstations that meet or exceed the salient characteristics below.

2.0 SPECIFICATIONS.

The following technical specifications are the minimum which need to be met or exceeded by the product offered:

Processors

Chipset

Xeon W7-3465X 28 Core Processor Liquid cooled CPU thermal solution

Intel W790 Chipset Motherboard

Memory

256GB ECC Memory PC5-38500 DDR5 4800 MHz (3x32GB)

Software

Microsoft Windows® 11 Professional 64-bit

Graphics

Nvidia RTX 4060 8 GB 128 bit GDDR6 3072 CUDA Cores.

Hard-drive Storage

Up to nine (9) storage drives in non-RAID FRED-DX systems, including three (3) internal M.2 NVMe storage locations:

Operating System - 1TB M.2 NVMe-PCIe SSD – PRO Series 1 TB M.2/NVMe SSD – 980 PRO Series 1 TB M.2/NVMe SSD – 980 PRO Series 4 TB 7200 RPM SATA hard drive Extra drive slots: One (1) SATA connected HotSwap, and four (4) USB

3.2 connected HotSwap drive bays.

RAID 5 x 4 TB SATA Hard Drive - Capacity: ~16 TB configured as RAID5

Drive Bays 2 x Shock Mounted SATA Removable Hard Drive Bays 3 x HotSwap Shock Mounted Removable Hard Drive Bays with Read Only switch

DVD/CD/Blu-ray

BD-R/BD-RE/DVD+RW/CD+RW 16x Blu-ray Burner Dual-Layer Combo Drive

Forensic Imaging / Write Blocking

Digital Intelligence® UltraBay 4d Hardware Write-Blocker with touch screen display:

Integrated IDE Drive Write Blocker Integrated SATA Drive Write Blocker Integrated SAS Drive Write Blocker Integrated USB 3.0/2.0 Write Blocker Integrated FireWire IEEE 1394b Write Blocker Integrated PCIe Write Blocker Write-Block and Read/Write visibility via Lock/Unlock LEDs Read and write mode capabilities for all device ports controlled via front panel Allows simultaneous imaging of 2 attached devices

Digital Intelligence® Forensic Media Card Reader – Read-Only and Read/Write switchable Digital Intelligence® Imaging Workshelf - Extendable/Retractable with integrated ventilation

Media Card Reader Forensic Media Card Reader - user-selectable read/write or read only access

Networking

2x Intel X710-AT2 10 Gigabit Ethernet ports

Audio

Realtek® S1220A 7.1 channel high-definition audio CODEC

Keyboard / Mouse

Microsoft wireless desktop keyboard and mouse

Warranty and Support 36 months from date of purchase, extended warranty options available, lifetime technical support.

2.1 QUANTITY

Base quantity of 25 Digital Forensic Workstations meeting or exceeding the technical specifications in paragraph 2.0.

3.0 DELIVERY

Delivery no later than 45 days after award.

4.0 GOVERNMENT POINT OF CONTACT

U.S. Coast Guard C5ISC (OISPL-EOS) 4000 Coast Guard Blvd Portsmouth, VA 23703 ATTN: ISM2 Emily Woodward Phone: 440-506-1623 (Cell) Email: emily.a.woodward@uscg.mil

5.0 SHIPPING/ACCEPTANCE ADDRESSES

Workstations will be sent to various digital forensics laboratories/offices throughout the U.S.

Coast Guard. Specific locations and number of devices will be provided to the supplier.

6.0 ITAR REFERENCES

4300A Reference Citation FEDRAMP (utilized where applicable - see attached language document) HSPD-12 Verbiage (utilized where applicable - see attached language document) DHS-USCG Enterprise Architecture Compliance Language Artificial Intelligence / Machine Learning Requirements (utilized where applicable - see attached language document) HSAR 3052.204-72 Safeguarding of Controlled Unclassified Information (July 2023)

(utilized where applicable - see attached language document)

INFORMATION TECHNOLOGY SECURITY AWARENESS TRAINING (JULY 2023)

(utilized where applicable - see attached language document) HSAR 3052.204-73 Notification and Credit Monitoring Requirements for Personally

Identifiable Information Incidents (JULY 2023) (utilized where applicable - see attached language document)

FAR 52.224-3 Privacy Training – Alternate I (DEVIATION 17-03) (July 2023) (utilized where applicable - see attached language document)

IPv6 Language For SOW/SOO/PWS (utilized where applicable - see attached language document)

HSPD-12 (utilized where applicable - see attached language document)

7.0 DHS-USCG ENTERPRISE ARCHITECTURE COMPLIANCE

All solutions and services shall meet DHS and USCG Enterprise Architecture policies, standards, and procedures. Specifically, the contractor shall comply with the following Homeland Security

Enterprise Architecture (HLS EA) and USCG EA requirements:

o All developed solutions and requirements shall be compliant with the HLS and USCG

EAs.

o All IT hardware and software shall be compliant with the HLS EA Technical

Reference Model (TRM) Standards and Products Profile and with the USCG IT Products and Standards Inventory.

Description information for all data assets, information exchanges and data standards, whether adopted or developed, shall be submitted to USCG Enterprise Architecture Division (EAD) and DHS Enterprise Architecture Division (EAD) for review, approval and insertion into the USCG and DHS Data Reference Model and Mobius.

Development of data assets, information exchanges and data standards will comply with the DHS Data Management Policy MD 103-01 and all data-related artifacts will be developed and validated according to DHS data management architectural guidelines.

Applicability of Internet Protocol Version 6 (IPv6) to DHS-related components (networks, infrastructure, and applications) specific to individual acquisitions shall be in accordance with the DHS Enterprise Architecture (per OMB Memorandum M-05-22, August 2, 2005) regardless of whether the acquisition is for modification, upgrade, or replacement. All EA-related component acquisitions shall be IPv6 compliant as defined in the U.S. Government Version 6 (USGv6) Profile (National Institute of Standards and Technology (NIST) Special Publication 500-267) and the corresponding declarations of conformance defined in the USGv6 Test Program. (Adam Reidenbach, MBA, CGFM, CPCM).

8.0 SECTION 508 REQUIREMENTS

Section 508 of the Rehabilitation Act (classified to 29 U.S.C. § 794d) requires that when

Federal agencies develop, procure, maintain, or use information and communications technology (ICT), it shall be accessible to people with disabilities. Federal employees and members of the public with disabilities must be afforded access to and use of information and data comparable to that of Federal employees and members of the public without disabilities.

All products, platforms and services delivered as part of this work statement that, by definition, are deemed ICT shall conform to the revised regulatory implementation of Section 508 Standards, which are located at 36 C.F.R. § 1194.1 & Appendixes A, C & D, and available at https://www.ecfr.gov/cgi-bin/text-idx?SID=e1c6735e25593339a9db63534259d8ec&mc=true&node=pt36.3.1194&rgn=div5.

In the revised regulation, ICT replaced the term electronic and information technology (EIT) used in the original 508 standards. ICT includes IT and other equipment.

Exceptions for this work statement have been determined by DHS and only the exceptions described herein may be applied. Any request for additional exceptions shall be sent to the

Contracting Officer and a determination will be made according to DHS Directive 139-05, Office of Accessible Systems and Technology, dated November 12, 2018 and DHS Instruction 139-05-001, Managing the Accessible Systems and Technology Program, dated November 20, 2018, or any successor publication.

8.1 SECTION 508 REQUIREMENTS FOR TECHNOLOGY PRODUCTS

Section 508 applicability to Information and Communications Technology

(ICT): Digital Forensic Workstations

Applicable Exception: N/A Authorization #: N/A

Applicable Functional Performance Criteria: All functional performance criteria in

Chapter 3 apply to when using an alternative design or technology that results substantially equivalent or greater accessibility and usability by individuals with disabilities than would be provided by conformance to one or more of the requirements in Chapters 4 and 5 of the Revised 508 Standards, or when Chapters 4 or 5 do not address one or more functions of

ICT.

Applicable 508 requirements for electronic content features and components: Does not apply

Applicable 508 requirements for software features and components (including but not limited to Software infrastructure): All requirements in Chapter 5 apply, including all WCAG

2.0 Level A and AA Success Criteria Apply except 2.4.1 Bypass Blocks, 2.4.5 Multiple Ways, 3.2.3 Consistent Navigation, 3.2.4 Consistent Identification, 502 Interoperability with Assistive Technology, 503 Application

Applicable 508 requirements for hardware features and components (including but not limited to Computers & laptops; Peripheral Equipment (ex. keyboards)): All requirements in Chapter 4 apply

Applicable 508 requirements for support services and documentation: All requirements in Chapter 6 apply

8.2 SECTION 508 DELIVERABLES

Section 508 Accessibility Conformance Reports: For each ICT item offered through this contract (including commercially available products, and solutions consisting of ICT that are developed or modified pursuant to this contract), the Offeror shall provide an Accessibility Conformance Report (ACR) to document conformance claims against the applicable Section 508 standards. The ACR shall be based on the Voluntary Product Accessibility Template Version 2.0 508 (or successor versions). The template can be found at https://www.itic.org/policy/accessibility/vpat. Each ACR shall be completed by following all of the instructions provided in the template, including an explanation of the validation method used as a basis for the conformance claims in the report.

9.0 UNCLASSIFIED SECURITY LANGUAGE

Safeguarding Sensitive But Unclassified (FOR OFFICIAL USE ONLY) Information, DHS

MD 11042.1

Handling of Sensitive Security Information (SSI), DHS MD 11056.1 Standard Distribution List – USCG COMDTNOTE 5605 C5ISC Configuration and Change Management Policy, C5ISCINST M4130 Trusted Associate Sponsorship System (TASS), COMDTINST 5500.18

10.0 SUPPLY CHAIN RISK MANAGEMENT LANGUAGE

10.1 DEFINITIONS

Component: a unit defined by the supplier that connects to and functions as part of the product. For software products, a component is a unit of software defined by a supplier at the time the component is built, packaged, or delivered. For hardware, a component is one hardware unit designed to connect to and function as part of a larger product.

End-of-Life (EOL): means that an ICT product has reached the final stage of the product life cycle in which that version of the ICT product will no longer be supported nor manufactured (e.g., no patches will be developed, no security improvements will be made, and, sometimes, no troubleshooting technical assistance will be offered).

End-of-Support (EOS): means that an ICT product will no longer be supported (e.g., no patches will be developed, no security improvements will be made, and, sometimes, no troubleshooting technical assistance will be offered).

Information and Communications Technology (ICT): encompasses the capture, storage, retrieval, processing, display, representation, presentation, organization, management, security, transfer, and interchange of data and information; includes all categories of ubiquitous technology used for the gathering, storing, transmitting, retrieving, or processing of information (e.g., microelectronics, printed circuit boards, computing systems, software, signal processors, mobile telephony, satellite communications, and networks).

Product: part of the equipment (hardware, software and materials) for which usability is to be specified or evaluated.

10.2 ORIGINAL EQUIPMENT MANUFACTURER (OEM) END-USE INFORMATION

AND COMMUNICATIONS TECHNOLOGY (ICT) PRODUCT

The contractor shall provide new equipment unless otherwise formally approved by the

Government, in writing. The contractor shall provide only Original Manufacturer (OEM) end-use products to the Government. In the event that a shipped OEM product, or part or component of that product, fails, all replacements must be new (i.e., non-refurbished, not previously used) OEM.

The contractor may provide previously-used OEM products only with written Government approval. Such parts shall be procured from their original source and shipped only from the manufacturer’s authorized shipment points.

10.3 ACCOUNTING OF COMPONENTS IN ICT PRODUCTS

The contractor shall provide and maintain a list of components for each product used in performance of the contract, including through subcontracts or other arrangements. This list for each product shall provide the component manufacturer’s name, address, state, and/or domain of registration, and, where applicable, the Unique Entity Identifier (UEI) number, for all components comprising the ICT products.

The contractor shall notify the Government when a new contractor/subcontractor/service provider is introduced to the ICT provided on this contract, or when suppliers of components or products are changed. If a software component used in the performance of the contract is updated with a new build or release, the contractor must update the list provided in accordance with (i) above to reflect the new version of the software. This includes software builds to integrate an updated component or dependency.

For software products, the contractor shall provide all OEM software updates, and patches to correct defects, for the life of the product [i.e., until the “End of Life” (EoL) or “End of Support” (EoS)]. Software updates and patches shall be made available to the government for all products procured under this Contract, and replaced when End of Support (EoS) is reached.

A contractor using team members in performance of the contract (e.g., subcontractors or other service providers) shall ensure that the standards for the accounting of components in this subsection are met by team members.

10.4 SUPPLY-CHAIN TRANSPORT

The contractor shall use formal, documented and accountable transit, storage, and delivery procedures (i.e., the possession of the end-use product to be delivered is documented at all times from initial shipping point to final destination, and every transfer of the product from one custodian to another is fully documented and accountable) for all information and communication technology (ICT) shipments to fulfill this contract.

The contractor shall maintain all records pertaining to the transit, storage, and delivery of ICT deliverables under this contract through at least 6 months after acceptance, and make available for inspection upon request of the Government.

The contractor shall make use of tamper-proof or tamper-evident packaging for all shipments.

The contractor shall provide a packing slip for each container or package with the information identifying the contract or order number, a description of the hardware/software enclosed (Manufacturer name, model number, serial number), and the customer point of contact.

The contractor shall provide a shipping notification to the intended government recipient;

with a copy transmitted to the Contracting Officer, or other designated representative. This shipping notification shall be provided electronically and identify the contract or order number, a description of the hardware/software being shipped (manufacturer name, model number, serial number), initial shipper, shipping date and identifying (tracking) number.

10.5 CHANGES TO OWNERSHIP AND CONTROL

The Contractor shall immediately notify the Contracting Officer and Contracting Officer’s

Representative regarding any significant changes to corporate ownership or control from contract award through final delivery or the end of the period of performance. A significant change would be one in which a change occurs in the individuals or entities who, directly or indirectly, either (1) exercises substantial control over an entity, or (2) owns or controls at least 25 percent of the ownership interests of an entity.