RFS.pdf

FOR OFFICIAL USE ONLY

Public availability to be determined under 5 USC 552 1

AMERICA’S MOST IMPORTANT

AVIATION INFRASTRUCTURE PROJECT

REQUEST FOR SOLUTIONS

BRAND NEW AIR TRAFFIC CONTROL SYSTEM

NO EXCUSES. EXCEPTIONAL DELIVERY

Public availability to be determined under 5 USC 552 2

REQUEST FOR SOLUTIONS

BRAND NEW AIR TRAFFIC CONTROL SYSTEM

NO EXCUSES. EXCEPTIONAL DELIVERY.

Section A: Performance Work Statement (The Role of the Integrator)

Section B: Offeror Instructions

Section C: Evaluation of Proposals

Section D: Integrator Accountability Contract Term Sheet

Section A – Performance Work Statement (The Role of the Integrator)

Page ii

SECTION A

PERFORMANCE WORK STATEMENT (THE ROLE OF THE INTEGRATOR)

Table of Contents

1.0 A HISTORIC GENERATIONAL OPPORTUNITY

1.1 BACKGROUND

1.2 SCOPE

1.2.1 Modernization of Legacy NAS Infrastructure and Capabilities

1.2.2 Comprehensive Execution Approach for NAS Modernization

1.3 LOCATIONS

1.4 SITE ACCESS

1.5 SITE DOCUMENTATION

1.5.1 Equipment Space

1.6 PROJECT TIMELINE

1.7 OVERVIEW

2.0 GENERAL TASKS

2.1 STAKEHOLDER MANAGEMENT

2.2 SYSTEM INTEGRATION

2.2.1 Training

2.2.2 Implementation

2.3 SYSTEM PRODUCTION AND PROCUREMENT

2.4 FACILITY ENGINEERING

2.5 SYSTEM ENGINEERING

2.5.1 Design Reviews

2.5.2 Requirements Management

2.5.3 System Safety

2.5.4 System Efficiency

2.5.5 System Security

2.6 TEST AND EVALUATION SUPPORT

CDRL TE-02 Test Procedure

2.6.1 Anomaly Report

2.7 SYSTEM DEPLOYMENT

2.8 PROGRAM MANAGEMENT

2.8.1 Schedule Management

2.8.2 Risk Management

2.8.3 Data Management

2.8.4 Quality Assurance

2.8.5 Configuration Management

2.8.6 Reporting and Meeting Support

2.9 FINANCIAL AND CONTRACT MANAGEMENT

2.9.1 Acquisition Strategy

2.9.2 Subcontract Management

2.10 LIFECYCLE MANAGEMENT

2.11 PERFORMANCE MONITORING

2.12 INTEGRATED LOGISTIC SUPPORT

3.0 SPECIFIC TASKS

3.1 GOVERNANCE

3.2 ANALYSIS AND PLANNING

3.2.1 Gap Analysis and Operationalization

3.2.2 Sustainment and Transition Planning for Modernized NAS Capabilities

3.3 NAS OPTIMIZATION AND MODERNIZATION

3.4 NAS EVOLUTION

3.4.1 Facilities

Public availability to be determined under 5 USC 552 iii

3.4.2 Automation

Section A – Performance Work Statement (The Role of the Integrator)

1.0 A HISTORIC GENERATIONAL OPPORTUNITY

The Federal Aviation Administration (FAA) strategic pillars are built on a strong foundation of people supported by a vision for the future of air travel and backed by modern infrastructure. At the core, the FAA is focused on building a new generation of aviation professionals to manage the increasingly complex airspace operations. Building on this foundation, the FAA is working to optimize the National Airspace System (NAS) to meet future demands - including integrating emerging technologies while enhancing system resiliency and efficiency. To enable these advances, the FAA is deploying new NAS infrastructure with modern technologies and facilities that improve efficiency and resiliency and support sustainable growth. Together, these pillars create a forward-looking, innovative strategy that keeps the NAS the safest and most efficient in the world (Three Pillars).

In support of this strategy, the FAA is undertaking a transformative initiative to create a Brand-New Air Traffic Control System (BNATCS) while simultaneously fortifying and modernizing the NAS over two critical phases through a No Excuses Exceptional Delivery Standard (NEEDS).

• The first phase (Phase 1) addresses critical vulnerabilities in the NAS by replacing existing outdated, antiquated equipment or facilities with new, updated equipment. Phase 1 moves the FAA towards more current technology and equipment that can serve as the backbone for, and is entirely interoperable with, a modernized NAS of the future.

• The second phase (Phase 2) evolves the capabilities of the NAS to prepare for the future, including the design and build of new Air Route Traffic Control Centers (ARTCCs) and a common automation platform to be fully integrated into up to six new ARTCCs. Phase 2 will be a comprehensive reinvention of the systems, services, and platforms that enable NAS operations and include new state-of-the-art facilities and a common automation platform, all deliverable at rapid speed with minimal interruption to service. The initiative seeks to leverage advanced and proven technologies to not only sustain but completely transform the NAS capabilities, ensuring the system can meet the evolving needs of airspace users now and for generations to come.

Note: Phase 2 does not form part of the base scope of services to be performed by the Integrator under the IAC, but the FAA reserves the right, at its option and in its absolute discretion, to issue Task Orders under the IAC in connection with Phase 2.

These two Phases encompass nearly all aspects of the FAA’s air traffic operations—including telecommunications, radio communications, surveillance, automation, and facilities. Overall, the Integrator will serve as a force multiplier (not a replacement) of FAA resources.

CHALLENGES = OPPORTUNITIES

The Integrator’s Core Objectives & Mission (Integrator Objectives & Mission):

1. Safety First – Cornerstone of Modernization - Safety is non-negotiable. The Integrator ensures that every element of BNATCS—from data management to frontline operations—upholds the highest safety standards for the traveling public.

2. Time Urgency – 3.5 Years, No Excuses - The Integrator must deliver transformational change across the NAS within three and one half (3.5) years. Logistics, phasing, deconfliction, and interoperability will be central to rapid deployment, with a mandate of exceptional delivery.

3. Single Point of Accountability - The Integrator embodies the “no excuses” model—responsible for ensuring all components work, all the time, to a high standard. Anticipating FAA needs and delivering proactive solutions are essential.

4. Integration & Interoperability- The Integrator must seamlessly introduce new systems into outdated facilities while ensuring interoperability across legacy and modern platforms.

5. Criticality & Risk Prioritization - Compensation will be tied to addressing the most critical risks and high-value components first, ensuring stability as modernization progresses.

6. Build for the Future - Beyond fixing today’s challenges, the Integrator must design for tomorrow: deploying technology that will be compatible with a common automation platform and will be scalable and capable of integration across future facilities for decades to come.

7. Partnership with Labor - Collaboration with the FAA’s skilled workforce is essential. The Integrator must operate with communication, transparency, and respect, ensuring the labor force is empowered in building the BNATCS.

8. No Surprises – Risk Management - The Integrator is responsible for eliminating uncontrolled risks and maintaining predictability by proactively managing and mitigating operational and technical challenges to ensure avoidance of cost overruns, delays, and technical obsolescence.

9. Industry Partnership - BNATCS will transform aviation. The Integrator is expected to propose innovative delivery models as authorized in the Accelerated Acquisition provisions in AMS to achieve full program scope.

10. NEEDS - meet the NEEDS of the FAA by delivering on the following without excuses, claims or surprises regardless of challenges & constraints:

• meeting or exceeding: (i) BNATCS performance requirements to deliver operational benefit to the NAS and (ii) timelines and schedule while focusing on addressing critical needs first;

and

• deliver on budget all while maintaining and improving the safety, security, and efficiency of the NAS.

1.1 Background

The purpose of this Performance Work Statement (PWS) is to acquire the services of a qualified Integrator to lead, facilitate, and execute the FAA’s Brand-New Air Traffic Control System. The Integrator will be responsible for coordinating and implementing a comprehensive set of activities to modernize the systems, services, and infrastructure that support NAS operations. This effort requires the application of advanced, emerging, and proven technologies to enhance system performance, eliminate outdated capabilities, and ensure seamless integration across the NAS—while maintaining operational safety, continuity, and efficiency. The Integrator’s role is central to delivering a resilient and future-ready airspace system aligned with the FAA’s long-term vision.

The Integrator will be responsible for executing all necessary efforts to deliver the BNATCS to meet the NEEDS of the FAA. This includes upgrading facilities, acquiring and deploying advanced technologies, managing integration across diverse systems, and coordinating with Stakeholders to deconflict parallel efforts across the NAS. All work must not compromise safety.

A core objective of the integrator contract is to increase NAS performance and reliability. The FAA will establish a baseline reliability for the current NAS to include impacts to the flying public (flight delays) as well as NAS equipment reliability. These metrics will serve as factors under the Award fee plan and evaluation of overall Integrator contract performance.

The Integrator will play a central role in fulfilling the modernization initiative. Responsibilities include evaluating and applying innovative technologies, consolidating redundant capabilities, and designing integrated solutions that improve the safety, efficiency, and resilience of the NAS. These solutions must be modular, interoperable, and scalable, enabling integration with legacy infrastructure without unmanaged disruptions, and align with the FAA’s long-term operational and technological vision for a dynamic, adaptable, and nationally harmonized airspace system.

The FAA seeks an Integrator capable of analyzing and applying current and emerging technologies to meet or exceed baseline requirements, while ensuring seamless integration with existing infrastructure— without compromising safety, performance, or operational continuity across the NAS. This effort must be viewed as an opportunity to streamline, modernize, and transform NAS operations.

The Integrator is envisioned as the prime contractor, systems architect, and conductor of industry, accountable for delivering a safe, modern, and interoperable ATC system in record time. This role is both technical (system integration) and managerial (risk, contracts, subcontractor coordination), and it represents a paradigm shift in how the FAA manages major infrastructure programs.

1.2 Scope

This effort is across the two critical Phases. Phase 1 encompasses strategic equipment and technology refresh to serve as the backbone for modernization. Phase 2 is focused on the modernization, integration, and transformation of the services, systems, and platforms that enable operations within the NAS.

The Integrator will be responsible for the full execution of modernization activities, including upgrading infrastructure and facilities, acquiring and deploying advanced technologies, managing integration across diverse systems, and coordinating with internal and external Stakeholders to deconflict activities across the NAS. These efforts must be performed without disrupting ongoing airspace operations or compromising safety, performance, or continuity.

The scope includes, concurrent with rapid deployment and implementation, capability gap analysis, and discovery effort to assess the commercial marketplace and identify viable current and emerging technologies that meet or exceed current FAA baseline requirements to deliver a modern and future-proof NAS. Based on this assessment, the Integrator will plan, execute, and coordinate the programmatic functions necessary to deliver integrated, end-to-end solutions all as approved by the FAA. These functions include requirements analysis, system design, testing and validation, procurement, subcontractor and risk management, integration, sustainment, and post-acceptance operational and life-cycle maintenance support.

1.2.1 Modernization of Legacy NAS Infrastructure and Capabilities

The FAA’s objective is to modernize and replace the aging NAS infrastructure and systems across key operational Workstreams, including communications, surveillance, automation, and facilities. This includes deploying, integrating and transitioning the work, which includes, but is not limited to:

• Delivering Key Workstreams:

o Communications: telecommunications updating FAA’s network from Time Division Multiplexing (TDM) to a fully modernized Internet Protocol (IP), upgrading legacy Voice over Internet Communication Enterprise (VoICE) switches, and upgrading radio communications from analog to digital.

o Surveillance: enhanced surveillance capabilities such as modern Surveillance Radars, Surface Awareness Initiative, and Surface Movement Radar systems.

o Automation: Modernize air traffic automation through upgrading the traffic management system in the NAS (Flow Management Data and Services), deploying electronic flight strips to replace paper flight strips (Terminal Flight Data Manager), establishing a brand new information display system (Enterprise Information Display System), and deploying technology that will be interoperable and capable in the future during Phase 2 to unify air traffic automation by implementing a Common Automation Platform (CAP) that integrates and consolidates multiple existing systems—such as Standard Terminal Automation Replacement System (STARS) and En Route Automation Modernization (ERAM). This effort establishes an orchestrated and cohesive automation backbone critical for the FAA’s modern air traffic control system.

o Alaska / Airspace: Additional efforts include enhancing capabilities for Alaska’s Flight Services through the Alaska Automation Capability (AAC) and integrating better weather in critical airspace with Automated Weather Observing Systems (AWOS), Visual Weather Observing Systems (VWOS), and weather cameras.

o Facilities: Where authorized by the FAA in Phase 2, without impacting safety, constructing the first new ARTCC in 60-years and up to five (5) additional ARTCCs (for a total of six (6)). In addition, the Integrator may construct the most cost- and time-efficient Terminal Radar Approach Control Facilities (TRACONs), Air Traffic Control Towers (ATCTs), unstaffed infrastructure, and Combined Control Facilities (CCFs) to enable deployment, integration, and operational support of these new and future technologies.

• Integration and Seamless No Excuses Exceptional Delivery: All components of the BNATCS must be executed without uncontrolled disruption to airspace operations and must ensure efficient delivery and system interoperability and integration between existing and new systems, as well as scalability, and alignment with the FAA’s long-term vision for a secure, efficient, and resilient NAS. The Integrator must ensure short-term and long-term systemwide integration seamlessly throughout the NAS.

• Documentation: All underlying documentation must be made available, be transparent, be shareable without limitation preventing any subcontractor lock and made available on an Open Book Basis (i.e., fully transparent).

• Subcontractor Lock: The Integrator is required to ensure that the terms of its subcontracts provide for efficient and seamless phase-out of subcontractors and, where applicable, Integrator Team Members.

• Partnership with Labor: The Integrator’s role will be a force multiplier and supportive to the FAA’s critical and highly skilled labor force. The Integrator will design and deliver a BNATCS with the FAA’s labor force as its core client and partner and will ensure that all Integrator roles and responsibilities will be back-trained and redundant through FAA internal capabilities to ensure knowledge and skills transfer, fortifying the safety and resiliency of the FAA and the

NAS.

For each Workstream, the Integrator will be required to perform integration services as its primary obligation across the entirety of the BNATCS, along with the following: design, engineering, procurement, construction, management, installation, commissioning, maintenance, and/or operations.

The FAA will indicate below the minimum components of the required Integrator Services.

1.2.2 Comprehensive Execution Approach for NAS Modernization

The Integrator will develop and implement a comprehensive approach to execute the scope and objectives of the NAS modernization effort. The Integrator must define and/or manage the strategy, processes, tools, organizational structure, and resources necessary to deliver integrated solutions across all Workstreams— communications, surveillance, automation, Alaska airspace, and facilities. This approach must address program planning, Stakeholder coordination, risk and schedule management, acquisition and integration activities, supply chain management, testing, deployment, and sustainment. The execution strategy should reflect an understanding of FAA priorities and constraints, while ensuring flexibility, accountability, and alignment with the FAA’s long-term vision for a modern, resilient, and harmonized NAS.

1.3 Locations

The Integrator’s key personnel must perform the work activities described in this RFS on-site at FAA facilities and remote equipment sites across the entire NAS as required and agreed with the FAA. The Integrator's Key Personnel must be available to meet with key FAA personnel where required by the FAA (e.g., FAA Headquarters).

1.4 Site Access

The FAA will provide the Integrator with site access to FAA facilities for installation of equipment, preventative and corrective maintenance as approved by the FAA, and site surveys. Integrator and/or subcontractor personnel may be required to satisfy certain security requirements before they can be admitted to any FAA facility. The Integrator will maintain the sole risk and liability for failure to obtain site access and should assume as part of its site installation plans that it will need to have a dynamic contingency approach for site access issues, coupled with plans for redeployment, re-sequencing, and re-allocation based on the FAA’s operational necessity.

The Integrator must comply with site-specific physical security requirements, procedures, and processes for individual FAA facilities.

CDRL IMP-01 Generic Site Implementation Plan CDRL IMP-02 Site Specific Implementation Plan

1.5 Site Documentation

The FAA will provide the currently available site documentation (e.g., site drawings and building blueprints) to support the delivery of BNATCS services at FAA facilities. If the FAA performs a site survey, the FAA will provide the Integrator with the results. The Integrator must maintain the confidentiality of these documents in accordance with FAA Order 1600.75, Protecting Sensitive Unclassified Information (SUI).

1.5.1 Equipment Space

When available, the FAA will provide space at FAA-provided service delivery locations for installation of Integrator-provided equipment. The availability of space for installation of Integrator-provided equipment will be determined by the FAA on a case-by-case basis. The amount and type of space available for use in on-site maintenance activities, equipment storage, and related purposes will also be determined by the FAA on a case-by-case basis. The Integrator may be required to store and/or stage its equipment in a temporary location due to space constraints and then relocate the equipment to its permanent location at a later date.

Upon request by the Integrator and subject to availability, the FAA will provide temporary workspace for Integrator personnel at FAA-provided services delivery locations. Workspace will generally be available at ARTCCs, large TRACON facilities, and other large facilities as determined on an individual case basis.

The workspace will include a desk and chair, telephone, and personal computer with connections to the FAA Local Area Network (LAN) and Wide Area Network (WAN), if required. Integrator personnel must adhere to all FAA orders and policies for the use of FAA computers and computer networks.

The Integrator’s approach to equipment/personnel space must be addressed in the site implementation plans.

CDRL IMP-01 Generic Site Implementation Plan CDRL IMP-02 Site Specific Implementation Plan

1.6 Project Timeline

All work must be performed under an accelerated timeline that demands efficient, focused, and stepped delivery without sacrificing system integrity, safety, or operational reliability. The Integrator must ensure that all solutions are compatible with legacy and future infrastructure, enable smooth transitions, and eliminate redundant capabilities, while positioning the NAS to accommodate future technologies and evolving user needs. The Integrator must maintain schedules as specified in Section 2.8.1 of this document.

1.7 Overview

The Integrator must provide quality technical, engineering, analytical, planning, construction, installation, maintenance, and operational support to achieve the requirements of this RFS. The Integrator must furnish and make available all personnel, supplies, equipment, materials, data, facilities, and services necessary to assist the FAA in accomplishing its mission.

As required by the FAA, the Integrator may be required to interface with system integration contractors, equipment manufacturers, airport personnel, various FAA and U.S. government and military organizations, and international organizations such as Eurocontrol and NAV Canada.

The Integrator’s scope is outcome and performance-based, with the objective to deliver BNATCS to meet the NEEDS of the FAA. The Integrator will need to perform all work necessary to achieve such outcome and performance standard, including but not limited to the following:

• Stakeholder Management;

• System Integration;

• System Production;

• Facility Engineering;

• Construction Management;

• Risk Management;

• Accountability Reporting;

• System Engineering;

• System Deployment;

• Program Management;

• Contract Management; and

• Lifecycle Management.

2.0 General Tasks

The Integrator must coordinate with Stakeholders to ensure a common understanding of program acquisition and sustainment plans. The Integrator must provide program execution support to facilitate program-level decisions. In addition to, and concurrently with, executing on the Existing Rapid Delivery Scope procured by the FAA, the Integrator will be required to provide program management, procurement, design and engineering development, pre-development and site investigation work necessary to develop Task Order Proposals and upon approval of such Task Orders will be required to immediately implement and deploy its capabilities to performing the work required for each Task Order to complete the full Integrator Services within 40 months.

2.1 Stakeholder Management

The Integrator must provide comprehensive responsibility, oversight, management, coordination, and execution of NAS modernization activities across the entirety of the BNATCS, including the key Workstreams: surveillance, communications, automation, Alaska / airspace, and facilities. The Integrator must ensure all modernization efforts are aligned, interdependencies are identified and resolved, and delivery is cohesive and synchronized across all Workstreams.

This includes managing and coordinating a diverse Stakeholder landscape. The Integrator will engage with all necessary Stakeholders for the delivery and management of BNATCS, including but not limited to:

Internal Stakeholders External Stakeholders FAA organizations and the Department of Transportation

Other federal agencies, including, but not limited to, the Department of Defense, Homeland Security, Energy, Environment, Justice, and Environmental Protection Agency

Program & Acquisition Offices State and local governments, including airport authorities Engineering Industry partners, including, but not limited to, airlines, contractors, subcontractors, suppliers, Safety Existing Subcontractors Logistics & Depot functions Operational units Union representatives

When necessary, and in coordination with the FAA, the Integrator must interface with, integrate, or build upon systems and efforts already underway. Therefore, effective cross-subcontractor collaboration, schedule synchronization, technical interface planning, and configuration control will be essential to successful delivery. All activities must support seamless integration into NAS operations, preserve operational safety and continuity, minimize service disruptions, and establish a foundation for future capability expansion.

2.2 System Integration

The Integrator must ensure the seamless integration of systems, capabilities, and functionality into the NAS to enable air traffic controllers and operational personnel to access and utilize critical information required to perform their duties effectively.

The Integrator’s role includes accountability for integration cost, schedule, and performance. This is a deliberate effort to avoid instances where fragmented contracts lead to delays, avoidance of critical issues, finger-pointing, and lack of ownership. The Integrator must ensure compatibility, interoperability, and modernization across 74,000+ pieces of equipment and multiple legacy systems.

The Integrator must manage physical and logical connections, interfaces, and coupling of new and existing systems, including systems and functionality already under FAA contract—ensuring data flows, interoperability, and real-time performance meet operational requirements. This integration must maintain the integrity, reliability, and availability of NAS services while supporting enhanced decision-making, situational awareness, and safety across all domains of air traffic operations and all in all respects meet the NEEDS of the FAA.

The Integrator must ensure the successful deployment and operation of all system elements of the BNATCS into the NAS. The Integrator must identify, track, and present integration issues, and coordinate with stakeholders to closure promptly. The Integrator must provide product and integration support to ensure interoperability between legacy systems and newly deployed capabilities

Where needed to meet the NEEDS of the FAA, the Integrator must perform all required work, including but not limited to the following activities:

• Develop system specifications to ensure the system will meet or exceed the requirements of the NAS, which will also be designed by the Integrator in partnership with the FAA to meet the NEEDS of the FAA;

• Monitor the design and development of interfaces between new and existing systems to ensure compatibility with the NAS;

• Ensure Interface Design Documents and Interface Control Documents are complete and accurately reflect system interface behavior;

• Review and provide recommendations on any changes, improvements, or deletions that are to be made to physical and/or functional systems, requirements, and/or services;

• Monitor and manage the installation, integration, and validation of the system to ensure that the system behaves as documented when integrated into the NAS, as required;

• Proactively identify System Integration issues, provide resolutions, and track to closure

• Provide technical assistance to ensure the successful integration of new and upgraded systems/networks into the NAS;

• Assist with documenting and maintaining NAS Change Proposals (NCPs), new product evaluations, and assist with security risk mitigation; and

• Manage project design teams on the development of adapters to support system interfaces.

2.2.1 Training

The Integrator must implement and/or manage a comprehensive training program to ensure FAA employees and labor have the knowledge, skills, and abilities to operate and maintain the BNATCS. This program must include management and tracking of training to operate and maintain the BNATCS.

Overall training development must include training course design guides, instructor guides, course materials, training labs, and other documents as required. Training materials will be approved by the

FAA.

CDRL TR-01 Manuals / Instruction Books TR-01 CDRL TR-02 Complete Course Materials TR-02

2.2.2 Implementation

The Integrator, in construction terms, will be a “general contractor” leading a wide range of subcontractors, and technology providers, and must plan and execute a comprehensive implementation program that leads to successful installation, checkout, test, and government acceptance in an operational environment and ensure stable, improved, and optimized operations. The Integrator must ensure “everyone plays nice” and prevent subcontractor silos and finger-pointing. The Integrator will translate for its subcontractors the operational needs of controllers, pilots, and technicians into a comprehensive functional system. The Integrator must ensure continuity of NAS operations throughout the deployment process and ensure no unmanaged disruptions while maintaining system interoperability to support uninterrupted air traffic services and full mission capability upon activation. All controlled disruptions must be coordinated and managed with the FAA in a planned and organized way, ensuring FAA written approval before executing any controlled disruption.

Implementation tasks include, but are not limited to:

• Deconflict with other site activities to minimize disruption to existing facilities and maximize efficiency in delivery and cost.

• Stakeholder coordination;

• Site survey and site engineering design;

• Rapid permitting, governmental and regulatory approvals, innovation, and implementation;

• Site preparation and management activities;

• Installation, optimization, and checkout & commissioning;

• Supporting Site Acceptance Testing (SAT);

• Contractor Acceptance Inspection (CAI);

• Management and implementation of temporary systems to support redundancy and continuity;

• Quality Assurance and Quality Control;

• Site remediation activities;

• Removal and disposal of the legacy systems; and

• Operations and maintenance (where applicable).

Critical to the Integrator’s responsibilities will be any necessary upgrades and integration of infrastructure, as well as deconflicting access at existing FAA facilities where new equipment and systems are installed and commissioned.

CDRL IMP-01 Generic Site Implementation Plan CDRL IMP-02 Site Specific Implementation Plan CDRL IMP-03 Engineering Drawings

2.3 System Production and Procurement

The Integrator must plan, manage, deconflict, streamline, and rapidly execute the procurement of all equipment, services, and construction necessary to support NAS modernization, including both operational and support systems. This includes acquiring warranty coverage, site and depot spares, site consumables, specialized test equipment, and other support equipment essential for deployment, integration, and sustainment, and may include maintenance and operational providers, infrastructure as a service, and energy as a service. The Integrator will ensure that all procured packages meet or exceed FAA requirements and are delivered in strict compliance with project timelines, operational needs, and lifecycle support to ensure that the long-term operations and maintenance of the BNATCS are sustainable into the future.

When procuring packages, the Integrator must consider the following:

• Operational systems;

• Support systems and equipment;

• Warranty, site, and depot spares;

• Intellectual property rights;

• Long-term life-cycle costs;

• Integration with existing and new facilities;

• Modularity;

• Site consumables; and

• Specialized test equipment.

For new systems introduced to the NAS, the Integrator must, at a minimum:

• Review and/or produce system documentation for the First Article, or an acceptable equivalent, testing (at FAA’s discretion) of the identified system elements at the factory, and production testing at FAA-identified test sites;

• Monitor the manufacturer's compliance with production specifications;

• Observe First Article, or an acceptable equivalent, testing, and production testing, as required by

FAA; and

• Ensure ongoing interoperability, functionality, and complete continuity of service to meet the

NEEDS of the FAA.

CDRL SE-07 System / Subsystem Specification CDRL SE-08 Interface Control Document CDRL SE-09 Software Version Description Document

CDRL TE-01 Verification Requirements Traceability Matrix (VRTM) CDRL TE-02 Test Procedure

2.4 Facility Engineering

The Integrator must, in coordination with the FAA, conduct facility and site planning, design, and implementation for identified projects within the BNATCS. The Integrator must identify and analyze any issues that may impact each facility and recommend solutions.

The Integrator must perform the following:

• Coordination with necessary personnel to define the proper location for the system;

• Preparation, coordination, and tracking of NCPs needed to place the system at the facility;

• Produce for FAA approval, all drawings, plans, and documents required to install equipment or alter in any manner (e.g. exterior wall penetrations) an FAA facility

• Tracking of all facility action items to closure; and

• Maintenance of facility schedules.

CDRL IMP-01 Generic Site Implementation Plan CDRL IMP-02 Site Specific Implementation Plan CDRL IMP-03 Engineering Drawings

2.5 System Engineering

The Integrator must, in coordination with the FAA, ensure the BNATCS meets functional and performance specifications, interface requirements, and cybersecurity requirements across the life of the contract. Throughout the life of the contract, the Integrator must provide engineering support, including but not limited to design, development, testing, and implementation of new capabilities as defined by the FAA. The Integrator must possess, maintain, and apply an in-depth understanding of industry standard reference architectures, the NAS Enterprise Architecture framework, and NAS subsystem functions and interfaces. The Integrator must lead monthly Technical Interchange Meetings with the FAA.

CDRL SE-05 Technical Interchange Meeting Package CDRL SE-06 Technical Interchange Meeting Minutes

2.5.1 Design Reviews

When determined necessary by the FAA, the Integrator must provide project reviews, including, but not limited to:

• Requirement Reviews (RRs)

• Preliminary Design Review (PDR)

• Critical Design Review (CDR)

• Functional Configuration Audit (FCA) and Physical Configuration Audit (PCA)

• Test Readiness Review

The Integrator must obtain concurrence from the FAA on the format and content of any reviews deemed necessary.

CDRL SE-01 Preliminary Design Review (PDR) CDRL SE-02 Preliminary Design Review (PDR) Minutes

CDRL SE-03 Critical Design Review (CDR) Package

2.5.2 Requirements Management

The Integrator must support the definition and analysis of functional and performance requirements for the BNATCS. BNATCS requirements will be submitted to the FAA. The Integrator must assess the completeness and accuracy of all requirements documents in the technical baselines and recommend improvements (including impact assessments, rationale, and justification). The Integrator must manage the implemented technical baseline. The Integrator must establish both out-put based performance requirements for its Integrator Services and technical requirements for its subcontractors to perform under Task Orders.

2.5.3 System Safety

The Integrator must ensure that the BNATCS infrastructure and services comply with FAA system safety requirements as defined in FAA Order 8040.C, FAA Safety Risk Management Policy. As requested, the Integrator must provide data and documentation to support the FAA’s safety system and hazard analyses that will be performed in accordance with the provisions of the Air Traffic Organization (ATO) Safety Management System (SMS) Manual.

As requested, the Integrator must participate in System Safety Panels conducted by the FAA to assess changes/modifications due to the implementation of BNATCS infrastructure and services. The Integrator must also anticipate future safety considerations for a BNATCS and propose modernized safety standards reflective of a completely transformed NAS.

During implementation and delivery of the BNATCS, the Integrator must ensure NAS safety requirements and standards are maintained. The Integrator must immediately remedy any degradation in safety.

2.5.4 System Efficiency

The Integrator must ensure that the BNATCS infrastructure and services comply with FAA Order JO 7210.3: Facility Operation and Administration as amended. The Integrator must work to minimize delays where possible without compromising safety. In addition to enhancing efficiency, the BNATCS must support the management of a secure NAS.

2.5.5 System Security

The Integrator must ensure (and cause its subcontractors to ensure) that all components of the BNATCS and any other federal information systems to be delivered implement cybersecurity measures that are integrated by design across the solution set, ensuring that all components work together securely and leverage the principles of zero trust, multi-factor authentication, and encryption. Without limiting the foregoing, the Integrator must deliver one or more Security Assessments in connection with BNATCS and any other federal information systems to be delivered (as required by NIST SP 800-53r5 (Recommended Security Controls for Federal Information Systems and Organizations) and one or more System Security Plans (SSPs) as set forth in Appendix A of NIST SP 800-18 (Guide to Developing Security Plans for Federal Information Systems), in each case applying the NIST Risk Management Framework (RMF) across all system elements during development. This includes planning, categorizing, selecting, implementing, and assessing security controls through security assessment reports, and ensuring each system achieves an Authority to Operate before Initial Operational Capability (IOC). To the extent the Integrator leverages cloud service providers as part of its design solution, it shall ensure such service offerings achieved the appropriate impact level under FedRAMP. As part of the security authorization process, the Integrator must prepare, submit, and coordinate all required documentation per applicable standards and directives, including current FAA Order 1370.121, National Institute of Standards (NIST) Special Publications (SP), OMB Circulars, Executive Orders (EO), and Binding Operational Directives (BOD). The Integrator must ensure that continuous system security monitoring is implemented, and the integrated system can support a Continuous Authority to Operate (C-ATO) process.

The Integrator must remediate system vulnerabilities discovered during security assessments, continuous monitoring, incident response activities, or information system error handling per the schedule captured in the Plan of Action and Milestones (POA&M) (in accordance with Implementation Memorandum 2023- 010A), findings, FAA policy, or direction from the FAA. Without limiting the foregoing, the FAA may determine, in its sole discretion, the appropriate Federal Information Processing Standard (FIPS) 199 categorization (Low, Medium, High) applicable to each component of the BNATCS. The Integrator must provide real-time data to the FAA to inform the FAA of vulnerabilities, and the methods used to identify and test new and/or additional vulnerabilities. The Integrator must report the status of vulnerabilities and remediation as required, in real-time and with visibility and transparency to the core FAA BNATCS Leadership Team. The Integrator must report any suspected cybersecurity breaches to the FAA Security Operations Center (SOC) within agreed-upon timeframes.

The Integrator must (and must cause its subcontractors to) (i) mitigate supply chain risk (as defined under DFARS 252.239-7018) (a) and (ii) ensure resiliency in the provision of supplies and services to the

FAA.

The Integrator must ensure that all system elements, applications, and services delivered under the IAC comply with Federal cybersecurity requirements (including those set forth above), are secure by design, and undergo thorough testing before initial operations. Security testing, including, without limitation, dynamic and static code testing, shall be integrated into all phases of the system development life cycle

(SDLC).

The Integrator must support FAA’s execution of penetration testing that will using active techniques, tactics and procedures from threat intelligence, functional security testing, vulnerability testing, and risk assessments (based on threat modeling and threat intelligence) on the BNATCS infrastructure. The FAA and Integrator will define rules of engagement before the FAA conducts penetration testing and risk assessments. . The Integrator must implement all FAA-Integrator agreed-upon documentation updates resulting from security testing and risk assessment activities. The Integrator must assist the FAA with the assessment, response, and closure of POA&M findings. The Integrator’s continuous monitoring and reporting must reflect the status of POA&M findings until they are fully resolved.

The integrator must ensure all security testing is performed following FAA Policy 1370.121 and NIST SPs, including but not limited to:

1. NIST SP 800-160 (Systems Security Engineering);

2. NIST SP 800-53 (Security and Privacy Controls);

3. NIST SP 800-115 (Technical Guide to Information Security Testing and Assessment); and

4. NIST RMF, including control assessment requirements.

CDRL SEC-02 System Security Plan (SSP) CDRL SEC-03 System Characterization Document (SCD) CDRL SEC-04 Security Incident Statistics and Performance Report CDRL SEC-05 Security Incident Report

2.6 Test and Evaluation Support

The Integrator, in conjunction with the FAA, must manage the test and evaluation of the BNATCS. This support includes but may not be limited to:

• Development and/or review of test plans and procedures;

• Support planning and coordination of test activities;

• Observation and support of all aspects of formal and informal subcontractor-conducted testing to ensure that performance, interface, interoperability, and information security requirements are met and provide feedback on the test results to the FAA as requested; and

• Review of subcontractor-developed test reports and delivery of recommendations to the FAA as requested.

The Integrator’s Test & Evaluation (T&E) program must be comprehensive to verify that the solution meets the critical performance requirements. The Integrator must develop a T&E program and test plan that includes detailed verification methods that trace each FAA requirement to its corresponding validation activity, demonstrating compliance through objective evidence such as existing documentation, test reports, analysis data, or certification artifacts.

The Integrator must obtain concurrence from the FAA on the format and content of any test documentation deemed necessary.

CDRL TE-01 Verification Requirements Traceability Matrix (VRTM) CDRL TE-02 Test Procedure CDRL TE-03 Test Report Reporting

2.6.1 Anomaly Report

The Integrator must manage a database of anomalies and present metrics on project anomalies as required by the FAA. The Integrator must track all anomalies found during design, analysis, test activities, and during operations, and present status of anomalies pending closure.

2.7 System Deployment

The Integrator must manage the coordination of subcontractors to deploy system elements of the BNATCS at FAA facilities. The Integrator must:

• Prepare, schedule, and support pre-briefings, site coordination telecoms, Pre-Site Surveys and investigations, Site Surveys, training needs assessments, deconfliction strategies, and other coordination activities required to successfully deploy a system into an operational environment;

• Track and maintain the status of any action items that occur during the conduct of any implementation activities and provide temporary facilities necessary to ensure redundancy and continuity of service and safety;

• Coordinate with those regions, sectors and centers, including managing airport and airline (in coordination with the FAA) interfaces that may be affected by BNATCS deployment;

• Prepare and maintain an implementation plan for all projects within the BNATCS describing the activities of each implementation, detailed schedules and milestones necessary to track the progress of each implementation and serving as the core interface between all BNATCS subcontractors performing work at a location and across the system to ensure all components will work seamlessly together locationally and functionally;

• Prepare, review and provide comments on all Contract Data Requirements List (CDRL) item documents pertaining to implementation;

• Support the activities for the decommissioning and removal of equipment from each site, and disposal of the equipment in accordance with FAA disposal procedures; and

• Participate in design reviews and site inspections and participate in implementation working groups.

2.8 Program Management

The Integrator must provide the overall management and administrative effort necessary for the BNATCS to ensure that the requirements of this RFS and the IAC are met or exceeded in order to to meet the NEEDS of the FAA. The Integrator must include provisions for technical and administrative planning, organization, coordination, resource allocation, and risk management. The Integrator must track program progress utilizing established metrics and share the metric and related data with the FAA in real-time through a dashboard that will be updated daily and through the conduct of Progress Management Reviews (PMRs) and Technical Interchange Meetings (TIMs).

The Integrator must develop a “Digital Command Center” that will serve as a centralized hub that brings together project information, schedule risk alerts, field updates, and contract status, facilitating immediate decision-making across FAA business areas.

The Integrator must provide a full range of program management support to the FAA. The Integrator must provide support to all projects within the BNATCS in the development and maintenance of schedules, process flow charts, Memorandums of Understanding/Agreements, and plans necessary to monitor and control each project. This support must include, but is not limited to:

• Coordinating with the appropriate FAA organizations, regions, sector offices, the FAA Logistics Center, the FAA Academy, and/or the William J. Hughes Technical Center;

• Leading team meetings, working groups, program reviews, senior level status reviews, and team building exercises;

• Engaging independent quality management teams with a duty of care to the FAA;

• Tracking and processing of actions and resolutions

• Tracking identified risks and documenting potential work-around and/or resolution

• Tracking existing program configurations, issues and status; and

• Providing support for the development of project memos, presentations, handouts, status charts, and position papers.

The Integrator must manage the project/program schedule(s), program performance, risks, quality control, warranties, subcontracts, data, and provide the FAA with transparency of all NAS modernization efforts that satisfies the FAA’s objectives, while still ensuring that the FAA maintains its ability to control the NAS and step in where needed for emergency or safety events.

CDRL PM-01 Monthly Status Report (MSR) CDRL PM-02 Contract Fund Status Report CDRL PM-03 Integrated Master Schedule (IMS) CDRL PM-04 Program Management Review (PMR) Package CDRL PM-05 Agenda, Briefings, Action Item List and Meeting Minutes

2.8.1 Schedule Management

The Integrator must develop, implement, manage to, update, and maintain an Integrated Master Schedule (IMS) by logically integrating detailed program activities. The schedule must contain the planned events and milestones, exit criteria, and their dependencies from contract award to the completion of the IAC.

All contract schedule information delivered or presented at program reviews must originate from the IMS and must contain all critical events, predecessors’ and successors’ events, and their dependencies. The IMS must detail the Step 2 Milestones and Step 3 Milestones and the overlap and critical path method interdependencies between each of the deliverables. The IMS must also identify key time periods for FAA responses and reviews, all of which will be subject to FAA’s approval.

The Integrator must obtain concurrence from the FAA on the format and content of IMS.

Essential to the success of the BNATCS is the timing for phasing of the Integrator’s Services, as various components of the BNATCS are interdependent on the timely and proper completion and coordination of other components. Accordingly, the IMS must illustrate the overlap and phasing intended for each Workstream and Task Order to ensure that work is only required to be completed once, and all systems are fully integrated and interoperable both forwards and backwards (where necessary) upon installation and commissioning.

CDRL PM-03 Integrated Master Schedule

2.8.2 Risk Management

The Integrator must prepare, implement, and maintain a cost, technical and schedule risk management process which includes risk identification, assignment of risk categories, risk mitigation planning, mitigation plan implementation, corrective action, tracking of compliance, reporting of status and planning for risk abatement.

The Integrator must utilize the risk management process for:

• Identification and documentation of moderate and high-risk items for each risk assessment area to be presented during management reviews.

• Identification and implementation of risk handling approaches and track over time each moderate and high-risk item.

• Documentation of risk issues that have been successfully resolved and scheduling each open item into the program schedule.

• Development of mitigation plans to identify the recommended critical path for contract completion and the appropriate risk handling approach to lower the level of uncertainty identified.

• Recommendation of decision points in terms of cost, schedule, and performance…