Section J Attachment 1 - CAF_DMO_3.0_IDIQ_PWS.docx

FA8621-24-R-B006

Section J, Attachment 1 – CAF DMO IDIQ PWS

FA8621-24-R-B006

Section J, Attachment 1 – CAF DMO IDIQ PWS

Combat Air Forces’ Distributed Mission Operations

(CAF DMO)

Performance Work Statement (PWS)

18 September 2023

RFP NO: AFLCMC/WNS-RFP-23-155

Prepared For:

Department of the Air Force Air Force Life Cycle Management Center AFLCMC/WNSK Wright-Patterson AFB Dayton, Ohio 45433

GENERAL INFORMATION

This is a non-personal services contract to provide Distributed Mission Operations (DMO) services. The contractor may be referred to as a DMO Operation and Integration (O&I) contractor in order to reduce changes to other existing Government contracts.

Program Overview The Combat Air Forces’ (CAF) DMO services shall provide distributed training to capable Air Force trainers worldwide, by establishing a virtual environment to conduct distributed training events, from daily team training to large scale exercises that provides a safe, realistic training environment at a lower cost than live fly. To support this distributed training environment, the CAF DMO Program shall establish interoperability standards, which documents common formats for dissimilar trainers to exchange data for effective training.

The CAF DMO Program shall also provide a security solution that allows trainers of different security levels to train together. The CAF DMO Program supports the Distributed Mission Operations Center (DMOC) at Kirtland AFB, NM with on-site support as well as the Air Combat Command (ACC) and Distributed Training Center (DTC) at Langley AFB, VA.

CAF DMO Objective The overall objective of the DMO Program is to provide the CAF a persistent virtual training environment to increase operational effectiveness by integrating DMO as a component of readiness training.

CAF DMO Scope The CAF DMO scope is to provide distributed training capability to all current contractor sites and operational training sites by the end of the established transition period, as well as add distributed training capability to new sites as directed by the United States Air Force (USAF) and in accordance with (IAW) the PWS and Contract. As part of the CAF DMO Program, the contractor shall deliver its plan for transitioning distributed training service from the existing service to their service solution.

Contractor Personnel The contractor shall accomplish the assigned work by employing and utilizing qualified personnel with appropriate combinations of education, training and experience.

The Procuring Contracting Officer (PCO) or base commander may restrict employment of any contract employee, or prospective contract employee, at a Government installation, who is identified as a potential threat to the health, safety, security, general well-being, or operational mission of the installation and its populace. Contract managers and supervisors are included in the definition of employees. All contract employees must be able to read, write, speak, and understand the English language.

Contract personnel, IAW DFARS 211.106, shall identify themselves as contractor personnel by introducing themselves or being introduced as such and displaying distinguishing badges for meetings with Government personnel. Contractor personnel shall identify themselves as contractor employees in telephone conversations and in formal and informal written correspondence.

The contractor shall not employ any person who is an employee of the Unites States Government if the employment of that person would create a conflict of interest, nor shall the contractor employ any person who is an employee of the Department of Defense (DoD) or any subordinate branch of the DoD, either military or civilian, unless such person seeks and receives approval IAW the Joint Ethics Regulation, DoDD 5500.07R, and any applicable regulations of their subordinate branch of the DoD Location and Hours of Work Accomplishment of tasks required by this contract requires work IAW 4.4.4 Voluntary Protection Program The contractor shall produce a Safety and Health Plan and generic site safety checklist (customizable for all sites). The contractor’s plan shall include appropriate measures to ensure the contractor reacts promptly to investigate, correct, and track alleged safety and health violations and/or uncontrolled hazards in contractor work areas. Installation-specific references and policies may be included (or attached) to the plan. See Section H Special Contract Requirement.

The contractor shall comply with the specific health and safety requirements identified in this PWS, as well as the Occupational Safety Health Act (Public Law 91-596). The contractor shall comply with the health and safety rules of the Government installation that concern related activities not directly addressed in this PWS.

The contractor shall take reasonable steps and precautions to prevent accidents and preserve the health and safety of contractor and Government personnel performing or in any way coming in contact with the performance of this requirement. The contractor shall take additional immediate precautions identified by the PCO for health and safety purposes.

APPLICABLE DOCUMENTS

Government Documents The following standards, specifications, and handbooks form a part of the PWS to the extent specified herein.

DoD Handbooks and Manuals and Directives

· MIL-STD-882E Environment, Safety, and Occupational Health (ESOH)

· DoDD 2040.2 International Transfer of Technology, Goods, Services, and Munitions

· DoDD 5200.1-PH DoD Guide to Marking Classified Documents

· DoDD 5230.24 Distribution Statements on Technical Documents

· DoDD 5230.25 Withholding Unclassified Technical Data from Public Release

· DoDD 5200.39 Critical Program Information (CPI) Protection Within the Department of Defense

· DoDD 8500.1 Information Assurance

· DoDD 8500.2 Information Assurance Implementation

· DoD Manual 5200.1 The Acquisition Systems Protection Program

· 32 Code of Federal Regulations, Part 117, National Industrial Security Program Operating Manual (NISPOM), 24 February 2021

· DoDD 5500.07R Joint Ethics Regulation

· DoD 4161.2M DoD Manual for the Performance of Contract Property Administration

· Intelligence Community Directive 503, IC Information Technology Systems Security Risk Management, Certification and Accreditation

· DoDM 5205.07 SAP Security Manual, Volume 1 (V1) General Procedures

· DODM 5205.07 SAP Security Manual, Volume 2 (V2) SAP Access Determination Process

· DoDM 5205.07 SAP Security Manual, Volume 3 (V3) Physical Security Guidance for Special Access Program Facilities (SAPFs)

· DoDM 5205.07 SAP Security Manual, Volume 4 (V4) Classification and Marking Guidance U.S. Air Force Standards and Instructions

· AFI 33-200 Information Assurance Management

· AFI 63-101/20-101

Industry Standards

· SISO-REF 010 Enumerations for Simulation Interoperability

· SISO-REF 010.1 Operations Manual for the Distributed Interactive Simulation Product Support Group (DIS PSG)

· Enumerations Working Group

· IEEE STD1278 IEEE Standard for Distributed Interactive Simulation Series

· IEEE STD 1516 series High Level Architecture (HLA) Joint Manuals

· Joint SAP (Special Access Program) Implementation Guide (JSIG) US Government Publications, Instructions, and Guides

· NIST SP 800-53, Recommended Security Controls for Federal Information Systems and Organizations

· NIST SP 800-53A, Guide for Assessing the Security Controls in Federal Information Systems and Organizations, Building Effective Security Assessment Plans

· NIST SP 800-37, Guide for Applying the Risk Management Framework to Federal Information Systems

· NIST SP 800-39, Managing Information Security Risk: Organization, Mission, and Information System View

· NIST SP 800-30, Guide for Conducting Risk Assessments

· CNSSI 1253, Security Categorization and Control Selection for National Security Systems CAF DMO Standards MP23/4

· CAF DMO CORAL 1.2 / PIANO 1.0 / FVEY 1.0 Rulesets

· CAF DMO Filtering Plan

· NCDSMO CDS Overlay

· NCDSMO CDS Security Assessment guide

· NCDSMO-R-00008-004_1, Cross Domain Solution (CDS) Design and Implementation Requirements: Raise the Bar Baseline Simulator Common Architecture, Requirements, and Standards (SCARS)

· Simulator Common Architecture Requirements and Standards (SCARS) Engineering Capabilities Board (SECB) Charter, 2 February 2021

· Standards Maintenance Plan (SMP) for Simulator Common Architecture Requirements and Standards (SCARS), 2 February 2021

· SCARS Basic On-Premises Equipment (OPE) Integration Standard

· SCARS Common Security Controls Standard

· SCARS Data Standard

· SCARS DevSecOps Standard

· SCARS Certification Process Standard

· SCARS Application Certification Process Standard

· SCARS Test Planning Working Group Charter

· SCARS Non-Compliance Working Group Charter Order of Precedence Any inconsistency in this solicitation or contract shall be resolved by giving precedence in the following order: (a) The Schedule (excluding the specifications), (b) Representations and other instructions (c) Contract clauses(d) Other documents, exhibits, and attachments and (e) The specifications.

PROPERTY AND SERVICES

Government Property Damage Prevention Contractor personnel shall prevent loss, damage, destruction, or theft to Government property while performing the services under this contract. The contractor shall report within two business days, to the Administrative Contracting Officer (ACO)/ Contracting Officer Representative (COR), who in-turn will provide all pertinent facts relating to each instance of damage to Government property to the PCO. The contractor, as directed by the ACO/COR, shall immediately secure the damaged equipment until directed to release it by the investigating authority, through the PCO. If the Government elects to conduct an investigation of the incident, the contractor shall cooperate fully and assist Government personnel until completion of the investigation.

Contractor Furnished Property and Services Except for those items specifically stated to be Government furnished, the contractor shall furnish all materials, facilities, equipment and personnel required to perform this PWS. The contractor shall acquire and maintain a TOP SECRET facility clearance level (FCL) from the Defense Counterintelligence and Security Agency (DCSA). Where applicable, the contractor’s employees performing work in support of this contract shall have been granted and maintain a SECRET security clearance from the Defense Industrial Security Clearance Office.

Financial Improvement Audit Readiness (FIAR) GFP Reporting If Government Furnished Property (GFP) is provided on this contract, the contractor shall clearly identify, track and report GFP managed and possessed by the contractor. The contractor shall have a process to create and provide property-related reports as directed by the Government Contracting Officer.

CDRL A025 – (DI-MGMT-80259/T) Physical Inventories Report Material Inspection and Receiving Report (DD250) At the time of each delivery of supplies or services under this contract, the Contractor shall prepare and furnish to the Government a Material Inspection and Receiving Report in the manner and to the extent required by DFARS 252.246-7000 (Reserved), 252.232-7006 (Jan 2023). The contractor shall ensure two paper copies of the receiving report (DD250), or the Wide Area Workflow (WAWF) electronic report shall be distributed with the shipment.

SPECIFIC SERVICES & TASKS

The contractor shall provide the technical expertise, security expertise, and management expertise to execute the CAF DMO program and accomplish USAF directed training objectives for CAF DMO federates.

Federate Site Survey The contractor shall perform a site survey for each federate site, as directed by the Government via task order. The contractor shall collaborate and coordinate with the federate system provider and/or from the base support personnel in determining the method of implementation for network services required to connect the federate system to the CAF DMO network, including any network gateway. The contractor shall produce a site survey report for each federate site.

CDRL A010 - (DI-MISC- 82104) Site Survey Report (SSR)

Transition Planning Services The contractor shall produce and maintain a transition plan which details the transition services and networking services for the federate sites. The initial plan shall include all sites listed in Annex A. The contractor shall work with the Government to identify changes to the federate sites and continue to update the transition plan as necessary. The transition plan shall identify downtime to the network, not to exceed five calendar days per site. The plan shall provide flexibility to accommodate current training priorities. The initial transition plan shall provide for transition of sites listed in Annex A not later than Full Network Service Start Date, 24 months after contract award. Transition shall be considered complete once all federated sites and the entire Distributed Training Center (DTC) at Langley have been transitioned. The transition criteria shall also include an approved and functioning Cross Domain or Multi level Security (MLS) solution as specified in PWS section 4.8. Transition will be complete when all sites are capable of training with all other sites, across multiple security levels, required Authorization to Operate (ATO)s, Authority to Connect, and the CAF DMO DTC is manned to support training events. The plan shall be integrated into the contractor’s Integrated Master Schedule (IMS) and Integrated Master Plan (IMP). The first 12 months of the transition period will be issued as the first task order on CAF DMO 3.0.

CDRL A005 - (DI-MGMT-81861C) Integrated Program Management Data and Analysis Report (IPMDAR) CDRL A009 - (DI-MISC-80508B/T) Transition Plan Transition and Expansion Services

1.1.1 Initial Transition Services

The contractor shall provide the preparatory services necessary to architect and maintain the network. The preparatory services shall include all engineering services and security services necessary to design and establish the CAF DMO operation center(s) infrastructure which has the ability to support the federate sites listed in Annex A. The contractor shall procure, deliver, set up, and functionally check the CAF DMO gateway and network connection for the first federate service (service at the federate site). This first federate service shall be considered complete when the CAF DMO Network operations center(s) and the federate receive an ATO to operate on the network. The transition period will be issued as the first task order on CAF DMO 3.0. The architecture shall be scalable to allow for future sites.

The network service shall be capable of supporting the 7 security domains:

1. CORAL Secret (S)/SAP Cross Domain Solutions (CDS)

2. CORAL S/SAP PL2 only

3. PIANO S/SAP CDS

4. PIANO S/SAP PL2 only

5. SECRET // COLLATERAL NOFORN

6. SECRET // REL ACGU

7. SECRET // REL (UK or AU or CA BI-LAT) x3 It is desired for the network service to be capable of expanding to support no less than 14 (including the above) security domains:

1. Top Secret (TS) / Special Compartmentalized Information (SCI) / Special Access Program (SAP)

2. Top Secret (TS)/Special Access Program (SAP)

3. RED (SECRET COLLATERAL) NOFORN

4. RED FVEY CDS

5. RED Coalition CDS

6. RED AUS (bi-lat) CDS

7. RED UK (bi-lat) CDS

8. RED CA (bi-lat) CDS

9. S / Joint Simulators Environment (JSE)-Terms of Reference (TOR) PL2 only

10. TS / JSE TOR PL2 only

11. TS / SCI / JSE TOR PL2 only

1.1.2 Network Expansion Services

The contractor shall provide the preparatory services necessary to expand the design and infrastructure of the CAF DMO network as directed by the Government via task order.

Networking Standup / Networking Services Networking Standup The contractor shall stand up the new DMO Network IAW the 1-N priority list subject to change based on emerging DMO, SCARS, and JSE priorities.

1.1.3 Architecture and Network Gateway

The contractor shall be responsible for the overall design, implementation, and sustainment of the CAF DMO network. The contractor shall implement the network IAW applicable CAF DMO O&I Standards (as referenced in section 2.1.5). The contractor shall be responsible for installation of equipment including site coordination and set up of equipment. The contractor shall ensure site downtime does not exceed five calendar days including equipment install, integration and functional checks.

The contractor shall provide a service utilizing an architecture that supports real-time training. The contractor shall procure, install, set up, and functionally check network gateways, including all hardware and software necessary to provide networked service to and from each site ordered. The contractor shall complete successful functional checks for each gateway. Each gateway shall have the capability to route and filter (including the ability to configure, modify and/or remove data) Distributed Interactive Simulation (DIS) data to resolve interoperability issues between diverse simulators. The gateway filter capabilities shall be dynamic in nature and configurable before and during event execution (i.e., run-time configurable). The gateway filter capabilities shall be sufficient to implement the DMO Filtering Plan. The contractor shall be responsible for maintaining the DMO Filtering Plan through the life of the contract.

The gateway shall translate between protocols for DIS, High Level Architecture (HLA), Data Distribution Service (DDS), Test and Training Enabling Architecture (TENA), and Global Reusable Interface Domain (GRID) protocol used by simulators at training sites and a common protocol on the DMO network, thereby allowing DIS, HLA, DDS, TENA and GRID sites to interact in common training events. Transmission Control Protocol/Internet Protocol (TCP/IP) protocols as identified in the CAF DMO Network Standard shall also be routed through the gateway.

Gateways shall have the capability to periods process IAW the JSIG and DoDM 5205.07 series documents, listed in para 2.1.5. In order to encrypt data, the gateway shall include National Security Agency (NSA)-approved cryptographic equipment. Cryptographic equipment shall be procured and delivered by the contractor, and keys shall be provided and managed by the contractor IAW NSA doctrine, JSIG, and DoDM 5205.07 series documents. The security documentation shall include the gateways within the security boundary of the CAF DMO network.

CDRL A012 - (DI-MISC-80508B/T) Technical Report - Study/Services (Rule Sets/Rule Set Character)

1.1.4 Availability and Latency

The contractor shall provide and maintain a network infrastructure that performs with Training Event Availability and Systems Availability rates at or above 97% and 99% respectively as calculated IAW the availability clause Section H101.

The network service shall utilize an architecture that supports real-time training. Latency/Quality of service shall not exceed a threshold of 65ms with an objective of 10ms, in compliance with IEEE 1278.2 within a theater (i.e., USAFE, PACAF, CONUS). Latency shall be calculated as the delay of single, maximum sized, CAF DMO Protocol Data Unit (PDU) from the local area network at one training site to the local area network at any another training site that is connected to the CAF DMO network, within a theater. Latency calculation shall include the delay through the gateways and a CDS/Multi-Level Solutions (MLS) guard. This does not include additional delays internal to federate systems and their own local area networks at each site.

Latency shall include delays from long haul circuits. Latency shall be measured for each active network route at least on a monthly basis and reported to the Government. Latency issues shall be reported upon identification, and a corrective action plan submitted within 48 hours.

CDRL A011 - (DI-MISC-80508B/T) Technical Report - Study/Services (Availability/Latency)

1.1.5 Network Services

The contractor shall provide network services to and from each of the federate systems for networked events. The contractor shall provide a network that allows simultaneous events numbering not less than 25% (rounded up) of the total number of operational training sites. For instance, 100 sites on the network would require a minimum of 25 simultaneous events. Any single event shall be capable of providing service to any number of operational training sites in single domain or any number of operational training sites in a multi-domain event. Any single event shall be capable of processing a connection of any approved domain on the network. It is understood that a cross-domain event with multiple high-side domains connected to a common low domain will consume multiple events. The simultaneous events shall be capable of supporting the same or disparate training requirements. The network shall be capable of supplying scheduled network services for simultaneous DMO events that may be operating at different system-high security levels and in which participating federates may be operating in different geographic areas. The contractor shall ensure network and network traffic meets all JSIG requirements and are accredited by the Authorizing Official (AO).

Circuit / Network Management The contractor shall manage the ordering of the circuits and/or network. The contractor shall monitor network connections and coordinate directly with the service providers for resolution of all outages.

1.1.5.1 Contractor Provided Circuits / Network

The contractor shall provide circuits and network, as required by task order, which meet requirements in this PWS. The contractor shall support the Government's request for information to obtain a Defense Information Systems Agency (DISA) waiver.

1.1.6 Training Event Support

The contractor shall operate and maintain a help desk for scheduling and conducting DMO training events. The help desk shall be available via toll-free telephone, facsimile, and a web interface. The help desk shall normally operate from 7am to 7pm EST Monday –Friday, excluding federal holidays. When a DMO event is being executed, the help desk shall be available from one hour before the scheduled event until one hour after the event ending time, regardless of normal operating hours. The contractor shall track and resolve trouble tickets and network issues. The contractor shall accept routine federate requests with lead time for scheduling DMO events Not Later Than (NLT) one hour and Not Earlier Than (NET) 30 calendar days during normal help desk hours, and NLT 24 hours and NET 30 days for scheduling events outside normal help desk hours. While planning for larger exercises will take place beyond the 30-day limitations, event connection requirements will be coordinated within 30 days (i.e., Red Kite, Virtual Flags, etc.).

CAF DMO services, which were scheduled within the aforementioned lead times, shall be able to support events 24 hours a day, 7 days a week (i.e., DMO events can be executed at any time once they have been scheduled). The contractor shall configure and operate the network in support of scheduled training, testing, and maintenance events. The contractor shall supply bandwidth management services for operational sites. The contractor shall supply bandwidth for non-training services without impact to training services." The contractor shall offer an online scheduling service to schedule the DMO network. The contractor shall provide the services and coordinating activities necessary to conduct DMO events.

1.1.7 Continuous Monitoring Services

The contractor shall sustain service for meeting JSIG requirements (reference listed in PWS section 2.1.4) through centralized security controls for system monitoring, audit file collection and analysis, vulnerability scanning, patching and anti-virus signature distribution.

The contractor shall perform all ongoing activities associated with Risk Management Framework (RMF) Step 6, Continuous Monitoring of Security Controls. This recurring step includes providing services specified in the Continuous Monitoring Plan to sustain ATOs. Continuous Monitoring is defined as a quarterly assessment to validate that security controls are still properly protecting the information systems in accordance with the ATOs. On a quarterly basis, the contractor shall perform a system assessment in accordance with each Continuous Monitoring Plan. The contractor shall document results in a Continuous Monitoring Report for each of the information systems. Deliverables include quarterly Continuous Monitoring Reports which shall accompany documentation provided under Section 4.11.1 to maintain security compliance.

CDRL A013 - (DI-MISC-80508B/T) Technical Report - Standards/Security/Continuous Monitoring

1.1.8 Access Point Connectivity Services

The contractor shall be responsible for the overall design, implementation, system administration, and sustainment of Access Point Connectivity (APC) kits.

APC Kits shall include a video teleconferencing (VTC) system, Voice over Internet Protocol (VoIP) telephone, access to all CAF DMO data repositories, printer and scanner functionality, boundary protection, and digital-signature functionality. APC Kits shall also include local file storage with read and write media, and Digital Video Disk (DVD) and Compact Disk (CD) read/write drives. APC Kits shall include security controls which support connecting to the CAF DMO network at all security levels, but not more than one security level at a time. The contractor shall provide an implementation and verification report, documenting successful post-installation testing of all APC Kit functions listed above.

CDRL A019 - (DI‐MISC‐80508B/T) Technical Report/Installation Report Interoperability Services Integration and Testing The contractor shall provide the services necessary to ensure integration of federates into federations necessary to meet the training objectives of DMO events. The contractor shall manage the integration test schedule and test events. The contractor shall post the schedule weekly to the website referenced in PWS section 4.12.4. The schedule shall show a 3-month projection. The contractor shall manage the Test Planning Working Group (TPWG) for CAF DMO.

The contractor shall provide support, analysis, and testing to integrate sites which have been awarded via task order. The contractor shall host a testbed with representative products that generate constructive entities on CAF DMO and test products for interoperability. The contractor shall provide detailed reports of interoperability and standards-compliance issues identified via the website.

CDRL A033 – (DI-MISC-80508B/T) Technical Report Study/Services Sub-Title Interoperability and Standards The contractor shall provide the services necessary to identify, assign, and track to resolution any training limitations and non-adherence to the CAF DMO standards as referenced in PWS section 2.1.5. The contractor shall produce a database of training limitations and deviations from standards. The database shall be kept current and be accessible to the Government and federates through a web-based user interface. The contractor shall manage the System Problem Report Working Group (SPRWG) for CAF DMO. The SPRWG is the working forum, lead jointly by the contractor and the USAF and composed of the Federate Systems stakeholders currently members of the Distributed Mission Operations Network (DMON), responsible for documenting and managing SPRs.

Additional Federate Testing Support The contractor shall support additional federate testing as requested by the Government. Future efforts will be negotiated through a separate task order.

Configuration Control Board (CCB) Services The contractor shall implement, manage, and maintain a DMO System Level Configuration Management process for the DMO CCB. The contractor shall perform the duties of the Configuration Manager and the CCB Secretariat to support the Government CCB. These configuration management services include, but are not limited to, maintaining DMO system level documents; providing configuration controls to baseline documentation; archiving past baselines and resolving configuration control problems. The CCB obtains and reviews configuration changes, including federate changes, for impacts to DMO interoperability and DMO training. The contractor shall coordinate and include the federate changes in the IMS. The contractor shall produce and maintain a Configuration Management Plan for the network configuration including federations.

CDRL A003 - (DI-ADMIN-81249C) Meeting Agenda CDRL A004 - (DI-ADMIN-81250C) Meeting Minutes CDRL A005 (DI-MGMT-81861C) Integrated Program Management Data and Analysis Report (IPMDAR) CDRL A020 - (DI-SESS-80858D) Supplier’s Configuration Management Plan

Support of Exercises Distributed Mission Operations Center (DMOC) Support The contractor shall support the DMOC at Kirtland AFB, NM for all exercises which involve CAF DMO assets and federates, as directed by the Government in a future task order. The contractor shall support network-to-network connections involving CAF DMO assets as directed in a future task order. The contractor shall manage and accomplish all security assessment and authorization activities necessary to support the CAF DMO connection for the exercise.

Distributed Training Center (DTC) Support The contractor shall provide the DTC service at Langley AFB, VA with permanent, full-time, on-site personnel to support daily training events which involve CAF DMO assets and federates. CAF DTC operational window is from 0600-2359 EST/EDT. The contractor shall provide personnel to the DTC with an operational, aeronautical background and be familiar with USAF aircrew and distributed training. The contractor shall have mission directors, battlespace managers, intel personnel and IT and security personnel to be able to support missions simultaneously with 4th and 5th generation USAF fighter aircrafts, JTAC and SEAD. CAF DTC events have 1 Mission Director station, 2 Intelligence SMEs stations, and minimum 21 battlespace management stations. During events IT and security must be able to simultaneously operate 2 separate SAPFs/Sensitive Compartmented Information Facilities (SCIFs), 2 Combat Environment Servers, 2 NGTs Cores, 2-4 ASCOT environments, 2 VRSG/MACE environments, 2 DMON VTC, 2 AF7 VTC, and 2 separate TS/SCI/SAR Server rooms. The contractor shall have the personnel be able to support 2 simultaneous DTC events starting July 2024 when SAPF is a fully armed and operational battle station. The contractor must also be able to run TS/SCI/SAP mission planning cell and IT and security to run 2 DMO DTC LANs, 1 SAPF and 1 SCIF. The DTC service shall include the following expertise:

· Command and Control, Intelligence, Surveillance and Reconnaissance (C2ISR) rated experience.

· 4th generation USAF fighter aircraft operational experience that is Mission Commander qualified. USAF Weapons School graduate is preferred but not mandatory.

· 5th generation USAF fighter aircraft operational experience, including F-22 and /or F-35A/B/C, that is Mission Commander qualified. USAF Weapons School graduate is preferred but not mandatory.

· 4th and 5th generation aircraft operational and tactical Intelligence experience, special access, Sensitive Compartmented Information (SCI) and a minimum of 8 yrs. collateral security management experience. Must be capable of holding TS/SCI and SAP/Special Access Required (SAR) clearance/accesses for individuals with same type clearances. Duties include Information Assurance responsible officer that is security+ certified and experienced drafting and implementing JSIG, System Security Plan (SSP) for automated information systems across collateral and classified networks (SPAWN, SIPR, DMON, etc.).

· 4th or 5th generation aircraft USAF rated experience with scenario development and computer-generated forces (CGF) initialization file development.

· All DTC personnel must be eligible for TS/SCI and SAP/SAR clearances.

The DTC services expertise desired but not required:

· 4th generation aircraft USAF Weapons School graduate(s)

· 5th generation aircraft USAF Weapons School graduate(s)

· USAF Weapons School / Top Gun / MAWTS-1 graduate(s)

· Special Operations Forces (SOF) Tier 1 experience DTC Network The contractor shall build and maintain 2 networks in two separate rooms at the DTC. The network in room one must be at the CMF Portfolio/JADC16 classification level. The network in room two will start at the CMF Portfolio level, and eventually move up to the TS/SCI classification level. The contractor shall provide local security personnel (Government SAP Security Officer (GSSO) & Information System Security Officer (ISSO)) and is responsible for gaining proper security approval for the introduction of hardware and software in the SAPF/SCIF. Proper due diligence must be given to inspect and research potential vulnerabilities, procurement process, and software/firmware updates of all hardware that is to be introduced to the facility. Per the Risk Management Framework (RMF) process and the Joint Security Implementation Guide (JSIG), the GSSO and ISSO have must receive approval to introduce new hardware into the facility from the appropriate Program Security Officer (PSO) and/or Authorizing Official (AO). Maintenance and management of Government off the Shelf (GOTS) hardware/networks within the DTC SAPF/SCI means DTC personnel will be responsible for acting on the Governments behalf as an ISSO, Cybersecurity Liaison (CSL), and/or administrator to properly manage all guest systems within the DTC. This includes but not limited to: NIPRNET, SIPRNET, and CV2 systems as required to support DTC operations. Management of these systems functionally includes all aspects of introduction into the facility, hardware repair and replacement as needed, coordination with network owners (e.g., 633rd Communications Squadron), patching, and security approval

· The contractor shall adhere to the following requirements for room one:

· Virtualize, operate, and maintain a PIANO, CORAL, and RED DMON network. Virtualization should allow for 1 additional Security enclave.

· Operate and maintain a CV2, NIPR and SIPR network. –

· Operate and maintain a combined CES server.

· Build Network to a 10Gb LAN threshold, 40Gb LAN Objective

· Operate and maintain 2 new AF7 systems

· Operate and maintain 4xMCS stations for NGTS over LAN with terrain server

· The contractor shall adhere to the following requirements for room two:

· Virtualize, operate and maintain a TS/SCI, PIANO, CORAL, and RED DMON network.

· Operate and maintain a JWICS, CV2, NIPR and SIPR network

· Operate and maintain networking and security

· Execute upgrade from SAPF to TS/SCI SCIF

· Modify network to 10Gb LAN threshold, to 40Gb LAN Objective Software Baseline The contractor shall build and maintain a software baseline for the networks in described in paragraph 4.7.3. This software baseline will include RedSIM, CES, ASCOT, MACE, Weapon Server Common Environment (WSCE) server, and NGTS. The contractor shall conduct root cause analysis on issues that occur in real time, during operational events. The contractor shall be responsible for integration of all of the software. If required, the contractor shall resolve interoperability issues that may arise when running these software applications simultaneously.

Combat Environment Server The contractor shall install and maintain a 2nd Combat Environment Server (CES) in a “dual CES” configuration. The CES equipment will be provided by the Government. This 2nd CES will replace the older CES that is currently operational. The Dual CES configuration will be installed in a separate room at the DTC. Instructions on how to install CES will be provided at a later date.

Requirements The contractor shall support CAFFORGEN model. Combat Air Forces’ (CAF) aviation units operate on varying deployment and training cycles based on a variety of factors to include component (active or reserve), designation as a high demand/low supply (HD/LS) asset, aerospace control alert responsibilities, and assignment to the Global Response Force (GRF). The CAFFORGEN model is designed to balance overall force readiness against combatant command demand.; DTC staff will identify units in the CAFFORGEN spin-up cycle and build exercises tailored to unit Distributed Learning Objectives (DLOs); these exercises should mimic DMON Argonne but will be smaller in scope / scale.

The contractor shall develop a plan (including architecture, infrastructure, and personnel) to support Defensive Cyber Operations training in DMO events. ACC will provide as Government Furnished Equipment (GFE) the Mobile Interceptor Platform (MIP) and Deployable Interceptor Platform (DIP) elements of the Cyber Vulnerability Assessment / Hunter (CVA/H) weapons system.

The contractor shall develop an executable plan to instantiate the Joint Simulation Environment (JSE)-in-a-box (JIAB) at the CAF DTC no later than FY25.

The contractor shall provide the services by positioning the DTC to execute DMO missions at the PIANO, CORAL, and RED levels, as appropriate.

The contractor shall continue to fill open positions and seek qualified SMEs (Systems and Software Engineering backgrounds) to support the following new responsibilities:

· Reviewing and updating DTC room one network design.

· Working with NGTS / NAVAIR personnel to establish a high-side NGTS / WSCE server combination for DMO high-side and CDS events.

· Design, implement and manage DTC specific filter plans.

· Provide support by working alongside NGTS / NAVAIR personnel to establish a high-side NGTS / WSCE server (working on a DIS network) combination for DMO high-side and CDS events.

· Design, implement and manage DTC specific filter plans.

The contractor shall install and integrate WSCE (GFE) server by doing the following:

· Request the O&I to operate and maintain WSCE with NGTS on the high side (CORAL and PIANO)

· Incorporate to the max extent possible WSCE/NGTS high-side CGF into daily operations and major service.

The contractor shall provide combined Contractor Program Security Officer services in accordance with DoDM5205-7 and System Security Officer services in accordance with Intelligence Community Directives.

The contractor shall provide services to collect, track, analyze, and report data from training events (i.e., unit participation). The contractor shall leverage existing sources of data such as Performance Evaluation Tracking System when possible.

The contractor shall provide service to support DTC surge operations for periods of increased activity including major exercises/events, and support of Live Virtual Constructive (LVC) operations from the DTC (e.g., constructive support for Red Flag Alaska).

The contractor shall sustain DMO event monitoring systems at the AFLCMC/WNS facility. In support of exercise monitoring and scenario-generation capabilities of the DTC, the contractor shall sustain existing Plexsys Advanced Simulation Combat Operations Trainer (ASCOT) and Plexsys PlexComm Virtual Reality (VR) systems (software and hardware), Plexsys ASCOT Driver Stations, Plexsys ASCOT Viewers, Plexsys Sonomarc, RedSim DIS Link Monitor software, Plexsys Distributed Interactive Simulation (DIS) Protocol Data Unit Analyzer (including upgrade to the latest version supporting DIS version 7), and Battlespace Simulations Inc. Modern Air Combat Environment systems at the DTC.

The contractor shall sustain the VR Scene Generator software from MetaVR, Inc. at the DTC. The contractor shall provide software updates and manufacturer support services to ensure software is current and in service for all security domains approved for the DTC during the period of performance.

In support of exercise monitoring and diagnostic capabilities at the AFLCMC/WNS facility, the contractor shall sustain existing Plexsys PlexComm Virtual Radio, RedSim DIS Link Monitor (including upgrade to the latest version supporting DIS version 7), Mak VR Vantage Plan View Display, Mak VR Vantage Stealth software, and Plexsys DIS Protocol Data Unit Analyzer at the AFLCMC/WNS facility. The contractor shall provide software updates and manufacturer support services to ensure software is current and in service for all security domains approved for the AFLCMC/WNS facility during the period of performance.

The contractor shall sustain the periods-processing solution for the connections between DTC systems and the DMON portal kits located at the DTC.

The contractor shall sustain the stateless printer with scanning capability at the AFLCMC/WNS facility for the DMO event monitoring systems. The contractor shall sustain the video teleconferencing system and display monitors. The contractor shall provide system administrator and information assurance/cybersecurity services for the DMO event monitoring systems at the AFLCMC/WNS facility. These DMO event monitoring systems shall be within the DMON security boundary.

The contractor shall travel in the following capacity: DTC support for live exercises, site visits; other as directed by DTC Government lead as well as to include LVC support. Anticipated trips include: RED FLAG/WIC Nellis Support (3 MPCs, 3 Execution), 3 Security Training Classes, 4 IT Trips to NG, 12 CONUS and 4 OCONUS DTC Roadshow visits. All trips are based on 2 DTC personnel traveling together.

The contractor shall provide subject matter experts (SMEs) to support the operations of the MCS simulators. SME areas include operational experts familiar with Combat Air Support, and Intelligence Surveillance and Reconnaissance missions. The Operations SMEs shall be staffed sufficiently to support the simultaneous operation of all 4 MCS simulators.

The contractor shall develop PIANO ruleset for the CDS once an ELRP has been signed and approved.

The contractor shall continue creation and analysis of rule set solutions for integration of new security domains and new training systems into the Core Mission Federation as they are identified by the Government. This includes, but is not limited to, security domains required for F-35 training. Potential additional training systems include, but are not limited to, E-3G Mission Crew Training System, F-35 Full Mission Simulator, DMOC Jumper Room, and systems on the Air Reserve Component Network (ARCNet) Coral network (Distributed Training Operations Center’s Event Control Centers, F-15C Air National Guard (ANG) Full Mission Trainer, F-15 EX, F-16 ANG Weapon and Tactics Trainers, and F-16 Air Force Reserves Command Multi Task Trainer).

The contractor shall coordinate with the Authorizing Official (AO) and representatives, Government SMEs, and the DMON 2.0 Federate System Providers as appropriate.

The contractor shall support the Rule Set Working Group meetings to establish new rule sets as required.

The contractor shall continue analysis into reducing CDS-imposed limitations on training, while continuing to mitigate security risks at a level acceptable to the AO and Data Owners for accreditation. This includes modification of new and existing ELRPs.

The contractor shall sustain the FVEY and US-UK Bi-Lateral F-35 DCDS that identifies rule sets, scenario content, and OPSEC restrictions in accordance with disclosure guidelines provided by the Government to integrate and interact with FVEY partners on the DMON and dedicated US-UK F-35 training. This rule set accommodates training at the S/SAP level, S/FVEY, and a combination of the two.

Tech Refresh The contractor shall tech refresh 1/3 of all equipment in the CAF DTC each year so a full tech refresh occurs every 3 years.

The contractor shall replace the 18 workstations and Network Interface Connections (NIC)s across 3 rooms at the DTC.

The contractor shall install all new switches, CSS, workstations, and CES at minimum 10Gbit LAN, however 40Gbit LAN is desirable.

Exercises The contractor shall support exercises involving CAF DMO assets, including Technical Assistance Agreements (TAAs) when required, as directed by the Government in a future task order. (Examples include but are not limited to: Red Kite at the USAFE/AFAFRICA Warfare Center and Live Virtual Constructive (LVC) exercises at the Joint Pacific Alaska Range Complex (JPARC)). Because many exercises connect multiple networks, the contractor shall support network-to-network connections involving CAF DMO assets as directed by the Government in the task order. The contractor shall manage and accomplish all security assessment and authorization activities necessary to support the CAF DMO connection for the exercise.

VTC Brief/Debrief Capability The contractor shall implement, sustain and support a low-side (Secret) secure VTC solution for sites in high-side (Secret/SAR) enclaves to participate in VTC session on the low-side of Cross Domain Solution (CDS) network events. The VTC solution shall include interactive smart board capability. The VTC solution shall be implemented in the same facilities as the VoIP brief/debrief phone systems.

It is desired but not required for the contractor to implement, sustain and support any combination of low-side (SECRET Collateral or SECRET/SAR or TS/SAR) secure VTC solution for sites with high-side (SECRET/SAR or TS/SAR or TS/SCI/SAR) enclaves to participate in VTC session on the low-side of CDS network events. The VTC solution shall include interactive smart board capability. The VTC solution be implemented in the same facilities as the VoIP brief/debrief phone systems.

Wright-Patterson Air Force Base (WPAFB) Workstations The contractor shall provide and maintain equipment (i.e., workstations) at WPAFB to enable the analysis and viewing of training events and support periods-processing for all domains in Section 4.3.1.

Other Training Support The contractor shall implement, sustain and support other training…