EMSO_AMCK_PWS_V1.docx

Performance Work Statement EMSO Assessment Mobile Communications Kit

(EMSO-AMCK)

17th Electronic Warfare Squadron (17 EWS) 950th Spectrum Warfare Group (950 SWG)

XXXXXXXXXXXXXX

Version 1 January 13, 2025 (Robins Air Force Base, GA)

1. Introduction

1. Project Overview This project focuses on a mobile electronics kit capability that can be hand-carried to support EMSO assessments at any location and at any time as an organic standalone solution. Within a phased approach, the intent is to have NIPR (Controlled Unclassified Information) and SIPR (Secret) connectivity that is organic to the 17 EWS that allows to receive, transmit, and analyze classified data during combat operations and support to Large Force Exercises (LFEs). The end goal will be to have a TS/SCI and SAP communications kit that requires minimal host support that aligns with the Agile Combat Employment (ACE) Concept.

2. Objectives The main objectives of the project are:

· Provide NIPR/SIPR Capabilities for 6-person team (3x NIPR and 3x SIPR kits)

· Build scalable kit & identify additional equipment requirements for TS/SCI and SAP future upgrade that can be used as a standalone system

· To maintain compliance with federal security and operational standards.

3. Scope of Work The project includes the design, procurement, installation, and testing of:

· Portable communications kit that supports NIPR and SIPR.

· Organic and standalone network infrastructure to support high-speed data processing and secure communication.

· Scalable network capability that can be upgraded to TS/SCI and SAP capability

· Storage and network connectivity requirements to house the equipment at Robins AFB.

2. Project Phases The project will proceed in multiple phases to ensure smooth planning, installation, and integration of systems:

· Phase 1: Reduced Communications Kit (3 months) Develop a network connectivity plan and procure all necessary components to deliver a scalable and portable communications kit that supports NIPR and SIPR connectivity without a host (hard cable connectivity to an installation).

· Phase 2: Robust Communications kit (3 months) Procure all necessary components to deliver a functional TS/SCI and SAP portable communications kit and infrastructure support that relies on host base for management and use while integrating previous phased advances.

· Phase 3: TS/SCI standalone Capability – DICE/D-JWICS Kit (2 months) Procure all necessary components to deliver a functional TS/SCI and SAP portable communications kit and infrastructure support that does not require a host base for management and use.

· Phase 4: System Testing (3 months) Perform thorough testing of all systems, including security, load capacity, and system redundancy, to ensure full operational readiness. Testing is concurrent throughout all phases as part of the deliverables.

· Phase 5: Final Inspection and Acceptance (1 months) Conduct a final inspection and obtain formal acceptance from government representatives, confirming that all deliverables meet performance and security standards. Equip operators with corresponding training and manuals for use.

3. Requirements

3.1. Servers and Computers

The servers and computers will provide the EMSO-AMCK with the capability to handle continuous data (near-real time) analysis, secure communication, and high-performance computing tasks. This infrastructure will support mission-critical functions, such as data processing and secure communications, while ensuring future scalability.

Key Specifications:

· Hardware: Laptop equipment.

· Intent: Provide scalable and reliable server architecture, capable of supporting heavy data processing and parallel computing tasks.

· Internals:

· Intent: Handle complex computations and simultaneous data streams, ensuring that multiple processes can run efficiently.

· RAM

· Intent: Provide sufficient memory to support high-speed data processing, including in-memory computations for quicker analysis.

· Storage

· Intent: Ensure high-speed access to data, with redundancy to protect against data loss or hardware failure.

· Networking

· Intent: Provide secure, high-speed data transfer across all connected devices and ensure safe, efficient traffic management between networks.

· Backup:

· Intent: Safeguard mission-critical data with regular backups, including disaster recovery solutions to ensure continuity.

3.2. Storage Solutions

The purpose of the storage solution is to ensure reliable, scalable, and secure storage for the large volumes of data processed by EMSO-AMCK. Given the mission-critical nature of operations, storage must be designed with redundancy, fast access, and robust backup capabilities to protect against data loss or failure. The system will also support future scalability as data needs grow over time.

Key Specifications:

· Data Lifecycle Management (DLM):

· Requirement: Implement DLM policies that automatically archive older data to lower-cost storage solutions while keeping high-priority data readily accessible.

· Intent: Optimize storage efficiency by setting policies for how data is archived, deleted, or migrated based on age and importance.

· Scalability:

· Requirement: The storage system must be modular and expandable, allowing additional capacity to be added as data needs increase over time.

· Intent: Support future growth in storage needs without requiring a complete overhaul of the system.

3.3. Operator Computers

Operator computers will serve as the primary interface for personnel to access and manipulate data, collaborate in real time, and interact with the systems controlling the EWAC. The computers will be designed for ergonomic efficiency and equipped with the latest hardware to support real-time operations. Operator Computers Key Specifications:

· CPU:

· Intent: Provide sufficient processing power for data-intensive applications and simultaneous tasks.

· RAM:

· Intent: Ensure smooth operation of complex software and real-time data processing.

· Storage:

· Intent: Provide fast, reliable storage for essential applications and data.

3.4. Network Security and Automation

Strong network security protocols and automation systems will ensure that classified data is protected while enhancing operational efficiency through automated environmental controls and secure access to systems.

Key Specifications:

· Next-generation firewall (NGFW): Capable of handling classified networks.

· Intent: Protect the network against modern cyber threats while managing classified data traffic securely.

4. Deliverables The contractor is expected to deliver fully functional systems, ensuring that all requirements are met and that personnel are adequately trained to operate the equipment through user manuals and in-person training.

Deliverables Include:

· Physical delivery of hard drives, computers, network components, and storage containers.

· Training and troubleshoot manuals for operators

· Comprehensive system testing and final inspection.

5. Compliance and Security The installation and operation of IT infrastructure and networks for the EMSO-AMCK must comply with the highest federal security standards to protect classified and sensitive information. All systems, networks, and procedures must align with these standards to ensure confidentiality, integrity, and availability of data, whether classified or unclassified.

5.1. Federal Security Standards and Publications

FIPS (Federal Information Processing Standards)

· FIPS 140-3: Security Requirements for Cryptographic Modules.

· FIPS 199: Standards for Security Categorization of Federal Information and Information Systems.

· FIPS 200: Minimum Security Requirements for Federal Information and Information Systems

NIST (National Institute of Standards and Technology) Publications

· NIST Special Publication 800-53 Rev. 5: Security and Privacy Controls for Information Systems and Organizations

· NIST Special Publication 800-37 Rev. 2: Risk Management Framework for Information Systems and Organizations

· NIST Special Publication 800-171 Rev. 2: Protecting Controlled Unclassified Information (CUI) in Nonfederal Systems and Organizations

· NIST Special Publication 800-160 Vol. 1: Systems Security Engineering

Department of Defense (DoD) Standards

· DoD Directive 8500.01: Cybersecurity

· DoD Instruction 8510.01: Risk Management Framework (RMF) for DoD IT

· DoD 5220.22-M: National Industrial Security Program Operating Manual (NISPOM)

Air Force Standards

· Air Force Instruction (AFI) 33-200: Information Assurance (IA) Management

· Air Force Instruction (AFI) 17-101: Risk Management Framework (RMF) for Air Force Information Technology

Additional Compliance Requirements

· DoD 8570.01-M: Information Assurance Workforce Improvement Program

· CMMC (Cybersecurity Maturity Model Certification)

5.2. Implementation Compliance

To ensure compliance with the above standards during the delivery and installation of IT systems, the following steps will be taken:

· Security Control Assessment: A comprehensive assessment of security controls will be conducted during system installation to ensure compliance with FIPS, NIST, and DoD standards.

· Continuous Monitoring: Security monitoring solutions will be integrated into the EMSO-AMCK systems to continuously monitor network activity, detecting potential vulnerabilities or threats in real time.

· Data Encryption: Data encryption methods will be implemented in accordance with FIPS 140-3 to protect data both in transit and at rest.

· System Certification: All systems will undergo rigorous certification and accreditation processes, including Risk Management Framework (RMF) assessments, to receive Authority to Operate (ATO) for secure and non-secure networks.

· Personnel Certification: All personnel involved in the EMSO-AMCK project will be trained and certified according to DoD 8570.01-M requirements to ensure they have the skills and qualifications needed to manage classified and unclassified systems.