HBSS_SOW_July_14_v4.docx

PERFORMANCE WORK STATEMENT

HBSS

Grand Forks AFB, ND

1.0 – GENERAL

The contractor shall provide all personnel, programming, equipment, tools, materials, supervision, and other items and services necessary to perform installation service of Host Based Security System (HBSS) consisting of antivirus and anti-spyware, Asset Baseline Monitor (ABM), Device Control Module (DCM) which is a subset of the McAfee product Data Loss Prevention (DLP), Host Intrusion Prevention System (HIPS), and Rogue System Detection on HP DL180 or Cisco C200 series server on-site in Bldg 542, Grand Forks AFB, ND that will operate 7 days a week, 24 hours a day, 365 days a year.

1.1 – DESCRIPTION OF SERVICES

Installation of HBSS will include installation on government provided HP DL180 or Cisco C2X0 hardware and training on use, in addition to the web based training available on HBSS website, and management of the software.

1.2 – BACKGROUND

Host Based Security System (HBSS) is a collection of flexible, commercial off-the-shelf (COTS) and government off-the-shelf (GOTS) applications. The system can detect and counter, in real-time, known cyber-threats to the Department of Defense (DoD) Enterprise. Under the sponsorship of the Enterprise-wide Information Assurance and Computer Network Defense Solutions Steering Group (ESSG), the HBSS solution will be attached to each host (server, desktop, and laptop) in the DoD. The system will be managed by local administrators and configured to block known-bad traffic using an Intrusion Prevention System (IPS) and host firewall.

1.3 – OBJECTIVES

Install HBSS software and configure it to manage the security of 69 RG network servers to ensure vulnerabilities and malware are detected and mitigated. Also, train administrators to manage HBSS program to monitor the servers and install server and client software, configure it on network systems and troubleshoot.

1.4 – SCOPE

1.4.1 - Install and configure government provided HBSS software on server already on site.

1.4.4 - The contractor shall comply with manufacturer’s specifications and installation.

1.4.5 - Provide industry standard on-site classroom training to administer the software for up to 12 government personnel beyond HBSS web training.

2.0 – HOURS OF OPERATION

All work will be scheduled between the hours of 7:30 a.m. and 4:30 p.m., unless extended work days are coordinated and approved by the facilities owner/user personnel. Due to mission requirements, certain rooms may not be available every day. The Contractor will need to coordinate their work dates in advance with the facilities owner/user personnel (if irregular hours are requested, ex: weekends, extended work hours after 4:30 p.m., prior coordination will be required with facilities owner/user personnel).

3.0 GOVERNMENT PROVIDED SERVICES: The Government will arrange for access for installation at the facility. The facility user/owner will provide escort of individuals throughout the duration of the project. The contractor’s employees shall remain with the escort at all times while located in Restricted Areas.

4.0 RESTRICTED/CONTROLLED AREAS: Grand Forks AFB has numerous areas containing sensitive resources, which are posted with either “RESTRICTED AREA” or CONTROLLED AREA” signs. In addition to signs, ropes, and stanchions, red painted lines also define the area’s boundaries. Contractor personnel may not enter these areas unless under escort by authorized personnel. It is the contractor’s responsibility for ensuring their employees are aware of the procedures for access to restricted/controlled areas and ensures these procedures are observed.

5.0 ENTRY PROCEDURES FOR PROJECTS INSIDE RESTRICTED/CONTROLLED AREAS:

5.1 Visitor Passes: The Commercial Visitor Control Center will issue an SFMIS AF Form 75 (Visitor Pass) to the contractor’s employees upon completion of screening process for the duration of contract. The contractor shall complete a SFMIS AF Form 74 for each employee and submit directly to the Contracting Officer no later than 5 working days prior to start of this project.

5.2. All vehicles entering the area are subject to search by Security Forces personnel. The escort official is responsible for processing the contractor through the entry control point, escorting personnel to and from the work area, and assisting in personnel and vehicle searches as required. The escort official is also responsible for providing personnel with an escort briefing. In the event of an emergency that requires evacuation from the area, contractors will comply with the instructions of the escort official.

6. CONDUCT REQUIREMENTS: The contractor’s employees shall comply with all base traffic regulations and properly conduct themselves while on this base. Use of cell phones, to include texting, while driving is strictly prohibited.