Attachment 1 - Salient Characteristics FACT (Updated - Amendment 1).pdf

DEPARTMENT OF THE AIR FORCE

HEADQUARTERS AIR COMBAT COMMAND

JOINT BASE LANGLEY-EUSTIS VA

Solicitation Number: FA489022Q0028

7 September 2022

SALIENT CHARACTERISTICS FOR FLY AWAY COMMUNICATIONS TERMINAL

(FACT) KIT

1. ACC personnel require their own organic network access capabilities that utilize existing commercial cellular infrastructure both in the US and internationally. With proper end user equipment they will be able to send and receive essential operational and intelligence data as well as collaborate via voice and video, and do so from multiple locations without assistance from communications personnel; ACC requires the Fly Away Communications Terminal

(FACT).

1.1. Ruggedized Multi-Path: Fanless GateWay network aggregation device with 3

Global LTE Modems with all-in-one antenna: FACT simultaneously delivers improved throughput and resiliency. Without dedicated communications personnel, operators can connect to unclassified and classified resources over existing commercial infrastructure. FACT also adds significant complexity to any adversary non-kinetic targeting or SIGINT collection as data streams flow over multiple carriers and are not aggregated until they reach the cloud- based concentrator. The FACT deployable kit connects users to multiple cellular, SATCOM, wireless, and wireline Wide Area Network (WAN) options. FACT uses smart blending technology to use all links simultaneously based on their real-time performance metrics and blend data across multiple networks. FACT delivers Primary, Alternate, Contingency and Emergency (PACE) connectivity and automatically adjusts to lost links as well as the addition of new links or link restoration. FACT users with 4 hours of training have established connectivity within 5 minutes of reaching operating location. The FACT gateway is also a WiFi hotspot allowing authorized users in the local area to connect wirelessly. The FACT ruggedized case enables the system to operate indefinitely in inclement weather conditions (heat, cold, rain, snow etc). The FACT shall weigh less than 25lbs and is aircraft transportable.

1.2. Software Licenses: Enhanced control, network management and cloud concentrator services. The FACT Gateway connects to a cloud-based concentrator in order to route data to its intended destination. The concentrator communicates with the deployed gateway to develop performance metrics for each link connected to the gateway. Working in tandem the gateway and the concentrator use smart blending technology to route each packet over the best performing network at that given millisecond. The concentrator re-assembles the data packets and then forwards the data

People First… Mission Always… to its intended destination. No data is stored at the concentrator. Network management supports relocating the concentrator location to best support deployed users and assign static IP address if required. Finally, enhanced control is a web-based capability that allows FACT administrators to establish data routing priorities, establish WiFi networks and perform other network configuration functions. All software licenses are based on an annual subscription that will be activated once all equipment is received by the Government.

1.3. Diverse International and Domestic LTE access (T-Mobile, Verizon, AT&T, and International): FACT Gateways are provisioned with SIMs from each of the CONUS carriers (T-Mobile, Verizon, and AT&T) to enable each gateway to connect to all three simultaneously anywhere in CONUS. OCONUS based units or units who deploy OCONUS are also provided with SIMs specific to their operating locations and including multiple carriers for those locations when available. FACT manufacturers have established priority data agreements with CONUS and OCONUS commercial carriers to avoid any data throttling or other performance inhibitors from affecting FACT users. Domestic and international data is purchased annually and is based on a per Gigabyte rate. Data can be pooled to support multiple FACT gateways.

1.4. Stand Up Engineering & Training Services and Global Mobility Operations Center (GMOC) support: FACT manufacturers will customize each FACT gateway for its intended operating location. This includes positioning the data concentrator in the optimal data center for best performance, integrating other WAN links such as wireline or SATCOM and providing training for receiving units. Operating location will be provided in the respective RFQ details. Training includes setup, management via Enhanced Control, performance monitoring and integration of new links when they are available. FACT manufacturers will also establish the GMOC or help desk to support users with everyday use or exercise/contingency preparation. This support should include a single phone number for users and is dedicated to assisting units with exercise/deployment planning, logistics, data plan management, troubleshooting, and vendor coordination. This number should be available from 0700-1700 EST. The on-call support shall be available for 12 months.

1.5. Small Tactical Executive WAN Communications Solution (STEW) DECTK Type 1 / CSfC Kit and 1 year Warranty. Device should be able to provide Concurrent voice, video, and data over multiple transmission paths to include built in or external cellular (3G/4G), built in Wi-Fi or Ethernet connection to Public Internet or satellite terminal (NSA CSfC Approved). The device should be FIPS-140-2 Level 2 Validated, NIAP Common Criteria VPN and ND PP certified, & NSA CSfC CL listed. Product can be brand name or equal to the specifications noted for this device.

1.6. On-Site Installation/Training. Services shall include one day for installation services/ on-site training services. Transportation and per diem shall be included in the pricing for this CLIN.

1.7. Shipping: Shipping to/from location with insurance shall be included

1.8. Brand Name or Equal: The items in this solicitation is identified as “brand name or equal,” the purchase description reflects the characteristics and level of quality that will satisfy the Government’s needs. The salient physical, functional, or performance characteristics that “equal” products must meet are specified in the solicitation. To be considered for award, quotes of “equal” products, including “equal” products of the brand name manufacturer, must meet the salient physical, functional, or performance characteristic specified in this solicitation, clearly identify the item by brand name and make or model number. Include descriptive literature such as illustrations and drawings. The Contracting Officer will evaluate “equal” products on the basis of information furnished by the vendor or identified in the quote and reasonably available to the Contracting Officer. The Contracting Officer is not responsible for locating or obtaining any information not identified in the quote. Unless the vendor clearly indicates in its quote that the product being offered is an “equal” product, the vendor shall provide the brand name product referenced in the solicitation

All Deliveries shall be to:

ITEM

ITEM/SERVICE

DESCRIPTION

SUGGESTED

MANUFACTURER QTY UNIT OF ISSUE PRICE TOTAL

Ruggedized Multi-Path:

Fanless GateWay network aggregation device with 3 Global

LTE Modems with all-in-one antenna

Tyto 2 Each

Software Licenses: Enhanced control, network management and cloud services

Dejero 2 Each

Diverse International and Domestic LTE SIM cards (T-Mobile, Verizon, AT&T, and International) – 500

Gigabytes

Dejero 2 Each

Stand Up Engineering & Training Services and 1st year Global Mobility Operations Center support

Tyto 400 Hours

Small Tactical Executive WAN Communications

Solution (STEW) DECTK Type 1 / CSfC

Kit

Sub U Systems 2 Each

6 On-Site Installation/Training Tyto 2 Lot

7 Shipping Vendor 2 Each Total for FACT Kit

MSgt Michael T. Rutland 320 3rd Avenue Mountain Home AFB, ID 83648

2.0 Security: The Contractor and all Contractor personnel shall abide by all AF and local rules, procedures and standards of conduct. A Department of Defense Contract Security Classification Specification (DD Form 254) is required for access to classified material. The Contractor shall also perform in accordance with the Compliance with National Industrial Security Program Operating Manual (NISPOM--DoD5220.22M).

2.1. Visitor Group Security Agreement (VGSA). AFMAN 16-1406 does not require the contractor to sign a VGSA. However, the local IP Office for each base may still require a similar document, which will be produced locally and provided to the company FSO. Contractor who operate as an independent visitor group are subject to this AFMAN and AFMAN 16 -1404 and must identify an on-site security point of contact (POC) to the local Information Protection Office. The contractor shall enter into a long term visitor group security agreement if contract performance is on base for 90 days or more. This agreement shall outline how the contractor integrates security requirements for contract operations with the Air Force to ensure effective and economical operation on the installation. The agreement should address:

2.1.1 Security support provided by the Air Force to the contractor to include storage containers for classified information/material, use of base destruction facilities, classified reproduction facilities, use of base classified mail services, security badging, base visitor control, investigation of security incidents, base traffic regulations, the use of security forms, and conducting 5 inspections required by DOD 5220.22-R, Industrial Security Regulation, and Air Force Manual 16-1406, Air Force Industrial Security Program Management.

2.1.2 Security support requiring joint Air Force and contractor coordination includes packaging classified information, mailing and receiving classified materials, implementing emergency procedures for protection of classified information, security checks, and internal security controls for protection of classified material and high value pilferable property.

2.1.3 On base, the long term visitor group security agreement may take the place of a Standard Practice Procedure (SPP). 9.2. Security Clearances Requirement: Contractor must possess a Secret Facility Clearance prior to submitting a proposal for this contract. Personnel performing on this SOW will require a favorably completed Tier 3 (T3) investigation resulting in access to Secret information. Contractors shall request personnel security clearances (submit Clearance paperwork through Defense Counterintelligence Security Agency (DCSA) to the National Background Investigations Bureau (NBIB)) for personnel requiring access to classified information within 15 days of contract award. Due to costs involved with security investigations, requests for Contractor security clearances shall be kept to an absolute minimum necessary to perform contract requirements. Contractor personnel shall have appropriate clearances prior to commencing work on any DO unless otherwise approved in writing by the OCO. The Contractor shall also complete visit requests for each individual that will be performing work on a task order in the Defense Manpower Data Center (DMDC) Defense Information System for Security (DISS) prior to performance start unless otherwise approved in writing All personnel performing on this PWS shall be U.S. Citizen and shall have at least a favorably completed and adjudicated by the OCO. The Prime Contractor shall ensure that any teaming partners or subcontractors have the appropriate clearances prior to beginning performance.

2.3. Notification. The contractor shall notify the Servicing Security Activity (SSA) at each location (s) and the local unit through the Defense Information System for Security (DISS), 30 days prior to contract performance on base. In the remarks section in the DISS visit request add the contract number and the company Facility Security Officer’s (FSO) name and contact number.

2.4. Listing of Employees. Prior to contract start, and as changes occur, the contractor shall provide the CO/PM and COR a list of all company employees assigned to this task order. The list shall include the employee's name, social security number and level of security clearance and location of performance. The list shall be validated and signed by the company Facility Security Officer (FSO) and provided also to the Sponsoring Agencies Security Manager. An updated listing shall be provided when an employee's status or information changes.

2.5. Security Assistant Appointment. The contractor shall appoint a Security Assistant for the on base Visitor Group. The Security Assistant may be a full time position or an additional duty position. The Security Assistant and sponsoring agency's Security Manager shall ensure all contractor personnel are integrated into sponsoring agencies Information Protection Program and receive initial and recurring security education training IAW DOD 5200.01, DOD Information Security Program Manual, and AFMAN 16 -1404, Air Force Information Security Program

2.6. Pass and Identification Items. The contractor shall ensure the pass and identification items required for contract performance are obtained for employees and non -government owned vehicles. 6

2.7. Retrieving Identification Media. The contractor shall retrieve all identification media, including vehicle passes from employees who depart for any reason before the contract expires;

e.g. terminated for cause, retirement, etc.

2.8. Traffic Laws. The contractor and its employees shall comply with base traffic regulations.

2.9. Weapons, Firearms, and Ammunition. Contractor employees are prohibited from possessing weapons, firearms, or ammunition, on themselves or within their contractor-owned vehicle or privately-owned vehicle while on (Name of Installation).

2.10. Controlled Unclassified Information (CUI). The Contractor shall comply with DoDI 5200.48, Controlled Unclassified Information. This regulation sets policy and procedures for the disclosure of records to the public and for marking, handling, transmitting, and safeguarding CUI material.

2.11. Reporting Requirements. Contractor personnel shall report to an appropriate authority any information or circumstances of which they are aware may pose a threat to the security of DOD personnel, contractor personnel, resources, and classified or unclassified defense information. Contractor employees shall be briefed by their immediate supervisor upon initial on -base assignment.

2.12. Physical Security. The contractor shall be responsible for safeguarding all government property and controlled forms provided for contractor use. At the end of each work period, all government facilities, equipment, and materials shall be secured.

2.13. Communications Security (COMSEC). Contractors may require access to COMSEC information. The DD FM 254 will give further instructions on safeguarding and managing COMSEC material.

2.14. Computer Security. The Contractor shall ensure all contractor-hired U.S. personnel obtain a favorable Tier 1 (T1) investigation and complete the IA training (e.g. Cyber Awareness) prior to gaining access to ".mil" or ".smil"(Secure .mil) domains IAW Air Force Instruction (AFI) 33- 200 IA Management, AFMAN 16-1404, AF Information Security Program, and AFI 17 -100 (formerly AFI 33-115, Vol 2) Air Force Information Technology (IT) Service Management.

Additional user training may be developed locally to reflect local needs and concerns. The T1 investigation is initiated by the local squadron where the contractor is assigned.

2.15. Non-government networks. The contractor is prohibited from establishing their own Information Technology (IT) systems/networks (Local Area Networks (LAN), Wide Area Networks (WAN), Cellular phone/USB Modem as WAN, Wi-Fi as WAN etc.) without the direct permission of governing communications and responsible information systems office and direction by the Government CO. If permission is granted, the Governmen t office approving request is responsible for providing oversight to ensure the system is properly accredited/authorized and all DoD/AF IT requirements are met. The Contractor shall provide point of contact information of such government office to the Government PM. Contractor employees who need access to government IT systems are determined to be trustworthy by the completion of a favorable personnel security investigation commensurate with assigned duties and by a designated government official prior to IT access being granted. This is accomplished through the system authorization access request, DD Form 2875, process.

2.16. Automatic Data Processing Equipment (ADPE). Visitor groups are prohibited from establishing their own Information Technology (IT) systems/networks (Local Area Networks 7 (LAN), Wide Area Networks (WAN), Cellular phone/USB Modem as WAN, Wi-Fi as WAN etc.) without the direct permission of governing communications and responsible information systems office. If permission is granted, the Government office approving request is responsible for providing oversight to ensure the system is properly accredited/authorized and all DoD/AF IT requirements are met. Contractor employees who need access to government IT systems are determined to be trustworthy by the completion of a favorable personnel security investigation commensurate with assigned duties and by a designated government official prior to IT access being granted. This is accomplished through the system authorization access request, DD Form 2875, process. The Contractor shall establish and implement procedures to ensure all ADPE, to include laptops and other data processing devices, issued to the Contractor by the Government are not lost or misplaced, are not used by unauthorized persons or are not subject to unauthorized external devices. The Contractor shall immediately report to the OCO or PM any occurrences of lost ADPE within two (2) hours of discovery of occurrence. In the event that ADPE is lost, the Contractor may be required, upon written direction of the CO, to replace the equipment at no additional cost to the Government. The Government may replace the equipment and deduct the cost of such from the monthly payment due the Contractor.

2.17. Key Control/Access Badge Control. The Contractor shall establish and implement methods of making sure all keys/badges issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. The Contractor shall not duplicate any keys issued by the Government.

2.18. Lost Keys. The Contractor shall immediately report to the Quality Assurance Evaluator or Program Manager any occurrences of lost or duplicated keys. In the event keys, other than master keys, are lost or duplicated, the Contractor may be required, upon written direction of the CO, to re-key or replace the affected lock or locks without cost to the Government. The Government may, however, at its option, replace the affected lock or locks or perform re-keying and deduct the cost of such from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

2.19. Prohibited Use of Keys. The Contractor shall prohibit the use of keys, issued by the government, by any persons other than the Contractor’s employees and the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in performance of contract work requirements in those areas.

2.20. Lock Combinations. The Contractor shall control access to all Government provided lock combinations to preclude unauthorized entry. The Contractor is not authorized to record lock combinations without written approval by the Government Program Manager. Records with written combinations to authorized secure storage containers, secure storage rooms, or certified vaults, shall be marked and safeguarded at the highest classification level as the classified material maintained inside the approved containers.