Attachment_13_Supplemental_Technical_and_Proposal_Support_Data.pdf

RFP #: HDTRA1-18-R-0002; DTRA Core IT Services Supplemental Technical and Proposal Data

Distribution A: Approved for public release; distribution is unlimited 1

DTRA Agency-Wide Information Technology Support Services Core IT Services Contract –

HDTRA1-18-R-0002

Supplemental Technical and Proposal Data

The following supplemental technical data has been prepared in response to industry questions and SME observations, and is intended to support proposal preparations in response to the Core IT Services RFP. These data are provided in tables and graphics when possible to simplify the data presentation. When possible the source and date of the data will be cited. Offerors are cautioned to recognize this data represents a snapshot in time and in the dynamic DTRA IT environment these data are subject to change.

Table of Contents:

• Industry Day Presentation on DTRA IT Environment (7/20/2017)

• Service Catalog

• Incumbency

• Historical Data

• Labor Category Summary

• Tentative Acquisition Timeline – For Planning Purposes

Distribution A: Approved for public release; distribution is unlimited 2

Extracted from Industry Day Presentation, 7/20/17

UNCLASSIFIED

DTRA’s IT Environment

J6IOT

2All information is tentative and is subject to change

UNCLASSIFIED

DTRA IT Environment – Introduction

IT Infrastructure Description

• NIPR Devices (Mar 2017 summary data)

• 461 Servers

• 72 Circuits

• 164 Network Devices

• SIPR Devices

• 442 Servers

• 22 Circuits

• 132 Network Devices

DTRA Infrastructure Users

• ~ 5000 users/Multiple

Domains

• Service Desk Volume (Mar

2017 data)

• 2258 Restorations

• 2136 Requests

• 4604 Total Ticket volume

3All information is tentative and is subject to change

Distribution A: Approved for public release; distribution is unlimited 3

DTRA IT Environment – Hardware

Category Manufacturer Purpose Storage Hitachi SAN (block storage)

Hitachi NAS (file storage) Hitachi Object Storage Hitachi Branch Office Storage Brocade Replication Switches

Backup Hitachi Virtual Backup Quantum Tape backup

Servers Dell Compute HP Compute

Security Palo Alto Next Generation FW Gigamon Packet Aggregation NetOptics Network tap Symantec Packet capture Sourcefire IDS

All information is tentative and is subject to change

DTRA IT Environment – Hardware

Category Manufacturer Purpose Networking F-5 Load Balancing/DNS

Cisco SOC/COR Switch Cisco Routers Cisco Identity Mgmt/Authentication Cisco Access switch

Unified Communication Cisco UCS servers (VoIP) Polycom VoIP Phone General Dynamics VoIP Secure Voice Phone Oracle Session Border Controller Cisco/Tandberg Desktop/Bridge VTC Cisco and Polycom Suite VTC

End User Devices Belkin KVM Switch (1000) Dell Laptops (3500) Dell Desktops (1000) Dell/Wyse Zero Client (1000) Apple Smart Phones (800)

Distribution A: Approved for public release; distribution is unlimited 4

DTRA IT Environment – Software

Category Manufacturer Purpose Server OS Microsoft Server OS

Redhat Server OS Virtualization VMWare Server Virtualization Database Oracle RDBMS

Microsoft RDBMS Operations ManagementBMC Service Mgmt

Microsoft System Monitoring Microsoft Configuration Mgmt/patching Redhat Configuration Mgmt/patching BMC Asset Management Flexera SW Asset/License Mgmt Solar Winds Network Monitoring

Unified Communication Microsoft Unified Communication Cisco VoIP Cisco/Tandberg VTC Management

Category Manufacturer Purpose Identity Management Microsoft Identity Management Web Site Microsoft Web Front End

Apache Web Front End Adobe Web Site Development

Forms Management Adobe Forms Management GeoSpatial ESRI GeoSpatial Knowledge ManagementMicrosoft Knowledge/Document Mgmt

Microstrategy Business Intelligence Google Search Appliance Expert System Heuristic Search

Project Management Microsoft Project Management Emergency Notification AtHOC Emergency Notification Remote Access Microsoft Remote user access

VMWare Remote virtual desktop

Distribution A: Approved for public release; distribution is unlimited 5

Category Manufacturer Purpose Security HP SIEM

Splunk SIEM Cisco IDS Management McAfee End Point Monitoring Microsoft End Point Monitoring Tenable Vulnerability Scanning

End-user S/W (most comMicrosoft OS Microsoft Business Productivity 7-Zip File compression Microsoft Project Management Microsoft Workflow HID PKI Middleware 90 Meter PKI Middleware Adobe Document Creation Google Web Browser Microsoft Web Browser

Distribution A: Approved for public release; distribution is unlimited 6

Extracted from J6 DTRA Service Level Management Plan (SLM Plan), 21 Sep 2016

Service Catalog This SLM plan is the basis for the Service Model, Remedy CMDB, ITSM portal library and the J6 Service Catalogue. As stated, the J6 will provide a centrally managed and maintained common IT infrastructure for the DTRANET and Transport Customer. The common IT infrastructure will support end users, business and mission systems.

The J6 Service Catalog is built in Remedy and provides Technical Enterprise Services and Configuration Items (CIs) are outlined in table 6-1; Business Enterprise Services are outlined in Table 6-2. Section 6.3 provides detail of maintaining the catalog.

The J64 IT Services Department is responsible for the requirements gathering, design, implementation and operational transition of the infrastructure. All Enterprise Services, both Technical and Business are directly supported by Departments within the DTRA J6 through the J631 Service Desk.

Technical Enterprise Services The technical Enterprise Service offerings are provided to all DTRANET IT users, Mission and Business customers.

Enterprise Services J6

Department

- Enterprise Service Owner

J6 Service Model

A.

Enterprise Services

B.

Infrastructure Services

C.

Platform Services

D.

Transport Services

Desktop Services

- Physical Desktop

- Virtual Desktop

J6413 IaaS X Optional No J6 Support No J6 Support

Virtual Infrastructure Services

- Server Hosting

- Virtual Datacenter Hosting

- Application Streaming

- Application Hosting

J6413 IaaS

X Optional No J6 Support No J6 Support

Unified Communications

- Exchange Mail

- Remote Access

- Mobility / Blackberry

- Voice Over IP / VoIP

- Video Teleconferencing

- Presence

- Instant Messaging

J6413 SaaS X Optional No J6 Support No J6 Support

Collaboration Services -Portal Services -Project Services -Database Services -Application Development -Web Services

J642 SaaS

PaaS

X Optional Optional No J6 Support

Distribution A: Approved for public release; distribution is unlimited 7

Enterprise Services J6 Department

- Enterprise Service Owner

J6 Service Model

A.

Enterprise Services

B.

Infrastructure Services

C.

Platform Services

D.

Transport Services

Database Services

- Microsoft SQL Database

- Oracle Database

J642 PaaS

IaaS

X Optional Optional No J6 Support

File and Print Services -File Services -Print Services -Fax Services -Digital Sending -Scanning Services

J6413 SaaS X Optional Optional No J6 Support

IT Management Services -Configuration Management System -Network Management and Monitoring System -System Patching and IAVA Compliance

J6413 SaaS X X Optional No J6 Support

IT Management Security Services

-HBSS

-Antivirus -Intrusion Protection -IA Services -System IA Scanning

J6413 SaaS X X Optional No J6 Support

Directory and CAC Authentication -Directory Authentication

- CAC single sign on services -Radius/TACACS/LDAP/OCSP

J6413 IaaS X X X No J6 Support

Operating System Support Services -Microsoft Windows -Linux -Solaris

J6413 IaaS

PaaS

X X X No J6 Support

Storage Storages -Local Site Storage -Replicated Storage (COOP) -Archive Storage -Centralized Backups -Disaster Recovery

J6413 IaaS X X X No J6 Support

Network Access Services -Network Load Balancing -Network Proxy -Network Acceleration -De Militarized Zone (DMZ) -IP Management -Network Isolation and VRF

J6412 IaaS X X X No J6 Support

Network Transport Services -Edge Network Access

J6412 TaaS X X X X

Distribution A: Approved for public release; distribution is unlimited 8

Business Enterprise Services In addition to Technical Enterprise Services Offerings, the J6 also provides Business Enterprise Services to DTRA customers. These business services support and define the Technical Enterprise Services (Table 6-1) as well as support DTRA Business and Mission systems.

Enterprise Services J6 Department

- Enterprise Service Owner

J6 Service Model

A.

Enterprise Services

B.

Infrastructure Services

C.

Platform Services

D.

Transport Services

Enterprise License Agreements -Microsoft -Oracle

-OPNET

-VMWARE

-Symantec

J6CSM X X X No J6 Support

Certification and Accreditation (C&A)

J62 X X X No J6 Support

Computer Network Defense Provider

(CNDSP)

J621 X X X X

IT Service Desk

J631 X X X No J6 Support

Technology and Engineering Services & Future Technologies

J642 X X X No J6 Support

Mission Services J632 X X X No J6 Support

IT Facilities

-HVAC

-Power -Rack Space

J6413 X X X No J6 Support

Telecommunication Services

- Cable Television

- Telephony

- Circuit Transport

- Crypto Services

J6413

X X X No J6 Support

Testing and Development

- Testing Services -Development Services

J9 Support X X X No J9 Support

Incumbency

Excerpt from Q&A responses posted to FBO in Sep 2017

Question: Who is currently providing these services?

Distribution A: Approved for public release; distribution is unlimited 9

RESPONSE: The current contract for Infrastructure support, HDTRA1-08-0016, expires in September 2018 and part of this acquisition is to cover the current scope of that contract.

However, the intent is to expand the scope of the acquisition strategy to provide cover the full agency-wide IT requirements, and as such the new acquisition will have a larger potential reach.

UPDATE: with the current acquisition strategy of a single award for the IT Core Services and a multiple award for the IT Service Design effort, the IT Core scope of work very closely aligns with the current work-scope of the HDTRA1-08-0016 contract and currently active task orders.

Historical Summary

Task Order (TO) 1; IT Service Provisioning and Operations

The following table reflects total labor hours recorded for a representative one year period supporting DTRA IT services similar in nature to the scope defined in IDIQ SOO section 4.1.1 IT Service Integration, Provision, Transition, and Operations, and TO 1 (IT Service Provisioning and Operations). Notice the hours are shown distributed among four levels of labor based on experience/seniority, and are distributed among the operating locations currently supported by contractor service providers. The data provided in these tables are intended to provide interested offerors’ with a better sense of the scale and scope of the current support work, but is not intended as a mandated or expected level of support for proposals submitted in response to the final RFP.

The following table reflects the distribution of security clearance levels among the current staff supporting the work similar in scope to IDIQ SOO section 4.1.1 IT Service Integration, Provision, Transition, and Operations, and TO 1. Recognize that since “SCI Eligible” is a subset of the Top Secret, the cumulative percentages exceed 100%. Also, these percentages reflect total support without regard to specific service location. Also recognize these figures do not represent

IT Service Provisioning & Ops NCR Kirtland AFB Eglin AFB Travis AFB Total Hours (includes IDIQ PMO) 125,000 9,500 3,500 2,000 Level 4 (High) 56% 60% Level 3 28% 20% 100% 100% Level 2 14% 20% Level 1 (Low) 2%

Distribution A: Approved for public release; distribution is unlimited 10 a specific requirement, but represent a recent “as is” state after several years of continued support.

The following table shows the relative distribution of the current workforce among the support teams. These percentages reflect total support without regard to specific service location.

The following tables shows the relative distribution of the current distribution of IT certifications. These percentages reflect total support without regard to specific service location.

Clearance Levels

SECRET 7%

TOP SECRET 93%

SCI Eligible 71%

Current Team Breakout Support % Network Operations 16% Network Engineering 16% Asset Management 3% Service Desk 30% Cyber 3% Data Center 32%

Current Certifications

IAT I 22%

IAT II 75%

IAM I 3%

Distribution A: Approved for public release; distribution is unlimited 11

Task Order (TO) 2; Cybersecurity Support Services

The following table reflects total labor hours recorded for a representative one-year period supporting DTRA IT services similar in nature to the scope defined in IDIQ SOO section 4.1.2 Cybersecurity and Computer Network Defense, and TO 2 Cybersecurity Support Services.

Notice the hours are shown distributed among four levels of labor based on experience/seniority.

The data provided in these tables are intended to provide interested offerors’ with a better sense of the scale and scope of the current support work, but is not intended as a mandated or expected level of support for proposals submitted in response to the final RFP.

supporting the work similar in scope to IDIQ SOO section 4.1. 2 Cybersecurity and Computer Network Defense, and TO 2. Recognize that since “SCI Eligible” is a subset of the Top Secret, the cumulative percentages exceed 100%. Also, these percentages reflect total support without regard to specific service location. Also recognize these figures do not represent a specific requirement, but represent a recent “as is” state after several years of continued support.

The following table represents the current certifications (per DoDI 8500) of the team supporting the DTRA cybersecurity mission.

Cyber NCR Total Estimated Hours 75,000 Level 4 (High) 19% Level 3 46% Level 2 19% Level 1 (Low) 19%

Clearance Levels

SECRET 3%

TOP SECRET 97%

SCI Eligible 67%

Current Team Functions Current Certifications CSSP - Protect Team CND-A/AU CSSP - Sustain Team CND-IS CSSP - Detect / Response Team CND-A/IR Supply Chain Risk Management IAM II/III Cross Domain Support Element IAM II/III

IV&V IAT II/III

AODR - Support IAM II/III IA- Policy & Compliance IAM II/III

A&A IAM II/III

Cyber / IA Workforce Management N/A

COMSEC N/A

Distribution A: Approved for public release; distribution is unlimited 12

The following table in a listing of the Foundation Technologies current in use in support of the DTRA cybersecurity mission.

Foundation Technologies In-Use ArcSight CISCO FirePower Bro Splunk

HBSS

PaloAlto Symantec PCAP Windows OS Linux OS

CISCO

Gigamon / Network Critical

JIMS

Emass Microsoft Active Directory Database Management COMSEC Key Management Interface (KMI)

DOTS

CLEAR

ACAS

CMRS

COAMS

SonarCube Fortify

This final table in the Cybersecurity support area reflects the skill sets represented by the current Cybersecurity support team.

Current Skill sets / experience IDS Signature Creation Cyber Threat Intelligence CSSP ESM Requirements / Compliance Technical Writing / Communications Cyber Kill Chain Methodology Network / Server / Workstation Forensics Network / Server / Workstation Analysis

COMSEC

IA Policy / Technical Writer IT Auditor Inspector

Distribution A: Approved for public release; distribution is unlimited 13

Vulnerability / Red /Blue Team Assessments FISMA / DoD Scorecard Certification and Accreditation Supply Chain Risk Management Key Management Interface Assessment & Authorization Vulnerability Scanning Analysis Configuration Management Analysis Security Engineer / Architect SAV / CCRI experience Software Code Reviews / Assessor Security Control Assessor Financial Systems Auditor / Privacy Program / Project Management User Education / Awareness / Presentation Internal Quality Assurance and Auditor Intelligence Analysis Joint Regional Security Stack (JRSS) ToolSuite Plan Of Action & milestones (POA&M) Management Argus Common Control Assessor IA Directives Management Cloud Security / Technologies IT Servicer Broker Liaison DoD Information Technology (IT) Portfolio Repository

Distribution A: Approved for public release; distribution is unlimited 14

Task Order (TO) 3; Test, Transition, and Integration Support Services

The following table reflects total labor hours recorded for a representative one-year period supporting DTRA IT services similar in nature to the scope defined in IDIQ SOO section 4.1.3, IT Test, Transition, and Integration Support Services, and TO 3 Test, Transition, and Integration Support Services. Notice the hours are shown distributed among four levels of labor based on experience/seniority. The data provided in these tables are intended to provide interested offerors’ with a better sense of the scale and scope of the current support work, but is not intended as a mandated or expected level of support for proposals submitted in response to the final RFP.

supporting the work similar in scope to IDIQ SOO section 4.1.3 Test, Transition, and Integration Support Services, and TO 3. Recognize that since “SCI Eligible” is a subset of the Top Secret, the cumulative percentages exceed 100%. Also, these percentages reflect total support without regard to specific service location. Also recognize these figures do not represent a specific requirement, but represent a recent “as is” state after several years of continued support.

The following tables shows the relative distribution of the current distribution of IT certifications.

Test and Integration (w/o DEL) NCR Total Hours (includes IDIQ PMO) 32,000 Level 4 (High) 49% Level 3 35% Level 2 16% Level 1 (Low) 0%

Clearance Levels

SECRET 20%

TOP SECRET 80%

SCI Eligible 66%

IA Function Level

IAM I 7%

IAM III 7%

IAT I 13%

IAT II 73%

Distribution A: Approved for public release; distribution is unlimited 15

The DITEC Resource Request (DRR) process, shown below, reflects the governance process new capabilities or upgrades to existing capabilities follow to be integrated into the production environment.

For the graphic above:

CRQ = Change Request ERB = Engineering Review Board CCB = Configuration Control Board IV&V = Independent Validation and Verification

Sample of the level of activity; Over a recent six month period, the DITEC received an average of 169 DDRs per month (or 1015 total DDRs for the six month period).

Distribution A: Approved for public release; distribution is unlimited 16

Labor Category Summary

The following table is a summary of the labor categories associated with the historical hours presented for all Task Orders above. The offerors are encouraged to use these labor categories to develop proposed pricing solutions.

Labor Category Level Education Experience Clearance

Applications Systems Analyst I HS 0-5yrs Secret Applications Systems Analyst II HS/Associate's 5-10yrs Secret/TS Applications Systems Analyst III BA/BS 10-15yrs TS Applications Systems Analyst IV MS 15yrs + TS Asset Management Specialist1 I HS 0-5yrs Secret

Asset Management Specialist1 II HS/Associate's 5-10yrs Secret/TS

Asset Management Specialist1 III BA/BS 10-15yrs TS

Asset Management Specialist1 IV MS 15yrs + TS

Computer Forensic & Intrusion Analyst2 I HS 0-5yrs Secret

Computer Forensic & Intrusion Analyst2 II HS/Associate's 5-10yrs Secret/TS

Computer Forensic & Intrusion Analyst2 III BA/BS 10-15yrs TS

Computer Forensic & Intrusion Analyst2 IV MS 15yrs + TS Configuration Management Specialist I HS 0-5yrs Secret Configuration Management Specialist II HS/Associate's 5-10yrs Secret/TS Configuration Management Specialist III BA/BS 10-15yrs TS Configuration Management Specialist IV MS 15yrs + TS Contract Officer/Contracts Manager1 I HS 0-5yrs Secret

Contract Officer/Contracts Manager1 II HS/Associate's 5-10yrs Secret/TS

Contract Officer/Contracts Manager1 III BA/BS 10-15yrs TS

Contract Officer/Contracts Manager1 IV MS 15yrs + TS

Cyber Security Specialist1 I HS 0-5yrs Secret

Cyber Security Specialist1 II HS/Associate's 5-10yrs Secret/TS

Cyber Security Specialist1 III BA/BS 10-15yrs TS

Cyber Security Specialist1 IV MS 15yrs + TS Database Specialist I HS 0-5yrs Secret Database Specialist II HS/Associate's 5-10yrs Secret/TS Database Specialist III BA/BS 10-15yrs TS Database Specialist IV MS 15yrs + TS Financial Manager1 I HS 0-5yrs Secret

Financial Manager1 II HS/Associate's 5-10yrs Secret/TS

Financial Manager1 III BA/BS 10-15yrs TS

Financial Manager1 IV MS 15yrs + TS

Distribution A: Approved for public release; distribution is unlimited 17

Helpdesk Specialist2 I HS 0-5yrs Secret

Helpdesk Specialist2 II HS/Associate's 5-10yrs Secret/TS

Helpdesk Specialist2 III BA/BS 10-15yrs TS

Helpdesk Specialist2 IV MS 15yrs + TS Information Assurance/Security Specialist I HS 0-5yrs Secret Information Assurance/Security Specialist II HS/Associate's 5-10yrs Secret/TS Information Assurance/Security Specialist III BA/BS 10-15yrs TS Information Assurance/Security Specialist IV MS 15yrs + TS

Information Specialist/Knowledge Engineer2 I HS 0-5yrs Secret

Information Specialist/Knowledge Engineer2 II HS/Associate's 5-10yrs Secret/TS

Information Specialist/Knowledge Engineer2 III BA/BS 10-15yrs TS

Information Specialist/Knowledge Engineer2 IV MS 15yrs + TS Network Specialist I HS 0-5yrs Secret Network Specialist II HS/Associate's 5-10yrs Secret/TS Network Specialist III BA/BS 10-15yrs TS Network Specialist IV MS 15yrs + TS Program Manager2 I HS 0-5yrs Secret

Program Manager2 II HS/Associate's 5-10yrs Secret/TS

Program Manager2 III BA/BS 10-15yrs TS

Program Manager2 IV MS 15yrs + TS

Project Manager2 I HS 0-5yrs Secret

Project Manager2 II HS/Associate's 5-10yrs Secret/TS

Project Manager2 III BA/BS 10-15yrs TS

Project Manager2 IV MS 15yrs + TS Quality Assurance Specialist I HS 0-5yrs Secret Quality Assurance Specialist II HS/Associate's 5-10yrs Secret/TS Quality Assurance Specialist III BA/BS 10-15yrs TS Quality Assurance Specialist IV MS 15yrs + TS

Systems Administrator1 I HS 0-5yrs Secret

Systems Administrator1 II HS/Associate's 5-10yrs Secret/TS

Systems Administrator1 III BA/BS 10-15yrs TS

Systems Administrator1 IV MS 15yrs + TS

Systems Engineer2 I HS 0-5yrs Secret

Systems Engineer2 II HS/Associate's 5-10yrs Secret/TS

Systems Engineer2 III BA/BS 10-15yrs TS

Systems Engineer2 IV MS 15yrs + TS

Technical Writer2 I HS 0-5yrs Secret

Technical Writer2 II HS/Associate's 5-10yrs Secret/TS

Technical Writer2 III BA/BS 10-15yrs TS

Technical Writer2 IV MS 15yrs + TS

Distribution A: Approved for public release; distribution is unlimited 18

Test Engineer Level2 I HS 0-5yrs Secret

Test Engineer Level2 II HS/Associate's 5-10yrs Secret/TS

Test Engineer Level2 III BA/BS 10-15yrs TS

Test Engineer Level2 IV MS 15yrs + TS Voice/Data Communications Engineer I HS 0-5yrs Secret Voice/Data Communications Engineer II HS/Associate's 5-10yrs Secret/TS Voice/Data Communications Engineer III BA/BS 10-15yrs TS Voice/Data Communications Engineer IV MS 15yrs + TS

Distribution A: Approved for public release; distribution is unlimited 19

Tentative Acquisition Timeline – for planning purposes The timeline below represents estimated dates and durations for the acquisition activities related to the two IDIQs that comprise the Agency-Wide IT Support Services requirement and acquisition strategy. Recognize these dates are tentative and subject to change, and are provided here for general planning purposes only. Actual due dates and response dates will be specified in the final RFPs posted on FBO.

Scheduled Activity Estimated Date(s) Single Award IDIQ Release Draft RFP for Single Award IDIQ 12/6/17 (actual date) Deadline for Industry Questions on DRFP for Single Award IDIQ 12/18/17 (actual date) Responses to Industry Questions on DRFP for Single Award IDIQ Posted to FBO

2/5/18 (actual date)

Release Formal RFP for Single Award IDIQ 2/28/18 Industry Questions on Single Award IDIQ RFP due 3/15/18 Responses to Industry Questions on RFP for Single Award IDIQ Posted to FBO

3/23/18

Proposal Responses to Single Award IDIQ due 4/16/18 Conduct Source Selection 4/18/18 - 8/17/18 Announcement of Award 8/31/18 Debriefs to Offerors 9/10/18 – 9/14/18 Contract Kick-off 10/1/18 Transition-In on first Task Orders issued against Single Award IDIQ

10/1/18 – 11/30/18

Single Award winner at Full Performance 12/3/18

Multiple Award IDIQ Release Draft RFP for Multiple Award IDIQ 5/15/18 Deadline for Industry Questions on DRFP for Multiple Award IDIQ 5/30/18 Responses to Industry Questions on DRFP for Multiple Award IDIQ Posted to FBO

6/20/18

Release Formal RFP for Multiple Award IDIQ 7/18/18 Industry Questions on Multiple Award IDIQ RFP due 8/1/18 Responses to Industry Questions on RFP for Multiple Award IDIQ Posted to FBO

8/15/18

Proposal Responses to Multiple Award IDIQ due 8/31/18 Conduct Source Selection 9/4/18 – 12/13/18 Announcement of Award 12/13/18 Debriefs to Offerors 1/7/19 - 1/9/19