AFN Infrastructure QA COMPLETE.pdf

Sources Sought AFN TV Infrastructure Defense Media Activity

HQ0516-FY-25-0008 Q&A

# Reference Question/Comment

Q: If the systems need to be virtualized in the AWS Cloud, then in accordance with DoD Policy, the systems will need to meet FedRAMP requirements, correct?

A: Yes

Q: If FedRAMP, is the intent to satisfy HIGH, MODERATE or LOW control requirements?

If not FedRAMP, what is the anticipated FIPS199 categorization of these systems?

A: This will be determined in the PWS at the time of solicitation.

Q: Does the Government have a Compliance Tool that the NIST Deliverables (i.e., SSP, SAPP, SAR, POAM) must be developed, imported and/or managed in?

A: AFN-BC would need look to see if a Plan of Action & Milestones to include researching following documents System Security Plan User Access Control Planand what Matrix that may be used as a starting point.

Q: Is there an existing General Support System SSP and ATO that the requested SSP will inherit controls from? If yes, please estimate the total percentage of controls that are documented in the general support system.

A: We have not yet determined if we will expand on the existing network system, or launch a new one.

Either way, it’s reasonable to expect >381 Security Controls.

Q: Is there an existing User Access Control Plan/Matrix that may be used as a starting point?

A: No

Sources Sought AFN TV Infrastructure Defense Media Activity

Q: Who is the Authorizing Official/Designated Approving Authority for this system?

A: This is a sources sought notice for market research purposes only.

Q: Will this be a new greenfield facility at Ft Meade or will existing components at March AFB need to be integrated into the new system?

A: “Greenfield”

Q: Are there archive elements that exist today that will need to be migrated into the new system?

A: Yes

Q: Does the Media Facility at Ft. Meade already have an AWS Account? If so, will the playout software stack be deployed into this account or will a new account/org unit be required?

A: This has yet to be determined. At this point, we are anticipating that the vendor supply the cloud platform/account(s). We will make a determination based on best practices presented from responses to this sources sought.

Q: Will the existing workflows/software/traffic management for the radio broadcasts remain the same, other than re-routing internet signals to the new facility at Ft Meade? Or is there a desire to look at new software technologies for the radio side, i.e. like Myers ProTrack or Wheatstone routers.

A: There is a desire to research new technologies to accomplish the radio mission.

Q: Has consideration for an AWS Direct Connect been discussed? This is highly recommended based upon the number of SRT contribution streams that will flow to/from the cloud environment on-prem (satellites, contribution channels, etc.)

Sources Sought AFN TV Infrastructure Defense Media Activity

A: Please include this, and any other best-practices or recommended solutions, in your response.

Q: Will the distribution channels remain the same? (CDN, OTT, Satellite) or is there a desire to look at other MVPDs?

A: For intents and purposes related to this sources sought (market research), distribution channels will remain the same.

Q: Has the appropriate equipment been procured for sending/receiving multiple video and audio flows to/from the cloud environment and on-prem? (i.e. Appear or Nimbra appliances)

A: No, if applicable it would need to included in the new system.

Q: Regarding the current NAICS code for this project, please consider adding 512110, Motion Picture and Video Production, as is mentioned in the Requested Information part of Section 11.b of the Source Sought Notice.

A: This NAICS will not be added. The scope specifies broadcasting, not production.

Q: Regarding facilities for processing content, is there an estimate for the number of edit rooms/edit stations required? Does that number in the current AFN BC in Riverside inform this question?

Q: How many editors are expected / needed?

Sources Sought AFN TV Infrastructure Defense Media Activity

Q: What is the current list of contribution feeds?

A: TV contribution feeds mainly consist of a large selection U.S. over the air and cable network broadcasters.

Q: How are the current contribution feeds currently received?

A: Satellite, Pitch Blue, OTT (HLS, SRT)

Q: Under the Content Processing section, it states that the system, "...should also support adding closed captioning data." Who and how will this data be provided?

A: If captions are not already embedded then the capability to embed from a sidecar caption file.

Q: Is 1.5PB of storage for archived material RAW storage or usable?

A: Archive storage is for media that is already processed and verified ready to air.

Q: We understand that satellite modulation is DVB-S2/S2X. What encryption is needed?

A: The encryption used is proprietary to Verimatrix and licensed to DMA for AFN’s use. (bm)

Q: What is the manufacturer and model of the satellite receiver(s)?

A: For Verimatrix encryption:

• The consumer model: is the AFN7500HD (https://buyafn7500hd.com/products/copy-of-afn7500hd-set-top-box-1)

• A number of commercial IRD’s function with approved AFN Verimatrix CAMs. Note: AFN CAMs are restricted to USG/DoD controlled facilities only.

Q: Are all servers required to be STIG'd?

A: Yes https://buyafn7500hd.com/products/copy-of-afn7500hd-set-top-box-1 https://buyafn7500hd.com/products/copy-of-afn7500hd-set-top-box-1

Sources Sought AFN TV Infrastructure Defense Media Activity

Q: What type of Feed/Signal? Availability? IP Based?

A: This will be determined in the PWS at the time of solicitation.

Q: What is the current SW for Scheduling Traffic and MAM? Is DMA happy with the performance?

Would/Should those technologies be moved to the cloud? of via VPN? IS remote Desktop access like Teradici required. or a Cloud Based URL/Client?

A: Open to cost effective, funtional and other best-practices or recommended solutions.

Q: Please list all known formats. Is there a preferred method for asset verification? Unique ID?

CheckSuM? Asset QC? Are placeholder workflows Needed?

A: Open to various formats and recommendations.

Q: Is DMA using any VAST/FAST technologies? Is all programming flattened into blocks or Shows?

Does content have SCTE markers for ad insertion?

A: Programming is structured to support command information in place of advertising, content includes SCTE markers for inserstion control where applicable.

Q: Is there SAML/AD integration for Authentication? Is SSO needed?

A: Yes or similar as needed.

Q: What Logging level is needed? Describe the Audit level and action required? Does DMA have a Metadata Matrix that is sharable? Is time-based Metadata required? SRT or CC support needed?

Are metadata Field or view required to have permissions?

A: Please advise on best practices and recommendations.

Q: Please list all metrics to be monitored. Are as-run reports required? Are proof of performance reports required?

A: As-runs are required.

Sources Sought AFN TV Infrastructure Defense Media Activity

Q: Please define the Integration expects for Audio Vault? API? Webhooks & custom actions needed?

A: Vendors should propose capabilities based on standard integration practices.

Q: Please provide clarification around the exact needs for:

• Commercial removal (decommercialization).

• Editing for time and content compliance.

• Insertion of metadata and closed captioning.

Q: Please itemize or describe all transcoding requirements? Are audio remapping capabilities needed?

Is multi-Lingual audio channels or packages required? IMF?

A: Final broadcast product is English audio Stereo on Channel 1 & 2, no secondary audio, no IMF.

Some linear and file based delivered content may require downmix to stereo or remapping.

Q: What archive Tier/technology is Required? What is the require "Time to Restore" for assets to come back online? Does the archive need to be accessible by all locations?

A: We are asking that industry provide best practice solutions, based on their proposed architecture, that are cost effective.

Q: How many Channels for each? Are there preapproved vendors? Is there a Teleport already available?

Is the S2x encryption encoder needed only? or are the teleports in place? Does AFN DMA already have a CDN PProvider? Are there any FAST/VAST channels in the OTT footprint?

A: Channel count refer to announcement, Mux and Encryption will be required.

Q: How many locations will be accessing the system? How many cloud locations need to be supported?

A: Regardless of architecture, the system, or environment, will need to support potentially 100+ user connections for daily operations. Connectivity will be through internet connections, from potentially

Sources Sought AFN TV Infrastructure Defense Media Activity global locations.

Q: How many multi-view stations are needed? Does the monitoring need to be real time? How many total channels for each?

A: Scalable number of multiview stations, baseline of 12 stations. Realtime monitoring. 100+ channels for some stations.

Q: Is alibi logging for users only, or include Assets genealogy?

A: Alibi logging - continuous logging of broadcast feeds for review.

Q: Can AFN clarify whether they envision a hybrid architecture as a requirement or a preferred option?

The notice references both on-prem and cloud, but a clearer stance on cloud tolerance (e.g., FedRAMP Moderate/High for RMF compliance) would help scope accurately.

A: Open to both options, cost effective and functional.

Q: What specific requirements or constraints exist regarding DoD cloud infrastructure? For example, will solutions deployed in AWS GovCloud or Azure Government be considered compliant?

A: Yes both options would be considered compliant.

Q: Is AFN seeking full automation for CI asset lifecycle (from ingest to reporting), or will manual control points be required at specific stages?

A: Open to full automation. Manual points of control tbd.

Sources Sought AFN TV Infrastructure Defense Media Activity

Q: What level of integration is expected with existing tools like AudioVault? Should vendors assume they must provide APIs/scripts to support legacy systems, or can third-party upgrades be proposed?

A: Vendors may propose upgrades provided they meet operation and interoperability requirements.

Q: Will AFN permit temporary cloud infrastructure to support cutover workflows or DR readiness during transitional phases?

A: Open to temp infrasture that is compliance with government cloud security requirements.

Q: Should CI scheduling systems provide visual proof of performance (e.g., aircheck clips or screenshots), or will metadata-only tracking suffice for audits?

A: Open to recommendations and best practices.

Q: For the 100 contribution feeds, how many are expected to be live concurrently, and what are the codec/bitrate expectations?

A: Up to 24 in use for scheduled linear ingest, 4 in use for live scheduled or emergency on-air events.

28 to monitor upcoming scheduled records and live events. 4 for monitoring major news networks for emergency events.

Q: Is there an existing satellite downlink infrastructure at Fort Meade for receiving live feeds, or must vendors propose full acquisition solutions?

A: There is a DMA controlled satellite teleport at Fort Meade that should be able to accommodate downlinking needs.

Q: Will AFN provide the satellite encryption specifications for DVB-S2/S2x?(e.g., BISS-CA, AES-256) – Needed for playout and uplink vendor compatibility.

A: AFN Satellite uplinks use Verimatrix encryption.

Sources Sought AFN TV Infrastructure Defense Media Activity

Q: Will vendors be expected to integrate with the AFN Now / AFN Go platforms directly, or will this be handled by a third-party contractor?

A: Vendors should propose solutions assuming potential need to interface with AFN Now/AFN Go platforms.

Q: Is there an API or SDK available for interfacing with AFN Now or Go, particularly for real-time metrics or CI feedback loops?

A: Vendors are encouraged to describe capabilities for integrating with external platforms for data exchange.

Q: Is AFN open to active-active deployments across regions (e.g., Fort Meade + a cloud zone) for seamless failover?

A: Yes.

Q: How much live channel delay (latency) is tolerable in a DR scenario if the primary on-prem system becomes unavailable?

A: <1 second

Q: Does AFN anticipate needing FedRAMP-authorized components for any SaaS/PaaS offerings in the solution?

A: Solutions must meet DoD Security requirements and be FedRAMP authorized at the appropriate impact level.

Q: Will AFN provide a pre-existing RMF baseline or previous SSP/SAR documentation for inherited controls, or should vendors scope a full RMF from scratch?

A: The integartor is responsible for developing and scoping the complete RMF package.

Sources Sought AFN TV Infrastructure Defense Media Activity

Q: Can AFN provide an inventory of current AFN-BC systems and workflows for gap analysis and migration planning?

A: Vendors should develop solutions based on solicitations stated objectives and requirements, incorporating industry best practices for migration and gap analysis.

Q: Are there blackout windows or freeze periods anticipated during which the transition must not impact broadcast operations?

A: Yes, AFN will provide a schedule for preferred dates & time of day to perform any service impacting work.

Q: Will AFN expect in-country spare parts warehousing and/or mission-ready system replicas for high-availability functions?

A: TBD

Q: Is vendor-based remote support permitted through VPN/secure enclave access, or is on-site-only support required for sensitive operations?

A: Remote vendor support personnel must be fully vetted, capable of passing gov background investigation and able to obtain a CAC. Any access to government systems will require the use of government furnished equipment.

Q: Is the government interested in exploring OpEx models (subscription or managed services), or will this be a CapEx-based hardware procurement only?

A: Open to evaluating both OpEx and CapEx models. Considerations will be based on cost effectiveness, functionality.

Sources Sought AFN TV Infrastructure Defense Media Activity

Q: Does AFN intend to pursue a single-award contract, or are modular/multi-award structures (e.g., broadcast + streaming + CI tracking) under consideration?