Industry Day Slides.pdf

The Leader in Warfare Systems Development and Integration

Distribution A: Approved for Public Release; Distribution is Unlimited

January 2015

Naval Surface Warfare Center, Dahlgren Division

Baseline Brief

CAPT Brian R. Durant • Commander Dennis M. McLaughlin • Technical Director

Corporate Assessment and Authorization (A&A) Package Creation and Maintenance

Service N00178-21-R-4413

INDUSTRY DAY SLIDES

Naval Surface Warfare Center, Dahlgren Division

(NSWCDD)

Corporate Operations Department Code 10

UNCLASSIFIED

DisclaimerDisclaimer Information Purposes Only

–All information provided prior to the release of the Solicitation is considered to be non-binding.

–Comments provided by industry will be considered and included in the final Solicitation at the discretion of the Contracting Officer.

–The Government is bound only by the information contained in the Final Solicitation and the amendments, if any.

Rules for Questions and AnswersRules for Questions and Answers Naval Surface Warfare Center, Dahlgren Division (NSWCDD) will not have a direct verbal exchange for questions and answers.

Any questions must be posted on www.sam.gov.

Question & Answers (Q&As) shall be submitted to Temica.Scroggins@navy.mil and Daniel.Belcher@navy.mil and shall reference the slide number and Performance Work Statement (PWS) section number, when applicable.

AgendaAgenda Industry Day Purpose Acquisition Strategy Procurement Overview - Scope Mandatory Requirements Performance Work Statement Skills and Training Available On-Site Space Reporting Deliverables Travel Additional Information

UNCLASSIFIED Distribution Statement DDistribution Statement D

Industry Day PurposeIndustry Day Purpose For interested companies to:

–Promote Competition –Encourage Exchange of Information –Gain Better Understanding of Requirements –Provide Networking Opportunities

Acquisition StrategyAcquisition Strategy

Follow-on to:

- N0017820C2403 (i-Assure, LLC)

Changes/Difference from current contract to follow-on:

- Current contract is a one (1) year plus two (2) option period effort for a total of 36 months. Follow-on effort will be one (1) year plus four

(4) option period effort for a total of 60 months.

- New effort provides a PWS, stating the objectives of NSWCDD and requirements are stated in general terms of objectives to be met by the prospective awardee in providing RMF Package Creation and Maintenance for any and all supported packages at NSWCDD vs. a requirement to price a specific number of packages at a specific price per package.

Acquisition Strategy (Cont.)Acquisition Strategy (Cont.)

Small Business Set-aside

Contract Type: FFP

Period of Performance: 5 Year (Base + 4 options)

Key Dates:

– Anticipated Solicitation Release: November 2021

– Anticipated Award: January 2023

Current History

– In 2018 completed 66 creation and maintenance packages and we expect that number to continue on that trend and level off lower.

Award will be based upon “Best Value” to the Government

Procurement OverviewProcurement Overview Scope

– Provide non-personal support that facilitate the requirements for RMF support for Information Technology (IT) Systems supported by NSWCDD personnel, located in Dahlgren and Dam Neck Virginia. This effort primarily includes Information Assurance (IA)/Cybersecurity policy and control evaluations, preparation of supporting RMF and current Government approved process for packages and artifacts, implementation of security postures, and Subject Matter Expertise (SME) in IA/Cybersecurity life cycle management, coordination, implementation, and deployment via the Naval Sea Systems Command (NAVSEA) Functional Authorizing Official (FAO) and the Navy Authorizing Official (NAO). The scope of this effort also encompasses the RMF work to be performed by NSWCDD personnel for IT Systems under the purview of the Naval Air Systems Command (NAVAIR) FAO, Defense Threat Reduction Agency (DTRA), Army, Marine Corps processes, and/or other Authorizing Officials.

Mandatory Requirements Mandatory Requirements Mandatory Requirements:

– Facility Security Clearance: The Contractor’s primary facility for supporting this Contract is required to have a clearance of SECRET.

– Personnel Security Clearances: All personnel providing technical support under this requirement must possess clearances at the SECRET level or higher.

– Personnel Certification:

• Senior Systems Security Engineer(s) and Systems Security Engineer(s) shall maintain Information Assurance (IA) certification and requirements throughout the delivery period in accordance with DoD 8570.01-M or successor and NSWCDDINST 5239.4C. Senior Systems Security Engineers shall maintain certification and requirements at the IA Workforce (IAWF) designation of Information Assurance Management (IAM) Level III, while Systems Security Engineers shall maintain certifications and requirements at the IAM Level II or higher designation. Senior Systems Security Engineer(s), Systems Security Engineer(s) and any others that require privileged use shall maintain the appropriate Information Assurance Technology (IAT) certification (IAT II).

• Senior Systems Security Engineer(s), Systems Security Engineer(s) and any others that require privileged use shall have the appropriate Information Technology (IT) designation: IT-1 for privileged use and IT-2 for non-privileged use.

Offerors must meet all mandatory requirements at time of proposal submission

Performance Work StatementPerformance Work Statement –The Contractor shall provide RMF ashore and customer/afloat package creation and RMF ATO maintenance support throughout the lifecycle of the IT system.

–The Contractor shall collectively complete and submit all ISO/ISSE required tasks for each RMF step within the timeline identified.

• RMF Step 1 – Six (6) business days

• RMF Step 2 – Ten (10) business days

• RMF Step 3 – Thirty (30) business days

• RMF Step 4 – Twenty (20) business days

• RMF Step 5 – Ten (10) business days

• RMF Step 6 - Twenty (20) business days

Performance Work Statement (Cont)Performance Work Statement (Cont)

–The Contractor shall assist NSWCDD and NSWC Dam Neck System POCs with developing overall RMF improvement strategies (i.e., inheritance, template utilization) to streamline approval processes and reduce the overall RMF level of effort.

–The Contractor shall provide all required information assurance/A&A document creation/preparation services and/or A&A maintenance services for security authorization packages throughout the lifecycle of the IT system. Creation/preparation services and/or A&A maintenance services includes standard RMF packages (to include PIT), Non-IT Designation packages, Assess Only packages, Interim Authorization to Test (IATT) packages, and Warfare Center Interim Authorization to Connect (IATC) documentation.

–The Contractor shall have direct knowledge of Enterprise Mission Assurance Support Service (eMASS) and a minimum of six (6) years of experience utilizing the Navy’s instance of eMASS. Additionally, the Contractor shall have performed duties previously as an ISSE for Navy RMF packages, which resulted in the granting of thirty (30) or more RMF Authorizations to Operate (ATOs).

–The Contractor shall ensure that any IT system functioning/being operated under a legacy DIACAP or PIT accreditation will be transitioned to RMF under package creation services.

–The Contractor shall provide vulnerability scanning through the Assured Compliance Assessment Solution (ACAS) and Security Content Automation Protocol (SCAP) of the ISs (or subsequent tools mandated by Authorizing Officials).

–The Contractor shall coordinate and collaborate with the respective System Administrator Team or System Representative before applying mitigation and remediation actions.

–The Contractor shall perform A&A maintenance for all assigned PIT (Afloat, Ashore, Site, Non-Navy), and assigned RMF authorization packages, including re-authorization efforts.

–The Contractor shall evaluate all vulnerabilities identified during the A&A processes and recommend mitigation measures to System Administrator and System ISSO for reducing or eliminating identified risk items.

–The Contractor shall assist the Government with determining the security impact of proposed or actual changes to the ISs and their environment of operation.

Skills and TrainingSkills and Training

–The Contractor shall provide capable personnel with qualifications, experience levels, security clearances, and necessary licenses, certifications, and training required by Federal, State and Local laws and regulations. Information assurance functions require certifications specified in DFARS 252.223-7001 INFORMATION ASSURANCE CONTRACTOR TRAINING AND CERTIFICATION. Training necessary to ensure that personnel performing under this Contract maintain the knowledge and skills to successfully perform the required functions is the responsibility of the Contractor. Training necessary to maintain professional certification is the responsibility of the Contractor.

On-Site Space Available for Contractor Support

On-Site Space Available for Contractor Support

UNCLASSIFIED

Base Year Opt Year I Opt Year II Opt Year III Opt Year IV TOTAL

ON SITE TOTAL 8 8 8 8 8 40

The Government’s Performance Work Statement (PWS) requirement is written to provide objectives and performance standards for which the Contractor’s proposed solution must indicate it can meet. In meeting those objectives, the Government will only provide up to 8 on-site spaces for Contractor personnel. Any other additional personnel required by the Contractor to meet the Government requirement objectives and standards must perform offsite.

Reporting DeliverablesReporting Deliverables

UNCLASSIFIED

DATA ITEM

NO. TITLE OF DATA ITEM SUBTITLE AUTHORITY

A001 PROJECT PLANNING CHART PROJECT MANAGEMENT PLAN DI-MGMT-80507C

A002 CONTRACTING OFFICER’S

MANAGEMENT REPORT MONTHLY PROGRESS REPORT DI-MGMT-81864A

A003 TECHNICAL REPORT - STUDY/SERVICES A&A PACKAGE CREATION PLAN DI-ADMIN-81373

DI-MISC-80508B

A004 GOVERNMENT PROPERTY INVENTORY

REPORT GFP INVENTORY DI-MGMT-80441D

A005 CONFERENCE REPORT MEETING/TRIP REPORT DI-ADMN-81308A

A006 CONFERENCE REPORT MEETING REPORT DI-ADMN-81308A

A007 PRESENTATION MATERIAL BRIEFINGS DI-ADMN-81373

A008 TECHNICAL REPORT - STUDY/SERVICES WEEKLY STATUS REPORT DI-MISC-80508B

A009 PRESENTATION MATERIAL IN PROCESS REVIEWS (IPR) DI-ADMN-81373

TravelTravel The Contractor may travel in support of this procurement to:

–Dahlgren, VA –Washington, DC –Port Hueneme, CA –Virginia Beach, VA

Additional InformationAdditional Information Working Hours

–On-site Contractor personnel shall provide required services and staffing coverage for NSWCDD during normal business hours (Monday through Friday, 0700-1700).

Additional Information (Cont)Additional Information (Cont)

Telework

–Telework for Contractor personnel will be at the discretion of the Contractor and will not require Government SME and COR concurrence.

–Telework is allowable if the contractor has an established Telework policy and the telework is performed in accordance wit

–Government requires notification of telework days/schedule.

Questions & Answers (Q&A)Questions & Answers (Q&A) All questions and answers from these Industry Day Slides will be posted on www.sam.gov.