Presolicitation Notice Security Platform.pdf

INTRODUCTION

This is a Presolicitation notice to publicize the planned solicitation release for The Naval Air Systems

Command (NAVAIR) and Naval Air Warfare Centers (NAWC) Platform Security and related support services initiatives.

The NAVAIR Security Team is responsible for providing all program offices with the people, skills, knowledge, and expertise required to provide control measures for protecting classified and controlled unclassified information. The scope of this effort is to provide a full range of Platform Security for the

Naval Air Systems Command (NAVAIR) and the Naval Air Warfare Centers (NAWC). Platform

Security can be defined as security of a Warfighter platform (including the subsystems and support equipment) against foreign intelligence collection and exploitation against all attack surfaces; collection attacks against the program and associated contractors; cyber-attack against program and contractor networks; cyber-attack against the platform during system operation; supply chain attack; collection via international programs; and reverse engineering attack in case of loss on the battlefield or foreign sale.

All of these attacks can yield information, which will allow adversaries to understand U.S. capabilities, understand U.S. sources and methods, develop countermeasures (material or non-material) against the weapon system, transfer technology for their own weapon system development, or utilize knowledge gained to mount a kinetic or cyber-attack against the platform. Additionally, knowledge gained from each type of attack can inform future attacks in the same or other types of attacks.

ELIGIBILITY

The Product Service Code (PSC) for this effort is R408 and the applicable NAICS is 541690 with a

Small Business Size standard of $16.5M. To be eligible to receive the award based on these requirements a contractor must be registered in Systems for Award Management (SAM). To register, contractors may apply through the internet at http://www.sam.gov.

ANTICIPATED CONTRACT TYPE

The Government intends to solicit a competitive 100% small business set-aside contract. This requirement is anticipated to be a Single Award Indefinite Delivery Indefinite Quantity (IDIQ) with

Cost-Plus-Fixed-Fee (CPFF) Labor CLINs. The Government anticipates a cost reimbursable Other

Direct Cost (ODCs) CLIN for Travel and Material. The estimated hours per contract year is approximately 222,720 or 116 full-time-equivalents (FTEs).

REQUIREMENT

The contractor shall provide various types of support including: acquisition security (ACQSEC) support;

security modeling; program security management - physical security, personnel security, information security, industrial security, communications security (COMSEC), operations security (OPSEC), security classifications guides, program protection plan (PPP), and incident response; trusted systems and network (TSN) – criticality analysis, anti-counterfeiting, supply chain risk management and software assurance; cybersecurity - cyber risk assessment (CRA) and risk management framework

(RMF) processes, system survivability key performance parameter (KPP) requirements development, CYBERSAFE, and cyber testing; anti-tamper (AT)– critical program information (CPI) assessment; AT system analysis and requirements development including attack and countermeasure tree; international programs security support (foreign disclosure and foreign visits) - technology transfer policy, foreign disclosure, export control, foreign visits, foreign partner security assessments, and end use monitoring;

physical security/force protection/anti-terrorism/emergency management; system security engineering

(SSE) - translating policy requirements in the above areas into system requirements, specs, design, development, test, sustainment and export of secure platforms and systems; configuration control; and requirements validation.

PLACE OF PERFORMANCE / PERIOD OF PERFORMANCE

Approximately 90 percent of work will be performed at Government site and 10 percent of work to be performed at Contractor site. Government site(s) primarily include NAVAIR/NAWCAD Patuxent

River, MD. Other site locations include St Inigoes, MD; Lakehurst, NJ; Orlando, FL; China Lake, CA;

Point Mugu, CA; North Island, CA; Cherry Point, NC; and, Jacksonville, FL. Additional sites may be identified in individual task orders. The anticipated period of performance for this effort is five (5) years

(5-year ordering period). The anticipated start date is 09 September 2020.

THIS IS A NOTICE OF INTENT ONLY; IT IS NOT A REQUEST FOR PROPOSALS. The

Government will not accept or respond to questions or to requests for meetings with potential offerors about this requirement. It is estimated that the solicitation will be released via the internet and

Beta.Sam.gov around January 16, 2020 with an estimated closing date of February 18, 2020.