NC-NJ5000-23-00954 MIST Sonar Upgrade Statement of Work.pdf

MIST Kit Multibeam Sonar Upgrade Requisition Number NC-NJ5000-23-00954 Statement of Work

1.0 Objectives

The National Oceanic and Atmospheric Administration’s (NOAA) Navigation Response Branch (NRB) requires the procurement of a multibeam sonar upgrade for their Mobile Integrated Survey Team (MIST) Kit for hydrographic survey and emergency response work.

• Background: NOAA’s Navigation Response Branch (NRB) is responsible for the operation mobile hydrographic surveying units known as the Navigation Response Teams (NRTs). These teams deploy to coastal areas to conduct hydrographic surveys for post severe weather events and routine nautical charting surveys. These surveys include searching for and identifying obstructions that may impede maritime operations and commerce. NRB’s currently owned Reson T20P system deployed on the MIST Kit is showing signs of reaching its end-of-life, and will not accept any recommended current firmware updates. The MIST Kit collects hydrographic data aboard vessels of opportunity during emergency responses and for special projects where an NRT vessel is not available. It can also be flown into an area that may be inaccessible by car or boat for response work. The data collected by the MIST Kit is also used to “clean up” NOAA’s navigational charts by confirming or disproving charted wrecks, rocks and other obstructions. The various modes of deployment provide a great deal of flexibility in responding to emergencies. This kit is required to have a fully functioning multibeam sonar to be able to complete its missions.

• Scope: This procurement is for an upgrade to a Government-owned Reson 7125 multibeam sonar to a Reson T20P multibeam sonar. This upgrade takes advantage of an unused, inoperable sonar and upgrades it to a new system that is fully compatible with the MIST Kit. It will ensure 100% availability of the MIST Kit, fulfilling NRB’s primary mission essential function (PMEF) for emergency response. The Government owned Reson 7125 system to be upgraded is currently unused and non-operational.

• Mission: The MIST Kit is intended for a wide range of uses, from emergency response to special projects, as well as standard hydrographic surveys. It is imperative that the kit remain functional with multibeam sonar for NRB to be able to conduct surveys aboard vessels of opportunity (VOOP).

• Compatibility: The upgraded sonar is required to be 100% compatible with all currently used MIST parts, including (but not limited to) mounting poles, cabling and ancillary sensors. The currently used T20P sonar in the MIST kit is showing signs of failure, and cannot be upgraded.

2.0 Technical Requirements

2.1 General Upgrade Specifications -

• Multibeam Sonar - The vendor shall upgrade the Government furnished Reson 7125 Sonar (S/N 51515, CD0001280568) multibeam sonar with a Reson T20P sonar consisting of:

o Part Number 88017020: Reson SEABAT T20-P, Portable (Default: 190-

420kHz, 1024 beams, 10m cables and mounting bracket) o Part Number 85160041: Standard Fairing Add-On o Part Number 87500820: Multi Detect License

2.2 Other Requirements

• Warranty o Provide manufacturer’s warranty on upgraded items of at least 12 months from the date of government acceptance.

3.0 Period of Performance

3.1 Delivery

• Vendor shall deliver the upgraded T20P sonar to NOAA NRT Gulfport UxS at the address listed in section 3.2 within 60 days of contract award.

• The Government will ship the Government-owned Reson 7125 system to be upgraded (at the Government’s expense) to the Teledyne Marine facility in Daytona, FL (or alternate location located in the continental US) after award has been made.

3.2 Delivery Address for the Upgraded Reson T20P system

• NRT Gulfport UxS Address:

NOAA NRT Gulfport UxS LTJG Collin McMillan 2605 13th Street Gulf & Ship Island Building

GULFPORT, MS 39501

Telephone:2028362238 email:collin.mcmillan@noaa.gov

4.0 IT Security Requirements

The Assessment and Authorization (A&A) requirements of Clause 48 CFR 1352.239-72 do not apply, and a Security Accreditation Package is not required.

The following is a list of relevant information the Department of Commerce (DOC) Information Technology (IT) Security takes into consideration when assessing the security requirements and risk for procuring IT products and services.

a) The Contractor shall only supply Information Technology (e.g., hardware, software, firmware, etc.) and/or product license and shall not require the use of any contractor owned equipment. The contractor will not have remote access to any government owned equipment. The Contractor shall ensure the acquiring Information Technology provided disables “phone home” or similar capabilities.

b) Product support and supporting documentation allows for the sanitization of the acquiring Information Technology and/or product license upon the disposal of the product. Product shall allow the use one of the approved methods for secure destruction of data/information including unclassified but sensitive information.

Approved methods include NIST Special Publications 800-88 Guidelines for Media Sanitization (https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800- 88r1.pdf) or the National Security Agency in the Media Destruction Guidance (https://www.nsa.gov/Resources/Media-Destruction-Guidance/).

c) The acquiring information technology is engineered for trustworthy and security that is consistent with the engineering-based trustworthy secure solutions as outlined in NIST Special Publication 800-160 Version 1, Revision 1 Engineering Trustworthy Secure Systems (https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800- 160v1r1.pdf) and NIST Special Publication 800-160, Volume 2, Revision 1 Developing Cyber-Resilient Systems: A Systems Security Engineering Approach (https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-160v2r1.pdf).

d) The acquiring information technology complies with Office of Management and Budget Memorandum M-07-18 Ensuring New Acquisitions Include Common Security Configurations and the Federal Acquisitions Regulations (FAR) 39.101(d) regulations require NIST common security configuration checklists including United States Government Configuration Baseline (USGCB) initiative. More information is available at National Checklist Program (NCP), (https://nvd.nist.gov/ncp/repository), the U.S.

government repository of publicly available security checklists (or benchmarks) that provide detailed low-level guidance on setting the security configuration of operating systems and applications. The acquiring information technology considers the following requirements:

i. Software procured meets the standard installation, operation, maintenance, updates and/or patching of software shall not alter the configuration settings from the approved USGCB/other secure configuration.

ii. Applications designed for normal end users run in the standard user context without elevated system administration privileges.

iii. Supporting documentation or reference(s) that describes the security capabilities, the design and development processes and the testing and evaluation procedures used by the product or services being provided for this acquisition.

iv. Supporting documentation or reference(s) that describes all product or service updates and enhancements as they are implemented. The product or service supporting documentation could be the user and system administrator guides, which is documents the functional properties of the security controls employed to permit the analysis and testing of the security controls.

e) The acquiring information technology complies with the Homeland Security Presidential Directive 12 (HSPD-12) Policy for a Common Identification Standard for Federal Employees and Contractors requirements from FAR 4.1302 stating: (a) In order to comply with Federal Information Processing Standard (FIPS) 201-3 Personal Identity Verification (PIV) of Federal Employees and Contractors (https://doi.org/10.6028/NIST.FIPS.201-3), agencies must purchase only approved personal identity verification products and services, (b) Agencies may acquire the approved products and services from the GSA, Federal Supply Schedule 70, Special Item Number (SIN) 132-62, HSPD-12 Product and Service Components, in accordance with ordering procedures outlined in FAR Subpart 8.4.

f) The acquiring information technology complies with Internet Protocol Version 6 (IPv6) requirements from FAR part 11.002 requirements that state the agency Chief Information Officer can waive this requirement provided the acquisition requirements documents the appropriate technical capabilities defined in the USGv6 Profile available in the NIST Special Publication (SP) 500-267 (https://www.nist.gov/programs-projects/usgv6-program) and the corresponding declarations of conformance. To meet this requirement each DOC acquisition of IP protocol technology must express requirements for IPv6 capabilities in terms of the USGv6 Profile (i.e., using the USGV6 Capabilities Check List) and vendors must be required to document their product’s support of the requested capabilities through the USGv6 test program

(https://www.nist.gov/programs-projects/usgv6-program/usgv6-revision-1) using the USGv6 Suppliers Declaration of Conformity.