QUESTIONS AND ANSWERS.pdf

Request for Information (RFI): NESDIS Consolidated Antenna and Ground Systems Services (NCAGSS)

Questions & Answers

Question: Is this a new or a follow-on effort? If so, can you provide the contractor’s name and contract number?

Government Response: The Government is using the RFI to define a potential requirement and it is not clear at this point whether this will be a follow-on effort to an existing contract.

Question: Was there a previous solicitation or RFI issued in the past seeking the same services as the current RFI?

Government Response: No, there was not a previous solicitation or RFI issued in the past seeking the same services as the current RFI.

Question: What does the NAaaS infrastructure include? Is there some kind of diagram? Is this for ships or satellites?

Government Response: Components of the NAaaS infrastructure are as described in the section C (Background) of the RFI. Extensive information regarding NESDIS ground systems and diagrams can be found at:

https://www.nesdis.noaa.gov/about/our-offices/office-of-satellite-and-product-operations-ospo. This requirement is for satellites.

Question: Who is generating data, and where does it need to go?

Government Response: The purpose of the NAaaS ground system is to receive and process satellite sensor data which is then productized and disseminated by the NESDIS Common Cloud Framework (NCCF) to customers.

Question: Is there going to be a bidder’s conference?

Government Response: A presolicitation conference is undetermined at this time.

Question: Is there a targeted timeframe for when the RFP will be released?

Government Response: The targeted timeframe for the Request for Proposal’s (RFP’s) release is February 2026.

Question: Is there a chance that the RFI window will be extended past Monday 5 May?

Government Response: No, there is not a chance that the RFI window will be extended past Monday, May 5, 2025.

Question: Ref 1, Paragraph C. Background. NOAA states, “The NOAA/NESDIS antenna enterprise is comprised of antennas at the Wallops Command and Data Acquisition Station (WCDAS) in Wallops Island, VA; the Fairbanks Command and Data Acquisition Station (FCDAS) in Fairbanks, AK; the Consolidated Backup (CBU) Facility in Fairmont, WV; and the NOAA Satellite Operations Facility (NSOF) in Suitland, MD.” Q.

With these antennas in CONUS, you are seeking to look at commercial antennas to add to these or to replace? Are you anticipating a need for a global network of antennas for more coverage, more timely coverage, new orbits and partners with global ground stations, or any other significant changes for ground station locations and data transport networks?

Government Response: The Government is seeking new and innovative ideas to realize an enterprise antenna architecture and would encourage RFI respondents to provide information advantageous to NESDIS that would support the utilization of commercially provided antennas to augment or replace existing assets. Outside Continental United States (OCONUS) antennas are outside the scope of this RFI.

Question: Ref 1, Paragraph C.1. Commercially Provided Antenna Services. Q. What frequency bands are the existing NOAA antennas working? What are expectations on TT&C bandwidths and frequencies in future programs? What frequencies and data rates are expected for future missions? Is there an interest in adding Ka- Q-, V-band for higher data rtaes? Are you expecting to deploy spacecraft with optical ground station needs? What data rates, orbits, and standards to you envision for optical satcom links, and what are preferred global locations? For future high data rate missions are you interested in hybrid data centers at teleports for data compression, filtering or processing as part of the mission architecture?

Government Response: The existing NOAA antennas are working the L, S, X and Ka-band frequency bands.

Expectations on TT&C bandwidths and frequencies are yet to be determined. Frequencies and data rates for future missions are yet to be determined. Additional resources for the provision of Ka-band capacity is an area of investigation. It is not anticipated that future data rates would require a transition to Q or V-bands.

NESDIS would encourage respondents to provide information about their experiential knowledge regarding optical communications in the realm of space to space, or space to ground communications. Future satellite requirements for communications have yet to be determined. NESDIS would encourage respondents to provide information regarding the utilization of globally dispersed optical communications and information regarding the advantageous utilization of hybrid data centers.

Question: Ref 1, Paragraph C.1. Commercially Provided Antenna Services. Q. What platform is NOAA currently using? Is NOAA using a scheduling and command and control system in-house, or leasing third-party COTS solutions, or outsourcing mission and ground station and data transport operations?

Government Response: NESDIS is currently implementing Enterprise Automated Scheduling Implementation (EASI). Additional information can be found on SAM.gov at https://sam.gov/opp/7ef1ea8501fb401dbc1c3960bfae9f45/view and https://sam.gov/opp/22c9413d55484899870d937f20f2f862/view.

Question: Ref 1, Paragraph C.1. Commercially Provided Antenna Services. Q. NOAA references Tri-band frequency but doesn’t state a frequency nor band. Does NOAA already have a tri-band antenna? Is tri-band operation always preferred over two-antenna solutions?

Government Response: NESDIS has requirements for frequency bands L, S, X and Ka-band. Yes, NESDIS has and utilizes tri-band antennas. NESDIS would encourage respondents to provide their experiential knowledge as to the efficacy of utilizing tri-band antennas and/or other solutions (i.e. phased arrays, optical communications). The Government is unable to state its preference between tri-band operation and two-antenna solutions at this time.

Question: Ref 1, Paragraph C.1 Commercially Provided Antenna Services. Q. NOAA references software defined technologies and digital IF as technologies of interest for future operations. Is there an interest in using RF-over-IP digitization technologies and Software Defined Radios (SDR) modems in the cloud for either cybersecurity or other operational considerations?

Government Response: Yes, there is an interest in using RF-over-IP digitization technologies and Software Defined Radios (SDR) modems in the cloud for either cybersecurity or other operational considerations.

Question: Ref 1, Paragraph C.1. Cyber Security. Q. Can NOAA provide a list of compliance concerns from NIST 800-53? Are other United States Federal and International partner standards applicable to the details of 800- 53? We are familiar with DoD but what additional NOAA and Federal apply?

Government Response:

ACIO or OSPO compliance concerns include:

A. Ensuring that the systems implement common security configurations using the following order of precedence: NIST, DOC, NOAA, NESDIS, OSPO and DHS Defense Information Systems Agency (DISA) policies.

B. The system shall allow system operation, maintenance, update and/or patching of software without altering configuration settings and other systems configuration baselines.

C. The system shall be designed to enforce approved National Checklist Program such as the Defense Information Systems Agency (DISA) Security Technical Implementation Guides (STIGs) and the principle of “least privilege” so that authenticated users are limited to accessing only those system objects required for the normal performance of their duties.

D. In addition, per the NIST SP 800-Rev 5, NIST SP 800-82, and NIST SP 800-172 Rev 3, employment of multi-factor identification and authentication is compulsory; anti-malware and Host-based Intrusion Prevention System (HIPS) functions within the development environment, I&T environment, and operational environment.

E. Where possible, networking equipment shall comply with NIST Special Publication 500-267B Revision 1, NIST IPv6 and NIST SP-800-119, Guidelines for the Secure Deployment of IPv6 in future.

F. The Contractor shall be capable of complying with NOAA’s existing FISMA security processes and procedures which is built on the NIST Risk Management Framework (RMF) process.

G. NOAA is responsible for implementing FISMA High controls in NIST SP 800-53, currently Rev 5, and add a Supervisory Control and Data Acquisition (SCADA) and HVA overlay which adds controls from 800-53 to the High baseline.

H. Patching timeframes, scanning, vulnerabilities, CISA CAT 2 hardening, etc is sometimes tailored based on industry or technical limitations in the satellite ground system systems, however, there needs to be strong technical justifications and strong compensating controls to justify any tailoring. The Contractor shall assist with reducing tailoring based on technology and industry improvements and best practices.

NOAA’s understanding is that the Department of Defense (DoD) now leverages NIST 800-37, NIST 800-53 Rev 5, and SP 800-172 Rev. 3, Enhanced Security Requirements though there may still be some DoD Information Technology Security Certification and Accreditation Process (DITSCAP) and DoD Information Assurance Certification and Accreditation Process (DIACAP) outliers. The applicable compliance documents will be in the RFP. Agency policies are always going to vary. International organizations often leverage ISO 270001. NOAA documents the security controls impacted in Interconnection Security Agreements and technical specifics in Interface Control Documents. Usually there is an overarching management agreement such as a Memorandum of Understanding/Agreement (MOU/MOA) or Service Level Agreement (SLA)._

Question: Ref 1, Paragraph C.4. Cyber Security Q. Has NOAA specified a CISA Ops Directives, or do they mean All apply for compliance? Any applicable list?

Government Response:

The applicable CISA Ops Directives include:

A. All Emergency Directives (EDs) based on hardware and software inventories.

B. All Binding Operational Directives (BODs), however, some depend on what technology is being leveraged, e.g. Cloud.

Question: Ref 1, Cyber Security. encryption Q. Can commercially available AES-256 be adequate to be compliant?

Government Response: Yes, commercially available AES-256 can be adequate to be compliant with FIPS 140-3.

Question: Ref 1, Paragraph B Introduction states “To accomplish these objectives, NOAA is seeking information to determine the feasibility of a requirement to deliver commercial products, services, solutions to perform antenna and ground system upgrades; build new antennas when required;....” Q. Can specifics be provided regarding the expectations for new antenna builds. What sizes, bands, tracking capabilities, timelines, etc.

might be expected?

Government Response: One purpose of this RFI is to seek information from industry regarding what commercial capabilities for new antenna builds (sizes, band, tracking capabilities) are most advantageous to the government. A response to that effect is strongly encouraged. Requirements and timelines are yet to be determined.

Question: Ref 1, Paragraph B Introduction states “Building out new capabilities and capacity as directed in LEO, GEO and SWO ground system domains” Q. What capabilities and capacities are being considered? For planning purposes, is there a notional plan for number of missions, ground station contact requirements, total data flow, or any other information that helps craft a reasonable answer to the RFI questions about future capability

Government Response: Capabilities, capacities, the notional plan for number of missions, ground station contact requirements, total data flow, and other information regarding can be found at:

https://www.nesdis.noaa.gov/