PWS SCADA LDAP 2026.docx

This is a Performance Work Statement (PWS) for SCADA LDAP system replacement and cybersecurity hardening at Joint Base Elmendorf-Richardson (JBER). The requirement involves replacing an embedded LDAP server with Microsoft Active Directory and integrating it with the existing SEL SCADA system. The contractor must provision a complete Windows Server 2025 operating system configured with the latest Security Technical Implementation Guide (STIG) requirements and conduct comprehensive vulnerability assessments using DOD-approved Security Content Automation Protocol (SCAP) scanning tools such as Assured Compliance Assessment Solution (ACAS) or Nessus. All identified vulnerabilities must be remediated with documented evidence of resolution provided to the government.

The contractor is additionally responsible for updating all system devices with the latest manufacturer software and firmware releases published by SEL to eliminate known vulnerabilities, and must fully commission these upgrades to ensure operational readiness. Training delivery is a critical component, requiring the contractor to provide instruction to authorized Civil Engineering (CE) personnel on proper patch and update procedures for all SCADA network devices to maintain compliance with Department of Defense directives and security standards. The work is being pursued as a sole-source acquisition by the Department of the Air Force Pacific Air Forces, and interested contractors should submit capability statements to the listed points of contact demonstrating their capacity to execute all stated requirements.