RFI - PWS Draft Excerpt.docx

1.0 Scope

The Air Force (AF) Executive Aircraft Division (EAD) consists of four branches; Presidential, Very Important Person Special Air Mission (VIPSAM), Special Duty and E-4B National Airborne Operations Center (NAOC). Each branch has mission requirements to provide Information Technology (IT), Information Assurance (IA) and Mission Assurance (MA) insertions onto Commercial Derivative Aircraft (CDA) meeting technology currency, emerging technologies, implementation of cybersecurity management programs, provide sustainment due to aging aircraft technologies and provide solutions through the acquisition processes. CDAD provides support to the VC-25A/B, C-32, C-37, C-40, E-4B, RC-26, C-12, C-21, and Foreign Military Sales (FMS) programs.

NOTE: There are some additional organizations that provide unique support for VC-25 that would be considered within this scope

2.0 The AF CDAD requires subject matter and functional area expertise in the following objective areas:

· Cybersecurity Requirements

· Airborne Systems IT/IA/MA Mission Requirements

· IT/IA/MA Capability Gaps and Requirements

· Ground Systems Mission Requirements

· Alternatives for Mission Requirements

· Development and Assessment of IT/IA/MA Requirements

· Assessment of Impacts on IT/IA/MA Technology

· Secure Data Management Systems / LCMP-IDE

· Assessment of Capabilities in Real-World Environments

· Conference Planning and Meeting Initiatives

4.7.1 The Contractor shall provide research and analysis pertaining to the development of applications and system interfaces that AF EAD will need to securely integrate evolving technologies into the platform systems. (Deliverable 44: Interface Control Document)

4.7.2 The Contractor shall conduct technical research and analysis and develop recommendations for the development, execution, and documentation of large-scale Advanced Concept Technology Demonstrations (ACTDs), simulations, experiments, and exercises. (Deliverable 45: Components of ACTD Standards/Policies Compliance Report).

4.7.3 The Contractor shall conduct technical research and analysis and shall develop recommendations pertaining to airborne and ground secure voice communications to those designated ground and airborne platforms that require common access to joint, global, and network-centric applications and tools. Additionally, the Contractor shall analyze new technologies, procedures, and policies identified in the ACTD experiments. (Deliverable 46: Component ACTD Analysis Reports)

4.8.1 A Secure Data Management System, known as the Lifecycle Management Program-Integrated Data Environment (LCMP-IDE), is utilized to provide Lifecycle Sustainment Analysis for AF EAD platforms.

4.8.2 The Contractor shall provide technical reports and software code releases in support of LCMP-IDE to the AF EAD program office affected by the releases. The Contractor shall provide IA process compliance and documentation required to operate the LCMP-IDE. In addition, the Contractor shall include generation, monitoring, and updates to all required IA documentation, compliance status data, infrastructure support, software maintenance and support, user support, incident response, and hosting environment support. The Contractor shall also maintain compliance with DoD RMF to retain the system’s Authority to Operate (ATO). These efforts include recurring system vulnerability and maintenance patching, maintenance of Security Technical Implementation Guide (STIG)/Security Requirements Guide (SRG) compliance, and continuous monitoring of the system for security threats and newly discovered vulnerabilities. The Contractor supported security roles will include:

· Information System Security Manager (ISSM): ensures compliance with applicable policies, procedures, and directives

· Information System Security Officer (ISSO): assists in meeting security requirements for the system and its components

· IA Automated Information System (AIS) System Administrators (SAs): assist in the day-to-day operation of the system and provide operational availability to support the mission

4.8.3 The Contractor shall provide LCMP-IDE infrastructure support to ensure the system is stable, reliable, and up to date. The Contractor shall also provide full LCMP-IDE software development support including a Configuration Control Board (CCB) for reviewing and approving changes, regular code reviews scans and software testing. This task maintains separate testing, staging, and production environments to facilitate updates and software configuration management for the LCMP-IDE. The Contractor shall provide an LCMP-IDE help desk and user support. In addition, the Contractor shall provide an incident response capability to restore system functionality or otherwise address the incident condition as quickly as possible.

4.8.4 The Contractor shall manage the Cloud Hosting of the LCMP-IDE in the Amazon Web Services (AWS) GovCloud environment. The Contractor will coordinate with a Tier 2 Cybersecurity Service Provider (CSSP) to ensure maintenance of a secure server in the cloud environment. The Contractor shall coordinate across the LCMP-IDE community to ensure cloud hosting costs are shared.

4.8.5 The Contractor shall provide program management, module enhancements, and system administration for LCMP-IDE, including a detailed chronology of known or forecasted aircraft lifecycle events, along with comprehensive fleet management. The Contractor shall provide technical research, analysis, and recommendations to the AF EAD to aid in developing a secure, capabilities-based planning process for identifying, interpreting, and leveraging near-, mid-, and long-term opportunities, as well as metrics for capturing existing, new, and emerging requirements. The Contractor shall prepare data management system security requirements reports on selected advance technologies and their impact on the AF EAD platform systems (Deliverable 47: Secure Data Management System Security Requirements and Deliverable 48: LCMP-IDE SME Monthly Status Report).

4.8.6 The Contractor shall prepare secure data management system security plan on selected advance technologies and their impact on the AF EAD platform systems. (Deliverable 49: System Security Plan)

4.8.7 The Contractor shall provide research and analysis of the interoperability and compatibility of these new components with existing and planned systems. The Contractor shall identify Network Operations (NetOps) requirements and capabilities for information systems and operations, as well as identify technology insertion opportunities and potential capability shortfalls of AF EAD and other ground and airborne systems or platforms. (Deliverable 50: Requirement Recommendations)

4.8.8 The Contractor shall assess the vulnerability, authenticity, and continuity of the AF EAD’s information systems and networks to ensure that those systems and networks comply with DoD IT/IA/MA policies (Deliverable 51: Assessment of Architectural Compliance).

4.8.9 The Contractor shall prepare a Configuration Control Board (CCB) dissemination report for AF EAD platform systems. (Deliverable 52: Dissemination Report).

4.8.10 the Contractor shall verify that AF EAD and other ground and airborne systems, platform communications systems architectures, interfaces, and configurations conform to existing and emerging DoD guidance. (Deliverable 53: Critical Program Technical Report)

5.7.1 Eighty-five percent (85%) of the personnel working on this requirement at the time of TO start shall have a minimum clearance of Top Secret (with the ability to obtain Yankee White (YW) clearance for VC-25).

5.7.2 A minimum of 14 personnel shall have YW clearances at the time of TO award and keep the clearance maintained through the life of the requirement. The COR and CO shall approve any change in number of staff requiring YW clearances.

5.7.4 Security Fundamentals Professional Certification (SFPC), Security Asset Protection Professional Certification or Information Assurance Management Level II/III is required for all Information Security Analyst positions. Where personnel are no longer able to retain either the Top Secret Clearance or YW (as applicable), or where personnel are unable to obtain the YW clearance, that employee can no longer remain working on the requirement and shall be replaced by another personnel.

5.7.6 A minimum of five (5) personnel, of any labor category, to be assigned to work on the requirement, shall have a total of ten (10) or more years in any of the following areas (please note that the years of experience requirement is a combined total of ten (10) years, not ten (10) years in each area): 10+ years of experience in the following areas in any combination:

· Fielding or modernizing airborne information technology systems that directly support the nation’s senior leaders (e.g., President, Vice President, Secretary of State, Secretary of Homeland Security);

· Presidential Airlift Group (PAG);

· Presidential Airlift Squadron (PAS);

· Presidential Logistics Squadron (PLS);

· 89th Airlift Wing (AW);

· 1st Airlift Squadron (ALS);

· 99th ALS;

· Air Mobility Command (AMC)

Anticipated Labor Categories

· Enterprise Architect

· Financial Analyst

· Administration / Clerical (Journeyman)

· Systems Engineer (Senior)

· Information Assurance/

· Security Specialist (Senior)

· Information Assurance/

· Security Specialist (Journeyman)

· ERP Business/

· Architectural Specialist

· Program Manager

· Strategic/Capital Planner

· Project Manager

· Subject Matter Expert (Master)

· Applications Systems

· Analyst (Senior)

· Applications Systems

· Analyst (Journeyman)

· Systems Engineer (Senior)