Sources Sought - TTC SOW.docx

Contents

A. Purpose This Rough Order Magnitude (ROM), Fixed Price (FFP) Statement of Work (SOW) defines the scope of work to be performed in support of a Trusted Thin Client® (TTC) implementation for the United States Air Forces Central (AFCENT).

B. Background AFCENT currently maintains a production TTC® multilevel access solution encompassing eighteen (18) TTC® Servers at two (2) locations to support access to Secret and Below Interoperability (SABI) networks for production enterprise users. AFCENT is seeking to upgrade the existing enterprise system to TTC® 3.x.

1. Technical Summary:

→ The contractor will provide installation, training, and assessment and authorization (A&A) services for eighteen (18) TTC® servers across two (2) locations in Shaw AFB, SC and Qatar.

2. Hardware/Software Summary:

→ There are eighteen (18) Distribution Console (DC) servers to be upgraded in place with this effort. No new server hardware is expected to be required to operate TTC® version 3.x.

→ The customer implementation may need to upgrade or replace a portion of HW thin clients to ensure compatibility with TTC® version 3.x.

C. Scope of Work The following tasks are accounted for in the accompanying quote:

1. Technical Project Management (oversight, resourcing, budgeting, scheduling, meetings, risk mitigation)

2. Conduct kickoff and project re-engagement for the TTC® implementation.

3. Pre-Onsite Engineering Services:

→ Perform system architecture/design and technical risk mitigation for TTC® upgrade to 3.x → Develop the appropriate configuration for the deployment for version 3.x based off of requirements and analysis of version 2.x configuration → Update System Design Document (SDD) to include new TTC® design and configuration information

4. Pre-Onsite A&A Services:

→ Support A&A Customer discussions on coordination, schedule, and Body of Evidence (BoE) expectations.

Statement of Work Trusted Thin Client

→ Provide input to a Cross Domain Services Element (CDSE) Questionnaire, Cross Domain Enterprise Services (CDES) Questionnaire, Cross Domain Validation Approval Request (CDVAR) and a Cross Domain Appendix (CDA) for TTC® → Update/modify Site-Based Security Assessment (SBSA) tests for TTC®

5. Onsite Implementation Services – at Shaw AFB, SC:

→ Onsite implementation services include one (1) engineer for up to two (2) weeks.

→ Deployment of the TTC® solution

· Update and configure nine (9) TTC Distribution Consoles (DCs)

· Integrate the TTC® solution with existing customer provided enterprise services that may include NTP, SSH, SMTP

· Integrate the TTC® solution with network infrastructure

· Integrate the TTC® cluster with VDI system on each network enclave → Support the deployment of five (5) TTC® endpoints for functional testing purposes → Configure TTC® to transfer log and audit files to external log servers → Perform functional end-to-end testing → Provide TTC® over-the-shoulder system administrator training

6. Onsite Implementation Services – at Qatar:

→ Onsite implementation services include one (1) engineer for up to two (2) weeks.

→ Deployment of the TTC® solution

· Update and configure nine (9) TTC® Distribution Consoles (DCs)

· Integrate the TTC® solution with existing customer provided enterprise services that may include NTP, SSH, SMTP

· Integrate the TTC® solution with network infrastructure

· Integrate the TTC® cluster with VDI system on each network enclave → Support the deployment of five (5) TTC® endpoints for functional testing purposes → Configure TTC® to transfer log and audit files to external log servers → Perform functional end-to-end testing → Provide TTC® over-the-shoulder system administrator training

7. Onsite A&A Test Services – at Shaw AFB, SC:

→ Onsite implementation services include two (2) engineers for up to one (1) week → Assist site in performing TTC® SBSA dry-runs and conducting TTC SBSA testing → Assist site in creating TTC® SBSA Report and Plan of Action and Milestones (POA&M) findings, if necessary

8. Onsite A&A Test Services – at Shaw AFB, SC:→ This event is to support SBSA on-site testing for Qatar DCs. Contractor personnel will support on-site event from Shaw AFB, SC with remote access available to Qatar DCs.

→ Onsite implementation services include two (2) engineers for up to one (1) week from Shaw AFB, SC → Assist site in performing TTC® SBSA dry-runs and conducting TTC® SBSA testing

→ Assist site in creating TTC® SBSA Report and Plan of Action and Milestones (POA&M) findings, if necessary

9. TTC® 3.x Training Services:

→ Provide TTC® Privileged User training session for up to five (5) planned TTC® Administrators → Training will take place in Herndon, VA at an unclassified meeting room available to both contractor instructor(s) and Customer engineers. Customer is responsible for travel if necessary to the training location.

→ This class is a blend of classroom and hands-on training that provides an understanding of:

· The operational and security features of the TTC® prior to operational transition

· TTC® implementation, configuration, and maintenance activities in a simulated operational environment → Contractor and the Customer will agree on a schedule prior to the training event → Training is conducted by one engineer for up to one week → Tentative training schedule:

· Mon – Preparation, setup the training environment, ensure connectivity is established to all participants

· Tues-Thurs – Full Training Days

· Fri – Ad-hoc training. If requested, this day will be used for additional training time, followed by training assessments

10. Post-Onsite Follow-Up Services:

→ Create and deliver Trip Report → Update and deliver final revision of SDD