SOW 134 eLib.pdf

Statement of Work

Task: Flight Dynamics Facility Sustaining Engineering and IT Security Support Task Order: 134 Task Modification: 6

I. Summary of Changes in this Task Modification:

• Adds Subtask 3 which calls out the requirements for the FDF Hardware Refresh

II. Summary of Work This statement-of-work (SOW) describes the sustaining engineering support requirements within the Flight Dynamics Facility (FDF), in support of the Navigation & Mission Design Branch, Code 595. As detailed below, the contractor shall provide support to the FDF Operations Director and Deputy Operations Director for sustaining engineering support of the FDF areas located in Building 28 and in Building 13 at GSFC. This support consists of system administration for the computing systems within the FDF; operations analysis; hardware and system software maintenance and upgrade support; system security support; and, support of operational process improvements. Note that reference to FDF includes both the primary facility located in Building 13 and the Alternate Processing Facility (APF) located in Building 28. An annual assessment of employee skill level pertaining to current and future technologies, shall be provided which outlines a plan to meet the evolution and the rectification of any gaps identified.

III. Period of Performance The period of performance for this task shall be November 1, 2023 through October 31, 2024.

IV. Task Description

Subtask 1 – System Administration & Maintenance

a. System Administration Support This support provides for system administration support for the FDF computing systems.

In this area, the contractor shall:

• Manage, configure, upgrade, and troubleshoot all FDF-owned systems, including:

Storage arrays/NetApp Windows, Unix, Mac, and Linux servers, both physical and virtual Windows workstations VMWare vSphere Clouds Backup systems in the CNE and IONet

Install/update infrastructure and software/operating systems Monitor systems and address issues Maintain and configure hardware/system software components Ensure adherence to NASA Information Technology (IT) Security guidelines for all systems Participate in assessments of hardware, security, and systems practices; including performing security assessments as dictated in Subtask 2 Maintain the FDF backup and recovery/disaster plan Research the integration of new technology to the IONet such as Ansible, Tenable.IO, Docker Containers, and Kubernetes Maintain and/or upgrade FDFNet Remote Access capabilities as required by the operations team

b. Facilities and Health & Safety Support This provides for operations systems monitoring support for FDF. In this area, the contractor shall:

Support preventative maintenance and coordinate the operations and maintenance schedules for the facility, e.g. maintenance of the Building 28 Uninterruptable Power Supply (UPS) and monitoring the Environmental Tools. Escort service personnel into security areas as needed. Report issues to NASA support desk.

Coordinate MOSI requests with Facility Management Directorate, Code 220 Attend various safety-related meetings as required by the Center Monitor FDF HVAC systems and assist in reporting issues Coordinate keycard access Ensure adherence to health and safety policies of facility personnel, including recording and reporting close-calls, participating in the Annual Safety Campaign, conducting routine safety inspections, and participating in evacuation drills

Provide facilities support to other occupants of Building 28 giving priority to FDF-related items in the North wing when health and safety are not a concern. Any challenges prioritizing FDF over other occupants shall be communicated to the FDF Director and/or Deputy.

o Work on non-FDF items shall be tracked per group and time required and metrics of those hours kept for statistical analysis and future support planning.

c. Property Management This support provides for hardware/software tracking and reporting of all equipment owned by FDF. In this area, the contractor shall:

Properly transfer and/or excess equipment, as appropriate, and make the necessary changes to the NASA User Equipment database and FDSS III contractor master inventory list.

Perform a manual equipment accountability verification annually and update the equipment database accordingly.

d. Hardware Maintenance and Upgrade Support This support requires the contractor to provide the maintenance and upgrade support for the computing hardware that is located in the FDF.

In this area, the contractor shall:

Provide maintenance and upgrade support for all operations and user hardware systems.

This support includes coordinating and procuring hardware or part replacement with vendors, installing new hardware, and troubleshooting hardware problems such as hard drive failure replacements.

Coordinate and maintain a list of all hardware support contracts Maintain a list of all hardware and other equipment Identify, setup and configure, verify, and procure remaining hardware and software needed to support the hardware refresh of the FDF, as approved by the NASA review board in the spring of 2023.

o Note: The FDF is awaiting specified funding for the implementation of this project. As of the current task mod (4), no funding is available. If there are any get-ahead items or targets of opportunity that do not pose a risk to current projects, the contractor may, at the approval of the TM, begin working those items in preparation for future work when funding does become available.

Other Direct Costs (ODCs):

o The contractor shall procure required hardware and systems software per the deliverable “5-year Sustaining Engineering Plan and Associated Risk Assessment” Any other ODCs shall be approved of by the TM on a case by case basis and shall be documented as an unexpected expenditure and updated in the plan.

e. System Software Maintenance and Upgrade Support This support requires the contractor to provide maintenance and upgrade support services for the computing systems located in Buildings 13 and 28.

In this area, the contractor shall:

Provide maintenance support for system and general user software. This support includes coordinating the installation of new system operating systems, procuring new system software, maintaining vendor service agreements, general user administrative software, and troubleshooting user system software problems

Coordinate and maintain a list of all system software contracts

f. FDF Infrastructure System Improvements and Support In this area, the contractor shall ensure that upgrades and improvements to FDF system infrastructure are consistent with mission operations needs and compliant with IT Security requirements.

Potential examples include: RedHat Upgrade; Group Policy Restructuring; Windows Server Upgrades; the introduction of new technologies such as Docker Containers and Kubernetes;

research/integration of infrastructure as code (IaC) tools such as BigFix/ Puppet/Ansible/Chef in the FDFNet network; A&A Audit, and Penetration Testing.

g. FDF Operational Process Improvement Support This support will provide input towards process improvements, including strategic planning items. In this area, the contractor shall:

Assist with the development of operational process improvements and facilitate changes in support of the FDF operations teams.

Ensure that the 5-Year Sustaining Engineering Plan is consistent with the scope on-going strategic discussions.

Subtask 2 – IT Security

h. System Security Support This support provides for system security support for the FDF computing systems. In this area, the contractor shall:

Coordinate all IT Security work with the Code 580 Information System Security Engineer

(ISSE).

Update, review, and maintain the various Information Technology (IT) Security-related documents, including the Risk Assessment, Continuous Monitoring Plan, Contingency Plan, System Maintenance Plan, and Systems Security Plan (SSP), so that they conform to the NASA, National Institute of Standards and Technology (NIST), and GSFC computer security requirements.

Perform internal (FDF) monthly system non-credential scans Coordinate and review the FDF quarterly computer scans with Code 700 and the Code

590 Information Security Officer (ISO) and/or ISSE.

Ensure that all FDF security findings in quarterly and Assessment & Authorization (A&A) assessments are resolved or waived Prepare for, participate, and conduct (as required) in A&A yearly assessments.

o Beginning in 2023, assessments by a 3rd party will be required every 3rd year, with self-assessments being performed in years 1 and 2; with coordination and/or direction from the FDF ISO and ISSE.

o As of this task mod, the first self-assessment will commence in the last quarter of 2023 or the first quarter of 2024 (schedule pending).

Prepare for and participate in the annual penetration testing of FDFNet network segment Research new IT security tools/processes for possible integration in FDFNet

Subtask 3 – FDF Hardware Refresh

i. Hardware Replacement/Refresh

• On January 24, 2023, the FDF held a Concept Design Review for a facility-wide hardware refresh as a stop-gap measure to ensure continuity of operations while the FDF continues to progress to the AWS Cloud. The cost, schedule, scope, and implementation plan for the refresh was approved by the board and the FDF Directors have been negotiating with various parties in order to establish funding for the project.

• Requirements for the project were delivered by the FDF Operations Director, and the project included necessary ODCs to replace both operations workstations as well as compute servers in both Building 28 and Building 13 as well as necessary labor. The details of this implementation are included below as a point of reference for what was agreed to and baselined in Table 1. The government recognizes that a change to the baseline will be necessary as these are older 2023 cost estimates and as detailed requirements may have evolved since the baseline was approved.

V. Deliverable Items and Schedules

Deliverable Item Delivery Schedule Monthly Task Status Report Monthly

Assessment of IT Security Status based on internal scans

Monthly

H/W Implementation Plans As required, at least one week prior to implementation

Rolling 5-year Sustaining Engineering Plan and Associated Risk assessment based upon:

• Operational capabilities with consideration for the projection of available resources

• 5 -year ODC Assessment

June 30, 2024

Yearly report addressing training, team skills level (current and future technologies), and planning to address gaps identified, e.g. additional training classes, strategic hiring, etc.

Plan forward to address management of team skills in order to maintain currency and future technology implementation, e.g. training, strategic hiring, etc.

April 1, 2024

Periodic system failover tests Annual tabletop exercise with physical testing every 3 years.

Yearly report that summarizes assessment of Commercial-Off-the-Shelf (COTS) utilization, e.g.

Orbit Determination Toolbox (ODTK), FreeFlyer, Satellite Tool Kit (STK), MATLAB, etc.

October 31, 2024

VI. Management Approach

a. Staff Allocation, Expertise, and Skill Mix The contractor shall staff this work item with the appropriate skill mix and staffing level for the work, which includes current technologies used by the FDF as well as those that are being implemented for future capability. The team’s skills are expected to evolve as newer technologies are introduced into the environment. Work will be identified by the 5-Year Sustaining Engineering Plan which prioritizes projects, identifies the scope, and estimates the schedule and resources needed to accomplish. The schedule and priorities may be changed to meet new or changing requirements and funding availability, and the changes are to be approved by the Task Monitor (TM) and FDF Operations Director and/or their Deputy.

b. Configuration Management Systems and documents will be covered under the FDF Configuration Management Plan and Sustaining Engineering Configuration Management Plan.

c. Facilities Hardware and system software supported under this task shall be Government Furnished Equipment (GFE).

d. Risk Management and Best Practices The contractor shall manage schedule, cost, and technical risk through monitoring and reporting of progress and performance metrics, identifying issues well in advance of negative consequences, recommending corrective action to the TM, and implementing corrective actions with the compliance of the TM.

VII. Performance Metrics Performance of the task will be based on timeliness and completeness of deliverables. The work performed for this task will be evaluated by the TM based on the technical merit. Technical evaluation of the task performed is a subjective combination of performance metrics, technical quality of deliverables, cost control, significant events, innovations and meeting requirements set forth in the SOW.

VIII. Government Furnished Facilities, Equipment, Software and Other Resources The Government shall provide account and passwords to government-furnished workstations where existing versions of various relevant software packages shall be maintained. It shall be the contractor’s responsibility to complete any GSFC required security-related training courses.

IX. Travel No travel is current baselined.

If there is local and non-local travel for this task to attend IT and IT Security-related conferences, they will be approved on a case-by-case basis.

X. Work Location This work shall be performed in a combination of on-site at the Goddard Space Flight Center, telework, or at the contractor’s facility, as based on work requirements and in accordance with NASA's work policy.

XI. Reporting Requirements The contractor shall report task status in person or via teleconference to the TM or designated alternate on a bi-weekly basis or ad hoc as necessary and depending upon the circumstances related to system problem resolution.

In addition, the contractor shall log and track all system problems and generate and deliver a system report. Other reports shall include informal presentation of interim results, status of development activities, and Plan of Action and Milestones (POAM) status. Brief written summaries, action item status, and/or security-related status reports may be requested. Formal documentation of systems is defined in Section V. Deliverable Items and Schedules.

XII. Security Requirements This task shall ensure compliance with IT security requirements as documented in the FDF IT System Security Plan (SSP) for all systems located in the FDF.

XIII. Rights The Contractor shall adhere to the FAR 52.227-14 RIGHTS IN DATA – General, Alternate II (2007) and Alternate III (2007), as modified by NFS 1852.227-14 (Apr 2015).

XIV. References Not applicable.