SOW_BM2022_Microwave_Wireless_Internet_Network_Services_Support.docx

UNITED STATES DEPARTMENT OF THE INTERIOR

BUREAU OF LAND MANAGEMENT

BLM BURNING MAN OPERATION 2022

STATEMENT OF WORK (SOW)

SOW for providing Microwave Wireless Internet and IP Network, technical services and support in the Gerlach, NV area to BLM for the 2022 Burning Man Event

PROJECT TITLE:

2022 Burning Man Event BLM Microwave Wireless Internet and Network Services and Support

BACKGROUND:

The Burning Man Recreational Event is an international art festival and an experiment in a “temporary community dedicated to radical self-expression and self-reliance”. The temporary community of Black Rock City (the Event) is created for nine (9) days and becomes one of the largest cities in Nevada. The event takes place on the Black Rock Desert within the Black Rock/High Rock NCA, managed by the Winnemucca District Office. A Special Recreation Permit (SRP) is issued to Burning Man Project (BMP), which is responsible for all activities within Black Rock City. The SRP has approximately 16 general stipulations and additional stipulations. The BLM also generates a Closure Order for the event that is announced in the Federal Register, which designates the event area as a temporary closure and documents temporary restriction of certain activities within the temporary closure.

The BLM’s operational mission is to ensure public safety and resource protection through the enforcement of the event closure order, the SRP stipulations, Federal laws/regulations and Nevada state laws/regulations at the event. To accomplish this mission the BLM has adopted the Incident Command System (ICS) and integrated multiple agencies into one operation. The ICS operation will be a combination of overhead, operational and support positions. The ICS operation will cover all three event periods of the detail: Pre-Event; Main Event; Post-Event (8/22 - 9/7: 17 days).

SCOPE OF WORK:

The Contractor shall provide a fully functional FCC Licensed carrier class microwave network and associated Wireless Internet Service, technical services, technical support, software applications and hardware to ensure a fully functional, operational and reliable Law Enforcement Data network and Incident network at the Joint Operations Center (JOC).

The Contractor shall provide a fully functional computer network, technical services, technical support, software applications and hardware to ensure a fully functional, operational and reliable Law Enforcement Data network and Incident network at the BLM Headquarters (BLM JOC) and other nearby locations in “Black Rock City, Nevada.”

REQUIREMENTS FOR MICROWAVE INTERNET SERVICES:

Required equipment, services, tasks and responsibilities of the contractor shall consist of the following:

1. Internet over microwave at BLM HQ, 40 Mbps bi-directional (minimum):

Contractor must provide an FCC licensed carrier class microwave network and associated Wireless Internet Service which will be sent to the JOC via microwave transmission, encrypted with FIPS140-2 compliant AES 256 encryption at licensed frequency/frequencies to prevent interference and interception. The contractor must provide all necessary public and private IP addressing.

2. System must be built, deployed, tested and operational by Thursday, August 18, 2022 at 23:59 hours.

3. Contractor must be prepared to handoff a fully functional internet service connection at a demarcation point at the JOC on Thursday, August 18, 2022 at 23:59 hours or sooner.

4. Contractor must be able to deliver internet service using commonly accepted routing protocols. Exterior gateway protocols are preferred. (not to be confused with Exterior Gateway Protocol (EGP) which is not requested or required). Border Gateway Protocol (BGP) is specifically requested and required for this project. Other protocols may be necessary depending on integration with other parties.

5. Contractor must have technical support available during the entire “PERIOD OF SERVICE.” Contractor must have dedicated technical support personnel available to respond to the government within 15 minutes of notification of network failure and provide a service time of 4 hours to diagnose the issue. Contractor will provide a phone number to report all technical issues.

6. Contractor must provide a “High Availability Network” (5-9’s or 99.999% per year / or 99.5% per 24 hours). System “High Availability” is required from 08/19/2022 23:59 hours through 09/07/2022 23:59 hours.

7. Contractor must provide network bandwidth, which is dedicated and must not be shared with other clients. Minimum bandwidth requirement is 40 Mbps bidirectional.

8. Contractor must provide a microwave system, which is fully FCC, licensed on the routes to the primary delivery location at the JOC, to prevent interference / interception and to meet with federal requirements. Contractor is responsible for any and all costs and/or fees for licensing.

9. Weather including wind, dust and rain are common at the location. The network must be capable of operation regardless of weather conditions.

10. It is a requirement for this contractor to work collaboratively and cooperatively with additional contractors, vendors, federal, state, local agencies during the performance period both at the location and at off-site locations if necessary.

11. The contractor shall provide all system design and pre-event engineering. The contractor shall provide a detailed written plan and technical drawing and furnish it to the BLM Project Lead as soon as possible after contract award, but no later than Friday, July 29, 2022 17:00 hours.

12. The contractor shall provide a temperature-controlled environment for all indoor system electronics.

13. The contractor shall provide a “relatively” dust free / dust-controlled environment for all indoor system electronics.

14. The contractor shall be responsible for lodging of contractor personnel on-site, at the JOC, through the use of a contractor furnished RV or camper trailer. The government will provide space for parking and power, potable water and sewage service.

15. The contractor shall provide any on-site transportation needed for contractor personnel and contractor equipment at the location during the performance period.

16. The contractor shall be responsible for all transportation of all contractor personnel and contractor equipment to and from the event.

17. The contractor shall be responsible for all power for remote repeater locations and/or any part of the network, which is not at the JOC.

18. If the contractor chooses to use solar power at remote locations, the system must be engineered to include an uninterruptible power supply (UPS) capable of maintaining the system at “High Availability.”

19. The contractor shall be available to participate in pre-coordination meetings by telephone and/or video teleconference.

20. The contractor shall provide reports on bandwidth utilization and monitoring for the duration of the “Service Period.” Daily, Weekly and Service Period Reports will be provided at the request of the Project Inspector. Proactive delivery of reports through electronic delivery by email is desired.

21. Post Event, the contractor shall be responsible for dismantling, decommissioning, removing and “breaking down” all contractor supplied and installed equipment in a timely manner. The contractor must comply with the timelines as directed by the government Project Inspector. The contractor must notify the government Project Inspector, in writing, when all “break-down” work is complete, and all equipment has been removed. This includes any equipment at the event or at remote locations supporting the event.

REQUIREMENTS FOR NETWORK SERVICES AND SUPPORT:

Required equipment, services, tasks and responsibilities of the contractor shall consist of the following:

22. Network design, configuration, routing and switching Contractor must provide layer 2 and/or layer 3 network design, configuration and hardware, which will allow for configuration and creation of multiple simultaneous Local Area Network (LAN) segments. The contractor must then implement this network. The contractor must provide all necessary private IP addressing, unless otherwise provided. Public IP addressing will be Government Furnished Equipment (GFE). A multiple VLAN configuration with trunked switches in each building is a desirable configuration. Switch size is dependent on the number of VLANS proposed and used; however, 48 port switches would be sufficient. 24 port switches could be sufficient but would likely be fully utilized. Each building uses between 10 and 30 Ethernet “drops” to connect devices from the switch, such as computers, printers, etc. Adding additional switches in a building is possible and allowable but is not preferred due to added complexity and added points of failure.

23. Quality of Service (QoS) Contractor must be able to configure and provide Quality of Service, to achieve maximum bandwidth utilization, protect real-time and high priority data applications and deal with other network performance elements such as latency, error rate and uptime. Contractor must be able to handle Quality of Service (QoS) on all network traffic over various technologies, Ethernet and 802.1 networks, and IP-routed networks that may use any or all of these underlying technologies, including bandwidth reservation and prioritization of network traffic. The contractor in collaboration with the government will develop a QoS priority list.

QoS Prioritization Examples:

· Criminal Justice Point to Point IP Secure Virtual Private Network

· Voice over Internet Protocol (VoIP)

· Geospatial Information Systems (GIS) Applications

· DNS Applications

· SSH Applications

· www Applications

· Streaming Video Applications

24. Cabling at BLM JOC.

Contractor must provide, run, install, bury, secure and terminate Category 5e (cat 5e) or higher cabling and/or fiber optic cable at the BLM JOC to the “critical” buildings identified by the government. The contractor must provide, run, install, secure and terminate Category 5e (cat 5e) or higher cabling and/or fiber optic cable at the BLM JOC inside the “critical” buildings as identified by the government for all BLM furnished devices i.e. laptops, printers, fax machines, as-well-as the contractor supplied VOIP phones. Each building will require access to multiple VLANs and will require multiple network drops to connect computers, phones, printers, faxes, copiers, cameras, etc. The “critical” buildings are shown on an attached map, but this is a highly dynamic event and the contractor should account for unplanned changes and adjustments. The Government will furnish a drawing of all buildings and all building layouts. At the end of the event, the contractor must remove all cabling. All cabling must adhere to the American National Standards Institute (ANSI) Telecommunications Industry Association (TIA) ANSI/TIA-568.

Example of Critical Buildings for wired Ethernet:

· Integrated Command

· Event Support

· Emergency Dispatch Center (EDC) aka “Dispatch”

· Jail

· Medical

· Investigations

· Report writing

· Radio Trailer

25. GOVERNMENT only Wi-Fi access at BLM JOC:

Contractor must provide robust, reliable, Wi-Fi network to provide coverage of the entire BLM JOC, both indoor and outdoor. Hidden and password protected SSID allows only BLM and other authorized personnel to access the Wi-Fi network. Wi-Fi network may or may not use MAC address control. MAC address control is not desirable due to the temporary nature of this network and event. Wi-Fi network must be capable of simultaneously supporting a minimum of 200 devices with independent leases and configurable leases. Wi-Fi frequency coordination with other parties will need to take place pre-event and onsite to ensure deconfliction takes place.

26. Verizon Wireless LTE augmentation over IP:

Contractor must provide robust, reliable solution to provide coverage of the entire BLM JOC, both indoor and outdoor. Contractor to provide a solution for augmented Verizon LTE cell service at BLM JOC over the IP network for added capabilities and failover / backup. Must be capable of 40 simultaneous cellular telephone calls. Must be capable of using all available IP network bandwidth for LTE service, if needed.

27. GOVERNMENT only access network and Wi-Fi extended to center camp:

Contractor shall extend the network, the internet and the Verizon LTE augmentation from BLM JOC to the law enforcement substation near center camp. Contractor must provide an Ethernet connection to the Sub-Station. Wi-Fi speed and connection will be subject to the end user's device antenna gain. Contractor must provide robust, reliable solution to provide Verizon LTE augmentation at the law enforcement substation. This service must be capable of at least five (5) simultaneous calls and all bandwidth allocated for the LTE. Wi-Fi frequency coordination with other parties will need to take place pre-event and onsite to ensure deconfliction takes place.

28. Pan Tilt Zoom (PTZ) IP Camera Contractor must provide a Pan Tilt Zoom (PTZ) IP Camera at the Law Enforcement substation near center camp. The PTZ camera must be able to be controllable over the extended microwave network from the BLM JOC. The contractor must provide at least one PTZ controller at BLM JOC with a large flat screen high definition television for monitoring (42” minimum diagonal.) The contractor must install, setup and configure all related equipment at all locations.

29. Microwave Tower at JOC Contractor must provide, install and setup a tower at the JOC for mounting network hardware to support microwave connectivity to the BLM LE Substation in Black Rock City. This tower may be self-supporting or may be attached to one of the BLM assigned JOC buildings.

30. Microwave Tower at Substation Contractor must provide, install and setup a self-supporting tower at the BLM LE Substation for mounting network hardware to support microwave connectivity to the JOC.

31. IP Cameras for “In-Custody” suspect monitoring at jail Contractor must provide, install, configure and test a minimum of six (6) IP Cameras in the jail and two (2) cameras outside the jail at the BLM JOC. The cameras must be able to be monitored over the network at the BLM JOC in the Investigations Building or where best determined during setup on-site. The cameras will be placed in opposite corners of the jail and should be wide view cameras to ensure the entirety of the jail is seen through the use of all cameras. The cameras must record video and audio. The contractor must provide, install configure and test a monitor, controller (if needed) and Network Video Recorder (NVR) in a building to be determined on-site, this will be used to monitor the cameras inside and outside the jail. The cameras must be able to be monitored on a single display screen in a split view format. The monitor must be a large flat screen high definition television for monitoring (42” minimum diagonal.) The contractor must provide a wall mount for the display. The Network Video Recorder (NVR) must be capable of recording all camera feeds for 24 hours continuously. The NVR must have the ability to easily extract the video through a USB port or SD Card for case information. The NVR should have the ability to simultaneously record the video to multiple recording devices, such as a Network Accessible Storage (NAS). The contractor must provide a minimum of two (2) signs which state “Warning Audio and Video Surveillance in Progress” or similar. The contractor must provide, install, setup and configure all related equipment at all locations. This segment of the network must be on its own LAN segment and isolated from all other LAN segments. The IP Cameras and NVR must be compatible with the following GFE:

https://www.synology.com/en-us/products/RS815

32. Voice Over Internet Protocol (VOIP) telephone lines and telephones Contractor must provide a minimum of 20 VOIP telephone circuits or independent phone lines, which must be capable of operating simultaneously and have individually assigned numbers. Each phone must allow for long distance calling through standard dialing procedures. International dialing capabilities are not needed and may be restricted. The contractor will be responsible for any and all charges associated with this service. The contractor will furnish a list of phone numbers to the government POC, as soon as possible before the event. The contractor shall provide a minimum of twenty (20) telephone handsets, setup installed and maintained. These handsets must include a speakerphone function. Due to the dynamic nature of event setup, additional VOIP telephone circuits and handsets should be easily available.

33. Voice Over Internet Protocol (VOIP) Facsimile (FAX) lines Contractor must provide a minimum of two (2) VOIP fax circuits or independent fax lines, which must be capable of operating simultaneously and have individually assigned numbers. Each fax must allow for long distance calling through standard dialing procedures. International dialing capabilities are not needed and may be restricted. The contractor will be responsible for any and all charges associated with this service. The contractor will furnish a list of fax numbers to the government POC, as soon as possible before the event. Fax machines are Government Furnished Equipment (GFE) and will support VOIP transmission.

34. Contract personnel must arrive on site at the location on Wednesday, August 17, 2022 and begin set-up and no later than 17:00 hours.

35. Network and Internet access to the Emergency Dispatch Center (EDC) and Report Writing Building will be a priority and must be delivered NLT Friday, August 19, 2022 at 23:59 hours.

36. System must be fully built, deployed, tested and operational by Monday, August 22, 2022 at 23:59 hours.

37. Contractor must have dedicated technical support on-site, at the JOC, during the entire “Service Period.” Contractor must have dedicated technical support personnel available to respond within 15 minutes in the event of network failure to technical support requests.

38. Contractor must provide a “High Availability Network” (5-9’s or 99.999% per year / or 99.5% per 24 hours). System “High Availability” is required from 08/22/2022 00:01 hours through 09/07/2022 23:59 hours.

39. Contractor must provide a network, which is dedicated and must not be shared with other clients. Unless approved by the government in writing, the contractor will not provide any network services and support, bandwidth or internet access to any entity other than the government.

40. Contractor must provide a microwave system on the routes from the BLM JOC to the LE Substation, which is fully FCC licensed, to prevent interference / interception and to meet with federal requirements. Contractor is responsible for any and all costs and/or fees for licensing.

41. To prevent interference / interception the contractor will be required to do frequency coordination with other microwave users. Should there be any; contractor is responsible for any, and all costs, and/or fees for licensing.

42. Weather including wind, dust and rain are common at the location. The network must be capable of operation regardless of weather conditions.

43. Contractor should plan for and provide for a full contingency / failover option at the location. Contingency / failover must be readily deployed during the performance period. Contingency / failover must be automatically deployed by the contractor in the event of known primary system outage or failure. Automatically is defined as: “If the contractor is aware of an outage or failure, they should take immediate action to correct the outage or failure without a request from the government.” This does not mean the “Contingency/Failover” happens through machine automation. Any machine automation to reduce potential downtime is preferred.

44. It is a requirement for this contractor to work collaboratively and cooperatively with additional contractors, vendors, federal, state, local agencies during the performance period both at the location and at off-site locations if necessary.

45. The contractor shall provide all system design and pre-event engineering. The contractor shall provide a detailed written plan and technical drawing and furnish it to the BLM Project Lead as soon as possible after contract award, but no later than Friday, July 29, 2022 17:00 hours.

46. The contractor shall provide a temperature-controlled environment for all indoor system electronics.

47. The contractor shall provide a “relatively” dust free / dust-controlled environment for all indoor system electronics.

48. The contractor shall be responsible for lodging of contractor personnel on-site, at the JOC, through the use of a contractor furnished RV or camper trailer. The government will provide space for parking, power, potable water and sewage service.

49. The contractor shall be responsible for food and beverages for contractor personnel from August 18 through August 23. Catering service will begin on August 23, 2022. Catering service will conclude on September 7, 2022. The contractor shall be responsible for food and beverages for contractor personnel from September 8 to 10, 2022.

50. The contractor shall provide any on-site transportation needed for contractor personnel and contractor equipment at the location during the performance period.

51. The contractor shall be responsible for all transportation of all contractor personnel and contractor equipment to and from the event.

52. The contractor shall be responsible for all power for remote repeater locations and/or any part of the network, which is not at the BLM JOC or in Black Rock City.

53. If the contractor chooses to use solar power at remote repeater locations, the system must be engineered to include an uninterruptible power supply (UPS) capable of maintaining the system at “High Availability.”

54. The contractor is encouraged to engineer the network to include an uninterruptible power supply (UPS) at the BLM JOC and the substation.

55. The contractor shall be available to participate in pre-coordination meetings by telephone and/or video teleconference.

56. The contractor shall provide network monitoring and network / web content filtering to increase productivity, regulate bandwidth usage, and prevent risky behavior through enforcement of granular policies on user activities. The contractor shall provide network hardware and/or software to control access to web sites, applications, and Web 2.0 platforms based on users, groups, time, bandwidth, and other criteria. The contractor will conduct these activities at the direction of the Project Inspector.

57. The contractor shall provide reports on network utilization and monitoring for the duration of the “Service Period.” Daily, Weekly and Service Period Reports will be provided at the request of the Project Inspector. Proactive delivery of reports through electronic delivery by email is desired.

OCCUPATION / OCCUPATION CODE(s):

http://www.bls.gov/soc/ 15-1143 Computer Network Architects 15-1152 Computer Network Support Specialists 49-2021 Radio, Cellular, and Tower Equipment Installers and Repairers

SPECIAL REQUIREMENTS:

The microwave network will require a network to be built over long distances in a remote geographic area, which typically involves placing temporary hardware, such as repeaters/relays on mountain peaks or ridgelines. The contractor will be required to gain access to remote, rugged terrain of their choosing in order to build a functional network. Much of the land in this geographic area is under the administration and management of the United States Department of the Interior, Bureau of Land Management (BLM.) If the contractor selects repeater locations, which are on lands administered and managed by BLM, BLM will grant the contractor any necessary temporary authorizations, which may be needed to access or use those locations. No authorization shall be granted in violation of laws or regulations. If the contractor selects repeater locations, which are not on lands administered and managed by BLM, such as privately owned, tribal or other lands, the contractor is responsible for obtaining any necessary authorizations, which may be needed to access or use those locations. Selection of these sites must be done in conjunction with BLM. The contractor is responsible for any costs or fees necessary to access these locations or obtain agreements to use these locations. The contractor shall be responsible for any specialized vehicles or equipment needed to access remote locations or install equipment at these locations.

GOVERNMENT FURNISHED REQUIREMENTS:

The tasks and responsibilities of the government shall consist of the following:

1. Provide electrical power to the contractor electrical equipment for the network at the BLM JOC.

2. Provide a government Project Lead for coordination and direction pre-event and on-site.

3. Provide a shipping address in Gerlach, Nevada to the contractor may ship small and urgent packages necessary to the project.

4. The government MAY provide temporary storage for contractor equipment pre-event and post-event at the BLM Black Rock Station in Gerlach, Nevada, if space is available which will not adversely affect normal government operations at this site.

5. The tasks and responsibilities of the government shall consist of the following:

6. Provide indoor workspace for Network personnel.

7. Provide onsite parking for contractor furnished RV or camper trailer.

8. Provide electrical power to the contractor furnished RV or camper trailer.

9. Provide electrical power to the contractor electrical equipment for the IP network at the BLM JOC and the Sub-Station.

10. Provide food and beverages for the contractor through catering service from August 23 through September 7, 2022.

11. Meals will be served three times per day at regular intervals.

12. Meals will be provided for no more than five contractor personnel.

13. Provide water fill service through an on-site contractor.

14. Provide sewage pump out service through an on-site contractor.

RESTRICTIONS:

Unless approved by the government, the Contractor is restricted from providing any network services and support, bandwidth or internet access to any entity other than the government.

ACKNOWLEDGEMENTS:

The government acknowledges the network at the BLM JOC and within Black Rock City is dependent on power provided by the government and/or another contractor to the government. The contractor will not be responsible for system outages or failures, which are caused by lack of power or power inadequacies, which are outside of their control. The contractor is responsible for documenting, in writing, and immediately reporting any issues with power to the government project lead. The contractor is responsible for providing contractor power requirements for the location to the government in advance of the performance period, but not later than July 29, 2022.

DELIVERABLES:

The tasks and responsibilities identified in the Statement of Work shall fall into the following categories:

1. Technical Services

2. Network Services

3. Data Services

4. System Administration Services

5. Network Administration Services

6. Accounting of Billable Activities

The contractor shall provide a detailed accounting of all billable services following the period for which the services were performed.

LOCATION:

BLM 2022 Burning Man BLM Headquarter (BLM JOC) Black Rock Desert near Gerlach, NV (Pershing County, Nevada) 2019 City Location(s):

All locations are subject to minor shifts.

It is expected that the network will require infrastructure placement in multiple locations possibly in multiple counties, in order to deliver service to the above location.

PERIOD OF PERFORMANCE:

Base Year - Contract Award through completion. June 1, 2022 (estimated) through December 31, 2022.

Option Year One - June 1 2023 to December 31, 2023.

PERIOD OF SERVICE (Base year Only):

August 17, 2022 through September 10, 2022. (25 Days) 08/19/2022– Provided Services at BLM JOC fully operational at or before 23:59 hours 09/08/2022 – “Post Patrol” portion of event ends, contractor begins “break down” 09/10/2022 – Contractor may depart when “break down” complete.

NETWORK SYSTEM STANDARDS COMPLIANCE:

DOI may conduct an Assessment & Authorization (A&A) of the CAD/MDT system before the COR issues an Authority to Operate (ATO) on the DOI Network. If this assessment is conducted, the contractor will be required to answer questions, participate in the A&A process and potentially implement any information security changes necessary to facilitate receiving the ATO for this system. The system may undergo continuous monitoring as set forth in NIST SP 800-37 rev. 4.

The system shall be fully compliant with the U.S Department of Justice (USDOJ), Federal Bureau of Investigation (FBI) Criminal Justice Information Services (CJIS) Security Policy. An electronic copy of this policy will be provided at the contractor’s request.

The system shall be fully compliant with the Nevada Criminal Justice Information System (NCJIS), which is the Nevada State Criminal Justice Interface. NCJIS Compliance is MANDATORY.

The system and any/all electronic and information technology procured through this effort must be compliant with 29 U.S.C § 794d - Electronic and information technology (Section 508 Compliance Amendment to the Rehabilitation Act of 1973) the applicable accessibility standards at 36 CFR 1194. 36 CFR 1194 implements Section 508 of the Rehabilitation Act of 1973, as amended, and is viewable at http://www.section508.gov. Standards applicable to this requirement include: Functional Performance Criteria 1194.31 and Information, Documentation, and Support 1194.41.

INTERNET PROTOCOL VERSION 6:

Any system hardware, software, firmware and/or networked component (voice, video or data) developed, procured, or acquired in support and/or performance of this contract shall be capable of transmitting, receiving, processing, forwarding and storing digital information across system boundaries utilizing system packets that are formatted in accordance with commercial standards of Internet Protocol (IP) version 6 (IPv6) as set forth in the USGv6 Profile (NIST Special Publication 500-267) and corresponding declarations of conformance defined in the USGv6 Test Program.

Systems and Services shall be accessible from the Internet and DOI's computer network using Internet Protocol version 6. Services accessible via IPv6 shall be equivalent to services provided via IPv4; Systems and services must interoperate with both IPv6 and IPv4 systems and products.

In addition, this system shall maintain interoperability with IPv4 systems and provide at least the same level of performance and reliability capabilities of IPv4 products.

The system shall be fully compliant with National Institute of Standards and Technology (NIST), Federal Information Processing Standard (FIPS) Publication 140-2, Security Requirements for Cryptographic Modules.

The system shall be fully compliant with National Institute of Standards and Technology (NIST), Federal Information Processing Standard (FIPS) Publication 197, Advanced Encryption Standard (AES) 256-bit cypher.

The system shall be fully compliant with National Institute of Standards and Technology (NIST), Special Publication 800-82, Guide to Industrial Control Systems (ICS) Security (Revision 2 Initial Public Draft).

National Institute of Standards and Technology (NIST) Special Publication 500-267, A Profile for IPv6 in the U.S. Government – Version 1.0. Reference: NIST Link: http://www.nist.gov/information-technology-portal.cfm NOTE: For the CJIS VPN tunnel, IPv4 will be utilized. At this time “NO Known” network segments will require IPv6. The United States Department of the Interior requires the IPv6 statement to be included in all Requests for Proposal (RFP), Requests for Quote (RFQ) and Contract Awards. Any equipment or solutions must be IPv6 complaint, however, at this time it is not anticipated any IPv6 will be utilized.

LEGAL AUTHORITIES AND REGULATORY REQUIREMENTS:

The design, construction and operation of the network and transmission of all data must comply with all commonly accepted commercial network standard and regulations and with the following legal and regulatory requirements:

· 44 U.S.C. § 3541– Federal Information Security Management Act (FISMA) of 2002

· National Institute of Standards and Technology (NIST), Federal Information Processing Standard (FIPS) Publication 140-2, Security Requirements for Cryptographic Modules

· National Institute of Standards and Technology (NIST), Federal Information Processing Standard (FIPS) Publication 197, Advanced Encryption Standard (AES) 256 bit cypher.

· 28 C.F.R. § 20 - Criminal Justice Information Systems

· 43 C.F.R. Public Lands: Interior

· 16 U.S.C. § 470 – National Historic Preservation Act

· 29 U.S.C § 794d - Electronic and Information Technology (Section 508 Compliance Amendment to the Rehabilitation Act of 1973)

· FBI CJIS Security Policy

· Department of the Interior Acquisition Policy Release (DIAPR) 2012-09 – IPv6

· Department of the Interior Request and Risk Acceptance for Permanent Opening of Social Media and Web 2.0 Technology Websites All work shall be performed in accordance with NIST SP 800-37 rev. 4, 800-18, 800-30, 800-60, 800-53, 800-53A, Federal Information Processing Standard (FIPS) 199 & 200, DOI guides & templates, and the DOI Privacy Impact Assessment.

Guides and other references related to standards within this SOW may be found at:

NIST: http://csrc.nist.gov/publications/PubsSPs.html NIST Checklist: http://checklists.nist.gov FIPS: http://www.nist.gov/itl/fips.cfm DOI Privacy Impact Assessment Guide: https://www.doi.gov/sites/doi.gov/files/migrated/ocio/information_assurance/privacy/upload/DOI-PIA-Guide-09-30-2014.pdf NIBRS: https://www.fbi.gov/about-us/cjis/ucr/nibrs.

DOJ Information Sharing: https://it.ojp.gov/2417 EDXL: https://en.wikipedia.org/wiki/EDXL *Any other guides and templates shall be provided at time of award by the CO

The quoted solution may undergo Assessment & Authorization activities, and the quoted solution may undergo continuous monitoring as set forth in NIST SP 800-37 rev. 4. The contractor will take appropriate and timely action to correct or mitigate any weaknesses discovered during such activities.

WEB CONTENT CATEGORIES TO LIMIT:

· Streaming Media, Streaming Radio/TV, Advertisements & Popups, Media Downloads, Media Sharing, Auctions & Classifieds, Stock Trading, Peer-to-Peer, Web-based Telephony, Adult Content, Alcohol & Tobacco, Gambling, Intolerance & Hate, Pornography, Tasteless & Offensive, Violence & Terrorism, Extremely Offensive, Gambling Related, Game/Cartoon Violence, Profanity, Hacking, Phishing & Fraud, Proxies, Spam, Spyware, Proxy Utilities, Malicious Sites, Suspicious Sites.

U.S. DEPARTMENT OF THE INTERIOR ALLOWED MEETING SITES:

http://connectnow.acrobat.com http://gotomeetinq.com http://gotowebinar.com http://gotoassist.com http://www.webex.com/ http://www.govloop.com/ http://office.microsoft.corn/en-us/liveemeeting/ default.aspx

U.S. DEPARTMENT OF THE INTERIOR ALLOWED SOCIAL MEDIA SITES:

http://www. facebook.com/SecretarySalazar http://www.facebook.com/nationalparkservice http://www.flickr.com/photos/US Interior http://www.twitter.com/NatlParkService http://www.twitter.com/US GS http://www.twitter.com/USinteriorNews http://www.youtube.com/user/esritv http://www.youtube.com/user/FEMA http://www. youtube.com/user/oceanexplorergov http://www.youtube.com/user/CDCStreamingHealthhttp://www.youtube.com/NationalParkService http://www.youtube.com/USGS http://www.youtube.com/USinterior http://www.youtube.com/RecoveryBoard#play http://www.youtube.com/user/irsvideos http://www.youtube.com/user/NationalParkService http://www. youtube.com/user/oceanexplorergov http://www.youtube.com/user/usgs#play/all http://www.youtube.com/user/USEPAgov http://www.youtube.com/user/USGovernment http://www.youtube.com/user/USFoodandDrugAdmin http://www. youtube.com/user/ushomelandsecurity http://www. youtube.com/user/usnistgov http://www.youtube.com/user/whitehouse Other sites as directed by the Project Inspector