SOW Spectrum Management DPG 02Sept25.docx

STATEMENT OF WORK

West Desert Test Center (WDTC) Spectrum Monitoring Network System Software and Firmware Technical Support

1. Summary of WDTC Spectrum Monitoring Network System and Capabilities WDTC acquired a state-of-the-art CRFS spectrum monitoring and analysis system in Q4 of 2019. This system provides spectrum management and test support personnel with:

· Spectrum Monitoring Nodes

· The spectrum monitoring system consists of 10 nodes permanently install at 7 locations throughout Dugway Proving Ground (DPG).

· 4 nodes are equipped to operate between 9 KHz to 18 GHz and can be integrated to provide RF emitter geo‐ location using Time‐Difference‐of‐Arrival (TDOA).

· 3 arrays, that consist of 2 nodes per array, have the capability to perform emitter Angle-of-Arrival (AoA) and TDOA direction finding / geo-location from 20 MHz to 18 GHz.

· Each TDOA node is enclosed in a ruggedized container with integral antennas for remote spectrum management.

· Each array nodes and AoA antennas are enclosed in a dome. TDOA antennas are located outside of the array.

· All nodes use a Linux operating system and have internal storage.

· Mission

· Mission is a Linux based server software that provides Automated Spectrum Management System (ASMS), enabling network and database management alongside automated spectrum monitoring and geolocation. It allows spectrum stakeholders to derive useful and actionable intelligence from their deployed nodes without the need for teams of RF experts. It has been designed for use with spectrum monitoring assets deployed over wide areas.

· Mission serves as the central software used to maintain and update assets throughout the system. This includes but not limited to firmware and software updates, system health reports, and messaging subscribers of incidences or alarms that arise.

· RF Signal Analysis Workstations

· Three virtual workstations dedicated to signal analysis, RF spectrum usage analysis, interference analysis, and RF propagation modeling and correlation with field measurements.

· Base‐wide spectrum management software (RFeye Monitor, Map, and Site) – for real time spectrum monitoring, emitter geolocation, and historical analysis

· One server that hosts Monitor software that aggregates and reports RF spectrum occupancy as well as other spectrum management RF environment parameters of interest.

· Control all RF monitoring systems to geo‐locate RF emitters using Angle‐of‐Arrival (AoA) and Time‐ Difference‐of‐Arrival (TDOA) direction finding methods.

· Establish baseline spectrum use with automatic alarms of unauthorized signals.

· Archive storage for spectrum and recorded signal data

· Document baseline RF environment in test areas and monitor for unexpected transmissions.

· See appendix A for a full list of system capabilities, quantities, CRFS Product Code and a brief explanation for each capability.

This system provides WDTC the ability to manage the RF environment at the test ranges, record the RF environment during testing of type of test and evaluation events (manned/unmanned, air/ground systems), and create a long‐term record of actual RF spectrum use to support planning and analysis of the impact of future spectrum reallocation proposals.

2. Current System Status and Need for Technical Support Contract The system was acquired with a 12‐month all‐inclusive hardware and software warranty. This included return to factory hardware warranty, software updates, on‐demand help desk, and US based technical support. Software updates are released approximately every quarter and include new features, enhanced capabilities, and bug fixes. The hardware warranty, software updates, and technical support coverage for the equipment and software are currently under a maintenance contract but several security vulnerabilities exist on the system and must be resolved. System network, software and hardware configurations are managed by WDTC personnel.

3. WDTC is Pursing a Multi-Year All Inclusive Maintenance Contract for their CRFS Spectrum Monitoring System.

Within this contract the contractor shall be responsible for providing the following:

3.1. The contractor shall provide US based technical support through a work order system, telephone, email, and onsite support when requested by the government at no additional cost.

3.2. Contractor shall provide all software updates, patches, STIG, and migration to keep the entire Monitoring System and all subsystems and components operational and with no issues.

3.3. All software updates, patches, STIG shall be provided in the correct format for the software that is currently operating. An example is having Mission software updates, patches, and STIGs delivered in a RedHat file format and not a Ubuntu file format.

3.4. Contractor shall ensure all software, updates, patches, and operating systems are fully compliant with Army STIGS, Army Golden Master Program, and local policies prior to installing.

3.5. In the event an Army STIG changes, or a security violation is identified, the contractor shall have 14 days from time of the STIG changes or receiving notification from the government to provide a written plan for resolving the violation and a projected time frame for the violation to be resolved.

3.6. In the event an Army STIG changes, or a security violation is identified, the contractor shall have 14 days from time of the STIG changes or receiving notification from the government to provide a written plan for resolving the violation and a projected time frame for the violation to be resolved.

3.7. Contractor shall provide up to 6 user accounts to the single point to receive any documentation software, patches, updates, and issued user licenses. Each user of the accounts will receive notifications whenever an update, change, or removal of information is performed to the single point.

3.8. In the event equipment must be moved or transported from its installed location, the contractor is to assume full responsibility and cost. Examples include but not limited to:

3.8.1. The removal and installation of existing CRFS equipment from its installed location. This does not include any government furnished equipment.

3.8.2. Any transportation and transportation supplies needed. Examples include but not limited to, transporting equipment to and from the installed site, freight costs, and shipping materials.

3.8.3. Any parts, labor, and the installation of any repaired equipment. The contractor will coordinate this work with the COR.

3.9. Contractor shall also provide the following support:

3.9.1.

4. Government Furnished Equipment:

4.1. Virtual Servers and Storage housed on local servers managed by WDTC.

4.2. Virtual Workstations housed on local servers managed by WDTC.

5. Security:

CYBER SECURITY (CS) The contractor shall provide cyber security expertise for the WDTC Spectrum Monitoring Network System.

5.1. CS1. Provide technical expertise to interpret and implement the latest security standards, policies, and procedures required by Commercial Entities, Federal Agencies, DoD for cyber security and WDTC change control board.

5.2. CS2. Ensure that baseline configurations contain all required patches and follow applicable Security Technical Implementation Guide (STIGs) and security requirements guide (SRGs) at the time the baseline is established and are updated upon the release of new or revised information assurance vulnerability alerts, STIGs, and SRGs. IAW Army Regulation 25-2 Army Cybersecurity, Army Regulations 25-1 Army Information Technology, Department of Defense Instruction (DoDI) 8500.01 Cybersecurity.

5.3. CS3. Ensure that all IT complies with applicable law and national, Federal, and DOD issuances, to include National Security Agency (NSA) issuances, NIST standards, DOD STIGs, and DOD SRGs, with exceptions documented and approved by the responsible AO.

5.4. CS4. Coordinate and conduct cyber tests and analysis to determine the security posture of systems.

5.5. CS5. Design and develop tools and networks to support cyber operations.

5.6. CS6. Develop, review, or evaluate cyber operations and cyber security documentation to include incident response, continuity of operations, and configuration management.

5.7. CS7. Provide SME analysis and operations support in all major areas of CS to include Computer Network Defense (CND), Software Security, Database Management, Design/Test, Hardware/Firmware, Physical Security, and Network Infrastructure.

6. Firm Fixed Price Cost (including Labor and Other Direct Costs consisting of CompTIA Security+ training, certification exam, and continuing education unit fees for the contractor’s Local Administrator assigned to this contract):

6.1. Period of twelve months commencing twelve months from date of award of base contract with three option years that can be activated by the government.