SOWSTORAGE.pdf

STATEMENT OF WORK

Joint Region Marianas Electronic Security Systems Storage Expansion - Site 1 (Primary)

OVERVIEW:

Joint Region Marianas (JRM) needs to expand the storage capacity for its existing VMware (VM) infrastructure, which is part of the JRM-Platform Enclave (JRM-PE). JRM-PE supports all Electronic Security Systems (ESS) requirements for JRM. Increased ESS requirements are driven primarily by (1) the construction of a new Marine Corps Base - Marine Corp Base Camp Blaz (MCBCB). MCBCB is utilizing JRM/CNIC's ESS service, and (2) existing JRM tenants and commands that are transitioning from end-of-life ESS to JRM/CNIC's ESS service.

REQUIRED IA CONTROLS FOR COMPLIANCE:

NIST SP 800-53 rev4 - The NIST SP 800-53 rev4 provides a list of controls that is used for the development of Federal Information Systems, specifically its Information Assurance (IA) aspect.

SA-4(7): System and Services Acquisition – refers to “National Information Assurance Partnership” (NIAP) approved; Department of Defense Information Systems Approved Products List (DoDIN APL) listed. Hardware and/or Software being procured must be evaluated against NIAP and included in the DoDIN APL.

The organization:

(a) Limits the use of commercially provided information assurance (IA) and IA-enabled information technology products to those products that have been successfully evaluated against a National Information Assurance partnership (NIAP)-approved Protection Profile for a specific technology type, if such a profile exists; and

(b) Requires, if no NIAP-approved Protection Profile exists for a specific technology type but a commercially provided information technology product relies on cryptographic functionality to enforce its security policy, that the cryptographic module is Federal Information Processing Standards (FIPS)-validated.

VENDOR WILL PROVIDE THE FOLLOWING BASED ON THE FOLLOWING REQUIREMENTS:

1. TECHNICAL (Hardware/Software) REQUIREMENTS

1.1. Initial storage requirement of 60TB (RAW; before dedupe or compression) or better; Hard Disk configuration shall be All-flash.

1.2. Proposed solution must possess NIAP Common Criteria certification.

1.3. Shall not exceed 3RU footprint.

1.4. Solution must include components to provide IP/Ethernet connectivity (4-links) to a 10G upstream switch. (x4) 10G Direct-attached-cables (DAC), twinax, is preferred. If DAC is not an available option, (x4) 10G SFP transceivers with matching patch cables must be provided.

1.5. Able to tolerate an unscheduled power outage without the loss or corruption of data using native power banks to allow for graceful shutdowns, committing all in-flight writes.

1.6. Deduplicate and compress incoming data in-line.

1.7. FIPS 140-2 compliant and have a valid certificate.

1.8. Automatically creates, partitions, and stores new encryption keys at least every 24 hours.

1.9. Able to scale capacity and performance independently of one another.

1.10. Solution shall support non-disruptive upgrades with no risk of downtime or data migration.

1.11. Able to replace controllers or storage media while system is online and serving clients without causing loss or corruption of data.

1.12. Supports non-disruptive upgrades that can occur with zero or near-zero performance impact, with no risk of downtime or data migration.

1.13. Solution shall support the addition of flash media of different capacities non-disruptively to an existing system and without the need to manually equalize I/O.

1.14. Snapshots shall be immutable.

1.15. Supports and includes native encryption at rest without the need of additional hardware, software, or licensing.

1.16. Supports and includes array-to-array native replication (asynchronous, synchronous, active DR) without the need of additional hardware, software, or licensing.

1.17. Does not require RAID groups, performance tiers, or cache tiers to be configured nor managed.

1.18. All features, licensing, and software components shall be included in the cost of the array in relation to requirements 1.1. - 1.17.

2. MAINTENANCE AND SUPPORT REQURIEMENTS

2.1. Media shall be supported from wear forever as long as the system is under a valid support contract, eliminating the concern for the finite life of flash media.

2.2. All current and future software upgrades, enhancements, and releases should be included for the life of the system while under support agreement.

2.3. Shall have an on-island professional services engineer and be able to provide on-site services when required.

2.4. Support response times - minimum, Next Business Day parts delivery and 24/7 access to technical support.

2.5. Shall have a parts depot on-island or provide spare parts of all critical components of the system as customer on-site inventory.

2.6. Maintenance and support pricing must be flat.

2.7. The solution must include no cost controller upgrades every three years as long as the system remains under a valid support contract.

3. PERIOD OF PERFORMANCE: 120 days After Receipt of Order (ARO).

4. DELIVERY/SHIPPING ADDRESS: NAVAL BASE GUAM, BLDG. 3014, MARINE CORPS DRIVE,

SANTA RITA GUAM 96915.