Industry Day Information Portfolio.pdf

PDF 3 MB Posted

Attached to
DLA OT Pillar Equipment Life Cycle Management Cyber Security Industry Day Elevator Systems Industry Day Amendment 0006
Solicitation number
SP4705-Elevator-Systems
Issued by

About this file

This document is an Industry Day information portfolio related to a series of upcoming federal contract opportunities for the Defense Logistics Agency (DLA) to acquire equipment life cycle management and cybersecurity services.

The portfolio outlines DLA's plans to issue six separate enterprise-wide solicitations for the maintenance and repair of various operational technology (OT) systems, including electric vehicle support equipment (EVSE), elevator systems, electrical and lighting systems, HVAC and building automation systems, water systems, and electrical distribution. These contracts will likely be awarded as Indefinite Delivery Indefinite Quantity (IDIQ) or GSA Blanket Purchase Agreements (BPA) and will have a significant focus on integrating cybersecurity throughout the equipment life cycle.

The anticipated acquisition timelines, locations, and high-level requirements for each OT system are provided. DLA is seeking industry feedback on its planned approach, including contractor capabilities, small business participation, and the importance of site visits. The portfolio also includes references to key cybersecurity standards and guidelines that will apply to these contracts.

View the file

Other files

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

The Defense Logistics Agency (DLA) thanks you all for attending the DCSO - J62 – DM DLA OT Pillar Equipment Life Cycle Management Cyber Security Industry Day on 9 April 2024.

A Copy of the Industry Day Recordings can be found at the links below, using the provided passwords.

Industry Day 040924 0834 Opening Session:

Recording link:

https://www.zoomgov.com/rec/share/pWGNF9aNu3xB2wWUhgkjKiF96GDdUvlh0EAy- KxiWpr5hJqGbrMTlm5IvfAtf1nx.lPXHaE8ohrmB5KVz?startTime=1712669284000 Passcode: exhfJ8.#

Industry Day 040924 1446 Closing Session:

Recording link:

https://www.zoomgov.com/rec/share/WsWukzRy- HBXJsx6tNJActmnkzZOeJqmbiTTZQglWjhVA1ETUT3xLko0n3odnTds.leHc0gGVC9HWQZ0X?startTime=1712689408000 Passcode: 5xL3&oq9

For more Information please contact the following Point of Contact(s):

Electric Vehicle Support Equipment (ESVE) – Mr. Chris Moore, Contracting Officer, christopher.m.moore@dla.mil Elevator Systems – Mr. Andre D. Desima, Contracting Officer, andre.desima@dla.mil Electrical & Lighting Systems (Building) - Mr. Andre D. Desima, Contracting Officer, andre.desima@dla.mil HVAC + Building Automation Systems + Utility Metering Systems - Mr. Andre D. Desima, Contracting Officer, andre.desima@dla.mil Water Systems (Potable, Sewer/ Waste) – Ms. Beverly J. Williams, Contracting Officer, Beverly.j.williams@dla.mil Electrical Distribution (Site) - Ms. Beverly J. Williams, Contracting Officer, Beverly.j.williams@dla.mil

Attached Document(s):

1. List of Attendee(s)

2. Complete Slide Deck https://www.zoomgov.com/rec/share/pWGNF9aNu3xB2wWUhgkjKiF96GDdUvlh0EAy-KxiWpr5hJqGbrMTlm5IvfAtf1nx.lPXHaE8ohrmB5KVz?startTime=1712669284000 https://www.zoomgov.com/rec/share/pWGNF9aNu3xB2wWUhgkjKiF96GDdUvlh0EAy-KxiWpr5hJqGbrMTlm5IvfAtf1nx.lPXHaE8ohrmB5KVz?startTime=1712669284000 https://www.zoomgov.com/rec/share/WsWukzRy-HBXJsx6tNJActmnkzZOeJqmbiTTZQglWjhVA1ETUT3xLko0n3odnTds.leHc0gGVC9HWQZ0X?startTime=1712689408000 https://www.zoomgov.com/rec/share/WsWukzRy-HBXJsx6tNJActmnkzZOeJqmbiTTZQglWjhVA1ETUT3xLko0n3odnTds.leHc0gGVC9HWQZ0X?startTime=1712689408000 mailto:christopher.m.moore@dla.mil mailto:andre.desima@dla.mil mailto:andre.desima@dla.mil mailto:andre.desima@dla.mil mailto:Beverly.j.williams@dla.mil mailto:Beverly.j.williams@dla.mil

American Elevator 9J1U4 rlambird@americanelevator. 2408765560 Elevator Services

Amyx

1QNC9

Contracts@amyx.com 7033731984 x122

Amyx has six integrated practice areas which provide the breadth and depth of subject matter expertise to design, develop, and implement a tailor-made solution for nearly any business problem or organizational challenge. Our core capabilities are: Enterprise Technology Services, Systems Engineering and Technical Assistance, Cybersecurity & Information Assurance, Program & Acquisition Management, Financial Support Services, Business Process Transformation, and e-Discovery and Litigation Support.

Blackwood 7P918 jack.hatfield@blackwood.ai 3017512258 Industrial Cyber Security for OT environment

Blue Whale EV

9CEG4

dcastille@bluewhaleev.com 4109919372

Blue Whale EV guides its clients through a cost-effective transition to EV Charging e-mobility solutions and delivers a superior customer experience through our US-based team of experts. Blue Whale EV has been designed to act as your “Turn-Key” provider. Blue Whale EV will provide a solutions-driven approach for our clients and will support all of our recommended solutions with our exceptional “Client First” service approach.

BMA 58U92 sean.caulfield@bmahq.com 703-626-6590 Systems Modernization, CRM, Cyber, and Training suppor Chinook Systems Inc Florida - 3D5P5 Virginia - 6 twindom@chinooksystems.c (919) 980-1109 Building Automation, Cyber Security, Commissioning, Design Build of MEP system

Corsha

8BX18

jeff@corsha.com 2029095467

Corsha is an Identity Provider for Machines that allows an enterprise to securely connect, move data, and automate with confidence from anywhere to anywhere. Corsha builds dynamic identities for trusted machines and brings innovation like automated, one-time-use MFA credentials to APIs. This ensures automated communication across clouds, data centers, or shop floors is pinned to only trusted machines and helps an organization move past outdated, costly secrets management and reimagine identity and access for machines.

Cybernet Systems Corporation 5WNT4 rbiggers@cybernet.com 4076174481 Cybersecurity Support Services DAWSON 8PG84 joliver@dawsonohana.com 757-544-8104 Full spectrum cyber security Dragos 9R6Q7 mshea@dragos.com 7036268971 OT/ICS - Industrial Cyber Security Software and Service Electrosoft Services Inc. 1UB58 tmburton@electrosoft-inc.co5714399074 IT Services, including Cyber Security

Elevator Control Service JK9LM6B67Z77 don@elevatorcontrolservice. 301-568-9300 Elevator Maintenance, Service, Repair, Modernization and Construction EMCOR Services Automated Controls N/A kenny_sayers@emcorgroup. 614-592-4394 Building Automation Systems, Utility Metering System Encore Support Systems LP 1VH97 dworsley@encoresupportsys 2027698405 Consulting and Staffing Services Energy Systems Group 3FU33 tukwu@energysystemsgroup3017413322 Energy system design and build, Energy Performance Contractin Four Seasons Environmental, Inc 02PC7 rtarkington@fseinc.net 513-360-4081 Complete facilities maintenance and management. NAICS 561210 GDIT (General Dynamic Information TechnologyN/A ellie.kashany@gdit.com 240-449-5124 IT Services & Cyber Security

Harris & Stewart Electrical INC 61RP0 stewart@harrisandstewart.c 6143740322 As a General Contractor we specialize in all things electrical and all other types of wiring also. We have access to skilled subcontractors that can meet any HVAC or water system requirements.

Horizon Industries 1UH05 dale.willia ms@hil.u s

(703) 955-4665 we currently provide cybersecurity support to DLA, including OT facilitie

John Cecil Construction llc 5YRY9 amorgan@johncecilcon.com 7406078309 Federal Construction

Leidos Engineering, LLC 1KUJ9 tristan.bannon@leidos.com 202-297-3522 EV Charging as a Service; Energy Infrastructure; Microgrids, Long Duration Energy Storage, Electrical Systems; Power Systems; Design and Engineering; Electric Vehicle Charging

M.C. Dean, Inc. 3K773 bob.link@mcdean.com 434.249.1940 Design/Build/Operate/Maintain Complex Infrastructure for Mission Critical, Critical Mission and Manufacturing / Process Clients

Merlin Cyber 1XAZ0 ddiegtel@merlincyber.com 7037744804 we are a value added reseller of IT and Cyber Vendor

NSS 82PT2 jrice@nssfed.com 202-215-0334 NSS is a woman-owned Technology and Recruiting solutions company that has partnered with federal contractors and agencies since 2009.

NVE, Inc.

3RKV2

kevin.horihan@nvecorp.com 703-581-5525

NVE, Inc. provides Facilities Operations & Maintenance services that include, but are not limited to, HVAC/R, electrical, plumbing/pipefitting, NCMMS, and BAS services.

Patricia Giesler LLC

7USN7

patricia@gieslerllc.com kevin5404296515

Patricia Giesler, LLC provices cyber security support services, compliance and risk management, program management support services, and technology integration solutions.

Peraton

1U305

Greg.Burke@Peraton.com (858)442-4734 https://www.peraton.com/capabilities/operations/supply-chain-management

In today’s fast-moving and interconnected world, there’s no room for error in global supply chain management (SCM). That’s why Peraton delivers the experts, trust, technology, and real-world solutions that our customers need to deliver goods and services to the people who count on them.

As one of the world’s largest mission capability integrators, we provide unparalleled SCM capabilities that empower our government, essential industries, and society as a whole.

SUPPLY CHAIN MANAGEMENT: Peraton’s supply chain management capabilities are designed to create a seamless and modernized network that delivers value to customers while minimizing costs and risks for all parties involved.

- CONTRACT MANAGEMENT

- ORDER MANAGEMENT .

Peregrine Technical Solutions, LLC. 68PP4 leigh.armistead@goldbelt.co (757) 871-3949 Cybersecurity for FRCS SCIpact LLC N/A Dbakke@scipact.com 651-335-1940 Construction Services Siemens Government Technologies 0DZG1 nilay.mahavir@siemensgovt. 240-470-5066 Any Infrastructure and Energy solution SNR Gov IT N/A steve.peters@snrgits.com 703-313-1174 IT Services

TechFlow

1HQF4

tgrill@techflow.com gdought858-412-8000 571-447-8321

For more than 25 years, TechFlow has been delivering leading-edge solutions in mission critical Government an commercial markets. It's this marriage of longstanding practical experience and forward-thinking innovation that equips us to provide exceptional solutions for our customers. TechFlow’s Energy and Mobility Solutions Business Unit helps our customers leverage advances in energy technology by integrating innovations in energy systems and platforms to drive performance and effectiveness. Our energy-saving technologies and mobility solutions ensure energ is not only used efficiently but employed effectively and securely.

TechFlow has extensive, proven experience and performance providing electric vehicle (EV) and electric vehicle supply equipment (EVSE) charging solutions to the DoD, Army, Air Force, Navy, Marine Corps and the Defense Innovation Unit (DIU). In addition, our Energy and Mobility Services, Base Operation and Range Maintenance and Digital Services Business Units all have experience working together to develop, deliver, enhance, operate, and maintain heating, ventilation, and air conditioning (HVAC) systems, secure Building Control Systems (BCS) and Utility Control Systems (UCS) systems, solutions, applications, and tools.

TechFlow currently provides monitoring, maintenance, and reporting services for thousands of buildings and facilities

TekSynap Corporation 561P9 John.Lyon@teksynap.com 571-241-5857 Our company does it as well as management of many SCADA systems such as ESS/EK

The Building People LLC

6ZLN0

marc.zoel lner@the buildingp

(703) 669-2222

Smart Buildings; Energy & Environmental; Technology Solutions; Facilities Management;

Facilities O&M; Project Management & Engineering; Real Estate & Workplace; Mission Support; Workplace Transformation & Organizational Design

Varcomac 1C7Q1 Richard.finocchiaro.ctr@dla. 301 317 7900 We are a electrical/ security IT installer and maintenance. We currently under contract with Dla at ft belvoi

Weston Solutions

1E0J6 aram.fyad i@weston solutions

5127169598

• Vertical and Horizontal Design-Build/Design-Bid-Build Construction and Renovation

• Secure Construction

• Disaster Response Infrastructure Repair

• Fueling System Cleaning, Inspection, Repair, Maintenance, and Design

• Utility, Mechanical, and Electrical Infrastructure

• Electric Vehicle Charging Station Design/Installation

Y-Tech 48Z26 cgrenville@ytechllc.com (301) 363-2199 Enterprise Cyber, Enterprise IT Support, Software Development, Program & Project Mgmt cgrenville@ytechllc.com mailto:rlambird@americanelevator.2408765560 mailto:Contracts@amyx.com mailto:jack.hatfield@blackwood.ai mailto:dcastille@bluewhaleev.com mailto:sean.caulfield@bmahq.com mailto:twindom@chinooksystems.c mailto:jeff@corsha.com mailto:rbiggers@cybernet.com mailto:joliver@dawsonohana.com mailto:mshea@dragos.com mailto:tmburton@electrosoft-inc.co5714399074 mailto:don@elevatorcontrolservice.301-568-9300 mailto:rtarkington@fseinc.net mailto:ellie.kashany@gdit.com mailto:stewart@harrisandstewart.c mailto:dale.williams@hil.us mailto:dale.williams@hil.us mailto:dale.williams@hil.us mailto:amorgan@johncecilcon.com mailto:tristan.bannon@leidos.com mailto:bob.link@mcdean.com mailto:ddiegtel@merlincyber.com mailto:jrice@nssfed.com mailto:kevin.horihan@nvecorp.com703-581-5525 mailto:patricia@gieslerllc.com mailto:Greg.Burke@Peraton.com http://www.peraton.com/capabilities/operations/supply-chain-management mailto:Dbakke@scipact.com mailto:nilay.mahavir@siemensgovt.240-470-5066 mailto:steve.peters@snrgits.com mailto:tgrill@techflow.com mailto:John.Lyon@teksynap.com mailto:cgrenville@ytechllc.com mailto:cgrenville@ytechllc.com

The Nation’s Combat Logistics Support Agency E s t a b l i s h e d 1 9 6 1

WARFIGHTER ALWAYS

DCSO - J62 - DM

DLA OT Pillar

Equipment Life Cycle Management

Cyber Security Industry Day

Bruce Stouffer, DLA Contracting Services Office (DCSO) R3 Division

Chief April 9, 2024

As of May 2023

WARFIGHTER ALWAYSWARFIGHTER ALWAYS

Purpose

What: DoD/DLA is making some significant changes to how we do business – Cyber Security Requirements and Enterprise-wide Contracts

Plan: Holding Industry Day to share relevant information and provide networking/partnership opportunities.

Agenda

Agenda:

08:00 A.M. – 0930 A.M. Registration 09:30 A.M. - 11:30 A.M. Full/Large Session 11:30 A.M. - 1:00 P.M. Lunch/Networking* 1:00 - 2:30 P.M. - Breakout Sessions by Groupings

Breakout Sessions (This combination of pillars is for discussion purposes only):

Building Control Systems (BCS) / Utility Control Systems (UCS) 1.Electric Vehicle Support Equipment (EVSE) 2.Elevator Systems 3.Electrical & Lighting Systems (Building) and HVAC + Building Automation Systems + Utility Metering Systems 4.UCS: Water Systems (Potable, Sewer/ Waste) and Electrical Distribution (Site)

2:30 P.M. - 3:00 P.M. Break/Networking* 3:00 P.M. - 3:45 P.M. Full Session/Final Remarks 3:45 P.M. – 5:00 P.M. Networking*

* Networking is an important part of this Industry Day

Speakers

• J7/Comments on Acquisition Strategy, General Timelines, etc.

• Bruce Stouffer – DCSO R3 Division Chief

• DM/General Comments on OT Pillar Equipment, DLA sites, etc.

• Shawn Carpenter – Deputy Director, Policy, DLA Installation Management

• J62/ Comments on importance of Life Cycle Management Requirements/Expectations:

Jessica Thomas – Portfolio Manager Enterprise Capabilities DLA J62

• J61/ Comments on importance of Life Cycle Management Requirements/Expectations: Travis Reed – Director, Cyber Resilience

J7

• Acquisition Strategy: DLA is planning on issuing six

(6) separate enterprise-wide solicitations in support of the following six groupings of Building Control Systems (BCS) and Utility Control Systems (UCS) requirements:

• Electric Vehicle Support Equipment (ESVE)

• Elevator Systems

• Electrical & Lighting Systems (Building)

• HVAC + Building Automation Systems +

Utility Metering Systems

• Water Systems (Potable, Sewer/ Waste)

• Electrical Distribution (Site)

J7 Contd.

• DLA OT Pillar equipment is located at one or more of the following DLA Host/Major Locations:

• DLA Headquarters Complex, Fort Belvoir, VA (HQC)

• Defense Supply Center Columbus, OH (DSCC)

• Defense Distribution Center Susquehanna, New

Cumberland, PA

• Defense Supply Center Richmond, VA (DSCR)

• DLA Distribution Depot, San Joaquin, CA (DDJC)

• Contract Type: These regular/preventive maintenance and repair contracts will most likely be awarded as Indefinite Delivery Indefinite Quantity (IDIQ) contracts or GSA Blanket Purchase Agreements (BPA) in support of known routine maintenance work as well as unknown Ad-Hoc work.

Approach: This new Enterprise approach to BCS/UCS allows for the appropriate level of DoD-required cybersecurity measures to be integrated into the planning, design, construction, renovation, and repair of new and existing BCS UCS systems. Therefore, as part of the above requirements, there will be a significant life cycle management cyber security component.

• The Government understands that we are making two significant changes to the way we are doing business:

1. Going “Enterprise-wide/Regional” vs being “Site” specific

• 2. Adding a significant Life Cycle Management Cyber Security component

• Therefore, the purpose/reason for this Industry Day is to not only to inform Industry about our needs/requirements, but also to gather input/feedback from Industry. The Government wants to better understand how to work most efficiently and effectively with current Industry standards and practices.

• Current Status: Conducting market research in an effort to obtain a better understanding of Industry capabilities and then determine an appropriate acquisition strategy.

Major questions we need to answer:

• “Enterprise-wide” contracts or “Regional” contracts

• Small Business or Unrestricted

• Life Cycle Management Cyber Security expertise and capabilities and potential cost

• GSA or Open Market

• Single Award or Multiple Award contracts

General Acquisition Timeline: (Projected/may vary):

• Estimated Value $2M - $35M: EVSE; Elevators;

Potable Water; Electrical Distribution (Site)

Post Draft Solicitation/Hold Pre-Solicitation Conference & Site Visit(s) May/June

Post Solicitation (30 days) June/July Proposals Due July/Aug Tech Eval/Pricing Review/Discussions/etc. Sep thru Nov Contract Award Dec 2024/Jan 2025

• Note: All dates are tentative

• Estimated Value $35M - $100M:

Electrical and Building Lighting Systems HVAC + Building Automation Systems + Utility Metering Systems

Post Draft Solicitation/Hold Pre-Solicitation Conference & Site Visit(s) June/July Post Solicitation (30 – 45 days) Aug/Sep Proposals Due Sep/Oct Tech Eval/Pricing Review/Discussions/etc. Nov 24 thru Feb Contract Award Mar/Apr 25

Note: All dates are tentative

J62 Information Operations – Program Executive Office

• J62B – Enterprise Capabilities Portfolio –The Program Management Office for Operational

Technology systems

– Integration point bringing all DLA and Contractor teams together for a single DLA wide project and program management view

• Collaborating across all DLA stakeholders

• DLA Installation Management and DLA Energy

• IT Cyber Security

• IT Infrastructure

–Management of the OT Enterprise Contracts collaborating with stakeholders across the DLA OT Program areas

OT Pillars

Operational Technology is categorized into eight pillars based on functionality*

Other

• Marquees

• Mobile Range

- User Managed Device (UMD) Mobile Trailer

• Drones

• Solar Panels

• 3D Scanners

• CNC Wood

Router

• Vehicle

Telematics

• Programmable Logic Controllers

• Vertical Lift Modules

• Dimension and Weigh System

• Conveyors

Automated Material Handling

Equipment

• Groundwater Treatment Systems

• Vapor Recovery Systems

• Effluent Monitoring Systems

• Environmental Remediation Systems

Utility Control Systems

• Central Plant Steam Systems

• Water Treatment Systems

• Waste Treatment Systems

• Utility (& Smart) Metering

Building Control Systems

• Building Automation Systems

• Electrical Systems

• Building Lighting Systems

• Elevator Systems

• HVAC

• Vehicle

Charging Systems

Petroleum, Oil &

Lubricants

• Automated Fuel Handling Systems

• Automated Tank Gauging Systems

• Hydrant Fuel Automation Maintenance

• Automatic Fueling Service Station

Fire Protection

• Fire Alarm Reporting Systems

• Fire Suppression Systems

• Mass Notification Systems

Operational Technology Requirements Security

• Electronic Security Systems

• Electronic Key Control

• Intercoms

MILCON / SRM**

*Not all inclusive; **Not a pillar, crosses multiple pillars

Environmental

Lifecycle Management of OT Systems

• Lifecycle management involves overseeing the asset’s full lifespan from planning to deployment to decommissioning

• OT is used to monitor, manage and control physical devices and related processes

• OT generally has a long lifecycle

• Many OT devices have proprietary operating systems

• Special considerations must be taken into account during the lifecycle to ensure minimal operational disruptions

Systems Con't.

• Lifecycle management includes:

–Planning for cyber security when considering new systems –Completion of all requirements for system deployments –Regular updates and maintenance, both hardware and software throughout the full usage of the system for example:

• Updating Firmware, Servers, Switches

• Applying Security Patches, Updating Operating

Systems

• Conducting Periodic Inspections

• Replacing Inoperable Components, etc.

–Secure disposal of the system when decommissioned

Systems

• Risk management is an important part of the lifecycle management of an operational technology system

–Continuous Monitoring and Maintenance is essential to all OT systems

• Track device health

• Collect data

• Identify anomalies

• Proactively address issues

• Identify and correct system vulnerabilities

– Involves monitoring metrics such as device connectivity, utilization, and network traffic to ensure operational efficiency and reliability

Systems

• DLA expects to issue individual task orders (TOs) to support ongoing maintenance of the OT systems

• Maintenance could include touch labor in support of regular system operations as well as cyber security support in line with the DoD RMF Framework requirements

• Contractor Personnel supporting cyber security of these systems are required to meet minimum certification requirements

Systems - References

SYSTEM IDENTIFICATION REFERENCE DOCUMENTS:

1. Committee on National Security Systems Instruction 1253, Security Categorization and Control Selection for National Security Systems, July 29, 2022 2.Federal Information Processing Standards Publication 199, Standards for Security Categorization of Federal Information and Information Systems, February 2004 3.Federal Information Processing Standards Publication 200, Minimum Security Requirements for Federal Information and Information Systems, March 2006 4.Federal Information Security Management Act (P.L. 107-347, Title III), December 2002 5.Department of Defense Instruction 5000.02, Operation of the Defense Acquisition System, January 23, 2020 6.Department of Defense Instruction 5200.39, Critical Program Information (CPI) Identification and Protection within the Research, Development, Test, and Evaluation (RDT&E) Incorporating Change 3, Effective October 1, 2020

2.SYSTEM COMPLIANCE, INSTRUCTIONS AND GUIDELINES REFERENCE DOCUMENTS:

1.44 U.S.C. § 3542, January 2012

2.Department of Defense Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology, July 19, 2022 3.Department of Defense Instruction 5200.44, Protection of Mission Critical Functions to Achieve Trusted Systems & Networks, Incorporating Change 3, October 15, 2018 4.DoD Program Manager’s Guidebook for Integrating the Cybersecurity Risk Management Framework (RMF) into the System Acquisition Lifecycle 5.Defense Acquisition Guidebook (DAG) 6.Department of Defense Directive 8140.01, Cyberspace Workforce Management, October 5, 2020 7.Department of Defense Instruction 8330.01, Interoperability of Information Technology (IT), Including National Security Systems (NSS), September 27, 2022

Systems – References Con't.

SYSTEM IDENTIFICATION REFERENCE DOCUMENTS:

3.SYSTEM CYBERSECURITY IMPLEMENTATION REFERENCE DOCUMENTS:

1.Department of Defense Instruction 8580.1, Information Assurance (IA) in the Defense Acquisition System, July 9, 2004 2.National Institute of Standards and Technology Special Publication 800-82 Revision 3, Guide to Industrial Control Systems (ICS) Security, February 2015 3.UFGS-25 50 00.00 20 Cybersecurity of Facility-Related Control Systems 4.United Facilities Criteria (UFC) 4-010-06, Cybersecurity of Facilities-Related Control Systems

4. PERSONNEL REQUIREMENTS REFERENCE DOCUMENTS:

1.DoD Manual (DoDM) 8140.03 Cyberspace Workforce Qualification & Management Program, dated 15 Feb

5.FRCS GUIDELINES REFERENCE DOCUMENTS:

1.Deputy Under Secretary of Defense (Installations and Environment) Memo dated 19 Mar 14, subject: Real Property Related ICS Cybersecurity 2.Defense Logistics Agency Risk Management Framework Standard Operating Procedures, April 2021 3.Office of the Assistant Secretary of Defense Facility Related Control Systems (FRCS) Master List Memo, October 2020 4.Department of Defense Control Systems Security Requirements Guide Version 1, Release 1, July 14, 2021

Systems

• Inventory of systems, and their components are to be kept current throughout the lifecycle of the system

• Configuration management of all systems will be an important part of lifecycle management

• Systems that can be on a network will be on a network, existing systems will be scheduled to move to a DLA network as part of TOs on these vehicles

–Solution has been stood up for secure remote access to networked systems to allow for remote monitoring

• DLA is in the planning stages of a test/dev environment setup for systems where appropriate, this will provide an environment for standing up system changes prior to production deployment

DM

• DM Focus

• –DLA as an Organization

• –DLA Relationships

• –DM Mission, Vision, and Functions

• –DM Leadership/PWS Locations

• –DM Priorities

• –DM (Select) Staff and Functions

• –DM (Select) Site and Functions

ABOUT

LINE ITEMS

FIVE

MILLION

DLA REGIONAL COMMANDS

6 MAJOR SUBORDINATE COMMANDS

• DLA AVIATION

Manages the supply chain for aviation weapons systems repair parts, flight safety equipment, maps, consumable hardware, environmental products and industrial plant equipment.

• DLA TROOP SUPPORT

Manages the supply chains for food, textiles, construction material and medical supplies and equipment, including pharmaceuticals.

• DLA DISPOSITION SERVICES

Disposes of excess property by reutilization, transfer and demilitarization;

conducts environmental disposal and reuse.

• DLA LAND AND MARITIME

Manages the supply chain for ground-based and maritime weapons systems repair parts, consumable hardware, small arms parts and fluid-handling systems.

• DLA ENERGY

Manages the supply chain for petroleum and lubrication products, alternative fuel and renewable energy, aerospace energy; provides fuel quality and technical support, fuel card programs and installation energy services.

• DLA DISTRIBUTION

Provides storage and distribution solutions and management, transportation planning and management, logistics planning and contingency operations;

operates a global network of distribution centers.

DLA EUROPE & AFRICA HQ: Kaiserslautern, Germany The agency’s primary liaison to U.S. European Command, NATO and U.S.

Africa Command, providing a unified DLA interface for warfighters throughout the areas of responsibility.

DLA CENTCOM & SOCOM HQ: MacDill Air Force Base, FL The agency’s primary liaison to U.S. Central Command and U.S. Special Operations Command, providing a unified DLA interface for warfighters throughout the area of responsibility.

DLA INDO-PACIFIC HQ: Joint Base Pearl Harbor / Hickam, HI The agency’s primary liaison to U.S. Indo-Pacific Command, U.S. Forces Korea, U.S. Forces Japan and U.S. Alaskan Command, providing a unified DLA interface for warfighters throughout the area of responsibility.

WARFIGHTER ALWAYS

47.1B

AND PROVIDED MORE THAN

IN GOODS AND SERVICES FOR FY2023

DM Contd. DLA Relationships

WARFIGHTER ALWAYSWARFIGHTER ALWAYS 24

DM Con't Leadership

Process Management

(DM-A)

Staff Director: Peter E. Halseth Deputy: Bronwyn Parker

Environmental Management

(DM-E)

Staff Director: Nanette Werner Deputy: Kevin Kivimaki

Facilities & Equipment

(DM-I)

Staff Director: Ian Kelly Deputy: D Deputy: Gus Zakhem

Family and Morale, Welfare, and Recreation (DM-Q)

Staff Director: Christopher Conkle

Security and Emergency Services (DM-S)

Staff Director: Bruce A. Thomas

Fort Belvoir

(DM-FF)

Site Director: John Holwick Deputy: Sultan Muhammad

DLA - Distribution (New Cumberland)

(DM-FD)

Site Director: Victor Montefour Deputy: Eric Burkholder

DSC - Richmond (DM-FR - Host)

Site Director: David Gibson Deputy: Thomas “Tom” Reinhard

DSC - Columbus (DM-FC - Host)

Site Director: Kristine Freels Deputy: Edward “Ed” Mikula

DCS - Susquehanna (DM-FS - Host)

Site Director: Robert Montefour Deputy: Robert “Mike’ Loe

DD - San Joaquin (DM-FJ - Host)

Site Director: Jonathan Mathews Deputy: Keryn McFarland

DDS - Philadelphia

(DM-FP)

Site Director: Brian McWatters Deputy: Phillip Dicus

Disp Svcs - Battlecreek

(DM-FB)

Site Director: Willian “Bill” Jerome Deputy: Lorn Morden

DLA - Europe & Africa (DM-FG – Regional Command)

Site Director: Paul Kintz (Acting) Deputy:

DLA - Indo-Pacific (DM-FH – Regional Command)

Site Director: Dr. John Hamilton Deputy: Dean Nakasone

Donald V. Phillips, Director Shawn Carpenter, Deputy Director, Policy Tod Mellman, Deputy Director, Operations

DLA Installation Management (DM)

Priorities for FY 2024 (“Big 3”)

• Warfighter Always: Support DLA MSCs, Regional CDRs, and other customers by adapting to changing directives, threats, and opportunities:

• Provide consistent levels of service supportive of revised “Report to Office” policy

• Deliver measurable positive outcomes to customers that exceed expectations and expand opportunities

• ** DLA Strategic Plan (LOE 1, OBJ 1.2): “Partner with Customers to address challenges & develop solutions”

• Take Care of Our DM Team: (Including DM HQs & Site Employees):

• Measure and Report Safety and Security effectiveness measures

• Develop / invest in our employees (“Build the Bench”) through IDP/EDP/DPMAP/Education/Training

• Execute strategy to address DM culture / Climate results to maintain strengths and address improvement areas

• ** DLA Strategic Plan (CC-A, OBJ A.1): “People are our Most Important Resource”

• Improve DM Program Areas and Support DoD Priorities:

• Obligate Operational Technology (OT) and Climate BCR Funds

• Meet Climate Resiliency Reporting Milestones

• Reduce Project Backlog (OT, ULO, SRM)

– ** DLA Strategic Plan (LOE 4, OBJ 4.1): “Foster innovation and maximize value”

• Implement Enterprise Risk Management and Internal Controls

• Auditability - Identify root causes, document effective solutions, conduct TOD/TOE,

• set ons and close 6+ related NFRs in FY24

• Conduct AMR / SPR/ EPR reviews – share best practice and lessons learned

• ** DLA Strategic Plan (LOE 3, OBJ 3.2): “Provide greater financial transparency to customers”

Warfighter Always (Support DM Customers)

Take Care of our

DM Team

Improve DM Program

Areas

DM HQ Staff - Shawn Carpenter

Deputy Director for Policy

Process Management (DM-A) Environmental

Management (DM-E)

Facilities and Equipment (DM-I)

Family and Morale, Welfare, and

Recreation (DM-Q) Security and

Emergency Services

(DM-S)

DM-I Responsibilities

Facilities & Equipment Directorate (DM-I)

Facilities Sustainment & Equipment (SRM) Facilities Modernization (MILCON) Property & Real Estate

Management Analyst

DM-I Mission:

• Provides policy and staff oversight for installation and facilities management activities for all DLA organizations.

• Advises and assists the DM Director and DLA Director with meeting and sustaining current and future logistics support capabilities for the U.S. Military Services and other valued customers.

• Facilities Sustainment and Equipment (DM-IS)

• Sustainment, Restoration, and

Modernization (SRM)

• Fire Protection

• Energy Resource Management Facility

Related Control Systems

• Fleet Management

• Enterprise Business System (EBS) PP&E

• Audit Support

• Facilities Modernization (DM-IM)

• Military Construction (MILCON)

• Strategic Infrastructure Planning (SIP)

• Audit Support

• Property and Real Estate (DM-IP)

• Property, Plant, and Equipment (PP&E)

• Audit Support

DM Site Functions

• Principal liaison between DLA Headquarters, the Major Subordinate Commands, our Regional Commands in Europe and Africa, and Indo-Pacific regions, and tenant activities surrounding a variety of support activities* such as:

• Family Morale and Recreation Services (Special Events, Community Service)

• Facilities Engineering Operations (public works/utilities, operating equipment, mail distribution and central receiving, real property, accountable property, and general equipment)

• Equipment Maintenance

• Internal Controls / Auditability

• Administrative Services

• Business Management (service agreements, billing, and reimbursements)

• Multimedia support

• Environmental Management

• Security / Fire / Emergency Services

*Tailored by Site and Mission

DM-I Responsibilities

DM Host Sites

Tod Mellman, Deputy Director for Operations

DM Richmond (DLA Aviation) DM Columbus (DLA Land & Maritime)

DM Susquehanna (DLA Distribution - East) DM San Joaquin (DLA Distribution - West)

DM Richmond (DM-FR - Host)

Site Director: David Gibson Deputy: Thomas “Tom” Reinhard

Business Management

Security and Emergency

Services

Installation Operations

DM Columbus (DM-FC - Host)

Site Director: Kristine Freels Deputy: Edward “Ed” Mikula

Business Management

Security and Emergency

Services

Environmental Management

Installation Operations

FMWR

DM Susquehanna (DM-FS - Host)

Site Director: Robert Montefour Deputy: Robert “Mike” Loe

Business Management

Security and Emergency

Services

Environmental Management

Installation Operations

FMWR

DM San Joaquin (DM-FJ - Host)

Site Director: Jonathan Mathews Deputy: Keryn McFarland

Business Management

Security and Emergency

Services

Environmental and

Occupational Health

Installation Operations

FMWR

Environmental Management

FMWR

DM Fort Belvoir

(Support to DLA HQC & the NCR

DM Fort Belvoir (DM-FF - Host)

Site Director: John Holwick Deputy: Sultan Muhammad

Business Management

Security and Emergency

Services

Multi-Media Division

Site Operations Division

Installation Operations

FMWR

• DLA Managed and Controlled Sub-Installation

• Supports 6200 assigned employees

• Tenant Organizations:

o Defense Threat Reduction Agency o Defense Contract Audit Agency o Six other tenant activities

DM Top Challenges

• SRM BCI

• OT Cybersecurity

• Audit Dependencies

• Return to Office Additional Space

• Emergency Responder Manning

Morning Session Question(s) and Answers

QUESTIONS and ANSWERS

BCS/UCS Afternoon Breakout Session(s) Breakdown

BCS/UCS Afternoon Breakout Session(s) Revised

(1) Electric Vehicle Support Equipment (EVSE) - Location: Suite B

• Speakers: J7: Chris Moore; DM: Rob Holt; J61/2: Danielle Gleason, Cassandra Ormsbee, Setoria Ferdinand.

• 2. Elevator Systems – Location: Suite C

• Speakers: J7: James Simms/Carlos Vidro-Martinez; DM: Andrea Terrell; J61/2: Ira Norman, Jason Hale, Ed Thompson.

• 3. Electrical & Lighting Systems (Building) AND HVAC + Building Automation Systems + Utility Metering Systems – Location: Garfield Room

• Speakers: J7: Andre D. Desima; DM: Frank Cole, Shaun Megonnell; J61/2: Marvin Wallace, Patrick Kennedy, Rick Rizzo, Genna Schiner

• 4. UCS: Water Systems (Potable, Sewer/ Waste) and Electrical Distribution (Site) - Location: Suite A

• Speakers: J7: Beverly Williams; DM: Amarjeet Kahlon; J61/2: Kris Phillips, Derrick Jazwinski, Kevin Winz.

Lunch

Lunch/Networking

• 11:30 A.M. - 1:00 P.M.

• Please Report To

• Your Breakout Room(s)

• After Lunch

Electric Vehicle Support Equipment (EVSE)

Electric Vehicle Support Equipment (EVSE)

EVSE Breakout Session

• Electric Vehicle Support Equipment (EVSE)

• Facilitator: Chris Moore

• Speakers:

• J7: Chris Moore

• DM: Rob Holt

• J61/2: Danielle Gleason, Cassandra Ormsbee, Setoria Ferdinand

EVSE Breakout Session Con't.

• Electric Vehicle Support Equipment (EVSE)

• J7: Chris Moore

• General Acquisition Timeline:

• EVSE

Post Draft Solicitation/Hold Pre-Solicitation Conference & Site Visit(s) May/June Post Solicitation (30 days) June/July Proposals Due July/Aug Tech Eval/Pricing Review/Discussions/etc. Sep/Oct/Nov Contract Award Dec 2024/Jan 2025

• Note: Actual dates may vary

• J7: Chris Moore

• Contract Type: These regular/preventive maintenance and repair contracts will most likely be awarded as Indefinite Delivery Indefinite Quantity (IDIQ) contracts or GSA Blanket Purchase Agreements (BPA) in support of known routine maintenance work as well as unknown Ad-Hoc work.

Approach: This new Enterprise approach to BCS/UCS allows for the appropriate level of DoD-required cybersecurity measures to be integrated into the planning, design, construction, renovation, and repair of new and existing BCS UCS systems. Therefore, as part of the above requirements, there will be a significant life cycle management cyber security component.

EVSE Con't.

• This is a Demand Maintenance (DM) contract to provide and implement a comprehensive program for the operation, maintenance, repairs, service, testing, inspection, and certification of Electric Vehicle Support Equipment (EVSE) at the following locations:

• Defense Supply Center Columbus, OH (DSCC)

• DLA Headquarters Complex, Fort Belvoir, VA (HQC)

• Defense Supply Center Richmond, VA (DSCR)

• DLA Distribution Depot, San Joaquin, CA (DDJC)

• DLA Distribution Depot Susquehanna, PA (DDSP)

• DLA Troop Support at Philadelphia, PA*

DLA Total Requirements: 195 EVSE Currently installed:

• 8 Networked Level II, Dual Port Chargers

• 2 Networked Level II, Single Port Chargers

• Year Installed: 2017-2018

• Requirement:

195 EVSE

• 195 new EVSE (primarily Dual Port Chargers, but will include some Single Port Chargers)

• All GSA Leased Vehicles w/GSA WEX cards

• Restricted to GOV Charging (subject to change)

• The Contractor shall provide all personnel, equipment, supplies,

• facilities, transportation, tools, materials, supervision, and other items and non

• personal services necessary to perform DM under the Building Control System

• (BCS) effort as defined in the PWS except for those items specified as

• Government furnished property and services.

• Network Service Plan

• EVSE Maintenance Plan

• EVSE Site Planning Services

• Level II Charger- Dual Port (to include Pedestal installation on “Made Ready

Pad”)

• Level II Charger- Single Port (to include Pedestal installation on “Made Ready

Pad”)

• Cyber Security (FedRAMP certified)

Defense Supply Center Columbus, OH (DSCC) Currently installed:

• One Networked Level II, Dual Port Charger

• Year Installed: 2018

Requirement:

• 47 new EVSE (primarily Dual Port Chargers, but will include some Single Port Chargers)

• All GSA Leased Vehicles w/GSA WEX cards

DLA Headquarters Complex, Fort Belvoir, VA (HQC) Currently installed:

• Two Networked Level II, Dual Port Chargers

• Year Installed: 2017

Requirement:

• 16 new EVSE (Dual Port Chargers))

• All GSA Leased Vehicles w/GSA WEX cards

• Defense Supply Center Richmond, VA (DSCR) Currently installed: One Networked Level II, Dual Port Charger Year Installed: 2018

Requirement:

• 30 new EVSE (primarily Dual Port Chargers, but will include some Single Port Chargers)

• All GSA Leased Vehicles w/GSA WEX cards

• DLA Distribution Depot San Joaquin (DDJC) Currently installed:

• One Networked Level II, Single Port Charger

• One Networked Level II, Dual Port Charger Year Installed: 2018

Requirement:

• 25 new EVSE (primarily Dual Port Chargers, but will include some Single Port Chargers)

• All GSA Leased Vehicles w/GSA WEX cards

• DLA Distribution Depot Susquehanna, New Cumberland, PA

(DDSP)

Currently installed:

• One Networked Level II, Dual Port Charger

• Year Installed: 2018

Requirement:

• 69 new EVSE (primarily Dual Port Chargers, but will include some Single Port Chargers)

• All GSA Leased Vehicles w/GSA WEX cards

• DLA Troop Support at Philadelphia, PA Currently installed:

• One Networked Level II, Single Port Charger

• One Networked Level II, Dual Port Charger

• Year Installed: 2018

Requirement:

• 8 new EVSE (primarily Dual Port Chargers, but will include some Single Port Chargers)

• All GSA Leased Vehicles w/GSA WEX cards

• This is a Demand Maintenance (DM) contract to provide and implement a comprehensive program for the operation, maintenance, repairs, service, testing, inspection, and certification of Electric Vehicle Support Equipment (EVSE) at the following locations:

· Defense Supply Center Columbus, OH (DSCC)

· DLA Headquarters Complex, Fort Belvoir, VA (HQC)

· Defense Supply Center Richmond, VA (DSCR)

· DLA Distribution Depot, San Joaquin, CA (DDJC)

· DLA Distribution Depot Susquehanna, PA (DDSP)

· DLA Troop Support at Philadelphia, PA*

• Electric Vehicle Support Equipment (EVSE)

• J62: Danielle Gleason, Cassandra Ormsbee, Setoria Ferdinand

Systems - References

1.SYSTEM IDENTIFICATION REFERENCE DOCUMENTS:

1. Committee on National Security Systems Instruction 1253, Security Categorization and Control Selection for National Security Systems, July 29, 2022 2.Federal Information Processing Standards Publication 199, Standards for Security Categorization of Federal Information and Information Systems, February 2004 3.Federal Information Processing Standards Publication 200, Minimum Security Requirements for Federal Information and Information Systems, March 4.Federal Information Security Management Act (P.L. 107-347, Title III), December 2002 5.Department of Defense Instruction 5000.02, Operation of the Defense Acquisition System, January 23, 2020 6.Department of Defense Instruction 5200.39, Critical Program Information (CPI) Identification and Protection within the Research, Development, Test, and Evaluation (RDT&E) Incorporating Change 3, Effective October 1, 2020

2.SYSTEM COMPLIANCE, INSTRUCTIONS AND GUIDELINES REFERENCE DOCUMENTS:

1.44 U.S.C. § 3542, January 2012

2.Department of Defense Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology, July 19, 2022 3.Department of Defense Instruction 5200.44, Protection of Mission Critical Functions to Achieve Trusted Systems & Networks, Incorporating Change 3, October 15, 2018 4.DoD Program Manager’s Guidebook for Integrating the Cybersecurity Risk Management Framework (RMF) into the System Acquisition Lifecycle 5.Defense Acquisition Guidebook (DAG) 6.Department of Defense Directive 8140.01, Cyberspace Workforce Management, October 5, 2020 7.Department of Defense Instruction 8330.01, Interoperability of Information Technology (IT), Including National Security Systems (NSS), September 27, 3.SYSTEM CYBERSECURITY IMPLEMENTATION REFERENCE DOCUMENTS:

1.Department of Defense Instruction 8580.1, Information Assurance (IA) in the Defense Acquisition System, July 9, 2004 2.National Institute of Standards and Technology Special Publication 800-82 Revision 3, Guide to Industrial Control Systems (ICS) Security, February 2015 3.UFGS-25 50 00.00 20 Cybersecurity of Facility-Related Control Systems 4.United Facilities Criteria (UFC) 4-010-06, Cybersecurity of Facilities-Related Control Systems

4. PERSONNEL REQUIREMENTS REFERENCE DOCUMENTS:

1.DoD Manual (DoDM) 8140.03 Cyberspace Workforce Qualification & Management Program, dated 15 Feb 2023

5.FRCS GUIDELINES REFERENCE DOCUMENTS:

1.Deputy Under Secretary of Defense (Installations and Environment) Memo dated 19 Mar 14, subject: Real Property Related ICS Cybersecurity 2.Defense Logistics Agency Risk Management Framework Standard Operating Procedures, April 2021 3.Office of the Assistant Secretary of Defense Facility Related Control Systems (FRCS) Master List Memo, October 2020 4.Department of Defense Control Systems Security Requirements Guide Version 1, Release 1, July 14, 2021

• Questions for Industry:

1. Are you able to service all 5 DLA locations, sites? If not, which sites can you service?

2. Are you on GSA?

3. Are you a small business?

4. If you are a large business, do you have a small business plan?

5. What questions and/or recommendations do you have for the

Government?

6. How important is it for you to visit each DLA site? Do we need to have Site Visits for all 5 DLA locations?

Water Systems (Potable, Sewer/Waste) AND Electrical Distribution (Site)

Water Systems (Potable, Sewer/ Waste) AND Electrical Distribution (Site)

Distribution (Site) Breakout Session

• UCS Systems:

1. Water Systems (Potable, Sewer/ Waste)

2. Electrical Distribution (Site)

• Facilitator: Beverly Williams

• Speakers:

• J7: Beverly Williams

• DM: Amarjeet Kahlon

• J62: Kris Phillips, Derrick Jazwinski, Kevin Winz

Distribution (Site) Breakout Session Con't.

• J7: Beverly Williams (For both solicitations)

• Contract Type: These regular/preventive maintenance and repair contracts will most likely be awarded as Indefinite Delivery Indefinite Quantity (IDIQ) contracts or GSA Blanket Purchase Agreements (BPA) in support of known routine maintenance work as well as unknown Ad-Hoc work.

Approach: This new Enterprise approach to BCS/UCS allows for the appropriate level of DoD-required cybersecurity measures to be integrated into the planning, design, construction, renovation, and repair of new and existing BCS UCS systems. Therefore, as part of the above requirements, there will be a significant life

Distribution (Site) Breakout Session Con't.

1. UCS Systems: Water Systems (Potable, Sewer/ Waste)

2. Electrical Distribution (Site)

J7: Beverly Williams

• General Acquisition Timeline:

• Post Draft Solicitation/Hold Pre-Solicitation Conference & Site Visit(s) May/June Post Solicitation (30 days) June/July Proposals Due July/Aug Tech Eval/Pricing Review/Discussions/etc. Sep/Oct/Nov Contract Award Dec 2024/Jan 2025

Water Systems (Potable, Sewer/Waste) AND Electrical

Distribution (Site) Breakout Session Contd.

• UCS Systems: Water Systems (Potable, Sewer/ Waste) AND Electrical Distribution (Site)

• DM: Amarjeet Kahlon

Industry Day Wastewater / Potable Water System

DLA Enterprise IDIQ Maintenance Contract is a program for the operation, maintenance, repairs, service, testing and inspection of Wastewater and Potable Water system at the following locations:

1. DLA Distribution Depot, San Joaquin, CA (DDJC).

2. DLA Distribution Depot Susquehanna, New Cumberland, Pennsylvania (DDSP).

Wastewater / Potable Water System

The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform wastewater and potable water system maintenance services.

• All sites have existing maintenance contract. The major difference in new Enterprise IDIQ maintenance contract is that this contract will include cyber security.

• Enterprise IDIQ Maintenance Contract is a DLA wide contract with specific task orders for each site.

Wastewater / Potable Water System

DLA Distribution Depot, San Joaquin, CA (DDJC) Potable Water System

1. Three water wells, approximately 2000 gpm.

2. One potable water pump house. Two fire water pump houses.

3. One 250,000 gallons overhead steel tank, one 500,000 gallons ground level tank.

4. SCADA system to control and monitor water system.

Wastewater System The treatment process consists of a primary clarifier, two trickling filters, a secondary clarifier, an anaerobic digester, sludge beds, a chlorination chamber, and two percolation/evaporation lagoons. The effluent from the plant used to be chlorinated before it flowed into the lagoons; however, chlorination is currently not required at this facility. The maximum capacity of the system is 350,000 gallons per day (gpd), and the average daily flow is 20,000 gpd. The WWTP is semi-automated, which permits the plant to run 24/7 with minimal direct personnel oversight. Not connected to local utility sewer system.

Wastewater / Potable Water System

DLA Distribution Depot Susquehanna,(DDSP), New Cumberland, Pennsylvania

Potable Water System

1. The installation has no potable water treatment system. The Installation water is supplied to the Installation by the local water utility company, then distributed throughout the site through a government owned distribution system. The system also includes a government owned elevated storage tank and altitude control valve system with HMI interface.

2. The maintenance services required at this location will be limited to only OT and cyber security support.

• Wastewater System

1. The installation wastewater treatment plant (WWTP) and on-site distribution piping

• are currently owned maintained and operated by the government. The system

• includes a SCADA system for plant operations.

2. The maintenance services required at this location will be limited to only OT and

• cyber security support.

Water Systems (Potable, Sewer/Waste) Breakout Session Con't.

• UCS Systems: Water Systems (Potable, Sewer/ Waste) AND Electrical Distribution (Site)

Systems - References

1.SYSTEM IDENTIFICATION REFERENCE DOCUMENTS:

1. Committee on National Security Systems Instruction 1253, Security Categorization and Control Selection for National Security Systems, July 29, 2022 2.Federal Information Processing Standards Publication 199, Standards for Security Categorization of Federal Information and Information Systems, February 2004 3.Federal Information Processing Standards Publication 200, Minimum Security Requirements for Federal Information and Information Systems, March 4.Federal Information Security Management Act (P.L. 107-347, Title III), December 2002 5.Department of Defense Instruction 5000.02, Operation of the Defense Acquisition System, January 23, 2020 6.Department of Defense Instruction 5200.39, Critical Program Information (CPI) Identification and Protection within the Research, Development, Test, and Evaluation (RDT&E) Incorporating Change 3, Effective October 1, 2020

2.SYSTEM COMPLIANCE, INSTRUCTIONS AND GUIDELINES REFERENCE DOCUMENTS:

1.44 U.S.C. § 3542, January 2012

2.Department of Defense Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology, July 19, 2022 3.Department of Defense Instruction 5200.44, Protection of Mission Critical Functions to Achieve Trusted Systems & Networks, Incorporating Change 3, October 15, 2018 4.DoD Program Manager’s Guidebook for Integrating the Cybersecurity Risk Management Framework (RMF) into the System Acquisition Lifecycle 5.Defense Acquisition Guidebook (DAG) 6.Department of Defense Directive 8140.01, Cyberspace Workforce Management, October 5, 2020 7.Department of Defense Instruction 8330.01, Interoperability of Information Technology (IT), Including National Security Systems (NSS), September 27, 3.SYSTEM CYBERSECURITY IMPLEMENTATION REFERENCE DOCUMENTS:

1.Department of Defense Instruction 8580.1, Information Assurance (IA) in the Defense Acquisition System, July 9, 2004 2.National Institute of Standards and Technology Special Publication 800-82 Revision 3, Guide to Industrial Control Systems (ICS) Security, February 2015 3.UFGS-25 50 00.00 20 Cybersecurity of Facility-Related Control Systems 4.United Facilities Criteria (UFC) 4-010-06, Cybersecurity of Facilities-Related Control Systems

4. PERSONNEL REQUIREMENTS REFERENCE DOCUMENTS:

1.DoD Manual (DoDM) 8140.03 Cyberspace Workforce Qualification & Management Program, dated 15 Feb 2023

5.FRCS GUIDELINES REFERENCE DOCUMENTS:

1.Deputy Under Secretary of Defense (Installations and Environment) Memo dated 19 Mar 14, subject: Real Property Related ICS Cybersecurity 2.Defense Logistics Agency Risk Management Framework Standard Operating Procedures, April 2021 3.Office of the Assistant Secretary of Defense Facility Related Control Systems (FRCS) Master List Memo, October 2020 4.Department of Defense Control Systems Security Requirements Guide Version 1, Release 1, July 14, 2021

Water Systems (Potable, Sewer/Waste) Con't.

• Questions for Industry:

1. Are you able to service all 5 DLA locations, sites? If not, which sites can you service?

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .