Statement of Work.pdf

UNCLASSIFIED

COMMON DATA REPOSITORY (CDR)

STATEMENT OF WORK (SOW)

1.0 BACKGROUND

CDR provides a cloud-ready cost effective, yet critical solution to rapidly move data between our Land

Based Test Sites (LBTS) and will ultimately provide similar invaluable support to the fleet. Multiple sites across the NAVSEA network will see a benefit from this system due to CDR’s high speed data transfer and near real-time data analysis. CDR will provide reduced latencies and lower lifecycle cost to the Navy versus traditional data transfer and storage.

2.0 APPLICABLE DOCUMENTS

Original Equipment Manufacturer (OEM) Specifications

3.0 REQUIREMENTS

3.1 The Contractor shall provide the following:

Quantity Part Number Description

1 Navy-EdgeSelect-Gateway CDR Edge Gateway

1 Navy-EdgeSelect-GatewayBundle

CDR Edge Gateway - Single appliance, 96TB

ObjectStore (Prod and DR), 50TB Portal License, integration services

1 CTERA-PEPORTALPLUS-1YR

1-Year CTERA Premium Private Portal+ per 50TB

(stackable)

3.1.1 EdgeSelect-Gateways shall be delivered to Naval Systems Warfare Center Dahlgren Division

(NSWCDD), located in Dahlgren, VA..

3.1.2 The EdgeSelect-Gateway appliance with bundle shall come fully integrated with all included services built in, fully loaded and turn on ready. Contractor shall provide upgraded Gateway Portal services upon receipt of the order.

3.1.3 The Contractor shall supply support labor to install equipment at Dahlgren, VA and

Moorestown, NJ.

3.2 The Contractor shall coordinate with the Technical Point of Contact (TPOC) identified below to complete work when this support becomes identified.

4.0 GOVERNMENT-FURNISHED PROPERTY/MATERIAL/INFORMATION

(GFP/GFM/GFI)

No GFP/GFM/GFI will be provided.

5.0 SECURITY

The Facility Security Clearance Level required is SECRET. Contractors are required to have SECRET level clearances when supporting on-site installation and training. There is no requirement levied for the safeguarding of classified material at Contractor facilities as no classified material is required to be maintained or stored by the Contractor. Contractors are required to have access to Controlled

Unclassified Information (UCI) in support of this effort.

5.1 Electronic Spillages (ES) are unacceptable and pose a risk to national security. An electronic spillage is defined as classified data placed on an information system (IS), media or hardcopy document possessing insufficient security controls to protect the data at the required classification level, thus posing a risk to national security (e.g., sensitive compartmented information (SCI) onto collateral, Secret onto

Unclassified, etc). The contractor's performance as it relates to ES will be evaluated by the Government.

ES reflects on the overall security posture of NSWCDD and a lack of attention to detail with regard to the handling of classified information of IS security discipline and will be reflected in the contractor's performance rating. In the event that a contractor is determined to be responsible for an ES, all direct and indirect costs incurred by the Government for ES remediation will be charged to the contractor.

5.1.1 NSWCDD Security will be responsible for the corrective action plan in accordance with the security guidance reflected on the DOD Contract Security Classification Specification - DD254.

NSWCDD Security will identify the contractor facility and contract number associated with all electronic spillages that involve the contractor. NSWCDD Security will notify the Contracts Division with the contractor facility name and contract number, incident specifics and associated costs for clean-

up. The Contracting Officer will be responsible to work with the Contractor Facility to capture the costs incurred during the spillage clean up. The Contractor is also responsible for taking Information Security

Awareness training annually, via their Facility Security Officer (FSO), as part of the mandatory training requirements. If a spillage occurs additional training will be required to prevent recurrence.

5.2 Portable Electronic Devices (PEDs): Non-government and/or personally owned portable electronic devices (PEDs) are prohibited in all NSWCDD buildings with the exception of personally owned cell phones which are authorized for use in spaces up to and including Controlled Access Areas.

The Contractor shall ensure the onsite personnel remain compliant with this PED policy. NSWCDD instruction defines PEDs as the following: any electronic device designed to be easily transported, with the capability to store, record, receive or transmit text, images, video, or audio data in any format via any transmission medium. PED’s include, but are not limited to, pagers, laptops, radios, compact discs and cassette players/recorders. In addition, this includes removable storage media such as flash memory, memory sticks, multimedia cards and secure digital cards, micro-drive modules, ZIP drives, ZIP disks, CD-RWs, DVD-RWs, MP3 players, iPADs, digital picture frames, electronic book readers, kindle, nook, cameras, external hard dish drives, and floppy diskettes.

5.2.1 Personal Wearable Fitness Devices (PWFDs) marketed primarily as fitness or sleep devices are allowed in all Navy spaces where collateral non-Sensitive Compartmented Information (SCI), classified information is processed, stored, or discussed up to and including secret. User must ensure PWFD is compliant with all requirements in NAVADMIN 216/15, Cyber Hygiene Authorization to use Personal

Wearable Fitness Devices (e.g., FitBit, Jawbone UP, etc.) in Navy Spaces, dated 14 September 2015 and register PWFD in the NSWCDD Fitness Device Tracker.

5.2.2 Personnel requiring the use of Medical Portable Electronic Devices (MPEDS) must submit Form

NSWCDD 5239/1 for SCIF authorization to the SCIF authorizations to the Special Security Officer

(SSO). For SAFF, authorizations follow the guidance provided by the Government Special Access

Program Security Officer (GSSO). Authorizations for use in SAPFs that are co-utilized within

NSWCDD SCIFS require coordination between both the GSSO and SSO. For authorizations to use

MPED in Collateral Classified spaces, submit form to the Special Programs Branch, .

5.2.3 PED’s belonging to an external organization shall not be connected to NSWCDD networks or infrastructure without prior approval from the NSWCDD Information Assurance and Compliance

Branch. This approval will be granted using the TARIS form and action tracker process.

Personally owned hardware or software shall not be connected or introduced to any NSWCDD hardware, network or information system infrastructure.”

5.3 Navy-issued peripheral: Government procured headsets with or without microphones must be wired, use either a 3.5 millimeter (mm) audio jack or universal serial bus (USB) port, cannot contain active-noise cancelling functionality and may be used on systems and may be used on systems of classification up to and including collateral Top Secret. The headsets are considered unclassified when unplugged, and must be unplugged when not in use within classified spaces or when classified discussions are taking place in unclassified spaces.

5.3.1 Government procured Bluetooth earbuds and headsets that do not require a USB dongle or any other physical connection to enable wireless connectivity are allowed for use on government issued tablets, phones, and personal devices in telework environments or unclassified general office space where no classified discussion are occurring.

5.3.2 Web cameras may only be used on systems at the classification level of the space. For example, in a collateral SECRET open storage area an external web camera may be commented to the SECRET workstation only. No camera pass is required for these devices.

5.3.3 Government provided printers and/or scanners are authorized in a telework environment. Users must ensure that any paper or media containing controlled unclassified information (CUI) or unclassified information not authorized for public release is safeguarded by locking in a drawer, cabinet or room.

CUI and unclassified information not approved for public release must be returned to the worksite for destruction.

5.3.4 Government issued peripherals may be used on personal devices.

5.3.5 While connected to any Navy network, whether on site or while in a telework environment, the use of headsets with microphones and web cameras are restricted to official government duties.

5.4 Operations Security (OPSEC): Contractor personnel shall follow OPSEC concepts and principles in the conduct of this requirement to protect critical information, personnel, facilities, equipment, and operations from compromise. All Contractors (including Subcontractors) shall supplement their current security practices by requiring any personnel involved in executing this contract to complete Government-sponsored and administered Operations Security (OPSEC) training. In addition, all Contractors should be aware of the Critical Information and Indicators List (CIIL) for the organization they are supporting as well as the OPSEC plan for NSWCDD. These OPSEC requirements will be in effect throughout the life of the procurement from award through the conclusion of services at the end of the period of performance (PoP) or other procurement termination. The Contractor must immediately notify the Government upon the discovery of any nonconformance with the OPSEC Plan.

5.5 Privacy Program Training: Privacy training is mandatory for all NSWCDD personnel (military, civilian, and contractor) and must be completed annually. Total Workforce Management Services

(TWMS) is the official database for workforce training and is the tool for taking and recording privacy act training. The contractor responsible for ensuring individual annual privacy training requirements are met.

6.0 TRAVEL

The contractor will be required to travel in performance of this contract. The number of trips and types of personnel traveling shall be limited to the minimum required to accomplish work requirements and shall be coordinated with the technical point of contact. All travel shall be conducted in accordance with the Federal Travel Regulations (FTR). The following travel is anticipated: One (1) technician for one (1) day at Dahlgren, VA and one (1) technician for one (1) day at Moorestown, NJ. This support should not exceed $2,000 (including expenses).

7.0 TECHNICAL POINT OF CONTACT