Encl_0001_Army_EITaaS_Initial_Requirements_Document_2019_06_22.pdf

Version 1.1, 2019-06-20 Page | 1

Army – Enterprise Information

Technology as a Service (EITaaS)

Initial Requirements Document

Solicitation Number: W15QKN-19-R-06JL

Version 1.1, 20 June 2019

Paul Weyrauch

COL, FA

U.S. Army Cyber Command G3

Army – Enterprise Information Technology as a Service (EITaaS) Initial Requirements Document

Version 1.1, 2019-06-20 Page | 2

(U) Revision History

Version# Date Purpose v1.0 30 April 2019 Draft Initial Release v1.1 20 June 2019 Refined Requirements based off market research and vendor feedback

TABLE OF CONTENTS

1. Operational Context……………………………………………….……….…. 2

2. Problem Statement …………………………………………………….……...2

3. Background.……………………………………………………………….……3

4. EITaaS Definition…………………………………………………………….…4

5. LOE1.1 NaaS………………………………………………

6. LOE1.2 End User Services/Devices……………………………………

7. LOE 1.3 Compute & Store….………………………………….……………...5

8. Summary………………………………………………………………………...5

Version 1.1, 2019-06-20 Page | 3

1. Operational Context As the Army drives towards its 2028 Modernization Strategy and postures to the era of great power competition put forth in the National Defense Strategy, we must operate and defend our networks ruthlessly. The Army’s communications network is the foundational weapons platform for the entire force. All Army operations depend on timely, reliable delivery and transmission of data. Today, the Army owns and operates its entire information technology (IT) network and long-distance communications. This model produces slow rates of change and technology adoption that diverges from similar commercial offerings.

An assumption of a wholly service-owned and service-operated model could sub-optimize Army operational readiness, the Army is exploring a new approach for delivering enterprise network and core IT services: Enterprise Information Technology as a Service (EITaaS). The EITaaS pilot will assess the feasibility to deploy commercial solutions for data transport, end-user services, and collaborative data environments for selected Army installations.

An initial EITaaS pilot will allow the Army to evaluate commercial solutions and their ability to strengthen enterprise IT service delivery, improve user experience and integrate with existing government-only systems, architecture, processes and facilities, while maintaining an aggressive cybersecurity posture. Navy (USN) and Air Force (USAF) and National Security Agency (NSA) have already undertaken a similar EITaaS approach and several USAF pilot installations are presently undergoing EITaaS implementations. The Army will leverage USN, NSA and USAF lessons learned to shape its pilot implementation.

The specific purpose of this EITaaS Pilot is to partner with industry to reform existing and future Army IT operations and services delivery through commercial services in order to increase Army readiness, mission effectiveness and IT user efficiencies, and establish standardized, innovative IT services.

2. Problem Statement The Army’s Enterprise Network (Unclassified and Classified), at its current level of investment and pace of modernization, cannot meet the Army’s immediate and future warfighting requirements to enable multi-domain operations by 2028. The Army has 288 bases and other operating locations throughout the world, each with unique hardware configurations, data strategies and application architectures. Due to these inconsistencies, the management and availability of data, hardware and applications are less effective for the user as well as inefficient and expensive. The standard acquisition model of buying hardware/software hinders agility and makes integration, maintenance, and operations between hardware, data and applications extremely difficult to manage. The Army’s data and applications are located across government, tactical, commercial and hybrid cloud capabilities, not in collaborative environments.

Version 1.1, 2019-06-20 Page | 4

3. EITaaS Principles This document defines the initial broad view of the requirements for EITaaS and sets the stage for what the Army needs from a commercial industry partner to meet its immediate and future warfighting requirements. This transformation requires innovation, expertise, knowledge and experience along with proven business processes and procedures. Key tasks are the ability to provide connect, protect, storage, computing, common IT services, hardware, software and networking infrastructure to the point of need (user). The commercial industry partner and the Army will simultaneously adhere to the following principles:

Modernize: IT commercial standard or better to enable Army modernization and readiness

Stabilize: Leverage advantages of industry best practices and innovation

Defend: Optimize against Army networks, mission systems and data

Maintain: Core government expertise to provide oversight and accountability

4. EITaaS Definition Commercial delivery and management of protected IT services from the enterprise to the point of need (user) on the Department of Defense Information Network-Army (DODIN-A). Provides connect, protect, storage, computing, common IT services, hardware, software, and networking infrastructure.

Includes people, processes, and products to plan, secure/protect, prioritize, acquire, operate, and continually improve information technology capabilities to meet user needs:

o Informed by enterprise acquisition, strategic resourcing, and category management o Controlled through governance, performance management, and architecture management o Augments and supports DODIN-A Operations as specified in the Enterprise Information Environment Mission Area o Provides connectivity to all Army Mission Areas

Does not include tactical network, business mission area, warfighting mission area, offensive cyber operations, intelligence systems, weapon systems and inherently government tasks

EITaaS Lines of Effort (LOEs) are:

LOE 1.1: Network as a Service (NaaS)

LOE 1.2: End User Services (EUS)

LOE 1.3: Compute and Store (C&S)

Version 1.1, 2019-06-20 Page | 5

5. LOE: 1.1 NaaS EITaaS Network as a Service (NaaS) includes deployment and operation of secure, reliable, wired, wireless, measured, commercial data and voice networks. This includes Wide Area Network (WAN), Installation Campus Area Network (ICAN), Land Mobile Radio Network Infrastructure, Data Recovery (DR) and Enterprise Network Defense in order to enable access to Department of Defense (DOD) classified/unclassified data and applications from DOD facilities as well as enable access for mobile and remotely located users. Potential vendor solutions will provide a parallel network to the existing DOD infrastructure to migrate existing capabilities, users and services.

The Service Provider will operate Army Enterprise services not provided by the DOD and/or those DOD enterprise services being provided by the Army to DOD customers. Network services must meet or exceed government success metrics, definitions and performance thresholds (Statement of Objectives Table1). Service Provider’s network must provide network services to pilot sites and associated Geographically Separated Units (GSU) with resilient network infrastructure. The EITaaS Solution must interoperate with and as appropriate, integrate with existing Government IT infrastructure applications and services.

Cybersecurity and Enterprise Network Defense The Service Provider will provide enterprise security and defense IAW Federal, DOD, CYBERCOM, and Army Cybersecurity policies and regulations. The Service Provider will collaborate with the Army to ensure that their solutions result in an acceptable level of Cybersecurity risk and mitigations are addressed. The Service Provider will provide security solutions that meet or exceed current DOD and Army Cybersecurity standards, introduce an acceptable level of risk to the DODIN, and employ technologies that improve national security. The EITaaS solution shall include a data centric protection solution to grant secure access to network assets and protect data at rest and in transit.

The Service Provider will enable network defense by providing asset visibility. The Service Provider will provide Enterprise Network Defense capabilities to mitigate existing and emerging threats, internal and external to the EITaaS solution.

The Service Provider will demonstrate the ability to support joint cyber security operations and cooperative work with the Army designated Cyber Security Service Providers (CSSPs) and Regional Cyber Centers. The Service Provider will provide a solution that leverages the DOD Internet Access Point (IAP) for perimeter protection and will have the opportunity to propose commercial IAP at later phases of the pilot.

6. LOE 1.2 End User Services/Devices End User services for classified and unclassified services will include, but are not limited to, end user devices (laptop, desktop, and cellphone) Government Issued and BYOD, multifunction devices, endpoint device security, secure collaboration services that interoperate with DOD capabilities (Defense Enterprise Office Solution (DEOS), Defense Enterprise Email (DEE), Unified Communications and Enterprise

Version 1.1, 2019-06-20 Page | 6

SharePoint), email, chat, and local and regional service desks.

Service Desk solution must have a linkage to local and Army Enterprise Service Desk (AESD); telephony services (integrate with Base Emergency Services (BES);

and other non-IP requirements (i.e.E911, AtHoc, DOD Land Mobile Radio (LMR)).

Service Provider will develop a transition implementation plan to migrate users from the government to the provider’s network. Service Providers will manage Mobile devices to include application management.

Establish the design of new or changed services under the Service Provider catalogue. Provide the systems engineering and technical discipline capability required to design, model, test, pilot, and deploy the infrastructure, systems, and hardware and software components required to deliver all of the Army services across the DODIN-A. Provide management support for all HW/SW enterprise-licensing requirements. Additionally, ensure services performed at EITaaS Pilot sites meet or exceed thresholds in SOO. The provider will develop efficient and effective processes for the design, transition, operation and improvement of IT services.

7. LOE 1.3 Compute and Store The Service Provider will implement and manage cohesive, executable, and secure access to applications, data, and compute and store infrastructure that optimizes collaboration (team, organization, cross-organization), asset management, and compute/store performance. This includes but is not limited to global data access and storage, definitive media library, and data recovery. Additionally, provide users access to a collaborative data environment consisting of knowledge management, workplace collaboration, document and individual storage, and workflow management solutions.

Systems delivered through private, public or hybrid-cloud deployment must adhere to government regulations.

8. Summary

The Army seeks to collaborate with a Service Provider(s) to provide innovative and modernized solutions to transform the Army’s Enterprise Network. EITaaS will leverage best practices to assess whether commercial solutions can provide standardized, innovative, and agile IT services to the Army. The intent of the pilot is to seek innovative IT solutions capable of increasing performance, security and user experience while enhancing data security. Upon successful implementation, EITaaS enables the transfer of government resources to focus on core cyberspace operations, increase readiness and cyberspace effectiveness while enhancing security to ensure successful completion of Army missions.