Final DRAFT_SOW - Deployable_Defensive_Cyber_Operations_System_Modular__(DDS-Mv2) 26OCT26.pdf_V2.pdf

REVISION 3 26 OCT 2026

STATEMENT OF WORK (SOW)

DEPLOYABLE DEFENSIVE CYBER OPERATIONS SYSTEM MODULAR

(DDS-Mv2)

Capability Program Executive Intelligence & Spectrum Warfare (CPE ISW) / Project Manager Cyber Warfare (PM CW) / Product Manager Defensive

Cyber Warfare (PdM DCW)

26 October 2026

1.0 SCOPE AND OBJECTIVES

1.1 Scope

This Statement of Work (SOW) defines the requirements for the contractor to procure, assemble, configure, test, and deliver the Deployable Defensive Cyber Operations System Modular Version 2 (DDS-Mv2) hardware and software integration kits, along with ancillary logistics, technical engineering support, and warranty provisions. The DDS-Mv2 is a mobile, ruggedized compute-and-storage architecture designed to support Cyber Protection Teams (CPTs) employing virtualized defensive cyber platforms across tactical and garrison environments.

1.2 Program Objectives

The contractor shall deliver DDS-Mv2 systems meeting the following core technical and operational criteria:

High-Throughput Ingestion: Sustain network packet capture, processing, and storage at an aggregate throughput of 10 Gigabits per second (Gbps) without dropped packets.

Open & Automated Deployment: Support rapid deployment of Defensive Cyber Warfare (DCW) software suites utilizing industry-standard automation frameworks (e.g., Ansible, Terraform, Aviz Open Packet Broker).

Cross-Domain Interoperability: Support integration into Non-classified Internet Protocol Router Network (NIPRNet), Secret Internet Protocol Router Network (SIPRNet), and coalition/mission partner enclaves.

SWaP-C Optimization: Optimize Size, Weight, Power, and Cooling (SWaP-C) to fit within commercial airline carry-on transit enclosures while maximizing compute density.

Data at Rest & Media Sanitization: Incorporate media and storage sanitization features compliant with DA PAM 25-2-3 and DA PAM 25-2-8.

Remote Management & Secure Segmentation: Provide dedicated Out-of-Band (OOB) infrastructure management via encrypted channels (e.g., VPN, VRF).

1.3 Government Oversight

The Government will not exercise any supervision or control over contractor personnel delivering supplies or performing incidental services under this contract. Contractor personnel shall be accountable solely to contractor management, who in turn remains responsible to the Government for contractual performance (FAR 37.104).

2.0 APPLICABLE DOCUMENTS AND DIRECTIVES

The following publications and standards form a part of this SOW to the extent specified herein. The contractor shall comply with the latest edition/revision in effect at the time of contract award:

AR 25-2: Army Cybersecurity DA PAM 25-2-3: Security Procedures for Data at Rest (DAR) DA PAM 25-2-8: Media Sanitization Procedures AR 530-1: Operations Security (OPSEC) AR 381-12: Threat Awareness and Reporting Program (TARP) Army Directive 2014-05: Policy and Implementation Procedures for

Common Access Card (CAC) Credentialing DoD 7000.14-R, Vol 9: Joint Travel Regulations (JTR) FAR Part 46 / DFARS Part 246: Quality Assurance, Inspection, and

Acceptance DFARS 252.204-7000: Disclosure of Information DFARS 252.232-7003 / 7006: Electronic Submission of Payment

Requests and Wide Area WorkFlow (WAWF) NIST SP 800-88 Rev 1: Guidelines for Media Sanitization Trade Agreements Act (TAA) (19 U.S.C. § 2501 et seq.)

3.0 SYSTEM AND HARDWARE SPECIFICATIONS

3.1 DDS-Mv2 Kit Composition

The contractor shall deliver complete, integrated, and mission-ready DDS-Mv2 kits. Table 3.1 represents a component breakout of one DDS-Mv2 kit and the required quantities for one whole kit. Table 3.1a is separated by two Armory locations and displays the quantities of components each Armory needs to maintain DDS-Mv2 kits. Each DDS-Mv2 kit shall comprise the line items detailed in Table 3.1:

Table 3.1: DDS-Mv2 Baseline Kit Configuration

Ite m

Compo nent

Minimum Mandatory Technical Specification Qt y p er Ki t

1A

High- Density Comput e Node

(SN-

Series)

64 Cores x86-64 Architecture; 512 GB DDR5 RAM; 3x 15TB NVMe PCIe Gen 4+ SSDs; 4TB M.2 Cache Drive;

800GB Solid-State OS Drive; 2x 10G RJ-45 NICs; 4x 25G SFP28 NICs. Removable storage sleds. Drives should be compliant with DA PAM 25-2-8.

1B

Open Ethernet Switch

1U Half-Rack and Short-Depth Enterprise Switch running network OS; minimum 18x 25GbE SFP28 ports and 4x 100GbE QSFP28 uplink ports; 8.75" d

13.73" w

1.74" h

Size

Weight not to exceed 5 lbs

Same speed or better

Same connector interfaces same input voltage

Same or better CPU

Same PCIe and Same or better max throughput

1C

Hardwar e Next- Gen Firewall (Palo Alto PA- 440)

Enterprise Next-Generation Firewall (Palo Alto PA-440 equivalent or higher); minimum 8 physical routed ports;

dedicated Out-of-Band (OOB) management port;

minimum 3 Gbps firewall throughput.

1D

Direct Attach Copper

(DAC)

Cables

(QSFP2

8-

Passive Twinaxial QSFP28 to 4x SFP28 breakout cable (100G to 4x 25G), 2-meter length; MSA and TAA compliant.

4XSFP2

8-DAC-

2M-C)

1E

Transcei ver Modules

(MFM1T

02A-T- C)

100/1000/10000Base-TX SFP+ to RJ-45 Copper Transceivers (Mellanox compatible or OEM certified), 30m reach, TAA compliant.

1F

Field Integrati on Console Adapter (Laptop Console

USB-to-Laptop Crash Cart Adapter (StarTech 2.0 USB or Government-approved equivalent) with instant BIOS-level KVM control.

1G

Tactical Ruggedi zed Transit Enclosur e (Rolling 3 Rack Unit)

Rolling 3 Rack Unit (3U) transit case conforming to FAA maximum carry-on baggage dimensions (22" x 14" x 9").

Impact resistant, waterproof (IP67), dustproof. Configured with internal shock-isolated half-rack/full-rack chassis brackets to house servers, switch, and firewall securely.

1H

Deploya ble Field Backpac k

Heavy-duty, water-resistant tactical pack configured with custom foam/compartments for accessories, external cabling, operator console laptop, and documentation.

1I

System Cabling Accesso ries

Comprehensive power, high-speed patch, grounding, and mounting hardware required for immediate field operation.

Lo t

TBD Server

30TB

E300-12D-10CN6P 3

CTG-E300-12D-DCO-30.7TB (Micron 30.7TB)

*Fully kitted and integrated DCO Compute System *Make, integrate, test custom cable; seat 3rd hard drive, and perform diagnostics on all components on test bench before delivery *C ustom Cable, connectors, and 3rd drive custom harness/assembly *Ice Lake D, X12SDV-10C-SP6F, E300 + 180W power adapter *Advanced Support with media retention for 3 years *Micron 5400 PRO 960GB, SATA, M.2, 1.5DWPD, 22x80mm SED *Micron 7450 PRO 960GB NVMe PCIe 4.0 M.2 22x80mm TCG Opal *Micron 6500 ION 30.72TB NVMe PCIe 4 U.3 15mm, SED OPAL

*System Management Software Suite Node License

Small Form Factor

TBD Server

15TB

E300-12D-10CN6P

15TB

*Fully kitted and integrated DCO Compute System *Make, integrate, test custom cable; seat 3rd hard drive, and perform diagnostics on all components on test bench before delivery *C ustom Cable, connectors, 3rd drive custom harness/assembly. *Ice Lake D, X12SDV-10C-SP6F, E300 + 180W power adapter *Advanced Support with media retention for 3 years *Micron 5400 PRO 960GB, SATA, M.2, 1.5DWPD, 22x80mm SED *Micron 7450 PRO 960GB NVMe PCIe 4.0 M.2 22x80mm TCG Opal *Micron 7500 PRO 15.3TB NVMe PCIe 4x4 U.3 15mm,1DWPD

OPAL

*System Management Software Suite Node License

Small Form Factor

Table 3.1a

For ge Nort h

NETWO

RK

SWITC

H

NETWO

RK

SWITC

H

NETWORK SWITCH ASSEMBLY, SW2050 5

PALO

ALTO

HW PALO ALTO 440 3

Laptop Console

Startech 2.0 USB Laptop Console Crash Cart Adapter 10

Compac t Switch

CISCO Catalyst 9200 Compact Switch 12 port PoE+, 240W,Adv

Laptop Laptop: HP B24GWAV, HP IDS UMA U5225U 8 16 G1iBNBPC

Server 30TB 30

Server 15TB 30

BackPa ck

DDSMv2 BackPack https://www.ogio.com/backpacks/ogio-backpack-2017-renegade-rss.html?pid=spr4704946

** If having issues accessing link be sure to drag curser to highlight link, right click, select “copy with formatting”, then paste in browser.

For ge Sou th

Compac t Switch

CISCO Catalyst 9200 Compact Switch 12 port PoE+, 240W,Adv

Mainten ance

Maintenance Support 500 annual

BackPa ck

DDSMv2 BackPack https://www.ogio.com/backpacks/ogio-backpack- 2017renegade-rss.html?pid=spr4704946

** if having issues accessing link see instructions above.

Laptop Console

Startech 2.0 USB Laptop Console Crash Cart Adapter 10

Laptop Laptop: HP B24GWAV, HP IDS UMA U5225U 8 16 G1iBNBPC

Open Ethernet Switch

Network Switch, NETWORK SWITCH ASSEMBLY 5

Server 15TB 30

Server 30TB 30

PALO

ALTO

HW PALO ALTO 440 3

3.2 Optional Accessory & Ancillary Components

In accordance with FAR 52.217-7 (Option for Increased Quantity—Separately Priced Line Item), the Government may elect to exercise optional CLINs for discrete accessory hardware. When exercised by the Contracting Officer, the contractor shall deliver components conforming to Table 3.2:

Table 3.2: Optional Accessory Hardware Specifications

CLIN Nomenclature Minimum Technical Specification

Option 01 Auxiliary Server Node (3100 Series)

Minimum 20 Cores; 128 GB RAM; 1x 15TB NVMe drive; 800GB OS drive; dual 10/25GbE interfaces.

Option 02 Hardware Network TAP Dedicated Gigabit Network TAP (Gigamon GTAP ASF-21 or direct equivalent); passive optical/copper monitoring for 4x 1/10 Gbps SFP/SFP+ links.

Option 03 Compact Field Switch Cisco Catalyst 9200Cx Series Compact Switch (12-port PoE+, 240W power budget, Network Advantage).

Option 04 CPT Field Laptop Ruggedized/Enterprise Laptop; Intel Core i7 / AMD Ryzen 7 (min 4 physical cores); 32 GB RAM; 1TB NVMe SSD;

non-wireless configuration (physical Wi-Fi/Bluetooth hardware removed or factory disabled at BIOS/board level).

4.0 TECHNICAL AND LOGISTICS SERVICES

4.1 System Warranty and Lifecycle Hardware Support

Commercial Baseline Warranty: The contractor shall provide a minimum one (1) year comprehensive commercial warranty covering all parts, labor, and firmware fixes across all integrated DDS-Mv2 hardware. The warranty period shall commence on the date of formal Government acceptance on DD Form 250 or WAWF Receiving Report. The cost of this baseline warranty shall be included in the firm-fixed unit price of the kits (FAR 46.702).

Transit Enclosure Lifetime Warranty: All primary 3U rolling transit cases shall carry the manufacturer's lifetime replacement warranty against structural failure, water ingress, and latches/handle degradation.

Post-Warranty Technical & Vulnerability Advisory: The contractor shall provide firmware updates, driver packages, and manufacturer security bulletins for thirty-six (36) months post-delivery to mitigate common vulnerabilities and exposures (CVEs).

Logistics Support Plan (LSP): The contractor shall develop and submit an LSP within thirty (30) calendar days of contract award (CDRL A003).

The LSP shall specify:

1. Standard Return Material Authorization (RMA) procedures with a maximum depot turnaround time of ten (10) business days.

2. Point-of-contact directory for OEM warranty claims.

3. Recommended Spares Inventory and Tool, Test, and Diagnostic

Equipment (TMDE) lists.

4.2 Ancillary Maintenance, Integration, and Field Support

The contractor shall provide ancillary engineering, integration, software image loading, field staging, and technical assistance on an as-needed basis to support operational surges.

Ceiling & Authorization: The contractor shall furnish up to one hundred

(500) direct labor hours per contract period of performance.

Pricing Structure: Labor hours shall be reimbursed under a separately identified Contract Line-Item Number (CLIN) at the established, fully burdened hourly rates. Material expenses not covered by warranty shall be reimbursed at actual cost without fee. The additional Maintenance Support will be put on contract as a separate Cost Reimbursable CLIN and reimbursed based on actual costs of ancillary services accrued.

5.0 DELIVERABLES AND DATA RIGHTS

5.1 Contract Data Requirements List (CDRL)

The contractor shall deliver the technical data, plans, and reports specified in Table 5.1 in accordance with DD Form 1423 directives:

Table 5.1: Summary of Contract Data Requirements List (CDRL)

CDRL # Data Item Description

(DID)

Title Delivery Schedule

Distribution

A001 DI-MISC-

81307

Delivery & Inventory Report / Packing Slip (with full BOM)

Accompanying each physical shipment;

electronic copy within 24 hours of delivery

Contracting Officer (KO), COR, Site

POC

A002 DI-MGMT-

80227

Travel Authorization Request & Settlement Documentation

Request submitted NLT 30 calendar days prior to travel departure

COR, KO

A003 DI-SESS-

81785

Integrated Logistics Support Plan

(LSP)

Initial submission 30 days post-award;

updates annually

COR, Product Lead

5.2 Delivery Report and Bill of Materials (BOM)

Accompanying each delivery of hardware, the contractor shall furnish an exhaustive Delivery and Inventory Report (CDRL A001). The report shall detail:

System Serial Numbers and MAC Addresses for all active nodes, switches, and firewalls.

Full hierarchical Bill of Materials (BOM) identifying component OEM, model, part number, and hardware/firmware revision.

Evidence of factory functional testing and quality sign-off.

Commercial warranty certificates and coverage expiration dates.

6.0 PERIOD OF PERFORMANCE AND DELIVERY SCHEDULE

6.1 Period of Performance

The period of performance for this contract consists of a twelve (12) month Base Period and four (4) twelve-month Option Periods, exercisable at the unilateral discretion of the Government pursuant to FAR 52.217-9:

Base Period: 20 July 2027 through 19 July 2028 Option Period One (1): 20 July 2028 through 19 July 2029 Option Period Two (2): 20 July 2029 through 19 July 2030

Option Period Three (3): 20 July 2030 through 19 July 2031 Option Period Four (4): 20 July 2031 through 19 July 2032

6.2 Delivery Milestones

The contractor shall deliver DDS-Mv2 complete kits F.O.B. Destination (FAR 52.247-34) within four (4) months following contract award or the exercise of the respective option period, as outlined in Table 6.2:

Table 6.2: Delivery Schedule by Ordering Period and Destination

Contract Ordering Period

Kit Qty:

Site A (Fort Belvoir, VA)

Kit Qty: Site B (Fort Gordon, GA)

Total Kits Mandatory Delivery Date

Base Period 12 34 46 NLT 120 Calendar Days after Contract Award

Option Period One (1)

12 34 46 NLT 120

Calendar Days after Option Exercise

Option Period Two (2)

12 33 45 NLT 120

Calendar Days after Option Exercise

Option Period Three (3)

12 33 45 NLT 120

Calendar Days after Option Exercise

Option Period Four (4)

12 33 45 NLT 120

Calendar Days after Option Exercise

Program Total

48 134 182

6.3 Delivery Facilities and Advance Coordination

The contractor shall coordinate physical deliveries at least seven (7) calendar days in advance with the Contracting Officer's Representative (COR) and the designated Destination Point of Contact (POC). The Government reserves the right to designate an alternate CONUS delivery facility by providing written notice to the contractor not later than ten (10) calendar days prior to scheduled shipment. Delivery sites are designated in Table 6.3:

Table 6.3: Government Delivery Facilities

Facility Physical Address Site Point of Contact (POC)

Site A: PM DCW Forge

9625 Middleton Road, Bldg 1189-B Fort Belvoir, VA 22060

Yolanda Friendly Tel: 571-425-0251 Email:

yolanda.t.friendly.civ@army.mil

Elliot Kang Tel: 703-859-5790 Email:

elliott.w.kang.civ@army.mil

Site B: PM DCW Armory

421 10th St, Topham IT Facility / RCC1 Fort Gordon, GA 30905

Nicole Provoid Tel: 520-673-6605 Email:

nicole.d.provoid.civ@army.mil

7.0 CONTRACTOR TRAVEL

Contractor travel outside the scope of baseline warranty depot repairs shall be performed only upon explicit written authorization by the Contracting Officer via an approved Travel Authorization Form (CDRL A002).

Cost Reimbursement Standard: Incurred travel costs shall be reimbursed under an unpriced Cost Reimbursable CLIN on an actual expense basis, subject to the allowable cost ceilings established in FAR 31.205-46 and the per diem rates prescribed by the Joint Travel Regulations (JTR).

Prior Approval: The contractor shall submit travel requests to the COR and Contracting Officer at least thirty (30) calendar days prior to ticketing or departure. Unapproved travel expenses will not be reimbursed.

8.0 GOVERNMENT QUALITY ASSURANCE AND ACCEPTANCE

8.1 Inspection and Testing

The Government will inspect all supplies and incidental services at destination within fourteen (14) calendar days of delivery. Inspection will include 100% visual verification of hardware undamaged condition, serial number reconciliation against CDRL A001, and functional power-on validation.

8.2 Formal Acceptance

Formal acceptance of all deliverables shall be executed by the COR via Wide Area WorkFlow (WAWF) Receiving Report (DD Form 250 equivalent).

Acceptance signifies only that supplies conform to observable mechanical and physical specifications; commercial warranty remedies remain fully intact pursuant to FAR 52.246-17.

9.0 SECURITY AND ACCESS REQUIREMENTS

9.1 Installation Physical Access and Background Investigations

Contractor personnel requiring access to Army-controlled installations, tactical operating centers, or facilities shall comply with all local installation commander physical security protocols.

Tier 1 Background Adjudication: Personnel requiring unescorted access to government facilities or networks shall possess a favorably adjudicated Tier 1 (T1) investigation (or higher) in accordance with Army Directive 2014-05.

Common Access Cards (CAC): CAC issuance will be limited to personnel demonstrating a direct contractual requirement for physical access to multiple DoD facilities or logical access to DoD information systems. The contractor shall coordinate all CAC applications through the designated Government Trusted Agent (TA) and COR.

9.2 Mandatory Security Training

Contractor personnel performing work on an Army installation under this contract shall complete the following annual training courses and provide certificates of completion to the COR within thirty (30) calendar days of starting performance:

Anti-Terrorism (AT) Level I Awareness Training: Mandatory for all personnel requiring physical installation access. Available online at Joint Knowledge Online (JKO) (https://jko.jten.mil).

Operations Security (OPSEC) Level I Training: Mandatory per AR 530-

1. Available online via the Army Training Information System (https://learn.atis.army.mil).

Threat Awareness and Reporting Program (TARP): Mandatory per AR 381-12 for personnel holding a security clearance or accessing controlled unclassified/classified data environments.

9.3 Public Release of Information

Pursuant to DFARS 252.204-7000, the contractor shall not release to anyone outside the contractor’s organization any unclassified or classified information pertaining to this contract, any associated program, or technical data developed hereunder, without prior written approval of the Contracting Officer. Requests for public release shall be submitted to the Contracting Officer at least forty-five (45) calendar days prior to the proposed release date.

10.0 CONTRACT ADMINISTRATION AND CHANGES

10.1 Contracting Officer Authority

In accordance with FAR 1.602, the Contracting Officer is the only individual legally authorized to direct changes, obligate funds, or modify any terms, conditions, specifications, delivery schedules, or pricing of this contract.

10.2 Technical Direction

The COR may provide technical clarification and guidance within the established scope of the contract; however, technical direction that alters the cost, quantity, quality, scope, or delivery schedule is strictly unauthorized. If the contractor interprets any communication or guidance from the COR or technical personnel as a change to the contract, the contractor shall immediately notify the Contracting Officer in writing before executing the work. Work performed outside the authorized scope without Contracting Officer approval will be deemed voluntary and non-reimbursable (FAR 52.243-1/2).

11.0 INVOICING AND PAYMENT INSTRUCTIONS

11.1 Electronic Submission via Wide Area WorkFlow (WAWF)

Pursuant to DFARS 252.232-7003 and 252.232-7006, all invoices and receiving reports shall be submitted electronically through the Procurement Integrated Enterprise Environment (PIEE) WAWF module (https://piee.eb.mil/).

11.2 Routing Codes

The contractor shall utilize the following routing information when generating invoices and Receiving Reports in WAWF:

Issue By DoDAAC: [Insert Issuing Contracting Activity DoDAAC] Admin By DoDAAC: [Insert DCMA or Cognizant Admin DoDAAC] Pay Official DoDAAC: [Insert DFAS Payment Center DoDAAC] Inspection and Acceptance DoDAAC: W5095T (PdM Defensive Cyber

Warfare) Service Approver / COR: [Insert COR Email Address and DoDAAC]