The objective is to provide the National Guard Bureau (NGB) with a solution to the requirement listed below; Solicitation Number W9133L-08-R-2027 Title: Air National Guard (ANG) MOBILE COMMAND CENTER (MCC).

1 The DIACAP Directive, DODD 8510.01, will be utilized to produce the certification and accreditation package for (C & A) all applicable ANG Network, Enclaves and Systems. Any variations of the installed system will require an additional C & A to be developed for that specific configuration. The Xacta IA Manager will be the tool used to produce the C & A package for the contractor delivered system.
2 The contractor will provide personnel to input C & A and Portfolio Management (PfM) information into the Enterprise Information Technology Data Repository (EITDR).
3 The contractor will ensure that all components of the delivered system will be captured in the Xacta IA Manager tool.
4 The contractor will ensure that all system components are built and base lined IAW current DoD, Air Force, National Institute of Standards and Technology (NIST), Defense Information Systems Agency (DISA) and all other applicable U.S. Government or Department of Defense Regulations, to include all of the Services, Agencies and Combatant Commands and their components, regulations, guidance, mandates, policy and best practices. This will include but is not limited to Security Technical Implementation Guides (STIG), DISA and NSA Security Checklists, Information Assurance Vulnerability Alerts (IAVA) to include IAVM and IAVB announcements, Notice to Airmen (NOTAM), Time Compliance Network Orders (TCNOs) and Maintenance Tasking Orders (MTO).
5 The C & A package will include all configuration details, all security vulnerability patches that are identified and provided by the Program Management Office (PMO) and a lock-down process for the solution components.
6 The contractor will provide the final hard and soft copies of the C&A package prior to starting the site installation at the local site.
7 The contractor will provide a copy of the final configuration baseline documentation for review by the System Designated Accrediting Authority (DAA) prior to departure from the site.
8 The contractor will ensure that all system components that are subject to the Joint Interoperability Test Command certification process complete prior to acceptance by the government. Refer to http://jitc.fhu.disa.mil/testing.htm for specific instructions.
9 The contractor will ensure that their system and its applicable components are certified IAW NSTISSP No. 11 National Information Assurance Acquisition Policy, IA shall be achieved through the acquisition and appropriate implementation of evaluated or validated GOTS or COTS IA and IA-enabled IT products. These products should provide for the availability of the systems, ensure the integrity and confidentiality of information, and ensure the authentication and non-repudiation of parties in electronic transactions. All applicable products will comply with certification via the Common Criteria Evaluation/Validation Process.
10 The contractor will produce all required System, Technical and Overview level drawings as required for the system, drawn IAW DOD Architecture Framework (DODAF) standards.

11 Work will only be accepted from the contractor, through the Contracting Officer and or Contracting Officer Representative (COR).
Attn: Chris Pettigrew Contracting Officer
MSGT Robert Krenke - COR