Law Enforcement Officer Flying Armed (LEOFA)

TSA requires a digital Law Enforcement Officer Flying Armed command platform that 1) enables verified law enforcement officers to create traveler profiles with TSA via a secure web site, notify TSA of upcoming flights, and instantly verify their status at the TSA checkpoint using a primary identification (e.g. driver’s license or passport), 2) enables TSA Supervisory Transportation Security Officers, using existing government issued mobile devices, to scan law enforcement primary identification at the checkpoint and receive an instant confirmation or denial of approval to fly armed, 3) enables real-time communication with law enforcement in a specific geo-location via text message, and 4) provides digital law enforcement officer flying armed geo-location dashboards, record keeping, and metrics. To address system security and operational mission readiness requirements, TSA requires the platform and its full capabilities be hosted, managed, and maintained in a FedRAMP High authorized Software-as-a-Service (SaaS) cloud solution/platform environment. The platform cloud and vendor must be NIST SP 800-53 “Rev 5” compliant; certified for ISO27001 (Information Security Management System), ISO 27017 (Cloud Services Information Security), ISO 27018 (Protection of PII), ISO 22301 (Business Continuity Management) and ISO 27701 (Privacy Information Management System), as well as for SOC 2 Type 2 (System and Organization Controls audit including compliance with security, availability, processing integrity, confidentiality, and privacy standards). The platform must be fully “web-based” and fulfill security, scalability, and resiliency FedRAMP high requirements and provide multiple geographically disparate storage and high availability across multiple Cloud regions. The platform must adhere to Federal/DHS/TSA Cybersecurity and Zero-Trust compliance requirements and integrate with existing TSA single sign-on and multi-factor authentication solution (e.g. Okta, PIV). TSA requires vendor support to:

• Conduct and support the TSA PIA processes the platform

• Complete final platform requirements documentation, in collaboration with TSA LE/FAMS Stakeholders

• Configure the platform to satisfy the Requirements Document

o Additional user personas for airport-assigned LEOs and other “read only” accounts

o FlightAware Integration

o NLETS Integration

o Integration of alerts for automated and manual LEO and TSO/Supervisor notifications, including status notifications (approved, rejected), reminders and summaries, and incident related direct notifications.

• Perform technical installation of the platform environment for TSA via the FedRAMP High Authorized Federal Cloud

• Ensure key capabilities and features are implemented, including but not limited to:

o Capability using driver’s license/passport as a lookup

o User personas and account management schemes for Federal LE travelers, Federal Agency Coordinators (responsible for validating LEOFA requests for agency), TSA checkpoint supervisors, TSA regional coordinators (responsible for multiple airports) TSOC users, system administrators.