Sources Sought for Commercial Solutions for Classified (CSfC) capability for Naval Air Warfare Center Aircraft Division (NAWCAD) Digital/Network Applications (DNA) Department

Sources Sought for Commercial Solutions for Classified (CSfC) capability for Naval Air Warfare Center Aircraft Division (NAWCAD) Digital/Network Applications (DNA) Department DISCLAIMER THIS SOURCES SOUGHT IS FOR INFORMATIONAL PURPOSES ONLY. THIS IS NOT A REQUEST FOR PROPOSAL. IT DOES NOT CONSTITUTE A SOLICITATION AND SHALL NOT BE CONSTRUED AS A COMMITMENT BY THE GOVERNMENT. RESPONSES IN ANY FORM ARE NOT OFFERS AND THE GOVERNMENT IS UNDER NO OBLIGATION TO AWARD A CONTRACT AS A RESULT OF THIS ANNOUNCEMENT. NO FUNDS ARE AVAILABLE TO PAY FOR PREPARATION OF RESPONSES TO THIS ANNOUNCEMENT. ANY INFORMATION SUBMITIED BY RESPONDENTS TO THIS TECHNICAL DESCRIPTION IS STRICTLY VOLUNTARY. INTRODUCTION NAWCAD DNA Department, under the Digital Analytics Infrastructure and Technology Advancement (DAiTA) Group, at Patuxent River, MD is seeking information regarding the technical capabilities of potential sources for CSfC capability to support the Naval Air Systems Command (NAVAIR) / NAWCAD Information Technology (IT) Enterprise requirements. The intention of this sources sought is for market research purposes pursuant to Federal Acquisition Regulation (FAR) Part 10. Responses to this sources sought will be utilized to determine the government's acquisition strategy. PROGRAM BACKGROUND The NAWCAD DNA Department, in cooperation with the NAVAIR Head Quarters Digital Group, has a requirement for acquisition, integration, deployment and sustainment of a Navy Enterprise Mobile Classified Computing (NEMCC) capability. Specific support tasking includes end user device provisioning, classified network and applications integration support, solution certification and accreditation, hardware and software sustainment, hardware and software troubleshooting, help desk and sustainment. Tasking will be performed in collaboration with the DNA Government and other Contractor team members to support the IT enterprise environment for NEMCC related requirements. The NEMCC capability was developed and initially demonstrated under contract N00421-20-D-0072. The NEMCC capability is comprised of a National Security Agency (NSA) registered enterprise CSfC and Virtual Desktop Infrastructure (VDI) that will provide US Government's Secret Internet Protocol Router Network (SIPRNet) and Secret Defense Research Engineering Network (SDREN) users with regionalized remote secure access. The Government has deployed a mobile access capability package solution utilizing Microsoft Surface Pro Tablets, which required all of the devices to be physically collected periodically for provisioning of new device certificates. This pilot capability is to be sunset in favor of a more reliable and easier to maintain solution, which will utilize initially the mobile access capability package in addition to the multi-site capability package at a later date. The Government has initially demonstrated the Archon ZV laptop platform as a follow on approach due to the over the air Key Management Algorithm (KMA) for the End User Device (EUD) coupled with the computer in computer design for end user ease of use. PLACE OF PERFORMANCE The place of performance for this effort is 30% Contractor Site and 70% Government Site. The support will be predominantly at Patuxent River, MD and may shift to other NAVAIR locations as needed to support the mission. REQUIRED CAPABILITIES The Government's requirement: NSA CSfC Trusted Integrator NEMCC system: EUD consistent with NSA's CSfC Mobility Access Capability Package (MACP) 2.5 and capable of solution expansion to support NSA Multi-Site Capability Package Data-At-Rest Capability Package (DARCP) and all applicable annexes Fully integrated EUD with no additional external end user peripheral components required for operation Runs a secure separation kernel Contains a fully integrated retransmission device Supports Wired, Wi-Fi, or LTE internet connectivity Configurable from EUD Updating/patching exclusively over the air - no user configuration permitted FIPS 140-2 Self Encrypting Hard Drive FIPS 140-2 / FIPS 201 Integrated Smart Card Reader Trusted Platform Module 2.0 Provisioning process must include provisioning of certificates and pre-hardened image meeting applicable STIG guidelines Includes certificate management capability to provision, monitor, and revoke non-person entity certificates Remote management system for EUDs Demonstrated fully operational deployment for other DoD or other US Government Intelligence Agencies Required Associated Services Break/fix/upgrade/provisioning support for all EUD's. The service may include repairs, upgrades, or installation of systems, components, networking, or software. Break/fix/upgrade support for the Data Center components supporting USNAS CSfC As-a-Service location. Solution components are defined as all software/hardware beginning at the Black Firewalls to the Red Firewalls and all associated components between these boundaries. NSA Solution Registration: Ensure solution maintains compliance with NSA CSfC capability package requirements to include engineering, IA and documentation support for re-registration of existing solution and re-registration compliant with new requirements, within NSA required timeline. NEMCC Help Desk Services Remote telephone-based support for the EUD. Basic troubleshooting and RMA (need to spell this out) processing for EUD's. Help desk support will provide 24/7/365 coverage. Serving as the first points of contact seeking EUD technical assistance over the phone or email. Performing remote troubleshooting through diagnostic techniques and pertinent questions. Determining the best solution based on the issue and details provided by the customer. Administration Perform CSfC system troubleshooting, hardware, and software health diagnostics, solution patch deployment, and solution status reporting. Administration will be supported by personnel remotely, or on-site, as needed. Engineering Support Provide EUD solution advanced troubleshooting with root cause analysis and guidance on system level patching and release upgrades. Engineering is supported by personnel remotely, or on-site, as needed. Integration Architect Support Provide expert troubleshooting for highly complex solution problems, integrates with developers and third party Original Equipment Manufacturers (OEM) to troubleshoot or enhance the capabilities of the solution. Remote technical support. Development Support Provides developer level support to troubleshoot programming related issues or code new solutions for emerging capabilities. Integrated with third party OEM's to generate custom code as required. Remote technical support. Configuration Management Includes Configuration Management (CM) support for the entire CSfC solution ensuring technical capabilities are maintained. CM support services include: Maintenance of the Configuration Management Database (CMDB) Monitoring and validation on a monthly basis. CMDB will be established utilizing the Archon Director Suite or a Customer provided enterprise CMDB. Apply infrastructure and EUD security patches identified by NAVAIR security personnel. Provide solution reporting metrics to NAVAIR including status, customer utilization, and security compliance reports on a monthly basis. Provide any updates to provisioning software components to ensure NAVAIR has the latest stable software releases, security patch revisions, and configuration component updates. Additional Requirements: Top Secret Facility Security clearance with safeguarding up to Secret Possess and maintain Defense Contract Management Agency (DCMA) approved business systems for Property Management and Purchasing, throughout contract performance Capability statements must show proof of Trade Agreement Act (TAA) compliance for all required parts and/or products. CONTRACT INFORMATION Anticipated type of contract is a Firm Fixed Price (FFP) Indefinite Delivery Indefinite Quantity (IDIQ) 2. Estimated equipment quantity is as follows: Devices (laptops) qty. 400 each year Premium Integration Services per year, qty. 1 Annual Software license renewal, quantity is coincidental with number of deployed devices Hardware sustainment (repair/replace/fix) per year, qty. 1 scaled based on number of deployed devices 3. Anticipated Period of Performance (PoP) is 03/01/2022-02/28/2027. This is inclusive of one base year plus four one-year options. ELIGIBILITY The anticipated North American Industry Classification (NAICS) code for this requirement is 541519- Other Computer Related Services, computer with a size standard of $30 million dollars. The Product Service Code (PSC) is 7E21- Mobile device products (Hardware & perpetual license software). SUBMISSION DETAILS Interested vendors should submit a capabilities statement in a document of no more than 15 pages. Capabilities statements must be formatted using a Times New Roman 12-point normal font (no reduction permitted), single-spaced with 1-inch margins all around, and formatted for standard 8.5 x 11 inch paper. All pages should be numbered with page numbers. Graphs and tables shall be presented in no smaller than a 12-point font if applicable and should contain a grid, which allows values to be read directly from the graph. Graphic resolution, including such data as tables or charts, should be consistent with the purpose of the data presented. This document shall specifically address, and demonstrate the vendor's capability to meet, the required capabilities noted in this posting. Interested vendors must respond to all level one bullets under the government requirement and all bullets under the NEMCC System requirements. Responses that are missing content shall be deemed undeterminable. The responses will be evaluated based upon the technical capability of their solution. The Offeror is advised that the Government may incorporate any portions of the Offeror's capability statement into the resulting contract. In presenting material in the capability statement, the Offeror is advised that quality of information is more important than quantity. Clarity, brevity, and logical organization shall be emphasized. All responses shall include Company Name, CAGE Code, Address, Business Size, and Points-of-Contact (POCs) including name, phone number, fax number and mailing address. The capability statement package submissions shall be submitted electronically to Linda Loving at linda.s.loving2.civ@us.navy.mil, no later than 04:00 PM Eastern Time on 20 January 2022. All responses must be sufficient in detail to permit agency analysis to establish bona fide capability to meet requirements. No phone calls or questions will be accepted.