SOURCES SOUGHT
D -- TSSAP Quick Response Capability
- Notice Date
- 6/25/2007
- Notice Type
- Sources Sought
- NAICS
- 541330
— Engineering Services
- Contracting Office
- Department of the Air Force, Air Combat Command, AF ISR Agency, AF ISR Agency/A7K 102 Hall Blvd, Ste 258, San Antonio, TX, 78243-7091, UNITED STATES
- ZIP Code
- 00000
- Solicitation Number
- Reference-Number-TSSAPQuickReactionCapability
- Response Due
- 7/9/2007
- Archive Date
- 7/24/2007
- Description
- The Information Operations Technology Division of the Information Operations Directorate, a major component of the Air Force Information Operations Center (AFIOC) is currently seeking sources for a potential requirement to support the TSSAP for quick response capability (QRC) to provide comprehensive security assessments on both DoD and non-DoD telephone systems. The requirement entails the test and evaluation of legacy through ultra-modern telecommunications equipment deployed/installed at designated sites, the meticulous documentation of findings in a pre-described format, and the delivery of such findings as instructed. The QRC team may/may not be directly involved in the maintenance/repair of the system under test (SUT). This is a Sources Sought Synopsis only. This is not a solicitation announcement. This synopsis neither constitutes a Request for Proposal, nor does it restrict the AFIOC/IOT TSSAP to an ultimate acquisition approach. No contract will be awarded from this announcement and requests for a solicitation will not receive a response. No reimbursement will be made for any costs associated with providing information in response to this announcement. Any information submitted by respondents to this synopsis is strictly voluntary. This Sources Sought Synopsis is in support of a market survey being conducted by the TSSAP to determine potential sources capable of fulfilling all requirements associated with supporting the test and evaluation of legacy through ultra-modern telecommunications equipment. Any resultant contract is anticipated to be a two (2) year indefinite quantity / indefinite delivery (ID/IQ), cost plus fixed fee type of contract. Firms responding to this sources sought synopsis are also requested to provide the TSSAP with relevant experience related to all requirements and knowledge areas included in this Sources Sought Synopsis. Responses must be submitted electronically to Bill Kaufman, Contracting Officer at William.kaufman@lackland.af.mil by 3:00 p.m. Central Daylight Time on 9 Jul 07. In the event that electronic submission is not possible, responses can be forwarded in hard copy to the following address: AF ISR Agency /A7KA, Attn: Bill Kaufman, 102 Hall Blvd, Ste 268, San Antonio, TX 78243. If responses are mailed, they must be received by 9 Jul 07. No phone calls will be accepted. BACKGROUND: The Telecommunications Switch Security Assistance Program is a DISA-funded program that provides Information Assurance (IA) testing for Army, Navy, Air Force, Marines & Coast Guard-sponsored telecommunications components. Testing is most often conducted locally within a controlled lab environment on one or several test components to simulate real-world conditions according to a test plan. Results are often combined with other test results sometimes conducted at alternate or remote sites with final reports provided to the Functional Security Officer (FSO), a DISA interim authorization team that combines results, team feedback, and vendor mitigations for any and all findings then forwards the final report to the Defense System Acquisition Working Group (DSWAG), the designated approval authority (DAA) for the Approved Products List (APL). GENERAL TASKS: Task 1: Quick Response Support: The contractor shall provide Quick Response Support (QRS), initiating deployment strategy within two (2) hours, executing a checklist as requested by the project QAP or assistant QAP. Travel, including extended travel to CONUS or OCONUS QRS site, may be required throughout the duration of the contract. Task 2: Technical Support: The contractor shall provide technical support and representation in government-sponsored AF and national-level technical interchange meetings, briefing results as the government advocate and educating site personnel on findings. The contractor shall attend meetings in the capacity of a systems engineer providing specific knowledge in software and hardware systems, and application and network protocols. Preparatory research and technical documentation of meetings shall be required. Task 3: Software Maintenance and Testing Support: The contractor shall provide software programming and unit testing support for existing telecommunication assessment tools and procedures to isolate telecommunication vulnerabilities. The contractor shall provide software and maintenance support for SwitchGuard, VoiceGuard, and other software application tools that monitor telecommunications switches for unauthorized configuration changes, unauthorized access, or vulnerable configuration settings. Task 4: Telecommunications Concept Exploration: The contractor shall research and explore new telecommunication technologies, protocols, products, services, and configurations for vulnerabilities that could affect AF, DoD, and commercial networks. Preparatory research for unit test plan and documented findings shall be required. Task 5: Training Government Personnel: The contractor shall provide on-the-job training (OJT) for government personnel introducing, demonstrating, and/or maintaining new technologies and capabilities employed, locally or remote, as required for AFIOC/IOT personnel to support future TSSAP missions. Task 6: Specialized Engineering Support and Interagency Coordination: The contractor shall understand the engineering concepts of Division Time Multiplexing (DTM) technology used in Voice over Internet Protocol (VoIP) systems. The contractor shall research and validate intrinsic values associated with communication protocols used in VoIP technology to develop generic information assurance test plans (IATPs) for inter-agency security testing. This effort will focus on the H.323. Protocol (which defines protocols that provide audio-visual communication sessions) on any packet network including H.225 (definition of messages), Q.931 (more recently used as part of the VoIP H.323 protocol stack in some mobile phone transmission systems) and IPv6 (increasing the number of addresses available for networked devices), primarily to identify and establish testing parameters allowing teams the capability to measure compliance of commercial-off-the-shelf (COTS) products against DoD established standards. The contractor shall deliver a recommendation list of proven test tools or equipment to be utilized by the inter-agency testing teams for evaluation. The contractor shall develop and/or recommend modifications to AF and DoD telecommunication security policies and procedures. Task 7: Engineering Support to Identify Telecommunications Vulnerabilities and Countermeasure Development: The contractor shall provide engineering support to identify vulnerabilities in telecommunications systems and develop countermeasures. Countermeasure development can include but are not limited to: the development of hardware, software, policies, or procedures to counter vulnerabilities in commercial and government telecommunication technologies, products, protocols, services, and policies as well as the development of assessment tools to rapidly identify unauthorized access, configurations, or changes to telecommunication technologies. Telecommunication protocols shall be researched for vulnerabilities that could affect AF, DoD or commercial networks. The contractor shall provide White Papers documenting findings, solution recommends, and evaluation methodologies. The contractor shall be familiar with AT&T switching systems translations and signaling protocols (T1, ISDN, Q.931). The contractor shall also have experience with the following cellular network protocols: Time Division Multiple Access (TDMA) and Code Division Multiple Access (CDMA). Task 8: Test and Assessment Facility Engineering Support: The contractor shall coordinate, schedule, and establish schedules and program use of test resources. The contractor shall develop an information assurance test plan. The contractor shall evaluate the results of the test plans, reports, and methodologies to ensure compliance within the specified government requirements. Contractor shall have extensive background in AF and DoD telecommunications systems architectures and interpretation skills to attend and contribute to national level committees. Contractor shall have knowledge of AF information assurance, COMSEC, COMPUSEC, OPSEC and other intelligence functions. Task 9: Engineering Support for Information Assurance (IA) Vulnerability Assessments and Testing: The contractor shall conduct remote and on-site Phase I Security Technical Implementation Guide (STIG) testing, Phase II Internet Protocol penetration (IP PEN) testing, Phase III Telephony system functional/information assurance (IA) testing and vulnerability assessments and testing as directed by the AFIOC. The contractor shall report findings providing engineering support to evaluate vendor products for vulnerabilities. Government agencies requesting IA testing could come from the Defense Information Systems Agency (DISA), Air Force Communications Agency (AFCA) as well as other government and commercial customers. Products could be any telecommunications device that touches the DSN network. Some of the products include the Nortel MSL 100 switch, Avaya Switch, multiplexers, and other type of telephone management products or handsets CONTRACTOR QUALIFICATION REQUIREMENTS: Contractor expertise must include: ?? Software development and project management capabilities allowing for maintenance & enhancement of TSSAP developed test components using these languages: ? C ? C++ ? Java ? Database development ? Perl Scripting ?? Advanced comprehensive understanding of network architectures for local area networks (LAN) and wide area networks (WANs) including: ? OSI Network Model ? Network Protocols ?? Comprehensive background in telephony including: ? Security Tools for telephony ? Air Force and DoD telephony equipment and infrastructure ? Telephone Switches and peripheral devices that support phone ?features.? ? Software or hardware patches ?? The working environment requires but may not be limited to: ? Travel to Government or remote facilities ? A quick response capability in CONUS or OCONUS stations ? Each person must already possess at least a SECRET clearance but TS/SCI is preferred
- Place of Performance
- Address: San Antonio TX
- Zip Code: 78243
- Country: UNITED STATES
- Zip Code: 78243
- Record
- SN01326992-W 20070627/070625220552 (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |