MODIFICATION
D -- TRANSPORTATION NETWORK SECURITY SUPPORT
- Notice Date
- 10/26/2011
- Notice Type
- Modification/Amendment
- NAICS
- 541512
— Computer Systems Design Services
- Contracting Office
- Department of Transportation, Research and Innovative Technology Administration, Volpe National Transportation Systems Center, 55 Broadway, Kendall Square, Cambridge, Massachusetts, 02142-1093
- ZIP Code
- 02142-1093
- Solicitation Number
- DTRT57-12-Q-80005
- Archive Date
- 11/22/2011
- Point of Contact
- Donald MacGee,
- E-Mail Address
-
Donald.MacGee@dot.gov
(Donald.MacGee@dot.gov)
- Small Business Set-Aside
- N/A
- Description
- The United States Department of Transportation (DOT), Research and Innovative Technology Administration (RITA), Volpe National Transportation Systems Center (Volpe Center) in support of the Federal Aviation Administration (FAA), the Department of Homeland Security (DHS), and the National Highway Traffic Safety Administration (NHTSA) intends to solicit on a non-competitive basis with Information Tool Designers, Inc., (ITD), to support a previously developed government-owned airborne network security simulator to develop an ANSS scenario and experiment for key airborne network security technologies (e.g. software data loading or EFB and Gatelink) with the goal of providing minimum recommendations (e.g., security checklists). The ANSS scenario and experiment shall include a use case, functional description, and architecture. The Volpe Center also requires the contractor to review and provide comments to ensure technical completeness and accuracy of the ANSS aircraft equipment manufacturer Flight Acquisition, Storage, and Transmission (FAST) System Penetration Test Report being developed by the UK Center for Protection of National Infrastructure (CPNI). The contractor shall also support teleconferences with an aircraft equipment manufacturer and the Volpe Center regarding an aircraft equipment manufacturer's In-Flight Entertainment (IFE) ANSS Penetration Testing and this activity shall require a trip to an aircraft equipment manufacturer. The contractor shall support two teleconferences to discuss agenda items, such as: technical discussions with an aircraft equipment manufacturer regarding safety and security requirements for the IFE system, possible future CSET on the IFE system, operational security scenarios for ANSS testing, and IFE security control requirements. The purpose of the aircraft equipment manufacturer trip will be to participate in a demonstration of the IFE system and continue follow-up discussions from the prior two teleconferences (no preparation for the trip will be required by the Contractor). In addition, the Volpe Center is supporting the FAA in developing a Draft Aircraft Security Catalog/Airborne Network Security Guidance that is consistent with the DHS CSET tool. The Contractor shall develop the Guidance Document that instructs FAA certifiers on minimum level of security controls for specific types of airborne network components and FAA plans to develop an FAA Advisory Circular in 2011/2012 based on this guidance. The Contractor shall provide research and prepare a report that will be used for input for the development of cyber-security recommended practices to be incorporated in the Security Guidance Document that can be referenced from regulations, standards, and guidance. Contractor support shall include: meeting coordination with Volpe and FAA, and participation, agenda development, briefing development, coordination with document authors, content development/review, and bi-weekly teleconferences. The following items are the 3 major sections of the document that the Contractor shall provide input on: • General Guidance for the Aircraft Certification Offices (ACOs) - High-level document referencing checklist tools to aid in this determination, templates for special conditions/issue papers and security plans • Supplementary Material - Issue Paper/Special Conditions templates • Recommended Best Practices - Minimum security baseline recommendations for securing standard Aircraft Components and archetypes (e.g. electronic flight bags (EFBs), Gatelink, 3gcellular, field loadable software, user modifiable software, commercial off-the-shelf (COTS) avionics devices, integrated modular avionics (IMAs), internal/external connectivity, and wireless servers/routers) and the Contractor shall attend an automotive workshop with pertinent public sector and private sector automotive and aviation industry experts to perform a sample risk assessment of automobile control system applications. The Contractor shall develop high-level use case and risk assessment that can be used as a template to perform a future in-depth risk assessment. The contractor shall develop a preliminary Automotive Systems Characteristic Report which will be a key element of the overall assessment. The contractor shall use the National Institute of Standards and Technology (NIST) 800-30, Risk Management Guide for Information Technology Systems, http://csrc.nist.gov/publications/nistpubs/800-30/sp800-30.pdf as guidance. Travel will be required to the following locations: Washington DC; Seattle, WA, and CA. A Request for Quote (RFQ) issuance will be on or about November 7, 2011. The applicable North American Industry Classification System (NAICS) code for this requirement is 541512 and the small business size standard is $25.0M. This procurement will be conducted in accordance with FAR Part 12, Acquisition of Commercial Items and FAR Part 13, Simplified Acquisition Procedures NOTE: All contractors must be registered in Central Contractor Registration (CCR) in order to receive award from a DOT Agency. Contractors may access the site at http://www.ccr.gov to register and/or obtain information about the registration process. Additionally, solicitation Representation and Certifications are no longer provided within the solicitation and must be submitted on-line through On-Line Representations and Certifications Application (ORCA). ORCA is a web based system that centralizes and standardizes the collection, storage and viewing of the Representations and Certifications required by the Federal Acquisition Regulations. Potential offerors are highly encouraged to complete the on-line provisions within the Representations and Certifications at https://orca.bpn.gov. Telephone calls will not be accepted. ATTENTION: Small and Disadvantaged (SDB), Women-Owned, and Disadvantaged Business Enterprises (DBEs). The Department of Transportation's (DOT) Short-Term Lending Program (STLP) offers working capital financing in the form of lines of credit to finance accounts receivable for transportation-related contracts. The Maximum line of credit is $750,000. The STLP loan has a variable rate, which is connected to the prime rate. The current rate may be found on the OSDBU website http://osdbuweb.dot.gov or call 1-(800) 532-1169.
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/spg/DOT/RITA/VNTSC/DTRT57-12-Q-80005/listing.html)
- Record
- SN02613477-W 20111028/111026234516-c197c8ab045c5d13b6ddc46402425292 (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |