SOURCES SOUGHT
R -- Specialized Security Support
- Notice Date
- 4/12/2016
- Notice Type
- Sources Sought
- NAICS
- 541690
— Other Scientific and Technical Consulting Services
- Contracting Office
- Department of the Air Force, Air Force Space Command, SMC - Space and Missile Systems Center, 483 North Aviation Blvd, El Segundo, California, 90245-2808
- ZIP Code
- 90245-2808
- Solicitation Number
- FA8819-16-R-0001
- Archive Date
- 5/28/2016
- Point of Contact
- Bruce L. Hebert, Phone: 310-535-2672
- E-Mail Address
-
bruce.hebert@us.af.mil
(bruce.hebert@us.af.mil)
- Small Business Set-Aside
- N/A
- Description
- The purpose of the Specialized Security Support Contract (SSSC) is to provide qualified and experienced security professionals to acquisition and operations units of the Air Force's Space missions. This contract is expected to have a one (1) year base period with four (4) one (1) year option periods. The Government anticipates awarding the effort in November 2016. The contract is anticipated to require approximately 50 personnel in Los Angeles and Lompoc, California and Colorado Springs, Colorado. At the time of contract award, all personnel must have a current Top Secret, Single Scope Background Investigation (SSBI) conducted within the last five years, be adjudicated for DCID 6/4 eligibility and SCI access, and be able to fulfill their responsibilities as detailed below. Note that the list below is not finalized, and should be considered an initial baseline, with the likelihood that the final number of positions will be somewhat different, though the same skillsets will be required. The Performance Work Statement involves many Special Access Program (SAP) security disciplines requiring a staff that has experience, qualifications, and capability to perform in the Special Access arena. The disciplines required are: • Personnel Security • Physical Security • Information Systems Security • Security Education & Training • Acquisition Program Security Officer • Operations Security Support • Information Management and Document Control • Cybersecurity (Senior) • Cybersecurity • Systems Administrator and Network Security • Operations Security Personnel Security (PerSec): Personnel Security Specialists must be able to process Personnel Access Requests (PAR) and review and adjudicate SF86 documentation IAW DoDD 5205.07 and its implementing manuals and volumes, DoDM 5105.21 Vols 1-3, AFI 31-501, DoD 5200.2R and AFPAM 16-701. They must have proficient database entry skills ensuring that all PerSec actions are documented in the Joint Access Database Environment (JADE). They must be able to track all PAR related actions. Additionally, each person must have at least five (5) years' experience in PerSec. Personnel Security staffing for this contract requires a minimum of four (4) personnel at Los Angeles Air Force Base, El Segundo California. Physical Security: Physical Security Specialist will provide physical security planning, design and advice on Government and industry facilities storing SAP information IAW ICD 705, DoDM 5105.21 Vols 1-3, and other SAP and SCI policy guidance. Additionally, the Physical Security Specialist must be proficient in the DoD 5105.21 M-1, DoDM 5205.07 Vol 3, and CNSSAM TEMPEST/01-13. This person will evaluate facility plans for physical security accreditation, interface with DIA and SAF/AAZ, and prepare accreditation documentation. The individual may also assist the Government in the conduct of security reviews at Government and industry locations applying regulatory directives to help ensure the location is in compliance. The individual must have at least five (5) years' experience in Physical Security. Physical Security staffing for this contact requires one (1) person at Los Angeles Air Force Base, El Segundo California. Information Systems (IS) Security: Information Systems Security personnel must have a minimum of four (4) years' experience with Certification and Accreditation (C&A) of SCI/SAP/collateral information systems including two (2) years' experience with DoD Risk Management Framework. Personnel must be experienced in the implementation of ICD 503, Joint SAP Implementation Guide (JSIG), DoDD 8500.01E, DoDI 8500.2, DoDD 8581.1, DoDI 8510.1, DoDD 8140.01, and the Federal Information Security Management Act. Personnel must be certified IAW DoDD 8140.01 and DoD 8570.01-M standards. These personnel will review all industry Information System Security Plans for compliance and recommend the appropriate C&A action to the Government. The individuals will also provide technical and procedural IS advise to the Government, perform risk assessments, develop the local ISSP, assist the Government at IS security working groups and configuration boards and maintain technical files and databases. The persons may assist the Government in the conduct of security reviews at industry locations. All input from the reviews will be IAW the applicable regulations. Approximately five (5) positions will be located at Los Angeles Air Force Base, El Segundo California and one position in Colorado Springs, Colorado. Security Education & Training: The individual must have five (5) years' experience in SCI/SAP security education and training. The person must also be proficient in Information Security requirements, proper marking of documentation, Personnel Security requirements, Executive Orders, and other applicable regulatory documentation. The person must be experienced with the NISPOM, DoDD 5205.07, and DoDM 5200.01 Vols 1-4. The individual will develop a comprehensive security education and awareness program that meets the regulatory requirements as noted elsewhere in this announcement. He/she will develop, disseminate and present security education and training materials that provide blended learning opportunities. Materials will include training plans, briefings, slides, a newsletter to industry, refresher training, and specialized training for all classification levels and accesses needed. The individual must be a dynamic, proven briefer who is comfortable speaking before large groups of 200+ people. Further, the individual will administer the foreign travel and foreign contact program and administer the industrial security review program. This position will be at the Los Angeles Air Force Base, El Segundo California. Acquisition Program Security Officer: These individuals must have four (4) years' experience in administering and implementing SAP security guidance. They will provide support to the government Program Security Officer (PSO) in the management and execution of acquisition program security as it applies to program protection, system security engineering and industrial security oversight of industry locations and personnel involved in the applicable acquisition effort. The individuals will review relevant acquisition security documentation (e.g. Contract Data Requirement Lists, plans, Statements of Work, and Requests for Proposal). They will develop and maintain Program Protection Plans, DD254s and Security Classification Guidance. The persons must be proficient in ICD and DoD SAP requirements, TEMPEST, Red/Black engineering and COMSEC requirements. Approximately eight (8) positions will be at the Los Angeles Air Force Base, El Segundo, California. Operations Security Support: These personnel must have four (4) years' experience in SAP security support to an operational unit. The persons will support a government security officer in the execution of day-to-day security operations and development and operational testing. Each individual must be experienced in Information Management, Operations Security (OPSEC), IS Security, and Physical Security. Approximately four (4) positions will be spread between Colorado Springs, Colorado and Lompoc, California. Information Management and Document Control: Document Control personnel must have two (2) years' experience in SAP Document Control Center operations. They serve as the focal point for receiving, processing, distributing, dispatching, and controlling accountable hardcopy documentation entering and leaving the facility. They must be proficient in the maintenance and operation of the SIMS document control system, managing the annual inventory of accountable holds IAW DoD SAP standards. Other duties include, but are not limited to e.g. courier runs, destruction of materials, SecureFAX, and virus scanning of incoming magnetic media. Approximately four (4) positions will be located at the Los Angeles Air Force Base, El Segundo, California. Cybersecurity (Senior): These individuals must be trained, CISSP certified, DoDD 8140.01 and DoD 8570.01-M-compliant Cybersecurity Systems Engineers with experience in the implementation of regulations noted for the Information Systems Security positions. Further, the individuals must be experts in the identification, derivation, application, and management of requirements for collateral and multi-level security systems. The individuals must also be experts in the maturation of Information Assurance (IA) architectures that successfully integrate multiple IA domains to include access control, OSPEC, telecommunications, network and Internet security, cryptography, application security, physical security and continuity, and disaster recovery. The individuals must have six (6) years' experience in managing all phases of systems C&A activities ranging from early concept development to system retirement. The individual must also be an expert in the process and documentation requirements of C&A methodologies to include both DIACAP and most importantly RMF. Additionally, the individual must also be experienced in the doctrine, technologies, C&A, and documentation and connection requirements for controlled interfaces/Cross Domain Solutions. There will be one (1) Senior-level positions in Colorado Springs, Colorado and one (1) in Los Angeles, California, and they will serve as the lead cybersecurity technical advisors to SMC/SY at Los Angeles Air Force Base. Cybersecurity: These individuals must be CISSP certified, DoDD 8140.01 and DoD 8570.01-M-compliant Cybersecurity Systems Engineers with two (2) years' experience in the implementation of regulations noted for the Information Systems Security positions. Further, the individuals must be experts in the identification, derivation, application, and management of requirements for collateral and multi-level security systems. The individuals must have 4 years' experience in managing all phases of systems C&A activities ranging from early concept development to system retirement. The individual must also be an expert in the process and documentation requirements of C&A methodologies to include, but not be limited to, e.g. legacy DIACAP and ongoing RMF efforts. There will be approximately five (5) positions in Colorado Springs, Colorado, five (5) in Los Angeles, California, and two (2) in Lompoc, California. Systems Administrator and Network Security: These personnel function as network Security and System Administrator technicians. The individuals must have two (2) years' experience working with classified networks, standalone systems, local area networks, and VTCs (where applicable). There are likely to be one or two senior positions that would require expertise in these functions. The individuals will perform a variety of complex assignments associated with managing and controlling computer operating systems. They must analyze system faults, troubleshoot, and run diagnostic tests on operating systems and hardware to detect problems. They must evaluate and maintain the security posture of the network, implement NTFS file permission for individual/group folders, and maintain security logs. They also must install software, create user accounts, and conduct audits. The individuals must be experienced in implementing ICD and SAP Security guidance. There will be approximately three (3) positions in Colorado Springs, Colorado and six (6) at Los Angeles Air Force Base, California. Due to the nature of this work, an interested contractor must demonstrate that it has no organizational conflicts of interest (OCI) IAW FAR 9.5. The contractor cannot provide any of these same services to any contractor who currently holds a prime or subcontract at any level with the Space and Missile Systems Center (SMC), Air Force Space Command (AFSPC), or Air Force Research Laboratory (AFRL). If your company provides these services to any non-government organization, you must identify those organizations in your Statement of Capabilities response. In addition, you must disclose any other potential conflicts of interest that may exist. Companies with apparent or actual OCI issues must submit risk mitigation plans and address the issue in their response. Interested contractors are invited to submit a Statement of Capability (SOC) demonstrating that they have the potential capacity, clearances, and expertise to satisfy the above requirement. A response to this SSS is due no later than 13 May 2016, 1:00 PM PST. All responses under this SSS must be made in writing and emailed to both Maj Bruce Hebert at Bruce.hebert@us.af.mil at (310) 535-2672 and Capt Jason Lo at jason.lo.1@us.af.mil or (310) 416-1692; an email confirming receipt will be sent. Interested parties may ask questions in writing by contacting Capt Lo via email no later than 5 May 2016, although the Government is not required to respond at this stage. All responsible sources may submit a SOC, which will be evaluated for market research purposes. Any information submitted in response to this synopsis is strictly voluntary. The SOC MUST address the following: 1) Organization name, mailing address, email address, website address, telephone number, CAGE code, and DUNS number. 2) Business size classification (large, small, or other). 3) Expertise, experience, proficiencies, and certifications in specialized security services. 4) Ability to satisfy the Government's performance requirements described above. 5) A list of customers for which you have previously provided these same services to with points of contact (phone and email). 6) A statement that you do not provide these services to any prime or subcontractor with the Space and Missile Systems Center (SMC), Air Force Space Command (AFSPC), or Air Force Research Laboratory (AFRL). 7) An Organizational Conflict of Interest (OCI) strategy or OCI Mitigation Plan to prevent any apparent or actual OCI issues as outlined above. This should be included as an attachment to the SOC and will not count against the page limit. Format of Responses: Statements of Capability must not exceed twelve (12) pages in length, 8.5 by 11.0 inch pages, single-spaced, using 12 point Times New Roman font, with 1-inch margins. Elaborate formats or color presentations are not desired or required. Submitted responses should be in Microsoft Word or Adobe Acrobat format. All material provided in response to this synopsis shall be unclassified and should be non-confidential and non-proprietary to the maximum extent practicable. Firms providing confidential/proprietary information should separately and clearly identify and mark all confidential/proprietary information with a legend similar to the following: "The following contains proprietary information that (name of Responder) requests not be released to persons outside the Government, except for those contractors listed below, for the purposes of review and evaluation." The Government will take all necessary steps to protect and safeguard any confidential or proprietary information provided. The Government will NOT be held responsible for any proprietary information not clearly marked. Responses from small and small disadvantaged businesses are highly encouraged for either prime or subcontract interests. Under a small business set-aside scenario, a small business prime will be required to incur at least 50% of the cost of labor used to perform the contract. Disclaimer and Notes: This Source Sought Synopsis (SSS) is issued solely for information and planning purposes. It does not constitute a solicitation (Request for Proposal or Request for Quotations) or a promise to issue a solicitation in the future. This SSS does not commit the Government to contract for any supply or service whatsoever. Furthermore, the Government is not, at this time, seeking proposals. Responders are advised that the Government will not pay for any information or administrative costs incurred in response to this SSS. All costs associated with responding to this SSS will be solely at the responding party's expense. All information received in response to this SSS that is marked "PROPRIETARY" will be handled accordingly. The Government shall not be liable for, or suffer any incidental or consequential damages for, any proprietary information not properly identified. Proprietary information will be protected and safeguarded in accordance with the applicable Government regulations. The Government will not be obligated to pursue any particular acquisition alternative as a result of this SSS. Responses to the SSS will not be returned. Not responding to this SSS does not preclude participation in any future solicitation, if one is issued. SMC/SY has entered into contracts with AT&T Government Solutions, Inc., KTSI, Scitor (an SAIC company), SAIC, Quantech Services Inc., Tecolote Research, Inc., and TASC, Inc. (an Engility company). These companies support the SMC/SY program office by performing technical reviews, systems engineering and integration analyses, cost estimation, and other advisory services. Respondents are hereby notified that all responses may be provided to the above government support contractors for assistance in evaluation. If a respondent disagrees with the release of its SSS response to any of the aforementioned firms, the respondent must clearly state this restriction along with a rationale in the cover letter accompanying the SSS response.
- Web Link
-
FBO.gov Permalink
(https://www.fbo.gov/spg/USAF/AFSC/SMCSMSC/FA8819-16-R-0001/listing.html)
- Place of Performance
- Address: Los Angeles and Lompoc, CA and Colorado Springs, CO., United States
- Record
- SN04080529-W 20160414/160412235138-c06a9d6f80e9bec14d016ff854b803d3 (fbodaily.com)
- Source
-
FedBizOpps Link to This Notice
(may not be valid after Archive Date)
| FSG Index | This Issue's Index | Today's FBO Daily Index Page |