SAM #fa72c135b6f4421ea10550385d7bda49

SCADA System LDAP Server Replacement and Cybersecurity Upgrade at JBER (Sole Source to SEL Engineering Services Inc.)

This opportunity is for the Department of the Air Force at Joint Base Elmendorf-Richardson (JBER) to upgrade its SCADA system. - Sole source procurement to SEL Engineering Services Inc. for proprietary compatibility - Replace embedded LDAP server with Windows Server 2025 Active Directory, integrated with SEL SCADA system - Configure server to meet DOD Security Technical Implementation Guide (STIG) standards - Provide cybersecurity compliance documentation using DOD-approved tools (ACAS or Nessus) - Mitigate vulnerabilities and provide resolution documentation - Update SEL SCADA devices with latest manufacturer software/firmware - Commission upgrades to eliminate vulnerabilities identified by SEL bulletins - Train Civil Engineering personnel on patching/updating SCADA devices for DOD compliance - Contract value is $102,882.00 - No specific part numbers provided; one LDAP server with Active Directory integration required - Period of performance not specified in the notice or attachments

Description

This requirement is for the replacement of an embedded LDAP server with active directory, and integration with the existing SEL SCADA system on JBER. The new LDAP needs to include a full Windows Server 2025 (OS) that contains the latest Security Technical Implementation Guide (STIG) configuration consisting of cybersecurity requirements for this specific product. Documentation and results to be provided from a DOD approved Security Content Automation Protocol (SCAP) and vulnerability management scan tool like Assured Compliance Assessment Solution (ACAS) or Nessus. Contractor/vendors must mitigate any findings from ACAS and SCAP scans and provide documentation of resolution.

The system devices need to be updated with the latest manufacturers software/firmware updates and fully commission these upgrades to eliminate any known vulnerabilities identified by SEL via past published bulletins. Finally, the contractor/vendor is to provide training to authorized CE personnel only on proper procedures to patch/update all devices within the SCADA network in order to maintain compliance with DOD directives.

Please review the attached documents, if you are capable of providing all services/work required, please reach out to the POCs listed with a capability statement.

View original listing