Inactive

The FAA released 693KA8-21-RFI-VoICE-05, NAS VoICE Draft Security Requirements, on Dec 14, 2020 and requested input from industry by Jan 28, 2021. The announcement, which can be found under “Links” at... The FAA released 693KA8-21-RFI-VoICE-05, NAS VoICE Draft Security Requirements, on Dec 14, 2020 and requested input from industry by Jan 28, 2021. The announcement, which can be found under “Links” at the end of this announcement, included the VoICE Security Requirements Document, referenced templates, and the Data Item Descriptions (DIDs). The DIDs and Templates provide additional information and requirements. The FAA intends, as stated in the announcement, to apply the security requirements to all VoICE procurements (i.e., APC, GPC, and VCS(s)). The FAA requires its systems to achieve authorization from FAA security stakeholder organizations prior to operational use of these systems. The security authorization process is based on general federal government policy and requirements, as well as FAA-specific security policy and requirements, including the Federal Information Security Management Act (FISMA), FIPS 199, FIPS 200, NIST 800-60, and NIST 800-53. The process includes security activities during all stages of system development, and touches on many areas, including but not limited to Access Control, Awareness and Training, Audit and Accountability, Configuration Management, Contingency Planning, Identification and Authentication, Incident response, Maintenance, Media Protection, Physical and Environmental Protection, Planning, Personnel Security, Risk Assessment, System and Communication Protection, System and Information Integrity, and Program Management. The FAA security authorization process includes detailed technical assessment of all FAA security requirements, and includes rigorous penetration testing activities conducted by FAA stakeholder organizations. Based on industry response to 693KA8-21-RFI-VoICE-05, the VS&R Program Office will hold a virtual industry day on Wednesday, March 17, 2021 from 8:00am - 11:00am EDT, via online collaborative webinar media. The purpose of the industry day is to: Provide awareness of the applicability of FAA security requirements to all VoICE procurements Provide an overview of the FAA VoICE security requirements and point out key aspects that may impact industry SIR responses Allow industry to ask for clarification of FAA security requirements Allow industry to provide real-time feedback on FAA security requirements While the FAA appreciates all feedback provided by industry, including that provided real-time during the industry day event, if participants are not comfortable sharing feedback in a group setting, feedback may be provided in writing as part of the response to the Security Requirements RFI to be released on March 15, 2021. This industry day event is intended to facilitate detailed technical interchange and discussion of technical specifications. The FAA requests that any questions industry may have be provided to the FAA with the registration to ensure a response is available as part of the FAA presentation. Interested parties must register to participate in this virtual industry day event no later than Wednesday, March 11th, 20221 at 5PM EDT. The FAA will confirm attendance no later than Monday, March 15th, 2020 at 5PM EDT and provide the webcast access information. Registration Requests: For those interested in attending this event, please submit your request to 9-AWA-VoiceInfo@faa.gov with the following information: Company name and address Attendee name(s) Attendee phone number; email address List your company’s experience with designing, building, and deploying voice communication systems and if it has any systems currently in operation List of technical questions related to the FAA’s VoICE security requirements Disclaimer This is not a screening information request (SIR) or request for proposal. The FAA is not seeking or accepting unsolicited proposals. The FAA is seeking interested sources that are capable of fulfilling the FAA’s requirements. In accordance with A.M.S. Policy 3.2.1.2.1, this announcement is to share information and solicit statements of interest and capabilities from interested business concerns. This announcement also seeks to identify potential and interested vendors for this work, including groups of business teams. For questions about FAA’s acquisition policies, please visit https://fast.faa.gov, which provides the FAA’s Acquisition Management System (AMS) Policy and Guidance as well as provisions and clauses used by the FAA in its acquisitions. Participation in this virtual industry day is voluntary. Submissions in response to this announcement must be relevant to the subject of the industry day planned agenda. Responses will be reviewed by U.S. Government employees and a limited number of Government support contractors working under non-disclosure agreements.