Draft RFP: NESDIS Consolidated Antenna and Ground Systems Services (NCAGSS)

Performance Work Statement (PWS)

This Performance Work Statement (PWS) details the requirements for the Program Integrator (PI) Task Order (TO) under the NOAA Consolidated Antenna & Ground Systems Contract (NCAGSS). The PI will ensure integration across multiple task orders supporting the National Environmental Satellite, Data, and Information Service (NESDIS) Antenna as a Service (NAaaS) program, acting as a central communication hub and risk mitigator.

• Manage and integrate multiple NAaaS operations, maintenance, and sustainment task order activities.

• Serve as the central point of contact for communication and collaboration between TO contractors and the government.

• Support NAaaS program execution, stakeholder communication, documentation, risk management, performance monitoring, conflict resolution, financial management, and TO integration.

• Coordinate project management, system engineering, and system integration efforts across all TOs.

• Support antenna ground systems for Geostationary Earth Orbit (GEO), Low Earth Orbit (LEO), and Space Weather Operations (SWO) orbits.

• Develop and maintain a NAaaS Program Management Plan (PMP).

• Compile Contractor Metric Performance Reports and provide Weekly Status Reports.

• Manage Configuration Change Requests (CCRs) and System Maintenance Schedules.

• Conduct monthly NAaaS Program Management Review (PMR) meetings.

• Develop and maintain Phase-In/Phase-Out Transition Plans, an Integrated Sustainment Plan, and an Integrated Obsolescence Plan.

• Deliver Consolidated Monthly Progress Reports and Release Backlog Reports.

• Coordinate preventative maintenance activities and maintain a NAaaS Asset Inventory Report.

• Establish and conduct a system safety program and ensure compliance with environmental and hazardous materials requirements.

• Support cybersecurity requirements, including annual IT security audits and monthly Plans of Action and Milestones (POA&M) reports.

• Support System Engineering (SE) activities, including Design Modification Reviews (DMRs) and maintaining the NAaaS architecture.

• Manage requirements, perform trade studies, and oversee configuration management.

• Coordinate and support integration testing.

• Develop and maintain a Consolidated Risk Management Report and a Supply Chain Risk Assessment Plan.

• Conduct studies and analysis as identified by the Government.

• 98% of active Task Order deliverables submitted on time per invoice period.

• Deliverables must be accurate and complete with no missing data or miscalculations.

• Cost estimates for Program Integration solutions should be within 10% of the original estimate for 90% of solutions by dollar value.

• Proactive identification and management of risks to prevent unmanaged issues.

• Primary work locations: NOAA Satellite Operations Facility (NSOF) in Suitland, Maryland, and Contractor facilities.

• Authorized site visits may be required.

• Adherence to Quality Assurance Plans, Standard Operating Procedures (SOPs), and a Mission Quality Assurance Implementation Plan (MAIP).

• Use of an Earned Value Management System (EVMS) compliant with EIA-748-D and FAR 52.234-4.

• Conduct Integrated Baseline Reviews (IBRs) as required.

• Maintain a NAaaS Integrated Master Schedule (IMS).

• Ensure all personnel possess required certifications as per NCAGSS IDIQ Attachment J-2.

• Coordinate training for Government and Contractor personnel.

• Compliance with cybersecurity policies and NOAA/NESDIS IT security requirements.

Form / Attachment / Pricing Sheet

This document is a Past Performance Questionnaire (PPQ) designed for federal procurements, likely under FAR Part 15. It is used by reference evaluators to assess a contractor's past performance on projects involving program integration, operation, maintenance, sustainment, and requirements.

• Section I: Contract Data: To be completed by the reference evaluator, including Contract Number/Task Order, Contract Type, Complexity (High, Medium, Low), and Key Scope Elements.
• Section II: Performance Evaluation: Evaluators rate contractor performance in five areas using a scale (Exceptional, Very Good, Satisfactory, Marginal, Unsatisfactory): Quality of Product or Service, Schedule/Timeliness of Performance, Business Relations/Management, Cost (N/A for FFP), and Small Business Subcontracting (N/A for small businesses).
• Performance Rating Scale: Definitions for Exceptional, Very Good, Satisfactory, Marginal, and Unsatisfactory are provided.
• Overall Performance Rating & Confidence Rating: The document outlines how an overall CPARS rating translates into a Confidence Rating (Very High, High, Some, Low) for the current requirement.
• Section III: Evaluator Comments: Prompts for specific instances of mission impact, sustainment innovation, and an overall recommendation on whether to hire the firm again.
• Section IV: Evaluator Identification: Fields for the evaluator's name, title, agency, and contact information.

This questionnaire is crucial for potential offerors as it dictates how their past performance will be evaluated. Bidders should understand the criteria used to assess performance and encourage their references to provide thorough and positive feedback. The ratings directly influence the government's confidence in the offeror's ability to successfully perform the current requirement.

Solicitation / RFP / RFQ

This document is a DRAFT Request for Proposal (RFP) for the NESDIS Consolidated Antenna & Ground Systems Services (NCAGSS) contract. It is issued for market research and to solicit final technical feedback on the Statement of Work (SOW). The overarching acquisition strategy, including contract type, set-aside status, and timeline, is considered firm.

The contract will provide services for antenna ground system upgrades, building new antennas, decommissioning existing ones, leveraging commercial services, incorporating next-generation technology (AI, cloud-based, digital components), and installing common service antenna infrastructure. The SOW covers four functional areas: Program Integration, Operations, Maintenance, and Sustainment. The government anticipates one awardee for Program Integration and two to five for each of the other areas.

• Contract Type: Multiple Award Indefinite Delivery Indefinite Quantity (IDIQ).

• Task Order Types: Allows for commercial and non-commercial task orders on Fixed-Price, Cost-Reimbursement, Time-and-Materials (T&M), and Labor-Hour (LH) bases.

• Period of Performance: A five-year base ordering period with one five-year option, totaling up to 10 years.

• Estimated Value: The maximum contract amount is $1,239,115,627.

• Minimum Order: $250.

• Feedback Submission: Technical feedback on the draft RFP is due by May 14, 2026, via a provided Google Form link. Questions regarding the feedback form are due by April 30, 2026, via email.

• Proposal Submission: The RFP outlines a two-phase submission process (Phase I - Advisory, Phase II - Final). Phase I proposals are due January 18, 2027. Specific submission instructions, formats, and page limits are detailed in Section L.

• Evaluation: IDIQ awards will be based on a Highest Technically Rated Offeror (HTRO) with a Fair and Reasonable Price methodology for task orders. Day-1 Task Order awards will use a Tradeoff process. Technical evaluations focus on Task Order proposals, not the generic IDIQ SOW.

• Offerors may propose to one or more functional areas. However, the firm awarded the Program Integrator role is ineligible for award in any other service area due to Organizational Conflict of Interest (OCI) restrictions.

• Small business participation goals are outlined, with specific requirements for Other Than Small Business Offerors.

• This document is a DRAFT RFP and does not constitute a commitment to award.

• Attachments include the IDIQ SOW, Schedule of Deliverables, sample task orders, pricing templates, and past performance questionnaires.

Statement of Work (SOW) / Performance Work Statement (PWS)

This Performance Work Statement (PWS) details the maintenance activities required for the NESDIS Antenna as a Service (NAaaS) program, supporting the National Environmental Satellite, Data, and Information Service (NESDIS). The goal is to ensure the continuous operation, maintenance, and sustainment of NOAA/NESDIS antenna ground systems.

• Maintenance Activities: Covers managed planning, transition/migration, and implementation of legacy and new antennas, and network management of ground systems.

• Systems Supported: Includes satellite antennas, associated hardware, software, networks, antenna control/monitoring systems, and enterprise infrastructure for GEO, LEO, and SWO orbits.

• Locations: Primary performance locations include NESDIS Consolidated Back-up Unit (CBU) in Fairmont, WV, and NOAA Satellite Operations Facility (NSOF) in Suitland, MD. COOP sites include Wallops, VA; Fairbanks, AK; NSOF; and CBU.

• Key Tasks: Includes antenna maintenance (RF, IF, LNA, HPA, FEPs), network and systems administration (management, fault, performance, security), IT asset management, preventive maintenance, and cybersecurity support.

• Availability: Redundant network components required at 99.9% annual availability; non-redundant at 99.6%.

• Deliverables: Numerous reports are required, including weekly status reports, monthly progress reports, contractor metric reports, and specific technical reports (e.g., VLAN Matrix, IP Address Management, System Inventory Reports).

• Response Times: Specific response times for Work Requests (WRs) are defined (e.g., Core GS Severity 1 WRs within five business days).

• Period: Not explicitly defined in this document, but implies ongoing support.

• Place: NSOF (Suitland, MD), CBU (Fairmont, WV), WCDAS (Wallops, VA), FCDAS (Fairbanks, AK), McMurdo Station, and other specified locations.

• Project Management: Requires a Quality Assurance Plan (QAP), Quality Assurance Standard Operating Procedures (QASP), and adherence to project management plans.

• Transition: Requires detailed Phase-In and Phase-Out Transition Plans.

• Security: Adherence to cybersecurity requirements, patching, vulnerability mitigation, and secure configurations is mandatory.

• Staffing: Requires qualified personnel with professional and technical expertise, including certifications as per labor category descriptions.

Statement of Work (SOW) / Performance Work Statement (PWS)

This Performance Work Statement (PWS) details the operations requirements for supporting the National Environmental Satellite, Data, and Information Service (NESDIS) Consolidated Antenna & Ground System Contract (NCAGSS) Task Order 6 (TO 2.2), specifically for the NOAA Antenna as a Service (NAaaS) program. The goal is to ensure continuous operations, maintenance, and sustainment of critical satellite antenna ground systems.

• Systems Supported: Includes satellite antennas, associated hardware, software, networks, and enterprise infrastructure for the NAaaS program. Supports spacecraft in Geostationary Earth Orbit (GEO), Low Earth Orbit (LEO), and Space Weather Operations (SWO) orbits.

• Key Activities: Operations, maintenance, and sustainment of antenna ground systems; antenna control, monitoring, and configuration; providing subject matter expertise, personnel, materials, equipment, services, and facilities.

• Specific Tasks: Includes ephemeris data loading, antenna pointing and signal peaking, outage recovery, software and hardware support for antenna applications, operator support for system components (24/7 monitoring), system analysis and problem resolution, network and security operations, and Communications Security (CEC) key loading.

• Deliverables: Numerous reports are required, including Weekly Status Reports, Monthly Progress Reports, Contractor Metric Reports, Operations Event Reports, and Security Incident Summary Reports, among others detailed in Appendix A.

• Operational Capability: Minimum 99% operational capability for antenna tracking.

• Response Times: Mission-critical issues require response within 15 minutes during business hours and 2 hours during non-business hours.

• Deliverable Submission: 98% of deliverables must be submitted on time per invoice period.

• Data Accuracy: Deliverables must be accurate and complete with no missing data or miscalculations.

• Primary Locations: NOAA Satellite Operations Facility (NSOF) in Suitland, Maryland, and the NESDIS Consolidated Backup Unit (CBU) in Fairmont, West Virginia.

• Continuity of Operations (COOP) Sites: NESDIS Command and Data Acquisition (CDA) Stations in Wallops, Virginia, and Fairbanks, Alaska, plus the CBU.

• Personnel: Qualified personnel with professional and technical expertise are required, adhering to IDIQ Attachment J-2 Labor Categories Descriptions.

• Security: Requires personnel at NSOF to have a SECRET level security clearance for CEC key loading activities.

• Transition: Requires a Contract Phase-In Transition Plan submitted with the proposal and a preliminary Contract Phase-Out Transition Plan one year prior to contract end.

• Quality Assurance: Contractor must provide and follow a Quality Assurance Plan (QAP) and Quality Assurance Standard Operating Procedures (QASP).

Statement of Work (SOW) / Performance Work Statement (PWS)

This Performance Work Statement (PWS) details the operations requirements for supporting the NOAA Antenna as a Service (NAaaS) antenna ground systems under the NESDIS Consolidated Antenna and Ground Support Services (NCAGSS) Indefinite Delivery, Indefinite Quantity (IDIQ) contract. The goal is to ensure continuous, uninterrupted operations and maintenance of these critical systems.

• System Support: Operations, maintenance, and sustainment of satellite antennas, their associated hardware, software, and networks, including antenna control, monitoring, and configuration.

• Orbital Regimes: Support for spacecraft in Geostationary Earth Orbit (GEO), Low Earth Orbit (LEO), and Space Weather Operations (SWO) orbits.

• Key Activities:

  • Providing subject matter expertise, personnel, materials, equipment, services, and facilities.
  • Performing operational activities for systems listed in the IDIQ SOW Appendix A.
  • Loading and maintaining ephemeris data for antenna tracking (minimum 99% operational capability).
  • Performing pointing adjustments and signal peaking.
  • Recovering from outages and reporting anomalies.
  • Monitoring mission passes and providing software/hardware support.
  • Operator support for system components (24/7 monitoring, problem detection, analysis, and resolution).
  • Implementing system updates, optimizations, and upgrades.
  • Supporting integration and testing, including regression testing.
  • Providing on-call support and managing hardware replacements.
  • Managing cable plant infrastructure.
  • Network and security operations, including monitoring, patching, and incident analysis.
  • Communications Security (CEC) key loading and technical support.
  • Continuity of Operations (COOP) support during exercises or activations.
  • Information and Cybersecurity support, ensuring appropriate security posture.
  • Risk management activities.

• Deliverables: Includes Contractor Metric Reports, Weekly Status Reports, Standard Operating Procedures, Daily Log Reports, Training Materials, Project Management Plans, Transition Plans, and various other reports as detailed in Appendix A.

• Minimum 98% of deliverables submitted on time per invoice period.

• Deliverables must be accurate and complete with no missing data or miscalculations.

• Proactive identification and management of problems and risks.

• Response time for mission-critical issues not to exceed 15 minutes during business hours and 2 hours during non-business hours.

• 99% operational capability for antenna tracking.

• 99% operational capability for CEC key loads.

• Primary Work Locations: NOAA Satellite Operations Facility (NSOF) in Suitland, Maryland; NESDIS Consolidated Backup Unit (CBU) in Fairmont, West Virginia; McMurdo Station, Antarctica.

• COOP Site Locations: NESDIS CDA Stations (Wallops, VA; Fairbanks, AK); CBU (Fairmont, WV).

• Periodic Support: Utqiagvik (Barrow), Alaska; Mission Partner OCONUS/CONUS Sites; Svalbard Satellite Station; EUMETSAT; NASA White Sands Complex; NASA Goddard Space Flight Center; Contractor facilities.

• Qualified personnel with professional and technical expertise, and required certifications (per IDIQ Attachment J-2).

• Adherence to NAaaS Safety Program.

• Personnel supporting CEC key loading at NSOF require a SECRET security clearance and must be U.S. citizens.

• Compliance with all IT security requirements from the IDIQ SOW Section 3.1.4.

• Development and adherence to Quality Assurance Plans and Standard Operating Procedures.

• Transition plans (Phase-In and Phase-Out) are required.

• Associate Contractor Agreements (ACAs) may be required.

• Project Kickoff meeting within 10 days of award.

Statement of Work (SOW) / Performance Work Statement (PWS)

This Performance Work Statement (PWS) details the maintenance activities required for the NESDIS Consolidated Antenna & Ground System Contract (NCAGSS) program, specifically Task Order 3 (TO3) - Maintenance. The overarching goal is to support the NESDIS Antenna as a Service (NAaaS) program by ensuring the operational readiness and sustainment of its antenna ground systems.

This task order covers the managed planning, transition, and implementation of maintenance activities for legacy and new antennas, as well as network management of ground systems. It includes maintenance for satellite antennas, associated hardware, software, networks, antenna control/monitoring systems, and enterprise infrastructure supporting various orbital regimes (GEO, LEO, SWO). Maintenance activities will be performed at the NESDIS Consolidated Back-up Unit (CBU) in Fairmont, WV, and the NOAA Satellite Operations Facility (NSOF) in Suitland, MD, with periodic support at other specified CONUS and OCONUS locations.

• Project Management: Includes Quality Assurance Plans, Metric Performance Reports, Weekly Status Reports, Configuration Management, System Maintenance Schedules, Monthly Progress Reports, Contract Financial Reports, and a Project Management Plan.

• Contract Transition: Requires a Contract Phase-In Transition Plan and a preliminary Contract Phase-Out Transition Plan.

• Maintenance: Encompasses antenna maintenance (scheduled, inspections, reporting), network and systems administration (management, fault, security, account administration), and preventive maintenance (parts, modifications, upgrades, operational equipment, obsolescence prevention).

• Information & Cybersecurity: Mandates adherence to IT security requirements, formulation of a Security Patch Plan, and continuous monitoring.

• Risk Management: Requires preparation of a Risk Management Report and support for government risk management activities.

• System Engineering: Involves support for integration, testing, and regression testing plans.

• Deliverables: Numerous reports are required, including Contractor Metric Reports, Weekly Status Reports, System Maintenance Schedules, Event Reports, various inventory and status reports, and maintenance plans.

• Deliverables must be submitted on time (98% AQL).

• Deliverables must be accurate and complete (no missing data or miscalculations).

• Network components require 99.9% availability for redundant systems and 99.6% for non-redundant systems.

• Work Requests (WRs) for core GS Severity 1 must be completed within five business days, and Severity 2 within fifteen business days.

• Places of Performance: NESDIS CBU (Fairmont, WV), NSOF (Suitland, MD), WCDAS (Wallops, VA), FCDAS (Fairbanks, AK), with periodic support at multiple other domestic and international sites.

• Period of Performance: Not explicitly stated in this document, but implies an ongoing contract supporting the NCAGSS IDIQ.

• Qualified personnel with professional and technical expertise are required.

• Adherence to government-mandated account management policies, configuration management practices, and security policies (e.g., USGCB, NIST, DISA STIGs) is mandatory.

• Utilization of a government-furnished computerized maintenance management system is required.

Performance Work Statement (PWS)

This Performance Work Statement (PWS) details the services required for Task Order 4 (TO4) - Antenna Ground System Sustainment, under the NESDIS Consolidated Antenna and Ground Systems Services (NCAGSS) Indefinite Delivery, Indefinite Quantity (IDIQ) contract. The primary goal is to streamline and optimize the NESDIS Antenna as a Service (NAaaS) antenna ground system enterprise through systematic sustainment efforts, leveraging technology advancements to extend system life.

This TO4 focuses on technology-related sustainment activities for legacy and new antenna ground systems and subsystems. Key activities include:

• Managed planning, transition, and implementation of antenna ground systems.

• Technology refresh (upgrades) for designated antenna ground systems, subsystems, and applicable infrastructure.

• Development and implementation of new, next-generation antenna ground system capabilities.

• Emphasis on utilizing commercially available services where possible.

• Sustainment activities encompass hardware and software, including RF equipment, system integration, installation, testing, and IT security compliance.

• Support for GEO, LEO, and SWO ground systems.

• Cloud transition activities aligned with the NESDIS Common Cloud Framework (NCCF).

• Contractor performance will be monitored against objectives outlined in the Performance Requirements Summary (PRS).

• Key metrics include meeting ground system performance standards, accuracy of status reports, timely completion of sustainment activities, and adherence to quality assurance plans.

• Specific requirements for reporting include weekly and monthly status reports, contractor metric performance reports, and contract financial reports.

• The period of performance is not explicitly stated but is implied to be multi-year, aligning with the IDIQ contract.

• Key performance locations include: NOAA Satellite Operations Facility (NSOF) in Suitland, Maryland; NESDIS Consolidated Backup Unit (CBU) in Fairmont, West Virginia; NESDIS Command and Data Acquisition (CDA) Stations in Wallops, Virginia, and Fairbanks, Alaska; McMurdo Station, Antarctica; and NASA White Sands Complex, New Mexico.

• Project Management: Requires coordination with the NAaaS Program Integrator (PI), detailed reporting, and adherence to cost, schedule, and technical constraints.

• Quality Assurance: Contractors must follow their Quality Assurance Plan (QAP) and Quality Assurance Standard Operating Procedures (QASP).

• Contract Transition: Requires detailed Phase-In and Phase-Out Transition Plans.

• IT Security: Strict adherence to Department of Commerce and NOAA IT security laws, regulations, and standards is mandatory, including cybersecurity sustainment activities and compliance with NIST guidelines.

• Deliverables: Numerous deliverables are specified, including various plans (Sustainment, Software, Hardware, etc.), reports, and technical documentation.

• Cost Estimates: Proposals must include detailed cost estimates for sample sustainment use cases (Appendix C).

Form / Attachment / Pricing Sheet

This document provides pricing templates for various contract types, including Program Integration IDIQ, Operations IDIQ, and Maintenance IDIQ. It outlines fully loaded labor rates across multiple years and option periods, as well as other direct costs (ODCS) such as Travel, Training, Studies, Hardware, Software, Spares, Licenses, and Warranties.

• Labor Rates: Detailed breakdown of labor categories with associated rates for base and option ordering periods, including an escalation factor of 0.025.
• Other Direct Costs (ODCS): Specific line items for Travel, Training, Studies, Hardware, Software, Spares, Licenses, and Warranties with associated costs.
• Contract Line Item Numbers (CLINs): Pricing is organized by CLINs for Labor (FFP) and ODCS (CR).
• Multiple Sheets: Contains separate sheets for 'Program Integration IDIQ Price', 'Operations IDIQ Price', 'Maintenance IDIQ Price', 'Program Integration Day 1 Price', 'Operations Day 1 Price', and 'Maintenance Day 1 Price'.

This pricing template is crucial for bidders to understand the cost structure expected by the government for various services. Bidders will need to use this template to formulate their proposals, ensuring their pricing aligns with the defined labor categories, ODCS, and contract periods. The zero values in many labor rate fields suggest that specific rates are to be filled in by the bidder or are subject to negotiation/further clarification.

Forms / Attachments / Pricing Sheets

This document, "Attachment 2 - 1330-52.215-70 Schedule of Deliverables," outlines all administrative and performance-based deliverables required throughout the contract's period of performance. It is organized by Task Order (TO) and specifies the deliverable, its frequency, distribution method, and the corresponding reference section in the Performance Work Statement (PWS).

• Deliverables: Lists specific items such as plans (Program Management Plan, SEMP, QA Plan, Risk Management Plan), reports (Financial Reports, Status Reports, Metric Reports, Audit Reports), schedules (IMS, Maintenance Schedule), and other documentation (Meeting Minutes, CCRs, Training Materials).
• Frequency: Details how often each deliverable is due (e.g., monthly, quarterly, weekly, annually, as required, event-driven).
• Distribution: Specifies where deliverables should be submitted (e.g., Electronic Documentation Repository, ECMT, NCIRT - NIRRA).
• PWS Reference: Links each deliverable to its specific requirement in the Performance Work Statement (PWS) for the relevant Task Order.

This schedule is critical for bidders to understand the reporting and documentation obligations associated with the contract. It details the expected outputs, their timing, and the required format/location for submission. Bidders must carefully review this schedule to assess their capacity to meet these requirements and to accurately estimate the resources needed for compliance. The detailed breakdown by Task Order (TO1, TO2, TO2.1, TO2.2, TO3, TO3.1, TO4) highlights the specific deliverables expected for each functional area of the contract.

Statement of Work (SOW) / Performance Work Statement (PWS)

This Statement of Work (SOW) outlines the services required to support the NESDIS Antenna as a Service (NAaaS) program, aiming to provide NOAA/NESDIS with flexibility and responsiveness in acquiring, managing, and operating antenna services. The program supports various NOAA and partner missions across different orbital regimes.

This IDIQ SOW covers base requirements for antenna ground system services, including upgrades, new antenna construction, decommissioning, and leveraging commercial services. It also defines requirements for a Programmatic Integrator (PI) to ensure integration across all Task Orders (TOs). The work is divided into four functional areas: Program Integration, Operations, Maintenance, and Sustainment. Services include satellite-to-ground communications, common service capabilities, program execution, and technical baseline evolution, potentially utilizing cloud infrastructure.

Services must comply with technical, functional, performance, availability, reliability, and security requirements. Cybersecurity compliance is critical, adhering to Department of Commerce and NOAA IT security policies, including continuous monitoring, incident response, vulnerability assessments, and adherence to NIST standards. Specific performance metrics and reporting requirements will be detailed in individual TOs.

The contract includes a base period of five years and an option period of five years. Work will primarily be performed at contractor facilities, with periodic on-site support required at various NOAA and partner locations, including Wallops Island, VA; Fairbanks, AK; Suitland, MD; Fairmont, WV; McMurdo Station, Antarctica; and international sites in Australia, Norway, and Germany.

Contractors must not perform inherently governmental functions. Key requirements include adherence to IT security mandates, cybersecurity compliance (including PIV, FIPS, HSPD-12), use of Commercial Off-the-Shelf (COTS) or open-source software where feasible, configuration management, and participation in program management reviews. Personnel must possess required education, experience, certifications, and security clearances as identified at the TO level. Agile/DevSecOps methodologies and cloud-based services are emphasized.