02 SOW - 1305M2-22-Q-00486 - UAS Management System.pdf


Original Source
Contract Opportunity
Date Originally Posted
April 27, 2022, 12:13 p.m.
Profiled People



UAS (Uncrewed Aircraft System) Fleet Management Application


OMAO’s UxS Operations Center (UxSOC), Uncrewed Aircraft Systems Division (UASD),
located at the Aircraft Operations Center, Lakeland, FL, is seeking a comprehensive COTS
UAS management software package.

The UAS Division is a leader in the Federal UAS community and partners with other Federal
agencies such as the Department of Interior and the Department of Agriculture as well as
academic institutions to include Kansas State University. Using both existing market research,
standard requirement definitions for UAS management software and their own research and
testing, OMAO has a definitive requirement to manage the UAS fleet, pilot currency, and for a
fleet management solution


NOAA UAS program assets include platforms of different types, sizes, operational complexity,
manufacturing countries of origin, flight capabilities, and personnel with different platform
qualifications with variable levels of specific platform experience.

The proposed software solution shall support efficient tracking of UAS lifecycle operations, pilot
records, and maintenance management of UAS program assets. Particular technical requirements
for a software-based enterprise UAS solution include, but are not limited to:

• Compatibility with desktop, notebook and mobile platforms
• Ability to collect and manage UAS fleet and personnel data (pilots licenses and

• Dashboards for comprehensive viewing/monitoring of critical metrics, including flight

hours, time to maintenance, sortie times, and pilot information

• Mapping interface for viewing assets spatially in context of navigation charts, weather

training records)

data, etc.

• Capability to provide alerts regarding OEM parts and safety recommendations
• FAA compliant pilot and maintenance logs
• Detailed pilot certification status and alerts
• Reports on pilot, company, UAS, and maintenance information
• UAS maintenance readiness status, alerts, and reports
• System fleet data, including hours, cycles, and usage.
• Alerts regarding manufacturing component issues or failures and notifications when

issues are detected

• Equipment warranty tracking
• Capability to export data for customized reporting


• Must be hosted on a NOAA authorized GovCloud-FedRAMP certified vendor authorized

at FISMA High Impact level.

• Compliance with Qualys Secure Sockets Layer (SSL) and web server configuration



• Evidence of PCI compliance.
• All development shall be performed by United States citizens located in the United

• All development staff shall have criminal background checks prior to employment.
• Firewalls implemented, access controls in place. Logging in place and monitored.
• Daily vulnerability scans and patching mitigations in place.
• Compliance with GovCloud host’s best practices with evidence of continuous monitoring

• Continuous monitoring strategy required to ensure ongoing assurance of security

in place.

requirement integrity.

o The vendor has agreed to OMAO performing regular and recurring web

application scanning and will document details in a Memorandum of Agreement

• Application scanning on semi or annual basis.
• Must grade as “Low Impact” score on the FISMA Impact Level Determination (SP800-
60 Analysis and FIPS199 Categorization) and satisfy the following NIST SP 800-60,
Volume II information types for Operators SaaS application.

o C.3.1.1 Facilities, Fleet, and Equipment Management Information Type Facilities,
Fleet, and Equipment management involves the maintenance, administration,
certification, and operation of office buildings, fleets, machinery, and other capital
assets considered as possessions of the Federal government. Impacts to some
information and information systems associated with facilities, fleet, and
equipment management may affect the security of some key national assets (e.g.,
nuclear power plants, dams, and other government facilities). The following
recommended provisional categorization of the facilities, fleet, and equipment
management information type is particularly subject to change where critical
infrastructure elements or key national assets are involved: Security Category =
{(confidentiality, Low), (integrity, Low), (availability, Low)}

o C.3.4.2 Inventory Control Information Type Inventory control refers to the

tracking of information related to procured assets and resources with regards to
quantity, quality, and location. The recommended security categorization for the
inventory control information type is as follows: Security Category =
{(confidentiality, Low), (integrity, Low), (availability, Low)}

o C.3.4.3 Logistics Management Information Type Logistics management involves
the planning and tracking of personnel and their resources in relation to their

availability and location. The recommended security categorization for the
logistics management information type is as follows: Security Category =
{(confidentiality, Low), (integrity, Low), (availability, Low)}

o D.13.1 Training and Employment Information Type Training and Employment
includes programs of job or skill training, employment services and placement,
and programs to promote the hiring of marginal, unemployed, or low-income
workers. Additionally, training information can include special training for
personnel involved in Federal government operations (e.g., astronaut training).
The recommended provisional categorization of the training and employment
information type follows: 163 Security Category = {(confidentiality, Low),
(integrity, Low), (availability, Low)}



Start date

End date

10 May 2022

10 May 2023

10 May 2024

10 May 2025

10 May 2026

09 May 2023

09 May 2024

09 May 2025

09 May 2026

09 May 2027

All licenses will be functional upon the date of delivery
All software maintenance will be operational upon the date of award

Base Period

Option I

Option II

Option III

Option IV

Deliverables: -