HTC711XXXXXXX

PERFORMANCE WORK STATEMENT FOR

PORTFOLIO MANAGEMENT SUPPORT

In Assistance of the United States Transportation Command

TASK ORDER HTC711XXXXXXX

01 APR 2026

Prepared by

UNITED STATES TRANSPORTATION COMMAND DIRECTORATE OF COMMAND, CONTROL,

COMMUNICATIONS & CYBER SYSTEM

1. DESCRIPTION OF SERVICES

1.1. BACKGROUND

1.2. SCOPE

2. TASK AREAS

2.1. TASK 1: CONTRACT MANAGEMENT

2.2. TASK 2: CIO SUPPORT OVERVIEW

2.3. TASK 3: CHIEF FINANCIAL OFFICER (CFO) SUPPORT OVERVIEW (FINANCIAL ?)

2.4. TASK 4: LOGISTICS (LOG) IT PORTFOLIO SUPPORT

3. DELIVERABLES SCHEDULE

4. SERVICE DELIVERY SUMMARY

5. PLACE OF PERFORMANCE

6. PERIOD OF PERFORMANCE

7. CYBER SECURITY

7.1. USTRANSCOM – CYBERSPACE WORKFORCE MANAGEMENT AND QUALIFICATION .. 33

7.2. CYBER SECURITY INCIDENT HANDLING

7.3. CYBERSECURITY INCIDENT REPORTING TIMELINES

7.4. MANDATORY REPORTING DATA

7.5. INCIDENT REPORTING COORDINATION

7.6. CONFIDENTIALITY AND NON-ATTRIBUTION STATEMENT

7.7. SUBCONTRACTS

7.8. DATA RIGHTS

8. SECURITY (PHYSICAL, PERSONNEL, INFORMATION, INDUSTRIAL AND

ANTITERRORISM / FORCE PROTECTION)

8.1. GENERAL SECURITY REQUIREMENTS INFORMATION/APPLICABILITY

8.2. CITIZENSHIP AND CLEARANCE REQUIREMENTS

8.3. INFORMATION SYSTEMS (IS) ROLES/CATEGORIES AND ASSOCIATED SUITABILITY

REQUIREMENTS (FEDERAL INVESTIGATIVE STANDARDS)

8.4. ACCESS TO SCOTT AIR FORCE BASE OR USTRANSCOM FACILITIES

8.5. VISITS BY NON-ASSIGNED CONTRACTORS TO USTRANSCOM/SDDC BUILDINGS

8.6. VISITS BY PERMANENTLY ASSIGNED CONTRACTORS

8.7. SECURITY AND EMERGENCY OPERATIONS TRAINING

8.8. ADDITIONAL SECURITY CONDITIONS

8.9. DEROGATORY INFORMATION

8.10. ACCESSING NATO INFORMATION

8.11. SECURITY DEBRIEFING

8.12. ANTITERRORISM/FORCE PROTECTION:

8.13. NOTE TO THE PRIME CONTRACTOR FACILITY SECURITY OFFICER (FSO):

9. OPERATIONS SECURITY (OPSEC)

9.1. OPSEC SECURITY REQUIREMENTS/MEASURES

9.2. COUNTERMEASURES TO UNAUTHORIZED DISCLOSURE OF CRITICAL INFORMATION

10. GOVERNMENT FURNISHED EQUIPMENT (GFE), GOVERNMENT FURNISHED

PROPERTY (GFP), AND GOVERNMENT FURNISHED INFORMATION (GFI)

11. MISCELLANEOUS INFORMATION

11.1. CONTRACTOR EMPLOYEE QUALIFICATIONS/CERTIFICATIONS

11.2. IDENTIFICATION OF POTENTIAL ORGANIZATIONAL CONFLICT OF INTEREST (OCI)

11.3. NONDISCLOSURE AGREEMENT FOR CONTRACTOR EMPLOYEES

11.4. INSPECTION AND ACCEPTANCE CRITERIA

11.5. PACKAGING, PACKING AND SHIPPING INSTRUCTIONS

11.6. TRAVEL

APPENDIX A: REFERENCES

APPENDIX B: ACRONYM LIST

APPENDIX C: NONDISCLOSURE AGREEMENT (NDA)

APPENDIX D: PPBE NONDISCLOSURE AGREEMENT

APPENDIX E: DOD CYBER WORKFORCE FRAMEWORK (DCWF) CODE

ASSIGNMENTS

1. DESCRIPTION OF SERVICES

1.1. Background

The United States Transportation Command (USTRANSCOM) located at Scott Air Force Base (AFB), IL, is one of eleven Unified Combatant Commands in the Department of Defense (DoD).

USTRANSCOM provides command and control (C2) for the synchronized transportation, distribution, and sustainment of personnel and assets, making possible the projection and maintenance of national power wherever needed with speed, agility, high efficiency, and a high level of trust and accuracy.

USTRANSCOM’s mission is to conduct globally integrated mobility operations, lead the broader Joint Deployment and Distribution Enterprise (JDDE), and provide enabling capabilities in order to project and sustain the Joint Force in aid of national objectives. The Commander exercises responsibilities as prescribed in the Unified Command Plan. These duties include being the Mobility Joint Force Provider, DoD Single Manager for Transportation, responsible for JDDE planning and operations, DoD Single Manager for Patient Movement, and Joint Enabling Capabilities. An important requirement of USTRANSCOM including its Transportation Component Commands (TCCs), which are Air Mobility Command (AMC), United States (US) Army Transportation Command, and Military Sealift Command, is to integrate C2, communications, and cyber efforts through the identification and employment of cost effective and efficient deployment and distribution solutions.

1.2. Scope

The overarching requirement of this contract is to provide effectiveness, efficiency, and analysis for the development and sustainment of information technology (IT) capability investments for USTRANSCOM and its components. Capability investment management is a multifunctional effort among the command’s Chief Information Officer (CIO), Chief Financial Officer (CFO), and Chief Operations Officer (COO). This contract assists capability owners and IT managers during policy assessment, capability performance assessment, capital planning & investment, electronic governance management, Clinger-Cohen Act compliance assessment, investment process governance, compliance performance audits and assessments (e.g., regulatory, governance, compliance, audit, directive), information systems (IS) process improvement, project management, IT strategic planning, technology assessments, cyber security documentation development, and portfolio management.

The focus is to provide decision-making transparency during capability requirements development and management. Contract scope includes all USTRANSCOM IT systems, programs, and initiatives (SPIs) under USTRANSCOM purview regardless of the funding type (e.g., Transportation Working Capital Funds (TWCF), Operations & Maintenance (O&M), Research Development Test & Evaluation (RDT&E), etc.). The contractor shall coordinate with the Government to confirm capability management activities are synchronized and integrated among the USTRANSCOM CIO, CFO, COO, capability owners, Information System Security Managers, Information System Security Officers, and IT Service Managers.

2. TASK AREAS

2.1. Task 1: Contract Management

Task 1 consists of the functional activities relating to the administration and management of this effort. The contractor shall identify a Program Manager (PM) by name who shall provide management, direction, administration, clerical assistance, documentation, quality assurance, and leadership during the execution of this Performance Work Statement (PWS). In addition to the PM, the contractor shall designate a principal point of contact for technical issues for each of the CIO and CFO task areas. The contractor’s PM is the authorized point of contact with the Government Contracting Officer’s Representative (COR). PM responsibilities shall include interfacing with Government management personnel, staffing all tasks, formulating, and enforcing work standards, creating personnel and project schedules, mitigating contractor work discrepancies, and communicating Government policies, purposes, and goals to the contractor team.

The contractor shall prepare documents such as briefings, point papers, and meeting minutes related to the status and performance of this PWS. Additionally, the contractor shall provide documentation and give presentations to senior leaders and customers to clearly present PWS task technical approaches and results. The contractor shall provide assistance to the task areas as outlined in this PWS. The contractor shall provide all deliverables listed in Section 3 in accordance with the Service Delivery Summary (SDS) in Section 4.

The contractor shall provide a kick-off meeting within ten (10) business days of the contract award. Minimum topic areas to be covered are contractor team roles & responsibilities, identification of key contract personnel, contract terms & conditions review, billing procedures, any questions concerning PWS and any other topics that may arise. The contractor shall provide the associated kick-off meeting presentation materials no later than (NLT) two (2) business days prior to the meeting. The contractor shall provide post kick-off meeting minutes NLT two (2) business days after the meeting. Meeting invites will include leaders and functional representatives from USTRANSCOM CIO, COO, CFO, the COR, and the Contracting Officer.

2.1.1. Task 1, Subtask 1: Task Order Management Plan

The contractor shall submit the contract Task Order Management Plan (TOMP) within fifteen

(15) business days of the contract start date. The Government will have five (5) business days to review the TOMP and provide comments to the contractor. The contractor shall submit the final plan NLT three (3) business days after receipt of Government comments.

2.1.2. Task 1, Subtask 2: Annual Activity Summary

The contractor shall summarize actions fulfilling contract tasks and deliverables to the Government prior to the end of each performance period. The year-end summary shall detail the specific work performed and objectives for the upcoming year (if applicable). The contractor shall submit the annual report to the Government NLT fifteen (15) business days following the end of each performance period; however, the final option year the report shall be due NLT the last business day of the period of performance.

2.1.3. Task 1, Subtask 3: In-Progress Reviews

The contractor shall schedule, prepare, and conduct quarterly In-Progress Reviews (IPRs) with applicable Government leadership, contractor Functional Task Leads, CORs, Contracting Officer, and Contracting Specialist. At a minimum, the IPR shall summarize status, progress, metrics, recommendations, financial summaries, and concerns in assistance of any task areas or documentation described within this PWS. Furthermore, the contractor shall highlight significant activities planned for the next three (3) calendar months. The contractor shall prepare presentation materials in a format agreed upon by the contractor and Government, or as required by the Government, and shall deliver IPR read-ahead documents NLT two (2) business days prior to the IPR. The contractor shall deliver IPR minutes, with a copy of the presentation slides which shall reflect a record of activity, decisions made, date, location, and attendees, in accordance with paragraph 2.1.5.

2.1.4. Task 1, Subtask 4: Weekly Activity Report

The contractor shall provide accomplishments, issues, problem areas, and items requiring Government action, plus recommendations within the Weekly Activity Report (WAR). The contractor shall list, by each Task Area, the accomplishments of the reporting period. The WAR shall be provided to the COR on a weekly basis, or as required by the Government.

2.1.5. Task 1, Subtask 5: Meeting Minutes

The contractor shall attend meetings or conferences held at USTRANSCOM or other locations (including virtual attendance) as required by the Government. These meetings generally take place during the normal duty hours listed in Section 5 but could be outside of work hours during emergencies or contingencies. The contractor shall provide minutes that detail the results, action items, and impact from these meetings/conferences NLT two (2) business days after conclusion of the meetings/conferences. When applicable, the contractor shall append any briefing materials used or presented during the meeting to the minutes.

2.1.6. Task 1, Subtask 6: Trip Reports

All travel requests shall be submitted in accordance with para 11.6. The contractor shall provide a trip report within five (5) business days of completion of Government directed travel to include the following details: purpose, location, trip duration, travelers, travel costs, individuals contacted during trip, synopsis of discussions, Government decisions, future actions identified, and issues or concerns arising during the trip. The Government will not reimburse local travel and related expenses to the contractor for daily travel to and from the place of performance.

Travel costs should be in accordance with the Joint Travel Regulations.

2.1.7. Task 1, Subtask 7: Service Contract Reporting Requirements

The contractor shall report the following in the System for Award Management : 1) Total dollar amount invoiced for services performed during the previous Government fiscal year (FY), under the contract; 2) Prime contractor direct labor hours expended on the services performed during the previous Government FY; and 3) If applicable, Tier 1 subcontract number, including Data Universal Numbering System number/Unique Entity Identifier and name, and the number of subcontractor direct labor hours expended under the contract. Reporting inputs shall be for the labor executed during the period of performance during each Government FY, which runs from October 1 through September 30.

2.1.8. Task 1, Subtask 8: Transition-Out Plan

If the Government terminates this contract for any reason or if, at the discretion of the Government, an option year is not exercised, the contractor may be given up to a sixty (60) calendar-day transition period. The contractor shall assure no logistics or contract data is corrupted, changed, or altered in a manner that would cause damage to the Government. The contractor shall meet performance requirements and cooperate with the successor contractor during the transition period.

During the transition period, the contractor shall provide the assistance required to assure the orderly transition of all operations and provide transitional planning necessary to allow the follow-on contractor to commence uninterrupted operations at the end of the transition period.

The contractor shall also establish and maintain effective communication with the follow-on contractor/Government personnel for the period of the transition via weekly status meetings. The contractor shall make certain follow-on contractor personnel are permitted access to observe all operations, including workflow, priorities, scheduling, equipment handling/processing, parts storage, safety, and security. Familiarization visits shall not interfere with the activities of the contractor or Government personnel.

The contractor shall provide and implement a Transition-Out Plan within forty-five (45) calendar days prior to expiration or notification of contract termination. To assure a seamless transition, the contractor shall identify how it will coordinate with the follow-on contractor and Government personnel to transfer knowledge regarding the following:

• Project management processes

• Points of Contact

• Location of technical and project management documentation

• Schedules and milestones

• Status of ongoing technical initiatives

• Appropriate contractor-to-contractor coordination

• Transition of key personnel

• Actions required by the Government

• File plan, work related documents, files, policies, and processes

• Individuals are granted access permissions to the locations they are responsible for performing

• Locations of and access to contractor-developed documentation, libraries, repositories, shared file systems, and Government SharePoint-based sites

The contractor shall organize all work-related documents, files, and store them on the designated Government collaboration tool. The contractor shall develop, maintain, and provide a file plan outlining the file structure and locations of files. Status for each task activity (e.g., projects or activities in facilitation of PWS Tasks) shall be documented, to include recent, current, and pending actions. The contractor shall deliver all data, compiled and un-compiled source code, flow charts, and business processes for the system and aid applications upon the request of the Government and at the completion of this task order.

2.2. Task 2: Chief Information Officer Support Overview

Task 2 provides assistance to the CIO to comply with public law (PL) and DoD guidance in order to:

(1) Provide analysis and recommendations to aid the Government during the development, review, maintenance, and integration of information resources management policies, standards, and governance processes.

(2) Evaluate the effectiveness, efficiency, and security of IT investments.

(3) Monitor, enforce, and report on CIO compliance.

(4) Manage IT investments by IT capability portfolios.

2.2.1. Task 2, Subtask 1: Chief Information Officer Governance and Executive Support

The contractor shall assist the Government in the creation and maintenance of CIO processes and provide executive assistance in the execution of CIO responsibilities. The scope of this task area is defined by Title 40, Section 11315.b, DoD Directive 5144.02 DoD CIO, USTRANSCOM Instruction (USTCI) 3900.01 Mission Area Management, and US Transportation Command Instruction (USTCI) 5801.03, Corporate Governance Process.

While USTRANSCOM does not currently have a documented CIO program (e.g., USTRANSCOM PD 33-32 CIO Program), the contractor shall align their assistance to the overarching CIO responsibilities in accordance with DoD CIO guidance and USTRANSCOM-specific governance processes. The contractor shall work closely with USTRANSCOM leadership to verify alignment with the command's strategic priorities and operational needs, and fill any gaps created by the absence of a formal CIO program.

The contractor shall understand and articulate CIO policy, CIO governance processes, technical standards, compliance procedures, and processes. The contractor shall have expert knowledge of Federal, DoD, and USTRANSCOM CIO processes, strategies, responsibilities, and activities, which include the following:

• Annual Compliance Reporting:

The contractor shall aid the Government in preparing and submitting annual compliance reports, including the SOC, SOA, and other required reports.

• Federal Laws and Acts:

o Accessibility of Information and Communications Technology (ICT) (DoD MANUAL 8400.01) which implements Section 508 of the Rehabilitation Act of o Electronic Government Act (PL 107-347) o Paperwork Reduction Act (PL 104-13) o Government Performance and Results Act (PL 103-62) o Clinger-Cohen Act (Division E of PL 104-106) o Federal Information Security Management Act (FISMA) (PL 107-347) o Federal Acquisition Reform Act (Division D of PL 104-106) o Federal Information Security Modernization Act of 2014 (PL 113-283) o Chief Financial Officers Act of 1990 o Privacy Act of 1974 o Government Paperwork Elimination Act of 1998 o Information Quality Act of 2000 o Freedom of Information Act of 2000 o Digital Accountability and Transparency Act of 2014 o Evidence-Based Policy Making Act of 2018 o Open Government Data Act of 2018 o Creating Advanced Streamlined Electronic Services for Constituents Act of 2019 o Internet of Things Cybersecurity Improvement Act of 2020 o IT Modernization Centers of Excellence Program Act of 2020 o Federal Information Technology Acquisition Reform Act (FITARA), Cybersecurity Information Sharing Act of 2015 (CISA)

• Executive Orders, Presidential Memoranda, Proclamations, and National

Security Directives:

The contractor shall be familiar with CIO responsibilities as they pertain to these directives and validate compliance with their requirements.

• Department of Homeland Security and Cybersecurity and Infrastructure Security Agency Binding Operational Directives:

The contractor shall understand and assist compliance with Department of Homeland Security (DHS) Binding Operational Directives and Cybersecurity and Infrastructure Security Agency Binding Operational Directives and National Security Agency Cybersecurity Advisories and Guidance, as applicable to USTRANSCOM operations.

The contractor shall also be familiar with the Office of Management and Budget and DoD memorandums, circulars, directives, and instructions issued to bolster these laws. The contractor shall also be familiar with CIO compliance management tools, including:

• DoD IT Portfolio Repository (DITPR)

• Enterprise Mission Assurance Support Service (eMASS)

• Integrated Business Framework Data Alignment Portal

• USTRANSCOM Compliance Monitoring and Reporting Tool (CMaRT)

The contractor shall be a subject matter expert in cybersecurity and current cybersecurity trends, as well as governance best cyber practices. The contractor shall create and coordinate task-related products and proposed responses in the format agreed upon by the contractor and Government. The contractor shall coordinate with Government representatives to complete work products on or before established suspense set by the Government Functional Manager.

2.2.2. Task 2, Subtask 2: Cyber and IT Plans Support

The contractor shall assist the Government by creating, coordinating, staffing, and maintaining strategic guidance for Command, Control, Communications, and Cyber (C4); IT; and associated plans and strategies, including concepts, research documents, roadmaps, Plans of Action and Milestones (POAMs), and other necessary documentation. Deliverables are due NLT two (2) weeks prior to TCJ6 suspense, or as agreed upon by the contractor and Government.

Within 60 calendar days of contract start, the contractor shall:

• Create an Electronic Catalog of strategy documents.

• Assess the cataloged documents and conduct a gap analysis to determine the number and scope of new documents required.

• Maintain the catalog by updating it as documents are changed, deleted, or added. The catalog shall be accessible to all TCJ6 personnel.

The contractor shall create POAMs to address strategic plan gaps and corrective action implementation. Open POAMs shall be updated monthly or more frequently as agreed upon by the contractor and the Government. The contractor shall create staffing packages to assist the Government in coordinating new or updated strategy documentation in accordance with Government suspense.

The contractor shall create and maintain the TCJ6 Strategic Themes Binder (electronic), which includes messaging regarding the cyber line of effort. If the binder does not exist, the contractor shall develop it in coordination with the Government. The binder shall be updated within five (5) business days when the themes or messages change and shall be accessible to all TCJ6 personnel. The contractor shall provide annual IT Strategy Reviews and on-demand strategy updates in accordance with Government suspense.

The contractor shall provide Cyber and IT Plans Support by facilitating Integrated Process Teams (IPT) or working groups for TCJ6-directed initiatives. Associated tasks include:

• Identifying stakeholders.

• Scheduling meetings.

• Preparing read-aheads.

• Tracking action items.

• Providing meeting minutes.

• Codifying processes in accordance with Government suspense.

2.2.2.1. Cyber Engagements

The contractor shall track the USTRANSCOM strategic calendar to develop schedules and topics for visitors from external Government, commercial, and academic organizations. The contractor shall coordinate and work with the Commander’s Action Group and the Strategic Management Group to perform subtask.

The contractor shall have expert knowledge of the Joint Strategic Planning System and associated processes, products, joint doctrine, and command strategy. The contractor shall aid in the development and integration of the Functional Campaign Plan for Global Deployment and Distribution (FCP GDD), Component Campaign Plans (CCP), and Global Campaign Plans, as well as related assessments. The contractor shall provide briefings to TCJ6 leadership on these efforts.

The contractor shall:

• Create and coordinate change documentation to the FCP GDD and CCP, including recommended change position papers (estimated at two per month) and staffing packages per a schedule agreed upon by the contractor and the Government. Deliverables are due two (2) weeks prior to the TCJ6 suspense or as agreed upon.

• Submit approved, finalized changes to the J6 Strategy Point of Contact (POC) once approved by the Government.

• Assist in Government-led studies to assess mission assurance and Command, Control, Communications, and Cyber Systems cybersecurity readiness of critical elements of the JDDE (e.g., strategic seaports).

The contractor shall review products from other organizations to assess their impact on TCJ6 and USTRANSCOM plans and missions (e.g., strategic estimate, command posture statement, integrated priority list, and command joint assessment) via the Requirements and Resourcing Alignment Board (RRAB) and Mission Engineering and Integration Activity (MEIA). The contractor may be tasked with aiding in these areas as needed.

The contractor shall assist with Cyber External Engagements (e.g., USTRANSCOM Commander Senior Leader Cyber Roundtable, National Defense Transportation Association conferences, AMC, Air Force events such as Cyber Week, and Defense Information Systems Agency, Office of the Secretary of Defense (OSD), Combatant Command (CCMD)s, and Joint Staff customer engagement forums) by:

• Identifying and coordinating topics, speakers, and guests.

• Providing logistical aid (e.g., venue selection, coordinating visit requests, arranging and facilitating meetings).

• Creating administrative documentation (e.g., bio books, nametags, and agendas).

• Attending meetings and capturing engagement meeting minutes for Government review and approval.

The contractor shall submit related documentation and conference logistics inputs (e.g., venues, invitee lists) for Government approval five (5) business days prior to the suspense date. The Government anticipates no more than four (4) such events per year.

The contractor shall propose, draft, and coordinate academia engagements and Cooperative Research & Development Agreements (CRADAs) for Government approval. The contractor shall document all outcomes and submit them to the Government within five (5) business days following completion of CRADAs.

2.2.3. Task 2, Subtask 3: Chief Information Officer Risk and Compliance Assessment Overview

The contractor shall assist the Government and offer recommendations to assess compliance with existing Federal, DoD, and USTRANSCOM policy and governance. The contractor shall conduct assessments of USTRANSCOM SPIs for statutory compliance. Assessments shall include, but are not limited to, DoD and USTRANSCOM CIO policies, privacy impact assessments (PIA), Clinger-Cohen Act, USTRANSCOM Organizational Execution Plan (OEP), Cybersecurity Compliance Scorecards, and FITARA compliance and reporting. Additionally, reports shall describe the assessed area, methodology used, and any compliance shortfalls.

2.2.3.1. Assessment Support

Assessment and compliance reporting is an iterative process that is built upon weekly, monthly, and quarterly reports, which are used to produce the annual USTRANSCOM CIO/CFO SOC, SOA, Annual Letter of Assertion (LoA) of Remediation of Material IT Weaknesses. The contractor shall provide statutory compliance assessments to the TCCs, CIO Staffs, Program Managers, System Managers, and other Government offices as directed by the USTRANSCOM CIO (through the TCJ6 functional manager).

The contractor shall use the Government-designated tools, applications, and other Government-provided data sets (e.g., eMASS, DITPR, and CMaRT) as the authoritative sources of compliance information. Specifically, the contractor shall provide statutory compliance information to the PMs by monitoring Programs of Record and IT systems compliance by collecting, analyzing, and assessing pertinent data from the appropriate tools and databases. The contractor shall provide compliance health status updates using the following deliverables:

• Weekly IT Compliance Summary: Includes weekly stoplight status of all measures.

• Weekly POR and IT Systems Cybersecurity Compliance Scorecards: Includes a 90-day outlook for upcoming issues.

• Monthly TCC Cybersecurity Compliance Scorecards: Includes a 90-day outlook of upcoming issues.

• CIO Cybersecurity Reports: As needed to meet other Joint or DoD requirements.

• Audit and Assessment Reports: Schedule within 30 days of contract start date and provide an updated schedule annually.

• USTRANSCOM CIO Program Compliance Audit and Assessment Checklist

Review: Within 30 days of contract start date and update as needed.

• Monthly Audit and Assessment Reports: In accordance with a schedule agreed by the Government.

• Quarterly CIO Metrics Report: Report includes results of assessments, reporting baselines, performance trends, problem areas, and corrective actions. Upon CIO approval, the contractor shall disseminate the report to identified stakeholders. This report shall be prepared in accordance with the Annual CIO Federal Information Security Management Act of 2002 Metrics or other applicable directives.

• Annual USTRANSCOM CIO/CFO SOC, SOA and LoA Support: Identify data, artifacts, and pertinent issues to assist the Government in preparing the SOC, SOA, and LoA for each fiscal year’s Information Technology budget and deliver within ten (10) business days prior to the Government-provided suspense.

2.2.3.2. Compliance Tool Support

The contractor shall identify and recommend improvements to CIO processes and tools used to collect statutory compliance information and data. The contractor shall assist capability owners, subject matter experts, functional managers, PMs, and TCC CIO staffs to improve the accuracy of their reporting data. The contractor shall monitor and improve reporting processes to achieve complete and accurate inputs to the DITPR. The contractor shall provide assistance to the DITPR Action Officer in the implementation of new data elements and functionality in the Government-designated tools or applications to assist DITPR reporting, as required by the Government.

The contractor shall perform the following:

• Schedule and conduct process/data improvement meetings with documents and briefings due NLT two (2) business days prior to the meeting.

• Respond to follow-up questions for clarification; track action items and deliver as part of the meeting minutes. Meeting minutes are due NLT two (2) business days after the meeting.

• Provide a Quarterly DITPR Process Improvement Report.

The contractor shall monitor the data within the Government-designated tools or applications for consistency and accuracy by working with analysts, data providers, data modelers, and other functional experts. The contractor shall identify requirements and make Compliance Tool Improvement Recommendations for updating, adding, or removing data fields as policies and processes change, and provide assistance to implement and test the resulting changes to Government-designated tools or applications.

The contractor will assess the required data elements to comply with statutory-mandated continuous monitoring and reporting. The contractor shall recommend and collect Compliance Tool Metrics to establish performance baselines and assess process improvements. The deliverables include:

• Compliance Tool Improvement Recommendations for the Government-designated tools or applications.

• Quarterly Compliance Tool Metrics (performance analysis).

2.2.3.3. IT Investment Review Process Support

The contractor shall provide assistance with the overall IT Investment Review (ITIR) process owner. This assistance includes reviewing all new IT hardware, software, and service requirements submitted to the Government to assess statutory compliance. The contractor shall provide an ITIR Compliance Summary document as part of the automated investment review workflow, as required by the Government.

2.2.4. Task 2, Subtask 5: Section 508 Compliance Support (Optional)

2.2.4.1. General Purpose and Scope

The Contractor shall provide qualified personnel to staff the USTRANSCOM Section 508 Office. These personnel shall provide expert guidance, oversight, and assistance to assure that all Electronic and Information Technology and related processes within USTRANSCOM are fully compliant with Section 508 of the Rehabilitation Act of 1973, as amended (29 U.S.C. § 794d), and its implementing regulations at 36 Code of Federal Regulations (CFR) Part 1194, conforming to Web Content Accessibility Guidelines (WCAG) 2.0 Levels A & AA, unless otherwise specified. This includes, but is not limited to, programs, ICT, procurement activities, websites, electronic documents, and multimedia content.

2.2.4.2. Specific Tasks and Responsibilities

a) Section 508 Program (in assistance to the Government Program Manager):

The Contractor shall:

• Provide expert guidance and assistance to command personnel on Section 508 requirements.

• Monitor and track Section 508 compliance across all command activities.

• Develop and maintain policies, procedures, and guidelines related to Section 508 compliance (in assistance to program manager).

• Prepare and submit required Section 508 reports to (program manager) and appropriate oversight agencies.

b) ICT Accessibility (in assistance to Government Program Manager):

The Contractor shall:

• Conduct accessibility reviews of ICT procurements to validate compliance with Section 508.

• Provide guidance on developing accessible software, hardware, and other ICT products.

• Perform accessibility testing of ICT products and services using automated and manual methods, including assistive technologies.

• Assist in the development of remediation plans for identified accessibility issues.

• Maintain an inventory of ICT products and their accessibility status.

• Assist to verify that all ICT documentation is accessible to individuals with disabilities.

c) Procurement Accessibility:

The Contractor shall:

• Review procurement solicitations and contracts to validate inclusion of appropriate Section 508 requirements.

• Provide guidance to procurement officials on selecting accessible products and services.

• Evaluate vendor proposals for accessibility compliance.

• Develop and maintain a library of accessible procurement templates and resources.

d) Website and Digital Content Accessibility:

The Contractor shall:

• Confirm that all USTRANSCOM websites and digital content are compliant with Section 508 and WCAG 2.0 Levels A & AA. (by coordinating with site owners.)

• Help Conduct accessibility audits of websites and digital content.

• Provide guidance on creating accessible web content, including documents, multimedia, and interactive elements.

• Develop and maintain website accessibility guidelines and best practices (with site owners).

• Oversee website remediation efforts to address accessibility issues (with site owners).

e) Training and Awareness:

The Contractor shall:

• Develop and deliver Section 508 training to command personnel, including procurement officials, developers, and content creators.

• Raise awareness of Section 508 requirements through outreach activities.

• Coordinate with training office to maintain training records and materials.

2.2.4.3. Personnel Qualifications and Requirements

a) Minimum Qualifications:

The Contractor shall provide personnel who meet the following minimum qualifications:

• Bachelor's degree in a related field (e.g., Information Technology, Accessibility Studies, Computer Science).

• 3 years of experience in Section 508 compliance and accessibility.

• Demonstrated knowledge of Section 508 standards, WCAG guidelines, and assistive technologies.

Strong communication, interpersonal, and problem-solving skills.

b) Section 508 Subject Matter Expertise:

The Contractor's personnel filling the Section 508 Office staffing roles must be Section 508 Subject Matter Experts (SMEs). If candidates do not currently possess in-depth Section 508 expertise, the contractor must provide a detailed plan for how they will achieve this expertise within 6 months of start of performance.

c) Training and Certification

The Contractor shall confirm that all personnel receive appropriate Section 508 training.

Personnel must be certified, or be able to be certified, as a "Trusted Tester" meeting USTRANSCOM requirements.

• Personnel shall complete a comprehensive Section 508 training course within 30 days of commencing work under this contract.

• The training must cover Section 508 standards, WCAG guidelines, accessibility testing techniques, and assistive technologies.

• Personnel shall obtain Trusted Tester certification from the DHS training program within 3 months of commencing work under this contract.

• The Contractor shall provide documentation of training completion and certification status.

• Contractors must maintain current knowledge of emerging accessibility standards and technologies.

d) Experience with Assistive Technologies:

The Contractor’s personnel shall possess hands-on experience using a variety of assistive technologies, including screen readers (e.g., Job Access with Speech, NonVisual Desktop Access), screen magnifiers, and voice recognition software.

2.2.4.4. Deliverables

The contractor shall deliver the following:

• Accessibility Test Reports (for Program Manager)

• Remediation Plans

• Training Materials

• Monthly Progress Reports detailing Section 508 compliance activities

• Annual Section 508 Compliance Report (with program manager)

2.2.4.5. Government Furnished Information

The government will provide the Contractor with access to relevant documents, policies, and systems necessary to perform the tasks outlined in this PWS.

2.2.4.6. Quality Assurance and Surveillance Plan

The Government will monitor the Contractor's performance using a Quality Assurance and Surveillance Plan (QASP). The QASP will outline the methods used to assess the Contractor's compliance with Section 508 requirements and the quality of services provided.

2.2.4.7. Reporting and Documentation

The contractor shall maintain documentation of all accessibility testing and remediation efforts.

This documentation will be made available to the Government upon request.

2.2.4.8. Security Requirements

All Contractor personnel shall comply with all applicable security requirements, including background checks and security clearances, as required by the Government.

2.3. Task 3: Chief Financial Officer Support Overview

USTRANSCOM J8 (TCJ8) is the Program Analysis and Financial Management Directorate which formulates and integrates the command’s budget while focusing on the effective and efficient use of the command’s resources. TCJ8 develops command fiscal policy procedures and resolves issues on use of the CCMD-wide TWCF budget. TCJ8 is the fiscal Corporate Governance Process lead for establishing cost benefit analysis priorities for future Capital investments. The contractor shall assist the CFO in leading the Command’s Information Technology Portfolio Management (PfM) and Capital Planning and Investment Control (CPIC) processes. The CFO along with mission capability support staff analyze, select, control, and evaluate USTRANSCOM’s investments, specifically, to accomplish the following:

(1) Develop effective and efficient IT capabilities assisting the most important operational needs.

(2) Continue to evolve the PfM process.

(3) Optimize investment decisions.

(4) Aid the Annual Defense Business Certification Process and Information Technology (IT)/

Cyberspace Activities (CA) budget reporting as required by DoD CIO and the Office of Management and Budget.

(5) Administer a disciplined requirements management process, linking budget/Program Objective Memorandum (POM) formulation and execution to efficiently aid operational outcomes while meeting statutory and regulatory obligations.

2.3.1. Task 3 Subtask 1: Portfolio Management

The primary mission of the PfM process is to integrate efforts associated with IT requirement investment and management activities. PfM activities include analyze, select, control, and evaluate (ASCE) relative to mission capabilities, the command vision, and performance impact.

The contractor shall assist the Government in conducting, assessing, and exploring the efforts necessary to develop capabilities that refine USTRANSCOM processes and to improve and influence the requirement management and investment decision-making process across USTRANSCOM capability areas. The capabilities portfolio includes SPIs under USTRANSCOM purview (SPIs may include service contracts) regardless of the funding type (e.g., TWCF, O&M, and RDTE, etc.).

2.3.1.1. Requirements Management Process

The USTRANSCOM requirement investment management process requires stakeholders accomplish specific actions and make required decisions at key points in the integration process to validate and approve requirements, program and budget funding, and manage the design, development, and fielding of capabilities through the acquisition process.

To aid USTRANSCOM in this process, the contractor shall assist the Government in the following areas:

• Integrate, synchronize, and coordinate requirements across USTRANSCOM-managed processes and capability areas to assure alignment to strategic priorities and capability demand.

• Assist Government requirement managers and capability owners and help guide their efforts to assist requirement accuracy.

• Accomplish initial requirements management review, assist Government managers as to whether the requirement meets enterprise criteria, collect from SMEs requirements documentation, which can include use cases and assisting course of action analysis for solution development. This includes assisting project leads vetting new IT requirements such as those generated from RDTE projects through the Mission Area Management (MAM) and appropriate Sub-MAM and inclusion in the budget submissions. The contractor shall maintain the IT portfolio, tools and guides that are used by the MAM requirements vetting, budget formulation and execution processes, to include maintaining MAVEN admin tables, user SOPs, and associated guidance.

• Evaluate requirements against capability gaps, strategic guidance, priority lists and lessons learned to generate resource and compliance informed decision packages.

• Participate in Doctrine, Organization, Training, Materiel, Leadership, Personnel, Facilities – Policy (DOTMLPF-P) assessments to accomplish operational objectives in assistance of USTRANSCOM-managed processes and capability areas to assist in delivery of goals and objectives.

• Create and execute database retrievals from USTRANSCOM repositories, as required, to assist the requirement management process.

• Annually, staff Budget formulation data calls, using the designated Government tool to prepare for the annual sustainment and capability review.

• Collect and collate requirement budget data to help prepare staff packages to assist Government manager briefings to USTRANSCOM governance bodies.

• Document internal processes: Create and update, at least annually or as needed to document changes, the methodology for accomplishing the necessary processes, use of tools, and techniques required to gather and analyze requirement information to optimize investment decisions, consistent with governance, risk, and compliance management mandates.

• The contractor shall create and maintain user SOPs annually to aid program managers, Sub-MAMs and other key stakeholders in completing processes required by the MAM.

• Assist key governance and integration forums, including the Requirements and RRAB and the MEIA, which guide the command's capability development and resource allocation.

2.3.1.2. IT Portfolio Optimization Support

The contractor shall maintain the IT Portfolio Optimization Presentation, a comprehensive slide deck, detailing every SPI in the command's IT portfolio. This Presentation is due annually and captures program description, stakeholders, interfaces, financial details, MAM assignment, program support personnel, lines of codes, authority to operate, impacts, risks, priority, way ahead, and touch points to the Commander’s Mission and Priorities.

The contractor shall assist activities that are consistent with decomposing current system capabilities and identifying opportunities for other SPIs to partially or fully fulfill. This task includes identifying duplicative capabilities and recommending sustainment options of remaining capabilities, presenting findings to governance bodies, and assisting decisions related to FY USTRANSCOM Budget Estimate Submissions (BES). The contractor will provide assistance to a cross-functional Working Group chartered to reach consensus on identification of duplicative capabilities and courses of action to optimize the command's portfolio. The contract assist consists of various roles (scheduling, facilitating, and preparing agenda, written material, and minutes).

2.3.1.3. Meetings

The contractor shall participate in and generate necessary materials to assist with meetings. The contractor shall provide consultation and administrative assistance by preparing meeting agendas, slide presentations, read-ahead documentation, aid in pre-briefings, act as meeting facilitator, prepare action items, meeting minutes, and conduct follow-up action for Government review and approval. Materials for any pre-briefing session are due to the Government NLT 72 hours prior to the pre-brief. Final read-ahead materials for the main meeting are due NLT 48 hours prior to the meeting. Meeting minutes are due to the Government NLT two (2) business days after meeting and will include any action items identified.

The following are the typical meetings related to Portfolio Management:

• Annual Sustainment Review (SR), Capability Review (CR), and Investment Review (IR). Sustainment reviews analyze and select capabilities for continued aid, capability reviews analyze and select additional sustainment requirements and new capabilities for investment, and the investment reviews evaluate investments and their outcomes.

Expect up to 10 meetings annually assisting with sustainment and capability reviews and 12 meetings annually assisting with investment reviews.

• Monthly Capability Portfolio and Enterprise Architecture General Officer Steering Committee meetings. These meetings will be used to validate DOTMLPF-P recommendations and conduct investment recommendations. Expect up to three monthly meetings.

2.3.2. Task 3 Subtask 2: Portfolio Management Framework Process Support

To aid USTRANSCOM in this process the contractor shall perform the following tasks:

• Assess and evaluate existing Government PfM adopted methodologies, techniques and tools and perform portfolio assessments to achieve specific, and measurable portfolio outcomes. Provide assistance to the MAM, including the eight sub-MAMs, who have oversight on approximate 53 SPIs, to shape the required inputs necessary for the IT Portfolio and required command reviews.

• Recommend PfM policy, business rules, procedures, and update and maintain a government approved documentation methodology for PfM processes.

• Assist with the development, update, and maintenance of PfM governance products and bodies. PfM governance materials may require the contractor to collect information from Government designated SMEs. This process may also require the incorporation of material generated in working groups or extracted from meeting presentations. The contractor shall merge these products, then assemble, review, edit, format, and publish PfM governance material with Government participation, oversight, and approval.

• Develop quarterly portfolio investment and focus area recommendations and prepare quarterly Portfolio Investment Reports for Government review and approval.

• Recommend and assist in Performance Metrics to evaluate the effectiveness of PfM efforts and integrate Performance Metrics into the governance, policies, processes, and operations to align portfolio investment activities with strategic goals and objectives.

The contractor shall evaluate the existing USTRANSCOM IT Portfolio using the ASCE process as defined in DoD Instruction (DoDI) 8115.02, Information Technology Portfolio Management Implementation capitalizing off the annual SR, CR, and IRs. ASCE written reports are due quarterly in conjunction with the Portfolio Investment Report.

In addition to ASCE, the contractor shall perform the following activities per a schedule agreed upon by the contractor and Government:

• Document oversight and policy for the PfM process as it evolves through white papers and analysis reports.

• Identify necessary management controls reinforcing requirement investment and execution through white papers and analysis reports and provide to the Government for review and approval.

2.3.3. Task 3, Subtask 3: Capital Planning and Investment Control

The contractor shall aid the CFO in research, planning, enhancement, and development of USTRANSCOM investment management and planning.

2.3.3.1. Investment Support

The contractor shall assist in OSD-Level (e.g., DBC / IRB, Joint Requirements Oversight Council (JROC), etc.) organizational and management requirement approval actions (staffing, coordination, comment adjudication) as required by USTRANSCOM.

2.3.3.2. Funds Certification Support

The contractor shall collect and assess the required information to assist the Government in preparing the documentation for OSD-level fund certification and out-of-cycle modification packages. The contractor shall also provide administrative assistance for the required management pre-briefs for appropriate committee meetings. The contractor shall leverage existing data collection tools and tailor output to address enterprise requirements, Business Process Re-engineering and the Command Strategy/Vision and provide executive summaries to the Government three (3) business days prior to the OSD level meeting.

2.3.3.3. DBS Management and Fund Certification Guidance and Repository Support

The contractor shall assist the Government in summarizing and disseminating policy, procedures, and guidance documentation related to DBS management and fund certification. The contractor shall assist in implementing guidance through the use of designated data repositories as determined by the Government.

The contractor shall summarize results of OSD-level fund-certification committee meetings that require USTRANSCOM participation as identified by the Government (no more than 24 meetings annually). The contractor shall verify quality, consistency, completeness, and timeliness of the information by following up on issues, data calls, and provide data repository inputs based on the Investment Decision Memorandum per a schedule agreed to between the contractor and the Government. Guidance Summary reports are due within five (5) business days of meeting completion. The contractor shall assist in implementing updates of SPI data in Government-maintained repositories.

2.3.3.4. CFO Support - Business Case Analysis

The contractor shall assist the Government with Business Case Analysis (BCA) work when specifically requested.