21-18-238RXN187_Attachment_I_-_Statement_of_Work.docx

21-18-G88RXN187HSCG23-18-

Attachment I – Statement of Work

STORMFORCE 2018 SUPPORT SERVICES FOR THE

U.S. COAST GUARD (USCG), OFFICE OF ISR SYSTEMS MANAGEMENT DIVISION (CG-26) STATEMENT OF WORK (SOW)

GENERAL.

SCOPE.

The purpose of this SOW is to obtain contractor technical support to assist the USCG Office of Intelligence, Surveillance, And Reconnaissance (ISR) Systems and Technology Division (CG-26) in providing technical solutions for the USCG participation in the Intelligence Community Full Scale Exercise called STORMFORCE 2018. CG-26 is coordinating the C5ISR network integration in collaboration with DHS and component partners to include Immigration Customs Enforcement (ICE), Customs and Boarder Protection (CBP), and Homeland Security Investigations (HIS).

Tasks are divided into the three categories shown below:

· Rental of a focus beam tracking antenna (See paragraph 5.1)

· On siteOn-site support for the antenna system (See paragraph 5.2)

· Travel Costs (See paragraph 5.3)

BACKGROUND.

The USCG participated in the Under Secretary of Defense Intelligence sponsored exercise STORMFORCE 2017. This is an Intelligence Community (IC) joint full-scale exercise with heavy emphasis on geospatial and signal intelligence systems and technologies. USCG participated in this exercise at the UNCLASSIFIED level, but the interface to the IC systems and technologies afforded the Coast Guard an unprecedented opportunity to evaluate selected systems against a range of maritime missions. This exercise demonstrated that US Coast Guard mission execution can be enhanced by leveraging appropriate systems.

An ad hoc group of Coast Guard planners assembled scenarios and provided interface to STORMFORCE 2017 Planners. Contract support allowed us to engage and collaborate within DHS (CBP, HSI, and CG), and the IC partners. This effort was the third opportunity for the Coast Guard to demonstrate and exercise communications equipment that can become the foundation for an Enterprise Tactical ISR Data Network – which is the subject of an ongoing study/analysis being conducted by the USCG Research and Development (R&D) Center.

CONTRACTOR PERSONNEL.

System Engineer II. The Contractor shall provide (2) System Engineer II who shall be responsible for all work performed under this contract and will report to the CG-26 Technical Lead during the STORMFORCE 2018 Exercise (see SOW 1.4).

Personnel Identification. Contractor personnel visiting USCG, Department of Homeland Security (DHS), or Department of Defense (DoD) facilities shall wear a DHS or DoD Common Access Card or (at a minimum) wear an identification badge that displays employer name and the employee photo, name, clearance-level and badge expiration date. Contractors shall comply with all Government access and escort rules and requirements.

Contractor employees working on-site at Government facilities shall wear an identification badge. All Contractor employees shall identify themselves as Contractors when their status is not readily apparent and display all identification and/or visitor badges in plain view above the waist at all times.

For all Contractors working for the USCG, the Contractor shall use the Department of Defense (DoD) Contractor Verification System (CVS) to apply for a Common Access Card (CAC) for their employees that require access to a USCG or other federally controlled computer information system. To obtain a CAC, each Contractor employee must complete an online Electronic Questionnaire for Investigations Processing (eQIP) (http://www.opm.gov/e-QIP/index.asp). The Contractor may allow an employee to commence work on items that do not require access to USCG or other federally controlled computer information systems after conducting its own background and credit check, and submitting the results to the COR for approval. The USCG may refuse to allow access until final adjudication. Contractor employees granted access to USCG or other federally controlled computer information systems must maintain qualification for access throughout their employment under the contract.

Contractor or subContractor employees who are declined a CAC via the CVS are ineligible to perform work under this contract. When an employee with a CAC is no longer performing work under this contract, the Contractor shall notify the COR on the same day the employee stops working and shall deliver the CAC to the COR within seven (7) calendar days after such notification. All Government issued equipment, identification, or proxy card must be returned to the COR within seven (7) calendar days.

Employee Conduct - The Contractor’s employees shall comply with all applicable Government regulations, policies and procedures (e.g., fire, safety, sanitation, environmental protection, security, “off limits” areas, wearing of parts of military uniforms, and possession of weapons) when visiting or working at Government facilities. The Contractor shall ensure Contractor employees present a professional appearance at all times when visiting or working at Government facilities and that their conduct shall not reflect discredit on the United States, the DHS, or the USCG while working on this contract.

The Government may, at its sole discretion, direct the Contractor to remove any Contractor employee from USCG facilities for misconduct or security reasons. Removal does not relieve the Contractor of the responsibility to continue providing the services required under this task order.

KEY PERSONNEL.

Before replacing any individual designated as Key by the Government, the Contractor shall notify the Contracting Officer no less than 15 business days in advance, submit written justification for replacement, and provide the names and qualifications of any proposed substitutes. All proposed substitutes shall possess qualifications equal to or superior to those of the Key person being replaced. The Contractor shall not replace Key Contractor personnel without acknowledgement from the Contracting Officer.

The following personnel are designated as Key under this contract:

Lead System Engineer II.

SECURITY AND INFORMATION ASSURANCE REQUIREMENTS.

Security Certification/Accreditation. Information Assurance (IA) professionals in significant information security roles are required to have a professional certification in accordance with DoD 8570.01-M (series). This is required to comply with the professional certification requirements within USCG COMDTINST M5500.13 (series).

Separation of Duties. The USCG shall ensure the Contractor complies with NIST 800-53 Rev 3, Security Control CA-2 Security Assessments - enhancement 1 which requires "The organization employs an independent assessor or assessment team to conduct an assessment of the security controls in the information system." Consequently, the vendor that provides C&A services may not perform the security controls testing. This requirement will ensure compliance with DHS Sensitive Systems Policy Directive 4300 A, Section 4.1.4.

Citizenship and Clearance Requirements. Each individual employed under the contract shall be a citizen of the United States of America.

All personnel requiring access to classified spaces at Coast Guard Units as applicable to the contract will be required to hold a current security clearance with a minimum level of UNCLAS. Contractor’s request for authorization will be submitted in accordance with DOD 5220.22M (Industrial Security Manual for Safeguarding Classified Information).

Access to Unclassified Facilities, IT Resources, and Sensitive Information. The assurance of the security of unclassified facilities, Information Technology (IT) resources, and sensitive information during contract performance are essential. The Computer Security Act of 1987, Public Law 100-235, defines "sensitive information" as "any information, the loss, misuse, or unauthorized access to or modification of which could adversely affect the national interest or the conduct of Federal programs, or the privacy to which individuals are entitled under Section 552a of Title 5, United States Code (the Privacy Act) but which has not been specifically authorized under criteria established by an executive order or an act of Congress to be kept secret in the interest of national defense or foreign policy." However, with the exception of certain types of information protected by statute, specific, standard criteria and terminology defining the types of information warranting designation as "sensitive information" does not exist within the Federal Government. Such designations are left to the discretion of each individual agency. In order to assure this information is protected as required by DHS Management Directive (MD) 11042.1 Safeguarding Sensitive but Unclassified (For Official Use Only) Information; Contractors shall comply with the following paragraphs.

Contractors shall execute a DHS Form 11000-6, Sensitive But Unclassified Information Non-Disclosure Agreement (NDA), as a condition of access to such information.

General Handling Procedures. Although FOUO is a standard caveat used by the U.S. Government for identifying sensitive unclassified information, some types of FOUO information may be more sensitive than others and thus warrant additional safeguarding measures beyond the minimum requirements established in this manual. For example, certain types of information may be considered extremely sensitive based on the repercussions that could result should the information be released or compromised. Such repercussions could be the loss of life or compromise of an informant or operation. Additional control requirements may be added as necessary to afford appropriate protection to the information. Contractors must use sound judgment coupled with an evaluation of the risks, vulnerabilities, and the potential damage to personnel or property as the basis for determining the need for safeguards in excess of the minimum requirements and protect the information accordingly.

When removed from an authorized storage location and persons without a need-to-know are present, or where casual observation would reveal FOUO information to unauthorized persons, a "FOR OFFICIAL USE ONLY" cover sheet will be used to prevent unauthorized or inadvertent disclosure.

When forwarding FOUO information, a FOUO cover sheet should be placed on top of the transmittal letter, memorandum or document.

When receiving FOUO equivalent information from another Government agency, handle in accordance with the guidance provided by the other Government agency. Where no guidance is provided, handle in accordance with the requirements of this directive.

Dissemination and Access. FOUO information will not be disseminated in any manner (orally, visually, or electronically) to unauthorized personnel. Access to FOUO information is based on "need-to-know" as determined by the holder of the information. Where there is uncertainty as to a person's need-to-know, the holder of the information will request dissemination instructions from their next-level supervisor or the information's originator. The holder of the information will comply with any access and dissemination restrictions. A security clearance is not required for access to FOUO information. When discussing or transferring FOUO information to another individual(s), ensure that the individual with whom the discussion is to be held or the information is to be transferred has a valid need-to-know, and that precautions are taken to prevent unauthorized individuals from overhearing the conversation, observing the materials, or otherwise obtaining the information.

FOUO information may be shared with other agencies, federal, state, tribal, or local Government and law enforcement officials, provided a specific need-to-know has been established and the information is shared in furtherance of a coordinated and official Governmental activity.

If the information requested or to be discussed belongs to another agency or organization, comply with that agency's policy concerning third party discussion and dissemination. When discussing FOUO information over a telephone, the use of a STU III (Secure Telephone Unit), or Secure Telephone Equipment (STE), is encouraged, but not required.

When unattended, FOUO materials will, at a minimum, be stored in a locked file cabinet, locked desk drawer, a locked overhead storage compartment such as a systems furniture credenza, or similar locked compartment. Materials can also be stored in a room or area that has sufficient physical access control measures to afford adequate protection and prevent unauthorized access by members of the public, visitors, or other persons without a need-to-know, such as a locked room, or an area where access is controlled by a guard, cipher lock, or card reader.

FOUO information will not be stored in the same container used for the storage of classified information unless there is a correlation between the information. When FOUO materials are stored in the same container used for the storage of classified materials, they will be segregated from the classified materials to the extent possible, i.e. separate folders, separate drawers, etc.

IT systems that store FOUO information will be certified and accredited for operation in accordance with federal and DHS standards. Consult the DHS Information Technology Security Program Handbook for Sensitive Systems, Publication 4300A, for more detailed information.

Laptop computers and other media containing FOUO information will be stored and protected to prevent loss, theft, unauthorized access and unauthorized disclosure. Storage and control will be in accordance with DHS Information Technology Security Program Handbook for Sensitive Systems, Publication 4300A.

Transmission of hard copy FOUO within the U.S. and its Territories. Material will be placed in a single opaque envelope or container and sufficiently sealed to prevent inadvertent opening and to show evidence of tampering. The envelope or container will bear the complete name and address of the sender and addressee, to include program office and the name of the intended recipient (if known). FOUO materials may be mailed by U.S. Postal Service First Class Mail or an accountable commercial delivery service such as Federal Express or United Parcel Service. FOUO materials may be entered into an inter-office mail system provided it is afforded sufficient protection to prevent unauthorized access, e.g., sealed envelope.

Electronic Transmission. Unless otherwise restricted by the originator, FOUO information may be sent via non-secure fax. However, the use of a secure fax machine is highly encouraged. Where a non-secure fax is used, the sender will coordinate with the recipient to ensure that the materials faxed will not be left unattended or subjected to possible unauthorized disclosure on the receiving end. The holder of the material will comply with any access, dissemination, and transmittal restrictions cited on the material or verbally communicated by the originator. FOUO information transmitted via email should be protected by encryption or transmitted within secure communications systems. When this is impractical or unavailable, FOUO may be transmitted over regular email channels. For added security, when transmitting FOUO over a regular email channel, the information can be included as a password protected attachment with the password provided under separate cover. Recipients of FOUO information will comply with any email restrictions imposed by the originator. FOUO information shall not be sent to personal email accounts.

FOUO information will not be posted on any other internet (public-facing) website. FOUO information may be posted on the DHS intranet or other Government controlled or sponsored protected encrypted data networks. However, the official authorized to post the information should be aware that access to the information is open to all personnel who have been granted access to that particular intranet site. The official must determine the nature of the information is such that need-to-know applies to all personnel; the benefits of posting the information outweigh the risk of potential compromise; the information posted is prominently marked as FOR OFFICIAL USE ONLY; and information posted does not violate any provisions of the Privacy Act.

Destruction. FOUO material will be destroyed when no longer needed. Destruction may be accomplished by shredding, burning, pulping, pulverizing of hard copy material so as to assure destruction beyond recognition and reconstruction. After destruction, materials may be disposed of with normal waste. Electronic storage media shall be sanitized appropriately by overwriting or degaussing. Paper products containing FOUO information will not be disposed of in regular trash or recycling receptacles unless the materials have first been destroyed as specified above.

Incident Reporting. Contractors who observe or become aware of the loss, compromise, suspected compromise, or unauthorized disclosure of FOUO information will report it immediately, but not later than the next duty day, to the originator and the local Security Official.

PERIOD OF PERFORMANCE.

The period of performance for this contract is for the length of the exercise from 23 April 2018 to 17 May 2018.

PLACE OF PERFORMANCE.

The primary places of performance are:

77 01’ 59.29” W

76 21’ 05.59” W

HOURS OF OPERATION.

The Contractor shall generally perform all work between the hours of 0700 and 1600 ET, Monday through Friday (except Federal holidays).

TRAVEL.

All travel required by the Government outside the local commuting area will be reimbursed to the Contractor in accordance with the Joint Travel Regulations (JTR). The Contractor shall be responsible for retaining a record of COR approval (electronic mail is acceptable) in advance of the travel event. This contract is including travel expenses at the government Per Diem Rates at the Jacksonville, NC rates for (2) System Engineer II.

POST AWARD ORIENTATION.

The Contractor shall attend a Post Award Orientation with the Contracting Officer and the COR no later than five (5) business days after the date of award for this task order. The purpose of the Post Award Orientation, which will be chaired by the Contracting Officer, is to discuss technical and contracting objectives of the SOW and review the Contractor's project plan. The Post Award Orientation will be held at the Government’s facility or via Telephone Conference.

STATUS MEETINGS.

The Lead System Engineer II shall be available to the COR via telephone between the hours of 0800 and 1600 Eastern Time (ET), Monday through Friday, and shall respond to a request for discussion or resolution of technical problems within an hour (1) of notification. The Lead System Engineer II shall be available to meet with the COR upon request to present deliverables, discuss progress, exchange information, and resolve emergent technical problems and issues. These meetings shall take place at the Government's primary facility or at alternate facilities and by other means (e.g., via telephone) mutually agreed upon by the contract parties.

AFTER ACTION REPORT.

The Lead System Engineer II shall author and submit an After-Action Report for the Full-Scale Exercise. All reporting shall be in compliance with the Coast Guard After Action Program (CGAAP), COMDTINST 3010.19(Series). The Lead System Engineer II shall submit initial draft of the AAR NLT 15 days after the conclusion of the Full-Scale Exercise to the CG-26 Technical Lead for review. The CG-26 Technical Lead will route the AAR to the CG-261 Office Chief for review and comment; The CG-26 Technical Lead shall incorporate the changes and submit the final draft to the COR and Contracting Officer within 15 days after the review.

GENERAL REPORT REQUIREMENTS.

Documentation shall be provided to the COR in Microsoft Word 2007 or compatible format. Spreadsheets shall be provided in Microsoft Excel 2007 or compatible format. Presentations shall be provided in Microsoft Power Point 2007 or compatible format. Project timelines/schedules shall be provided in Microsoft Project 2010 or compatible format. Copies of signed forms shall be provided in Adobe Acrobat PDF or compatible format. Drawings shall be provided in AutoCAD (Auto Desk) 2005. Topology drawings shall be provided in Microsoft Visio 2010 or compatible format, if applicable.

ACCESSIBILITY REQUIREMENTS (SECTION 508).

Section 508 of the Rehabilitation Act, as amended by the Workforce Investment Act of 1998 (P.L. 105-220) requires that when Federal agencies develop, procure, maintain, or use electronic and information technology (EIT), they must ensure that it is accessible to people with disabilities. Federal employees and members of the public who have disabilities must have equal access to and use of information and data that is comparable to that enjoyed by non-disabled Federal employees and members of the public.

All EIT deliverables within this work statement shall comply with the applicable technical and functional performance criteria of Section 508 unless exempt.

DHS Office of Accessible Systems and Technology has reviewed this acquisition request and has determined that a National Security Exception for the purposes of Section 508 applies and is thereby authorized. National Security Exception (USCG-20120703-001) signed by DHS Director OAST on 03 July 2012 has been attached and included in the contract file.

DHS ENTERPRISE ARCHITECTURE COMPLIANCE.

All solutions and services shall meet DHS and USCG Enterprise Architecture Policies, standards, and procedures. Specifically, the Contractor shall comply with the following Homeland Security Enterprise Architecture (HLS EA) and Coast Guard Enterprise Architecture (CGEA) requirements:

All developed solutions and requirements shall be compliant with the HLS EA and CGEA.

All IT hardware or software shall be compliant with the HLS EA Technical Reference Mode1 (TRM) Standards and Products Profile.

Description information for all data assets, information exchanges and data standards, whether adopted or developed, shall be submitted to the DHS Enterprise Data Management Office (EDMO) for review and insertion into the DHS Data Reference Model and Enterprise Architecture Information Repository.

Development of data assets, information exchanges and data standards will comply with the DHS Data Management Policy MD 103-01 and all data-related artifacts will be developed and validated according to DHS data management architectural guidelines. Applicability of Internet Protocol Version 6 (IPv6) to DHS-related components (networks, infrastructure, and applications) specific to individual acquisitions shall be in accordance with the DHS Enterprise Architecture (per OMB Memorandum M-05-22, August 2, 2005) regardless of whether the acquisition is for modification, upgrade, or replacement. All EA-related component acquisitions shall be IPv6 compliant as defined in the U.S. Government Version 6 (USGv6) Profile National Institute of Standards and Technology (NIST) Special Publication 500-267) and the corresponding declarations of conformance defined in the USGv6 test program.

GOVERNMENT TERMS & DEFINITIONS.

GOVERNMENT FURNISHED EQUIPMENT (gfe).

The Government will provide access to DHS, DHS component, or USCG equipment with all required software loaded and configured to connect to the USCG Network inside the exercise facility. The DoD Component will provide an internet connection to connect the GFE computer, a desk space, and telephone for Contractor use during the period of performance.

The Contractor shall use GFE only for performance of work under this contract and shall be responsible for returning all GFE in good working condition, subject to normal wear and tear.

CONTRACTOR FURNIISHED EQUIPMENT.

The Contractor shall furnish facilities, materials, and equipment necessary to fulfill the requirements of this contract, except the GFE specified in Section 3.

requirements.

TASK 1: RENTAL OF A FOCUS BEAM TRACKING ANTENNA.

The Contractor shall provide and integrate the focus beam tracking antenna into the USCG C5ISR systems for aviation integration link in STORMFORCE 2018.

The Contractor shall provide, support, and integrate the antenna system equipment:

(a) Install the antenna system equipment on the USCG specified tower.

(b) Integrate the provided antenna system equipment to the network at the STORMFORCE exercise.

(c) Equipment will remain in use from April 25 through the end of day May 15.

TASK 2: ON SITE SUPPORT FOR THE ANTENNA SYSTEM

The Contractor shall provide on-site support, to include the following:

(a) The Contractor will provide 8 hours of support per day except USCG recognized holidays and weekends.

(b) The Contractor shall provide on-site, 5 days per week (as defined in 1.8) basis to assist with resolution of issues within the integration to a DHS network and the ground network infrastructure for the STORMFORCE exercise.

(c) Support through live representative for functional support for the antenna system to link an aircraft to a ground network infrastructure for the STORMFORCE exercise.

(d) Any other support tasks that may arise that are related to the integration of antenna system data streams into a Virtual Private Network (VPN) connected to a ground network infrastructure for the STORMFORCE exercise.

TASK 3: TRAVEL COSTS

This contract shall provide the following support:

(a) Per Diem costs for (2) System Engineer II travel expenses at the government Per Diem Rates in Jacksonville, NC rates.

1. Lodging Rate: $93.00 per person per day.

2. Meals, Incidentals, and Expenses.

(b) All travel required by the Government will be reimbursed to the Contractor in accordance with the Joint Travel Regulations (JTR). The Contractor shall be responsible for retaining a record of COR approval (electronic mail is acceptable) in advance of the travel event.

DELIVERABLES.

EVENT

DUE BY