ATT A - Performance Work Statement - Draft.pdf

ATTACHMENT A

PERFORMANCE WORK STATEMENT (PWS)

RFP 80TECH22R0002

CONTRACT #TBD

DATE: TBD

Attachment A

80TECH22R0002

Table of Contents Table of Contents

1 INTRODUCTION AND OVERVIEW

1.1 SCOPE

1.2 GOALS AND OBJECTIVES

1.3 Related Documentation

2 CONTRACT MANAGEMENT

2.1 PROGRAM MANAGEMENT

2.2 FINANCIAL MANAGEMENT

2.3 CONTRACT AND SUBCONTRACT ADMINISTRATION

2.4 CONTRACT ADMINISTRATION SYSTEM

2.5 LIST OF CONTRACTOR PERSONNEL

2.6 REPORTING AND OTHER INFORMATION REQUESTS

2.7 LOGISTICS

2.7.1 PROPERTY/INVENTORY MANAGEMENT

2.7.2 SHIPPING/RECEIVING/INSPECTION SERVICES

2.8 CONTRACT PHASE-IN MANAGEMENT

2.9 PHYSICAL SECURITY MANAGEMENT

2.10 EXPORT CONTROL

2.11 EMERGENCY MANAGEMENT

2.12 SAFETY, HEALTH AND ENVIRONMENTAL (SHE) MANAGEMENT

2.13 FACILITY MANAGEMENT

2.14 SOFTWARE AND HARDWARE PURCHASES

2.15 RECORDS AND DATA MANAGEMENT

2.16 SOFTWARE ASSURANCE AND SOFTWARE SAFETY

2.17 CONFIGURATION MANAGEMENT (CM)

2.18 QUALITY ASSURANCE AND MANAGEMENT

3 TECHNICAL PERFORMANCE MANAGEMENT

3.1 SYSTEM OUTAGE MANAGEMENT

4 CYBERSECURITY SERVICES OVERVIEW

4.1 CYBERSECURITY COMPLIANCE

4.2 CYBERSECURITY ENGINEERING SUPPORT

4.3 VULNERABILITY SCANNING SERVICES

4.4 AUDITS, VULNERABILITY ASSESSMENTS, AND PENETRATION TESTING

RESPONSE AND SUPPORT

4.5 ASSESSMENT & AUTHORIZATION (A&A) SERVICES

4.6 PRIVACY AND CONTROLLED UNCLASSIFIED INFORMATION (CUI)

MANAGEMENT

4.7 INCIDENT RESPONSE SUPPORT

4.8 SYSTEM EVENT AUDIT AND ACCOUNTABILITY

4.9 CONFIGURATION MANAGEMENT

4.10 CONTINGENCY PLANNING

4.11 IDENTIFICATION, CREDENTIAL, AND ACCESS MANAGEMENT

4.12 SYSTEM AND COMMUNICATION PROTECTION

4.13 PERSONNEL SECURITY

4.14 CYBERSECURITY AWARENESS TRAINING AND EDUCATION

4.15 INFORMATION SYSTEM SECURITY OFFICER (ISSO) SERVICES

5 INNOVATION SERVICES

5.1 COOPERATIVE COMMITMENT

5.2 WORKSHOPS

5.3 REPORTS

6 APPLICATION, WEB, PLATFORM SERVICES

6.1 GENERAL

6.2 ASSESSMENTS

6.3 DEVELOPMENT SUPPORT

6.4 OPERATIONAL AND MAINTENANCE SUPPORT

6.5 DATABASE SERVICES

7 FIXED PRICE AGILE TEAMS

7.1 AGILE PRODUCT TEAMS

7.2 SHARED SERVICES TEAMS

7.3 AGILE PRODUCT TEAMS AND SHARED SERVICES TEAMS DELIVERABLES

7.4 AGILE PRODUCT TEAM AND SHARED SERVICES TEAM MEASURES

7.5 SAFE AGILE RELEASE TRAIN (ART) TEAMS

7.6 SURGE AND DECREASE OPTIONS

7.7 REPORTING

7.8 FIXED PRICE TEAMS METRICS

7.9 Inspect and Adapt (I&A) Events

8 FIXED PRICE SPRINT DEVELOPMENT AND APPLICATION O&M

8.1 APPLICATION OPERATIONS AND SOFTWARE DEVELOPMENT

8.1.1 APPLICATION O&M

8.1.2 APPLICATION DEVELOPMENT

8.1.3 Infrastructure and Application Extended Support for Agency

8.1.4 SharePoint as a Service (SPaaS)

9 PLATFORM SERVICES

9.1 ENTERPRISE PLATFORMS

9.1.1 RELEASE AND DEPLOYMENT MANAGEMENT DevSecOps AND CI/CD

AUTOMATION SUPPORT

9.1.2 CATALOG ITEMS

9.2 SERVICE APPLICATION DEVELOPMENT

9.2.1 CONTRACTOR RESPONSIBILITIES

9.2.2 DEFINED SALESFORCE SCIs

9.2.3 SERVICE APPLICATION OPERATIONS AND MAINTENANCE

10 INFORMATION AND DATA ANALYTICS SERVICES (IDAS)

11 IT SERVICES FOR AUTOMATION

11.1 AUTOMATION SERVICES

11.2 PROCESS AUTOMATION DISCOVERY

11.3 AUTOMATION DEVELOPMENT

11.4 YEARLY AUTOMATION O&M

12 WEB SERVICES

12.1 Web Services Base Infrastructure Services (BIS)

12.1.1 Base Cloud Layer Management

13 FINANCIAL SYSTEM MANAGEMENT

14 IDIQ TASK ORDER SERVICES

NCAPS PWS

1 INTRODUCTION AND OVERVIEW

The National Aeronautics and Space Administration (NASA) (also referred to as “the Government,” “Government,” or “the Agency,” or “Agency”) recognizes the criticality and benefit across the enterprise when Information Technology (IT) services are closely integrated, secured, and supported by a strong service delivery framework. The NASA Consolidated Platform and Application Services (NCAPS) contract will provide the necessary support to maintain and evolve NASA’s core collaborative IT services, which are essential to the ongoing success of its missions and projects across NASA’s geographically distributed Centers. The scope of work includes efficient, effective, innovative, and collaborative approaches to IT management and delivery. The contractor shall ensure the safety, security, and availability of operations with requisite Agency visibility, ensuring NASA and its partners can operate without disruption while maintaining interoperability across NASA’s heterogenous IT environment.

The Office of the Chief Information Officer’s (OCIO) mission is to increase the productivity of its workforce, by responsively and efficiently delivering reliable, innovative, and secure interoperable IT services. It is the intent of the OCIO to consolidate related requirements across NASA’s Centers to leverage the efficiency of centralized IT support services, resulting in the NASA Consolidated Application Platform Services (NCAPS) contract.

The NCAPS contract will be awarded during a period of significant transformation of mission support services to an enterprise operating model while maintaining mission focus, improving efficiency, recognizing local authority, and valuing the workforce. Mission support services are the functions traditionally managed and operated at each NASA Center and headquarters and include information technology.

The OCIO Transformation is a redesign of the NASA's IT Operating Model in order to more directly enable NASA to achieve mission success and ensure that the OCIO is an organization where our people grow, learn, and thrive.

Notable changes to the IT Operating Model include, but are not limited to:

• The OCIO’s organizational structure,

• Governance boards and processes,

• The IT acquisition strategy and contract management,

• Optimizations to resource and budget management, and

• New approaches to improving customer experiences.

The NCAPS contract will also support the OCIO though transformation and beyond. The contract and work packages ordered will primarily support the Application and Platform Service (APS) Line transformation and support of the OCIO while some work packages will be directly ordered through the other Enterprise OCIO Service Lines. The contract and work packages will be executed primarily using Agile based service delivery methodologies, such as the Scaled Agile Framework (SAFe) and ITIL based service management practices. This support and transformational model requires extensive collaboration and integration vital to the planning, design, and development of future mission-related capabilities and technologies.

As NASA focuses its attention on the successful completion of its core mission objectives, it is imperative that all applications and platforms services supported by this contract, interoperate securely, reliably, and efficiently, utilizing recognized industry standards. It is critical that application and platform and development processes incorporate a customer-centric approach to support functions and service delivery. In addition, it is imperative that application and platform services—as supporting functions—are offered to the Agency through lean, scalable, and agile practices leveraging economies of scale, while also conforming to federal governance and agency policies and requirements. Engagement and coordination with the OCIO Enterprise Project Management Office (EPMO) and governing bodies (ECCB, ECWG, etc.) will be required based on the size and scope of the work in accordance with (IAW) NASA Policy Regulation (NPR) 7120.7A, NASA Information Technology Program and Project Management Requirements.

1.1 SCOPE

The task of the NCAPS contractor (hereafter referred to as “The Vendor,” “Vendor,” “the contractor,” or “contractor”) is to provide, manage, secure, maintain, and evolve IT services that meet the requirements as defined in this Performance Work Statement (PWS). This includes general IT, customer support, information management services, defined direct mission support systems and integration of the currently decentralized support contracts from across NASA's Centers to one centralized source of support. The OCIO APS Service Line and Agency OCIO is responsible for the oversite and governance of all “Class F” IT as defined as part NPR 7150.2D, NASA Software Engineering Requirements and this contract is responsible to support that software class and other classes as requested.

While a transition period will be necessary on a Center by Center basis due to varying Period of Performance end dates for existing Center support contracts, or particular IT complexities, all NASA Centers are considered to be in-scope. This includes the following Centers and associated Center Facilities:

Ames Research Center (ARC) Armstrong Flight Research Center (AFRC)

AFRC – NASA Armstrong Building 703 (Palmdale, CA) Glenn Research Center (GRC)

GRC – Neil A. Armstrong Test Facility (Sandusky, OH) GRC – NASA Safety Center (Cleveland, OH)

Goddard Space Flight Center (GSFC) GSFC – Wallops Flight Facility (WFF) (Wallops Island, VA) GSFC – Bermuda Tracking Station (WFF) (Bermuda) GSFC – Coquina Tracking Station (WFF) (Coquina, NC) GSFC – Poker Flats Ground Station (WFF) (Alaska) GSFC – Blossom Point Tracking Station (WFF) (Blossom Point, MD) GSFC – White Sands Complex (WSC) (Las Cruces, NM) GSFC – White Sands Test Facility (WSTF) (Las Cruces, NM) GSFC – Independent Verification and Validation Facility (IV&V) (Fairmont, WV) GSFC – Goddard Institute for Space Studies (GISS) (New York, NY) GSFC – Columbia Scientific Balloon Facility (CSBF) (Palestine, TX)

Headquarters (HQ) HQ – JPL NASA Management Office (Pasadena, CA) HQ – Office of Inspector General (OIG) (Long Beach, CA)

Johnson Space Center (JSC) JSC – Neutral Buoyancy Laboratory (NBL) & Ellington Field JSC – White Sands Test Facility (WSTF) (Las Cruces, NM) JSC – El Paso Hangar (El Paso, TX) JSC – El Paso Forward Operating Location (El Paso, TX)

Kennedy Space Center (KSC) KSC – Vandenberg Air Force Base (VAFB, CA) KSC – Kennedy Uplink Station (KUS) KSC – Ponce De Leon Tracking Station (PDL)

Langley Research Center (LaRC) Marshall Space Flight Center (MSFC)

MSFC – Michoud Assembly Facility (MAF) (New Orleans, LA) MSFC – National Space Science & Technology Center (NSSTC) (Huntsville, AL – offsite) MSFC – Communications Program (CP) (Huntsville, AL – offsite)

NASA Shared Services Center (NSSC) Stennis Space Center (SSC)

SSC – Infinity Science Center (ISC)

For planning purposes, the table below depicts the most likely timeframe for the transition of the Center Contracts Services to NCAPS which will be handled as a contract modification to onboard:

Center Servicing Contract Name Calendar Yr/Qtr Transition

KSC KIAC 2023/Q4

NSSC NexGen 2023/Q4

HQ HITSSIII 2024/Q2

AFRC RF&ESS 2024/Q4

ARC ACITS4 2024/Q4

GRC PACE V, TIALS2 2024/Q4

SSC ITS21 2024/Q4

As NASA focuses its attention on the successful accomplishment of its core mission objectives, it is imperative that all Applications and IT systems operate reliably and effectively. In addition, it is important that IT Services—as supporting functions—are offered to the Agency at the best possible value.

1.2 GOALS AND OBJECTIVES

The NASA Chief Information Officer (CIO) has established the following goals to guide the NCAPS contract, IAW the 2018 NASA Information Technology (IT) Strategic Plan. Note:

Specific and measurable objective standards will be detailed in a Quality Assurance Plan/within this PWS in further sections. This is a broad overview of the OCIO’s objectives:

Goal 1: Partner with customers to consistently deliver excellence and enable mission success.

Objectives:

• Increase customer satisfaction with our business relationships and service delivery.

• Increase end-to-end usability and effectiveness by creating an agile and responsive approach to IT investments.

• Enable responsive, actionable service performance improvement.

Goal 2: Capitalize on data management, access, and innovation.

Objectives:

• Enable the transformation of NASA’s data into meaningful insights

• Enable the transformation of NASA’s data into actionable insights

• Increase secure data accessibility and data management through innovation to address capability gaps and improve operations.

• Anticipate future needs, and implement application modernization methodologies

Goal 3: Safeguard NASA’s data and IT assets.

• Reduce the risk of loss, unauthorized disclosure, and unauthorized modification of data and information systems, while strengthening IT asset identification and vulnerability mitigation.

• Prioritize and mitigate cybersecurity risks based on a cybersecurity risk framework and architecture.

• Reduce cybersecurity risk by improving user education and promoting cybersecurity awareness and best practices.

Goal 4: Maximize business value by optimizing IT.

• Empower data-driven strategic decisions and intentional IT operating model choices.

• Increase the effectiveness of investment analysis and prioritization.

• Increase the effectiveness of our IT strategy execution through disciplined program and project management. The contractor is encouraged to harness industry expertise to implement the best IT practices.

Goal 5: Care for our people today and prepare them for tomorrow.

• Care for our people and encourage mission-oriented performance.

• Attract and retain diverse talents, high-quality people. (DRD MA-038, Diversity, Equity, Inclusion, and Accessibility (DEIA) Plan)

• Help define NASA’s functional competency model.

1.3 Related Documentation

Throughout the PWS documents are references which are directly applicable or contain policies or other directive matters that are binding for the performance of the contract. These documents establish detailed specifications, requirements, and interface information necessary for the performance of the contract. In the event of conflicting requirements between this SOW and the applicable documents referenced herein, the contractor shall immediately notify the contracting officer and contracting officer’s representative (COR) in writing. The nature of the conflict shall be identified, and the contractor shall request direction from the Government as to how to proceed. The Contractor shall adhere to the most current version of the policies or other directive.

2 CONTRACT MANAGEMENT

The Contractor shall provide contract management services including Program Management, financial management, logistics, contract Phase-In/transition management, Phase-Out, Procurement Services, Physical security management and Cybersecurity management, Safety, Health, and Environmental (SHE) management, Facilities Management, quality assurance and management, program integration, other interface points (i.e., external contracts), and contract and subcontract administration.

The contractor shall enter into Associate Contractor Agreements (ACA) with other contractors providing other enterprise and agency contracts, as applicable, to ensure integrated services delivery.

2.1 PROGRAM MANAGEMENT

The Contractor shall perform cost, schedule, risk, and technical management of all NCAPS services, functions, and tasks. The contractor is responsible for providing management support to all business and management functions necessary to execute and administer the NCAPS contract in compliance with applicable Federal and State laws; and Federal and Agency regulations, requirements, standards, policies, and procedures including, but not limited to, the documents specified in Attachment D, Applicable Documents List. The contractor shall provide a management team focused on proactively integrating and optimizing all PWS elements to ensure excellent service performance and smooth delivery of services. The contractor is accountable for the quality and timeliness of the products and services delivered under this contract.

The contractor shall:

A. Ensure applications are registered using the designated NASA Application Tracking/Registration system, currently the Agency Application Rationalization Tool (AART).

B. Provide, implement, and maintain the Management Plan in accordance with Data Requirements

Document (DRD) MA-001, Contract Management Plan.

C. Ensure delivery of all NCAPS products and services and that there is ready access to information and support during the Standard Hours of 7:30 a.m. to 5:30 p.m. local time, Monday through Friday, as stated in Attachment M, Fixed Price Service Delivery Standards and Metrics.

Variations to the Standard Hours above are stated throughout the PWS for specific requirements and/or in specific catalog offerings.

D. Deliver all products and services within 60 calendar days of being put on contract or being requested, unless there is an explicit required delivery standard defined in a PWS requirement.

E. Accomplish the management and technical control of all resources required to fulfill the requirements of this contract.

F. Manage an integrated, comprehensive workforce to provide customer support with the flexibility to respond to surge and unique requirements.

G. Manage all service levels and metrics in accordance with Attachment M, Fixed Price Service Delivery Standards and Metrics. Measure and report the service level objectives and performance for each of the services defined in this PWS in accordance with DRD MA-016, Fixed Price Service Delivery Standards and Metrics Report.

H. Prepare and submit monthly reports of project plans, status, and schedules in accordance with DRD MA-024, NCAPS Monthly Status Review Report.

I. Prepare and conduct monthly Program Management reviews including presentation and discussion of program priorities, project statuses, significant accomplishments, Risk Management, and problem areas.

J. Provide a monthly report with backup data to the Government on metrics associated with defined service level delivery in accordance with Attachment M, Fixed Price Service Delivery Standards and Metrics.

K. Manage counts for all standard products and services in accordance with Attachment P, Deliverable Products and Services (DPS).

L. Provide a monthly activity report describing the quantities of standard products and services delivered in accordance with DRD CD-002, Deliverable Products and Services (DPS).

M. Officially notify Contracting Officer (CO) and Contracting Officer’s Representative (COR) of issues that adversely affect meeting contract requirements within 5 business days and hold follow-on discussion(s) to address Government concerns as needed.

N. Respond to formal letters issued by CO regarding areas of non-compliance:

i. Identify root cause of the problem within 10 business days.

ii. Deliver corrective action plan with milestones within an additional 10 business days.

iii. Obtain Government concurrence.

iv. Report on status and milestones weekly.

O. Track and provide status of official communication with the COR such as technical direction, requests for information, and transmittals.

P. Support as needed the NCAPS COR when presenting NCAPS issues and resolutions to the OCIO, other Agency organizations, or other external parties. This support will include such things as travel to meetings, video teleconferences, voice teleconferences, and the development of support documentation.

Q. Ensure contractor employees utilize NASA-provided equipment to protect all Agency information by ensuring appropriate protection is implemented.

R. Establish, update, provide, and implement a Risk Management Approach in accordance with NPR 8000.4, Agency Risk Management Procedural Requirements.

S. Assist NASA with Risk Management consistent with the requirements defined by NPR 7120.7A, NASA Information Technology and Institutional Infrastructure Program and Project Management Requirements (e.g., Risk Management Plan, Analysis, and Tracking Reports).

Additionally, participate in recurring Risk Management meetings, and coordinate with Agency and Center Chief Information Officers (CIOs) in the execution of the contractor’s responsibilities, as required.

T. Provide a NCAPS primary and alternate NEST Organizational Representative (NOR) to coordinate and approve all Government-furnished End User Services requirements by:

i. Coordinating, reviewing, and approving all orders through the Enterprise Service Desk

(ESD).

ii. Attending the monthly NOR meeting and communicating information internally as needed.

iii. Hold a quarterly NCAPS management review with the Government to highlight areas of concern, to include changes to organizations, subcontractor agreements, performance metrics, identification of new risks, end-of-life status, safety and health data, and trends associated with DPS, trouble calls, and risks.

iv. Conduct a monthly status review with the Agency CIO, Deputy CIO, or designee regarding contract performance, risks, and issues.

U. Prepare and submit a Contractor Self-Assessment Report in accordance with DRD MA-021, Contractor Self-Assessment Report.

V. Align services and operations processes with the current version of the ITIL Framework utilized by NASA, and current applicable OCIO policies and procedures, to establish common terminology and processes. Furthermore, ITIL is a commonly accepted information technology Service Management framework that provides a cohesive set of public and private sector best practices which are supported by a comprehensive qualifications scheme, accredited training and certification organizations, and implementation and assessment tools.

W. The contractor shall review proposed changes and make recommendations to NASA personnel on such things as:

i. Agency and Center IT Policies, architectures, standards, and procedures

ii. Recommend additions, modifications, and deletions as needed to ensure conformity with the NCAPS contract.

iii. Any adverse impacts to stability, Cybersecurity, cost, architecture, interoperability, compatibility, or service and recommend mitigation strategies.

2.2 FINANCIAL MANAGEMENT

The Government intends to manage work performed under the NCAPS contract in Work Packages. Work Packages contain discrete elements of work directly traceable to the PWS but separated in order to facilitate Government approval, tracking, and reporting. Work Packages may contain subtasks as needed to reflect a lower level of tracking and reporting requirement.

The contractor shall:

A. Perform all business and financial functions necessary to fulfill the requirements of this contract and integrate these functions across all areas of performance.

B. Provide on-going business analysis and respond to requests and inquiries from NASA relating to budget, schedule, Work Year Equivalents (WYE), cost plans, NASA-defined work packages, and cost performance. The Contractor shall not determine NASA budget policy, guidance or strategy but may be asked to provide details on the budget previously established by NASA and may be asked to provide recommendations to NASA on budget issues.

C. Submit all data elements required to produce financial reports, in accordance with DRD MA-019, Financial Management Report (533M), and DRD MA-017, Cost Reports, and DRD MA-033, Supplemental FFP Invoicing Data, into the Government provided Contract Administration System across all PWS elements by Work Package and Task Order, including Sub Work Packages.

D. Prepare and submit DRD MA-017, Cost Reports, DRD MA-038, Diversity, Equity, Inclusion, and Accessibility (DEIA) Plan and DRD MA-028, WYE Reports.

E. Prepare and submit monthly Financial Management reports (NASA Form (NF) 533M& 533Q) in accordance with DRD MA-019, Financial Management Report (533M). Reports shall be submitted within Government provided contract management systems.

F. Provide a cost reporting capability that aligns the NF 533 Management Report with the Technology Business Management (TBM) Model https://www.cio.gov/policies-and-priorities/tbm/ in accordance with DRD MA-037, TBM Reporting.

G. Provide a Management Information Control System (MICS) that provides an ad hoc cost reporting system to NASA for assessment of cost.

https://www.cio.gov/policies-and-priorities/tbm/ https://www.cio.gov/policies-and-priorities/tbm/

H. Assist in the preparation and status reporting of NASA-defined work packages including Service Requests, customer-funded and/or Center specific requests and services detail IAW DRD MA- 014, Documentation, item j, Service Request Status Reports.

I. Assist in the preparation of financial data for business cases.

J. Assist in the preparation of Office of Management and Budget (OMB) Agency IT Portfolio data collection activities, as required.

K. Provide input data to the NASA Planning, Programming, Budgeting, and Execution (PPBE) process. This data shall incorporate annual requirements projections in the form of Spend plans that match the PPBE horizon of the next Execution Year plus 5 years as Budget Year (BY), BY+1, BY+2, BY+3 and BY+4.

L. Support the Business office with the development, documentation, maintenance, review, and approval by NASA of Program Service Level Agreements (PSLAs) with each NASA Center and with Programs, Projects and Missions that require NCAPS services.

M. Provide quarterly spend plan vs. actual updates to funding customers with details on current and estimated spend, in accordance with DRD MA-17, Cost Reports. Provide variance explanations for actuals plus/minus 5% of plan.

N. Utilize the NASA Form (NF) NF533M and 533Q forms to provide monthly financial reports and to monitor program costs.

i. NF533M and 533Q

a. These forms are NASA’s official tools for cost type, price redetermination, and fixed price incentive contracts. Accurate, timely, and complete reporting through these tools will facilitate the Government’s ability to negotiate, if necessary, in a timely manner and in the best interest of the Government and the contractor.

b. The 533M and 533Q shall be generated using the NASA-provided Contract Administration System. Electronic submission for contractor data is required.

c. The NF533M shall be delivered no later than the 10th working day following the close of the contractor’s accounting period, or the 15th calendar day of each month.

ii. Invoice Billing Details Report

a. Monthly invoice details shall be provided to the Government as defined by DRD

MA-017, Cost Reports. Also, for the Government verification and validation of the accuracy of the charges and appropriate program charges. The COR will solicit Technical Monitors (TM) review for oversight input.

iii. Cost Reports

a. To establish annual cost plans by Government Fiscal Year (GFY) and to provide monthly plan vs. actual reporting. The Cost Reports will be delivered monthly and are intended to provide sufficient insight into the contractor’s cost performance such that cost analysis and corrective actions, if required, can be conducted in a timely manner.

2.3 CONTRACT AND SUBCONTRACT ADMINISTRATION

The contractor shall provide overall management of the contract requirements and effective, customer-focused contract management that results in consistently high-quality products and services.

In performance of Contract and Subcontract Administration functions, the Contractor shall:

A. Implement strategies to establish and sustain amicable relations with labor unions if applicable.

B. Provide a single point of contact with contractual obligation authority to perform all contract administration functions and activities required for this contract. This point of contact shall have access to all contract administration data and information related to contract performance.

C. Provide a single point of contact for all subcontract management activities. This point of contact shall have access to all subcontract administration data and information related to contract performance.

D. Provide online access to contract administration information and other required data to the CO and designated personnel, in accordance with NPD 1440.6I, NASA Records Management.

E. Provide and maintain complete subcontract award documentation in accordance with the contractor’s approved purchasing system, to support subcontract consent and subcontract audit activities.

F. Ensure delivery and archival, with accessibility by designated NASA personnel, of all documentation required by this PWS, as well as the documentation required by Attachment B, Data Requirements List and Data Requirements Descriptions. The activity shall include retaining and maintaining support documentation, controlling the documentation, and maintaining a document control list, naming convention, and storage control system.

G. In accordance with DRDs MA-020, Financial Management Report, separately track all costs associated with contract changes issued by the CO, as well as Indefinite-Delivery Indefinite- Quantity (IDIQ) Task Orders, if requested in advance by the CO.

H. Report and document this work and fulfill the requirements of associated DRDs as outlined in Attachment B, Data Requirements List and Data Requirements Descriptions. Determine the data restriction that applies to each data deliverable and mark or transmit the data restriction in accordance with Attachment B, Data Requirements List and Data Requirements Descriptions.

I. Maintain and update the Organizational Conflicts of Interest (OCI) Avoidance Plan in accordance with DRD MA-023, Organizational Conflicts of Interest (OCI) Plan.

J. Prepare, submit, and maintain a Personnel Activity Report in accordance with DRD MA-014, Documentation, Item k., “Personnel Activity Report.” Provide Small Business and Small Disadvantaged Business concerns the opportunity to receive a fair portion of procurement awards, in accordance with the approved in accordance with Attachment V, Small Business Subcontracting Plan.

K. Provide to NASA quarterly listings of all purchases (to include copies of maintenance agreements established under this contract) to facilitate audits and verification of receipt of purchased hardware and services in accordance with DRD MA-014, Documentation, Item m., “Quarterly Purchases Listing.”

L. Maintain management and technical control of all subcontract and vendor activities that are used to fulfill contract requirements.

M. Provide a single Point of Contact (POC) with binding contractual authority to perform all contract administration functions and activities required for this contract.

N. Ensure all contractor personnel data is maintained in NASA Identity Management and Account Exchange (IdMAX) and Center Locator Systems.

2.4 CONTRACT ADMINISTRATION SYSTEM

The iSite Contract Management Portal (iSite) will be provided by NASA to facilitate contract administration and oversight for the NCAPS Contract. iSite is a suite of tools which includes configurable workflows, financial reporting, configurable estimates, document repository, and automated email notifications among other functions based on NASA managed security controls.

More information may be found at the vendor’s website https://www.isitellc.com/icmp/.

NASA and Contractor will use the provided system for requesting new work, revising existing work, financial planning, reporting, actuals, deliverable submission, technical performance feedback gathering, and serve as the primary system for communicating financial and funding information to include monthly time phased baseline plans for all work packages (this could be work packages or tasks dependent on the contract). The provided system will allow for the electronic initiation, receiving, review, approval, issuance, and modification of work under this contract.

The Contractor shall:

A. Use iSite to communicate, at a minimum, estimated costs and fee by month, posting actuals by

Work package which will inform financial/funding reports, provide technical proposals in response to requests for work, describe labor categories and hours proposed and consumed, and communicate subcontractor costs proposed and consumed during performance of this contract.

B. Access to data contained within the system will be controlled through security group permissions and role-based access.

C. Work with the Government to configure the provided system for this contract as part of contract phase-in and ensure that the system is operational prior to the start date of this contract. Please reference Attachment R, CATS - iSite Contractor On-boarding Guide, for more details on the necessary information for iSite system configuration

D. Within 5 days of contract award, the Contractor shall provide a primary point of contact for these efforts.

E. Work with each Center to transition from Center managed Contract Management Systems into the Government provided system, iSite, as scope is transitioned from Center managed contracts into the NCAPS contract.

F. Submit contract deliverables for review within iSite.

2.5 LIST OF CONTRACTOR PERSONNEL

The contractor shall:

A. Maintain an online employee roster, accessible to the COR, TMs, and other designees, of individuals who perform work under this PWS as outlined in DRD MA-028, WYE Reports.

B. Provide a report of all employees working under this contract for cost validation and security reasons.

i. The report shall include the following information for each employee: Supervisor/lead, Position/Title, labor category, and Government Work Breakdown Structure (WBS). The contractor shall provide and maintain an organizational chart of contractor personnel supporting NCAPS, updated on a quarterly basis. This will include a delineation for prime contractor employees, and subcontractor employees in total.

2.6 REPORTING AND OTHER INFORMATION REQUESTS

The contractor shall:

A. Respond to data calls and requests for reports and information, including scheduled and ad hoc requests within a government specified amount of time.

B. Support, participate in, and contribute to OCIO requests such as: Key Performance Indicators and Objectives and Key Results pertaining to contractor performance, any similar requests for quantitative service delivery and operational metrics, or any other requests.

2.7 LOGISTICS

Provide Logistics Management functions to support services as detailed in this contract, in accordance with Agency and Site/Center guidelines, policies, and directives, and as specified in NASA Federal Acquisition Regulation (FAR) Supplement (NFS) 1852.245-71, Installation Accountable Government Property and Alternate I; These functions include property/inventory management, shipping/receiving/inspection services, and vehicles.

2.7.1 PROPERTY/INVENTORY MANAGEMENT

The following identifies the Property/Inventory Management roles and responsibilities that the contractor shall perform:

A. Perform property management functions in accordance with NPR 4100.lF, NASA Supply Support and Material Management; NASA Policy Directives (NPD) 4200.lC, Equipment Management, NPR 4200.lH, NASA Equipment Management Procedural Requirements; and NPR 4300.1C, NASA Personal Property Disposal Procedural Requirements.

B. Prepare, implement, and maintain the Government Property Management Plan in accordance with DRD LS-001, Government Property Management Plan.

C. Enter all required data for property acquired by the contractor into a NCAPS-specific sub-installation within the Property, Plant, and Equipment (PP&E) database, apply Radio Frequency Identification (RFID) tag at time of receipt at the applicable Centers, assign the property to the requiring organization/end user, prepare a NASA-designated form for property and financial traceability, and maintain supporting documentation.

D. Coordinate with Center Logistics organizations to facilitate the transfer of property from legacy contracts to the NASA-specific sub-installation of PP&E during contract phase-in/transition.

E. Manage property not recorded in NASA systems and managed under NPRs in accordance with FAR 52.245-1, Government Property, including but not limited to providing and maintaining an asset management tool.

F. Perform property custodian functions in accordance with NPR 4200. lH, NASA Equipment Management Procedural Requirements, for all property as listed in Attachment X, Installation- Accountable Government Property.

G. Perform property user functions as delineated in NFS 1852.245-71, Installation-Accountable Government Property.

H. Utilize NASA systems to screen for excess property needed in support of the contract and use the resulting components in support of the infrastructure in a cost-effective manner.

I. Survey manufacturers of components which are important to the supportability of NCAPS systems to identify and respond to "last production runs" in sufficient time to allow for continuation of support to the affected system without service interruption.

J. Identify excess and obsolete out-of-service assets, and initiate disposal in accordance with Agency, Center, and associated component facility guidelines, policies, and directives.

K. Ensure all items removed from service have all data removed prior to excess, in accordance with the applicable policies and procedures listed in Attachment D, Applicable Documents List (ADL).

L. Utilize the existing property tags permanently affixed to all existing assets. Utilize NASA-provided Equipment Control Number (ECN) and apply RFID tag at time of receipt at the applicable Centers, tags, and decals for acquired or procured property.

M. Affix a unique NCAPS identifier or bullet tag to all NCAPS-managed property.

N. Establish loan agreements for all Installation Accountable Government Property (IAGP) that will be utilized at off-site locations.

O. Conduct an annual physical inventory of all NCAPS IAGP in coordination with the NASA

Supply and Equipment Management Officer (SEMO) for the NCAPS contract.

P. Utilize NASA-provided RFID tags for managed equipment per NPR 4200.lH, NASA Equipment

Management Procedural Requirements at the applicable Centers.

Q. Conduct an annual physical inventory of all equipment and provide the results to the NASA COR.

Track all change activity (location change, replacement, etc.) in the NASA approved tool and report monthly to the NASA COR.

R. In extreme circumstances where a piece of equipment is not physically accessible due to access restrictions or location (geographical or otherwise), the contractor may request a waiver, from NASA SEMO, to utilize the process of generating an electronic signal (ping) to validate an asset is active and in use as inventoried. The contractor shall only use this process after obtaining a waiver from NASA SEMO for the NCAPS contract.

S. Responsible for documenting the generation and receipt of the electronic signal acknowledgement for the piece of equipment that is not accessible by the contractor at the time the inventory is required to be conducted.

T. If approved by the NASA SEMO for the NCAPS contract, the date the electronic signal (ping) is conducted shall be the date recorded (as an override) in the PP&E System as the "Date of Last Inventoried," and this shall be accepted as evidence of the equipment's physical and working presence.

U. Responsible for documenting and maintaining the records and waivers associated with "electronic pinging" of such equipment per Government regulations as identified in item (A.) above.

2.7.2 SHIPPING/RECEIVING/INSPECTION SERVICES

The following identifies the Shipping/Receiving/Inspection Services roles and responsibilities that the contractor shall perform:

A. Utilize the most cost-efficient procedures and storage for shipping/receiving/inspection services.

B. Comply with Agency, Center, and associated component facility guidelines, policies, and directives listed in Attachment D, Applicable Documents List (ADL); NFS 1852.245-71, Installation Accountable Government Property.

C. When available, the contractor may utilize Government-provided receiving or storage facilities for receipt and storage of hardware, software, and other associated property to meet the requirements of this contract.

D. Ensure that any contractor-provided receiving or storage facilities allow for protection of all items to which NASA has or will obtain title, in accordance with Government policy as listed in item (B.) above.

E. Prepare items for shipping with required documentation in accordance with Government policy as listed in item (B.) above.

F. Provide receiving and inspection functions in accordance with, including accountability, storage, and warehousing support.

G. Document transfer of property between Centers utilizing a Form DDl149, Requisition and Invoice/Shipping Document, or other NASA-designated form.

2.8 CONTRACT PHASE-IN MANAGEMENT

The Contractor shall:

A. Provide the services necessary to perform all Phase-In activities in accordance with the schedule delineated in Attachment H, Phase-In Plan.

B. Provide the services necessary to transition, and assume full contractual responsibility for, those

Center services identified for transition subsequent to the contract Phase-In period, in accordance with Attachment H, Phase-In Plan, and DRD MA-002, Contract Phase-In Plan.

2.9 PHYSICAL SECURITY MANAGEMENT

The following identifies the Physical security management:

A. Provide Security Management services including IT-related physical security (not already included in local security contracts), and emergency management.

B. As it relates to IT-Related Physical Security - Implement a comprehensive security program consistent with NASA, Department of Defense (DoD), and Center-specific regulations and procedures as listed in Attachment D, Applicable Documents List (ADL), for the performance of the NCAPS mission and the protection of assigned assets and equipment.

C. Provide recurring supplemental reports (initial, change updates, etc.) to the DD 254, Contract Classification Specification to the NASA OPS, personnel security office as referenced in DRD MA-014, Documentation, Item n., “Personnel Security Report.”

D. The work to be performed under this contract is up to the Top Secret (TS) level and will require Sensitive Compartmented Information (SCI) access eligibility for some personnel. The company must have a Final TS facility clearance (FCL) at the time of proposal submission.

E. The contracted personnel must be able to obtain and maintain the requisite clearance level in accordance with NASA policy and procedures for system, data, or facilities to perform assigned duties when performance starts.

F. All personnel performing on or supporting the NCAPS contract shall meet the requirements and be positively adjudicated for the OPM tiered investigation required for their position

G. All personnel requiring TS and SCI access under this contract/order shall undergo a favorably adjudicated Tier 5 investigation (formerly known as a Single Scope Background Investigation (SSBI)) as a minimum requirement. The Tier 5 will be maintained current within 5-years and requests for Tier 5 reinvestigation (T5R formerly known as Single Scope Background Period Reinvestigation (SBPR) or Phased Periodic Reinvestigation (PPR)) will be initiated prior to the 5-year anniversary date of the previous Tier 5.

H. All personnel requiring Secret access under this contract/order shall undergo a favorably adjudicated Tier 3 (T3) Investigation formerly known as a National Agency Check, Local Agency Check and Credit Check or Access National Agency Check and Inquiries as a minimum investigation. The Tier 3 Investigation will be maintained current within 10-years and requests for

Secret Periodic Reinvestigations will be initiated by submitting a Tier 3R investigation prior to the 10-year anniversary date of the previous Tier 3 Investigation.

I. Contract personnel found ineligible by the appropriate central adjudication facility for Top Secret or Secret access will not be allowed to support a NASA contract requiring Top Secret or Secret access.

J. Visit Access Requests (VAR) shall be processed and verified through the NASA OPS personnel.

Visits for contracts/orders are identified as "Other" or "TAD/TDY" and will include the Contract/Order Number and NASA Access level of the contract/order with any additional information. contractors that do not have access to the OPS personnel may submit visit authorizations by e-mail in a password protected .pdf to the COR or Center Government representative.

K. Contractor personnel shall comply with all local security requirements including entry and exit control for personnel and property at the government facility.

L. Contractor personnel shall comply with all Government security regulations and requirements.

Initial and periodic safety and security training and briefings will be provided by Government security personnel. Failure to comply with Government security regulations and requirements will require the company to provide the Government with a written remediation/corrective action plan;

furthermore, failure to comply with such requirements can be cause for removal and the contractor will not be able to provide service on this contract.

M. Contractor personnel with an incident or adverse information report who have had their access to classified information suspended will not be permitted to provide or to fill positions requiring access to classified information on a NASA contract/order.

N. The contractor shall not divulge any information, classified or unclassified Sensitive But Unclassified (SBU)\Controlled Unclassified Information (CUI), about NASA files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The contractor shall observe and comply with the security provisions in effect at the NASA facility.

Identification shall be worn and displayed as required.

O. NASA retains the right to request removal of contractor personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government.

P. Contractor personnel will generate or handle documents that contain CUI according to NASA policies and procedures. The contractor shall have access to generate and handle classified material only at specified location(s) listed in this PWS. All contractor deliverables shall be marked in accordance NASA policy, procedures, and standards to include Freedom of Information Act (FOIA) Program, unless otherwise directed by the Government. The contractor shall comply with the provisions of the NASA policy for handling classified material and producing deliverables.

Q. The contractor shall afford the Government access to the contractor's facilities, installations, operations, documentation, databases, and personnel used in performance of the contract. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability, and confidentiality of data or to the function of IT systems operated on behalf of NASA or NASA partners, and to preserve evidence of computer crime.

2.10 EXPORT CONTROL

The following identifies the Export Control process support roles and responsibilities that the contractor shall perform:

A. Provide recommendations in support of the Export Control Process in accordance with DRD MA-

018, Export Control Plan and Reports.

B. Provide a monthly report of all export control process support activities in accordance with DRD

MA-018, Export Control Plan and Reports.

2.11 EMERGENCY MANAGEMENT

Each Center CIO has key responsibilities related to the Center's COOP in accordance with NPR 1040.1, NASA Continuity of Operations (COOP) Planning Procedural Requirements.

The following identifies the Emergency Management roles and responsibilities that the Contractor shall perform:

A. Provide each Center CIO (or designated representative) with the necessary NCAPS support to meet COOP requirements by providing related IT materials, equipment, and emergency-essential personnel in support of the COOP.

2.12 SAFETY, HEALTH AND ENVIRONMENTAL (SHE) MANAGEMENT

The following identifies the Safety, Health, and Environmental (SHE) Management roles and responsibilities that the contractor shall perform:

A. Establish and implement an industrial safety, occupational health, and environmental program that prevents employee fatalities, reduces the number of mishaps or close calls, reduces the severity of employee injuries and illnesses, and protects the environment through the ongoing planning, implementation, integration, and management control of these programs in accordance with DRD SA-001, Safety, Health, and Environmental (SHE) Plan. This includes flowing down requirements to subcontractors and holding subcontractors accountable for SHE performance.

B. The SHE Plan shall address each of the following SHE core program requirements in detail that are applicable to the contracted effort and include a matrix that identifies where each requirement is addressed:

i. Management leadership and employee involvement.

ii. System and worksite analysis.

iii. Hazard prevention and control.

iv. SHE training.

C. Coordinate with each Center's Safety and Mission Assurance Directorate/Office to ensure compliance with that Center's specific safety, health, and environmental requirements, delineated in Attachment D, Applicable Documents List (ADL), and shall maintain an up-to-date listing of Center Safety Points of Contact to facilitate communications for each NASA Center where work is performed.

D. Report mishaps and safety statistics to the Center's Safety Office in accordance with DRD SA- 002, Mishap and Safety Statistics Reports.

E. Submit directly into the NASA Mishap Information System (NMIS) or use the formats listed in DRD SA-002, Mishap and Safety Statistics Reports, or electronic equivalent to report mishaps and related information required to produce the safety metrics.

F. Ensure that all work, including that which may require exposure to asbestos, is performed in accordance with all Federal, State, Local, and Center-specific safety, health, environment, and fire protection/prevention regulations and procedures, as well as the contractor's Safety and Health Plan per DRD SA-001, Safety, Health, and Environmental (SHE) Plan, and each Center's applicable asbestos requirements.

G. Provide safety, training, and protective equipment, as required by the approved SHE Plan, for contractor personnel.

H. Prepare and submit Environmental and Energy Consuming Product Compliance Reports in accordance with DRD SA-003, Environmental and Energy Consuming Product Compliance Reports.

I. The contractor shall provide, implement, and maintain procurement…