832571904 PMSS PWS encl2c_pws 20250328.pdf

Enclosure 4a, PWS Page 1 of 44 Pages

2015/Version 9

PERFORMANCE WORK STATEMENT (PWS)

Award/Mod Effective Version Date Sources Sought 03/25/2025

Contract Number: (completed by the KO at time of contract or TO award) Task Order Number: (completed by the KO at time of TO award or N/A) Contractor Name (completed by the KO at time of contract or TO award) Tracking Number: 832571904 Follow-on to Previous Contract and Task Order Number:

75N98119D00087/HC102822F0054

1. Contracting Officer’s Representative (COR). TBD

a. Primary COR. TBD

b. Alternate COR. TBD

c. Property Administrator TBD

2. Contract or Task Order Title. DEFENSIVE CYBER OPERATIONS (DCO) PROGRAM MANAGEMENT

SUPPORT SERVICES (PMSS)

The United States (U.S.) Army Program Executive Office, Enterprise Information Systems (PEO EIS), Project Manager (PM) Defensive Cyber Operations (DCO) is seeking experienced cyber-related advisory and assistance support services to augment PM DCO’s core Government personnel to support the missions of the PM DCO and its customers. This task order will include the support services which shall span the total life cycle of PM DCO systems.

3. Background. PM DCO provides the Defensive Cyberspace Operations Suite of Complimentary Systems (DSCS) specific defensive cyberspace capabilities to the Army Cyber Protection Brigades (CPBs) and the Cyber Protection Teams (CPTs) and therefore to the Cyber National Mission Forces (CNMF) as well, which provides critical capabilities in accordance with (IAW) Joint Publications (JP) 3-12 to preserve the Army’s ability to utilize blue cyberspace capabilities and protect data, networks, cyberspace-enabled devices, and other designated systems by defeating on-going or imminent malicious cyberspace activity. More specifically, defensive cyberspace operations protect against, detects, mitigates, and responds to anomalous network activity generated by known and unknown cyber threats. Commanders conduct defensive cyberspace operations using organic and externally supplied assets.

The overall mission objective of PM DCO is to establish defense-in-depth across the entirety of Department of Defense (DoD) cyberspace by simultaneously combining defensive cyberspace operation capabilities at the global, regional, and local levels to enable mission assurance using a layered, adaptive approach in support of unified land operations. To meet this mission objective, PM DCO has adopted an open, flexible, scalable, elastic, and agile development approach that is designed to be responsive to change driven by both the ever-evolving threat landscape, technological innovations, and availability of cyberspace solutions and tools. PM DCO is leveraging a variety of procurement avenues to meet the urgent and ever evolving operational needs to include standard acquisitions under the Federal Acquisition Regulation (FAR) as well as non-FAR Other Transaction Authority (OTA).

The Defensive Cyber Operations (DCO) program currently instantiates Acquisition Category (ACAT) III or below

Programs of Record (POR):

Page 2 of 44 Pages

• Cyber Analytics

• Deployable DCO System (DDS)

• Garrison DCO Platform (GDP)

• Tactical DCO Infrastructure (TDI) managed by PEO C3T; not by PEO EIS and PM DCO

• DCO Tool Suite

• DCO Mission Planning

DCO Program future Acquisition Category (ACAT) III or below Programs of Record (POR) include:

• Forensic/Malware

• Insider Threat

• Advanced Sensors

• Threat Discovery/Counter-Infiltration

• Threat Emulation

Near-Term Mission: Continue delivery of initial operating DCO capabilities to CPTs, potentially Regional Cyber Centers, and select corps and below units across all three components (COMPOs): Active, Reserve and National Guard. Careful exploration and prototyping of technologies required to support the mid-term development and deployment of DCO solutions.

Mid-Term Mission: Provide full operational capabilities to the force. Solutions stemming from the approved DCO Information System Initial Capabilities Document (IS-ICD) and follow-on Requirements Definition Packages (RDPs) will start to be fielded during this period as POR. Technology advances will increase the flexibility and support rapid fluidity of operations. The Army will strive to influence Science and Technology (S&T) efforts to meet long-term requirements.

Long-Term Mission: Employ advanced technologies resulting from academia and DoD S&T efforts to increase the ability of cyberspace defenders in the future, and expand and develop DCO capabilities as responsive, dynamic, and tailorable. Advanced technologies offer giant leaps in solutions, requiring less size, weight, and power, generating effects that ensure use of friendly cyberspace.

4. Objectives: The objective of this task order is to provide strategic level program management support to PM DCO and its subordinate product offices in implementing laws, regulations, and polices to facilitate evolving PM DCO practices with the intention of meeting critical milestones, delivering of capabilities, and continuously improving performance.

5. Scope. The Contractor shall provide program management services to support a full range of required cyber-related advisory assistance services and work products to support the PM DCO mission and provide CNMF capabilities to the Army Cyber Protection Brigades (CPBs) and the Cyber Protection Teams (CPTs) and ultimately the Cyber National Mission Forces (CNMF).

The Government may require surge support during the base or any option period, and surge modifications will be within the scope of the contract and provide increased support for the defined task areas of this PWS. Surge support over the life of the contract will not exceed 30% of the contractor’s total proposed cost/price for the base and all option periods, excluding any six-month extension of services pursuant to FAR 52.217-8.

The scope of work for the resulting task order includes support services and associated work products within each task area below:

• Program Management

• Project Management

• Contracts Management

• Business and Financial Management

• Plans and Operations

• Product Support Management

Page 3 of 44 Pages

• Cybersecurity Program Support

• Technical Management Support

The Government identifies the following roles as key personnel for this contract.

• Program Manager

• Contracts Acquisition Lead

• Cost Analyst Lead

• Strategic Communications Lead

• Training Management Lead

• Information System Security Manager Lead

The critical personnel specified above are essential to work performance. Prior to any replacement of the key personnel, the Contractor shall inform the Government of the replacement, the plan to mitigate risk to the Government during transition, and the qualifications, certifications, and start date of the replacement. The Contractor shall provide complete resumes for proposed substitutes and any additional information the Contracting Officer (KO) requests. Proposed substitutes should have comparable certifications and qualifications to those of the replaced persons. No change in fixed unit prices may occur as a result of key personnel substitution.

6. Performance Requirements. The objective of this task order is to provide strategic level program management support to PM DCO and its subordinate product offices in implementing laws, regulations, and polices to facilitate evolving PM DCO practices with the intention of meeting critical milestones, delivering of capabilities, and continuously improving performance. The key task areas are delineated below. It is hereby noted that, due to the dynamic nature of a Program Management Office (PMO), specific tasks may vary from one division to another. It is also noted that divisions themselves may change based on ongoing reorganization.

6.1 Task 1 – Program Management

The Contractor Program Manager (CPM) serves as the Government’s point of contact and provides technical supervision and guidance for all Contractor personnel assigned to the task order. The CPM shall lead the Contractor team in providing best business practices to the DCO PMO. The CPM is responsible for overseeing all contractual responsibilities and delivery of all contract deliverables listed in this PWS. The CPM shall ensure an efficient, effective and economical level of task order support is provided to the DCO PMO. The CPM shall provide oversight of staff and support activities and maintain task order costs. As required by the DCO PMO, the CPM shall coordinate with the COR to fill vacancies with the most qualified staff. The CPM shall manage overall task order performance to include provide subcontract management; oversee invoicing and task order change proposals; and understand customer needs and expectations.

The CPM shall interface monthly with the Government PM to review quality of services performed. The CPM shall be responsible for managing and controlling the overall scope, budget, and schedule of the task order.

The Contractor shall apply knowledge, skills, tools, and techniques to program activities to meet requirements. The Contractor shall assist the DCO PMO in managing several projects with the intention of meeting critical milestones, delivering of capabilities, and continuously improving performance. The Contractor shall be responsible for the management and administration of all efforts set out within this task order, ensuring that all activities are performed in a timely and cost-effective manner.

The Contractor shall develop a Program Management Plan (PMP), which lays out the Contractor’s approach, timeline and tools to be used in execution of the task order.

6.2 Task 2 – Program Management

The Contractor shall assist the DCO PMO in project management, ensuring projects are delivered on time, to budget, and technical specification. The Contractor shall assist the DCO PMO in planning, developing, testing, and documenting projects. The Contractor shall apply business process improvement practices to reengineer methodologies/principles and business processes to modernize projects. The Contractor shall apply, as appropriate, Page 4 of 44 Pages activity and data modeling, transaction flow analysis, internal control, risk analysis, modern business methods, and performance measurement techniques. The Contractor shall assist in establishing standards for information systems procedures. The Contractor shall apply knowledge and experience with applicable standards to include, but not limited to, International Organization for Standardization (ISO) 9001 Quality Management System, 20000 Information Technology - Service Management, 27001 Information Security Management System and Capability Maturity Model Integration (CMMI) Maturity Level 3 as it applies to PM DCO development, services and acquisition activities. The Contractor shall develop and apply information models for use in designing and building integrated, shared software and database management systems. The Contractor shall construct sound, logical business improvement opportunities consistent with Information Management guiding principles, cost savings, and open system architecture objectives.

The Contractor shall provide support to PM DCO Product Managers (PdMs) and Assistant Product Managers (APM) with the following activities but not limited to:

• Support critical acquisition activities to include acquisition milestone documentation development, milestone review planning, defense acquisition reporting and program governance and compliance.

• Assist in the preparation of Quarterly and Annual Program Management Reviews.

• Initiate action items and tracking the action items for the DCO project offices.

• Interface with the COR in support of the PdM and ensure that all deliverables are being met and tracked.

• Assist in the development of comprehensive plans, programs, special reports (including acquisition documentation), briefing support studies, analysis and plans.

• Assist in the evaluation of the cost-effectiveness of all relevant plans and programs and assess how effectively they meet organizational priorities.

• Support in the review and assessment of the impact of revised or new policy guidance and regulations for technical impact on projects within PM DCO.

• Attend and support technical meetings, demonstrations, data center visits and working groups.

• Document, track, store and manage knowledge developed by the PM to support knowledge management and transfer functions

6.2.1 Subtask 1. Acquisition Management (DoDD 5000.01, DoDI 5000.02)

The Contractor shall apply knowledge and experience in acquisition program management policies, and procedures (regulatory and statutory) to DCO systems, subsystems, and equipment or software procurement activities, pre/post award project/program management tasks, and acquisition programs throughout their life cycles. The Contractor shall be proficient in systems development using the Joint Capabilities Integration and Development System (JCIDS) IT Box Model and acquisition management in accordance with Department of Defense Directive (DoDD)

5000.01 and Department of Defense Instruction (DoDI) 5000.02 The Contractor shall apply rapid contracting methodologies, Agile, Scaled Agile Framework (SAFe), Scrum and methodologies utilized in rapid acquisition.

The Contractor shall provide support to PM DCO PdMs and APM with the following activities but not limited to:

• Develop, maintain and adhere to the Simplified Acquisition Management Plan (SAMP).

• Develop and maintain Test and Evaluation Master Plans (TEMPs).

• Develop, maintain and adhere to the Integrated Master Schedule (IMS).

• Assure projects/programs conform to DoDD 5000.01, DoDI 5000.02, and other new DoDI 5000 series instructions and guidance.

• Appropriately and clearly interpret regulatory and legal requirements applicable to acquisitions.

• Interpret DoD acquisition guidance and support acquisition planning and cyber program integration.

• Prepare planning documents to coordinate integrated acquisition strategies.

• Support the development of acquisition implementing/operating instructions, directives, plans and policies.

• Review and provide analysis on various acquisition documents and products.

Page 5 of 44 Pages

• Prepare cyber-focused acquisition documentation and executive-level decision papers; prepare and staff actions for functional and technical review and comment.

• Perform internal and external agency coordination and reporting.

• Support the preparation and execution of executive-level Acquisition Strategy Panels and Boards, component Acquisition Plans, program acquisition baseline reviews, acquisition lifecycle phase reviews, and other acquisition documentation and reviews.

Develop and prepare acquisition documentation to support activities to plan, coordinate and execute reviews of acquisition policy and documentation, daily, weekly, and monthly status updates and reports; and activities to develop and manage electronic tools used to create, store, retrieve and manage documents. The Contractor shall plan for, execute, maintain and evolve a comprehensive IMS and time-based plans for PM DCO consistent with system acquisition management plans, milestones, best practices and the latest scheduling and tracking program management software. All schedules, timelines, and plans will leverage industry best practices, and focus on the integration of known and risk-based timelines to support management of programs and projects to the lowest level possible. The contractor shall coordinate, develop, maintain, and brief all time-based metrics, schedules, Earned Value Management (EVM) data, and develop action plans and get-well plans based on adherence to established goals and milestones. The contractor shall develop and maintain Plan of Actions and Milestones (POA&Ms), produce supporting metrics for timeliness, speed of execution, and keep the PM staff aware of timelines, risk and upcoming events. The contractor shall be involved in the scheduling, coordination, planning and execution of programmatic events.

6.3 Task 3 – Contracts Management

The Contractor shall provide a full range of cyber-focused acquisition and contract support in acquiring required Information Technology (IT) systems and services, already in existence or to be created, developed, demonstrated, and/or evaluated. The Contractor shall plan, research and execute stand-alone full and open FAR based procurements, task or delivery orders under existing Government Wide Acquisition Contracts, Indefinite Delivery/Indefinite Quantity (IDIQ), sole source contracts, and OTAs. The Contractor shall appropriately and clearly interpret regulatory and legal requirements applicable to acquisitions. The Contractor shall be proficient in rapid contracting methodologies such as OTAs.

The Contractor shall conduct market research, develop Acquisition Requirements Packages (ARP), to include but not limited to, acquisition strategies, acquisition plans, PWS, evaluation criteria, and Quality Assurance Surveillance Plans (QASP) to enable the procurement of PM DCO IT systems and services that meet the business needs of the Army. The Contractor shall assist with the execution of the Army’s standardized use of PM DCO's suite of contracts such as IDIQs, General Services Administration (GSA) Schedules, and Blanket Purchase Agreements (BPA). The Contractor shall exercise independent judgment in the planning, organizing, and directing of pre-award commercial contracting, applying knowledge of FAR, Army Federal Acquisition Regulations Supplement (AFARS), Defense Acquisition Regulations Supplement (DFARS), and PEO EIS policies to enable the Army to fulfill their business objectives.

The contractor shall create, staff, control, distribute, and maintain various acquisition documents for required program and project procurements. In creating these acquisition documents, the contractor shall coordinate with PMO personnel to gather acquisition requirements, compile documents, distribute drafts, incorporate comments, and explain document content, format, and schedule issues to team participants. The contractor shall assemble ARPs based on Government input, for review and approval. Documents shall be prepared in accordance with (IAW) FAR, AFARS, DFARS, and PEO EIS policies.

Examples of documents that will be part of an acquisition project is as follows:

• Acquisition Plans

• Statements of Work

• Performance Work Statements

• Statements of Objectives

• Evaluation Plans and Source Selection Plans

Page 6 of 44 Pages

• Evaluation Tools, Templates, and Forms

• Independent Government Cost Estimates

• Determinations and Findings Documents

• Business Case Documents

• Quality Assurance Plan/Quality Assurance Surveillance Plan

• Market Research Summary Reports and Requests for Information

• Justification and Approval

• Other Assistant Secretary of the Army for Acquisition, Logistics, and Technology (ASA (ALT)) documentation (as required)

The contractor shall assist PMO personnel with oversight of current contracts by monitoring, tracking and reporting status for Government review and approval. The contractor shall routinely gather, compile, format, and disseminate data relating to various PMO potential, active and historical contracts. The contractor shall provide contract data such as status summary that includes the purpose, value, period of performance, all modifications and the cumulative view.

The contractor shall conduct market research necessary to collect and analyze information about capabilities within the market to satisfy agency needs, as well as to execute the tasks required by Part 10 of the FAR.

6.4 Task 4 – Business and Financial Management

The Contractor shall provide strategic and tactical Planning Programming and Budget Execution (PPBE) support to the PM DCO Business Management Director (BMD) in the areas of program analysis (financial), cost analysis, budget analysis, and management analysis. The contractor shall provide budget year, multi-year, and long-range fiscal program plans that involves the formulation, justification, and execution of resources as well as management analysis and administrative support that aligns with DoD, Army, PEO EIS, and PM DCO guidance and policies.

6.4.1 Subtask 1. Program Analysis (Financial)

The Contractor shall support BMD in performing the following programmatic planning and analysis functions:

• Prepare annual long-range Strategic Portfolio Analysis Review (SPAR) submission presented to Headquarters Department of the Army (HQDA) elements

• Prepare annual Future Years Defense Program (FYDP) Program Objective Memorandum (POM) Program Review submission presented to the Program Evaluation Groups (PEGs) and Management Decision Package (MDEP) Managers and Analysts

• Participate in DCO JCIDS IT Box working groups to build five-year lifecycle cost, schedule, and performance thresholds

• Prepare annual Army Program Budget Brief submission (formerly known as Department of the Army Systems Coordinator (DASC) Parades) presented to Congressional professional staff members

• Prepare bi-annual Procurement Form (P-Form) and Research, Development, Test and Evaluation Form (R-Form) submissions to Congress

• Update Annual Program Review (APR) and Quarterly Program Review (QPR) financials supporting DCO program capabilities to include Deputy for Acquisition and Systems Management (DASM)/DASC Quad Chart financials to HQDA elements

• Update Army Portfolio Management System (APMS) financials as well as Monthly Acquisition Reporting (MAR) financials in Program Management Requirements Tool (PMRT) to HQDA elements

• Prepare issue papers and impacts statements to defend resources

• Utilize DCO BMD SharePoint portal for centralized management of support documentation

• Prepare other programmatic products and reports as needed.

6.4.2 Subtask 2. Cost Analysis

The Contractor shall support BMD in performing the following cost planning and analysis functions:

Page 7 of 44 Pages

• Prepare Program Office Estimates (POEs) for Requirement Definition Packages (RDPs) and annual SPAR and POM submissions

• Participate in DCO JCIDS IT Box working groups to build five-year lifecycle cost, schedule, and performance thresholds

• Prepare Independent Government Cost Estimates (IGCEs) for ARP acquisition strategies and contract solicitations

• Prepare cost analyses and reports such as Better Buying Power (BBP), Business Case Analysis (BCA), Cost Benefit Analysis (CBA), and Affordability Analysis (AA) submissions

• Coordinate with Deputy Assistant Secretary of the Army Cost Estimation (DASA-CE) and PEO EIS Cost Teams for concurrence on cost estimates and cost documentation

• Utilize DCO BMD SharePoint portal for centralized management of support documentation

• Prepare other cost analyst products and reports as needed

6.4.3 Subtask 3. Budget Analysis

The Contractor shall support BMD in performing the following budget analysis functions:

• Contractor shall have operational knowledge and access to the Army’s General Funds Enterprise Business System (GFEBS) and legacy Standard Operations and Maintenance Army Research and Development System (SOMARDS) financial management databases

• Prepare annual DCO spend plan submissions to Army Budget Office (ABO)

• Prepare weekly DCO execution plans to include tracking planned versus actuals

• Run/post daily GFEBS Status of Funds reports

• Process GFEBS funding documents for BMD certification

• Monitor commitments, obligations, expenditures, and disbursements ensuring appropriations meet monthly Office of the Secretary of Defense (OSD) obligation and disbursement goals

• Perform daily unliquidated obligation (ULO) and quarterly Joint Reconciliation Program (JRP) reviews for timely closeout of financial transactions

• Clear GFEBS IDOC and Unmatched Transactions/Documents (UMTs/UMD)

• Assist in financial audits and internal management control reporting

• Utilize DCO BMD SharePoint portal for centralized management of support documentation

• Prepare other budget analyst products and reports as needed

6.4.4 Subtask 4. Management Analysis Support

The Contractor shall support BMD in performing the following management and administrative functions:

• Perform routine manpower analyses and reporting

• Track weekly, monthly, and quarterly personnel metrics to include acquisition certifications, mandatory training, individual development plans, and continuous learning points

• Support planning of command events such as retirement ceremonies, hail and farewells, and change of charters

• Assist in preparation of Military Acquisition Position List (MAPL), Command Select List (CSL), and

Total Distribution and Allowance (TDA) submissions

• Assist with site visits, audits, and internal management control reporting

• Track and assist with BMD suspense in Task Management Tool (TMT) database

6.5 Task 5 – Plans and Operations

Plans and Operations manages the internal processes of the DCO Program. The Deputy Project Manager leads the Plans and Operations Branch and provides oversight of key activities to include the following:

• Administrative Support

• Task Management

Page 8 of 44 Pages

• Facilities

• IT Support

• SharePoint

• Portfolio Content Management

• Process Implementation and Improvement

• Strategic Communications

• Personnel Management

6.5.1 Subtask 1. Administrative Support

The Contractor shall support the following administrative services:

• Schedule and coordinate meetings (Calendar Maintenance).

• Answer phone calls and record accurate messages.

• Prepare and correspondence including reports and meeting minutes.

• Prepare, consolidate, and submit for purchase supplies requested by DCO program staff.

• Greet and receive visitors.

• Reproducing Documents.

• Independently manage an automated tracking system of correspondence and program- related documents and follow-up with managers to ensure that mail, correspondence, requests, and assignments are completed.

• Monitor stock levels for a variety of office supplies and coordinate restocking as necessary

• Maintain travel schedules and create travel authorizations and vouchers in the Defense Travel System

(DTS)

• Maintain and prepare records of leave, timecards, travel, training and other organizational activities.

• Report outages and submit work orders when office equipment (e.g., copiers, faxes, multi-media equipment) is not in working order.

6.5.2 Subtask 2. Task Management

The Contractor shall serve as the primary point of contact for the Task Management Tool (TMT). The Contractor shall perform the following functions to ensure all tasks are responded to and closed out in accordance with suspense dates.

• Receive and accept tasks

• Review and respond to any tasks that does not require input from other staff

• Distribute tasks to the necessary staff for response

• Collect response and close out tasks through TMT

6.5.3 Subtask 3. Facilities

The Contractor shall support facilities management with the following activities:

• Serve as the DCO building space allocation manager. Maintain accurate up-to-date floor plans for room layout, personnel locations, telephone, and computer equipment management.

• Serve as the door access and key control supervisor for PM DCO assigned facilities.

• Coordinate for DCO staff building access

• Coordinate with PEO facilities for furniture requirements

• Work with DCO Audio Visual (AV)/IT Support and PEO facilities manager for structural changes/updates to the allocated space

• Submit work orders for Air Conditioning (AC)/Heating, plumbing and appliance malfunctions or adjustments

6.5.4 Subtask 4. IT Support

Page 9 of 44 Pages

The Contractor shall provide back-office services to the PMO (approximately 100 IT devices) that are needed for support plans, internal help desk support, network support, hardware, and software.

• Provide an individual to serve as Installation Management Officer for direct interface and coordination with the Fort Belvoir Network Enterprise Center (NEC)

• Provide on-site support for computer automation equipment (laptops, desktops, Local Area Networks (LAN), printers, plotters, Video Telephone Conference (VTC), etc.)

• Perform some research, and evaluation of software tools, hardware and services and breaking technologies.

• Support Infrastructure Management IT equipment and services acquisitions.

6.5.5 Subtask 5. SharePoint

SharePoint is used for collaboration and content management across PM DCO and within sub organization levels and its use will continue to grow. The Contractor shall assist the Government in performing PM DCO SharePoint maintenance and sustainment activities to keep the SharePoint operational and provide the users the support required. This encompasses technical maintenance, content management support and user support and training.

Specifically, this includes the following:

• Perform as PM DCO specific SharePoint Site Content Administrator (SCA)

• Perform PM DCO specific SharePoint technical troubleshooting and coordination with PEO EIS and

MilTech

• Perform PM DCO specific support for migration of SharePoint from one implementation to another

• Perform PM DCO specific overall account management

• Perform PM DCO specific area and site creation

• Identify, document, implement and monitor PM DCO specific best practices recommendations

• Provide basic instruction as required

6.5.6 Subtask 6. PM DCO Portfolio Content Management

The Contractor shall assist PM DCO implement, sustain, and maintain a collaboration and information/data sharing environment. The Contractor shall ensure proper Governance is established and maintained to ensure the processes and policies for sharing information across PM DCO are in place. This includes, at a minimum, the SharePoint content management policies, archiving procedures, and Critical Unclassified Information (CUI) information guidance.

The Contractor, shall serve as the SharePoint Working Group Lead, and support the following tasks:

• Collect requirements

• Determine priorities

• Manage schedule for task completion

Additionally, the Contractor shall support the transition of assigned programs into PM DCO SharePoint to include SharePoint build out (taxonomy, sites, subsites and logos), data, tool and user migration, and user implementation (deployment, user communication and training).

6.5.7 Subtask 7. PM DCO Process Implementation and Improvement

PM DCO has a need for process management services to assist in creating a common set of project management processes across PM DCO. A common set of project management processes may enable more rapid communication within and between organizational elements and may allow daily project management tasks to be efficiently completed. The Contractor shall facilitate the creation of government required project management processes within PM DCO. The Contractor shall research and analyze existing instructions and institutional knowledge and integrate this information with Project Management Best Practices to create a standard set of project management processes.

The Contractor shall perform and document the process analysis, requirements gathering and process design. For

Page 10 of 44 Pages those requirements implemented, development, test and training as required shall be conducted. Process may apply to the following areas:

• Program Management

• Acquisition Management

• Business Management

• Product Support areas such as Logistics, Training, Test

• Technical Management such as Risk Management Framework (RMF), Configuration Management, Risk Management

6.5.8 Subtask 8. Strategic Communications

The Contractor shall implement a strategy to effectively disseminate relevant and up to date DCO and personnel transformation information to the Army at all levels. The Contractor shall participate in Army conferences and events designed to promote DCO. Assist in the development and implement a communications plan to serve as a framework for all communications activities. The strategic communications effort includes stakeholder analysis, development of command-wide messages, identifying means of delivery, and a project schedule. The Contractor shall maintain and update collaborative on-line tools (such as an Army Knowledge Online (AKO)-based site);

facilitate telephone conferences, video teleconferences, and on-line presentation tools (such as Defense Connect On-line); and support DCO related conferences and exhibits. The Contractor shall provide the following:

• Development and publishing of program information to include newsletters, web content, bulletins, etc.

• Conduct, collect, analyze, and report on customer questionnaires and surveys.

• Coordinate, schedule, and conducting DCO demonstrations, events, and other public relations activities, as required.

• Develop and market DCO articles, advertisements, posters, briefings, and promotional materials.

• Assist with development of an engagement strategy for reaching senior Army leaders to communicate

DCO knowledge and information.

• Collaborates closely with the PEO EIS Public affairs Office (PAO) and other PAO representatives as appropriate.

• Conduct monthly In-progress Review (IPR) with the DCO leadership as well as a weekly working group with Action Officers across the DCO Divisions.

• Maintain the PM DCO AKO-based website

• Develop, maintain, and update DCO website

• Establish and maintain social media to promote DCO

• Conduct research and write Personnel, Group and Program awards as directed by the PMO.

• Coordinate with the DCO community to coordinate and reach out to DCO user communities to promote, facilitate DCO programs and projects.

6.5.8.1 Subtask 1. Strategic Outreach

The Contractor shall support the acquisition process and areas relating to acquisition policy matters including acquisition streamlining, integrated weapon systems management, manning, best practices and lessons learned. The Contractor shall be responsible for:

• Interpreting, organizing, executing, and coordinating assignments.

• Performing exploration of the subject area, definition of scope, selection of problems for investigation and applying intensive and diverse knowledge to problems.

• Supporting the Government at executive levels within the government and other contractor organizations, including major program reviews, inspections, conferences, and other program evaluations and major milestone events.

• Coordination with contacts at the program office, supporting government offices, other contractors, and higher headquarters mid to upper-level staff.

Page 11 of 44 Pages

• Interpreting DoD acquisition guidance and support acquisition planning and cyber program integration.

• Preparing planning documents to coordinate integrated acquisition strategies. Support the development of acquisition implementing/operating instructions, directives, plans and policies.

• Reviewing and provide analysis on various acquisition documents and products.

• Preparing cyber-focused acquisition documentation and executive-level decision paper; prepare and staff actions for functional and technical review and comment.

• Performing internal and external agency coordination and reporting.

• Supporting the preparation and execution of executive-level Acquisition Strategy Panels and Boards, component Acquisition Plans, program acquisition baseline reviews, acquisition lifecycle phase reviews; and other acquisition documentation and reviews.

• Developing and preparing acquisition documentation to support activities to plan, coordinate and execute reviews of acquisition policy and documentation, daily, weekly, and monthly status updates and reports; and activities to develop and manage electronic tools used to create, store, retrieve and manage documents.

• Supporting the preparation of "smart books", and associated presentations products.

6.5.8.2 Subtask 2. Graphic

The Contractor shall provide visual communicators by hand or by use of computer software. The Contractor shall provide communication ideas to inspire, inform, audiences through both physical and virtual art forms that include images, words, or graphics. The Contractor shall ensure that visual communicators are web and print compatible.

The Contractor shall ensure visual communicators are Section 508 compliant.

6.5.9 Subtask 9. Personnel Management

The contractor shall support the DCO Operations lead in performing personnel security and in/out processing, and personnel accountability. Specific activities shall include:

• Review Joint Personnel Adjudication System (JPAS)/Security Clearance on incoming personnel.

• Provides monthly reports for periodic reinvestigations and Interim clearance changes and access to

JPAS

• Submit Visit Access Requests as needed

• Initiate communications with incoming/checking-in personnel

• Perform the on-boarding process for all Military, Government, and Contractor personnel with the goal of minimizing time required to gain computer network access.

• Coordinate with DCO IT support for provisioning Image Quality Analysis (IQA) equipment

• Identify and coordinate with the AKO Sponsor to ensure and facilitate AKO access and registration process

• Provide feedback on security clearances through JPAS

• Prepare and update a new employee welcome package

• Coordinates with personnel escorts for incoming personnel

• Conduct weekly accountability of all PM DCO personnel.

• Maintain organization charts in SharePoint

• Maintain emergency call rosters

• Maintain distribution lists in the Global Address List directory

• Track required training and certifications

• Act as the DCO civilian timekeeper using the Automated Time Attendance and Production System

(ATAAPS)

• Review and submit civilian work schedules and teleworking packages on an annual basis

6.6 Task 6 – Product Support Management

Page 12 of 44 Pages

The Contractor shall assist the Government develop product support functions required to field and maintain the readiness and operational capability of DCO systems, subsystems, and components, including all functions related to systems readiness. The optimal product support outcomes shall maximize competition while making use of public and private resources at the system, subsystem, and component levels, at the lowest operations and support (O&S) cost.

The Contractor shall support DCO in all functional areas of product support to include:

• Property Accountability

• Test and Evaluation

• Training and Fielding

• Acquisition Logistics

6.6.1 Subtask 1. Property Accountability

The Contractor shall assist the Government Property Administrator manage property accountability, maintenance, refresh, and replacement of all Government-owned equipment, software licenses, and hardware warranties used to include internal and external users.

The activities to support property book administration shall include but are not limited to:

• Accounting for all Government Furnished Equipment (GFE), tools, Government Off- the-Shelf (GOTS), and Commercial Off-the-Shelf (COTS) products used by the Government, Contractor, and/or support staff for office automation, application development, testing, production, program management, etc.

• Ensuring that all COTS products are licensed and controlled, and records are maintained to include hand receipts and other accountability documentation.

• Tracking license and warranty expiration on all GFE, GOTS, and COTS software/hardware products, and provide renewal notifications.

• Using the Global Combat System Support – Army (GCSS-A), Defense Property Accountability System (DPAS) and other accountable property systems of record to conduct property accountability activities.

The Contractor shall assist the Government Property Administrator manage the preparation, maintenance, and management of the document and/or voucher registers. Additionally, the Contractor shall assist the Property Administrator maintain a formal set of property accounting records that show, on a continuing basis, the item identification, gains and losses, on hand balances, and the conditions and locations of all property assigned to the Primary Hand Receipt Holder’s installation and program of record property accounts. Documentation identified in the appropriate functional regulations, such as Army Regulation and Pamphlet 735-5, will be maintained in an “Audit Ready” state to validate all recorded entries.

6.6.2 Subtask 2. Testing and Evaluation

The Contractor shall assist the Government Assessment Lead develop and maintain a Test and Evaluation (T&E) program, in accordance with Army Regulation 73-1, that characterizes system capabilities across the intended operational conditions, verify that testable requirements are met or not met, and inform decision-makers. The Contractor shall support the Government to produce T&E results used to: acquire systems that work, provide engineers and decision-makers with knowledge to assist in managing risks, measure technical progress, and characterize operational effectiveness, operational suitability, and survivability (including cybersecurity).

Contractor activities to support T&E program activities shall include but are not limited to:

• Reviewing and understanding of the threat and the requirements.

• Analyzing to determine the appropriate scope and depth of evaluations to be completed.

• Evaluating operational context to develop test objectives, configurations, and conditions.

Page 13 of 44 Pages

• Coordinating the planning, management, and oversight of all T&E activities.

• Maintaining insight into system integrator activities under the program.

• Supporting T&E functions of government activities under the program.

• Organizing, scheduling, and documenting results from the T&E Working Integrated Product Team(s)

(WIPT).

The Contractor shall assist the Government Assessment Lead coordinate scheduling and oversight of operational assessments with the U.S. Army Test and Evaluation Command (ATEC) which consists of the U.S. Army Evaluation Center (AEC), U.S. Army Operational Test Command (OTC), and Test Centers. The Contractor shall participate in developing assessment plans aligned to Defensive Cyber Operations system’s key performance parameters listed in their respective requirements definition packages. This will improve the likelihood that AEC produces independent comprehensive evaluations and assessments from validated developmental, operational, and other credible data ultimately providing accurate information to the Milestone Decision Authority to make key programmatic decisions.

6.6.3 Subtask 3. Training and Fielding

The Contractor shall provide DCO system user education and new equipment training (NET). Services provide the principles and techniques of instructional design methodology to develop and deliver training materials and programs as well as provide customized education and training to Government customers in varied venues and locations. Training formats shall include train-the-trainer, classroom, and virtual courses. The Contractor shall develop and deliver training, in accordance with Army Regulation 350-1, for the user community as well as other agencies or commands as directed by the Government NET Manager.

To ensure standardization and quality, the Contractor shall staff a Technical Writer capable of developing and updating training products such as but not limited to:

• User guides

• Training manuals

• Instructor manuals

• Training aids

• Software documentation necessary for training sessions

The Contractor shall assist the Government NET Manager with planning the fielding of DCO products, such that the products are made accessible to the users in the operational environment. The Contractor shall analyze the geographical and demographical challenges associated with the fielding of DCO systems and provide recommendations as to the most efficient means to field. The planning of fielding activities shall be tightly coupled with training activities to ensure users are trained within an acceptable period ahead of fielding.

Contractor activities to support Defensive Cyber Operations Fielding support program activities shall include but are not limited to:

• Planning and coordination of fielding Rock Drills, as necessary.

• Development and implementation of fielding readiness plans.

• Development and implementation of fielding readiness checklists depicting fielding readiness key activities, target dates, milestones, and identify responsible organizations.

• Scheduling and delivering Command In-Briefs to gaining commands prior to fielding.

• Develop New Materiel Introduction Brief (NMIB) outlining system characteristics (particularly new or unique), schedule, responsibilities, and administrative instructions.

To ensure successful coordination and de-confliction of resources for training, fielding and other DCO resource intensive activities; the Contractor shall staff a Master Scheduler. The Contractor shall develop and maintain an IMS inclusive of all DCO Product Office and Directorate level projects. At a minimum, the Contractor shall use Government provided Microsoft Project software to capture all efforts (work packages) to a work breakdown

Page 14 of 44 Pages structure level four. The Contractor may propose other innovative (i.e. cloud-based, server-based, etc.) scheduling solutions for Government consideration and approval.

6.6.4 Subtask 4. Acquisition Logistics

The Contractor shall assist the Government Product Support Lead implement a comprehensive, outcome-based product support strategy. The product support strategy will be designed to maximize value to the Government by providing the best possible product support outcomes for the Warfighter at the lowest operations and support (O&S) cost. The Contractor shall assist in documenting the product support strategy in the Life Cycle Sustainment Plan (LCSP). The LCSP shall describe the plan for the integration of sustainment activities into the Acquisition Strategy and operational execution of the product support strategy.

To achieve an optimum level of precision, the Contractor shall assist the Government Product Support Lead by conducting appropriate predictive analysis and modeling tools that can improve material availability and reliability, increase operational availability, and reduce O&S cost.

The Contractor shall implement analytical tools such as but not limited to:

• Supportability Analysis

• Reliability Growth Analysis

• Core Logistics Analysis

• Core Depot Assessment

• Business Case Analysis

• Level of repair Analysis

The Contractor shall assist the Government Product Support Lead implement and manage product support, including documenting updates to the LCSP, conducting, and implementing recommendations from logistics assessment, and maturing the product support solution. The Contractor shall play a significant role in the continuous ongoing assessment of DCO product support effectiveness through use of established governance mechanisms, in accordance with Army Regulation 700-127, to drive decisions to review, modify, revise, or evolve product support strategies and product support arrangements with organic and industry providers.

6.7 Task 7 – Cybersecurity Program Support

6.7.1 Subtask 1. Information System Security Manager

Information System Security Manager (ISSM) is responsible for evaluating, monitoring and ensuring the adequacy of the cybersecurity posture of a program, organization, system, applications, or enclave and for coordinating, reviewing and uploading the provided engineering artifacts into the Enterprise Mission Assurance Support Services (eMASS).

The contractor shall provide support to PM DCO with the following activities but not limited to:

• Monitor information security data sources (e.g. scan results, logs, etc.) to maintain organizational situational awareness

• Monitor and evaluate the effectiveness of the cybersecurity safeguards to ensure that they provide the intended level of protection

• Oversee the information security awareness training

• Participate in an information security risk assessment during the Security Assessment and

Authorization process

• Participate in the development or modification of the computer environment cybersecurity program plans and requirements

• Prepare, distribute, and maintain plans, instructions, guidance, and standard operating procedures concerning the security of the mission network and system(s) operations

• Provide leadership and direction to IT personnel by ensuring that cybersecurity awareness, basics, Page 15 of 44 Pages literacy, and training are provided to operations personnel commensurate with their responsibilities

• Provide system-related input on cybersecurity requirements to be included in statements of work and other appropriate procurement documents

• Provide incident reports, and findings from computer examinations, summaries, and other situational awareness information to higher headquarters

• Recognize a possible security violation and take appropriate action to report the incident, as required

• Recommend resource allocations (i.e. funding and personnel) required to securely operate and maintain an organization’s cybersecurity requirements

• Recommend cybersecurity policy and coordinate review and approval

• Supervise or manage protective or corrective measures when a cybersecurity incident or vulnerability is discovered

• Promote awareness of security issues among management and ensure sound security principles are reflected in the organization's vision and goals

• Oversee policy standards and implementation strategies to ensure procedures and guidelines comply with cybersecurity policies

• Participate in Risk Governance process to assess security risks and adequacy of proposed mitigations

• Identify security requirements specific to an IT system in all phases of the system life cycle

• Ensure that all documentation required to support Assess Only determinations is complete, adequate, and accurate

• Ensure that plans of actions and milestones and/or remediation plans are in place for vulnerabilities identified during risk assessments, audits, inspections, etc.

• Assure successful implementation and functionality of security requirements and appropriate IT policies and procedures that are consistent with the organization's mission and goals

• Support necessary compliance activities (e.g. ensure that system security configuration guidelines are followed to established baselines,…