PERFORMANCE WORK STATEMENT (PWS)

AUTOMATED ARMORY TRACKING SYSTEM (AATS)

CAMP LEJEUNE PROVOST MARSHAL’S OFFICE (PMO)

1.0 Introduction and Background

This Performance Work Statement (PWS) outlines the requirements for the procurement, deployment, and support of a secure, web-based Software as a Service (SaaS) subscription for an Automated Armory Tracking System (AATS). The Camp Lejeune Provost Marshal's Office (PMO) requires an automated, modernized armory tracking system to streamline operations, maintain accurate custody tracking, and ensure strict compliance with Marine Corps inventory standards. The system shall provide a secure, modernized platform to digitize Consolidated Memorandum of Receipts (CMRs), armory databases, and key logs.

1.1 Scope of Work

The Contractor shall provide a web-based, secure Automated Armory Tracking System (SaaS) to support the Camp Lejeune PMO in managing armory assets, inventories, and warehouse property records. The scope encompasses SaaS software licensing, secure multi-tenant cloud organization setup, database schema mapping, role-based access control (RBAC) implementation, security posture configuration, historical data migration, user training utilizing remote instruction, continuous technical support, and eventual secure offboarding/data-transition services.

1.2 Background

The Camp Lejeune PMO requires an automated, modernized armory tracking system to streamline operations, maintain accurate custody tracking, and ensure strict compliance with Marine Corps inventory standards. The AATS must replace legacy manual systems with modern tracking methodologies to support:

• Real-Time Asset Tracking: Instantaneous, real-time tracking of serialized weapon systems, ammunition, and gear.

• Digital Check-In/Check-Out: Fully digital check-in and check-out processing for armory personnel.

• Automated Receipt Generation: Automatic generation of official NAVMC 10576 and NAVMC 11186 receipts.

• Instant Digital Audit Trails: Instantaneous and immutable digital audit-trail logs of all system transactions.

2.0 General Requirements

2.1 Hosting, Accessibility, and Security Compliance

• 2.1.1 Platform Delivery: The system shall be a turnkey solution delivered as a web-based Software as a Service (SaaS) platform, accessible via standard web browsers on authorized DoD devices with internet connectivity.

• 2.1.2 Instant Access: Upon contract award and subscription activation, authorized users must gain instant access to the platform via a dedicated, secure web portal.

• 2.1.3 Maintenance & Software Updates: The Contractor shall provide all necessary system updates, security patches, and bug fixes for the duration of the performance period.

• 2.1.4 FedRAMP Compliance: The SaaS platform must maintain a Federal Risk and Authorization Management Program (FedRAMP) Moderate or High Authorization for the duration of the contract. The Contractor shall provide proof of FedRAMP compliance within five (5) business days of award.

• 2.1.5 DoD Cloud SRG Compliance: The platform's secure cloud hosting must align with DoD Cloud Computing Security Requirements Guide (SRG) standards matching DoD Impact Level (IL) standards to ensure adequate protection of sensitive armory and personnel data.

• 2.1.6 Section 508 Compliance: All electronic and information technology provided under this contract must comply with Section 508 of the Rehabilitation Act (36 CFR Part 1194) and WCAG 2.1 Level AA standards.

• 2.1.7 National Security & Physical Security Compliance: All data handled within the AATS platform must adhere to the secure record retention and data protection guidelines mandated by MCO 5530.14A (Marine Corps Physical Security Program Manual) and MCO 4400.201 (Management of Property in the Possession of the Marine Corps).

• 2.1.8 Integration Capabilities: The platform must provide direct compatibility with standard USB/Bluetooth barcode and RFID scanning peripherals to facilitate rapid, hardware-enabled property tracking.

2.1.6 Section 508 Compliance: All electronic and information technology provided under this contract must comply with Section 508 of the Rehabilitation Act (36 CFR Part 1194) and WCAG 2.1 Level AA standards.

2.1.7 National Security & Physical Security Compliance: All data handled within the AIMS platform must adhere to the secure record retention and data protection guidelines mandated by MCO 5530.14A (Marine Corps Physical Security Program Manual) and MCO 4400.201 (Management of Property in the Possession of the Marine Corps).

3.0 Specific Tasks

Phase / Task Task Description

3.1 Software-

as-a-Service (SaaS) Licensing

The Contractor shall provide AATS SaaS user/organization-wide licenses for the duration of the contract period of performance, including option years.

3.2 System

Access, Onboarding, & Account Provisioning

The Contractor shall facilitate initial system access and execute onboarding procedures, including:

• Secure Cloud Setup: Secure multi-tenant cloud organization setup

• Database Mapping: Schema mapping and role-based access control (RBAC) implementation.

• Provisioning: Establishing Administrator accounts and processing/uploading initial Command personnel rosters provided by the Government.

• Multi-Phase Verification: Executing initial data-ingestion validation (100% data fidelity check) and conducting a joint Government-Contractor User Acceptance Testing (UAT) window to verify operational readiness before system "Go-Live."

Phase / Task Task Description

3.3 Data

Migration & Configuration

The Contractor shall format, map, and upload the Government's historical armory records to enable immediate operational use of the system.

• Source Data Inputs: The Contractor shall utilize initial Consolidated Memorandum of Receipts (CMRs), Armory Databases, and/or Warehouse property records provided by Camp Lejeune PMO.

• Configuration: The Contractor shall format, clean, and configure the raw files to map successfully into the AIMS database schema.

• Validation: The Contractor shall run testing scripts to ensure data integrity is maintained post-migration. Any immediate updates or discrepancies identified during onboarding will be corrected during the training phase.

3.4 Personnel

Training Support

The Contractor shall deliver professional, remote instruction to ensure PMO personnel can operate and administer the platform effectively.

• Training Methodology: The Contractor shall execute a remote training curriculum specifically tailored for senior armorers and administrators.

• Training Materials: The remote training shall be supplemented by downloadable, interactive digital user guides and on-demand instructional/reference videos for internal distribution.

• Refresher Training: Follow-on remote training sessions to accommodate account rotations or new personnel shall be made available upon request.

3.5 Customer

Support and Sustainment

The Contractor shall provide comprehensive customer service and technical support throughout the active licensing window.

• Continuous Help Desk Access: Uninterrupted, 24/7 access to a web-based technical support ticket portal.

• SLA Acknowledgement Time: Acknowledge receipt of non-emergency support tickets within forty-eight (48) business hours of submission.

• Emergency Support: For mission-critical or system-down emergencies, the Contractor shall provide a representative reachable via phone or email for expedited resolution.

4.0 Government Responsibilities

The Government (Camp Lejeune PMO) will provide the following inputs to the Contractor within fifteen (15) calendar days of contract award:

• Complete, updated Command Personnel Rosters containing authorized user credentials, ranks, and roles.

• Current Consolidated Memorandum of Receipts (CMRs) and related equipment hand-receipt data.

• Legacy Armory Databases and warehouse inventories in spreadsheet format (e.g., .CSV or .XLSX).

5.0 Deliverables

Deliverable ID Task Description Due Date

D-01 AATS Access Provisioning & Cloud Setup: Completion of secure multi-tenant cloud organization setup, database schema mapping, RBAC implementation, administrator account creation, and initial roster loading.

Within 15 days after receiving Government inputs.

D-02 Data Migration & Mapping: Successful mapping and verification of CMR, Armory, and Warehouse files.

Within 30 days after contract award.

D-03 Remote Training Package: Delivery of the remote training sessions, digital user guides, and on-demand reference videos to designated senior armorers and administrators.

Prior to system "Go-Live."

D-04 Technical Support SLA Report: Quarterly log of tickets received, response times, and resolution codes.

10 Business Days after the end of each quarter.

6.0 Period of Performance

The period of performance consists of one (1) 12-Month Base Period (including a 30-day post-award integration window) and two (2) subsequent 12-Month Option Years. The Government’s desired timeline for completion of all installation, programming, testing, and final acceptance tasks is thirty (30) business days from the commencement of work. Quoters are encouraged to propose their own realistic schedule in their quote based on industry best practices.

7.0 Place of Performance

Provided Upon Award.

8.0 Performance Requirement Summary

The Government will monitor the Contractor's performance.

Deliverable

ID

Performance Standard Acceptable Quality Level

Method of Surveillance

System Availability

Web portal must be online and operational for authorized users.

99% Uptime Periodic review of server status logs and user reports.

Support Ticket Response

Non-emergency tickets must be acknowledged within timeframes.

90% of tickets acknowledged within 48 business hours.

Contractor Support Portal logs.

Data Migration Quality

Historical records and rosters successfully mapped with complete structural integrity.

100% database structural integrity;

zero missing critical fields.

Manual review of post-migration configuration by Government Lead.