A14256 - PR22018 - PWS.docx

Performance-Based Work Statement (PWS)

309th Software Engineering Group (SWEG) INFRASTRUCTURE Team

U.S AIR FORCE

Solicitation #

6/3/2025 Version 1

PWS Modification History

TABLE OF CONTENTS

i

DESCRIPTION OF SERVICES

The purpose of this requirement is to establish and maintain a permanent 10 Gigabit Defense Research and Engineering Network (DREN) and Secure DREN (SDREN) connection in support of the 309 SWEG at Hill Air Force Base, Utah.

SCOPE

The scope of this requirement encompasses equipment procurement, setup, secure connectivity, and ongoing maintenance. The objective is to facilitate high-performance computing and low-latency communication while ensuring compliance with Department of Defense (DoD) security regulations. Each aspect of the requirement must meet stringent standards and provide reliable performance in demanding environments.

Reference Documents and Standards Applicable Documents and Standards The contractor shall comply with and maintain internal procedures aligned with the references and documents listed below. If the contractor does not already have established processes, the contractor shall utilize the references and documents for implementing program requirements.

BASIC SERVICES

Equipment Procurement 10 Gigabit per-second (Gbps) SDP Upgrade NRC 10G Pluggable – 8 Ports

10GBASE-SR

Networking Service 9 Gbps DREN Service, 1-Month Security Service DREN CSSP – Protect, 1-Month DREN CSSP – Detect and Respond, 1-Month DREN CSSP – Sustain, 1-Month

CDRL SUMMARY

CDRL Information Contract data shall be delivered electronically in accordance with (IAW) the corresponding requirement for each Data Item listed in the table below. The contractor shall prepare and deliver data to the Government in contractor format except where specific forms are required. Data shall be formatted IAW the requirements specified for each Data Item listed in the table below.

The contractor shall ensure all technical data, including drafts and working papers, are marked and controlled IAW appropriate distribution statements and export control warning notices.

Delivery

TRAVEL

Travel is not required under the performance of this contract.

PLACE/PERIOD OF PERFORMANCE

Place of Performance The place of performance shall be at Hill Air Force Base, Utah.

Period of Performance (PoP) The PoP shall be one (1) month After Receipt of Order (ARO).

PROGRAM MANAGEMENT

Data Rights Management All data rights under this contract shall be managed IAW applicable data rights clauses outlined in the FAR and DFARS. Specific clauses governing data rights are identified within this contract and shall dictate the level of rights granted to the Government for data, technical data, and computer software. The Contractor is responsible for adhering to these clauses to ensure full compliance. Any limitations on data rights must align with those specified in the completion of FAR 52.227-15, "Representation of Limited Rights Data and Restricted Computer Software." Only the restrictions proposed and accepted under this clause will be considered valid under this contract.

Intellectual Property (IP) All IP, including inventions, works, designs, developments, trade secrets, and other proprietary materials created, developed, or derived in connection with or as a result of this contract shall be the sole and exclusive property of the United States Government, as applicable under federal law and the terms of this contract.

The contractor shall assign all rights to the Government and execute the necessary documents outlining such ownership (CDRL A002). The contractor shall comply with the cybersecurity plan in paragraph 8.3 as well as all applicable federal laws and regulations governing the use, disclosure, and protection of Government-owned IP and to safeguard such property and any related confidential information from unauthorized use or disclosure.

Cybersecurity and Data Protection Plan The contractor shall develop, implement, and maintain a cybersecurity plan that complies with all applicable federal laws, regulations, and standards, including FAR 52.204-24 and, where applicable, DFARS 252.204-7012 (CDRL A003). The cybersecurity plan shall include safeguards to protect all Government data, IP, and sensitive information from unauthorized access, disclosure, or breach. The contractor shall implement industry-standard practices, including encryption, access controls, continuous monitoring, regular security audits, and penetration testing to ensure the effectiveness of cyber defenses. Any cybersecurity incident affecting Government data shall be reported to the COR and the PCO within 72 hours and addressed IAW federal guidelines. Results of audits and tests shall be documented and made available to the Government upon request.

Government Furnished Property (GFP)/Government Furnished Equipment (GFE)/ Government Furnished Materials (GFM) GFP/GFE/GFM is not required under the performance of this contract.

Government-Provided Support The Government will provide necessary working space, including heat, light, ventilation, and electrical outlets for the use of contractors’ personnel. The Government will provide access to the necessary facilities where the equipment resides. Government telephones shall be used for official business only. The contractor shall be responsible for safeguarding all Government property provided for contractor use.

Quality Control Plan The contractor shall establish a complete Quality Control Plan (QCP) to ensure the requirements of this contract are provided as specified. The contractor's quality management program shall comply with the minimum quality management systems elements specified in the American National Standards Institute (ANSI), American Standards Organization (ASO), and International Standard Organization (ISO) family of standards. The report shall be submitted to the PCO or COR NLT 30 days post contract award (CDRL A004).

Quality Assurance The PCO will perform assessments of the contractor’s performance. Subsequent to contract award, the specific name and contact information of the employees with a letter defining duties and authority will be furnished to the contractor.

The PCO will inform the task manager in person when discrepancies occur and will request corrective action. The PCO will make a notation of the discrepancy on the assessment checklist with the date and time the discrepancy was noted and will request the task manager (or authorized representative) to initial the entry on the checklist.

The Government may inspect each task as completed or increase the number of quality control inspections if deemed appropriate because of repeated failures discovered during quality control inspections or because of repeated customer complaints.

Any matter concerning a change to the scope, prices, terms or conditions of this contract shall be referred to the PCO.

The services to be performed by the contractor during the period of this contract are, at all times and places, subject to review by the PCO or authorized representative.

SECURITY

General Security Requirements The contractor shall comply with all Security, Force Protection, and Antiterrorism requirements. The contractor shall comply with local unit in- and out-processing procedures for all contractor personnel to ensure proper security-related briefings and debriefings are accomplished. Specific in- and out-processing checklists may be included at the task order level.

The contractor understands that any contractor employee may be summarily and immediately removed from or denied access to any Government property, facility, and installation at the sole discretion of competent Government authority if that authority determines such action is necessary to protect or preserve Government property, safety, and security, or to maintain good order and discipline.

Contractors shall not use any other form of identification to access any Government installation or facility while working on this contract except the issued credentials associated with the awarded contract or task order. Example: using a military retiree card to access an installation to work on a contract.

Foreign nationals (FN) will not be escorted, or sponsored, onto the installation without being properly vetted. Any request must follow 309 SWEG OI 16-1404, Security Requirements section 7. FNs must be approved for access via the Foreign Disclosure Office and Air Force Office of Special Investigations (AFOSI).

Base Access The contractor shall schedule all visits and coordinate Base entry by contacting their Government Sponsor. The contractor will be escorted at all times.

Display of Identification Air Force-issued identification badges and any contractor badges shall be worn at or above the waistline during the individual’s duty hours when not in a production or designated Foreign Object Damage (FOD) hazard area. The contractor shall procure their own lanyard and holder through their company identifying themselves as a contractor.

Obtaining/Returning Identification During performance of the contract, the contractor shall be responsible for obtaining required identification for newly-assigned personnel. Returning of credentials shall be done on the last day of the contract when the PoP has ended or the requirement is considered complete. At the completion or termination of the contract, the contractor shall have three business days to out-process and terminate all their network user accounts and to return all access cards and base identification badges to the security manager (SM).

Security Incidents Should a security incident occur, the contractor shall:

Immediately report to the site location Group SM and COR all available facts related to each instance.

Take such precautions as the SM may reasonably require for security purposes.

Take reasonable and prudent action to establish control of the scene, prevent further violation, and to preserve evidence until released by proper authority.

Cooperate fully and assist Government personnel as the Government conducts an investigation of the violation.

Participate in the investigation until it is complete.

Keys, Building Access Cards, and Building Badge Control The contractor shall establish and implement methods of making sure that all keys and building badges issued to the contractor by the Government are not lost, misplaced, or used by unauthorized persons. This shall be documented in the contractor’s management plan, if required.

The contractor shall not duplicate any keys issued by the Government.

The contractor shall immediately report the occurrence of a lost key to the appropriate building Facility Manager and building badges to the appropriate SMs.

The contractor shall prohibit the opening of locked areas by the contractor employees to permit entrance of persons other than the contractor’s employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the SMs.

Communications Security (COMSEC) All communications with DoD organizations are subject to COMSEC review.

The DoD authorizes the military departments to conduct COMSEC monitoring and recording of telephone calls originating from, or terminating at, DoD organizations.

The contractor shall adhere to COMSEC procedures any time they place a call to, or receive a call from, a DoD organization.

The contractor shall ensure wide and frequent dissemination of the above information to all employees dealing with official DoD information.

Operations Security (OPSEC) Introduction of personnel electronic devices into Government spaces, laptops, tablet personal computers (PC)s, cellular phones, cameras, recording devices, and data recording/storage devices are strictly controlled and forbidden in most cases. Contractor-issued equipment required for the performance of work shall be approved by the 309 SWEG SM, which may include both Collateral IPO and SAP APO offices. Photography and recording are not allowed in restricted areas and controlled areas except for official use and by approved photography letter only. NOTE: Unless otherwise stipulated in the contract, contact the Installation Public Affairs or SM for approval.

The contractor shall not discuss Government operations in public or over unprotected or unencrypted communications. Official Business CUI may only be transmitted as directed in the PWS as it adheres to CUI guidelines.

The Contractor shall not post to company websites, publications, newsletters, or other media any images, data, or information that reveal sensitive Government operations, personnel, equipment, and/or classified or CUI. When in doubt, company press releases related to this contract shall be coordinated through the Public Affairs Office prior to release.

The contractor shall not disclose to unauthorized third parties or post to unofficial sites (including all social networking sites) any images, data, or information that reveals sensitive Government operations, personnel, or equipment, including: tactics, techniques and procedures, production or work schedules, any visible or concealed modifications, upgrades, additions to Air Force installations, property or weapons or equipment; increases, change, or decreases in work/deployment frequency or Government personnel, project schedules, logistics or material delivery schedules; specialized equipment orders, deliveries, shipments, etc. (Unauthorized disclosure and transfer of National Security Information is punishable under 18 USC § 793.) Unauthorized disclosures and attempts to solicit this type of information by unauthorized third parties or others not affiliated with this contract shall be reported to the SM and/or installation SFS, COR, and, if applicable, the company FSO and/or the Defense Security Service.

The contractor shall practice OPSEC and implement countermeasures to protect critical information (CI) and other sensitive unclassified information. Protection of CI shall include the adherence to and execution of countermeasures which the contractor initiates or as provided by OPSEC Manager or installation OPSEC Program Manager, for CI on or related to the PWS.

The contractor shall mark and protect any information IAW CUI to include e-mail and adhere to all CUI standards and policies.

Contractors who have access to CI shall have OPSEC training IAW AFI 10-701 (July 2019), Operations Security (OPSEC) table 4.1 Air Force OPSEC Training Requirements pg 32.

Contractor security admin may be required to access unclassified, CUI, Confidential, Proprietary and/or Sensitive Information held by the United States Air Force (USAF) relating to the tasks to be performed under this contract. This information may belong to other contractors, third parties, or the USAF. Contractor security admin personnel shall provide a completed copy of the nondisclosure Agreement to the Government PM, COR, and CO prior to performing work under this contract.

CONFLICTS OF INTEREST

The Contractor shall not assign to the contract or task order performance, any person, including any employee of the U.S. Government, if employing that person would create a conflict of interest under any law, regulation or policy of the United States Government. Additionally, the Contractor shall not assign to the contract or task order performance, any person who is an employee of the Department of the Air Force, either military, reservist, or civilian, unless such person seeks and receives approval according to DoD Directive 5500.7-R and any other applicable regulation or policy of the Department of the Air Force or its subordinate commands, as applicable, including but not limited to Air Force Materiel Command.

GENERAL INFORMATION

Inherently Governmental Functions None of the functions to be performed under this requirement are inherently Governmental. Additionally, no part of this PWS, the basic contract or any task order issued under the basic contract shall be construed to require the Contractor to provide personal services to the Government. The contractor shall comply with this PWS in its entirety.

The Government will neither supervise contractor employees nor control the method by which the Contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual contractor employees. It shall be the responsibility of the contractor to manage its employees and to guard against any actions that are of the nature of personal services or give the perception of personal services. If the Contractor believes or has reason to believe any actions constitute or are perceived to constitute personal services, it shall be the contractor’s responsibility to notify the PM, COR, and PCO immediately. These services shall not be used to perform work of a policy/decision making or management nature, i.e., inherently Governmental functions. All decisions relative to programs supported by the Contractor shall be the sole responsibility of the Government.

Hours of Operation Normal Hours of Operation: The contractor shall perform the services required under this contract during the following hours: Monday through Friday 0700-1600 – EXCEPT FEDERAL HOLIDAYS and other base closures.

Federal Holidays: Unless otherwise required by the Government, the contractor shall not have access to the Government facilities on the following federal holidays: New Year’s Day, Martin Luther King’s Birthday, Washington’s Birthday, Memorial Day, Independence Day, Juneteenth, Labor Day, Columbus Day, Veterans’ Day, Thanksgiving Day, and Christmas Day. If a holiday falls on Saturday, it is observed on Friday and working hours are Monday through Wednesday for that week. If the holiday falls on a Sunday, it is observed on Monday. Any other circumstances that may prompt base closure, such as Days of National Mourning, may also restrict opportunity to perform the exchanges. In the event of a base closure, exchanges shall be performed on the next business day. There may also be up to six AFMC Goal Days and four Wingman Days per year awarded to Government civilian employees, as well as possible weather-related days and Government directed holidays. On these days, the contractor shall not generally be required to work, and the Government shall not be billed for work not performed.

NOTE: Good Friday is regarded as a holiday by the Utah Wage Determination; however, Good Friday is not a Federal Holiday so the Government facilities will be open for work that day. The contractor shall plan on employees working business as usual on that day, unless the Government supervisor or section chief determines that such services are either unnecessary or will be less than a full normal workday.

Down Days/Weather Days: The Government will notify the contractor when official notice has been given for Energy/Weather Down days. The contractor is not expected to work on any Energy/Weather Down days.

Rescheduling: Down Days/Weather days may be rescheduled if conditions/emergency operations require.

Conservation of Utilities The contractor shall instruct their employees in utilities conservation practices. The contractor shall be responsible for operating under conditions which prevent the waste of utilities.

Safety Program As part of the Safety Program, the contractor shall establish a Safety Plan that ensures the protection of Government personnel and property. The contractor shall submit the Safety Plan within 15 days after contract award (CDRL A001).

In the event of an accident/mishap, the contractor shall take reasonable and prudent action to establish control of the accident/mishap scene, prevent further damage to persons or property, and preserve evidence. An email copy of the mishap/incident notification shall be sent within three calendar days to the COR (CDRL A001).

GOVERNMENT OBSERVATIONS

During the PoP, Government personnel other than CO may, from time-to-time, observe contractor operations. However, these personnel may not interfere with contractor performance.

ENVIRONMENTAL

Weather Hazards. The contractor may encounter hazardous weather conditions including snow, heavy rain, lightning, extreme dust, and other conditions that warrant appropriate precautions.

image1.png