A3 Readiness Analysis PWS 1 March 2025.pdf

PERFORMANCE WORK STATEMENT (PWS)

FOR

A3 Readiness Analysis

16 Air Force - Cyber (AFCYBER)/A3

01 March 2025

1 DESCRIPTION OF SERVICES

1.1 INTRODUCTION

1.2 BACKGROUND

1.3 SCOPE

1.4 PERIOD OF PERFORMANCE

2 SPECIFIC TASKS

2.1 COLLABORATION

2.2 BATTLE RHYTHM PREPARATION

2.3 ANALYSIS

2.4 DOCUMENTATION

3 SERVICES SUMMARY (SS)

3.1 QUALITY ASSURANCE SURVEILLANCE PLAN (QASP)……………………….………6

4 GOVERNMENT FURNISHED SUPPLIES AND SERVICES

4.1 SERVICES

4.2 FACILITIES

4.3 UTILITIES

4.4 EQUIPMENT

4.5 MATERIALS

5 SPECIAL REQUIREMENTS/INSTRUCTIONS

5.1 CONTRACTOR IDENTIFICATION IN THE GOVERNMENT WORKPLACE

5.2 INDUSTRIAL SECURITY

5.3 PHYSICAL SECURITY

5.4 LOCATION OF WORK

5.5 HOURS OF OPERATION

5.6 CONSERVATION OF UTILITIES

5.7 RECORDS

5.8 CONTRACTOR MANPOWER DATA REPORTING

5.9 SAFETY REQUIREMENTS

5.10 CONTRACTORS ACCESSING AND HANDLING PERSONALLY IDENTIFIABLE INFORMATION

(PII). (IF APPLICABLE)

5.11 SPECIAL TRAINING, CERTIFICATIONS AND QUALIFICATIONS

5.12 KICK-OFF MEETING AND PERIODIC PROGRESS MEETINGS

5.13 CONTRACTOR TRAVEL

6 DELIVERABLES

APPENDIX A - ACRONYMS AND ABBREVIATIONS LIST

APPENDIX B - APPLICABLE PUBLICATIONS & INSTRUCTIONS

APPENDIX D - MAPS AND/OR SITE PLANS

1 DESCRIPTION OF SERVICES.

1.1 Introduction.

This is a non-personal services contract. The Government will neither supervise contractor employees nor control the method by which the contractor performs the required tasks. The contractor shall manage its employees and guard against any actions that are of the nature of personal services, or give the perception of personal services. The contractor shall notify the Contracting Officer (CO) immediately if they perceive any actions constitute personal services.

These services shall not be used to perform any Inherently Governmental Functions.

1.2 Background.

The AFCYBER Operations Directorate (A3) is the focal point for tactical and operational readiness and deployment of assigned forces. The AFCYBER/A3 readiness mission is to ensure the operational/tactical readiness of assigned forces to accomplish their mission and execute all required actions to deploy those forces in support of Air Force and U.S. Cyber Command (USCYBERCOM) validated requirements. This includes tracking and analyzing force readiness, accounting for deployable, deployed in place (Reach-back), and distributed operations. Monitoring the Joint Cyber Command and Control Readiness (JCC2-R) system configuration and reporting as well as the Air Force Defense Readiness Reporting System (DRRS) and using the data as a basis or starting point to address larger readiness issues/shortfalls. Ensuring Mission Essential Tasks (METs) are assigned appropriately and associated Designed Operational Capability (DOC) Statements are aligned with Operational Plans (OPLANs).

1.3 Scope.

The contractor shall work with the AFCYBER staff, combatant commands, subordinate wings, Cyber Operations – Integrated Planning Elements (CO-IPEs), and Joint Force HQ Cyber entities as part of the AFCYBER Operations Directorate. In conjunction with Readiness Branch personnel, the contractor shall assist to coordinate across the AFCYBER, HQ Air Force, and USCYBERCOM staffs to prepare for briefings, conferences, and reports concerning readiness reporting, trends, and mitigation strategies. The contractor shall also relay Joint and AF policy as well as monitor and assess both Air Force and USCYBERCOM readiness reporting. The contractor will identify gaps and shortfalls in both traditional AFCYBER and Cyber Mission Force (CMF) mission readiness and provide detailed recommendations for corrective actions or process improvement.

Services shall include the following:

1.3.1 Review and analyze the operational readiness of assigned forces to accomplish the assigned mission.

1.3.2 Monitor subordinate unit overall readiness and drive recommendations both internal to AFCYBER and external to USCYBERCOM, other Major Commands (MAJCOMs), and HQ AF, and provide senior leadership executable courses of action/recommendations for resolution.

1.3.3 Analyze, recommend, and execute MET alignment, and DOC Statements development/assignment per AF, DOD, and USCYBERCOM guidance.

1.3.4 Analyze, assess, and provide recommendations of AFCYBER readiness and subordinate unit capabilities to execute operations across the spectrum of conflict.

1.4 Period of Performance.

The period of performance shall be for one (1) Base Year of 12 months and four (4) 12-month option years with an option to extend for a period of six (6) months.

2 SPECIFIC TASKS.

2.1 Collaboration.

2.1.1 The contractor shall establish, develop, and maintain effective working relationships with other coordinating organizations. Participate in readiness discussions, meetings, conferences, committees, or special projects, enabling analysis, identification of problems, and conflict resolution through persuasive discussions with management and contemporary representatives (CDRL A003).

2.1.2 The contractor shall proactively work with subordinate units to identify readiness issues, inform leadership, leads/coordinates staff recommendations and/or solutions IAW current guidelines to ensure deficiencies are resolved or mitigated as quickly as possible

(CDRL A003).

2.2 Battle Rhythm Preparation.

2.2.1 The contractor shall review AFCYBER policy, prepare correspondence, and provide recommendations. Prepare and provide documents (talking papers, bullet background papers, Item of Interests, staff packages, etc.) to update AFCYBER staff on readiness reporting and capability shortfalls (CDRL A002).

2.2.2 The contractor shall provide assistance to AFCYBER subject matter experts (SMEs) and respond to requests for information (RFI) and requests for support (RFS), as required

(CDRL A002).

2.2.3 The contractor shall manage products and expertise relating to JCC2-R and DRRS

(CDRL A002).

2.2.4 The contractor shall provide assistance with authoring readiness directives and instructions in support of AFCYBER functions and mission sets and provide advice, assistance, and policy guidance to units on implementation of higher headquarters guidance (CDRL A002).

2.3 Analysis.

2.3.1 The contractor shall manage the development and analysis of data in support of AFCYBER and USCYBERCOM readiness and capabilities briefings. Identify, highlight, analyze, and advocate for critical gaps or shortfalls that decrease force readiness & operational integration of assigned forces (CDRL A001).

2.3.2 The contractor shall identify, prioritize, and provide specific actions or recommendations to mitigate readiness shortfalls/deficiencies and provide analysis to enhace readiness levels (CDRL A002).

2.4 Documentation.

2.4.1 The contractor shall schedule and conduct a Kickoff Meeting within ten (10) business days after the contract award date. The Government and contractor will discuss the Performance Work Statement (PWS), Deliverables, and Services Summary (SS) and other issues necessary to clarify the tasks for this requirement. The contractor shall submit meeting minutes to the Government (CDRL A003).

2.4.2 The contractor shall prepare and submit a Monthly Status Report (MSR) to the Government by the 10th of each month following the month being reported (CDRL A005).

2.4.3 The contractor shall develop, draft, and maintain a Cyber Readiness Smartbook to be provided to AFCYBER leadership upon request for use as reference and preparation for readiness operations and status (CDRL A002).

3 SERVICES SUMMARY (SS).

The contract service requirements are summarized in performance objectives that relate directly to mission essential services. The performance threshold briefly describes the minimally acceptable levels of service required for each requirement. The SS provides information on contract requirements and the expected level of contractor performance to be successful. These thresholds are critical to mission success. Procedures as set forth in the applicable Inspection clause in the contract will be used to remedy all deficiencies. The Government retains the right to inspect any item included in the contract.

Performance Objective

PWS

Paragraph

Performance Threshold Method of Assessment

SS # 1

The contractor shall provide CDRL Deliverables

2 (All), 5.2.3, 5.9.10.1, 5.9.10.2, 5.12, 6 (All)

All CDRL deliverables pass Government inspection on first submission 95% of time.

100% Surveillance

SS # 2

Compliance with organizational guidance, policies, and procedures.

5 (All)

The contractor complies 100% with the Government standards.

Periodic, Random Inspection (Monthly)

SS # 3

The contractor shall efficiently perform all PWS requirements, requirements, including timely and accurate documentation, report requirements, and responses for customer support and assistance. The contractor shall maintain a professional business appearance and correspondence.

2 (All), 5.2.3, 5.9.10.1, 5.9.10.2, 5.12, 6 (All)

1. No more than one (1) Operational Readiness and/or Smartbook document per quarter shall be returned because of errors.

2. 100% compliance required on final products.

3. No more than one (1) product per month shall be returned because of errors.

4. No less than 10% of local working groups will be unattended.

100% Surveillance

SS #4

The contractor shall support all identified travel requirements based on planning and/or mission readiness requirements.

5.9.10 (All), 5.13

1. No more than two errors allowed per quarter for tasked deliverable(s) from travel.

2. 100% compliance on required trip reports.

100% Surveillance

SS # 5

Compliance with DD-254 and Security Requirements.

5.2 (All), 5.3 (All)

The contractor complies 100% with the Government Security Requirements.

100% Surveillance

3.1 Quality Assurance Surveillance Plan (QASP).

3.1.1 The SS items will be used as the baseline to develop a Government QASP. The QASP will identify the audit methods/procedures the Government will use to evaluate the contractor's performance.

4 GOVERNMENT FURNISHED SUPPLIES AND SERVICES.

4.1 Services.

The Government will provide the necessary services for the contractor staff to provide the support outlined in the PWS.

4.2 Facilities.

The Government will provide the necessary workspace for the contractor staff to provide the support outlined in the PWS to include desk space, telephones, computers, and other items necessary to maintain an office environment.

4.3 Utilities.

The Government will provide or make available the necessary utilities in the facility for the contractor’s use in performance of tasks outlined in this PWS.

4.4 Equipment.

The Government will provide phones, desks, personal computers, software and video teleconferencing hardware/software.

4.5 Materials.

The Government will provide or make available Standard Operating Procedures and Policies and standard office supplies.

5 SPECIAL REQUIREMENTS/INSTRUCTIONS.

5.1 Contractor Identification in the Government Workplace.

5.1.1 IAW FAR 37.114, All contractor personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public or Congress that they are Government officials, unless, in the judgment of the agency, no harm can come from failing to identify themselves. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. The contractor shall identify themselves on any attendance sheet or any coordination documents they may review. Electronic mail signature blocks shall identify their company affiliation.

5.1.2 All contractor personnel shall be required to wear AF-approved or provided picture identification badges so as to distinguish themselves from Government employees. The contractor shall ensure all employees properly display and wear ID badges at all times during duty performance on a government facility. The contractor shall ensure that contractor personnel comply with base policy regarding badge requirements as directed.

All contractor personnel are required to wear or prominently display ID badges at all times while visiting or performing work at any Government facility or installation when performing work under this PWS. The contractor shall observe and comply with all Government and site-specific security provision in effect during the contract period of performance.

5.2 Industrial Security.

5.2.1 DD Form 254. Overarching security requirements and contractor access to classified information will be as specified in the DD Form 254, Department of Defense Security Classification attached to the contract. The contractor shall have a final U.S. Government issued TOP SECRET security clearance and be DCID 6/4 eligible with a current SSBI.

5.2.2 The contractor shall obtain a U.S. security clearance at the minimum level of Top Secret/ Sensitive Compartmented Information (TS/SCI) for all contractor personnel required to have access to classified information or require IT-II or IT-I level access. Onsite contractor personnel should have an active clearance prior to reporting for duty in support of this contract or task order. Interim clearances for newly hired personnel shall be processed as expeditiously as possible since some contractor personnel shall be required to utilize the SIPRNET and/or JWICS to process classified materials; however, this will be on a case-by-case basis. Such clearance must be obtained through the Defense Investigative Services. The contractor shall ensure that personnel meet the personnel security clearance requirements of the National Industrial Security Program (NISPOM), Chapter 2, Section 2.

5.2.3 The contractor shall provide current listing of individuals prior to the start of the contract.

The list shall include name, social security number, and level of security clearance. Upon any change, the contractor shall resubmit contract personnel roster within (five) 5 calendar days, updating any personnel status or information. The contractor Facility Security Officer (FSO) shall validate the list and provide via Defense Information System of Security (DISS) and via 16 AF Access Request Letter. Template will be provided by the Contractor Officer Representative (COR) or 16 AF Security Office to the FSO prior to start of contract (CDRL A006).

5.2.4 Work to be performed under this PWS shall be in a sensitive facility. All personnel must safeguard all information and operations to include storing and handling classified material. Work related to these tasks shall require clearances up to TOP SECRET//SI//TK//G//HCS level. The contractor shall provide and maintain personnel with a security clearance of TS cleared-SCI eligible throughout the period of performance. Some personnel shall be required to take a counter-intelligence polygraph exam in order to perform certain duties. The contractor shall follow the security requirements outlined in the contract DD Form 254, Department of Defense Security Classification Specification. DCID 6/4 deals with Personal Security Standards and Procedures Governing Eligibility for Access to TS/SCI. The Contractor must be able to comply with DoD Manual 5105.21 (October 2020), Volume 2, Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Physical Security, Visitor Control, and Technical Security as well as other applicable DoD/AF/MAJCOM directives, manuals and instructions. All contractors located on military installations shall also comply with Operations Security (OPSEC) requirements as set forth in DoD Directive 5205.02E, Operations Security Program (August 2020) and AFI 10-701 (June 2020), Operations Security. In accordance with DoD Instruction 5200.2-R, Personnel Security Program (September 2020), DoD military, civilian, consultants and contractor personnel using unclassified automated information systems, including e-mail, shall have at a minimum, a completed favorable National Agency Check, plus Written Inquiries (NACI). Individuals will require TS/SCI security clearance and required to comply with all government requirements in order to gain access to NIPR, SIPR, JWICS, and NSA (if applicable) computer accounts.

5.2.5 Visitor Group Security Agreement. The contractor shall sign a Contractor Visitor Group Security Agreement to protect classified information involved in performance under this PWS. The Agreement shall outline responsibilities in the following areas: Contractor security supervision, Standard Practice Procedures, access, accountability, storage, and transmission of classified material, marking requirements, security education, personnel security clearances, reports, security checks, security guidance, emergency protection, protection of government resources, DD Form 254, periodic security reviews, and other responsibilities, as required.

5.2.6 The following devices are not allowed in facilities where classified information is electronically stored, discussed, briefed, processed or transmitted: cell phones, camera cell phones, cordless telephones, wireless microphones, wireless keyboards, wireless mice, wireless or infrared Local Area Networks (LANs). The term “Area” above refers to a room and/or to a space the size of a 3-meter radius sphere, centering on the classified source. All other Personal Electronic Devices (PEDs) not specifically addressed above, such as Fitbit, pens with built-in drives, cameras, etc., that are used for storing, processing, and/or transmitting information shall not be operated in areas where classified information is electronically stored, discussed, briefed, processed or transmitted.

5.3 Physical Security.

5.3.1 The contractor shall safeguard all Government property provided for contractor use. At the close of each work period, Government facilities, property, and materials shall be secured. All Government furnished property/equipment (including badges, tokens, etc.)

shall be returned to the COR upon employee or contract termination. Key Control. The contractor shall establish and implement methods of ensuring that all keys and key cards issued to the contractor by the Government are not lost or misplaced and are not used by unauthorized persons.

5.3.1.1 The contractor shall immediately report the occurrences of a lost or duplicate key to the COR.

5.3.1.2 In the event keys, other than master keys, are lost or duplicated, the contractor shall, upon written direction of the CO, rekey or replace the affected lock or locks;

however, the Government, at its option, may replace the affected lock or locks or perform rekeying. When the replacement of locks or rekeying is performed by the Government, the total cost of rekeying or the replacement of the lock or locks shall be deducted from the monthly payment due the contractor. In the event a master key is lost or duplicated, all locks and keys for that system will be replaced by the Government and the total cost shall be deducted from the monthly payment due the contractor.

5.3.1.3 The contractor shall prohibit the use of keys issued by the Government by any persons other than the contractor’s employees. The contractor shall prohibit the opening of locked areas by contractor employees to permit entrance of persons other than contractor’s employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the COR.

5.3.2 Combinations and Codes. The contractor shall establish and implement methods of ensuring that all combinations and codes are not revealed to unauthorized persons. The contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations.

5.3.2.1 Combinations to security containers, secure rooms, or vaults are classified information and shall properly safeguarded. Only the contractor employees with proper security clearance and need-to-know will be given combinations to security containers, secure rooms, or vaults.

5.3.2.2 Access lock combinations are “For Official Use Only” and shall be protected from unauthorized personnel.

5.3.2.3 Combinations to security containers, secure rooms, or vaults are classified information and shall properly safeguarded. Only the contractor employees with proper security clearance and need-to-know will be given combinations to security containers, secure rooms, or vaults.

5.3.2.4 Security alarm access codes are “For Official Use Only” and shall be protected from unauthorized personnel. Security alarm access codes will be given to contractor employees who require entry into areas with security alarms. The contractor shall properly safeguard alarm access codes to prevent unauthorized disclosure.

5.4 Location of Work.

5.4.1 The work to be performed under this contract shall be performed at 16 AF, 102 Hall Blvd., Bldg. 2000/2007, Joint Base San Antonio, TX 78241. Work may also be performed at other government/contractor facilities as directed.

5.5 Hours of Operation.

5.5.1 Normal workdays are Monday through Friday except US Federal Holidays. Workers typically work eight (8) hours per day, 40 hours per week. Flextime workers start not earlier than 0600 and not later than 0900. Core hours of work are from 0900 to 1500 daily, Central Standard Time (CST). All employees are expected to be available during core duty hours. The contractor shall be notified in advance of any event requiring additional support beyond the normal eight-hour day. Special circumstances may require the extension of normal duty hours. Prior coordination with the Government is required if contractor requires access to the secure facility during non-standard work hours.

5.5.2 Recognized Holidays. The contractor is not required to provide service on the following days:

New Year’s Day Labor Day Dr. Martin Luther King’s Birthday Columbus Day

Presidents’ Day Veterans Day Memorial Day Thanksgiving Day

Juneteenth National Independence Day Christmas Day Independence Day

5.5.2.1 If the holiday falls on Saturday, it is observed on Friday. If the holiday falls on a Sunday, it is observed on Monday.

5.5.2.2 The contractor shall not report for duty and will not be reimbursed by the Government when the Government facility is closed due to a Federal holiday, local or national emergencies, administrative closings, or similar Government directed facility closings.

5.6 Conservation of Utilities.

5.6.1 The contractor shall operate under conditions which prevent the waste of utilities which include the following:

5.6.2 Lights shall be used only in areas where and when work is actually being performed.

5.6.3 Mechanical equipment controls for heating, ventilation, and air conditioning systems shall not be adjusted by the contractor unless authorized.

5.6.4 Water faucets or valves shall be turned off after the required use has been accomplished.

5.6.5 Government telephones shall be used only for official Government business.

5.7 Records.

5.7.1 The contractor shall create, maintain and dispose of only those Government required records that are specifically cited in this PWS or required by the provisions of a mandatory directive listed in Applicable Publications and Instructions. If requested by the Government, the contractor shall provide the original record, or a reproducible copy of any such record within five (5) workdays of receipt of the request.

5.8 Contractor Manpower Data Reporting.

5.8.1 Effective FY2020, the Department of Defense will no longer require contractors to report into the Enterprise-wide Contractor Reporting Application (eCMRA). IAW DFARS clause 252.204-7023, Reporting Requirements for Contracted Services, contractors shall begin reporting manpower data relating to the performance of services contracts into the System for Award Management (www.sam.gov).

5.8.2 The following contracts are subject to Service Contract Reporting (SCR): Any purchase of services by a military department or Defense Agency, in excess of $3 Million, for services in the following Service Acquisition Portfolios:

Logistics management services;

Equipment related services;

Knowledge-based services;

Electronics & comms services.

5.8.3 SAM receives contract information from FPDS-NG. It will only enable reporting for entities with contracts that meet the above stated SCR thresholds.

5.8.4 Contractor shall be an entity registered in SAM, an individual SAM user account with the Entity Administrator, Entity Registration Representative, or Reporter role for that entity, and one or more contracts awarded to that entity which meet the SCR reporting thresholds.

5.8.5 Steps for Submitting a Service Contract Report (SCR).

5.8.5.1 Go to www.sam.gov and log in.

5.8.5.2 Select Entity Registrations and then select Service Contract Reporting.

5.8.5.3 SAM displays your entities which have service contracts and meet the reporting criteria. Select View by entity to see the service contracts for each entity.

5.8.5.4 Next, select Add for the service contract against which you want to create a Service Contract Report. Each service contract which meets the FAR Subpart

4.1703 reporting thresholds is displayed.

5.8.5.5 Next, the Complete Service Contract Report page will be displayed. SAM displays the contract details and allows you to report. Contractor is required to enter the following information:

5.8.5.6 Total Amount Invoiced: Total dollar amount invoiced for services performed during the previous Government fiscal year under the contract (this amount should include the prime and any subcontract amount).

5.8.5.7 Prime Contractor Hours Expended: Prime contractor direct labor hours expended on the services performed during the previous Government fiscal year. The amount you enter is automatically divided by 1,872 hours to calculate a Full Time Employee (FTE) equivalent, displayed under the Prime Contractor Hours Expended as Prime Contractor FTEs.

5.8.5.8 Report any required Tier 1 subcontractor information by selecting the Add Tier 1 Subcontract Information button.

5.8.5.9 When you are ready to submit the report, select Submit. This saves your report and returns you to the Select Service Contract page where you can create other SCRs or edit an existing SCR.

5.8.6 Annual Reporting. Reporting inputs will be for the direct labor executed during the period of performance (PoP) for each Government fiscal year (FY), which runs 1 October through 30 September. While inputs may be reported any time during the FY, all data shall be reported no later than 31 October of each calendar year. The contractor shall provide reporting inputs for the final PoP of this contract no later than 30 calendar days after contract expiration. The contractor may direct technical questions about the SAM Service Contract Reporting tool to the Federal Service Desk FSD at:

https://www.fsd.gov/fsd-gov/home.doEnvironmental Controls.

5.8.7 Compliance with Laws and Regulations. The contractor shall be knowledgeable of and comply with all applicable Interstate, Federal, State, and Local laws, regulations, and requirements regarding environmental protection. In the event environmental laws or regulations change during the term of this contract, the contractor shall comply as such laws come into effect. If there is an increase or decrease in cost as a result of the change, the contractor shall inform the CO pursuant to notice requirements and negotiate a modification to the contract.

5.9 Safety Requirements.

In performing work under this contract, the contractor shall:

5.9.1 Conform to the safety requirements contained in the contract for all activities related to the accomplishment of the work.

5.9.2 Take such additional immediate precautions as the CO may reasonably require for safety and mishap prevention purposes.

5.9.3 Record and report promptly (within one hour) to the CO or COR, all available facts relating to each instance of damage to Government property or injury to either contractor or Government personnel.

5.9.4 In the event of an accident/mishap, take reasonable and prudent action to establish control of the accident/mishap scene, prevent further damage to persons or property, and preserve evidence until released by the accident/mishap investigative authority through the CO.

5.9.5 If the Government elects to conduct an investigation of the accident/mishap, the contractor shall cooperate fully and support Government personnel conducting the investigation.

5.9.6 Environmental Controls.

5.9.7 Compliance with Laws and Regulations. The contractor shall be knowledgeable of and comply with all applicable Interstate, Federal, State, and Local laws, regulations, and requirements regarding environmental protection. In the event environmental laws or regulations change during the term of this contract, the contractor shall comply as such laws come into effect. If there is an increase or decrease in cost as a result of the change, the contractor shall inform the CO pursuant to notice requirements and negotiate a modification to the contract.

5.9.8 Notification of Environmental Spills. If the contractor spills or releases any substance contained in 40 CFR 302 into the environment, the contractor shall immediately report the incident to the COR. The liability for the spill or release of such substance’s rests solely with the contractor.

5.9.9 Annual Reporting. Reporting inputs will be for the direct labor executed during the period of performance (PoP) for each Government fiscal year (FY), which runs 1 October through 30 September. While inputs may be reported any time during the FY, all data shall be reported no later than 31 October of each calendar year. The contractor shall provide reporting inputs for the final PoP of this contract no later than 30 calendar days after contract expiration. The contractor may direct technical questions about the SAM Service Contract Reporting tool to the Federal Service Desk (FSD) at https://www.fsd.gov/fsd-gov/home.do

5.9.10 Travel Requirement. Travel as required in order to successfully execute the PWS, in coordination with the COR. The contractor will be required to periodically travel to various locations throughout CONUS. The contractor will be reimbursed for any travel and per diem incurred IAW the DoD’s Joint Travel Regulations. Itemized travel documentation will be provided to the COR for travel approval.

5.9.10.1 Travel Reporting Instructions. The contractor shall submit appropriate travel documentation as needed by the COR prior to authorization to travel. Upon returning, the contractor will provide a formal written response to the COR within 3 duty days upon returning to work (CDRL A004).

5.9.10.2 Trip Report Requirements. Trip reports will be documented in memo format and will include the following: event name and purpose, dates and location of travel;

POC information, summary of meetings and key discussions, tasks and highlights for leadership awareness (CDRL A004).

5.9.11 Contracting Personnel Training.

5.9.11.1 The contractor shall accomplish training requirements as required by the Government to work in a secure Government facility, certain training is required to provide information for personnel well-being. This includes several and various security, safety, and procedural online courses. The contractor shall complete any agency-mandated in-house training requirements for all personnel. Government training requirements include security, safety, emergency management, and IA.

Training shall be completed as required by 16 AF training procedures. No contractor personnel shall be more than thirty (30) days overdue on any required training item.

5.9.11.2 Contractors shall complete the customer-provided Intelligence Oversight training as required by customer requirements and shall report any Questionable Intelligence Activity (QIA), Significant/Highly Sensitive Matter (S/HSM), and/or Federal Crimes IAW procedures established in DoD Directive 5148.13, “Intelligence Oversight”, and AFI 14-104, “Intelligence Oversight”. For contracts involving cryptographic matters in addition to DoDD and AFI reference, USSID 18, “Legal Compliance and US. Persons Minimization Procedures”.

5.10 Contractors Accessing and Handling Personally Identifiable Information (PII). (If Applicable)

5.10.1 It is imperative that contractors, required to access or handle PII on behalf of the Air Force, follow DAFI 33-332, Air Force Privacy and Civil Liberties Program. Contracting Officers will also require non-disclosure agreements for contractors who will have access to sensitive PII.

5.10.2 Contractor personnel requiring access to a DoD Information System shall receive initial IA awareness orientation as a condition of access and thereafter shall complete annual IA refresher awareness, IAW by DoD Directive 8570.01, "Information Assurance Training, Certification, and Workforce Management."

5.11 Special Training, Certifications and Qualifications.

5.11.1 The contractor shall have minimum 2 years experience with the JCC2-R, DRRS, and Deliberate and Crisis Action Planning and Execution Segments (DCAPES) systems.

5.12 Kick-off Meeting and Periodic Progress Meetings.

The contractor shall attend an initial kick-off meeting 14 days after contract award. The CO, COR, and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the CO will apprise the contractor of how the Government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. The contractor shall provide minutes of these meetings to the Government.

(CDRL A003)

5.13 Contractor Travel.

The contractor shall be required to travel to other Government facilities during the performance of this contract in support of specific tasks to include attend meetings, conferences, and to provide training. All travel requirements (including destination, purpose, plans, agenda, itinerary, number and names of personnel, and dates) shall be pre-approved by the COR. The contractor shall submit a trip report upon completion of travel. The following table identifies all known travel requirements. Any travel requirements not identified will need to be negotiated and the contract/order will need to be modified (CRDL A004).

The contractor shall be required to travel to other Government facilities during the performance of this contract in support of specific tasks to include attend meetings, conferences, and to provide training. All travel requirements (including destination, purpose, plans, agenda, itinerary, number and names of personnel, and dates) shall be pre-approved by the COR. The contractor shall submit a trip report upon completion of travel. Costs for travel shall be billed on a strictly cost reimbursable basis IAW, the regulatory implementation of Public Law 99-234, FAR subpart 31.205-46 entitled Travel Costs and the limitation of funds specified in this contract. The Government will establish a CLIN for a set NOT-TO-EXCEED amount (CRDL A004).

6 DELIVERABLES.

Reports and other data required in this PWS shall be submitted IAW the Contract Data Requirements List (CDRL) in Exhibit A of the contract.

CDRL

Data Item Number

Data Item Description

PWS

Para.

Delivery Schedule

A001 DI-MGMT-

81605

Briefing Material 2.3.1 As required upon task assignment

Travel Purpose Destination Number of Contractor Personnel

Travel Dates (Estimated)

Duration of Travel

(Days) Conference Ft.Meade 1 Dec 5 Site Visit Washington D.C. 1 Feb 3 Site Visit Ft Eisenhaur 1 Aug 4 Site Visit Hurlburt Fld 1 Aug 4

CDRL

Data Item Number

Data Item Description

PWS

Para.

Delivery Schedule

A002 DI-MISC

80508

Technical Report – Studies/Services

2.2 (all), 2.3.2, 2.4.3

As required upon task assignment.

A003 DI-ADMN-

81250

Meeting Minutes 2.1 (all), 2.4.1, 5.12

As required upon meeting conclusion.

A004 DI-MISC-

81943

Trip Report 5.9.10.1 5.9.10.2 5.13

Shall be provided NLT three

(3) calendar days after the completion of travel.

A005 DI-MGMT-

80368A

Status Report 2.4.2 Shall be provided within five

(5) work days of the preceding month.

A006 DI-MGMT-

81834

Contractor Personnel Roster

5.2.3 Shall utilize Government

format and submit within ten

(10) calendar days prior to contract start and within 5 calendar days as updated.

APPENDIX A - ACRONYMS AND ABBREVIATIONS LIST

Acronym/Abbreviation Definition

AF Air Force AFCYBER Air Force Cyber AFI Air Force Instruction CAC Common Access Card CDRL Contract Data Requirements List CFR Code Federal Regulation CMF Cyber Mission Force CMRA Contractor Manpower Reporting Application CO Contracting Officer CO-IPE Cyberspace Operations-Integrated Planning Element COMSEC Communications Security COR Contracting Officer’s Representative CONUS Continental United States DCAPES Deliberate and Crisis Action Planning and Execution Segments DISS Defense Information System of Security DOC Designed Operational Capability DOD Department of Defense DRRS Defense Readiness Reporting System DSN Defense Switched Network FAR Federal Acquisition Regulation FRAGORD Fragmentary Order FTE Full Time Equivalent FSO Facility Security Office FY Fiscal Year IA Interagency IAW In accordance with ICW In coordination with IT Information Technology HPCON Health Protection Condition JBSA Joint Base San Antonio JCC2-R Joint Cyber Command and Control Readiness JFHQ-C Joint Forces Headquarters Cyber JWICS Joint Worldwide Intelligence Communications System LAN Local Area Network MAJCOM Major Command MET Mission Essential Tasks NDA Non-Disclosure Agreement NIPR Non-classified Internet Protocol Router NISPOM National Industrial Security Program Operating Manual NSA National Security Agency OCONUS Outside the Continental United States OPORD Operational Order

OPS Operations OPSEC Operations Security OSHA Occupational Safety and Health Act QAP Quality Assurance Plan QASP Quality Assurance Surveillance Plan PBSA Performance Based Service Acquisition POC Point of Contact PWS Performance Work Statement QA Quality Assurance QASP Quality Assurance Surveillance Plan RFI Request for Information RFS Request for Support S Secret SCIF Sensitive Compartmented Information Facility SCR Service Contract Reporting SIPR Secret Internet Protocol Router SOP Standard Operating Procedures SME Subject Matter Expert SS Services Summary STE Switched Telephone Equipment TS Top Secret TS/SCI Top Secret/Sensitive Compartmented Information USAF United States Air Force USCYBERCOM United States Cyber Command VOIP Voice Over Internet Protocol VTC Video Teleconference

APPENDIX B - APPLICABLE PUBLICATIONS & INSTRUCTIONS

Compliance with all publications, regulations and operating instructions provided by the Government is required when: They pertain to the procedures for materials expediting herein and where the contractor is authorized by the PWS to accomplish the work specified in the publication, regulation or operating instructions. The publications prescribe USAF policies, use of materials, procedures and processes applicable to the work requirements. The contractor is required to acquire and work on the latest version of the publication.

Publication/Instruction - Title Applicable

Paragraph/Chapter

PWS

Paragraph

(NOTE: WHEN AN ENTIRE PUBLICATION IS REQUIRED/MANDATORY, PUT “ENTIRE

DOCUMENT APPLICABLE” INSTEAD OF CITING PARAGRAPH OR CHAPTER)