Amendment 01 IT SUPPORT PWS 30 March 2019.pdf

Amendment 01 PWS

1. The Contractor shall provide all personnel, management, supervision, equipment, tools, supplies, materials, transportation, and any other items and services necessary to perform the functions of the Performance Work Statement

(PWS). The primary place of performance is Fort Benning Georgia 31905.

Contractor may be required to support geographically separate locations to include Dahlonega, GA (Camp Merrill), and Eglin, Air Force Base (Camp

Rudder).

2. Deliveries or Performance. The anticipated Period of Performance is as follows:

Base Period: 12 months

Option Year 1: 12 months

Option Year 2: 12 months

Performance Work Statement

United States Army Garrison – Fort Benning

Above Baseline Systems Maintenance Support

C.1 BACKGROUND. The Directorate of Information Management (DOIM) separated from

USAG Fort Benning in 2009, forming the Network Enterprise Command (NEC). Over the past eight years, our reliance on information technology (IT) and the complexity of the information technology systems has increased drastically. In response to new network vulnerabilities, the Defense Information Systems Agency (DISA) continues to increase accreditation requirements. In addition, Installation Management Command (IMCOM) has increased approval requirements for information technology purchases in an effort to ensure all hardware and software systems are compatible and meet the Army’s IT standards. To meet the new requirements of a garrison system maintenance support program, Fort Benning has identified the need for information technology support. Support to the garrison is essential to support force projection and training missions at Fort Benning, including the newly formed Security Force Assistance Brigade (SFAB) and Military Advisor Training

Academy (MATA).

C.2 Objectives: The objectives shall include, but not limited to the overall contractor system maintenance support to the Garrison and Garrison Directorates and installation tenants units. The contractor shall perform to the standards in the contract as well as comply with the latest installation, local, state, and federal regulations.

C.3 SCOPE. The Contractor shall provide qualified personnel to perform the requirements of information technology system maintenance support to Fort Benning Garrison

Commander’s Office and all garrison Directorates, including additional support to the installation tenants units at Fort Benning, GA. The Contractor is responsible for notifying the Contracting Officer (KO) or Contracting Officer’s Representative (COR) of any real or potential deficiencies in personnel availability. This does not, however, relieve the Contractor from meeting the requirements in the performance work statement.

C.3.1 Training. The Contractor shall ensure contractor personnel are properly trained that they maintain technical proficiency for the Operations and Maintenance (O&M) of the systems and equipment associated with this PWS. Contractor personnel shall have current training and required certifications before beginning work on this contract. The

Contractor shall train its own personnel on existing equipment at no cost to the

Government. The Government will not provide or fund training to obtain certification for any Contractor employees unless the training is a result of a new requirement.

C.3.1.1 If during the term of this contract, the Government installs new equipment that requires training to meet the certification requirements of this contract, the Government will provide one- time training during initial fielding and in support of new site activations for those employees currently working on site. The Contracting Officer’s

Representative (COR) or Contracting Officer (KO) will approve all training in advance.

If the Contractor replaces an employee who has received Government-provided training as described above for any reason, the Contractor shall provide any needed training at no cost to the Government.

C.3.1.2 The contractor will be expected to maintain current certifications required for IT personnel to perform the functions described in the contract. Certification requirements, based on task identified in section C.6 include CompTIA A+, CompTIA Security +, and

CompTIA Network+.

C.3.1.3 Training Records. The Contractor shall ensure required training is documented within records that are available upon request by the KO or COR.

C.3.2 Hours of Operation. The Contractor shall provide services during the hours ranging between 0700 – 1700 (depending on the area of assignment), Monday –

Friday, except on federal holidays as designated by the Office of Personnel Management at http://www.opm.gov/policy- data-oversight/snow-dismissal-procedures/federal-holidays/#url=Overview or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The

Contractor must maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons.

When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential.

C.3.2.1 Overtime. Services to be performed under this contract are generally performed during normal duty hours. Periodically, requirements including emergencies, special projects, supporting deployments, and seasonal requirements, may require work be accomplished at times other than normal duty hours. After hour maintenance of life safety systems may be required on an as needed basis. These systems are identified in the PWS.

C.3.3 Information Technology (IT) Software and Equipment. The Contractor shall request project-related IT software, equipment and tools in support of the task order requirements through the COR. COR will assist with locating the Army approved list http://www.opm.gov/policy-with all Information Assurance approvals, Certificate of Networthiness (CoN), and Joint

Interoperability Test Command (JITC) certifications. This software/equipment shall require information assurance vulnerability alert (IAVA) scanning and patching and compliance with applicable DISA Security Technical Implementation Guides (STIG) to the degree applicable prior to allowing connectivity to the Government production network, by the contractor.

C.3.3.1 The Contractor shall ensure that a Government CoN is available for all Contractor-purchased software and IT equipment that will be installed or integrated into existing government IT systems and networks. The Contractor shall first check the Army Knowledge Online (AKO) web site at https://www.us.army.mil/suite/grouppage/16220 for a list of systems and commercial-off-the shelf

(COTS), Government-off-the shelf (GOTS), or other equipment with current valid CoNs. The

Contractor must be registered in AKO by the COR for access. If a CoN is not available, The Contractor shall fill out and submit the applicable Networthiness Checklist to the COR.

C.3.3.2 Purchases. The Contractor shall submit a list of items required and a cost analysis to the COR or KO for approval prior to any purchase. The Contractor shall only purchase materials directly related to the maintenance support and necessary to accomplish and assure acceptable levels of O&M for supported systems. The Contractor shall purchase materiel necessary to complete assigned special projects and for maintenance of bench stock levels, expendable supply levels or requirements for routine O&M maintenance outlined in the task order. All non- expendable items purchased shall become the property of the Government and added to the list of Government-furnished property (GFP). Approved purchases will be reimbursed on the Supply CLIN.

C.3.4 CONTRACTOR ACCOUNTABILITY

C.3.4.1 GENERAL

The government will provide the facilities, utilities, equipment, materials, and supplies described herein as government-furnished property. Government-furnished property

(GFP) consists of government-furnished facilities (GFF), government-furnished equipment (GFE) to include automated data processing equipment (ADPE) and government-furnished parts, materials, and supplies, placed in the contractor’s custody.

The government will also provide certain services to the contractor. The contractor shall not use GFP or services for any other purpose than execution of work under this contract.

The contractor shall loan GFP to government operations and/or other government contractors when directed by the KO. The contractor shall assume responsibility for GFP provided for his/her use and shall take precautions to prevent fire and safety hazards, odors, chemical spills, and vermin. At the completion of the contract, GFP shall be returned to the government in the same condition as received, except for reasonable wear and tear.

C.3.4.1 Report of Government Property

The contractor shall prepare and submit to the KO an annual report of government property on

Department of Defense (DD) Form 1662, and according to the requirements of the contract.

C.3.4.2 Removal of Property http://www.us.army.mil/suite/grouppage/16220 http://www.us.army.mil/suite/grouppage/16220

The contractor shall not remove GFP from the installation or other supported areas without written approval from the Government Property Administration Office (Property Book

Holder). Department of the Army Form 2062, Hand Receipt/Annex Number, shall be used to obtain Property Administration Officer approval for the removal of GFP from the installation.

C.3.5 Security and Background Check Requirements. Contractor performance includes, but is not limited to, installation, operation, and maintenance of unclassified and classified systems, networks, devices and equipment; work in classified, sensitive, and/or

Restricted Areas where exposure to classified information cannot be precluded and/or where security clearances are required. The Contractor shall, at a minimum, have a final

Secret facility clearance level (FCL) at time of contract award.

C.3.5.1All Contractor personnel performing on this task order must be U.S. citizens with required security clearance or suitability investigations. Upon task order start date, all contractor personnel shall possess and maintain the required security clearance over the life of the TO in accordance with DD Form 254, Contract Security Classification

Specification. After TO award, newly hired personnel who require a security clearance for this work effort shall have submitted for a security clearance within two (2) months of being hired and shall maintain the required security clearance throughout employment on this TO. Contractor personnel who require a Secret security clearance and who will be performing IT-I functions will require a ANACI/NACLC or equivalent completed with suitability determination for IT level II access. The Contractor shall contact the supporting Government Security Office/G-2/S-2 for submission of the ANACI/NACLC or equivalent (SF 86) via the Army Investigative Enterprise Solution (AIES). The SF 86 will indicate SECRET access/IT level II. The Contractor shall provide the contract/TO number as authority to request the investigation. Contractor interim privileged level access to Army systems prior to completion and favorable adjudication of the required investigation will be in accordance with AR 25-2. If contractor personnel have a current

ANACI/NACLC or equivalent on record in JPAS, the AR 25-2 investigative requirement for IT Level II is satisfied. Contractor personnel who do not require a security clearance but who require an investigation for suitability/trustworthiness purposes shall have

SUBMITTED the required investigation documentation within two (2) months after TO award. Contractor personnel shall comply with all applicable security and safety regulations, guidance, and procedures, including local, referenced in the PWS and in effect at the work sites. The Contractor shall coordinate with the supporting Government security office for submission of required suitability investigations.

C.3.5.2 Access and General Protection/Security Policy and Procedures: Contractor and all associated sub-contractors employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by Installation

Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

C.3.5.3 The Contractor shall protect Government information, systems/networks, devices, and other Government-furnished equipment and property, based on the level of access provided to contractor personnel supporting this contract. The Contractor shall comply with and enforce all security and information assurance requirements and measures, as specified in applicable directives and as stated in the contract.

C.5.4 Contractor/Sub-Contractor employees providing services under contracts are subject to the following process:

C.5.4.1 Each employee (direct employee and sub-contractor employee) working under this contract who has contact with children under 18 years of age, shall be screened with the appropriate background checks as governed by the Army Directive 2014-23 “Conduct of

Screening and Background Checks for Individuals Who Have Regular Contact with

Children in Army Programs”, dated 10 September 2014. A copy of the Army Directive can be found at http://www.apd.army.mil/pdffiles/ad2014_23.pdf.

C.5.4.2 Background checks will be initiated and paid for by the Government. The cost for the pre-employment screening is the responsibility of the Contractor. The Commander

Designated Entity (CDE) at the Installation supports IMCOM by coordinating, submitting, tracking child related background checks, and reviewing and compiling the results to identify whether they contain derogatory information to be passed on for a suitability determination. The CDE will advise and assist CONTRACTOR and sub-CONTRACTOR employees completing all required documents required for the background-check process. CDE contact information will be provided upon contract award.

C.5.4.3 Additional information on the background check process can be found at:

http://www.opm.gov/investigations/background-investigations.

C.3.6 Information Assurance.

C.3.6.1 Information Assurance (IA) Training. All contractor personnel with access to

Government information systems and networks shall successfully complete all required initial and annual IA awareness training as specified in AR 25-2 and as directed by the Government requiring activity. Training is available at https://ia.signal.army.mil.

C.3.6.2 Contractor employees and subcontractor employees performing work under this contract that have access to Government information systems and networks shall create a user account and profile in the Army Training and Certification Tracking System website (ATCTS) at https://atc.us.army.mil, in the unit container managed by the COR. Certificates of successful completion of IA training, Acceptable Use Policies (AUP), applicable baseline and computing environment certifications, and continuing professional education credits, as required by DoD

8570.01-M, shall be uploaded to the ATCTS and provided to the COR for continuous compliance monitoring and reporting.

C.3.6.3 Global Address Listing (GAL): All contract employees who require access to

Government http://www.opm.gov/investigations/background-investigations

Information Systems shall update their profile and Global Address Listing (GAL) information:

https://www.dmdc.osd.mil/milconnect within 10 working days of being granted IT access.

C.3.6.4 The Contractor shall ensure that all contractor employees and subcontractor employees requiring IA awareness training complete the training at start of work performance on this contract and annually thereafter for the duration of this contract.

C.3.7 Information Assurance Workforce Certification. Defense Federal Acquisition

Regulation Supplement (DFARS) clause 252.239-7001 (Information Assurance Contractor

Training and Certification) applies to this task order. This task order is subject to the mandates of DoD 8570.01-M, which establishes baseline technical and management IA skills for personnel performing IA functions within DoD. Functions spanning multiple levels require certification of the highest level functions. Contractor personnel performing functions in multiple categories or specialties shall hold certifications appropriate to the functions performed in each category or specialty.

C.3.7.1 The Contractor shall ensure its IA workforce members have the baseline certifications corresponding to their IA functions, as defined in Chapters 3, 4, 5, 10, and

11, and Appendix 3 of DoD 8570.01-M at work performance start date. Contractors will obtain all required Computing Environment (CE) certificates within 6 months of being engaged. The IAT Level I baseline certification is the minimum requirement for unsupervised privileged access. Contractor certification holders shall ensure that their certificates remain active and are renewed prior to expiration.

C.3.7.2 Contractor IA certification holders shall release their certification information to the Department of Defense through the Defense Workforce

Certification Application, https://www.dmdc.osd.mil/appj/dwc/index.jsp.

C.3.7.3 Table 1 reflects the Personnel Security (IT Level) and IA Workforce Specialty requirements, aligning the IA functional responsibilities and access levels to the contract tasks, in accordance with DoD 8570.01-M.

IT Level

IAW AR 25-2,

which identifies requirements for

IT level designations and security investigation requirement for each level )

IA Category & Level

IAW DoD 8570.01-M, which identifies required DOD acceptable Baseline

Certifications); BBP (Better

Business Practice) on Information

Assurance Training and

Certification, 05-PR-M-0002, identifies Army minimum required training for the same IA category and level)

Clearance

Required

BI

Require d

Computing

Environment

Certification s

IT-I IAT-III SECRET SSBI Yes

IT-I IAT-II SECRET SSBI Yes

Table 1. Listing of positions with Information Assurance and Security Requirements http://www.dmdc.osd.mil/appj/dwc/index.jsp http://www.dmdc.osd.mil/appj/dwc/index.jsp

C.3.7.4 Non-Government-owned computing systems or devices. The Contractor shall comply with AR 25-1 and AR 25-2. The Contractor shall not install or connect non-

Government-owned computing systems or devices to Government networks without the

COR’s coordinating and obtaining proper authorization from the appropriate Information

Assurance Program Manager (IAPM), ensuring that all software has a Government Certificate of Networthiness. The non- Government-owned computing systems or devices include, but are not limited to, personal or contractor-owned thumb drives (e.g., memory sticks, flash drives, Universal Serial Bus (USB) drives, jump drives, pen drives), removable or external hard drives, Personal Digital Assistants (PDA), PC Cards/Express Cards, MP3 players, cell phones, smartphones, Blackberries, digital media, floppy disks, compact disc (CD)/digital video disk (DVD) burners, optical recordings, photo flash cards, mobile device (laptop or tablet), or any devices that can store data.

C.3.7.5 Protection of Sensitive Unclassified Data. The Contractor shall ensure any sensitive information, including, but not limited to, Personally Identifiable Information (PII) and For Official Use Only (FOUO), proprietary, and Law Enforcement Sensitive information residingOn Mobile Computing Devices (MCD) or other external media, is protected in accordance with current Data at Rest (DAR) guidelines and requirements. The

Contractor shall use an authorized, approved, and prescribed DAR solution. The MCDs include, but are not limited to, laptop, netbook, notebook, or tablet computers, and Blackberry or equivalent devices. External media include optical disk media such as CDs, DVDs, USB drives (also referred to as flash or thumb drives) (when authorization to use them is restored), floppy disks, and other portable digital storage devices. Guidance for protecting

DAR information appears in DoD Policy Memorandum, 3 Jul 07, subject:

Encryption of Sensitive Unclassified Data at Rest on Mobile Computing Devices and

Removable Media, and DoD Component implementing instructions.

C.3.8 Anti-Terrorism/Force Protection Security Requirements.

C.3.8.1 Antiterrorism Level I Training. The Contractor shall ensure that all contractor employees, including subcontractor employees, requiring access to Army installations, facilities, or controlled access areas complete Antiterrorism (AT) Level I awareness training within 30 calendar days after start of employee performance on this task order.

Within 5 calendar days of training, The Contractor shall certify to the COR or KO that all employees performing work under this task order have completed the AT Level I awareness training. AT Level I awareness training is available at https://jkodirect.jten.mil, course #JS-US007-14 to receive credit for the training.

C.3.8.2 iWATCH. The Contractor shall ensure that all employees and subcontractor employees performing work under this task order are trained on the local iWATCH program within 30 calendar days of start of employee performance on this task order.

The requiring activity authority to operate (ATO) will provide the locally developed iWATCH training. The Contractor shall maintain all iWATCH training records and shall provide copies to the COR upon request.

C.3.8.3 During declared emergencies and/or elevated Force Protection Conditions

(FPCONs) Charlie or Delta, contractor performance under this task order shall be determined by the COR or KO. All contractor employees providing services under this task order are required to report for duty as scheduled and remain on duty during declared emergencies and/or elevated FPCON levels unless otherwise directed by the KO or COR.

C.3.9 Operations Security (OPSEC). Operation Security (OPSEC) training: In accordance with AR 530-1 all personnel, to include contractor employees and associated sub-contractor employees must complete Level I Operations Security (OPSEC) training which is composed of both initial and continual awareness training (annually). All personnel within the first 30 days of arrival in the organization must receive initial training to include a briefing on the organizations critical information read/sign the

OPSEC Individual User Compliance Agreement form. The end state of initial and continual awareness training is that each individual should have the requisite knowledge to safeguard critical information. The Contractor is not required to prepare an OPSEC

Plan. The contractor shall adhere to the Government's Operations Security (OPSEC)

Standard Operating Procedure (SOP)/Plan during the entire period of performance. The

Contractor shall comply with DoD Directive 5205.02E, Army Regulation 530-1, and the requiring activity OPSEC program. The Contractor shall maintain all OPSEC training records and shall provide copies to the COR upon request.

C.3.10 Visit Authorization Letter: The Contractor must provide a valid (IAW DoD

5220.22-M) Visit Authorization Letter (VAL) for every employee on the contract, prior to their visit. This VAL must be originated by the Contractor's Security Office (also called Facility Security Officer or FSO), and shall be sent to the Contracting Officer

Representative or Security Representative. The VAL must include the purpose and date(s) of visit, security clearance information, social security number, the contract number. This request is valid for up to one year. The request must be reviewed and updated as needed, but at least annually.

C.3.11 Statement of Non-Disclosure: All Contractor personnel will comply with the non- disclosure requirements in the clause at FAR Part 52.227-14 (or DFAR equivalent).

All Contract Personnel must sign a statement of non-disclosure.

C.3.12 Handling or Access to Classified Information: Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with— (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); any revisions to DOD 5220.22-M, notice of which has been furnished to the contractor.

C.3.13 Threat Awareness Reporting Program: For all contractors with security clearances. Per AR 381-12 Threat Awareness and Reporting Program (TARP), contractor employees must receive annual TARP training by an authorized agent or other trainer as specified in 2-4b.

C.3.14 Physical Security: The Contractor shall be responsible for safeguarding all

Government equipment, information and property provided for Contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured.

C.3.15 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The

Contractor shall develop procedures covering key control that shall be included in the Quality

Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

C.3.15.1 In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks;

however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re- keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

C.3.15.2 The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

C.3.15.3 Lock Combinations: The Contract or shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The

Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s Quality Control Plan.

C.3.16 Accounting for Contractor Support. The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where The Contractor shall report ALL contractor manpower (including subcontractor manpower) required for performance of this task order The contractor is required to completely fill in all the information in the format using the following web address: https://cmra.army.mil. The required information includes: (1) Contracting

Office, Contracting Officer, Contracting Officer's (Technical) Representative; (2)

Contract number, including task or delivery order number; (3) Beginning and ending dates covered by reporting period; (4) Contractor name, address, phone number, e-mail address, identity of contractor employee entering data; (5) Estimated direct labor hours

(including subcontractors; (6) Estimated direct labor dollars paid this reporting period

(including subcontractors); (7) Total payments (including subcontractors); (8)

Predominant Federal Service Code (FSC) reflecting services provided by contractor (and separate predominant FSC for each subcontractor if different); (9) Estimated data collection cost; (10) Organizational title associated with the Unit Identification Code

(UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the contractor with its UIC for the purposes of reporting this information); (11)

Locations where the contractor and subcontractors perform the work (specified by zip code in the United States and nearest city, country, when in an overseas location, using standardized nomenclature provided on website);

(12) Presence of deployment or contingency contract language; and (13) Number of contractor and subcontractor employees deployed in theater this reporting period (by country). As part of its submission, The Contractor shall also provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period will be the period of performance not to exceed 12 months ending September 30 of each

Government fiscal year and must be reported by 31 October of each calendar year.

Contractors may use a direct XML data transfer to the database server or fill in the fields on the website. The XML direct transfer is a format for transferring files from a contractor's systems to the secure web site without the need for separate data entries for each required data element at the web site. The specific formats for the XML direct transfer may be downloaded from the web site.

The Contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the Army via the eCMRA secure data collection site. The contractor is required to completely fill-in all required data fields within the eCMRA.

Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than

October 31 of each calendar year. Contractors may direct questions to the help desk at:

http://www.ecmra.mil.

C.3.17 Contractor Identification Requirements. In accordance with FAR subpart

37.114(c), all Contractor personnel attending meetings, answering Government telephones, and working in other situations where their Contractor status is not obvious are required to identify themselves as such to avoid being mistaken for Government officials. Contractors performing work at Government workplaces shall provide their employees with an easily readable identification (ID) badge indicating the employee’s name, the Contractor’s name, the functional area of assignment, and a recent color photograph of the employee. Contractors shall require their employees to wear the ID badges visibly when performing work at Government workplaces. Contractor personnel must also ensure that all e-mails, documents, or reports they produce are suitably marked as Contractor products and/or that contractor participation is appropriately disclosed. All signature blocks on e-mails shall indicate that the sender is a Contractor employee and include the Contractor's company name.

C.3.17.1 Common Access Card (CAC). For contractors requiring Common Access Card

(CAC): Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 http://www.ecmra.mil/ months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

For contractors that do not require CAC, but require access to a DoD facility or installation; Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information

Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database

(TSDB) (Army Directive 2014-05/AR 190- 13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

The Government will provide special access badges as necessary. The Prime Contractor

Facility Security Officer (FSO) shall ensure that all Contractor personnel acquire and maintain CACs.

The approving Government Trusted Agent (TA) may give access to the FSO using the online Trusted Associate Sponsorship System (TASS), https://www.dmdc.osd.mil/tass/index.jsp.

Contractor eligibility remains in force during employment under the contract for those employees who have a valid and recurring requirement for access to Army facilities or automation systems (reference DD254 for systems access) to perform those duties stipulated in the contract. The Contractor shall use a valid CAC to access the

Government domain. The Contractor shall immediately return the CACs to the COR when the contractor employee’s employment is terminated or upon expiration of the contract. The CACs expires when contractor employee’s eligibility terminates or three years from the issuance date, whichever occurs first.

The contractor is responsible for all CACs and shall report all lost or stolen CACs to the COR immediately.

C.3.18 Quality Control. The Contractor shall develop and maintain an effective quality control plan to ensure services are performed in accordance with this PWS. The

Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract.

The Quality Control Plan (QCP) is to be delivered to the COR, within 30 days after contract award, and within 5 working days when changes are made thereafter. The

Offerors’ QCP must be detailed, containing a systematic approach to monitor daily operations of key and essential functions for providing quality service to the

Government, i.e. discrepancy identification procedures, corrective action procedures, prevention procedures for occurrence/re-occurrence of discrepancies, trend analysis usage, and customer feedback utilization. Such QCP requirements will increase the likelihood of successful contract performance. After acceptance of the quality control plan the Contractor shall request the contracting officer’s acceptance in writing of any proposed change to his QC system.

C.18.1 Quality Assurance. The Government shall evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the Contractor has http://www.dmdc.osd.mil/tass/index.jsp http://www.dmdc.osd.mil/tass/index.jsp performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

C.3.19 Data Rights. The Government has unlimited rights to all documents/material produced under this task order. All documents and materials, to include the source codes of any software, produced under this task order shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the Contracting Officer.

All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

C.3.20 Post Award Conference/Periodic Progress Meetings. The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5.

The Contracting Officer, Contracting Officers Representative (COR), and other

Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings the Contracting Officer will apprise the Contractor of how the government views the Contractor's performance and the Contractor will apprise the Government of problems, if any, being experienced.

Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

C.3.21 Task Order Contracting Officer Representative (COR). The (COR) will be identified by separate letter. The COR monitors all technical aspects of the task order and assists in task order administration The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the task order: perform inspections necessary in connection with task order performance:

maintain written and oral communications with the Contractor concerning technical aspects of the task order: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates.

The COR is not authorized to change any of the terms and conditions of the resulting order.

C.3.22 Key Personnel. The contractor shall provide a Program Manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the contracting officer. The Program Manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract.

The Program Manager or alternate shall be located at Fort Benning and be available between 0700-1700, Monday thru Friday except Federal holidays or when the government facility is closed for administrative reasons. Required that the individual have a minimum of five years’ experience in a technical environment with five years supervisory experience managing projects or programs of similar scope and size either for the Government or on behalf of a Government client. Individual will have an Active

SECRET Clearance in good standing on the first day of this contract. Project

Management Professional (PMP) certification is required. Any changes to the working status of these key personnel shall be provided to the KO for approval within five working days prior to the change.

C.3.23 Government Driver’s License: All full-time contractor employees shall be required to acquire a Government Driver’s License to drive government-owned or government-leased vehicles. This must be acquired with 30 calendar days of hire. Proof of driver’s license shall be turned in to the COR upon issuance of license.

C.4 Conservation of Utilities: The contractor shall instruct employees in utilities conservation practices. The contractor shall be responsible for operating under conditions that preclude the waste of utilities which includes turning off the water faucets or valves after using the required amount to accomplish the necessary cleaning.

C.5 Telephone Usage: Contractor employees shall not use Government telephones at the work site for personal reasons or make any toll or long distance calls.

C.6 APPLICABLE DOCUMENTS. The following publications form a part of this contract. The publications below with which the Contractor shall comply are

“Mandatory.” The Contractor shall use current commercial practices and publications whenever possible. A significant number of Army regulations that govern the conduct of the required work are listed below. The PWS may set a higher standard of performance than an applicable Army regulation. The PWS will control over the regulations unless a particular

PWS provision is in direct conflict with the applicable provision of the Army regulation. The publications can be accessed from internet site www.apd.army.mil. The Government will provide those publications not available on a web site. The Contractor shall comply with changes to publications. The Contractor shall inform the KO of any changes to a publication or documents that impact the cost of the contract.

Technical Bulletins (TB)

• TB 43-180 Calibration and Repair Requirements for the Maintenance of Army

Material

• TB 380-41, Security: Procedures for Safeguarding, Accounting, and Supply

Control of COMSEC Material (FOUO requires AKO access)

• TB 385-4 Safety Requirements for Maintenance of Electrical and Electronic

Equipment Department of the Army Pamphlets (DA PAM)

• DA Pam 25-1-1 Army Information Technology Implementation Instructions

• DA Pam 710-2-1 Using Unit Supply System (Manual http://www.apd.army.mil/

Procedures) Department of the Army (CIO/G-6) Policies

• Army CIO/G-6 List of Directorate of Information Services (NEC) Service Level

Agreement (SLA)/Operational Level Agreement (OLA) (Implemented by the

Secretary of the Army (Office, Chief Information Officer, via Memorandum, SUBJECT: Army Command, Control, Communications, Computers, and

Information Management (C4IM) Service List, dated 5 Nov 2014. (Available from the NEC)

• Army Information Technology Metrics Program (available from the NEC) Department of the Army Regulations (AR)

• AR 25-1, Army Information Technology

• AR 25-2, Information Assurance

• AR 25-55, The Department of the Army Freedom of Information Act Program

• AR 25-400-2, The Army Records Information Management System (ARIMS)

• AR 190-13, The Army Physical Security Program

• AR 190-51, Security of Unclassified Army Property (Sensitive and Nonsensitive)

• AR 350-1, Army Training and Leader Development

• AR 360-1, Army Public Affairs Program

• AR 380-5, Department of the Army Information Security Program

• AR 380-27, Control of Compromising Emanations (FOUO requires AKO access)

• AR 380-40, Safeguarding and Controlling Communications Security Material

(FOUO requires AKO access)

• AR 380-49, Industrial Security Program

• AR 380-67, Personnel Security Program

• AR 381-12, Threat Awareness and Reporting Program

• AR 385-10, The Army Safety Program

• AR 525-13 Antiterrorism (FOUO requires AKO access)

• AR 530-1 Operations Security

• AR 735-5, Property Accountability Policies

• AR 750-1, Army Materiel Maintenance Policy

• AR 750-43, Army Test, Measurement, and Diagnostic Equipment

Army and DoD Memoranda and Other Documents

• DA Pam 25-1-1, Army Information Technology Implementation Instructions

• DISA Cir 300-115-3, Defense Information System Network (DISN) Secret

Internet Protocol Routing Network Security Classification Guide

• DoDM 5200.01-V1, DoD, Information Security Program: Overview, Classification, and Declassification

• DoDM 5200.01-V4, DoD Information Security Program: Controlled

Unclassified Information (CUI)

• DoDI 8500.01, Cybersecurity

• DoDI 8500.2, Information Assurance (IA) Implementation

• DoDI 8510.01, DoD Information Assurance Certification and Accreditation

Process (DIACAP)

• Department of the Army Memorandum, 13 August 2008, subject:

Clarification on Personnel Security Investigative Requirements for IT

Positions

• Army CIO/G-6 Best Business Practice 05-PR-M-0002, Information

Assurance (IA Training and Certification (available at https://informatioinassurance.us.army.mil/bbp/index.php (Requires AKO

Access)

• Committee on National Security Systems Instructions (CNSSI) 4009, National Information Assurance Glossary (available at http://www.cnss.gov/full-index.html )

• Message, Department of the Army CIO/G-6, (ALARACT 293/2007), dated

261800Z Dec 07, subject: Implementation of Standard DoD IA Awareness

Training (available from the Government requiring agency)

• DOD Policy Memorandum, Encryption of Sensitive Unclassified Data at Rest on

Mobile Computing Devices and Removable Media, dated 3 Jul 2007 and DOD

Component implementing instructions

• DoD Directives (DoDD) (available at http://www.dtic.mil/whs/directives) http://www.cnss.gov/full-index.html http://www.dtic.mil/whs/directives)

• DoDD 5205.02E, DoD Operations Security (OPSEC) Program

• DoDD 5400.11, DoD Privacy Program

• DoDD 8100.2, Use Of Commercial Wireless Devices, Services, And

Technologies In The Department Of Defense (DOD) Global Information Grid

(GIG)

DoD Manuals

• DoD 5220.22-M, National Industrial Security Program Operating Manual

• DoD 8570.01-M, Information Assurance Workforce Improvement

Program Code of Federal Regulations (CFR)

• 15 CFR Part 700, Defense Priorities and Allocations System (DPAS)

• *47 CFR Part 68, Connection of Terminal Equipment to the Telephone Network

• *47 CFR Part 76, Multichannel Video And Cable Television Service, Subpart K, Technical Standards.

Telecommunications Industry Association (TIA)/Electronic Industry

Association (EIA) Standards/American National Standards Institute (ANSI)

Standards

• *TIA 102 Series, Suite of Standards to support the Land Mobil Radio Network

• *TIA-232-F, Interface Between Data Terminal Equipment and Data Circuit-

Terminating Equipment Employing Serial Binary Data Interchange

• *EIA-310-D, Cabinets, Racks, Panels, and Associated Equipment

• *TIA/EIA-472-0000-A, Generic Specification for Fiber-Optic Cables

• *ANSI/TIA-472C000-B, Standards for Optical Fiber Premises Distribution Cable

• TIA/EIA-472D000-A, Sectional Specification for Fiber-Optic

Communications Cables for Outside Plant Use

• *TIA-4920000B, Generic Specification for Optical Waveguide Fibers

• *TIA/EIA-60-6A, Administration Standard for Commercial

Telecommunications Infrastructure

• *TIA/EIA-568-B Series, Commercial Building Telecommunications Cabling

Standard

• *TIA/EIA-569-B, Commercial Building Standard for Telecommunications

Pathways and Spaces

• *TIA-603-C, Land Mobile FM or PM Communications Equipment

Measurement and Performance Standards

• *TIA/EIA-422-B, Electrical Characteristics of Balanced Voltage Digital

Interface Circuits

• *EIA-440-B, Fiber-Optic Connector Terminology

• *TIA/EIA-530-A, High Speed 25-Position Interface for Data Terminal

Equipment and Data Circuit-Terminating Equipment, Including Alternative

26-Position Connector

• *TIA/EIA-455-B, Standard Test Procedures for Fiber-Optic Fibers, Cables, Transducers, Sensors, Connecting and Terminating Devices, and Other Fiber-

Optic Components

OSHA Standards

• 29 CFR Part 1910.146, Permit-required Confined Spaces

• *29 CFR Part 1910.268, Telecommunications

NETCOM Regulations (requires CAC access) https://army.deps.mil/NETCOM/sites/G1/PolPubsForms/Pages/Regulati ons.aspx

• NETCOM Regulation 25-56 Personally Identifiable Information

• NETCOM Regulation 25-70 Web Content Administration, Policies, and Procedures

• NETCOM Regulation 380-5 Information Security

• NETCOM Regulation 385-1 Safety and Occupational Health

• NETCOM Regulation 750-1, Maintenance Guidance and Concepts

• NETCOM Regulation 750-2, Battery Management Program

• NETCOM Regulation 750-8, Army Test, Measurement, and Diagnostic

Equipment Program

C.6 SPECIFIC TASKS:

C.6.1 Garrison Information Management Officer (IMO) Support: The primary place of performance will be Building 4 and outlying Garrison locations, Fort Benning, GA. The

Contractor shall:

•Provide Active Directory Management on user and computer accounts, print objects, and security groups; create and maintain standard computer account naming conventions.

•Provide on-site and remote customer and automation support for up to 2,500 Garrison personnel and systems.

•The contractor will assist the Garrison IMO with duties as defined by AR 25-1, DA PAM 25-1-1 and AR 25-2, to include all Garrison IT related procurement records and approvals.

•Coordinate with the Garrison Directorate Information Management Officers (IMOs) to develop a

Strategic plan for the cyclical replacement of all types Information Technology equipment

(network, hardware, software, communications, and video teleconference rooms). The plan shall be in accordance with AR25-1 and DA PAM 25-1-1.

•Develop and enhance business process development for day-to-day maintenance and support requests. Work with the Network Enterprise Center to resolve issues related to user accounts, network outages, remote access and Wi-Fi access. Provide incident response for systems/users with known or suspected Information Assurance compliance issues.

•Assist the Information Assurance Security Officer (IASO) in accordance with AR 25-1, DA

PAM 25-1-1, and AR 25-2 to include establishing and maintaining a record of all…