ATCH_1_PWS Cellebrite Training and Certification_KO Reviewed.pdf

Attachment #1

PERFORMANCE WORK STATEMENT (PWS)

FOR

Technical Instruction Services

Cellebrite Training and Certification Course

1.0 General:

1.1 Scope: The contractor shall provide all personnel, equipment, tools, materials, supervision, and quality control necessary, except as specified in Paragraph 3.0 as Government Furnished, to design, develop and instruct a Clandestine Laboratory Certification course for the Midwest Counterdrug Training Center (MCTC), as defined in this PWS.

1.2 Background and Objectives:

1.2.1 Background. The MCTC is one of five (5) National Guard Counterdrug training programs that provides relevant curriculum focused on counternarcotics and counter transnational organized crime (CTOC). MCTC is located at the Camp Dodge Joint Maneuver Training Center (CDJMTC) in Johnston, Iowa, and features state of the art classrooms and tactical training environments. With a training region that encompasses major international trafficking routes and national border ports of entry, MCTC’s courses strive to impact the illicit flow of drugs throughout the nation. MCTC provides courses that support National Drug Control Strategies and positively impact the performance of Federal, state, and local law enforcement agencies (LEA), community based organizations (CBO), and military professionals directly involved in counternarcotics missions. MCTC’s emphasis remains on state and local law enforcement officers.

Course curriculum focuses on illicit narcotics interdiction, disruption of drug trafficking organizations, intelligence and analysis, narco-terrorism, homeland security, civil operations, and anti-drug coalition fundamentals.

1.2.2 Objectives. Each course is designed to support the objectives of the Assistant Secretary of Defense for Counternarcotics and Global Threats (DASD-CN), Office of National Drug Control Policy (ONDCP), National Northern Border, National Southwest Border, and Caribbean Border counternarcotics strategies and to increase national security. MCTC supports federal, state, and local agencies with current and relevant training, maximized by the experiences of subject matter experts in their fields. All training events are designed to not only offer world class instruction, but to break down jurisdictional barriers and offer a unique opportunity for officials across the law enforcement and prevention spectrum to network and share ideas in person.

1.3 Periods/Places of Performance: The Periods of Performance (PoP) shall be one (1) Base Period, running date of award through 31 May 2021, and one (1) 12-month option period with dates and locations of each course iteration to be determined by MCTC.

1.3.1 Base period will include one (1) course iteration.

1.3.2 Option period will include up to two (2) course iterations.

1.3.3 The MCTC service area covers the 54 states and territories, and class iterations may be conducted at any location within this area with the exception of the 4 territories and the state of Hawaii. Approximately 1/3 of course iterations are conducted at the MCTC main campus at Camp Dodge, Johnston, Iowa; the remainder are conducted at other locations within the United States.

1.4 General Information:

1.4.1 RESERVED

1.4.2 Quality Assurance (QA): The Government will evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government will do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and acceptable quality level(s) or defect rate(s).

1.4.3 Recognized Holidays: The following are recognized United States (US) holidays.

The contractor shall not perform services on these days:

1.4.3.1 New Year’s Day: January 1st

1.4.3.2 Martin Luther King, Jr.’s Birthday

1.4.3.3 President’s Day

1.4.3.4 Memorial Day

1.4.3.5 Independence Day: July 4th

1.4.3.6 Labor Day

1.4.3.7 Columbus Day

1.4.3.8 Veteran’s Day: November 11th

1.4.3.9 Thanksgiving Day

1.4.3.10 Christmas Day: December 25th

1.4.4 Place and Performance of Services: The contractor shall, with some exceptions, provide services between the hours of 0700-1700 on Monday through Friday, except on recognized US holidays or when the Government facility/installation is closed due to local or national emergencies, administrative closings, or similar Government-directed facility/installation closings. The contractor shall at all times maintain an adequate work force for the uninterrupted performance of all tasks defined within this PWS when the Government facility/installation is not closed for the above reasons. When hiring personnel, the contractor shall keep in mind that the stability and continuity of the work force are essential.

1.4.4.1 Reserved

1.4.4.2 Unscheduled gate closures by the Security Police may occur at any time causing all personnel entering or exiting a closed installation to experience a delay. This cannot be predicted or prevented. Contractors are not compensated for unexpected closures or delays. Vehicles operated by contractor personnel are subject to search pursuant to applicable regulations. Any moving violation of any applicable motor vehicle regulation may result in the termination of the contractor employee’s installation driving privileges.

1.4.4.3 The contractor’s employees shall become familiar with and obey the regulations of the installation; including fire, traffic, safety and security regulations while on the installation. Contractor employees should only enter restricted areas when required to do so and only upon prior approval. All contractor employees shall carry proper identification with them at all times, and shall be subject to such checks as may be deemed necessary. The contractor shall ensure compliance with all regulations and orders of the installation which may affect performance. The Government reserves the right to direct the removal of an employee for misconduct, security reasons, or any overt evidence of communicable disease. Removal of contractor employees for reasons stated above does not relieve the Contractor from responsibility for total performance of this contract.

1.4.5 Security Requirements. The contractor shall comply with all applicable installation/facility access and local security policies and procedures, which may be obtained from the Contracting Officer’s Representative (COR). The contractor and all associated subcontractor employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office.

The contractor shall ensure compliance with all personal identity verification requirements as directed by Department of Defense (DoD), Headquarters Department of Army (HQDA) and/or local policy. Should the Force Protection Condition (FPCON) change, the Government may require changes in contractor security matters or processes.

1.4.5.1 Reserved

1.4.5.2 For contractors that do not require a CAC, but require access to a DoD facility or installation: Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), and applicable installation, facility and area commander installation/facility access, and local security policies and procedures (provided by a government representative).

1.4.5.3 Communications Security/Information Technology (COMSEC/IT) Security. All communications with DoD organizations are subject to COMSEC review. All telephone communications networks are continually subject to intercept by unfriendly intelligence organizations. DoD has authorized the military departments to conduct COMSEC monitoring and recording of telephone calls originating from, or terminating at, DoD organizations. Therefore, the contractor is advised that any time contractor personnel place or receive a call they are subject to COMSEC procedures. The contractor shall ensure wide and frequent dissemination of the above information to all employees dealing with DoD information. The contractor shall abide by all Government regulations concerning the authorized use of the Government's computer network, including the restriction against using the network to recruit Government personnel or advertise job openings.

1.4.5.4 RESERVED

1.4.5.5 RESERVED

1.4.5.6 RESERVED

1.4.5.7 RESERVED

1.4.5.8 RESERVED

1.4.5.9 RESERVED

1.4.5.10 RESERVED

1.4.5.11 RESERVED

1.4.5.12 RESERVED

1.4.5.13 RESERVED

1.4.6 Physical Security. The contractor shall safeguard all Government property provided for contractor use. At the close of each work period, Government facilities, equipment and materials shall be secured.

1.4.6.1 RESERVED

1.4.6.2. RESERVED

1.4.6.3. Homeland Security Presidential Directive-12 (HSPD-12 Considerations):

1.4.6.3.1 Routine access to Government-controlled facilities is not required.

1.4.6.3.2 Routine access to Government Information Systems (IS) is not required.

1.4.6.3.3 NACI or other security check is not required.

1.4.6.3.4 Government-issued identification and/or building passes are not required.

1.4.6.3.5 Contractor personnel do not require Government escort while performing work on a Government installation.

1.4.6.3.6 Contractor is not required to provide employee and/or vehicle information for an Entry Authorization List (EAL).

1.4.7 RESERVED

1.4.8 Post Award Conference/Periodic Progress Meetings: The contractor agrees to attend any post award conference convened by the KO in accordance with FAR Subpart 42.5. The KO, COR and other Government personnel, as appropriate, may meet periodically with the contractor to review the contactor’s performance. At these meetings, the KO will apprise the contractor of how the Government views the contractor’s performance and the contractor shall apprise the Government of problems, if any, being experienced. The contractor shall resolve outstanding issues raised by the Government. Contractor attendance at these meetings shall be at no additional cost to the Government.

1.4.9 RESERVED

1.4.10 RESERVED

1.4.11. Combating Trafficking in Persons: The United States Government has adopted a zero tolerance policy regarding trafficking in persons. Contractors and contractor employees shall not engage in severe forms of trafficking in persons during the period of performance of the contract; procure commercial sex acts during the period of performance of the contract; or use forced labor in the performance of the contract. The Contractor shall notify its employees of the United States Government’s zero tolerance policy, the actions that will be taken against employees for violations of this policy. The contractor shall take appropriate action, up to and including termination, against employees or subcontractors that violate the US Government policy as described at

FAR 22.17.

1.4.12 RESERVED

1.4.13 RESERVED

1.4.14 Organizational Conflicts of Interest (OCI): The contractor and subcontractor personnel performing services under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent OCIs, as defined in FAR Subpart 9.5. The contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO. In the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may impose other remedies as he or she deems necessary, including prohibiting the contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.4.15 RESERVED

2.0 Definitions and Acronyms:

2.1 Definitions:

2.1.1 Contractor: A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2 Contracting Officer (KO): A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.3 Contracting Officer Representative (COR): An employee of the U.S. Government designated by the KO to monitor contractor performance. Such appointment will be in writing and will state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications.

This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4 Defective Service: A service output that does not meet the standard of performance associated with the PWS.

2.1.5 Deliverable: Anything that can be physically delivered and includes non-manufactured things such as meeting minutes or reports.

2.1.6 Key Personnel: Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.7 Physical Security: Actions that prevent the loss or damage of Government property.

2.1.8 Quality Assurance: The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.9 Quality Assurance Surveillance Plan (QASP): An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.10 Quality Control: All necessary measures taken by the Contractor to ensure that the quality of an end product or service shall meet contract requirements.

2.1.11 Subcontractor: One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.2 Acronyms:

AR Army Regulation AT/OPSEC Antiterrorism/Operational Security CBO Community Based Organization CFP/M/E/S Contractor Furnished Property/Material/Equipment/Services CMR Contractor Manpower Reporting COR Contracting Officer Representative CTOC Counter Transnational Organized Crime DA Department of the Army DFARS Defense Federal Acquisition Regulation Supplement DoD Department of Defense FAR Federal Acquisition Regulation GFP/M/E/S Government Furnished Property/Material/Equipment/Services HSPD Homeland Security Presidential Directive KO Contracting Officer LEA Law Enforcement Agency MCTC Midwest Counterdrug Training Center NCIC-III National Crime Information Center Interstate Identification OCI Organizational Conflict of Interest ONDCP Office of National Drug Control Policy POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QASP Quality Assurance Surveillance Plan QC Quality Control SAM System for Award Management TE Technical Exhibit TSDB Terrorist Screening Database

3.0 Government Furnished Property, Material, Equipment and Services (GFP/M/E/S):

The Government will provide the property, material, equipment, and/or services listed below solely for the purpose of performance under this contract:

3.1 Property: The Government will furnish a classroom of adequate size to accommodate the number of students registered for each iteration of the course.

3.2 Materials: NONE

3.3 Equipment: The Government will furnish Audio-Visual equipment in the classroom.

3.4 Services: NONE

3.5 Utilities: All utilities in the facility will be available for the contactor’s use in the performance of this contract. The contractor shall instruct employees in utilities conservation practices. The contractor shall operate under conditions that preclude the waste of utilities, which include turning off the water faucets or valves after using the required amount.

4.0 Contractor Furnished Property, Materials, and Equipment (CFP/M/E):

4.1 General: Except for those items specifically stated to be Government-Furnished in Paragraph 3.0, the contractor shall furnish everything required to perform these services as indicated in Paragraph 1.1. Minimum materials and equipment to be provided by the Contractor for each iteration are:

4.1.1 Student manual outlining specific course content. Student manual is intended to be a reference/resource for students to use during and after the course, and must be provided in hard copy to each student. Student manual shall be:

4.1.1.1 Professionally and thoroughly researched and developed

4.1.1.2 Comprehensive, current, and relevant

4.1.1.3 Professionally organized, assembled and securely bound (hard copy student manual is required)

4.1.2 Expenses. All expenses for materials, equipment or services required to conduct the course shall be borne by the contractor, and shall be included in the firm fixed price.

Expenses include, but are not limited to:

4.1.2.1 Travel, lodging and meals for contractor staff and instructors

4.1.2.2 Printing and delivery of student handbooks

4.1.2.3 Purchase and delivery of all materials and equipment required to conduct the course

4.2 RESERVED

5.0 Requirements: The contractor shall provide a 7-Day all-inclusive Cellebrite Course that will include a 1-Day Cellebrite Mobile Forensic Fundamentals (CMFF) course, a 2- Day Cellebrite Certified Operator (CCO) course, a 3-Day Cellebrite Certified Physical Analyst (CCPA) course and one (1) day for the Cellebrite Certified Mobile Examiner (CCME) examination. Contractor shall provide multiple iterations of the course, at dates and locations to be coordinated with MCTC during the contract performance period.

Dates/locations for each course iteration are selected based on training requests submitted by law enforcement agencies. The course title may change per MCTC’s needs, but the course topics will remain constant. Contractor shall update course content within the course topics as necessary to remain current and relevant throughout the contract performance period.

5.1 Intent of Course: The course shall deepen criminal analysts’ understanding of the Cellebrite Universal Forensic Extraction Device (UFED) and provide them with the necessary tools and skills needed to detect illegal drug trafficking criminal activities through their most common methods of communication by use of their cellular telephones. The purpose of the Cellebrite course is to train analysts in advanced analytic techniques so they can determine the vulnerabilities of DTOs and TCOs and identify opportunities to disrupt their activities. This course should focus on enhancing their ability to develop forensic investigative methods through the use of the Cellebrite device, and present analytic findings through the use of link analysis to various audiences. Upon completion of this course analysts should have a more in-depth understanding of the Cellebrite UFED, functions, and legal ramifications concerning cell phone forensics.

5.2 Target Audience: Up to 20 law enforcement officers and military personnel directly involved in counternarcotics missions; with an emphasis on National Guard Criminal Analysts to include civilian local, state, and federal law enforcement officers.

5.3 Course Content: The course of instruction shall cover the following the official Cellebrite approved topics (learning objectives), at a minimum:

5.3.1 The Cellebrite Mobile Forensic Fundamentals (CMFF) Course: provides the fundamental knowledge to comprehend and investigate incidents involving mobile devices. Students will be introduced to baseline concepts to ensure they gain the prerequisite knowledge to understand issues surrounding the handling of mobile devices as evidence and to attend the next in the series of the Cellebrite’s UFED Certification Training Series. The CMFF course is the starting point for first responders, investigators and CSI staff tasked with identifying and seizing mobile devices for data acquisition. Students shall receive a certificate of completion upon successful course completion.

5.3.2 Cellebrite Certified Operator (CCO) Course: CCO is a mobile forensic certification that certifies participants who have gained the knowledge and practical skills required to handle mobile devices in a forensically sound manner, use the Cellebrite UFED Touch, UFED Touch2 and UFED 4PC, conduct extractions, basic analysis, and reports on extracted data. It must build on the concepts imparted in the CMFF course and expose students to the fundamentals of mobile device investigations, logical extraction of user data, and analysis of mobile devices. Operation of the Cellebrite UFED product to perform a number of hands-on logical extractions on various mobile devices with a variety of operating systems is required. Skill sets will include creating Safety Subscriber Identity Module (SIM) and extracting evidentiary data from SIM cards.

Students will be taught to create reports on findings and get exposed to the UFED Reader and how to use that to multiply investigative efforts. Students shall receive a certificate of completion upon successful course completion.

5.3.3 Cellebrite Certified Physical Analyst (CCPA): CCPA is an advanced level certification that certifies participants have gained knowledge and practical skills using UFED Physical Analyzer software conduct advanced analysis on mobile devices, including advanced search and analysis techniques to verify and validate findings. This class will also introduce students how to generate reports on technical findings. CCPA focuses on the use of Cellebrite’s UFED to perform file system extractions, physical extractions, password bypasses and the advanced analysis of evidentiary items using the UFED Physical Analyzer software. Students shall receive a certificate of completion upon successful course completion.

5.3.4 The Cellebrite Ceritified Mobile Examiner (CCME) exam: CCME is a certification process designed to assess student’s comprehensive knowledge and practical skills.

Students who successfully complete the CMFF, CCO and CCPA become eligible to take the certification as a Cellebrite Certified Mobile Examiner (CCME). The CCME will include a review and preparation workshop to assist the students in preparing to successfully complete the CCME examination. Students shall receive a certificate of completion upon successful course completion.

5.4 If a slide presentation is used

5.4.1 Slides must display the MCTC logo; no other corporate logos shall be displayed

5.4.2 Slides must be unique to this course

5.5 Practical exercises must be incorporated in the instruction and be designed to reinforce teaching points of each course. All practical exercises will be clearly defined and structured for review in the contract submission proposal.

5.6 Offeror Qualifications. The offeror (contractor) must meet the following minimum qualifications:

5.6.1 Offerors must provide proof that they are an authorized Cellebrite training provider, and that all proposed instructor(s) are certified by Cellebrite to conduct the required training and certification, with their quotations.

5.7 Instructor Qualifications. Offeror (contractor) shall determine the appropriate number of instructors required to conduct the course, based on instruction methodology and class size. Each proposed instructor must meet the minimum qualifications.

5.7.1 Cellebrite instructors must be professional internal forensic training staff that have been vetted and approved Cellebrite Certified instructors. Cellebrite instructors must have successfully completed the rigorous screening and instructor development process to have achieved the credential of Cellebrite Certified instructor from Cellebrite.

5.8 Contractor Manpower Reporting (CMR):

5.8.1 The contractor shall report manpower data relating to the performance of service contracts into the System for Award Management (www.sam.gov).

5.8.2 The contractor shall report, annually by October 31, for services under the contract during the preceding Government fiscal year (October 1 – September 30). The contractor shall report the following information:

5.8.2.1 Contract number and, as applicable, order number.

5.8.2.2 The total dollar amount invoiced for services performed during the previous Government fiscal year under the contract.

5.8.2.3 The number of Contractor direct labor hours expended on the services performed during the previous Government fiscal year.

5.8.2.4 Data reported by subcontractors.

6.0 RESERVED

6.1 RESERVED

http://www.sam.gov/

TECHNICAL EXHIBIT 1

Performance Requirements Summary (PRS)

This PRS includes performance objectives the Government will use to determine contractor performance and will compare contractor performance to the Acceptable Quality Level (AQL). The COR will use the *Student Course Evaluations for each iteration to measure contractor performance.

Performance Objective

Performance Standard Acceptable Quality Levels (AQL)

Surveillance Method / By Whom

5.0 Provide a

Cellebrite Training and

Certificationcourse in accordance with the PWS.

75% average or above “Agree” or “Strongly Agree” ratings on each question of

Student Course Evaluations.

Failure to achieve 75% average or above

“Agree” or “Strongly Agree” ratings on each question of Student Course Evaluations.

Student Course Evaluations / Students of each course iteration

*Student Course Evaluations will be completed by each student attending the course, and will ask students to rate the following:

1. Instructor presentation of information

2. Instructor knowledge of subject matter

3. Hands on training of materials

4. Textbook & handout materials presented to the students

5. Instruction’s strong points of course

6. Overall course rating

Rating Description Green Performance and technical specifications are being met at an acceptable quality level (AQL).

Yellow Performance and technical specifications are currently being met at the minimum

AQL, but the following service/ deliverable needs contractor attention (see comments).

The COR must identify what component of the deliverable and/or service requires attention.

Red Performance and technical specifications are not being met at AQL and the following service/ deliverable needs immediate contractor resolutions (see comments).

The COR must identify what component of the deliverable and/or service is below the minimum AQL.

TECHNICAL EXHIBIT 2

Deliverables Schedule

PWS Reference / Deliverable Title

Frequency Number of Copies

Medium/Format Submit To

4.1.1 Student Manual 1st day of each course

iteration

1 copy per student

Hard copy COR

5.3.1 Certificate of

Completion Cellebrite

Mobile Forensic Fundamentals (CMFF)

Course

Last day of each course iteration

1 copy per student

Hard copy Or

Electronic

Student

5.3.2 Cellebrite

Certified Operator

(CCO) Course

Last day of each course iteration

1 copy per student

Hard copy Or

Electronic

Student

5.3.3 Cellebrite

Certified Physical Analyst (CCPA)

Last day of each course iteration

1 copy per student

Hard copy Or

Electronic

Student

5.3.4 The Cellebrite

Ceritified Mobile

Examiner (CCME) exam

Last day of each course iteration

1 copy per student

Hard copy Or

Electronic

Student

5.8 CMR Report Annually, within 30 days

after end of POP and 30 days after 30 October

1 Electronic https://www.sam.gov

Appendix A: Equipment List

Minimum Equipment Provided by Contractor for each class:

Self-Contained Breathing Apparatus (SCBA) * 20 Full face air-purifying respirator 6 (1/S; 4/M; 1/L) HEPA cartridges for APRs 6 sets Combustible gas indicator+ 5 Draeger pump kit (or equivalent) 5 Wash tubs 4 Scrub brushes 2 Barrier tape* 1 roll Traffic cones 8 Plastic sheet (10 x 10)* 2 Fit Test Adapters for the SCBA masks 4 Dupont chemical suits 50 (assorted sizes, XL and XXL) Tychem SL (Saranex) suit with hood & feet—

XXL*

Glove liners—XL* 2 boxes, size XL Outer nitrile gloves* 50 pairs, assorted L and XL Duct tape* 5 rolls Draeger tubes * Acetic acid 5/a tubes, 4 boxes Hydrochloric acid 1/a tubes, 2 boxes Ammonia 5/b tubes, 2 boxes Booties (Latex) XL 50 pairs, size XL Safety glasses* 3 pairs pH Paper (multi-strip type) 6 boxes Evidence sample bottles 8 sets Glassware, as needed for assessments Single neck, reflux columns, separatory funnel, etc.

Chemical bottles, as available Acid, solvents, mason jars, etc.

Chemical cans, as available Ether, freon, etc.

Fit test tubes and bulbs box

*Pictures of each SCBA’s to ensure they are compliance with Government standards for pressure testing and shelf life