Att 1 - LT-CRDS PWS.pdf

Department of Defense Defense Health Agency

Performance Work Statement for

Long-Term Capability Requirements Documents Development Support (LT-CRDS)

Deputy Assistant Director (DAD)

Capabilities Development Requirements Office

Solicitation Number: HT001124R0064 Version: 3

Date: December 4, 2023

PART 1

1.0 GENERAL INFORMATION

1.1 This is a non-personal services contract to provide Requirements Support Services for the J5 Capability Management Division, Defense Health Agency (DHA). The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.2 Description of services/introduction: The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal professional services as necessary to perform Requirements Support Services as defined in this Performance Work Statement (PWS) except for those items specified as government furnished property and services. The contractor shall perform to the standards in this

PWS.

1.3 Background: The DHA is responsible for the effective execution and operation of the Department of Defense (DoD) medical mission, which is to provide medical services and support to specified categories of individuals entitled to DoD medical care. The Military Health System (MHS) is committed to the provision of world-class healthcare services for military personnel, retirees, their families, and other eligible beneficiaries. This goal incorporates the provision of a health delivery system where quality, access and cost effectiveness prevail. The delivery system focuses on operational readiness, health promotion, primary care and managed care.

The DHA provides medical care for the DOD’s 9.6 million eligible beneficiaries through the defense health program, which includes contracted health care networks and military treatment facilities. TRICARE provides comprehensive, quality and accessible health care to members of the Uniformed Services: Army, Navy, Air Force, Marine Corps, Coast Guard and the Commissioned Corps of the U.S. Public Health Service and the National Oceanic and Atmospheric Administration. By law and/or agreement, benefits may be extended to members of NATO States and their dependents.

The contractor shall support DHA’s J5 Capability Management Division and assist in the development of joint capability development documents with coordination from DHA’s Component Acquisition Executive (CAE). This support is a critical need considering DHA views joint requirements as a top enterprise priority and currently does not have a Joint Requirements office. The location of the work performance and the requesting organization is Defense Health Headquarters (DHHQ) in Falls Church, Virginia.

1.4 Objectives: The main objective of this contract is to provide full spectrum healthcare requirements support and the development of joint capability documents in the performance of activities within the J5 Capability Management Division The key objectives (covered in detail in Section 5) to be met to satisfy the requirements of this program include, but are not limited to, the following:

1.4.1 Define the process for developing capability documents for developmental capabilities/programs in coordination with the J-8 Gatekeeper, Service Combat Developers, Combatant Commands (COCOMS), and the Office of the Joint Staff Surgeon (OJSS).

1.4.2 Improve the process for developing capability documents for developmental capabilities/programs in coordination with Service Combat Developers, COCOMS, and OJSS.

1.4.3 Draft, coordinate, and staff capability documents for developmental capabilities/programs in coordination with Services, COCOMS and stakeholders.

1.4.4 Provide project management support to J5 Capability Management Division for developmental capability documents.

1.4.5 General management requirements.

1.5 Scope: Requirements Support. Requirements support services include but are not limited to Technical Writing Support, Knowledge Management Decision Support Subject Matter Expert, Process Development, Strategic Planning, Capability Documentation, Stakeholder Management, Project Management, Program Management Office, Acquisition Workforce, Acquisition, Services Requirements, Service Combat Development, Program Milestone Development, Data Analysis and all other related requirement functions. The contractor shall accomplish a variety of acquisition and other related administrative services to complement the government’s capabilities. The requirement support will also provide for the following key services:

1.5.1 Process Development. Development and documentation of joint requirements processes and procedures in coordination with Service Combat Developers, COCOMs, and the Office of the Joint Staff Surgeon (OJSS). Development includes an array of services to include analysis of and planning for joint requirements processes; orienting and training those stakeholders involved with the processes; and monitoring and measuring the execution of the processes.

1.5.2 Strategic Planning. Organization of a summit, off-site, or conference for Service Combat Developers to collaborate and develop a way forward for joint requirement processes. This support will include coordination in development of key documents such as Procedural Instruction (PI), Concept of Operations (CONOPS), and all other related strategic planning documents.

1.5.3 Capability Documentation. Development and staffing of capability documents for developmental capabilities/programs in coordination with stakeholders. Coordination and integration of stakeholders in the document development process; Serving as key point for review, revision, finalization, and staffing of key documentation (e.g., JCIDS documents, CBA, QA, DOTMLPF-P Change Recommendations).

1.5.4 Stakeholder Management. Coordination and integration of all key stakeholders across DHA, the Services (Service Combat Developers), COCOMS, and OJSS during development of processes, capability documents, and other related activities.

1.5.5 Project Management. Support of key project management task in support of the Capabilities Development Requirements Office. Key tasks include developing briefings, white papers, and executive summaries.

1.6 Period of Performance (PoP): The period of performance is for a one-year base period, plus four, one-year option periods (60-months) plus up to 6-months extension of service option.

Name Start End Base Period Date of Award Through 12 months of performance Option Period 1 Expiration of Base Period Through 12 months of performance Option Period 2 Expiration of Option Period 1 Through 12 months of performance Option Period 3 Expiration of Option Period 2 Through 12 months of performance Option Period 4 Expiration of Option Period 3 Through 12 months of performance Extension of Service Option

Expiration of Option Period 4 Through up to 6 months of performance

1.6.1 Transition: Transition-in period.

1.6.1.1 Transition-in period: The transition in period shouldn't take more than 4 days and the awardee cannot perform under contract until the current contract ends/expire. The transition should consist of onboarding or other administrative actions at the awardee's expense. Personnel are required to have access to the Office Secure Space for the purpose of accessing SIPR related JCIDS documents and require a Visitor Access Request (VAR). Personnel will be required to obtain token access for Secret Protocol Router Network (SIPRNet) email in Knowledge Management Decision Support (KMDS) and this will take longer than the standard onboarding process. DHA will provide sponsorship to the DHA Office Secure Space located at 7700 Arlington Blvd, Falls Church Virginia. One member of the team will serve as team lead, the Senior Business Analyst, and another member will serve as an alternate. The government estimates approximately one week for this process. During the transition-in period, the newly assigned members shall prepare to meet all contract requirements and ensure incoming personnel are functionally trained and qualified on the full performance start date except cybersecurity requirements, which must be fully adhered during transition and full performance periods. The remaining incoming personnel shall be trained and qualified within the standard one (2) week timeframe. See Att 14 – 7.2 Cybersecurity Regulation and Guidance in Part 7 for further guidance.

1.6.1.1.1 Personnel shall comply with transition-in requirements of the DHA, for members needing to be issued Common Access Card (CAC) identification, including Department of Defense (DoD) and DHA-directed training and forms submission, prior to network access. See Att 9 – 7.1.1 DHA Contractor CAC Request Process and Att 11 – 7.1.2 DHA Contractor Training Instruction in Part 7.

1.6.1.2 Transition-out period: The transition-out plan shall facilitate the accomplishment of a seamless transition from the incumbent to an incoming contractor/Government personnel at the expiration of the contract. (CDRL 11 – See PWS Section 7, Technical Exhibit - Contract Deliverables Requirement List (CDRL)) – See Att 6 – CDRL Portfolio

1.6.1.2.1 Personnel shall comply with transition-out requirements of the DHA for contractors who have been issued a CAC or who generate “records”, as defined by DoD (records manual), including DoD-directed disposition of records, and others displayed on the In/Out (I/O) Processing Portal.

1.7 Administrative specifications

1.7.1 Place of performance: The work shall be performed at the Defense Health Headquarters in Falls Church, Virginia located in the SIPR Office Secure Space in DHA 1M700 area. As a Security requirement for this Secret clearance, a DD Form 254 shall be completed and signed.

Personnel will be located at the J5 Capability Management Division Office, Defense Health Agency (DHA), 7700 Arlington Blvd, Falls Church, Virginia, 22042.

1.7.1.1 DHA will not provide any fuel, personnel, utilities, or facilities to personnel for the execution of this contract. However, the DHA Contracting Officer’s Representative (COR) at his/her discretion, and with concurrence of the contractor project leader, may provide workspace and other support equipment for contractor personnel as necessary to ensure contractor participation and productivity as member of project task teams and work groups.

1.7.1.2 Support shall be conducted from these locations, or through telecommuting with the COR or Contracting Officer (CO)’s approval. Advanced approval shall be obtained for a specific telework schedule in accordance with DHA Telework guidance.

1.7.2 Recognized Federal holidays: The contractor will not be required to perform services on holidays.

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day Juneteenth National Independence Day

1.7.3 Hours of operation: The contractor is responsible for conducting work during the core business hours from 0900-1500hrs Eastern, while the duty hours are from 0730-1530. Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings.

Core business hours or emergency work hours will be established in the event of an extended local or national emergency (e.g., COVID-19). The contractor must always maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons.

1.8 Contractor Travel: Personnel will be required to travel throughout the National Capital Region (NCR) and other locations in the United States to attend the Military Health System Research Symposium conducted annually (possible sites include but may not be all encompassing: San Antonio TX and Orlando Florida,) random group events (to be determined), meetings, conferences, and training. The NCR encompasses Washington, DC; Montgomery and Prince George’s counties in Maryland; Arlington, Fairfax, Loudoun and Prince William counties in Virginia, and the incorporated cities of Alexandria, Falls Church, Fairfax, and Manassas in Virginia. Local travel is defined as any travel within a 50-mile radius of the NCR. Local travel will not be reimbursed, except for when the local travel is in conjunction with a preapproved trip outside of the local travel area (i, e, mileage to airport, airport parking, taxi to/from airport).

Arrangements for and costs of all travel, transportation, meals, lodging, and incidentals are the responsibility of the Contractor. All travel and transportation shall utilize commercial sources and carriers. The Government shall not pay for business class or first-class travel. Contractors shall refer to FAR 31.205-46 Travel Costs, for adherence to allowable and allocable travel costs.

The Government will not allow any burden rates applied to travel costs. No burdens, indirect rates, or G&A may be charged to travel. Only direct travel costs that the COR has pre-approved, and that the COR finds allowable and allocable may be charged to the contract. All travel (other than local travel) requires Government preapproval/authorization and notification to the COR.

The Government is providing a fixed price ceiling for travel. Travel outside of the local area must be pre-approved by the COR and contractor travel must have occurred in order to be billed.

It is the responsibility of the contractor to manage the travel costs through the duration of the contract as no additional funding will be provided.

1.9 Quality

1.9.1 Quality Control Plan (QCP): The contractor shall develop and maintain an effective QCP to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure no recurrence of defective services.

The QCP is the means by which the work complies with stated requirements. The QCP shall be submitted to the Contracting Officer and COR within 30 days of contract award. After acceptance of the QCP, the contractor shall receive the CO’s acceptance in writing of any proposed change to his QC system. (CDRL A001 – See PWS Section 7, Technical Exhibit - Contract Deliverables Requirement List (CDRL)) – See Att 6 – CDRL Portfolio

1.9.2 Quality assurance (QA): The government will evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP) – see Att 7 – QASP Draft. This plan provides a systematic method for the Government to evaluate performance and to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.10 Contractor personnel

1.10.1 CAC requirements: For all contractors who will work in Government facilities, the Facilities Security Officer (FSO)/Company's Security point of contact (POC) will provide the Government all the required information per the DHA CAC request process current version 2.1, January 2018, or more recent when updated. A CAC is the standard identification for eligible DoD contractor personnel.

1.10.1.1 The contractor shall return all CACs to the COR upon the departure of the contractor(s).

1.10.2 Contractor onboarding and training. The contractor shall complete requirements training, and forms as prescribed in the following requirements:

1.10.2.1 See the DHA’s contractor training instructions at Part 7 for further guidance.

1.10.2.2 The contractor shall comply with onboarding requirements of the DHA for contractors needing to be issued CAC identification, including DoD- and DHA-directed training and forms submission, prior to network access, as displayed in the In/Out-Processing Portal at:

https://info.health.mil/cos/admin/hr/IO/SitePages/home.aspx (note: Public Key Infrastructure (PKI)-restricted, printed versions available). See Atts 9 – 7.1.1 DHA CAC Request Process, Att 10 – 7.1.1 DMDC TASS Application & Att 11 – 7.1.2 DHA Mandatory Training List.

1.10.3 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured.

1.10.4 Key control: Reserved.

1.10.5 Lock combinations: The contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the contractor’s

QCP.

1.11 Reporting

1.11.1 Contractor Manpower Reporting (CMR): Contractor Manpower Reporting (CMR):

Please refer to DFAR 252.204-7023 REPORTING REQUIREMENTS FOR CONTRACTED SERVICES (JUL 2021) and DFAR 252.204-7023 REPORTING REQUIREMENTS FOR CONTRACTED SERVICES--ALTERNATE I (JUL 2021) which are incorporated into the Contract for specific manpower reporting requirement.

1.11.2 Non-Disclosure Agreement (NDA): All contractor personnel who will obtain access to proprietary, classified, or confidential information or any information release of which is protected or governed by law or regulation associated with DHA acquisitions shall be required to complete and sign a DHA contractor NDA (DHA Form 49) prior to beginning work on the subject contract. The contractor shall execute an NDA on behalf of the company and shall ensure that all staff assigned to, including all subcontractors and consultants, or other personnel performing on contract/Task order execute an NDA protecting the procurement sensitive information of the Government and the proprietary information of other contractors. The NDA shall be executed not later than first day of employment and to be renewed upon exercising a contract option period. Assignment of staff who has not executed this statement or failure to adhere to this statement shall constitute default on the part of the contractor. The contractor shall maintain originally signed NDAs of individual employees and provide copy to the COR. See Att 17 – 7.2 DHA Form 49 Non-disclosure Agreement for further guidance.

https://info.health.mil/cos/admin/hr/IO/SitePages/home.aspx

1.11.3 Government’s COR: The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, specifications; monitor contractor's performance and notifies both the CO and contractor of any deficiencies; coordinate availability of government furnished property; and provide site entry of contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the contractor, states the responsibilities and limitations of the COR, especially regarding changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting contract.

1.11.4 Post award conference/periodic progress meetings: The contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with FAR Subpart 42.5. The CO, COR, and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings, virtually or in person, the CO will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action will be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.12 Key personnel (Contractor): The Contractor shall provide a contract manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the Contractor when the manager is absent shall be designated in writing to the CO.

The contract manager or alternate shall have full authority to act for the Contractor on all contract matters relating to daily operation of this contract. The contract manager or alternate shall be available between 8:00 a.m. to 4:30 p.m, Monday thru Friday except Federal holidays or when the Government facility is closed for administrative reasons.

The Knowledge Management Decision Support Manager is identified as Key Personnel. The minimum qualifications are:

- Education: a bachelor’s degree in a healthcare related field;

- Technical Experience: a minimum of five years’ experience in acquisition, strategic/operational planning, business process management, business operations, policy coordination, interpretation and dissemination, training, task management, information management, and related activities;

- Specific Task Related Experience and Abilities: preparing capability documentation (e.g., JRDs, ICDs, CDDs), CONOPs, PIs, point papers, fact sheets, requirements analysis, decision documents, and support of Program Reviews. Program Lead shall possess extensive knowledge of defense acquisition, JCIDS, DOTMLPF-P Change Recommendations.

Knowledge Management Decision Support Manager: Roles and responsibilities include having responsibility for personnel and ensuring daily tasks are completed in accordance with the guidance of government lead. The Knowledge Management Decision Support Manager is responsible for all document coordination in the Knowledge Management Decision Support Tool. The Knowledge Management Support Manager shall be on site and available between 0700 to 1500hrs Eastern, Monday through Friday except Federal holidays or when the government facility is closed for administrative reasons. Ad-Hoc and or Situational Telework shall be approved at the discretion of the government lead.

1.12.1. Key Personnel. Key Personnel proposed pre-award, or replacement Key Personnel (authorized in writing by the Contracting Officer), shall not be replaced for a period of twelve

(12) months after award, except for:

• Serious, prolonged illness (that onset after the Contractor's submission of that Key Person's resume to the Government);

• death;

• in the case of a Key Person who was a Contractor employee when the Contractor submitted his or her resume to the Government, the Key Person leaves the Contractor's employer for reasons other than retirement, and does not commence work for a Sub-contractor working on this contract, or commence work for the Contractor after a hiatus;

1.12.2. The Contractor agrees that it has a contractual obligation to mitigate the consequences of the loss of Key Personnel and shall promptly secure any necessary replacements in accordance with this PWS. Failure to replace a Key Person pursuant to this contract without a break in performance shall be considered a condition endangering contract performance and may provide grounds for termination.

1.12.3 Substitutions of Key Personnel proposed to the COR shall have qualifications equal to or superior to the Key Personnel minimum requirements contained in the RFP that resulted in this award. The Contractor shall submit those qualifications to the COR in writing (e.g., résumés, curriculum vitae) at least two (2) weeks (or as the COR otherwise agrees in writing) before Key Personnel may be replaced. Official approval of key personnel shall be made by the CO. No Key Personnel can be replaced without CO authorization and written notification from the COR. Substitute Key Personnel must submit necessary clearance information before commencing performance and with sufficient lead-time to avoid a break in performance of the subject labor category.

1.13 Contractor Identification

1.13.1 Contractor personnel performing services in a contractor capacity in a government facility are required to possess and wear an identification badge that displays his or her name and the name of their company. All contractor personnel shall identify themselves as contractor support personnel in all forms of communication with all entities with whom DHA/Deputy Assistant Director for Acquisition (DAD-A)/Head of the Contracting Activity (HCA) has business dealings. The contractor shall: Answer all telephone calls and have a personalized voice message with an introductory statement that includes the fact that the person is contractor support personnel. Ensure all those with whom the person interacts in any face-to-face dealings while supporting the DAD-A understands that the person is contractor support personnel. Include a title block in all emails that states the fact that the person is contractor support personnel.

Ensure all those with whom the person interacts in any face-to-face dealings while supporting DHA/DAD-A/HCA understands that the person is contractor support personnel.

1.13.2 Contractor personnel will be required to attend meetings or otherwise communicate with Government and/or other contract representatives to meet the requirements of this order.

Contractor personnel shall make their contractor status known during introductions.

1.13.3 Contractor personnel, while performing in a contractor capacity, are prohibited from using their retired or reserve component military rank or title in any written or verbal communications associated with the contracts in which they provide services.

1.14 Contractor Access to DHA Network(s)

1.14.1 FSO/Company's Security POC shall notify the DHA Personnel Security Office after being awarded a contract that requires access to a DoD system Contractor personnel requiring access to the HA/DHA networks for performance of their tasks require a background investigation and the security awareness training. The contractor shall be prepared for this process as it could take two (2) or more weeks. The FSO/Security POC shall submit a Standard Form (SF) 85/86 to DHA's Personnel Security Office for a background investigation.

1.14.2 Company's FSO/Security POC must notify the Personnel Security Office when the contractor has submitted the SF-85/86. The FSO/Security POC, or the COR must notify the DHA Personnel Security Office in writing of a contractor's termination from the contract, including the termination date.

1.15 Personnel Security

1.15.1 SIPRNET access is required to perform this contract. The COR shall identify contract employees that are required to have SIPRNET access. Secret clearance level is required for all personnel. As a Security requirement for this Secret SIPRNET request, a DD form 254 – See Att 8 will be completed and signed for all personnel. See the DD Form 254 located in Part 7 for further guidance. Location will be housed in the J5 Capability Management Division Office, Defense Health Agency (DHA), 7700 Arlington Blvd, Falls Church, Virginia, 22042.The Contractor shall not access, download or further disseminate any classified information from SIPRNET which is outside the scope of the defined contract requirements unless specifically authorized in writing by the Government Program manager. The contractor shall comply with DoD 8570.01-M, “Information Assurance Workforce Improvement Program, CH4” November 10, 2015 as amended; 8500.01, “Cybersecurity”, dated March 14, 2014; DoD Manual (DoDM) 6025.18, “Implementation of the Health Insurance Portability and Accountability Act (HIPAA) Privacy Rule Compliance in DoD Health Care Programs” dated March 3, 2019, Department of Defense Instruction (DoDI) 6025.18 “HIPAA Privacy Rule Compliance in DoD Health Care Programs”, dated March 13, 2019; and DoDM 5200.02 “Procedures for the DoD Personnel Security Program (PSP),” incorporation change 3, effective September 24, 2020. Contractor responsibilities for ensuring personnel security include, but are not limited to, meeting the following requirements:

1.15.1.1 Follow the DHA Personnel Security Office guidelines for submittal of security clearances. Contact the DHA Personnel Security Office for guidance on the appropriate background investigation required for personnel on the contract. The DHA Personnel Security Office can be reached at (703) 681-2286.

1.15.1.2 Initiate, maintain, and document personnel security investigations appropriate to the individual’s responsibilities and required access to Controlled Unclassified Information

(CUI).

1.15.1.3 DHA Personnel Security Office does not deny any access to any automated information system (AIS), network, or CUI. If a contractor receives an unfavorable background investigation, the request for access will be sent back to the FSO for further action. Any unfavorable adjudication will result in DHA Personnel Security Office not signing off on any access request.

PART 2

DEFINITIONS, ACRONYMS, AND APPLICABLE

PUBLICATIONS/INSTRUCTIONS

2.1 Definitions:

2.1.1 Category D: Information Technology (IT) and Telecommunications Services (called D- Services)

2.1.2 Category R: Support (Professional/Administrative/Management) Services (called R- Services)

2.1.3 Contracting Officer (CO): A person with the authority to enter, administer, and/or terminate contracts and make related determinations and findings.

2.1.4 Contracting Officer’s Representative (COR): An individual, including a contracting officer’s technical representative (COTR), designated and authorized in writing by the CO to perform specific technical or administrative functions. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.5 Non-personal services contract: a contract under which the personnel rendering the services are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the Government and its employees.

2.1.6 Quality Assurance Surveillance Plan (QASP): An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance. The Government may either prepare the QASP or require the offerors to submit a proposed quality assurance surveillance plan for the Government’s consideration in development of the Government’s plan.

2.2 Acronyms:

AIS Automated Information System AoA Analysis of Alternatives APL Approved Products List APL AQL Acceptable Quality Level ARRT Acquisition Requirements Roadmap Tool ATO Authority to Operate B2B Business-2-Business CAC Common Access Card CAE Component Acquisition Executive CAP Cloud Access Point CBA Capabilities Based Assessment CCEVS Common Criteria Cybersecurity Evaluation and Validation Scheme CDD Capability Development Document CDI Covered Defense Information

CDRL Contract Data Requirement List CE Computer Environment CIO Chief Information Officer CJCSM Chairman of the Joint Chiefs of Staff Manual CMMC Cybersecurity Maturity Model Certification CMR Contractor Manpower Reporting CNS Capabilities Needs Statements CNSSI Committee on National Security Systems Instruction CO Contracting Officer(s) COCOMS Combatant Commands CONOPS Concept of Operations CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTR Contracting Officer's Technical Representative CSP Cloud Service Provider CSSP Cyber Security Service Provider CUI Controlled Unclassified Information DAD Deputy Assistant Director DAD-A Deputy Assistant Director for Acquisition DAS Defense Acquisition System DC3 DoD Cyber Crime Center DD Form 254 Department of Defense Contract Security Requirement List (if applicable) DB Design-Build DBB Design-Bid-Build DFARS Defense Federal Acquisition Regulation Supplement DHA Defense Health Agency DHHQ Defense Health Headquarters DISA Defense Information System Agency DoD Department of Defense DoDD Department of Defense Directive DoDI Department of Defense Instruction DOTMLPF-P Doctrine, Organization, Training, Materiel, Leadership and Education, Personnel, Facilities, and Policy DSAs Data Sharing Agreements DSAA Data Sharing Agreement Application DMZ Demilitarized Zone DoDM Department of Defense Manual DPCLO DHA Privacy and Civil Liberties Office DUA Data Use Agreement eMSM Enhanced Multi-Service Markets EULA End User License Agreement EVM Earned Value Management FAR Federal Acquisition Regulation FCI Federal contract information FE Facilities Enterprise FedRAMP Federal Risk Authorization and Management Program

FISMA Federal Information Security Modernization Act FRCS Facility Related Control Systems FSO Facilities Security Officer HA Health Affairs HIPAA Health Insurance Portability and Accountability Act HCA Head of the Contracting Activity HIT Health Information Technology IGCE Independent Government Cost Estimate IA Information Assurance ICD Initial Capability Document IO Initial Outfitting I/O In/Out Processing Portal IPv Internet Protocol Version IS Information System ISP Internet Service Provider IT Information Technology ISCM Information Security Continuous Monitoring IV&V Independent Verification & Validation JCIDS Joint Capabilities Integration & Development System KMDS Knowledge Management Decision Support MedCOI Medical Community of Interest MHS Military Health System MIL-STD Military Standard MTFs Military Treatment Facilities NCR National Capitol Region NDA Non-Disclosure Agreement NIAP National Information Assurance Partnership NIST National Institute of Standards and Technology OCONUS Outside Continental United States (includes Alaska and Hawaii) ODC Other Direct Costs OJSS Office of the Joint Staff Surgeon OPM Office of Personal Management OSD Office of the Secretary of Defense P-ATO Personal Authorization to Operate P&R Personnel and Readiness PGI Procedures, Guidance and Information PDT Project Delivery Team PHI Protected Health Information PI Procedural Instruction PII Personally Identifiable Information PIT Platform Information Technology PK Public Key PKI Public Key Infrastructure POA&M Plan of Action and Milestones POC Point of Contact PMO Program Management Office

PoP Period of Performance PP Personal Property PPBE Planning, Programming, Budgeting, and Execution PPSM Ports, Protocols, and Services Management PRS Performance Requirements Summary PSP Personnel Security Program PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Plan RFP Request for Proposal RFQ Request for Quotation RMF Risk Management Framework SIPRNet Secret Internet Protocol Router Network SME Subject Matter Expert SP Special Publication SPRS Supplier Performance Risk System SRM Sustainment, Restoration and Modernization SRG Security Requirements Guides STIG Security Technical Implementation Guides TOS Terms of Service US United States UFC Unified Facilities Criteria VPN Virtual Private Network XML Extensible Markup Language

2.3 Applicable Publications, DHA Administrative Instructions (AI), etc.

PART 3

3.0 GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

The Requiring Activity Authority has assessed the need for Government Furnished Property, Equipment, and Services and determined:

3.1 Services: The Government:

� Will NOT provide Government Furnished Services in support of this contract/task order. As a result, this paragraph is Not Applicable.

☒ WILL provide Government Furnished Services required in support of this contract/task orders. These Services are described below:

The government DHA J6 will provide IT Services to support the government issued technologies (e.g., laptop) or other issues related to the government provided facilities (e.g., workspace) as well as maintain a listing of all furnished GFE’s. Guidance contained in Part 7 for all GFE equipment as well as storage on the PIEE/GFP Module portal.

3.2 Facilities: The Government:

� Will NOT provide Facilities in support of this contract/task order. As a result, this paragraph is Not Applicable.

☒ WILL provide Facilities in support of this contract/task orders. The Government provided Facilities are described below:

The work shall be performed at the Defense Health Headquarters in Falls Church, Virginia.

Specifically, J5 Capabilities Management Division, Defense Health Agency (DHA), 7700 Arlington Blvd, Falls Church, Virginia, 22042. Workspace will be provided to the contractor staff to include desk space, telephones, computers, and other items necessary to maintain an office environment.

3.3 Utilities: The Government:

☒ Will NOT provide Utilities in support of this contract/task order. As a result, this paragraph is Not Applicable.

� WILL provide Utilities in support of this contract/task orders. The Government provided Utilities are described below:

3.4 Equipment: The Government:

� Will NOT provide Equipment in support of this contract/task order. As a result, this paragraph is Not Applicable.

☒ WILL provide Equipment in support of this contract/task orders. The Government provided Equipment is described below:

The Government will provide telephones, facsimile machines, copiers and computer equipment to include laptops for use in performance under this contract/task order. This equipment is authorized for transaction of official Government business only and shall not be used for personal business. Telephones, facsimile machines and computer equipment to include laptops are always subject to communications security monitoring. Contractor and subcontract employees may be issued keys signed for at scheduled and unscheduled key control inspections.

The contractor shall be required to reimburse the Government for lost keys, or lockset (if lockset is required to be replaced) as a result of lost keys. The cost of replacement of keys/locksets may be deducted from payments to the contractor. Items issued will remain the property of the Government and the contractor will maintain proper accountability of issued equipment.

Equipment shall not be removed from the facilities shown in paragraph 3.2 above, unless otherwise specified in the PWS. They are to be used, turned in and/or disposed of as directed by the COR or CO.

3.4.1 Procurement Integrated Enterprise (PIEE), Government Furnished Property (GFP) Module Application

The contractor shall be responsible for obtaining and maintaining access, training and successful operation of the PIEE/GFP Module application for the entirety of the contract/task order PoP.

The PIEE GFP Module application is located at the following website: https://wawf.eb.mil/piee-landing/. Access to PIEE/GFP Module application training materials and in-depth information applicable to the contractor’s responsibilities regarding GFP can be found at the following website: https://dodprocurementtoolbox.com/.

Contracting Office Responsibilities:

The Contracting Office shall ensure close coordination and validation of the GFP items with the COR and DHA Accountable Property Officer prior to uploading the GFP Attachment into the PIEE/GFP Module. At the time GFP is anticipated and identified, the Government will upload the GFP Attachment into the PIEE/GFP Module. COR will follow and adhere to guidance set forth and established in PIEE such as ensuring accuracy of Invoices via contained within in the module. It is the COR’s responsibility to prepare, upload and maintain the GFP Attachment in the PIEE/GFP Module in accordance with the GFP Attachment instructions provided at the DoD Procurement Toolbox. The CO and COR shall manage and keep an inventory of any GFP associated with contract/task orders awarded through DHA, in accordance with applicable FAR Part 45, DoD FAR Supplement (DFARS) 245 with respective clauses, DHA AI 095 and PD 45- 01 following the change in disposition of items listed on that PIEE/GFP Module Attachment.

The contracting office will also review, acknowledge, reject and/or approve shipment orders provided by the contractor as appropriate. Functional roles can be determined within the Contracting Office and requested within the PIEE/GFP Module system.

https://wawf.eb.mil/piee-landing/ https://wawf.eb.mil/piee-landing/ https://dodprocurementtoolbox.com/

Contractor Responsibilities:

A key contractor responsibility is to work with the CO and COR to ensure the PIEE/GFP Module data, to include the PIEE/GFP Attachment, provides a timely, complete and accurate accounting of the GFP applicable to the contract/task order. Contractors are required to report the receipt of any GFP shipped to them, regardless of whether it is listed on the GFP Attachment for their contract. Similarly, contractors are required to utilize the GFP Module application in conjunction with the shipment of GFP to the Government or in reporting Property Loss of GFP issued (such as destruction or loss). Discrepancies or disputes regarding property shipped to or shipped from the contractor must be reported via the GFP Module application, with the CO having authority over final designation of status.

The contractor shall report semi-annually 100% inventories, reconciliations, and final disposition of GFP provided by the government. Final invoices will not be paid pending GFP reconciliation.

Contractors shall be aware of and ensure compliance with applicable FAR Part 45, DFARS 245 and 252.245, Defense Pricing and Contracting Policies, Procurement Integrated Enterprise Environment Standards, DHA Administrative Instruction 094 and DHA Guidance.

3.5 Materials: The Government:

☒ Will NOT provide Materials in support of this contract/task order. As a result, this paragraph is Not Applicable.

� IS providing Materials in support of this contract/task orders. The Government-provided Materials are described below:

PART 4

4.0 CONTRACTOR FURNISHED ITEMS AND SERVICES

4.1 General: The contractor shall furnish all supplies, equipment, facilities and services required to perform work listed under Section 5 of this PWS.

4.2 Secret Facility Clearance: All contractor personnel are required to have a “Secret level security and will have access to the Office Secure Space for the purpose of attending Capabilities Requirements meetings and require a Visitor Access Request (VAR) as well as DD254 upon onboarding. All personnel will be required to obtain token access for Secret Protocol Router Network (SIPRNet) email in Knowledge Management Decision Support (KMDS) and this will take three (3) to five (5) weeks. See Onboard Checklist located in Part 7 for further reference.

4.3 Materials: The contractor shall furnish the materials necessary for telework when applicable.

4.4 Equipment: The contract shall furnish the equipment necessary for telework outside of the equipment provided by the government when applicable.

4.5 Facilities: The contractor shall furnish the facilities and/or workspace necessary for telework when applicable.

PART 5

5.1 SPECIFIC TASKS - Define the process for developing capability documents for developmental capabilities/programs in coordination with Service Combat Developers, Combatant Commands (COCOMS), and the Office of the Joint Staff Surgeon (OJSS)

5.1.1 Define and Document the Processes for Joint Requirements Development and Management in Support of the Agency’s requirements.

5.1.1.1 DHA is committed to developing, continually improving, documenting and training processes necessary to deliver capability documents in coordination Service Combat Developers, COCOMs, and the OJSS that enables the Military Health System (MHS) to meet its performance objectives.

5.1.1.2 The contractor shall complete the following tasks:

5.1.1.3 Organize and lead a summit or conference for Service Combat Developers to collaborate and define the scope and way forward for the joint requirements processes.

5.1.1.4 Support the J5 Capabilities Management Division to develop and document joint requirements processes and procedures in coordination Service Combat Developers, COCOMs, and the OJSS.

5.1.1.5 Assist with the development and documentation of processes associated with analyzing, planning, developing, approving, and implementing joint requirements and mission capabilities.

5.1.1.6 Orient and train those who will be involved in executing the processes.

5.1.1.7 Monitor and measure process execution, identifying opportunities for improvement.

5.1.2 Support Joint Capabilities Integration and Development System (JCIDS) Processes.

5.1.2.1 Strategic Planning. Personnel shall support the Capabilities Development Requirements Office in the development of the concepts and approaches to deliver JCIDS documentation in coordination with Service Combat Developers, COCOMs, and the OJSS. The contractor shall capture these strategic planning concepts in the form of a Procedural Instruction (PI), Concept of Operations (CONOPS), or other suitable strategic planning document. The document will be revised periodically, as the situation warrants. Contractor deliverable updates will be provided by the Program Manager on a monthly basis (Microsoft Word) as well as Microsoft Excel addressing specific projects and associated milestones. (CDRL 01 – See PWS Section 7, Technical Exhibit - Contract Deliverables Requirement List (CDRL)) – See Att 6 – CDRL Portfolio

5.1.2.2 Personnel shall provide analytical and strategic planning support to each Joint capability, as required, in support of the full spectrum capabilities approach for requirements and capability development. The Contractor shall document the analysis, findings and recommendations in the form of White Papers, briefings, diagrams, and other appropriate communication formats. The

Contractor shall provide Enterprise level vision, analysis, synthesis and thinking in the performance of this task.

5.2 Improve the process for developing capability documents for developmental capabilities/programs in coordination with Service Combat Developers, COCOMS, and

OJSS

5.2.1 Refine and Maintain Processes for Joint Capability Requirements Development (JCID’s) and Management

5.2.1.1 Personnel shall review and analyze current MHS processes and tools for requirements development and management, including processes associated with initial capability analysis and governance (provided at during the initial kick-off meeting). The Contractor shall make recommendations for improvements to processes and implementing procedures and shall document approved processes and procedures. The documentation may take many forms, including briefings, diagrams, reports, PI, CONOPS, JCIDS requirements trace matrices. The key principle is a full spectrum healthcare approach to requirements development, to address mission needs. The Contractor shall utilize the Chairman Joint Chiefs of Staff Instruction (CJCSI 3170.01H) for guidance in performing this task Contractor deliverable updates will be provided by the Program Manager on a monthly basis (Microsoft Word) as well as Microsoft Excel addressing specific projects and associated milestones. (CDRL 02 – See PWS Section 7, Technical Exhibit - Contract Deliverables Requirement List (CDRL)) – See Att 6 – CDRL Portfolio

5.2.1.2 Performance of this task will require the Contractor to coordinate with J5 Capabilities Management Division as the requirements management processes involve both the DHA, Service Combat Developers, COCOMS, and OJSS. It will require the Contractor to actively participate on teams that will be formed to recommend improvements that supports DHA.

5.2.1.3 The Contractor shall continually recommend improvements as required to improve performance.

5.2.1.4 The Contractor shall use process improvement best practice techniques (e.g., Lean Six Sigma) in the performance of this task, including market research.

5.2.2 Measure, Evaluate and Report on Joint Capability Requirements Development and Management Processes

5.2.2.1 The Contractor shall develop a plan and with metrics to measure, the effectiveness of the Requirements Development and Management Processes described in Subtask 1. The plan will inform leadership of task completion and be reported on a quarterly basis. Contractor deliverable updates will be provided by the Program Manager on a monthly basis (Microsoft Word) as well as Microsoft Excel addressing specific projects and associated milestones. (CDRL 03 – See PWS Section 7, Technical Exhibit - Contract Deliverables Requirement List (CDRL)) – See Att 6 – CDRL Portfolio. The metrics shall be selected and designed to measure the achievement of value-added outcomes. Once approved by the DAD CCOS Requirements Office, the Contractor shall execute the plan, measure and report the results on a quarterly basis. The

Contractor shall make recommendations to the J5 Capabilities Management Division on areas of the process that are candidates for improvement.

5.2.2.2 The metrics and results may be reported in various formats, including reports, graphs, briefings, and dashboards.

5.2.2.3 The Contractor shall use generally accepted measurement and analysis techniques and tools in the performance of this task.

5.2.3 Provide Doctrine, Organization, Training, Materiel, Leadership and Education, Personnel, Facilities, and Policy (DOTMLPF-P) Analysis Support

5.2.3.1 The Contractor shall provide additional analytical and administrative support necessary to provide the MHS with a full-spectrum requirements development function via DOTMLPF-P analyses within or, on a standalone basis from, the formal JCIDS process. Outputs of the JCIDS process are used to facilitate Doctrine, Organization, Training, Materiel, Leadership and Education, Personnel, Facilities, and Policy (DOTMLPF-P) change recommendations, to drive the Defense Acquisition System (DAS), and to inform the Planning, Programming, Budgeting,…