Attach 20 SOO Appendix E - DES TO1 PWS template 120320.docx

APPENDIX E - PERFORMANCE WORK STATEMENT (PWS)

DISA DEFENSE ENCLAVE SERVICES

Task Order #001

As of MM/DD/YYYY

Contract Number:

Task Order Number:

Contractor Name:

1. Contracting Officer’s Representative (COR).

a. Primary COR.

*To be provided at time of award in the Points of Contacts Clause.

b. Alternate COR.

*To be provided at time of award in the Points of Contacts Clause.

c. Property Administrator

*To be provided at time of award in the Points of Contacts Clause.

2. Contract Title. Defense Enclave Services – Task Order #001

3. Background. The Defense Information Systems Agency (DISA) is centralizing Common Use information technology (IT) infrastructure for the Department of Defense’s Fourth Estate (DoD 4th Estate) agencies. The Defense Enclave Services (DES) contract will unify the 4th Estate’s Common Use IT systems, personnel, functions, and program elements associated with the support of those systems and technologies under a Single Service Provider (SSP) architecture managed, operated, and supported by DISA.

4. Objectives: DISA desires to partner with industry to provide commercial IT services, decrease redundant IT costs, enhance cybersecurity posture, and standardize IT services across disparate networks. Defense Enclave Services will unify the 4th Estate’s Common Use IT systems, personnel, functions, and program elements associated with the support of those systems and technologies under a Single Service Provider (SSP) architecture managed, operated, and supported by DISA.

5. Scope. DES will provide all required transition support, infrastructure, network operations and management, engineering and innovation, cybersecurity support services, and technical refresh for a SSP network environment with all 4th Estate users. The network will consist of Non-classified Internet Protocol Router Network (NIPRNet) and Secure Internet Protocol Router Network (SIPRNet) domains, and will use the DISA DoDNet as the technical baseline for standardization between agencies upon transition.

A total of five 4th Estate agencies have been identified to be included in this 4ENO effort. Two agencies (DTIC and DPAA) and DISA will require only sustainment services, as migration will be completed under a separate DoDNet Services contract awarded in FY2020.

Defense Information Systems Agency (DISA)

The Government may require surge support during the base or any option period, and surge modifications will be within the scope of the contract and provide increased support for the defined task areas of this PWS. Surge support over the life of the contract will not exceed 40% of the contractor’s total proposed cost/price for the base and all option periods, excluding any six-month extension of services pursuant to FAR 52.217-8.

Performance Area 1 – Contract Administration and Program Management

Performance Area 2 - Application Hosting

- Access to Virtual Server Hosting

- Dedicated Server Hosting

- Software Management

Performance Area 3 - Storage Services

- Basic Storage/Shared Devices

- Virtual Server Storage

Performance Area 4 - Cyber Security

- Authorizing Official

- Auditing Support

- Access Control Services

- Certification & Accreditation

- Credentials Management

- Endpoint Security

- Firewalls

- Identity Management (IdM)

- Incident Reporting

- Network Security

- Patching Services

- Scanning Services

- Software Assurance

Performance Area 5 - End User Support

- Collaboration/UC Services

- Conference Room A/V Support

- End User Computing Devices

- End User Voice Devices

- Scanners/Peripherals

- Software Licenses

- Workstation Support

Performance Area 6 - Video Services

- IP TV

- Video on Demand

Performance Area 7 - IT Services Management

- Backup & Storage

- Change & Configuration

- Database Management

- Data Sharing

- IT Asset Management

- IT Performance Management

- IT Portfolio Management

- IT Training Materials

- Life Cycle Management

- Network Operations

- Network Operations Center (NOC)/ Security Operation Center (SOC)

- Release & Deployment

- Request Fulfillment

Performance Area 8 - Message and Directory Services

- Active Directory/GAL Services

- Fax Capability

Performance Area 9 – Network Access Services

- Cabling Termination

- Circuits - Engineering

- De-Militarized Zone (DMZ)

- DNS & DHCP

- Internet Access Point (IAP)

- Network Infrastructure

- Network Monitoring

- NIPRNet/SIPRNet

- Organization LAN (COI/VRF)

- Remote Access/VPN

- Wireless Network Services

- Virtual Desktop Infrastructure (VDI)

6. Performance Requirements.

6.1 Task 1 – Contract Administration and Program Management Support. The Contractor shall provide overall administration of this task order and holistically support DISA and its mission partners throughout the contract period of performance. The Contractor shall ensure the necessary support is provided for the following activities:

Post Award Orientation Meeting Transition Plan Integrated Master Schedule Program Management Plan Quality Control Monthly Status Reports Quarterly Review Briefs

{NOTE: Subtasks within Task 1 may be combined in proposal}

6.1.1 Subtask 1 – (Insert Title). (Description)

6.1.2 Subtask 2 – (Insert Title). (Description)

Deliverables:

6.X

6.X.1

6.X.2

6.X.3

6.X.x

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the KO; 1 copy of the transmittal letter with the deliverable to the Primary COR.

All deliverable frequencies/location may be modified upon mutual Government and Contractor agreement which has been coordinated with the COR.

Unless otherwise noted, all days are business days.

6.2 Task 2 – Title. (Description)

6.2.1 Subtask 1 – (Insert Title). (Description)

6.X

6.X.1

6.X.2

6.X.3

6.X.x

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the KO; 1 copy of the transmittal letter with the deliverable to the Primary COR.

All deliverable frequencies/location may be modified upon mutual Government and Contractor agreement which has been coordinated with the COR.

Unless otherwise noted, all days are business days.

6.3 Task 3 – Title. (Description)

6.3.1 Subtask 1 – (Insert Title). (Description)

6.X

6.X.1

6.X.2

6.X.3

6.X.x

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the KO; 1 copy of the transmittal letter with the deliverable to the Primary COR.

All deliverable frequencies/location may be modified upon mutual Government and Contractor agreement which has been coordinated with the COR.

Unless otherwise noted, all days are business days.

6.4 Task 4 – Title. (Description)

6.4.1 Subtask 1 – (Insert Title). (Description)

Deliverables:

6.X

6.X.1

6.X.2

6.X.3

6.X.x

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the KO; 1 copy of the transmittal letter with the deliverable to the Primary COR.

All deliverable frequencies/location may be modified upon mutual Government and Contractor agreement which has been coordinated with the COR.

Unless otherwise noted, all days are business days.

7. Performance Standards.

The Contractor shall deliver services in accordance with Table 2 - Network Operations below.

Table 2 - Network Operations

8. Incentives. This is a firm fixed priced contract with no monetary incentives. Performance (positive or negative) will be rated in the Contractor Performance Assessment Reporting System (CPARS). The Government shall document positive performance. Negative CPARS assessments will be used to document performance which fails to meet the stated performance standards. Negative performance will also be considered by the Government when determining whether the exercise of an option is in the Government’s best interests.

This will normally be in writing unless circumstances necessitate verbal communication. The COR shall document the discussion and place it in the COR file and provide a copy to the KO.

9. Place of Performance. The primary place of performance is the DISA Headquarters (HQ) facility located at 6910 Cooper Avenue on Fort George G. Meade (FGGM) with normal business hours defined as 0800 - 1600 EST and includes support locations listed in Appendix B. Prior written COR approval is required to perform work from any location other than the primary place of performance. Additional travel within CONUS or OCONUS to DISA and DAFA locations is required to support the requirements of this PWS. Travel will be considered local travel within 50 miles of the individual’s main place of performance/duty station and will not be reimbursed. The government shall not reimburse for local travel between the contractor facility (or facilities) and the DISA facility at Ft. Meade, MD. Non-local travel shall be prior approved in writing by the COR prior to the travel occurring.

Alternate Place of Performance - Contingency Only. As determined by the Contracting Officer’s Representative (COR), contractor employees may be required to work at an alternate place of performance (e.g., home, the contractor's facility, or another approved activity within the local travel area) in cases of unforeseen conditions or contingencies (e.g., pandemic conditions, exercises, government closure due to inclement weather, etc.). Additionally, the contractor may be required to account for the whereabouts of their personnel should this information be requested by the COR. Non-emergency/non-essential contractors should not report to a closed government facility. Contractor shall prepare all deliverables and other contract documentation utilizing contractor resources. To the extent possible, the contractor shall use best efforts to provide the same level of support as stated in the PWS. In the event the services are impacted, reduced, compromised, etc., the Contracting Officer or the contractor may request an equitable adjustment pursuant to the Changes clause of the contract.

10. Period of Performance.

The period of performance for this task order will consist of a 1-year base period with four, 1-year option periods.

11. Security Requirements.

The contractor shall coordinate site visits with site POCs at least 72 hours prior to requiring any site access. Contractor personnel without security clearances performing any task under this PWS must be escorted by Government personnel who are cleared.

This section shall be considered a supplement to Block 13 of the Government provided DD Form 254, DoD Contract Security Classification Specification. The following security requirements shall apply to this effort.

SCI Requirements:

The Information Technology work to be performed under this Task Order is up to and including the Top Secret US Government Sensitive Compartmented Information (SCI) level and up to and including positions with IT-I level for systems access. This PWS specifies performance levels via Section 7 under Performance Standards. The vendor performing this work is not required to provide the Government specified staffing levels, nor will the Government dictate ways and means for the Contractor’s achievement of these Performance Standards. Based on this is, it is anticipated that SCI access will be restricted to the Contractor’s performance in the following areas:

- Task Area 6.X, Cable plant and wireless infrastructure support at DISA.

Cable plant support requires access into all SCI Telecommunication Rooms (TRs) at DISA HQ Fort Meade, the JWICS Computer Equipment Room, and SCI areas in Command Building for cable survey, installation, repair, and maintenance. After-hours/weekends access to the TRs are also required in order to troubleshoot network connectivity issues (from the wall jack to the patch panels) during network outages.

All other IT Contractors that require elevated or administrative privileges in order to execute their responsibilities as stated in this Task Order will require a Secret clearance and IT-I or IT-II Access level per DoD 8570 per table in Section 11.2. All personnel assigned to positions with cybersecurity components must comply with the requirements of the DoD 8570.1-M. All Contractor personnel performing services under this contract shall be required to have the appropriate U.S. Government security clearance and/or ADP Sensitivity Level. The Contractor shall forward a Visit Authorization Letter (VAL) to the Task Order COR listed at beginning of this Task Order for all employees two weeks prior to the beginning of the Task Order period of performance and as new Contractor employees are assigned to the contract. Courier letter/card will be issued to tier-III Contractors, limited to 2 per work shift to transport classified (at the secret level) configuration file and hardware tot remote sites within the NCR for trouble-shooting and restoration of a network outage.

References:

a. DISA Form 786, DISA Statement of Information System Use and Acknowledgement of User Responsibilities – Basic User

b. DISA Policy Letter, Unauthorized Connections to Network Devices, 11 September 2013

c. DISA Instruction 240-110-8, Information Security

d. DISA Instruction 240-110-36, Personnel Security

e. DISA Instruction 240-110-38, Industrial Security

f. DISA Instruction 240-110-43, Insider Threat Program

g. DISA Instruction 630-230-19, Cybersecurity

h. DoDM 5200.01, Vol 1-4 Information Security Program, 24 February 2012

i. DODM 5200.02, Procedures for the DoD Personnel Security Program, 3 April 2017

j. DOD 5220.22-M, National Industrial Security Program Operating Manual, February 2006 Incorporating Change 02 May 2016

k. DoD Manual 5105.21 Sensitive Compartmented Information Administrative Security Manual: Administration of Information and Information Systems Security

11.1 Facility Security Clearance. The work to be performed under this task order is up to the Top Secret level and will require Sensitive Compartmented Information (SCI) access eligibility for some personnel. The company must have an interim Top Secret Facility Clearance from the Defense Counterintelligence and Security Agency Facility Security Branch and submit proof at time of proposal submission.

11.2 Security Clearance and Information Technology (IT) Level. All personnel performing on or supporting a DISA contract/order in any way shall be U.S. citizens. The personnel security requirements for this contract/order cover the individuals supporting the Task Areas delineated in the table below. Contractor personnel must possess the interim or final security clearance and interim or final IT-level eligibility delineated in the table below when performance starts.

11.2.1 Individuals supporting PWS Tasks/Subtasks that require a final Top Secret SCI security clearance and a final IT-I (privileged level systems access) will, immediately upon hire, require SCI access eligibility adjudicated by the Department of Defense Consolidated Adjudication Facility or other federal adjudications facility to perform their duties. SCI processing for SCI eligibility will be coordinated with the supporting Government Security Manager and will begin immediately upon start of duty performance under this contract/order.

All SCI* work under this contract/order will be monitored by COR/ACOR.

*The COR/ACOR must be indoctrinated into SCI to monitor the work.

11.3 Investigation Requirements. All personnel requiring SCI, Top Secret, or IT-I access under this contract/order shall undergo a favorably adjudicated Tier 5 (T5) investigation (formerly known as a Single Scope Background Investigation (SSBI)) as a minimum requirement. The T5 will be maintained current within 6-years and requests for Tier 5 reinvestigation (T5R formerly known as Single Scope Background Period Reinvestigation (SBPR) or Phased Periodic Reinvestigation (PPR)) will be initiated prior to the 6-year anniversary date of the previous Tier 5.

11.3.1 All personnel requiring Secret or IT-II access under this contract/order shall undergo a favorably adjudicated Tier 3 (T3) Investigation formerly known as a National Agency Check, Local Agency Check and Credit Check or Access National Agency Check and Inquiries as a minimum investigation. The Tier 3 Investigation will be maintained current within 10-years and requests for Secret Periodic Reinvestigations will be initiated by submitting a Tier 3R investigation prior to the 10-year anniversary date of the previous Tier 3 Investigation.

11.3.2 The contractor is required to have personnel cleared with an interim or final Top Secret/IT-I, Top Secret/IT-II, Secret/IT-I or Secret/IT-II (as specified in the table located in section 11.2) at contract start date. If contractor personnel is replaced during performance of the contract, replacement personnel should also have interim or final clearance Top Secret/IT-I, Top Secret/IT-II, Secret/IT-I or Secret/IT-II (as specified in the table located in section 11.2).

11.4 Adjudication for IT-I access. Favorable Adjudication of any previous T5, T5R, SSBI, SBPR or PPR by any of the DoD Central Adjudication Facility or other federal adjudications facilities within a six year period will be automatically accepted for final IT-I access.

11.4.1 Prior to granting interim IT-I authorization, the supporting security manager will forward a written request for interim IT-I authorization to DISA PSO for approval. The request for SSBI (e-QIP, FBI name and fingerprint check) must be submitted by DISA PSO to the OPM.

11.5 Visit Authorization Letters (VAL). Visit requests shall be processed and verified through the Joint Personnel Adjudication System (JPAS) to SMO DKABAA10.

JPAS visits for contracts/orders are identified as “Other” or “TAD/TDY” and will include the Contract/Order Number and ADP/IT-Access level of the contract/order in the Additional Information section. Contractors that do not have access to JPAS may submit visit authorizations by e-mail in a password protected .pdf to the Contracting Officer Representative (COR) or Alternate COR specified in Section 1.0.

If JPAS is not available, the VAL must contain the following information on company letterhead

· Company name, address, telephone number, facility security clearance

· CAGE CODE

· Contract/Order Number

· Name, SSN, date and place of birth, and citizenship of the employee intending to visit

· Certification of personnel security clearance and any special access authorizations required for the visit (type of investigation & date, adjudication date & agency, and IT access level)

· Name of COR/Alt COR

· Dates or period the VAL is to be valid

11.6 Security Contacts. DISA Security Personnel can be contacted for Industrial or Personnel Security related issues at (301) 225-1235 or via mail at:

For Center or Directorate-specific security related matters, contact the Directorate or Center Security Manager at:

*Additional points of contact to be added at time of award.

11.7 Information Security and other miscellaneous requirements.

11.7.1 Contractor personnel shall comply with all local security requirements including entry and exit control for personnel and property at the government facility.

11.7.2 Contractor employees shall be required to comply with all Government security regulations and requirements. Initial and periodic safety and security training and briefings will be provided by Government security personnel. Failure to comply with Government security regulations and requirements shall require the company to provide the Government with a written remediation/corrective action plan; furthermore, failure to comply with such requirements can be cause for removal and the contractor will not be able to provide service on this contract/order.

11.7.3 Contractor employees with an incident report in JPAS who have had their access to classified suspended will not be permitted to fill positions requiring access to classified information on a DISA contract/order.

11.7.4 The Contractor shall not divulge any information, classified or unclassified, about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the DoD facility. Identification shall be worn and displayed as required.

11.7.5 DISA retains the right to request removal of contractor personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government.

11.7.6 Contractor personnel will generate or handle documents that contain For Official Use Only information at the Contractor and/or Government facility. Contractor personnel will generate or handle documents that contain Proprietary, Contract Sensitive, or similarly designated information at the Contractor and/or Government facility. Contractor personnel will have access to, generate, and handle classified material up to the Secret only at the contractor location(s) and up to the Top Secret SCI only at the government location(s) listed in the place of performance section of this document. All contractor deliverables shall be marked in accordance with DoDM 5200.01, Vol. 3, Vol. 4, Information Security, DoDM 5400.07, Freedom of Information Act Program, unless otherwise directed by the Government. The contractor shall comply with the provisions of the DoD Industrial Security Manual for handling classified material and producing deliverables. The contractor shall comply with DISA Instruction 630-230-19, Cybersecurity.

11.7.7 The Contractor shall afford the Government access to the contractor’s facilities, installations, operations, documentation, databases and personnel used in performance of the contract/order. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability and confidentiality of data or to the function of information technology systems operated on behalf of DISA or DoD, and to preserve evidence of computer crime.

12. Government Furnished Property (GFP)/Government-Furnished Equipment (GFE)/ Government-Furnished Information (GFI).

The GFP, GFE, and GFI to be provided will be determined by the COR. In addition to providing workstations, the Government will furnish a capability to track and manage problem and incident tickets; the Government currently utilizes BMC Remedy ITSM tools, but reserves the right to migrate to another tool at any time during performance of this contract.

12.1 Contractor Access: DISA will provide the Contractor access to the applicable Local Area Network(s), Personal Computer(s) necessary to accomplish the work tasked under this contract/order. The Contractor, in coordination with the Customer, will be responsible for obtaining appropriate approvals for access.

12.2 GFI Listing: A listing of GFI will be provided to the Contractor after contract award and will be maintained by the COR.

12.3 Laptops and Mobile Devices will follow the following GFP process. The GFP provided to the Contractor may include, but is not limited to, laptops and mobile devices to perform the services needed under this contract/order.

The GFP to be provided will be determined by the COR. The Contractor shall manage GFP IAW Federal Acquisition Regulation (FAR) Part 45 and Defense FAR Supplement (DFARS) Part 245 and associated clauses incorporated in this contract. The Contractor shall include a complete list of all GFP within the Contractor's Monthly Status Report for verification by the COR and/or Property Administrator. The list shall include Item name, Item Description, NSN, Cage, Part #, Model #, Serial #, UII, QTY, Unit of Measure, Unit Cost, and indication of Use As Is. It is mandatory that the format be completed to the maximum extent possible.

Government-Furnished Equipment (GFE). The Government will provide the following:

· Configured desktop or laptop computers for all contractor personnel required to access DoDNet

· Peripherals to include monitors, mouse devices, docking stations and keyboards.

· Phones, and supporting standard office equipment such as copiers, fax machines, etc. at Government Locations for on-site contractor personnel only.

13. Other Pertinent Information or Special Considerations.

a. Identification of Possible Follow-on Work. Additional support services for network migration, operations, management and sustainment may be identified prior to the end of this task order.

b. Identification of Potential Conflicts of Interest (COI). The Contractor(s) providing support on this contract/order may be assisting the Government to establish requirements for new system and/or IT capabilities. Contractor(s) must identify any actual or potential organizational Conflict of Interest (COI) and its plan to avoiding, neutralizing or mitigating such conflicts.

c. Identification of Non-Disclosure Requirements.

A DISA Non-Disclosure Agreement (NDA) must be completed by each employee prior to commencement of the work.

d. Inspection and Acceptance Criteria. Deliverable Inspection and Acceptance Criteria procedures are detailed in the Quality Assurance Surveillance Plan (QASP).

e. Property Accountability. There will be no procurement of hardware, firmware, or software systems. With regards to government furnished equipment provided to the Contractor (e.g. workstations to be imaged) the Contractor shall comply with DISAI 270-165-8, https://disa.mil/~/media/Files/DISA/About/Publication/Instruction/di2701658.pdf.

The contractor shall submit the Consolidated Product Listing in addition to complying with all requirements of DFARS 252.211-7003. See DITCO Additional Text H2, Requirement to Submit an Electronic Product List for additional information.

f. Transitioning.

1. Transition-In (Phase In). Fifty percent total staffing must be complete within two weeks of the start of the PoP and 100 percent within 30 calendar days.

2. Transition-Out (Phase Out). The Contractor shall collaborate with the Government at least 120 calendar days or sooner, prior to the end of the contract, to develop a transition-out plan IAW FAR 52.237-3.

g. Supply Chain Risk Management (SCRM).

This contract and its associated delivery/task orders are subject to the Federal SCRM policies and regulations including the Defense Federal Acquisition Regulation Supplement (DFARS) 252.239-7017 Notice of Supply Chain Risk, DFARS 252.239-7018 Supply Chain Risk, DoD Instruction 5200.44 Protection of Mission Critical Functions to Achieve Trusted Systems and Networks, Section 806 of theFY2011 NDAA Requirements for Information Relating to Supply Chain Risk, and internal DISA SCRM Processes and Procedures.

The contractor shall submit a SCRM plan as part of its technical proposal that describes how the contractor will reduce and mitigate Supply Chain Risk using the security controls outlined below (further described in CNSSI 1253, Appendix D and NIST SP 800-53), as applicable to your contract.

Control Number

*Not required if there will be no procurement of hardware, firmware, or software systems.

SUPPLY CHAIN RISK MANAGEMENT PLAN UPDATE: The contractor shall provide an updated SCRM Plan to the COR and Program Manager within five (5) business days whenever there is a change that affects one or more security controls as described in the Committee on National Security Systems Instructions (CNSSI) 1253 Appendix D (companion publication to National Institute of Standards and Technology (NIST) Special Publication (SP)). At a minimum, the following events will require a SCRM Update: changes in company ownership, changes in senior company leadership, supplier changes, subcontractor changes, and Information and Communications Technology (ICT) supply chain compromises.

i. Training. Contractor employees may be required to take periodic mandatory training courses provided through the agency, such as records management training and other training required by statute, regulation, DoD, or DISA policy. No other training of contractor personnel shall be provided by the Government unless pre-authorized in writing by the Contracting Officer.

14. Section 508 Accessibility Standards. The following Section 508 Accessibility Standard(s) (Technical Standards and Functional Performance Criteria) are applicable (if box is checked) to this acquisition.

Technical Standards

|X| 1194.21 - Software Applications and Operating Systems |X| 1194.22 - Web Based Intranet and Internet Information and Applications |X| 1194.23 - Telecommunications Products |_| 1194.24 - Video and Multimedia Products |_| 1194.25 - Self-Contained, Closed Products |X| 1194.26 - Desktop and Portable Computers |X| 1194.41 - Information, Documentation and Support

The Technical Standards above facilitate the assurance that the maximum technical standards are provided to the Offerors. Functional Performance Criteria is the minimally acceptable standards to ensure Section 508 compliance. This block is checked to ensure that the minimally acceptable electronic and information technology (E&IT) products are proposed.

Functional Performance Criteria

|X| 1194.31 - Functional Performance Criteria

Enclosure 4a, PWS Page 1 of 11 Pages 2015/Version 9

Page 13 of 13 Pages image2.emf

Consol_Product_List_and_Instructions.xlxs Template

CONTRACTOR REQUIRED INFORMATION

Contractor Contract # (SEWP / GSA):

CONTRACTOR POC Name:

POC Email:

POC Phone #:

CAGE Code

DUNS #

Columns in Pink form the basis for the Independent Government Cost Estimate (IGCE) to be completed by the program office Yes (leave blank) or no

Columns in green form the basis for Contractor's Quote (RFQ)

When completed, the columns in goldenrod fulfill the requirements to submit an Electronic Products List (EPL) IAW DITCO Additional Text H2 (Completed by Contractor)

SEE INSTRUCTIONS FOR COMPLETING THIS TEMPLATE ON THE 2ND WORKSHEET TAB

ITEM # (Proposed CLIN) Brand Name (BN) or Equal? Manufacturer Name Manufacturer Part Number Description QTY UNIT OF ISSUE UNIT PRICE EXTENDED AMOUNT Promised Delivery (ARO) Covered by OEM Warranty (type and duration) HW Serial Number/Key Code HW Unique Item Identifier (See DFARS 252.211-7003) Software License Included (Duration) SW Serial Number/Key Code UID of Parent IAW DFARS 252.211-7003 (5)(e) Contract Number Delivery Order Number (if applicable) Funding Document Number Contract Line Item No. (CLIN) SubCLIN (SLIN) Customer Organization Delivery Address Tracking No Carrier IUID Type Issuing Agency Code Enterprise Identifier Lot or Batch Number Type Designation Special Tooling or Special Test Equip

$ - 0

GRAND TOTAL $ - 0

REQUESTED DELIVERY DATE: All items to be delivered no later than MM/DD/YYYY (Partial deliveries will/will not be accepted)

DELIVER ITEMS TO: CACI Federal INC. (P&S) Note: You must update CACI address as required.

Office Name/Symbol Attn: P&S Receiving Dock 1 / Tech Refresh

Address 44590 Guilford Dr.

City, State and Zip+4 Ashburn, VA 20147

POC Name, Phone, Fax and Email Please provide POC information and update address if non-DISA customer

NOTE: Property Accountability. (If this is a DISA requirement, and property is to be delivered under the contract/TO that must be accounted for IAW DISAI 270-165-8, the following applies. If block 4e on the Requirements Checklist is marked “no” or you are not a DISA requiring office, delete this paragraph and the embedded Electronic Product List or mark as “not applicable”) The contractor shall submit the attached Electronic Product List (see below) in addition to complying with all requirements of DFARS 252.211-7003. See IAW FAR Part 8/16 Ordering Procedures, Additional Text H2 for additional information.

Note: If field is blank, Contractor will be required to register and provide IUID tags.

&L

&CEncl 2a, Consolidated Product List 1Nov2018/v3

For DISA only: Prior to submission of a new requirement package to DITCO, a review by DISA Central Receiving Point (CRP) Equipment Re-utilization review POC must be completed to determine that items are not available in the warehouse. The CRP warehouse POC will be required to sign the requirements checklist (block 16g). To save time, forward this completed equipment list to disa.meade.mps.list.mps31-warehouse-branch-sro-team@mail.mil for verification that your items are not available as surplus prior to completion of your acquisition package.

Instructions

Instructions for Completing Consolidated Product Listing to be used for IGCE/RFQ/EPL/MI&RR

Customers shall work with their respective Property Accountability Office in order to determine in advanced which of the requested item(s) require assignment of an Item Unique Identification (IUID) valuation tag in accordance with the guidance contained in DFARS 252.2011-7003. Each item that requires an IUID tag and collection/submission of required information must be clearly identified on the spreadsheet by leaving column M blank. If the contractor will not be required to provide either an IUID tag and/or IUID information, column M should indicate accordingly.

Note for DISA requirements only: DISA property accountability manager has determined it to be in the best interest of the Government to upload the required information into the Defense Property Accountability System (DPAS) in order to generate and affix IUID tags on items after delivery. Contractors will NOT be required to generate or provide IUID tags. However, all information outlined on the EPL MUST be provided with each shipment in order to allow for generation of the physical IUID tag.

When customer is submitting requirements for a specific brand name item (accompanied by the appropriate Justification for Other than Full and Open Competition), those items should be marked as “BN” in column B. Items which are to be competed on an “or equal” basis should be marked accordingly so vendors understand how to respond. Column B should be completed for each Contract Line Item (CLIN).

If the customer is purchasing a complete configurable system, a single CLIN may be used to identify all components associated with the top level assembly. Orders will be placed for a single system based upon the configuration using the Unit of Measure (UoM) of each. Multiple systems can be ordered on a single line item on the contract as long as all will have the exact same configuration. The configuration Bill of Materials (BOM) will be incorporated into the resulting contract as an attached document.

If an IUID tag is required for a component or subassembly of a configurable product, the per unit price of the item must be collected and reported. Whenever the need for an IUID tag is indicated, the offeror cannot decline to provide a per unit price by listing the item as not separately priced (NSP).

Within a CLIN for single system, sub elements/subassemblies may also require serial numbers and/or IUID tags. When required, the customer shall leave the appropriate columns blank to indicate to the contractors that information must be provided. If information is not required, columns L through N should indicate accordingly.

If a serial number is not required (or not provided in accordance with industry standards), column L should be indicate accordingly.

Customers will be allowed to group together small dollar items such as spares or peripheral equipment for a tech refresh (estimated per unit price of $5K or less) into one BOM for ordering purposes.

The completed spreadsheet shall be submitted to Procurement Services (PS) along with all required documentation for review. One copy of the document will be retained in the contract file marked “IGCE”. Another copy will be created with the per unit prices removed and labeled as “RFQ Proposal Template”. This copy will be included in the RFQ and shall be the basis for the offeror’s proposal. At the time the spreadsheet is forwarded in an RFQ, columns O through AB will be hidden. Instructions to offerors will explain use of these columns after award.

During the evaluation process, the Contract Specialist and Contracting Officer will review proposed CLIN structure with the customer to determine if additional changes are necessary before contract award.

Columns Q, R and S will be completed by PS and the remaining columns unhidden for distribution with the award documents. Contractors will be instructed to submit a completed document with each shipment in order to meet the requirements for submission of an Electronic Parts List. When more than one item is shipped per CLIN, all serial numbers and IUID tag information shall be inserted in the appropriate columns separated by semi-colons.

In order to assist in identifying a specific shipment to a specific order, contractors are required to provide the name of the carrier and the tracking number for each shipment on the completed EPL. When items are drop shipped from the Original Equipment Manufacturer (OEM), the contractor shall obtain the necessary information from the OEM and submit the completed EPL so that it is received on/before shipment arrives at the destination outlined in the contract.

In addition to submission of DD250, Material Inspection and Receiving Report, contractors shall attach a copy of the consolidated EPL with each shipment. To meet the information requirements for this document, columns T through AB must also be completed. IAW DFARS 252.211-7003, completed DD250 and the attachment must be included with invoices submitted in WAWF.

For further guidance, please reference the IGCE Desk book located at https://www.ditco.disa.mil/hq/deskbooks.asp image1.emf

NonDisclosure Agreement for DISA Contractors v8 - 19 Sep 2017.docx

DEFENSE INFORMATION SYSTEMS AGENCY

NON-DISCLOSURE AGREEMENT FOR CONTRACTOR PERSONNEL

THIS CERTIFICATION CONCERNS A MATTER WITHIN THE JURISDICTION OF AN AGENCY OF THE UNITED STATES AND THE MAKING OF A FALSE, FICTICIOUS, OR FRAUDULENT CERTIFICATION MAY RENDER THE MAKER SUBJECT TO PROSECUTION UNDER TITLE 18, UNITED STATES CODE, SECTION 1001.

I, (print or type name), as an employee of

(insert employer name) (“the Company”), a contractor or subcontractor for the Defense Information Systems Agency/Defense Information Technology Contracting Organization (DITCO) or other relevant DoD entity, performing under Contract Number (insert contract number), understand that as a result of my assignment under this contract, I may have access to, become aware of, or possess information/data that is considered sensitive or proprietary and may be protected by law from unauthorized use or disclosure.

I agree not to disclose to any individual, business entity, organization, or anyone within or outside of the Company who has not signed a non-disclosure agreement for the purposes of performing this contract: (1) any planning, programming, and budgeting system information; (2) any contractor bid or proposal information or source selection information as defined in Federal Acquisition Regulation (FAR) 3.104-4; (3) any information exempt from disclosure under the Freedom of Information Act, 5 U.S.C. § 552(b), including any trade secrets, proprietary, or financial information protected under § 552(b)(4); (4) any personally-identifiable information or protected health information; and (5) any other sensitive information considered Confidential or For Official Use Only (FOUO). I also agree to use such information/data solely for the purposes of performing this contract, and not to use such information/data to obtain anything of value or to provide a financial benefit or a competitive advantage to any third party and/or my employer.

I continue to be bound by the obligations of this Agreement after my performance under the contract has ended, and after the contract has been terminated or closed, until such time as the information/data protected by this Agreement is approved by the United States Government for public release. Any sensitive or proprietary information/data in my possession at the end of my performance under this contract must be returned to the Government. I understand that I may be subject to administrative, civil, and criminal sanctions for violating this Agreement, and any violation of this Agreement may result in my removal from assignment to this contract.

This Agreement does not bar disclosures to Congress or to an authorized official of an executive agency or the Department of Justice that are essential to reporting a substantial violation of law, and this Agreement does not prohibit disclosures which are required under order of a court of competent jurisdiction. These provisions are consistent with and do not supersede, conflict with, or otherwise alter the obligations, rights, or liabilities created by existing statutes or Executive orders relating to (1) classified information, (2) communications to Congress, (3) the reporting to an Inspector General of a violation of any law, rule, or regulation, or mismanagement, a gross waste of funds, an abuse of authority, or a substantial and specific danger to public health or safety, or (4) any other whistleblower protection. The definitions, requirements, obligations, rights, sanctions, and liabilities created by controlling Executive orders and statutory provisions are incorporated into this agreement and are controlling. These controlling Executive orders and statutory provisions include Executive Order No. 13526, as amended; Section 7211 of Title 5, United States Code (governing disclosures to Congress); Section 1034 of Title 10, United States Code, as amended by the Military Whistleblower Protection Act (governing disclosure to Congress by members of the military); Section 2302(b)(8) of Title 5, United States Code, as amended by the Whistleblower Protection Act (governing disclosures of illegality, waste, fraud, abuse or public health or safety threats); the Intelligence Identities Protection Act of 1982 (50 USC 3121 et seq.) (governing disclosures that could expose confidential Government agents); and the statutes which protect against disclosure that may compromise the national security, including Sections 641, 793, 794, 798, and 952 of Title 18, United States Code, and Section 4(b) of the Subversive Activities Act of 1950 (50 USC 783(b)).

My execution of this Agreement shall not nullify or affect in any manner any other Confidentiality or Non-Disclosure Agreement, including any Standard Form 312 or 4414, which I have executed or may execute with the United States Government or any of its departments or agencies.

I have carefully read this Agreement and understand my obligations under it.

Signature of Contractor Employee Date