Attachment 0001 Performance Work Statement (PWS).pdf

PERFORMANCE WORK STATEMENT

FOR

SATELLITE COMMUNICATIONS (SATCOM) TERMINALS MAINTENANCE SUPPORT

(STMS)

27 October 2024

Prepared by:

Product Lead (PdL) Commercial Satellite Terminal Program (CSTP)

Project Manager, Tactical Network (PM TN)

SFAE-CCC-WTC

Aberdeen Proving Ground, MD 21005

1. SCOPE

The Satellite Communications (SATCOM) Terminals Maintenance Support (STMS) was established in response to a growing need for more information about failures and tracking of Trouble Tickets associated to outages, repairs, and maintenance.

The SATCOM Maintenance Center (SMC), located on Aberdeen Proving Ground, Maryland (APG, MD), is a 24 hours a day/seven days a week (24/7) facility that provides tracking for all Product Lead (PdL) Commercial Satellite Terminals Program (CSTP) assets, operational or spared, worldwide and logistical warehouse support for multiple programs to include, Deployable Ku Earth Terminal (DKET), Secure Internet Protocol Router and Non-classified Internet Protocol Router (SIPR/NIPR) Access Point (SNAP), Micro Very Small Aperture Terminal (mVSAT), Ground to Air Transmit and Receive (GATR), United States Marine Corps (USMC) Very Small Aperture Terminal System (VSATs), Transportable Tactical Command Communications (T2C2), Agile Communication Environment (ACE) program, and Inflatable SATCOM Antenna (ISA). The STMS allows for data share amongst programs to identify mean time between failures (MTBF), repair or replacement costs, shipping, configuration management, Item Unique Identification (IUID) implementation and tracking, trend, and fault analysis. The STMS manages and maintains logistical capabilities through logistics personnel support that manage shipping, receiving, tracking, inventorying, maintenance, and the organization of the Continental United States (CONUS) and Outside of Continental United States (OCONUS) warehouses. Additionally, the STMS provides Engineering and Technical support to assist with technical requirements, Trouble Ticketing, and maintaining the SATCOM Terminal Remote Monitoring and Management (STRMM).

The STRMM network provides near real time remote access to all Terminals, so the SMC has the required visibility to provide support to maintain mission success.

2. GENERAL

2.1. Period of Performance

Period of performance is estimated to be April 28, 2025, through April 27, 2030, comprised of a 12-month Base Period, to include a thirty (30) day Transition-in period, and four (4) separate twelve (12) month Option Periods.

2.2. Place of Performance

The SMC operates 24/7 and its primary place of performance is at Aberdeen Proving Ground, MD (APG, MD). The contractor will be required to maintain a facility on APG; additionally, the contractor will be required to have permanent personnel stationed in APG, MD that will also be required to provide support at the Edgewood, MD Government facility outdoor storage area.

The Contractor will be required to have permanent Warehouse Manager and Logistician support stationed at Government facilities located at Camp Arifjan, Kuwait and Ramstein, Germany as identified in PWS paragraph 3.1. The Contractor will be required to have permanent Network Support personnel located at APG, MD;

the APG personnel will travel and provide support to Shaw AFB, and Qatar, Doha, and may travel to any location identified in PWS paragraph 2.2.

The Contractor shall interface electronically or via telephone with Government Department of the Army Civilian (DAC) and Systems Engineering and Technical Assistance (SETA) Logistics personnel located in APG, MD; Ramstein, Germany;

and Camp Arifjan, Kuwait to access required data. The network hubs for STRMM are located at APG, MD; Shaw Air Force Base, South Carolina; and Qatar, Doha.

The Contractor may be required to travel to a Temporary Duty Station (TDY) to include, but not limited to the following locations: Australia, Bahrain, Djibouti, United Kingdom, Italy, Germany, Guam, Iraq, Japan, Jordan, Korea, Kuwait, Niger, Qatar, and Turkey. Additional locations could be added if the Government requires.

The Contractor will be required to obtain sponsorship services via a “bridge company” in order to perform services in Kuwait. The Contractor will be required to establish a “GmbH” (“GmbH” or “Gesellschaft mit beschränkter Haftung”, which translates to “company with limited liability” in English) in order to perform services in Germany.

See Attachment XX – Level of Effort (LOE) for specific personnel location requirements.

2.3. Work Hours

CONUS operational hours will be a 40-hour work week to accommodate mission needs. The SMC will operate seven (7) days a week to include holidays on a 40-hour work week. During training exercises and deployments, the Contractor’s work hours may extend up to seven (7) days a week, 12 hours a day, for a total of 60-hour work weeks. The training exercises and deployments must be approved in writing by the Contracting Officer Representative (COR) in advance.

OCONUS operational hours will be a 40-hour work week for the Germany location and a 60-hour work week is required for the Kuwait location. Requests for deviations from these hours shall be submitted to, and approved by the COR, in writing.

2.4. Inspection and Acceptance

Inspection and acceptance shall be at the specified destination.

Requiring Activity’s Department of Defense Activity Address Code (DoDAAC) is

W81LH7.

2.5. Quality Assurance Surveillance Plan

The Government shall establish a Quality Assurance Surveillance Plan (QASP) for monitoring, reporting, and evaluating the Contractor’s performance under this contract. The Contractor is tasked to provide a feasibility report and provide the deliverables IAW CDRL A004. The Contractor will be evaluated with periodic inspections as to the quality of the output of their work and results will be documented; this includes the Contractor’s contribution in meetings and reviews, the quality of the Contractor’s technical reports, Contractor’s productivity and the overall quality of the technical support provided. The Contractor shall be responsive to Government tasking and submit their monthly reports and technical reports IAW CDRL B001. Timely feedback to the Contractor on unacceptable performance will be provided by the COR and documented in writing. The contractor will be required to develop and implement a corrective action plan after Government approval.

2.6. Security

The Contractor shall have a Government approved SECRET facility clearance and personnel able to obtain and maintain a Secret level security clearance in accordance with (IAW) the DD Form 254 in this contract. The Contractor shall be required to have a Final SECRET facility clearance with SECRET safeguarding capability at the time of bid submission. In performing this effort, the Contractor shall have access to classified information at Government facilities only. Operations Security (OPSEC) requirements will be provided by the Government IAW Army Regulations (AR) 530-1 for this Performance Work Statement (PWS).

2.7. Documents

All the following applicable documents are available upon request.

• MIL-STD-130N, Identification Marking of U.S. Military property

• DoD 4140.1R, Supply Chain Materiel Management Regulations

• MIL-STD-11991B General Standard for Parts, Materials, and Processes AR 530-

1, Operational Security (OPSEC)

• DoD 5220.22-M, National Industrial Security Program Operating Manual

• DoD Information Assurance (IA) Regulations, Policies, and Guidelines

• DoDI 8510.01, Risk Management Framework (RMF) for DoD Information

Technology (IT) (19 July 2022)

• Federal Information Security Management Act of 2002 (FISMA)

• AR 25-2, Information Assurance (4 Apr 19)

• DoDI 8500.01, Cybersecurity (7 Oct 19)

• DoDD 8500.01E, Information Assurance (October 24, 2002)

• DoDD 8551.01, Ports, Protocols, and Services Management (PPSM)

• DoD 8570.01-M, Information Assurance Workforce Improvement Program (10

Nov 15)

• DI-SESS-81253C, Configuration Status Accounting (CSA) Information

• DI-MGMT-80441C, Government Property Inventory Report

• AR 25-2, Information Assurance

• AR 525-13, Antiterrorism

• FIPS 199 (Federal Information Processing Standard Publication 199, Standards for Security Categorization of Federal Information and Information Systems)

• AR 385–10, The Army Safety Program

• DA Pam 385-40, Army Accident Investigations and Reporting

• AR 200-1, Environmental Protection and Enhancement

• AR 11-35, Occupational and Environmental Health Risk Management

• OSHA Pocket Guide, Worker Safety Series – Warehousing

• SATCOM/CSTP Standard Operating Procedures (SOP) Logistics Shipping

• SATCOM/CSTP SOP SATCOM Maintenance

• Certification Standards o Army Forces Strategic Command (ARSTRAT) X/Ka-Band Certifications:

Wideband Global SATCOM (WGS) o X/Ka-Band Terminal certification requirements Version 2.0, 20 June 2006.

3. REQUIREMENTS

3.1. STMS Support

The Contractor shall provide support at the following locations:

PWS Reference Location

PWS 7.1.1, 7.1.4 CTR Facility at APG, MD, and Govt Facility at Edgewood, MD

PWS 7.1.2 CTR Facility at APG, MD, and Govt Facilities at Edgewood, MD, Camp Arifjan, Kuwait, and Germany

PWS 7.1.3 CTR Facility at APG, MD and Govt Facilities at Edgewood, MD, Camp Arifjan, Kuwait, and Germany

PWS 7.2.1 Govt Facilities at Shaw AFB, SC, and Qatar, Doha

PWS 7.2.1, 7.2.3,

7.2.4, 7.2.5 CTR Facility at APG, MD and Govt Facility at Edgewood, MD

PWS 7.2.2

CTR Facility at APG, MD and Govt Facilities at Edgewood, MD, Iraq, Qatar, Djoubiti, UAE, OMAN, Kuwait, Qatar, Bahrain, Jordan, Germany, Italy, South Korea, England, and Africa

PWS 7.3.1 CTR Facility at APG, MD and Govt Facility at Edgewood, MD

PWS 7.3.2 CTR Facility at APG, MD and Govt Facility at Edgewood, MD

PWS 7.3.3 CTR Facility at APG, MD and Govt Facility at Edgewood, MD

PWS 7.3.4 CTR Facility at APG, MD and Govt Facility at

PWS 7.3.5 CTR Facility at APG, MD and Govt Facility at

3.2. Satellite Communications (SATCOM) Maintenance Center (SMC) Facility

The Contractor shall provide a facility for the SMC, which operates 24 hours a day, seven (7) days a week, 365/366 (leap year) days a year. The Contractor’s SMC facility shall be located on the Aberdeen Proving Ground (APG), Maryland (MD) Installation. The contractor provided facility on APG, MD shall include desk space, telephones, internet connectivity and any other items and services necessary to work in an office / warehouse environment in the same building.

The current occupancy will be twelve (12) personnel, but occupancy may change as needed. The facility shall consist of a minimum of 22,500 square feet of combined office and warehouse space and a minimum of 6,000 square feet of outdoor, security fenced area. The warehouse space shall be a minimum of 12,000 sq. ft.

The outdoor security fence shall be a minimum of 8ft tall and shall be designed to deter unauthorized access and intrusion. There shall be a power stub to the outside area for 208/120V, 200A, 60Hz, and 380/220V, 150A, 50Hz, the power can be switchable. The warehouse, office, and outdoor space shall be in/at the same building.

The warehouse space shall include a minimum of one (1) loading dock and a High Bay with minimum measurements of 10ft. wide and 12ft. high to include a ramp to enter High Bay if needed. The High Bay shall be in the same facility as the warehouse space, industrial shelving capable of holding 90 standard pallets, government provided forklift and provide secure, interior storage with access door.

The office space shall include a minimum of one (1) secure room for SMC operations to support SIPR and NIPR connectivity, one (1) conference room, one (1) breakroom, two (2) bathrooms, six (6) offices, one (1) lab room, Secure server room with racks for computer / server operation and a secure front entrance point. Office Services: regular janitorial and cleaning services, copier access and usage, document shredding, first aid kit management, common area maintenance, and access control system with badge readers at all entry doors, labs, SMC and other sensitive areas and internet wireless and wired internet to all offices.

The Contractor provided conference room shall support unclassified voice and video conferencing capability, and a capability for content display from laptop/tablet devices. The conference room shall support a minimum of fifteen (15) people with a conference room table that supports a minimum of eight (8) people. The Video Teleconferencing (VTC) capability shall support multi-point calls with up to six (6) endpoints. The display for VTC and content presentation shall be supportive of a collaborative environment for up to eight (8) people (minimum 60” display). The Contractor shall also provide suitable space (e.g., cubicle, workstation and office space, desk, chair, lighting, storage/testing space, commercial internet access, etc.)

for a Government Project Manager.

Secure Lab room shall include power outlets for use of six (6) 220V power drops and four (4) standard size racks at a minimum.

Security and access to the facility shall be controlled by the Contractor and must include, at a minimum, security cameras at the outdoor fenced area and all exterior entry/access points, as well as a badging process required for access to all entry and access points. There shall be a secure access point between the warehouse and office space, as limited access is required to the office space.

The Government will provide NIPR, SIPR, Defense Switched Network (DSN) and Voice over Secret Internet Protocol.

The Contractor shall provide and maintain commercial internet services at this location dedicated solely for Government use. The commercial internet service data rate shall be at a minimum of 250Mbps (with upload speed depending on the internet service provider) with a minimum of four (4) public static IP addresses. The Contractor shall not use this commercial internet service for day-to-day helpdesk operations.

The Contractor shall control access to the facility; however, the Government shall have access to perform the inspection and acceptance of completed work and tasks.

The Contractor shall plan for the Government Project Manager to be on site at any point during normal operational hours, Monday through Friday. During real-world contingencies, the Government Project Manager may need to be on-site at any time of day, seven (7) days a week.

3.3. Transition

The Contractor shall follow the transition plan submitted as part of the proposal and keep the Government fully informed of status throughout the transition period. The Transition period will be from date of award to 30 calendar days later. In order to maximize the effectiveness of the transition-in process, an initial meeting between the KO, COR and contract managers for the incoming contractor shall be held to address transition-in requirements and responsibilities no later than five (5) business after award. The incoming contractor shall ensure that its transition-in operations do not hinder or interfere with normal operations and the maximum effort is made to avoid loss of productivity.

The incoming contractor shall perform the following tasks during the transition-in period:

• Hire and on-board personnel

• Provide Tier I helpdesk support (IAW PWS 3.9.1) within 10 calendar days of contract award.

• Provide Tier II helpdesk support (IAW PWS 3.9.1) within 20 calendar days of contract award.

• Obtain all necessary documentation associated with deployment to theater and other Contiguous United States (CONUS) and Outside Contiguous United States (OCONUS) locations.

• Transfer of any GFP equipment related to pending repairs.

• Upon contract award, the incoming contractor shall have an adequate facility (PWS 3.2) ready to receive any equipment and all equipment necessary to complete these tasks.

The Contractor shall install equipment at their SMC location and provide personnel such that within 30 calendar days of award, the entire SMC operation, all support service, and the helpdesk are in full operational performance.

3.4. Requirements

The Contractor, as an independent Contractor and not as an agent of the Government, shall provide the necessary resources (except those furnished by the Government) to accomplish tasks of the type set forth below.

3.4.1. Contractor Required Software Training

The contractor will be required to utilize the current, Government supplied Mission and Control (M&C) Trouble Ticketing and asset management tracking software. The contractor shall ensure all users of software are familiar with the systems and trained in accordance with the requirements identified in 3.4.1.1 and 3.4.1.2.

When training is required under PWS Section 3.4.1 and subparagraphs, the contractor shall submit a Rough Order of Magnitude (ROM) for approval by the COR prior to start of work (CDRL D002). The ROM shall provide a cost breakout of Other Direct Costs (ODCs) (including software or licensing requirements), material, travel costs, shipping and direct labor as applicable to the requirement. Upon approval of the ROM, the COR will provide a formal notice to proceed. Software and licensing requirements will be reimbursed as an ODC/material cost.

3.4.1.1. Monitor and Control (M&C) and Asset Management

The current M&C and Asset Management software is used by the various SATCOM Terminals and the STRMM Network to include DKET, SNAP, ISA, and United States Marine Corps (USMC) Very Small Aperture Terminal System (mVSATs).

Contractor Network Engineers and STRMM Engineers will be required to take the specific software administrative training with the Original Equipment Manufacturer

(OEM).

Contractor Helpdesk personnel will be required to complete online M&C training and on-site software training.

The Government will sponsor any specific training that is unique to the STRMM network.

3.4.1.2. Trouble Ticketing

The current Trouble Ticketing software used by the SMC for maintenance support, to include but not limited to DKET, SNAP, ISA, and USMC mVSAT. Software training will be provided by the Government and the Contractor shall be required to ensure all users of software will be familiar with the system and trained with documentation provided.

3.4.2. Documentation

The Contractor may be required to develop new training and logistical documentation for a customer based on the specific equipment being supported.

The Contractor shall develop this documentation to be submitted as a deliverable (CDRL D002) after approval of the schedule and cost by the Government.

When documentation is required under PWS Section 3.4.2, the Contractor shall submit a Rough Order of Magnitude (ROM) for approval by the COR prior to start of work (CDRL D002). The ROM shall provide a cost breakout of Other Direct Costs (ODCs) (including software or licensing requirements), material, travel costs, shipping and direct labor as applicable to the requirement. Upon approval of the ROM the COR will provide a formal notice to proceed. Software and licensing requirements will be reimbursed as an ODC/material cost.

Once documentation is completed, the Contractor shall implement the documentation requirements as part of the support on this contract.

3.5. Software Licenses

The Contractor shall provide Hub, Tactical, and Strategic software licenses to support M&C and STRMM for new or existing systems as required by the Government. Software licenses referenced in PWS paragraph 3.5 and subparagraphs will be paid for as an ODC/material cost.

3.5.1. Hub Licenses:

Hub Licenses are for Terminals, which are considered nodes that have several links (spoke sites) (e.g., DKET).

3.5.2. Tactical Licenses:

Tactical licenses are for tactical Terminals and are the links at the spoke sites of the hubs, including network enclaves (NIPR, SIPR, etc.), (e.g., SIPR/NIPR Access Point (SNAPs) Terminal and Inflatable Satellite Antenna (ISA).)

3.5.3. Strategic Licenses:

Strategic licenses are for large, fixed sites (e.g., Regional Hub Nodes, Teleports).

3.5.4. Enterprise Licenses:

Enterprise licenses provide unlimited licenses and service support for all Terminals under the STMS program for one (1) year.

3.6. Trouble Ticketing

The Contractor shall provide Trouble Ticketing support for the STMS. The Contractor shall work directly with Government personnel responsible for the maintenance of the system relating to a specific Trouble Ticket. Future Trouble Ticketing solutions will run on the current M&C platform. The Contractor shall use these software instances to log all maintenance tickets to include Trouble Ticketing Software (TTS) and/or M&C will be used to identify and track system/component warranties when deemed necessary by the Government. Additionally, TTS will be utilized to produce reports for internal and customer use. The Trouble Ticketing will also be used to provide and track system priority statuses. The Contractor shall maintain a warranty report of all items being tracked by the contract IAW CDRL D001.

3.6.1. Trouble Ticket Priorities

The Contractor shall prioritize all trouble tickets associated with assets, through the assignment of a priority number, which will dictate shipping, receiving, and tracking based on the following criteria:

• Priority 1 – Outages; Trouble Ticket

• Priority 2 – Hazardous Conditions (HAZCONS); Trouble Ticket

• Priority 3 – Item replacement to existing systems that does not affect operation of the terminal, Trouble Ticket

• Government Priority 1-3; set by the Government

All other items will then be prioritized by order of importance and approved by the Government.

3.7. Network Management

3.7.1. M&C and Asset Management Integration Support

The Contractor shall provide support to integrate the M&C software to the Asset Management software. The Contractor shall create an interface exchange between the two software packages. The Contractor shall eliminate any data entry duplication into multiple systems. To the extent that there is overlap in the compliance data complement and the host data complement, those elements will be candidates for integration.

3.7.2. DKET Integration Support

The Contractor shall install M&C configurations for any DKET in the CSTP enterprise and provide an Integrated Master Schedule (IMS) IAW CDRL B003. Integration support will include mVSAT Terminals as needed:

• Update topology to match Radio Frequency (RF) flow

• Update resource to use the appropriate translator for Terminal equipment make and model

• Update dashboard views to match configuration and resources of the Terminal

• Update IP addressing and serial addressing of resources

• Verify functionality (test out rules, switches, etc.)

• Package the updated configured system into a zip file that can be copied into a new onsite server

• Site survey to determine connectivity to new or relocation of Terminals being introduced into the network as per CDRL A001

3.7.3. Quarterly Information Assurance Vulnerability Alert (IAVA) Support The Contractor shall provide Cyber Security IAVA updates as required every quarter. The Contractor shall follow the guidance in PWS paragraph 3.7.1 and 3.7.2 in generating those updates.

References: Department of Defense (DoD) Information Assurance (IA) Regulations, Policies, and Guidelines

• DoD Instruction 8510.01 Risk Management Framework for DoD Systems – 19 July 2022

• Federal Information Security Management Act of 2002 (FISMA)

• Army Regulation 25-2, Information Assurance (IA)

• DoDD 8500.01E, Information Assurance (October 24, 2002)

• DoDI 8500.2, Information Assurance (IA) Implementation

• DoDI 8551.01, Ports, Protocols, and Services Management (PPSM)

3.8. Cyber Security

The Contractor shall develop and maintain a cyber-resilient system. The contractor shall ensure IAVAs and Security Technical Implementation Guides (STIGs) can be applied individually without the need to re-image the system, and not limited to being applied only during new capability updates. The Contractor shall comply with all necessary DoD Cyber Security requirements and perform work as specified in this section. The Contractor shall provide Transmission Security (TRANSEC) over the satellite communication path/links. The Contractor shall configure satellite infrastructure devices (e.g., Internet Protocol (IP) modems) that directly support the IP protocol suite to comply with DoD Instruction (DoDI) 8551.01, Ports, Protocols, and Services Management (PPSM).

3.8.1. Cybersecurity Documentation Requirements

3.8.1.1. The Contractor shall support Government Cyber Certification and Accreditation (C&A), and Connectivity or Interconnectivity activities as required, including providing C&A documentation upon request in a format acceptable to DoD Cyber C&A activities.

3.8.1.2. The Contractor shall report all IAVAs, STIGs, and Bulletins within a monthly Plan of Actions and Milestones (POA&M) and provide a list outlining which were implemented and those not implemented, including why they were not implemented and how they were mitigated if mitigation was required. All non-implemented IAVAs and STIGs shall have Government concurrence. The Contractor shall provide a comprehensive and up-to-date software scan using current Army Best Business Practices for scanning and remediation every month. This data will be rolled up to the Assistant Secretary of the Army for Acquisition, Logistic and Technology (ASAALT) Cyber and the Procurement Executive Office (PEO) to ensure the basic mission assurance techniques are implemented uniformly within the portfolio.

3.8.1.3. The Contractor shall perform manual scans at least monthly to ensure the system is Federal Information Security Management Act (FISMA) and STIG compliant.

3.8.1.4. The Contractor shall provide updates, Incident Reporting, and Vulnerabilities Management monthly by the 20th day of each month. IAW CDRL B001.

3.8.2. IAVAs

3.8.2.1. The Contractor shall apply Exploit Category I IAVAs within 14 calendar days of notification through the NETCOM SharePoint site.

3.8.2.2. The Contractor shall apply Exploit Category II IAVAs within 14 calendar days of exploit discovery, or within 30 calendar days if a system level POA&M to mitigate is provided. (See Section 2.7 Applicable documents - FIPS 199 (Federal Information Processing Standard Publication 199, Standards for Security Categorization of Federal Information and Information Systems)) for category descriptions.

3.8.2.3. The Contractor shall monitor all update requirements, including, but not limited to, vendor sites, mailing lists, third party sources, vulnerability scans, and the U.S. Army Cyber Command (ARCYBER) G36 SharePoint site for Information Assurance Vulnerability Messages. The Contractor shall make mitigation, patching, upgrade, or modification recommendations and provide a POA&M for all requirements that cannot be fulfilled on time in a format approved by the PEO for each update requirement. The Contractor shall treat the POA&M as specified in the system’s Security Classification Guide (SCG) and provide a digital copy to the Government via a method approved by the Government IAW CDRL A004. The Contractor shall provide a comprehensive and up-to-date software scan using current Army Best Business Practices for scanning and remediation every 30 calendar days.

3.8.3. STIGS

The Contractor shall implement STIG no later than (NLT) 30 calendar days from release of a new Defense Information Security Agency (DISA) STIG. Where an update cannot be technically applied due to system functionality, that STIG item shall be documented in the system POA&M with appropriate mitigations. If an update cannot be applied NLT 30 days, the Contractor shall provide a milestone schedule in the POA&M item for application for Government approval.

3.8.4. Risk Management Framework (RMF) Process

The Contractor shall complete items mandated by RMF and Agent of Certifying Authority (ACA) to include documentation called out in the DoD 8500 and Chairman of the Joint Chief of Staff (CJCS) 6510 series directives, instructions, and manuals.

The Contractor shall assist the Warfighter Information Network-Tactical (WIN-T) program office to initiate and plan the Cyber Certification and Accreditation (C&A) leading up to the implementation and validation of assigned Information Assurance (IA) controls.

The Contractor shall implement a Cyber program to ensure that the system meets all DoD IA requirements IAW Army Regulation (AR) 25-2 “Information Assurance”, DoDI 8500.01, Cybersecurity (7 Oct 19), and DoDI 8510.01.

The Contractor shall support the RMF process for DKET, Micro VSAT, ISA, and SNAP SATCOM Terminals. The Contractor’s proposed implementation shall be compliant with current policies, guidelines, and requirements within DoD governing C&A.

The Contractor shall update the RMF package and the embedded Cyber Test Plan, as required, to reflect relevant changes in the system hardware and software baselines.

3.8.5. Interim Approval to Test (IATT)

The Contractor shall perform software scans prior to any Government witnessed tests, and remediate and/or mitigate all Category I, II, and III, findings. (See Section 2.7) Applicable documents - FIPS PUB 199 (FEDERAL INFORMATION PROCESSING STANDARDS PUBLICATION) for category descriptions).

3.8.6. Authority to Operate (ATO)

The Contractor shall support all IA meetings, reviews, testing, and activities to support and enable the Government to obtain and maintain an ATO IAW DoDI

8510.01. The ATO process will occur every three (3) years. The Contractor shall support 3rd party software scans and requirements where the 3rd party is identified by the Government. The Contractor shall support POA&M maintenance.

3.8.7. Federal Information Systems Management Act (FISMA)

The Contractor shall implement and execute the yearly activities associated with satisfying the RMF Annual Review and meeting the reporting requirements of

FISMA. The annual review date will be recorded in the System Identification Plan, which will coincide with the date of the signed ATO.

3.9 Satellite Maintenance Center (SMC) Helpdesk Support

The contractor shall report any repairs, shipments, Return Material Authorization (RMAs), property transfers, equipment swaps, or any other action tied to government assets with the ticketing system stated in PWS paragraph 3.6 and all subparagraphs. The systems identified by the Government shall coordinate all replacements and repairs through the SMC. The COR will provide oversight and direction to SMC activities. The COR will provide the SMC contact information and/or the identification of the Government system representative who performs the maintenance of the systems being supported to the Contractor upon contract award.

The Contractor shall coordinate all actions taken with the identified Government system representatives supporting the terminal.

3.9.1 Helpdesk

The Contractor shall provide helpdesk Tier I and Tier II support. The Tier I support shall field calls 24/7 and report maintenance actions via the ticketing system. The Tier I support shall record via the ticketing system all required actions (shipments, repairs, replacements, maintenance actions, etc.) and will support any actions pertaining to maintenance of any system being supported. The Tier I personnel will use the logistical system to determine availability of spares for maintenance actions.

The Contractor shall perform the following specific tasks and skills for Tier I:

• Field trouble calls via the phone and computer Trouble Ticketing system

• Coordinate and work with vendors to get quotes

• Document trouble calls and computer/network actions for reporting purposes

The Contractor shall provide guidance to the system representative to fix issues being reported, as well as to evaluate repair items to ensure a fix action is required.

The Tier II personnel will support the CONUS maintenance support of systems identified by the COR. The Tier II personnel will support the Tier I personnel and be available 24/7. The Tier II personnel will use the M&C system provided by the government to view system connected to the network to support maintenance issues.

The contractor shall perform the following specific task and skills for Tier II:

• Perform computer imaging, equipment testing, and other support needs as deemed through the leads

• Perform basic IP troubleshooting, repair, and integration

• Perform Satellite communication terminals troubleshooting and maintenance

• Perform all tasks and skills for Tier I

4. GOVERNMENT FURNISHED PROPERTY

4.1. Government Furnished Property (GFP)

The Government will provide GFP for use by the Contractor to perform the duties as required. The Contractor shall only use the property for performing work in support of this contract. Modifications or alterations of property are prohibited. The Contractor shall not cannibalize property. In the event property is received by the Contractor in a condition not suitable for its intended use, the Contractor shall immediately notify the COR in writing. The Contractor shall have a process to enable the prompt recognition, investigation, disclosure, and reporting of loss of incidental property (meaning unintended, unforeseen or accidental loss, damage, or destruction of Government property that reduces the Government’s expected economic benefits of the property).

Title to all GFP remains with the Government, and the Contractor is responsible for the proper use, care, and safeguarding of GFP during the contract performance period. The Contractor shall manage GFP in accordance with FAR 52.245-1, Government Property.

The Property Management Plan provided at solicitation in accordance with FAR 45.201(c)(4) shall be a description of the property management system to be used in managing Government property. No later than 60 days after contract award, the Contractor shall submit the Property Management System procedures in accordance with FAR 52.245-1(f) and supported by CDRL DI-MISC-80508B. Include Contracting Officer and Government Property Administrator in the submission. Changes thereafter to the Property Management System must be concurred by the Property Administrator prior to implementation.

Government property will be inventoried at least every 3 years at a minimum and classified or sensitive property must be inventoried at least annually.

Contractor shall utilize GFP Property Transfer to report receipt of GFP, report the transfer of GFP to another DoD contract, report the shipment of GFP to the Government or to a contractor and report when serially-managed items of GFP are incorporated into a higher-level component, assembly, or end item within 7 days

IAW DFARS 252.245-7005.

The Contractor shall submit a Government Property Inventory report IAW A002 of the Contract Data Requirements List (CDRL), DD Form 1423. This report shall be initially submitted 30 days post-award and monthly thereafter.

Contractor will request return of GFP to Customer upon contract completion or when deemed excess to contract performance. The Contractor is required to utilize CAP (contractor-acquired property) Pre-Screening of the GFP Module in PIEE for any

Contractor inventory (as defined in FAR 52.245-1) during the performance of the contract and for contract closeout. Any remaining Government property not reutilized, transferred, or otherwise disposed of at contract closeout, shall be submitted in the Plant Clearance function of the GFP Module in PIEE. If applicable, Contractor is responsible for demilitarization. Contractor is responsible for transportation and shipping when disposition instructions are provided unless transferred to another organization.

The Contractor shall obtain prior written authorization and approval from the KO or designee as applicable for any contractor-acquired property purchased to support the performance of any detailed requirement under this contract. The Contractor shall provide three cost estimates or a justification for sole source to the KO or designee for review and/or approval prior to purchase.

The Contractor shall only use the property for performing work in support of this contract. Modifications or alterations of property are prohibited. The Contractor shall not cannibalize property. In the event property is received by the Contractor in a condition not suitable for its intended use, the Contractor shall immediately notify the COR. The Contractor shall have a process to enable the prompt recognition, investigation, disclosure and reporting of loss of incidental property (meaning unintended, unforeseen or accidental loss, damage, or destruction of Government property that reduces the Government’s expected economic benefits of the property). Contractor shall include the control of incidental property in their Quality Control Plan.

The Contractor shall only use the property for performing work in support of this contract. Modifications or alterations of property are prohibited. The Contractor shall not cannibalize property. In the event property is received by the Contractor in a condition not suitable for its intended use, the Contractor shall immediately notify the COR. The Contractor shall have a process to enable the prompt recognition, investigation, disclosure and reporting of loss of incidental property (meaning unintended, unforeseen or accidental loss, damage, or destruction of Government property that reduces the Government’s expected economic benefits of the property). Contractor shall include the control of incidental property in their Quality Control Plan.

The Contractor shall investigate and report to the Government COR all incidents of property loss with-in 24 hours. This process shall include the corrective actions necessary to prevent recurrence. Such reports shall, at a minimum, contain the following information:

(i) Date of incident (if known)

(ii) Cause of incident

(iii) Nomenclature

(iv) NSN / Part number

(v) Quantity

(vi) Serial Number

(vii) Copies of all supporting documentation

(viii) Last known location

If damage or loss occurs to incidental property during the course of performance which is a direct result of Contractor negligence, the Contractor’s invoice shall be reduced by the amount of damage/loss resulting from their negligent action/inaction as directed by the Contracting Officer. In addition, a negative performance assessment will be considered.

The USG is responsible for the maintenance and/or repair costs of GP annotated on Tab A of the Incidental Property attachment. Contractor is responsible for the maintenance and/or repair costs of GP annotated on Tab B of the Incidental Property attachment.

The Contractor is required to conduct a physical inventory of all incidental property yearly. The Contractor shall submit a yearly report of incidental property in their possession.

4.1.1. Contractor Responsibility for Costs Associated with Government Property

The Contractor is responsible for all costs incurred in making Government property available for use under this contract. This includes, but is not limited to, the following:

• Transportation Costs: The Contractor shall bear all costs related to the transportation of GFP to the Contractor’s facilities, job sites, or other locations as required for performance of the contract. This includes the costs of shipping, handling, and any other related transportation expenses.

• Installation and Setup Costs: The Contractor is responsible for any costs associated with the installation, setup, and calibration of GFP, ensuring that it is ready for use in performance of the contract. This includes any required labor, equipment, or materials needed to install and make the property operational.

• Rehabilitation Costs: The Contractor shall bear the costs for any necessary rehabilitation, repair, or modification of GFP to ensure that it meets the requirements of the contract. These costs may include labor, materials, and any other expenses associated with returning the property to an operable condition, as required to perform the contract tasks.

All costs associated with the transportation, installation, rehabilitation, and use of Government property must be accounted for in the contractor’s proposal. The contractor is required to manage and allocate these costs effectively throughout the contract performance period.

The Contractor shall also include all costs associated with the closeout of Government Property, including but not limited to Disposition Costs and Final Reporting. The

Government will not provide additional funding for costs associated with the closeout of GFP at the end of the contract. All such costs must be included in the Contractor’s original proposal, and the Contractor shall be responsible for the completion of the property closeout process within the scope of the contract’s original funding.

4.1.2. Disposition Government Furnished Property (GFP)

Upon completion, termination, or expiration of the contract, the Contractor shall promptly return all GFP to a location designated by the Contracting Officer in accordance with FAR 52.245-1. If the GFP is no longer required or if it is not used as specified in the contract, the Contractor shall follow the applicable procedures for reporting the disposition of the property.

The contractor is required to dispose of GFP in one of the following manners, as directed by the Contracting Officer:

• Return to the Government: If the GFP is required to be returned to the Government, the contractor shall arrange for return shipment at no additional cost to the Government, following all shipping and documentation requirements.

• Transfer to Another Contract: If the GFP is to be transferred to another contract or Government agency, the contractor shall work with the Contracting Officer to ensure the proper transfer of the property, including the completion of required transfer forms and documentation.

• Disposal via Other Means: If the GFP is no longer needed for contract performance and the Contracting Officer directs the contractor to dispose of the property, the contractor shall comply with disposal instructions, including but not limited to sale, donation, recycling, or destruction.

The contractor shall return GFP in the same condition as it was received, with allowances for normal wear and tear resulting from the Contractor’s use of the property in performance of the contract. The Contractor shall report any damages, loss, or theft of GFP as soon as it is discovered, in accordance with the reporting requirements specified in FAR 52.245-1.

In the event of loss, damage, or destruction of GFP, the Contractor shall immediately report the incident to the Contracting Officer and provide a written explanation of the circumstances, including the actions taken to mitigate the loss, damage, or destruction. The Contractor shall maintain appropriate insurance to cover the loss or damage of GFP while in the contractor’s possession, as required by the contract terms. The Contractor shall immediately notify (within 24 hours) the Contracting Officer in writing via email of any loss, damage, or destruction of GFP. Notification shall include a description of the incident, the actions taken, and the impact on contract performance.

At the completion or termination of the contract, the Contractor shall include the final disposition status to the Contracting Officer under CDRL A002. The report shall include a list of all GFP provided under the contract, the condition of the property, and the final disposition actions taken (e.g., returned to the government, transferred to another contract, or disposed of). The report shall be submitted no later than 30 days after contract completion.

4.1.3. Incidental Property

Incidental property is not covered under FAR Part 45, Government Property. The Contractor is responsible for maintenance and repair costs and conditions by which the contractor could be liable for loss.

4.2. Facilities.

The Contractor shall be responsible for maintaining the office space/working space within the SMC facility necessary to accomplish the requirements outlined within this PWS. The Government shall provide the shelving, cages, forklifts, UID printers, test lab equipment, and any other specialty items currently required to support the STMS. Computers will be provided to the Contractor personnel by the Government.

Common Access Card (CAC) is required for Government computer use.

If the Contractor proposes a facility other than the current incumbent facility, the proposed facility must be “move in ready” on the day of contract award. The incumbent contractor (herein referred to as “the incumbent”) will uninstall all Government Furnished Property (GFP) (PWS paragraph 4 and subparagraphs) and any other Government-owned software and documentation at the incumbent’s helpdesk location at APG. The Contractor awardee (herein referred to as “the Contractor”) shall ship the items to the Contractor’s new SMC location and reinstall all of the equipment at that location. The Government will be responsible for the cost of shipping. The Government will notify the Contractor when the GFP is available for shipping, and the Government will help facilitate and coordinate this move with the incumbent. The Contractor shall prepare a list of all hardware, software, and documentation removed by the Contractor, which the Government will validate prior to the Contractor shipping the items to the Contractor’s new SMC location. The list shall be submitted to the Government IAW CDRL A002.

4.3. Telephone Services.

The Contractor shall be provided telephone services for official use only in carrying out the terms of this contract. Defense System Network (DSN) capable telephone lines will be provided at each Government provided service facility. The dial access capability will be restricted to only that capability required for mission accomplishment, to provide contact between the service facility and other service locations and facilities. This service is provided strictly for the purpose of completing the mission requirements of this contract (e.g., coordinate response to outage, parts/labor support, etc.).

4.4. Internet and Email Access (Official Use Only).

The Contractor shall provide standard commercial Internet services within the SMC facility. Any requirements for other than commercial Internet services will be provided by the Government and coordinated with the U.S. Army Signal Network Enterprise Center at Aberdeen Proving Ground (USASNEC-APG). The SMC facility shall provide capability for SIPR/NIPRnet access. The Government shall provide oversight and assistance with access to SIPR/NIPR capabilities as required.

4.5. Vehicles will be provided to OCONUS personnel only.

Personnel must obtain a local Kuwait country license prior to the Government authorizing vehicles; the Contractor shall be responsible for the sponsor of this license via a “bridge” company of the Contractor’s choosing.

4.6. Contractor Acquired Property (CAP)

The Contractor may be required to acquire property necessary to perform the tasks described in this PWS. Any property acquired by the Contractor that is intended to become government property under the terms of this contract shall be governed by the provisions of this section and in accordance with the applicable Federal Acquisition Regulation (FAR), Defense Federal Acquisition Regulation Supplement (DFARS), and the terms specified in this contract.

For items with an acquisition cost exceeding $5,000.00, the Contractor is required to obtain prior written approval from the Contracting Officer before acquiring property that will become government property under the terms of the contract. The Contractor must submit a request to the Contracting Officer with detailed information regarding the type of property, its intended use, cost, and justification for acquisition.

The Contracting Officer will review and approve or deny the request in accordance with applicable regulations. The Contractor must obtain explicit approval from the Contracting Officer before proceeding with the acquisition.

The Contractor shall establish and maintain a property management system that includes proper controls to safeguard and account for any CAP. The system shall comply with FAR 45.5 and DFARS 245.1 to ensure proper accountability and protection of government property. The Contractor shall label and record all CAP in accordance with the contractor’s property management system, ensuring that government property is clearly identified as such. CAP shall be reported in CDRL A002 and shall include a description, serial number (if applicable), location, and status. The Contractor shall immediately notify (within 24 hours) the Contracting Officer in writing via email of any loss, damage, or destruction of CAP. Notification shall include a description of the incident, the actions taken, and the impact on contract performance.

The Government will retain title to all CAP, unless otherwise specified in the contract. Upon contract completion or termination, the Contractor shall return all government property to the government in accordance with the terms specified in the contract. The Contractor shall cooperate with the Contracting Officer in the final disposition of CAP, including returning or transferring ownership, as directed by the Government.

4.7. Property Management Plan (PMP)

The Property Management Plan provided at Solicitation in accordance with FAR 45.201(c)(4) shall be a description of the property management system to be used in managing Government property. No later than 60 days after contract award, the Contractor shall submit the Property Management System procedures in accordance with FAR 52.245-1(f) under CDRL A005. Include Contracting Officer and Government Property Administrator in the submission. Changes thereafter to the Property Management System must be concurred by the Property Administrator prior to implementation.

5. ITEM UNIQUE IDENTIFICATION (IUID)

The Contractor shall manage an IUID program for all hardware delivered under this contract to ensure that all equipment meeting the UID criteria is marked, and the applicable data are submitted to the DoD UID Repository.

5.1. UID Marking

The Contractor shall comply IAW Defense Federal Acquisition Regulation Supplement (DFARS) 252.211-7003, Item Unique Identification and Valuation…