Attachment 1 - DRAFT PWS.pdf

U.S. TRANSPORTATION COMMAND 1

DRAFT Performance Work Statement 2

USTRANSCOM Acquisition Program Support 6

Scott Air Force Base, Illinois 11

18 December 2025 13

Table of Contents 16

1 DESCRIPTION OF SERVICES ...................................................................................... 6 18

2 BACKGROUND .............................................................................................................. 6 19

3 SCOPE .............................................................................................................................. 6 20

4 SPECIFIC TASKS ........................................................................................................... 7 21

4.1 TASK 1: CONTRACT AND PROGRAM MANAGEMENT ................................ 7 22

4.1.1 Task 1, Subtask 1: Program Management ......................................................... 7 23

4.1.2 Task 1, Subtask 2: Program Documentation and Reporting ............................. 8 24

4.1.3 Task 1, Subtask 3: Governance Support ........................................................... 8 25

4.2 TASK 2: PROGRAM ADMINISTRATIVE SUPPORT ......................................... 8 26

4.2.1 Task 2, Subtask 1: IT Equipment and Administrative Support......................... 8 27

4.2.2 Task 2, Subtask 2: FACCSM Support .............................................................. 9 28

4.2.3 Task 2, Subtask 3: Program Operations Support .............................................. 9 29

4.3 TASK 3: FUNCTIONAL SUPPORT..................................................................... 10 30

4.3.1 Task 3, Subtask 1: Functional Requirements Definition and Management .... 10 31

4.3.2 Task 3, Subtask 2: Business Process Support ................................................. 10 32

4.3.3 Task 3, Subtask 3: Subject Matter Expert Functional Support ....................... 11 33

4.3.4 Task 3, Subtask 4: Audit Readiness Support .................................................. 11 34

4.4 TASK 4: INTEGRATION SUPPORT ................................................................... 12 35

4.4.1 Task 4, Subtask 1: Integration and Data Support ............................................ 12 36

4.4.2 Task 4, Subtask 2: Interface Management ...................................................... 12 37

4.5 TASK 5: SYSTEM ENGINEERING SUPPORT .................................................. 13 38

4.5.1 Task 5, Subtask 1: Systems/Technical Engineering Support .......................... 13 39

4.5.2 Task 5, Subtask 2: Software Development Support ........................................ 13 40

4.5.3 Task 5, Subtask 3: C o n f i g u r a t i o n Management .................................... 14 41

4.5.4 Task 5, Subtask 4: Agile Development Management ..................................... 14 42

4.5.5 Task 5, Subtask 5: Operational System Support ............................................. 15 43

4.5.6 Task 5, Subtask 6: Decision Analysis ............................................................. 15 44

4.5.7 Task 5, Subtask 7: Integration, Verification, and Validation (IV&V) Support45 15 46

4.5.8 Task 5, Subtask 8: Technical Data Management Support .............................. 16 47

4.6 TASK 6: SYSTEM SECURITY SUPPORT .......................................................... 16 48

4.6.1 Task 6, Subtask 1: RMF Compliance and Security Documentation ............... 16 49

4.6.2 Task 6, Subtask 2: System Monitoring and Vulnerability Management ........ 17 50

4.6.3 Task 6, Subtask 3: Compliance Auditing and Ports, Protocols, and Services 51 Management (PPSM) ........................................................................................................ 17 52

4.6.4 Task 6, Subtask 4: Cybersecurity Operations ................................................. 18 53

4.7 TASK 7: PROGRAM CONTROLS SUPPORT ................................................... 18 54

4.7.1 Task 7, Subtask 1: Budget Support ................................................................. 18 55

4.7.2 Task 7, Subtask 2: Reporting Support ............................................................. 19 56

4.7.3 Task 7, Subtask 3: Cost Analysis Support ...................................................... 19 57

4.7.4 Task 7, Subtask 4: Risk Management Support ............................................... 20 58

4.7.5 Task 7, Subtask 5: Schedule Management Support ........................................ 20 59

4.8 TASK 8: TRAINING SUPPORT ........................................................................... 21 60

4.9 TASK 9: INNOVATION ....................................................................................... 21 61

5 DELIVERABLES .......................................................................................................... 21 62

6 SERVICE DELIVERY SUMMARY ............................................................................. 23 63

7 CYBERSECURITY INCIDENT REPORTING ............................................................ 26 64

7.1 Cybersecurity Incident Reporting Timelines .......................................................... 27 65

7.2 Mandatory Reporting Data ..................................................................................... 27 66

7.2.1 Incident Initial Notification ............................................................................. 27 67

7.2.2 Incident Follow-On Reporting ........................................................................ 28 68

7.3 Incident Reporting Coordination ............................................................................ 28 69

7.3.1 On-Site Review ............................................................................................... 28 70

7.3.2 Follow-On Actions .......................................................................................... 28 71

7.3.3 Cybersecurity Incident Data Preservation ....................................................... 28 72

7.3.4 Cybersecurity Mitigation................................................................................. 29 73

7.4 Confidentiality and Non-Attribution Statement ..................................................... 29 74

8 GENERAL INFORMATION ........................................................................................ 29 75

8.1 Phase-In .................................................................................................................. 30 76

8.2 Personnel Management ........................................................................................... 30 77

8.3 Kick-off Meeting .................................................................................................... 30 78

8.4 Operational Security (OPSEC) ............................................................................... 30 79

8.5 System Security Plan .............................................................................................. 31 80

8.6 Place of Performance .............................................................................................. 31 81

8.7 Period of Performance TBD ................................................................................... 31 82

8.7.1 Work Hours ..................................................................................................... 31 83

8.8 Travel ...................................................................................................................... 31 84

8.9 Other Direct Costs (ODC) ...................................................................................... 32 85

8.10 Government Furnished Information ....................................................................... 32 86

8.11 Government Furnished Property ............................................................................ 32 87

8.12 Contractor Employee Qualifications/Certificates ................................................... 32 88

8.13 Non-Disclosure Agreement for Contractor Employees .......................................... 33 89

8.14 Identification of Potential Organizational Conflict of Interest ............................... 33 90

8.15 Limitations on Future Contracting ......................................................................... 33 91

8.16 Company to Company Agreements ........................................................................ 33 92

8.17 Non-Personal Services Contract ............................................................................. 34 93

8.18 Transfer of Materials .............................................................................................. 34 94

8.19 Transition-Out ........................................................................................................ 34 95

8.20 Quality Control ....................................................................................................... 35 96

8.20.1 Quality Assurance ........................................................................................... 35 97

8.20.2 Quality Control Plan........................................................................................ 35 98

8.20.3 Contractor Professionalism ............................................................................. 35 99

8.20.4 Communication ............................................................................................... 35 100

8.20.5 Contractor Collaboration ................................................................................. 36 101

9 SECURITY (PHYSICAL, PERSONNEL, INFORMATION, INDUSTRIAL ANTI-102

TERRORISM/FORCE PROTECTION AND INDUSTRIAL) ..................................... 36 103

9.1 General Security Information ................................................................................. 36 104

9.1.1 Citizenship and Clearance Requirements ........................................................ 36 105

9.1.2 Information Sharing ........................................................................................ 36 106

9.1.3 Information System (IS) Roles/Categories and Associated Suitability 107 Requirements (Federal Investigative Standards) ............................................................... 37 108

9.1.4 Security Clearance and Special Access Requirements ................................... 37 109

9.1.5 Facilities Clearance ......................................................................................... 37 110

9.1.6 Personnel and Facilities Clearance Validation ................................................ 37 111

9.1.7 Common Access Card Issuance Procedures ................................................... 38 112

9.1.8 Access to Scott Air Force Base or USTRANSCOM Facilities ....................... 38 113

9.1.9 Visits by Non-Assigned Contractors to USTRANSCOM/SDDC Buildings .. 39 114

9.1.10 Visits by Permanently Assigned Contractors .................................................. 39 115

9.1.11 Supplemental Notes Regarding Visit Information in the DoD Personnel 116 Security System of Record ................................................................................................ 39 117

9.1.12 Security and Emergency Operations Training ................................................ 39 118

9.1.13 Additional Security Considerations ................................................................ 40 119

9.1.14 Derogatory Information................................................................................... 40 120

9.1.15 Accessing NATO Information ........................................................................ 40 121

9.1.16 Security Debriefing ......................................................................................... 41 122

9.1.17 Antiterrorism/Force Protection ....................................................................... 41 123

9.1.18 Prime Contractor Facility Security Officer ..................................................... 41 124

9.2 Cyberspace Workforce Management and Qualification ........................................ 42 125

9.2.1 Cyberspace Workforce Management Qualifications ...................................... 42 126

9.2.2 Failure to Qualify ............................................................................................ 43 127

10 MISCELLANIOUS ........................................................................................................ 43 128

10.1.1 Freedom of Information Act ........................................................................... 43 129

10.1.2 Controlled Unclassified Information ............................................................... 44 130

10.1.3 Privacy Act ...................................................................................................... 44 131

10.1.4 Records ............................................................................................................ 44 132

10.1.5 Safety Concerns............................................................................................... 44 133

10.1.6 Project Policy .................................................................................................. 44 134

10.1.7 Inherently Governmental Functions ................................................................ 44 135

10.1.8 Section 508 Compliance.................................................................................. 44 136

11 Appendix A: ACRONYMS............................................................................................ 46 137

12 Appendix B: NONDISCLOSURE AGREEMENT (NDA) ........................................... 49 138

13 Appendix C: APPLICABLE DOCUMENTS/REFERENCES ...................................... 52 139

Tables 141

Table 5-1: Deliverables ................................................................................................................ 22 142

Table 6-1: Service Delivery Summary ........................................................................................ 23 143

Table 7-1: Incident Categories ..................................................................................................... 26 144

Table 11-1: Acronyms ................................................................................................................. 46 145

1 DESCRIPTION OF SERVICES 148

The requirement is to acquire non-personal Advisory and Assistance Services (A&AS) to 149 provide program management, engineering, configuration management, and acquisition-150 related support to the United States Transportation Command (USTRANSCOM) programs. 151

2 BACKGROUND 152

PEO-T is an acquisition program management organization chartered to manage cost, schedule, 153 performance, and risk to develop, field, and sustain effective enabling activities to support 154 USTRANSCOM. The PEO-T manages acquisition programs, program-related activities, and 155 select services acquisition for USTRANSCOM and for its other associated supporting 156 organizations when USTRANSCOM requirements are included as part of the effort. 157 Specific to the Joint Transportation Management (JTMS) Program, in March 2022, the Office of 159 the Under Secretary of Defense (USD) for Acquisition and Sustainment (A&S) issued a 160 memorandum designating the JTMS program as a Business System Category (BCAT) 1 system 161 with the USD(A&S) as the Milestone Decision Authority (MDA) consistent with DoD 162 Instruction (DoDI) 5000.75. The program received MDA approval to move into the Systems 163 Functional Requirements and Acquisition Planning Phase of the Business Capability Acquisition 164 Cycle (BCAC) in June 2023. The program developed the required artifacts and received 165 Acquisition, Testing, and Deployment Authority to Proceed in March 2025 which provided the 166 necessary approval to award the JTMS Implementation Contract. As the program evolves and 167 continues down the BCAC path, programmatic support in multiple areas including, but not 168 limited to program management, engineering, budgeting, cost estimating, and functional subject 169 matter expertise is required to enable successful delivery of the program’s critical warfighting 170 capabilities. 171

3 SCOPE 172

This Performance Work Statement (PWS) outlines the non-personal A&AS requirements 173 required by the Government in support of USTRANSCOM, JDDE stakeholders, and other 174 associated and supporting organizations. The Contractor shall provide technical assistance 175 across all disciplines including contract management, program office support, functional 176 support, architecture and integration, system engineering, system security, program control 177 support, and training to the current Programs of Record (POR). 178 This PWS includes the following task areas: 180

Task Area 1: Contract Management 181 Task Area 2: Joint Program Office Support 182 Task Area 3: Functional Support 183 Task Area 4: Architecture and Integration Support 184 Task Area 5: System Engineering Support 185 Task Area 6: System Security Support 186 Task Area 7: Program Controls Support 187 Task Area 8: Training Support 188 Task Area 9: Innovation 189

The contractor shall provide all deliverables listed in Section 5 in accordance with the Service 191 Delivery Summary in Section 6 of the PWS and as described in each specific Task Order. 192

4 SPECIFIC TASKS 193

The Contractor shall maintain awareness of evolving developments in the areas supported, as 194 well as the need to support program activities during any potential new areas where support 195 may be required. The Contractor shall provide recommendations on ways to enhance the 196 effectiveness of program activities throughout fielding and sustainment of the application 197 programs. The Contractor shall identify and recommend actions to minimize risk in support 198 of USTRANSCOM. Additionally, the contractor shall support sundown of programs as 199 required. 200 For all task areas in this PWS, the Contractor shall apply expert knowledge and guidance 202 contained within DoD acquisition-related instructions, acquisition-related Air Force 203 implementing instructions, DoD Financial Management and associated Regulations, as well 204 as DFAS Regulations/Guidance. 205

4.1 TASK 1: CONTRACT AND PROGRAM MANAGEMENT 206

Objective: Provide administrative and management support for the program. 207

4.1.1 Task 1, Subtask 1: Program Management 208

Objective: Provide program management support. 209

The contractor shall identify a Program Manager (PM) who shall provide management, 210 direction, administration, support, documentation, quality assurance, and leadership during 211 the execution of tasks associated with this PWS. The contractor’s PM shall serve as the 212 authorized point of contact for the Government’s Contracting Officer’s Representative 213 (COR). PM responsibilities include, but are not limited to, interfacing with Government 214 management personnel; staffing; formulating and enforcing work/quality standards; creating 215 personnel and project schedules; mitigating contractor work discrepancies; and 216 communicating the Government policies and goals to the contractor team. 217 The contractor shall analyze documents and prepare materials such as briefings, papers, and 219 documentation for presentations to various levels of mission partners, stakeholders and 220 leadership, to include senior level executives in the military and civil service, as well as 221 executive working groups. The contractor shall ensure artifacts are developed and maintained 222 in accordance with DoD acquisition-related instructions and compliant with DoD CIO 223 regulations. 224 Potential types of deliverables may include briefings, point papers, etc. 226 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 228 in individual task orders. 229

4.1.2 Task 1, Subtask 2: Program Documentation and Reporting 230

Objective: Support program management through documentation and reporting. 231 The contractor may be required to develop and maintain various program documents and 233 reports at the task order level. 234 Potential types of deliverables may include: Program Management Plans that address 236 schedule, resources, risk, and communications; activity summaries documenting completed 237 work and future objectives; progress review materials; meeting minutes; travel 238 documentation; and periodic status reports that track deliverables, issues, activities, resource 239 utilization, and metrics. 240 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 242 in individual task orders. 243

4.1.3 Task 1, Subtask 3: Governance Support 244

Objective: Provide administrative support for program governance boards. 245 The contractor may be required to provide governance support at the task order level. These 247 activities may include scheduling and arranging meetings; managing invitation and 248 distribution lists; creating agendas and briefing materials; obtaining, preparing, and 249 distributing materials for review; tracking and providing status of action items; documenting 250 meeting minutes, directives, and actions; updating information in Government tracking tools; 251 and communicating board decisions to appropriate organizations. 252 Potential types of deliverables may include: agendas, meeting minutes, briefing materials, 254 action items, etc. 255 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 257 in individual task orders. 258

4.2 TASK 2: PROGRAM ADMINISTRATIVE SUPPORT 259

Objective: Provide comprehensive administrative support to enable effective program 260 management operations. 261

4.2.1 Task 2, Subtask 1: IT Equipment and Administrative Support 262

Objective: Provide support by maintaining accurate equipment inventory control and provide 263 front-line IT support to PMO personnel, ensuring efficient and secure use of IT resources. 264 The contractor may be required to provide various equipment management and administrative 266 support functions at the task order level. These may include but are not limited to: 267 maintaining inventory of equipment and assets; tracking location, condition, and user 268 assignments; supporting equipment transfers and accountability; assisting with equipment 269 issues and troubleshooting; coordinating with equipment custodians and support personnel; 270 supporting audits and inventory reconciliation; and transporting equipment between locations 271 as needed. Additionally, the contractor may provide routine administrative support for 272 equipment, including installation, configuration, and basic troubleshooting. 273 Potential types of deliverables may include: Monthly inventory, including a summary of any 275 inventory discrepancies and corrective actions taken; annual inventory after FY closeout, 276 providing a complete and accurate record of all ADPE under the contractor’s control; 277 equipment accountability and inventory logs/reports, providing a detailed audit trail of 278 equipment movements and inventory changes. 279 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 281 in individual task orders. 282

4.2.2 Task 2, Subtask 2: FACCSM Support 283

Objective: Provide comprehensive FACCSM Support to program personnel. 284 Functional Area Communications and Computer Systems Manager (FACCSM) duties include 286 all communications related to troubleshooting, placement, repair, and replacement of 287 computer equipment, printers, and phones. The contractor may be required to provide 288 FACCSM services at the task order level. These may include, but are not limited to: customer 289 support, communications troubleshooting, equipment management, software support, and 290 systems administration. Support may involve tracking issues, coordinating with technical 291 organizations, maintaining workstations and peripheral equipment, managing software 292 licensing and installation, creating maintenance procedures, implementing lifecycle 293 management, and capacity planning. The contractor may be required to respond to IT service 294 requests, provide system expansion recommendations, and report on technical issues and 295 resolutions. 296 Potential types of deliverables may include: Monthly issue / productivity logs, Capacity 298 Management Plan. 299 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 301 in individual task orders. 302

4.2.3 Task 2, Subtask 3: Program Operations Support 303

Objective: Provide comprehensive administrative and records management support to enable 304 effective program operations, ensuring efficient communication, organization, and 305 compliance with relevant policies. 306 The contractor may be required to provide various program operations support activities at the 308 task order level. These may include, but are not limited to: preparing reports and briefings; 309 managing meetings and correspondence; providing administrative and organizational support 310 through calendar management and correspondence tracking; maintaining knowledge 311 management artifacts and supporting requirements conferences; analyzing program data and 312 developing recommendations; coordinating activities with internal and external organizations; 313 establishing management controls for operations and task tracking; supporting resource 314 allocation justifications; managing tasker lists and deadlines; providing records management 315 services; administering collaboration platforms (e.g., SharePoint, Microsoft Teams); and 316 training program personnel on systems and processes. 317 Potential types of deliverables may include: Meeting Agendas, Meeting Minutes for official 319 meetings, Program IPR briefings, Draft IPT Charter Documentation, IPT Meeting Support 320 (Schedule, Draft Agenda, Draft Minutes, Track Action Items, Attend Meetings), Software 321 License Tracking Reports, files plan and auditable artifacts IAW official and government 322 guidance. 323 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 325 in individual task orders. 326

4.3 TASK 3: FUNCTIONAL SUPPORT 327

Objective: Provide functional support for program. 328

4.3.1 Task 3, Subtask 1: Functional Requirements Definition and 329 Management 330

Objective: Provide independent research, analysis, and requirements support for programs. 331 The contractor may be required to provide functional requirements definition and 333 management support at the task order level. These activities may include, but are not limited 334 to: analyzing user needs to determine functional and cross-functional requirements; 335 performing functional allocation; monitoring and providing recommendations on functional 336 requirements; establishing requirement elicitation opportunities with stakeholders; identifying 337 and managing stakeholder requirements; defining and managing performance indicators and 338 value assessment criteria; maintaining stakeholder communications; supporting requirements 339 management using appropriate tools and methodologies; drafting requirements 340 documentation; facilitating requirements reviews; maintaining requirements traceability; 341 supporting requirements decomposition; conducting analysis of requirements against business 342 practices; supporting financial business-related requirements; and documenting systems 343 analysis to support functional requirements. 344 Potential types of deliverables may include: Requirements library management, and other 346 artifacts supporting requirements; KPI development, refinement, and management; Value 347 Assessment criteria and analysis reports; and documentation of financial, logistics, and 348 technical requirements. 349 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 351 in individual task orders. 352

4.3.2 Task 3, Subtask 2: Business Process Support 354

Objective: Provide functional expertise for business process improvement initiatives. For 355 JTMS specifically, this includes development and review of Business Process Re-engineering 356 (BPR) artifacts affecting the transportation and financial domains across the JDDE. 357 The contractor may be required to provide business process support services at the task order 359 level. These may include, but are not limited to: facilitating and participating in business 360 process re-engineering efforts; partnering with stakeholders to revise applicable instructions, 361 regulations, and guidance; developing assessments of doctrine, organization, training, 362 materiel, leadership and education, personnel, facilities, and policy (DOTmLPF-P); 363 documenting impacts and changes; providing submissions to publication owners; and 364 conducting analysis on business process efforts in relation to commercial best practices. 365 Potential deliverables may include: Artifacts relating to assigned BPR workload. 367 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 369 in individual task orders. 370

4.3.3 Task 3, Subtask 3: Subject Matter Expert Functional Support 371

Objective: Provide expert functional support to program stakeholders across the DoD. For 372 JTMS specifically, this includes Air Force, Army, Navy, Marine Corps, Coast Guard, DLA, 373 DCMA, and DFAS. 374 The contractor may be required to provide expert functional support at the task order level. 376 These activities may include supporting stakeholders in various forums; participating in 377 architecture, business process, systems engineering, and training efforts; providing expertise 378 on functional requirements, data management, and system integration; assisting with revision 379 and development of instructions, regulations, and guidance documents; maintaining records of 380 activities, decisions, and recommendations; and communicating with stakeholders to ensure 381 program alignment and transparency. 382 Potential types of deliverables may include: Artifact Documentation, Regulatory Updates, 384 other documentation (e.g., meeting minutes/action items, system engineering documentation) 385 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 387 in individual task orders. 388

4.3.4 Task 3, Subtask 4: Audit Readiness Support 389

Objective: Provide support for financial audit activities. 390 The contractor may be required to provide audit readiness support at the task order level. 392 These activities may include, but are not limited to: designing, implementing, documenting, 393 performing, and testing internal controls; developing plans and recommendations for meeting 394 applicable regulations and standards; determining and implementing appropriate controls; 395 participating in control testing; supporting external audit activities; developing corrective 396 action plans; collaborating with contractors and government personnel on control 397 implementation; coordinating with stakeholders on audit matters; responding to audit 398 inquiries; and supporting the preparation of audit reports. 399 Potential types of deliverables may include: Audit support plans and other artifacts 401 supporting audit readiness 402 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 404 in individual task orders. 405

4.4 TASK 4: INTEGRATION SUPPORT 406

Objective: Provide system/data integration and interface management support. 407

4.4.1 Task 4, Subtask 1: Integration and Data Support 408

Objective: Provide support for integration and data activities. 409 The contractor may be required to provide integration and data support at the task order level. 411 These activities may include, but are not limited to: assisting with data mapping across 412 applications and interfaces; reviewing technical documentation; managing data and 413 recommending updates or changes; coordinating data updates and corrections; determining 414 expected results and proposing appropriate data revisions; implementing data changes; 415 providing feedback on potential discrepancies; partnering to correct incomplete or erroneous 416 system data; querying databases to determine data status; interfacing with IT engineers to 417 resolve data quality issues; providing engineering support for interface management; 418 supporting technical data calls; assisting with analysis of help desk tickets related to data 419 issues; capturing, verifying, and validating requirements for data analytics capabilities; and 420 assessing technical maturity and analytical rigor of data analytic technologies to recommend 421 implementation. 422 Potential types of deliverables may include: Technical artifacts relating to system and data 424 integration such as position papers, studies, and analysis. 425 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 427 in individual task orders. 428

4.4.2 Task 4, Subtask 2: Interface Management 429

Objective: Provide support for establishing, documenting, and maintaining connections to 430 systems supporting the programs. 431 The contractor may be required to provide interface management support at the task order 433 level. These activities may include, but are not limited to: coordinating with the Government 434 to provide interface management documentation; assisting with interpretation and monitoring 435 of system viability and integration of interfaces; coordinating documentation of internal and 436 external interface requirements and requirement changes; enabling integration of systems and 437 system elements; supporting system maintenance, enhancements, and upgrades; providing 438 input for risk management efforts; developing, reviewing, and updating interface 439 specifications and related documents; assessing compliance of interfaces among system 440 configuration items; and monitoring the viability and integrity of interfaces within systems. 441 Potential types of deliverables may include: Technical artifacts relating to interfaces including 443 draft Interface Control Documentation, Service Level Agreements, etc. Applicable 444 presentations, position papers, technical specifications, physical design specifications relating 445 to system interfaces. 446 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 448 in individual task orders. 449

4.5 TASK 5: SYSTEM ENGINEERING SUPPORT 450

Objective: Provide technical support for the implementation, operations, and sustainment of 451 the program. 452

4.5.1 Task 5, Subtask 1: Systems/Technical Engineering Support 453

Objective: Provide technical engineering support for implementation and sustainment 454 activities. 455 The contractor may be required to provide systems engineering and technical support at the 457 task order level. These activities may include providing expertise for systems and 458 infrastructure across all domains; supporting technical management processes, assessments, 459 specifications, architectures, and design documents; drafting and maintaining compliance, 460 architecture, and sustainability documentation; supporting engineering-related acquisition 461 milestone reviews; coordinating with Government engineers; providing technical 462 recommendations to maintain system performance; monitoring architectures for compliance 463 with applicable regulations and requirements; supporting Agile methodologies; assisting in 464 analyzing constraints and developing solutions; participating in technical meetings and 465 working groups; advising on technical assessments, reviews, and audits; supporting the 466 creation of technical performance measures and planning documents; and providing technical 467 support for market research. 468 Potential types of deliverables may include: Technical artifacts (briefings, documents, etc.) 470 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 472 in individual task orders. 473

4.5.2 Task 5, Subtask 2: Software Development Support 474

Objective: Provide technical support for software development. 475 The contractor may be required to provide software development support at the task order 477 level. These activities may include, but are not limited to: configuring, operating, and 478 maintaining program support tools and capabilities; assisting with software license 479 management; analyzing help desk tickets; supporting ad hoc reporting; researching hardware 480 and software solutions; supporting testing of software upgrades; evaluating acquisition 481 solutions for conformity and purpose; reviewing system deployment approaches; coordinating 482 with organizations to address engineering issues; reviewing engineering schedules; and 483 supporting interoperability certification and assessment processes. 484 Potential types of deliverables may include: Technical artifacts relating to software 486 development support such as position papers, technical specifications, physical design 487 specifications 488 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 490 in individual task orders. 491

4.5.3 Task 5, Subtask 3: C o n f i g u r a t i o n Management 492

Objective: Provide Configuration Management (CM) support for programs. 493 The contractor may be required to provide configuration management support at the task 495 order level. These activities may include, but are not limited to: supporting maintenance, 496 monitoring, and reporting on configuration management baselines; monitoring development 497 contractors’ CM activities; supporting access to CM baselines for operations and maintenance 498 organizations; validating source code and executable files in CM repositories; maintaining 499 CM libraries; performing CM audits; ; reviewing and coordinating reviews for vendor 500 deliverables; tracking status; maintaining CM databases and libraries; and leading document 501 reviews using approved CM processes and tools. 502 Potential types of deliverables may include: Maintain and update existing plans 504 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 506 in individual task orders. 507

4.5.4 Task 5, Subtask 4: Agile Development Management 508

Objective: Provide Agile Development Management support for programs. 509 The contractor may be required to provide agile development management support at the task 511 order level. These activities may include but are not limited to: supporting agile delivery 512 processes; providing personnel to support agile trains and engineering teams; organizing 513 meetings, ceremonies, and processes within agile frameworks; coordinating required 514 documentation; assisting with process organization; managing backlogs; gathering 515 stakeholder feedback; updating requirements tools and workflows; and supporting test, 516 validation, and verification activities. 517 Potential types of deliverables may include: Technical artifacts relating to agile frameworks 519 or supporting IT system configurations/maintenance. 520 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 522 in individual task orders. 523

4.5.5 Task 5, Subtask 5: Operational System Support 524

Objective: Support the management and oversight of Information Technology (IT) systems 525 as well as Operation and Sustainment (O&S) efforts. 526 The contractor may be required to provide operational system support at the task order level. 528 These activities may include, but are not limited to: assisting with operational oversight to 529 sustain software applications; supporting fielding, failover, troubleshooting, and problem 530 management; assisting with ticket resolution and cyber operations reporting; developing 531 compliance documentation; providing technical advice on IT issues; coordinating with 532 technical stakeholders and governing bodies; assisting with help desk oversight; identifying 533 potential operational issues; coordinating system upgrades and enhancements; and 534 participating in operations and sustainment working groups. 535 Potential types of deliverables may include: Technical artifacts relating to managing the 537 operational system. 538 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 540 in individual task orders. 541

4.5.6 Task 5, Subtask 6: Decision Analysis 542

Objective: Provide technical support for decision analysis and trade studies. 543 The contractor may be required to provide decision analysis support at the task order level. 545 These activities may include but are not limited to: supporting decision analyses and trade 546 studies; developing decision briefings; drafting recommendations for decision authorities; 547 establishing the decision context; identifying analysis methods and tools; developing 548 evaluation criteria; identifying alternatives; analyzing information; synthesizing results; and 549 presenting findings and recommendations to program leadership. 550 Potential types of deliverables include: Technical artifacts related to Decision Analysis such 552 as meeting minutes, briefing materials, scorecards, technical reports. 553 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 555 in individual task orders. 556

4.5.7 Task 5, Subtask 7: Integration, Verification, and Validation (IV&V) 557 Support 558

Objective: Provide technical support for IV&V. 559 The contractor may be required to provide IV&V support at the task order level. These 561 activities may include but are not limited to: supporting all aspects of IV&V processes; 562 providing technical recommendations for testing, performance measurement, and security 563 scanning; supporting Test Readiness Reviews; monitoring and providing input to testing 564 activities; supporting product demonstrations; and measuring system performance against Key 565 Performance Parameters. 566 Potential types of deliverables include: Technical artifacts related to IV&V such as meeting 568 minutes, briefing materials, technical reports. 569 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 571 in individual task orders. 572

4.5.8 Task 5, Subtask 8: Technical Data Management Support 573

Objective: Provide support for technical data and information throughout the program 574 lifecycle. 575 The contractor may be required to provide technical data management support at the task 577 order level. These activities may include identifying and acquiring technical data; identifying 578 data requirements and rights strategies; maintaining data throughout program lifecycles; 579 providing periodic reporting and evaluation of artifacts; supporting data storage, control, and 580 exchange; maintaining artifacts under configuration management; and supporting all phases 581 of program lifecycles from stand-up through sundown. 582 Potential types of deliverables include: Technical artifacts related to Technical Data 584 Management such as meeting minutes, briefing materials, technical reports, Technical Data 585 Requirements/Technical Data Rights Strategy. 586 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 588 in individual task orders. 589

4.6 TASK 6: SYSTEM SECURITY SUPPORT 590

Objective: Provide technical support relating to system security and accreditation via the 591 Risk Management Framework and obtain network approval/connection documentation for the 592 program. 593

4.6.1 Task 6, Subtask 1: RMF Compliance and Security Documentation 594

Objective: Provide RMF compliance and security documentation support for system 595 accreditation. 596 The contractor may be required to provide RMF compliance and security documentation 598 support at the task order level. These activities may include assisting with research, analysis, 599 strategies, development, and assessments of required security documentation to achieve Risk 600 Management Framework compliance; supporting development of documentation to obtain 601 Authority to Connect (ATC) or Authority to Operate (ATO); supporting program engineers 602 with RMF activities to develop and maintain system authorization; supporting systems for 603 authorization decisions within required timelines; identifying evidence and artifacts for 604

Authorization and Accreditation packages; reviewing, assessing, and updating system security 605 documentation in eMASS or other government-selected tools; providing A&A metrics for 606 various types of packages; and coordinating with security personnel to resolve and address 607 security issues. 608 Potential types of deliverables include: RMF Certification Documentation (A&A Packages, 610 Risk Acceptance Memos, POA&Ms, etc.), Authorization & Accreditation Metrics Report 611 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 613 in individual task orders. 614

4.6.2 Task 6, Subtask 2: System Monitoring and Vulnerability Management 615

Objective: Provide system monitoring and vulnerability support. 616 The contractor may be required to provide system monitoring and vulnerability management 618 support at the task order level. These activities may include, but are not limited to: ensuring 619 program compliance with applicable security documentation; uploading software code scans, 620 security scans, and checklists to facilitate continuous monitoring and risk assessment; 621 documenting Assessment Procedures (AP) and Control Correlation Identifiers (CCI) in 622 security controls; documenting compliance and non-compliance status; tracking non-623 compliance in Plans of Action and Milestones (POA&Ms); maintaining and updating 624 POA&Ms to ensure proper vulnerability disposition; auditing and tracking POA&M items; 625 supporting approval of milestone completion dates; coordinating security strategy with 626 multiple agencies; and validating privileged user system accounts as needed. 627 Potential types of deliverables may include: RMF Certification Documentation (A&A 629 Packages, Risk Acceptance Memos, POA&Ms, etc.), Authorization & Accreditation Metrics 630 Report, POA&M Status Report, Security Control Compliance Report 631 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 633 in individual task orders. 634

4.6.3 Task 6, Subtask 3: Compliance Auditing and Ports, Protocols, and 635 Services Management (PPSM) 636

Objective: Support Compliance Auditing and PPSM Management activities for the 637 programs. 638 The contractor may be required to provide compliance auditing and PPSM support at the task 640 order level. These activities may include, but are not limited to: auditing, tracking, and 641 updating POA&M items; supporting approval of new milestone completion dates; analyzing 642 and ensuring all declared PPSMs follow applicable instructions, listings, and reports; 643 registering and maintaining system registration within the DOD PPSM registry; ensuring 644 implementation compliance with required reports; maintaining artifacts within required 645 systems; providing confirmation of PPS security control status; supporting internal and 646 external security audits including financial and privacy audits; reviewing financial and 647 privacy controls; gathering documentation; facilitating communication between auditors and 648 stakeholders; tracking remediation of findings; and developing corrective action plans. 649 Potential types of deliverables may include: PPSM reviews, Security Control Compliance 651 Report 652 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 654 in individual task orders. 655

4.6.4 Task 6, Subtask 4: Cybersecurity Operations 656

Objective: Provide support for system maintenance and monitoring. 657 The contractor may be required to provide cybersecurity operations support at the task order 659 level. These activities may include, but are not limited to: conducting ongoing security 660 monitoring activities such as log analysis; installing and managing security information and 661 event management solutions; supporting security control audits, assessments, and validation; 662 monitoring user activity; assessing the effectiveness of security controls; providing 663 recommendations for improvement; assisting with control validation testing, risk assessments, 664 and mitigation strategies; implementing continuous monitoring plans; developing and 665 maintaining security metrics; providing reports on security posture and cyber hygiene; 666 assisting with security compliance report preparation and submission; and providing change 667 management support including review of proposed system changes for security impacts. 668 Potential types of deliverables may include: Security Log Report, Cyber Hygiene and 670 Scorecard Report, Risk Assessment Report, Continuous Monitoring Rubric and Tracking 671 Metrics, SIEM Solution 672 Specific requirements, deliverables, formats, frequency, and delivery timelines will be defined 674 in individual task orders. 675

4.7 TASK 7: PROGRAM CONTROLS SUPPORT 676

Objective: Support the management and oversight of programs relating to higher headquarters 677 reporting for program budget, cost, schedule, risk, and reporting. 678

4.7.1 Task 7, Subtask 1: Budget Support 679

Objective: Provide budgetary support. 680 The contractor may be required to provide budget support at the task order level. These 682 activities may include, but are not limited to: creating and changing funding documents 683 (MIPR, Form 9, MORD); performing queries and extracting financial budgetary reports; 684 assisting with status of funds and reconciling financial reports; gathering and analyzing 685 historical data for auditing or reporting purposes; developing, tracking, and reporting on 686 spend plans; identifying and reporting risks to budget execution; using automated 687 management/financial information systems (e.g., DEAMS, CCAR, PIEE, WAWF, EDA); 688…