Attachment 17 - FINAL PWS SRF Attachment 3.docx

Attachment 17

PERFORMANCE WORK STATEMENT

TITLE: Ship Repair Facility Japan Regional Maintenance Center (SRF-JRMC) Yokosuka Code 109 Information Technology

REFERENCES:

(a) DoD 8140.01, Cyberspace Workforce Management Directive

TECHNICAL SPECIFICATIONS

1. SCOPE: The objective of this Performance Work Statement (PWS) is to provide Information Technology (IT) support in the form of a Computer Specialist to the IT and Cyber Security Department (Code 109) in support of Ship Repair Facility – Japan Regional Maintenance Center (SRF-JRMC), Yokosuka missions.

2. PLACE OF PERFORMANCE:

1. Applicable Ships: SEVENTH FLEET Forward Deployed Naval Force (FDNF) ships, Yokosuka, Japan

2. Location of Majority of Work: SRF areas and aboard ships berthed or dry docked at Yokosuka Naval Base, Japan.

3. SPECIFIC TASKS:

Task 1: Cybersecurity Data Management

a. Contractor will generate and or collect all applicable documentation in evidence of approved command exceptions to policies.

b. .

c. Contractor will analyze review results and make recommendations based on professional judgment, to the command Information System Security Manager (ISSM).

d. Contractor will maintain alternate, service, mailbox and user account information and manage expired or dormant accounts per Ship Repair Facility and Japan Regional Maintenance Center (SRF-JRMC) Account Management Standard Operating Procedures (SOP)..

Task 2: Cybersecurity Administrative Support

a. Contractor will be familiar with all Navy Cyber Defense Operations Command directives, such as DoD 5200.01 and SECNAVINST 5239.3C, and support associated tasks and provide support for the development of cybersecurity related customer support policies, procedures, and standards.

b. Contractor will use professional judgment to recommend mitigation strategies to reduce/correct any security vulnerabilities.

c. Contractor will implement response actions in reaction to security incidents, assist in data collection for cybersecurity reports, draft reports for submission, and follow up on results and mitigations.

d. Contractor will ensure that hardware, software, data and facility resources are archived, sanitized, or disposed of in a manner consistent with system security plans and requirements.

e. Contractor will research, evaluate, and provide feedback on problematic cybersecurity trends and patterns in user account databases.

4. OVERTIME: The Contractor should anticipate working more than 40 hours per week 3% of the time during the period of performance (overtime hours nor anticipated to exceed 10 per week). Authorization must be obtained from the PCO, COR or ACOR prior to any hours worked over 40 hours per week.

5. SECURITY: The highest level of security required for this task is SECRET IT-II. Access to classified information and spaces onboard the Forward Deployed Naval Forces (FDNF) ships may be required. Due to the nature of data handling requirements personnel must be US citizens and possess at a minimum Secret clearance.

6. SAFETY PROCEDURES/ REGULATIONS: There are rare instances where work will be performed in an industrial environment as well as on board a US Navy vessel in which industrial work in ongoing. The industrial environment work regularly involves use of personal protective equipment (PPE), frequent exposure to hazardous electrical voltages, large rotating machinery elements, and electromagnetic radiation from high powered transmitters, explosives, flammable or incendiary materials, potentially hazardous material, work inside enclosed spaces, In Danger to Life and Health (IDLH) spaces, and work on masts and antenna platforms. The contractor is responsible for the safety of their employees.

7. SERVICES/DELIVERABLES:

8. PERFORMANCE GOALS:

Contractor performance objectives are summarized in the following table

METHOD

GOVERNMENT FURNISHED EQUIPMENT: The government shall provide a computer station, all consumable supplies required for the tasks listed above, and work spaces at SRF buildings on Yokosuka Naval Base.