Attachment 7 - Performance Work Statement.pdf

PERFORMANCE WORK STATEMENT (PWS)

USACyS Joint Targeting Analyst (JTA) Training Solution Developer (TSD) Support Contract

Part 1

General Information

1. GENERAL: This is a non-personnel services contract to provide technical JTA TSD support for the U.S. Army Cyber School, Cyber Center of Excellence (CCoE), Fort Gordon, Georgia. The Government will provide operationally relevant information to the contractor based upon factors such as scheduling, events, and details that enable compliance with this PWS. Nevertheless, the Government will not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers will be accountable solely to the Contractor who, in turn is responsible to the Government.

1.1 Description of Service Elements: The contractor shall provide JTA TSD support for the U.S. Army Cyber School, with specific responsibilities outlined in the scope (1.4) and specific tasks (Part 5). The estimated staffing matrix can be found in Technical Exhibit 3.

1.1.1 Government Review: The Government will review, approve/disapprove all products intended for government use. Reviews will confirm compliance with conformance with USCYBERCOM training standards. As requested, the contractor shall enable the adaptation of training material to support Cyber School sanctioned training.

1.2 Background: USCYBERCOM has designated the U.S. Army as the Training Solution Developer (TSD) role for cyber-attack work roles (which includes the JTA). As CCoE, Cyber School is the training developer for cyber and electromagnetic training material, CCoE Cyber School has assumed TSD responsibilities. TSD duties are focused on designing, developing, and implementing training programs for military/civilian personnel engaged in cyber operations.

1.3 Objectives: This effort will create/maintain training material and train personnel to successfully serve in CMF designated work roles to the Joint Targeting Analyst (JTA). Additionally, this effort will provide training material and instruction to increase the knowledge base of students attending various courses provided by the U.S. Army Cyber School.

1.4 Scope: This effort focuses on the development, maintenance, and delivery of comprehensive technical training materials for offensive cyberspace operations, specifically tailored to the skillset of Joint Targeting Analysts (JTAs) and as directed by evolving requirements. This includes:

• Curriculum Development & Maintenance: Researching, compiling, and synthesizing information from sources such as Joint Doctrine, Standing Operating Procedures (SOPs), best practices, operational assessments, and Subject Matter Expert (SME) engagement to create and maintain accurate, up-to-date training materials and supporting databases.

• Instruction & Assessment: Delivering instruction utilizing the Army Experiential Learning Model (ELM), including developing and administering exams, and evaluating student performance.

• Administrative Support: Managing all administrative aspects of training, including schedule development, student roster maintenance, and creation of necessary support documentation.

• Coordination: Proactively coordinating with relevant stakeholders to ensure resource availability and seamless training execution.

1.5 Period of Performance: The period of performance will be for one (1) Base Year of 12 months and two (3) 12-month option years. The Period of Performance reads as follows:

• Base Year: 01 April 2026 – 31 March 2027

• Option Year I: 01 April 2027 – 31 March 2028

• Option Year II: 01 April 2028 – 31 March 2029

• Option Year III: 01 April 2029 – 31 March 2030

1.6 General Information

1.6.1 Quality Control: The contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s quality control program is the means by which they assure their work complies with the requirement of the contract. The contractor shall utilize personnel who possess the knowledge, skills, abilities, and experience to support Cyberspace Operations IAW all relevant regulations, requirements, and SOPs to include USCYBERCOM 37, the Joint Cyber Training and Certification Standards (JCT&CS), National Cryptologic Training System (NSA standards per DoDI 3305.09), and DoD Cybersecurity Workforce Framework (i.e. DoD 8570 or 8140) training standards. After contract award, three copies of a comprehensive written QCP will be submitted to the Contracting Officer and Contracting Officer’s Representative 30 days of start date and within 5 working days when changes are made thereafter. After acceptance of the quality control plan the contractor shall receive the contracting officer’s acceptance in writing of any proposed change to his QC system.

1.6.1.1 Revisions: Revisions to the QCP may be required at any time during performance of the contract to assure contractor compliance with requirements of the PWS and contract. The contractor shall make appropriate revisions and obtain acceptance of the revised plan from the COR.

1.6.2 Quality Assurance: The government will evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government will do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.3 Recognized Holidays: The contractor is not expected to perform services on federal holidays:

• New Year’s Day

• Martin Luther King Jr.’s Birthday

• President’s Day

• Memorial Day

• Juneteenth Day

• Independence Day

• Labor Day

• Columbus Day

• Veteran’s Day

• Thanksgiving Day

• Christmas Day

1.6.4 Hours of Operation: The contractor/OR: The contractor is responsible for conducting business, generally between the hours of 0800 to 1700 Monday through Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The 0800 to 1700 timeframe may start or end before or after the stated times due to classroom/training requirements. The intent is that personnel will perform operations IAW a 40-hour work week. The contractor shall always maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the contractor shall keep in mind that the stability and continuity of the workforce are essential. Shift work may be required. The expected shift schedule is as follows:

• Day Shift 0800-1700

• Swing Shift 1530-0030

• Midnight Shift 2300-0800

1.6.4.1: In the event that personnel assigned to this contract are required for early/late/weekend school retraining of students or needed for classroom observation the anticipated hours are:

• Alternate Day Shift 0630-1030 and 1500-1900

• Alternate Swing Shift 1300-1700 and 1900-2300

• Alternate Midnight Shift 2100-0100 and 0300-0700

• Weekend Shift 0830-1330 on Saturdays, with five hours shifted from weekday work

1.6.4.2: In the event personnel supporting the Cyber School Training are required for early/late/weekend instruction or range operations the anticipated hours will be shifted from the weekday work.

1.6.4.3: These operating hours and days may vary based on the requirements of the agency. Contractor personnel work schedules may be “flexed” to meet the training needs of the Cyber School for weekend and extended duty periods during regular training and exercises, while still adhering to the standard five-day work week. Overtime will not be authorized.

1.6.5 Place of Performance: Work executed under this contract will be performed at various locations within Fort Gordon, Georgia. All Contract instructors may be required to travel to participate in training development conferences, attend necessary training/certification, and to facilitate Mobile Training Team (MTT) at CONUS and OCONUS locations. Contract instructors may be required to conduct MTTs up to 20% of the time. Contractors are authorized to work from an Alternate duty/remote location during emergency situations within the Fort Gordon area of operations with the approval of the Contracting Officer Representative and Contracting Officer. Contractor will continue to meet tasks, deliverables, and current level of support in accordance with contract. Government reserves the right to approve, disapprove, or cancel contract personnel working from an alternate duty/remote location. Working from a remote location will be at no additional expense to the Government. The Government does not authorize the use of off-site rates to accomplish alternate duty/remote location work and will not be responsible for any associated costs. Personal or company issued equipment may not be used to access the government network infrastructure unless pre-approved; examples include using VPN or a corporate network.

However, inability to access the government network infrastructure using authorized devices does not necessarily prohibit the contractor from performing offsite, whenever the work could be performed without such access.

1.6.6 Type of Contract: The Government will award a firm fixed price contract.

1.6.7 Security Requirements: Contractor personnel performing work under this contract will have a Top- Secret Security Clearance with SCI eligibility at time of the proposal submission, and will maintain the level of security required for the life of the contract. The security requirements are in accordance with the attached DD254.

1.6.7.1 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information, and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials will be secured. In some cases, as determined by the contracting officer’s representative (COR), contractors will be required to sign for government provided equipment.

1.6.7.2 Key Control: The contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government will be duplicated. The contractor shall develop procedures covering key control that will be included in the Quality Control Plan. Such procedures will include turn-in of any issued keys by personnel who no longer require access to locked areas. The contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

1.6.7.2.1 Lost / Duplicated Keys: In the event keys, other than master keys, are lost or duplicated, the contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks;

however, the Government, at its option, may replace the affected lock or locks or perform re-keying.

When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks will be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system will be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.6.7.2.2 Authorized Key Usage: The contractor shall prohibit the use of Government issued keys/key cards by any person other than the Contractor’s employees. The contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.7.3 Lock Combinations: The contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures will be included in the Contractor’s Quality Control Plan.

1.6.7.4 Security Clearances: The contractor is responsible for acquiring the required security clearances.

The contractor shall ensure that all assigned personnel understand applicable security policies and directives found in DOD 5220.22-M, National Industry Security Program Operating Manual (NISPOM);

DODM 5200.01 (Vol 4), DOD Information Security Program - Controlled Unclassified Information; AR 380-5, Information Security Program, and all other applicable policies and regulations.

1.6.7.4.1 Controlling Classified Data: The contractor shall ensure that classified data is controlled, protected, and safeguarded in accordance with AR 380-5 and current Army and DOD policy. Classified information will be accessed and stored in government spaces only. The contractor shall agree that any data furnished by the government to the contractor shall be used only for performance under this PWS, and all copies of such data will be returned to the government upon completion of this effort.

1.6.7.4.2 Facility Security Officer (FSO): The facility Security Officer (FSO) will ensure there is a procedure for all contractor employees to in-process and out-process the CCoE G2. All contractors will turn-in their Common Access Card (CAC) to the COR (TA) on their last day of employment. Compliance with DD Form 254, Department of Defense Contract Security Classification Specification, is required.

1.6.7.5 Handling/Access to Classified Information: The contractor shall comply with FAR 52.204-2, Security Requirements. This involves access to information classified “Confidential,” or “Secret,” and requires contractors to comply with (1) the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M), and (2) any revisions to DoD 5220.22M. Any adverse action preventing a contractor from retaining access to classified material will be brought to the attention of the COR, CCoE G2, and the Facility Security Officer (FSO) immediately.

1.6.7.6 SIPRNET and JWICS Access: The COR will identify contract employees that are required to have SIPRNET and/or JWICS access. Secret Internet Protocol Network (SIPRNET) and Joint Worldwide Intelligence Communications System (JWICS). Contractors requiring access to the SIPRNET shall have a final Secret clearance or Interim TS clearance. Contractors requiring access to JWICS shall have a final TS clearance and be indoctrinated for Sensitive Compartmented Information access. SIPRNET/JWICS may contain NATO information, and a NATO awareness brief and acknowledgement is required for all personnel prior to being granted access to the SIPRNET/JWICS. The NATO Awareness briefing is required to inform personnel how to protect NATO information in the event they come across it while accessing the SIPRNET/JWICS. A written acknowledgment will be maintained by the COR. The contractor shall not access, download or further disseminate any classified information from

SIPRNET/JWICS which is outside the execution of the defined contract requirements unless specifically authorized in writing by the Government Program Manager and the Contract Officer (KO). If any special access is required, the KO will modify the requirements and DD 254.

1.6.7.6.1 System Authorization Access Request (SAAR) DD 2875: For Contractor employees, requiring access to information systems to fulfill their duties must possess the required favorable security investigation. Contractor employees that require access to the Fort Gordon network shall have a minimum of a National Agency Check with Inquiries (NACI) investigation initiated and favorable review before issuance of network access. The IASO/IANO from the activity that the contractor employee is assigned to, will submit an electronic DD 2875, System Authorization Access Request (SAAR) to CCoE G2 for verification that the contractor employee meets the requirements of AR 25-2 for accessing the Fort Gordon network. (Ref AR 25-2). If any special access is required, the KO will modify the requirements and DD 254.

1.6.7.7 Army Cybersecurity/Awareness Training: All contractor employees and associated subcontractors will complete the DoD Cyber Awareness Challenge Training (https://cs.signal.army.mil) before issuance of network access and annually thereafter. Certificates of successful completion, for both initial awareness training and annual refresher training will be provided to the COR via the Army Training and Certification Tracking System (ATCTS). All contractor employees will successfully complete all required IA training as specified in AR 25-2 and as directed by the Government. At work performance start date all contractor employees working Cyber Security functions will comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M, DoDD 8140.01, and AR 25-2.

1.6.7.8 Information Security Program Training: All contractor employees, including subcontractors, assigned to this contract, will complete the on-line Information Security Program Training located on the Army Learning Management System (ALMS) site. Log into AKO, select “Self Service”, “My Training”, “ALMS”, and “Go to Mandatory Training”. Training will be completed within 30 days of reporting for duty and annually thereafter. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager (Ref ALARACT 207/2013, DTG 291848Z Aug 13, Subj: Army Wide Roll-out and Requirement for Standardized Computer Web-Based Security Training on the Army Learning Management System).

1.6.7.9 Anti-Terrorism (AT) Level I Training: All contractor employees, including subcontractors, assigned to this contract will receive an initial Anti-Terrorism Level I Brief by a certified ATO Level II Officer within 30 days of reporting for duty (Monthly briefings are offered by the Garrison Antiterrorism Officer). Annual refresher Antiterrorism Level I Training will be completed on-line at https://jkodirect.jten.mil/Atlas2/faces/page/login/Login.seam or contractor employees may attend the monthly training offered by the Garrison ATO. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager (Ref Department of the Army, US Army Contracting Agency, SFCA-CO, 05 Sep 07, subject:

Incorporation of Measures into the Contracting Process and AR 525-13, Antiterrorism). Note: Contractor personnel will receive an AOR briefing when traveling OCONUS on TDY. Briefing must be provided by a certified ATO Level II Officer within 7 working days prior to TDY departure outside the 50 United https://cs.signal.army.mil/ https://jkodirect.jten.mil/Atlas2/faces/page/login/Login.seam

States, its territories, and possessions. This is separate from the normal annual AT Level I training requirement (Ref AR 525-13).

1.6.7.10 iWATCH: All contractor employees, including subcontractors, assigned to this contract will receive a brief on the local iWATCH program (provided in conjunction with the AT Level I Training).

This training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training will be completed within 30 days of reporting to duty with the results reported to the COR and then annually thereafter.

1.6.7.11 Operation Security (OPSEC) Training: All contractor employees, including subcontractors, assigned to this contract will complete Level I OPSEC training within 60 days of reporting for duty and then annually thereafter. Initial Level 1 OPSEC training will be conducted monthly by the Garrison OPSEC Officer or a Level II certified OPSEC Officer. Annual refresher training will be completed online at http://cdsetrain.dtic.mil/opsec/index/htm. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. OPSEC training guidelines are contained in AR 530-1, Operations Security. The contractor shall adhere to local OPSEC policies and procedures of the government requiring activity. When in a TDY status in support of this work effort, the contractor shall also adhere to any OPSEC policies and procedures in effect at TDY locations.

1.6.7.12 Threat Awareness and Reporting Program (TARP) Training: All contractor employees, including subcontractors, assigned to this contract will complete face-to-face TARP training within 30 days of reporting for duty and then annually thereafter. TARP training will be conducted monthly by the 902nd MI Group. The COR will ensure contractors are notified of available training. Completion of training will be reported to the COR and the unit/activity security manager (Ref AR 381-12).

1.6.7.13 Installation Access: All contractor employees, including subcontractors, will comply with applicable installation and facility access security policies and procedures at all work and TDY locations.

All contractors and subcontractors will be issued a Common Access Card (CAC) or an Installation Pass issued through the Automated Installation entry (AIE) Security System to access the installation. The Fort Gordon military installation is a limited access post. Unscheduled gate closures by the military police may occur at any time. In accordance with Army Regulation 525-13, paragraph 5-19, all prospective contractors will undergo a verification process by the installation Provost Marshal Office, Director of Emergency Services to determine the trustworthiness and suitability prior to being granted access to federal property. This will be accomplished using the National Crime Information Center (NCIC) Interstate Identification Index (III). This is the minimum baseline background check for entrance onto Army Installations for non-CAC holders to include entrance of visitors (Ref AR 190-13, paragraph 8-2).

All personnel entering or exiting the installation may experience a delay due to vehicle inspections, registration checks, verification of seat belt use, etc. All vehicles and personnel are subject to search and seizure. The search and seizure provisions will apply to contractor personnel while within Fort Gordon’s area of jurisdiction. Contractor personnel will comply with all entry control requirements and security policies/procedures in effect. Security procedures may change without notice.

1.6.8 Special Qualifications: The Government’s historical staffing data is provided under Technical Exhibit 3. The contractor shall be responsible to propose and deploy the correct labor types, mix, number http://cdsetrain.dtic.mil/opsec/index/htm and hours required to satisfactorily and professionally meet all PWS requirements. The Government anticipates the requirements within this PWS will require the following labor category: Project Lead and Instructor/Writer.

1.6.8.1 Contract Instructor Personnel shall:

• Have a current Top-Secret clearance with a current Single Scope Background Investigation (SSBI) or T5 that meets the requirements for Sensitive Compartmented Information (SCI) in accordance with Intelligence Community Directive (ICD) 704. Some individuals may also be required to obtain access to a NSA Facility to instruct as NSA Adjunct faculty. In accordance with the National Security Agency Policy, Individuals may be subject to a counterintelligence (CI) polygraph as a condition for access to classified data, Contractors supporting sensitive Contractors supporting sensitive military capabilities within this contract will comply with ICD 704 and NSA access requirements for access, as needed. Contractor will follow the security requirements outlined in contract DD Form 254, Department of Defense Security Classification Specification.

• Possess and maintain a valid driver’s license.

• Possess and maintain all required training as stated throughout this PWS.

• Possess skills/knowledge of performing office automation work that includes word processing, electronic mail, spreadsheets, presentations, and other personal computer applications; typing a variety of materials from rough draft into final form including narrative and tabular material, e.g., correspondence, reports, and forms; maintaining records, historical records, survey results, reference library of training catalogs, regulations and other miscellaneous publications;

establishing and maintaining office functional files and reference files; knowledge management applications e.g., SharePoint and Blackboard.

1.6.8.1.1 Targeting Instructor/Writer:

• The U.S. Army Cyber School requires a team of cleared (TS/SCI) Targeting Instructor/writers with diverse and complementary skillsets. These skillsets involve knowledge of intelligence, plans, and operations, all underpinned by an expert knowledge of Joint/Service specific targeting processes. As such, the optimal candidates will have experience within USCYBERCOM or subordinate service component within the Cyber Mission Force (CMF) while serving in, or directly supporting the Joint Targeting Analyst (JTA) work role. In lieu of direct CMF experience, candidates will have expert knowledge of the Joint Targeting Cycle as codified in JP 3-60, Target Development Standards as codified in CJCSI documents, and documented successful experience serving at major command(s) within any service.

• Candidates will have 2+ years of service (military/civilian/contractor) conducting offensive operations in cyberspace as part of USCYBERCOM, or service component cyber commands directly supporting a COCOM/JTF Headquarters. Personnel that have not directly supported offensive cyberspace operations may be considered if they meet the qualifications described in the remainder of this PWS.

• Candidates must possess skills/knowledge of performing office automation work that includes word processing, electronic mail, spreadsheets, presentations, and other personal computer applications; typing a variety of materials from rough draft into final form including narrative and tabular material, e.g., correspondence, reports, and forms; maintaining records, historical records, survey result, reference library of training catalogs, regulations and other miscellaneous publications; establishing and maintaining office functional files and reference files; knowledge management applications, e.g., SharePoint, Army training requirements and resources system (ATRRS), and Blackboard.

• Qualifications:

• Served as a certified instructor for the USCYBERCOM validated Cyber Effects Applications Course (CEAC). Individuals who are not certified as CEAC instructors will have successfully completed a minimum of two or more of the following courses/instructional events:

• A Defense Intelligence Agency (DIA) accredited course of instruction on Joint Intermediate Target Development (DIA).

• Completion of a course (or familiarization training) related to the Modernized Integrated Database (MIDB).

• A Collateral Damage Estimation (CDE) course IAW the guidance proscribed by CJCSI 3160.01 (Current Series), No-Strike and Collateral Damage Estimation Methodology.

• The Joint Targeting School (JTS), Joint Targeting Staff Course.

• The US Army Multi-Domain Targeting Center’s Joint Operational Fire and Effects (JOFEC) Course.

• The/a U.S. Air Force course(s) leading to Air Force Specialty Code (AFSC) INIXIB - Geospatial Intelligence, Targeteer.

• Knowledge: Candidates will possess experiential knowledge in at least 7 of the 13 following knowledge areas:

• Knowledge of the Joint Operation Planning Process (JOPP).

• Knowledge of Joint Intelligence Preparation of the Battlefield (JIPO).

• Knowledge of the Joint Targeting Cycle (JTC).

• Knowledge of Target System Analysis (TSA).

• Knowledge of Electronic Targeting Folders (ETFs).

• Knowledge of Strike/Mission Packages developed in support of offensive cyberspace operations.

• Knowledge of the Joint Targeting Toolkit (JTT).

• Knowledge of IKE.

• Knowledge of the National Production Workshop (NPW).

• Knowledge of the Modernized Integrated Data Base (MIDB).

• Knowledge of target development at the basic, intermediate and advanced levels IAW current Chairman of the Joint Chiefs of Staff Instructions (CJCSI).

• Knowledge of Collateral Damage Estimation (CDE).

• Knowledge of Collateral Effects Estimation (CEE).

• Experience: Candidates will possess demonstrated experience in at least 6 of the 13 following experience areas:

• Served a minimum of 1 year as a Joint Targeting Analyst within the Cyber Mission Force.

• Participation in USCYBERCOM’s Joint Targeting Cycle.

• Development of Strike/Mission Packages in support of operations in cyberspace.

• Enabling the vetting and validation of targets in cyberspace.

• Development of Collateral Effects Estimations (CEEs).

• Enabling the assessment of targeted effects in cyberspace.

• Participation in a COCOM Joint Targeting Cycle.

• Candidates will possess demonstrated experience in at least 2 of the 6 following experience areas:

• Development of Electronic Targeted Folders (ETFs).

• Enabling the vetting and validation of targets.

• Formulation of Collateral Damage Estimates (CDE).

• Assisting in the development of phased Battlefield Damage Assessment (BDA) reports.

• Using a Target System Analysis (TSA) to aid in target development.

• Participation in targeting related Boards, Bureaus, Centers, Cells and Working Groups

(B2C2WG).

1.6.8.2 Site Lead: The contractor shall designate one of the instructor/writers to serve as the site lead. The site lead (SL) will supervise, coordinate work schedules, resolve minor concerns/issues and complete the administrative tasks associated with this PWS. The SL will be familiar with all duties and qualifications stated in the PWS.

• At contract start date possess a T5/Single Scope Background Investigation (SSBI) with SCI eligibility and maintain the required security clearance throughout the life of the contract.

• Be proficient in conflict resolution.

• Possess the skill sets to supervise contractor employees.

• Be capable of coordinating work schedules/assignments of contractor employees.

• Be able to communicate orally and written with COR.

1.6.8.3 Contractor Replacement: The contractor shall replace, within ten (10) business days, any contract personnel found to be unqualified or otherwise determined unsuitable by the government. This ten-day timeframe also includes any contract instructors who submit their resignation under the current contract.

1.6.8.4 Certifications and/or Training Certificates: The contractor shall present to the COR certifications and/or training certificates prior to hire. Certification requirements that change during the life of the contractor shall be approved by the COR. Contractors will be given 60 calendar days from the start date of this contract to obtain the required certificate(s) of training and certification with the exception of the clearance; all contact personnel are required to in-process the CCoE G2 within 10 business days. All contract employees will possess experience with Army-standard desktop applications.

The government will exercise the right, if deemed necessary, to select an appropriate method (pretest, hands-on practical exercise, etc.) to determine if the contractor is qualified/suitable to perform the requirements stated in the PWS.

1.6.8.5 Government Provided Training: Contractors attending Army Training will not be charged a tuition fee for mandatory training. Contractors are not authorized to attend elective training regardless of mode of instruction (e.g., resident, troop schools, on-site, garrison/installation instruction or distributed learning). Contractors may only be trained in skills they are not required to bring to the job, such as command unique rules, practices, procedures and/or systems that are essential for the contractor’s satisfactory contract performance. This type of training is considered mandatory/required and will be identified in the contract.

1.6.9 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The contracting officer, Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor’s performance. At these meetings the contracting officer will apprise the contractor of how the government views the contractor’s performance and the contractor shall apprise the Government of problems, if any, being experienced. Appropriate action will be taken to resolve outstanding issues. These meetings will be at no additional cost to the government.

1.6.10 Contracting Officer Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance;

maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, specifications; monitor Contractor’s performance and notify both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.11 Key Personnel: All instructor/writers are considered key personnel by the government. The contractor shall designate one of the instructor/writers to serve as the site lead (SL). The SL will be responsible for the performance of the work. The SL will have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The SL or alternate will be available between 8:00 a.m. to 5:00 p.m., Monday thru Friday, except Federal holidays or when the government facility is closed for administrative reasons.

1.6.12 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They will also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed.

1.6.12.1 ID Badges: The contractor shall provide each contractor employee an identification (ID) badge on contract start date or on employment start date. The ID badge will be made of nonmetallic material, be easily readable, and will contain the following minimum information: Employee’s Name and Contract Company Name. Contract employees will wear proper identification at Government workplaces.

Contractor employees will wear the ID badge at all times when performing work under this contract to include attending government meetings and conferences. Each contract employee will wear the ID badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit such placement. The COR may waive the requirement for contractors to wear ID Badges based upon individual situations.

1.6.12.2 Electronic Mail: When contractor employees send e-mail messages to government personnel while performing on this contract, the contractor employee’s e-mail address will include the company name together with the person’s name (ex: John Smith, Contractor, ABC Company). When contractor employees require access to a government computer, the contractor employee will be required to obtain a Common Access Card. To do so, the contractor employee will request a CAC Card through the COR. All contractor employees will conduct official communication using Government-owned or provided e-mail, networks, websites, systems, and devices. The use of commercial ISP e-mail accounts or personal e-mail accounts to conduct official communication is prohibited. Remote access/telework technology may be leveraged to ensure compliance with these requirements. Contractor employees are prohibited from using Army-assigned e-mail addresses for unofficial business affiliations. Personnel will not provide official email addresses to businesses, affiliated organizations, or online retailers, unless those entities are known by personnel to be legitimately engaging in official business. The COR may authorize the use of contract company email addresses based upon individual situation.

1.6.12.3 Eligibility Verification for Employment: E-Verify is an Internet-based system that compares information from an employee’s Form I-9, Employment Eligibility Verification, to data from U.S.

Department of Homeland Security and Social Security Administration records to confirm employment eligibility. The U.S. Department of Homeland Security is working to stop unauthorized employment. By using E-Verify to determine the employment eligibility of their employees, companies become part of the solution in addressing this problem. All U.S. employers will complete and retain a Form I-9 for each individual they hire for employment in the United States. This includes citizens and noncitizens. On the form, the employer will examine the employment eligibility and identity document(s) an employee presents to determine whether the document(s) reasonably appear to be genuine and relate to the individual and record the document information on the Form I-9. The list of acceptable documents can be found on the last page of the form. E-Verify is mandatory for employers with federal contracts or subcontracts that contain the Federal Acquisition Regulation E-Verify clause.

1.6.13 Contractor Travel: Contractors will be required to travel CONUS and OCONUS during the performance of this contract to attend meetings, conferences, training, and to conduct Mobile Training Teams (MTTs). Contractor will be authorized travel expenses consistent with the substantive provisions of the Joint Travel Regulation (JTR) and the limitation of funds specified in this contract. All travel requires Government approval/authorization.

1.6.14 Other Direct Costs: Not Applicable.

1.6.15 Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract will be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the Contracting Officer. All materials supplied to the Government will be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.15.1 Privacy Act: All contract personnel assigned to this task will have access to information that may be subject to the Privacy Act of 1974. The contractor is responsible for ensuring all assigned contract personnel are briefed on Privacy Act requirements.

1.6.15.1.1 Security Policies: The contractor shall ensure that all assigned personnel understand applicable Security policies and directives. Personnel who knowingly violate security policies or directives are subject to immediate removal from any work relating to this contract.

1.6.15.2 Subcontract Data: The contractor shall ensure that all reportable subcontract data is reported IAW the PWS and to this data collection web site (citing this contract/order number). At the discretion of the prime contractor, this reporting may be done directly by subcontractors to the data collection site; or by the prime contractor after consolidating and rationalizing all significant data from the subcontractors.

1.6.16 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and will promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may effect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.16.1 Non-Disclosure: The contractor shall not divulge any information accessed and obtained during the course of performing this task to other contractor staff or anyone outside the government. In addition to any organizational conflict of interest provision, contractor personnel assigned to this contract will be required, prior to beginning work, to sign a non-disclosure statement for the government agreeing not to share any information or data with other contractor personnel not assigned to the project or, if assigned to the project, who has not signed such a non-disclosure statement. Signed nondisclosure statements will be furnished to the COR prior to contract performance. The company will include as part of its Request for Quote (RFQ) submission, its plan to “firewall” these contract personnel and enforce this provision (i.e., internal controls, training, etc.). Failure to adhere to these non-disclosure safeguards may result in termination of this task. Final authorship and copyright (if required) of any deliverables will reside with the government. The contractor shall not gain any unfair advantage. The contractor shall identify any organizational conflict of interest clauses they or their subcontractors are subject to, current or within three years of federal government contract services, by providing, with their offer, a copy of the clause, a description of the contract services performed, a contract number, a governmental point of contact, and a phone number for that point of contact.

1.6.17 Combating Trafficking in Persons (CTIP): The contractor shall comply with FAR Clause 52.222-50 and DoD Instruction 2200.01, adhering to the U.S. Government’s zero-tolerance policy against trafficking in persons. All employees and subcontractors shall complete DoD CTIP Awareness Training within 30 days of reporting and annually thereafter, submitting certificates to the COR via ATCTS. The contractor shall ensure ethical recruitment, safe working conditions, freedom of movement, and subcontractor compliance. Suspected CTIP violations shall be reported immediately to the Contracting Officer and COR. Non-compliance may result in Corrective Action Requests (CARs), personnel removal, or contract termination. (Ref: FAR 52.222-50, DoDI 2200.01).

Part 2: Definitions & Acronyms

• Definitions and Acronyms:

2.1 Definitions:

• CONTRACTOR: A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

• CONTRACTING OFFICER: A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

• CONTRACTING OFFICER’S REPRESENTATIVE (COR): An employee of the U.S.

Government appointed by the contracting officer to administer the contract. Such appointment will be in writing and will state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

• DEFECTIVE SERVICE: A service output that does not meet the standard of performance associated with the Performance Work Statement.

• DELIVERABLE: Anything that can be physically delivered but may include non-manufactured things such as meeting minutes or reports.

• KEY PERSONNEL: Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

• PHYSICAL SECURITY: Actions that prevent the loss or damage of Government property.

• QUALITY ASSURANCE: The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

• QUALITY ASSURANCE Surveillance Plan (QASP): An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

• QUALITY CONTROL: All necessary measures taken by the Contractor to assure that the quality of an end product or service will meet contract requirements.

• SUBCONTRACTOR: One that enters a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

• WORKDAY: The number of hours per day the Contractor provides services in accordance with the contract.

• WORK WEEK: Monday through Friday, unless specified otherwise.

2.2 Acronyms:

• ACOR: Alternate Contracting Officer’s Representative

• AFARS: Army Federal Acquisition Regulation Supplement

• AR: Army Regulation

• CCE: Contracting Center of Excellence

• CFR: Code of Federal Regulations

• CMF: Cyber Mission Force

• CONUS: Continental United States (excludes Alaska and Hawaii)

• COR: Contracting Officer Representative

• COTR: Contracting Officer’s Technical Representative

• COTS: Commercial-Off-the-Shelf

• DA: Department of the Army

• DD250: Department of Defense Form 250 (Receiving Report)

• DD254: Department of Defense Contract Security Requirement List

• DFARS: Defense Federal Acquisition Regulation Supplement

• DMDC: Defense Manpower Data Center

• DOD: Department of Defense

• FAR: Federal Acquisition Regulation

• HIPAA: Health Insurance Portability and Accountability Act of 1996

• KO: Contracting Officer

• OCI: Organizational Conflict of Interest

• OCONUS: Outside Continental United States (includes Alaska and Hawaii)

• ODC: Other Direct Costs

• PIPO: Phase In/Phase Out

• POC: Point of Contact

• PRS: Performance Requirements Summary

• PWS: Performance Work Statement

• QA: Quality Assurance

• QAP: Quality Assurance Program

• QASP: Quality Assurance Surveillance Plan

• QC: Quality Control

• QCP: Quality Control Program

• TE: Technical Exhibit

• TPOC: Technical Point of Contact

Part 3: Government Furnished Property, Equipment, and Services

3.1 Contractor and Government Responsibilities for Property and Services: Except for property and services specified as government-furnished in this Performance Work Statement, the contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform instructional support as defined in this Performance Work Statement. The government-furnished items and services are detailed below.

3.2 Government-Furnished Resources: All Government-furnished property will be provided in accordance and may include: office/workspace, office supplies, telephone service, computer access, and storage space. Government property will be used ONLY in performance of this contract and its deliverables unless approved by the COR. The contractor shall account for all property provided by the Government and will be responsible for the security and condition of said property. Serialized items will be annotated at the time of issue, with a signature of acknowledgement by the individual contractors. All GFP is the property of the US Government and will not be transferred to any individual, or agency, public or private without the express written approval of the Contracting Officer. In some cases, as determined by the COR, contractors will be required to sign for government-provided equipment.

3.3 Facilities: The Government will provide the necessary workspace for the contractor staff to provide the support outlined in the PWS. Due to limited availability, contractors may share desk space.

3.4 Utilities: The Government will provide electricity, water, phone service, and network services (NIPRNET, SIPRNET, JWICS, and DSN).