Attch2_Exh_A_IRES SOO.pdf

HQ079617D0001

Attachment J-01 Revision 3

Attachment J-01:

Integrated Research & Development for

Enterprise Solutions (IRES) Contract

Statement of Objectives (SOO)

Revision 3

Page i

Change History

Document

Version

Date Significant/Major Changes

Original Sep 1, 2016

Revision 1 Aug 3, 2018 Rename and update Section 6.0.

Revision 2 Nov 11, 2021 Updated Section 7.6.

Revision 3 April 22, 2022 Incorporate Section 7.6.1

Page ii

Table of Contents

1.0 Mission

1.1 Missile Defense Agency (MDA) Mission

1.2 Integrated Research & Development for Enterprise Solutions (IRES) Mission

2.0 Purpose and Program Goals / Desired Attributes

2.1 Purpose

2.2 Program Goals / Desired Attributes

3.0 Scope

3.1 IRES Systems Engineering and Program Integration (SE&PI)

3.2 BMDS Mission Operations

3.3 BMDS Testing

3.4 Wargames and Exercises

3.5 Modeling and Simulation

3.6 Enterprise Communications and Information Technology Environment

3.7 Operation of Facility Infrastructure

4.0 Service Summary Items

5.0 Deliverables

6.0 Government Property

7.0 Special Requirements

7.1 Cost and Software Data Reporting (CSDR)

7.2 Supply Chain Risk Management (SCRM)

7.3 Cybersecurity

7.4 Property Management and Accountability

7.5 Network Access

7.6 Location and Hours of Work

7.7 Security

7.7.2 Operations Security

7.8 Program Protection

8.0 Applicable Directives/Regulations

9.0 Revisions and Updates

Enclosure 1 – High Level Objectives and Capabilities Descriptions and Legacy Requirements 13

1.0 Mission

1.1 Missile Defense Agency (MDA) Mission

To develop and deliver a layered Ballistic Missile Defense System (BMDS) to defend the United

States, its deployed forces, allies, and friends from missile defense attacks of all ranges in all phases of flight.

MDA works with the Combatant Commanders to ensure development of a robust BMDS technology and development program that addresses the challenges of an ever-evolving threat.

MDA is also steadily increasing international cooperation by supporting mutual security interests in missile defense.

The MDA is committed to maximizing the mission assurance and cost effectiveness of our management and operations through continuous process improvement.

1.2 Integrated Research & Development for Enterprise Solutions (IRES) Mission

The IRES contract provides integrated solutions supporting concurrent test, training, and operations (CTTO) within the Missile Defense Integration and Operations Center (MDIOC) mission execution platform and enterprise communications and information technology (IT) environment.

In order to achieve the objectives of the MDA in developing, testing, and fielding the BMDS, the

Agency must be able to provide integration of multiple disparate capabilities while simultaneously synchronizing unrelated requirements across a broad spectrum of stakeholders all vying for the same shared resources. The contract must provide MDA the agility, optimized solutions, and synchronization of technical capabilities to rapidly respond to real-world threats and emerging BMDS technologies supported within the CTTO environment hosted in the

MDIOC. The contract solutions and execution must address the following:

Deconfliction of concurrent events and critical assets, maintaining positive configuration control, and rapid resource reprioritization are fundamental to mission success.

The contractor’s ability to synchronize capabilities, schedules, and priorities across the program is a key risk mitigation measure for integration and execution of events that support national defense.

Integration of work activities across BMDS Mission Operations, BMDS Testing, Wargames and Exercises, Modeling and Simulation, Enterprise Communications and IT

Environment, and Operation of Facility Infrastructure ensures integrity of event architectures and standardizes delivery of technical capabilities.

To enable stakeholders to achieve MDA mission by providing an agile, multi-purpose, capabilities-based contract to execute the following High Level Objectives (HLOs):

IRES Systems Engineering and Program Integration

BMDS Mission Operations

BMDS Testing

Wargames and Exercises

Modeling and Simulation

Enterprise Communications and Information Technology Environment

Operation of Facility Infrastructure

2.0 Purpose and Program Goals / Desired Attributes

2.1 Purpose

The purpose of this Statement of Objectives (SOO) is to provide the procurement framework and focus all parties on implementation of a performance-based contract execution for delivery of quality products and services.

2.2 Program Goals / Desired Attributes

Performance excellence achieved by an integrated approach to developing solutions that result in delivery of ever-improving value to customers and stakeholders in accordance with Federal and DoD directives.

Best in breed performance resulting in efficiencies, adoption and incorporation of industry best practices, and enhanced products, services or throughput.

Solutions to stakeholder requirements that leverage initiatives and standards that result in reduced costs and/or enhance the product/service lifecycle.

Efficiencies across customers and stakeholders are sought and achieved through analysis, innovation, and the sharing of information and knowledge.

Workforce capacity is understood and optimized for effective performance.

Compliant, efficient and transparent property control process(es).

Ability to account for work performed under each high level objective, each product/project, as well as the business base (e.g., small business, SDB, WOSB, VOSB) performing the work.

A high performing organization that cultivates an engaged workforce and systematically pursues ever-higher levels of overall organizational and individual performance.

Integrated, aligned processes.

Innovation is systematically incorporated into standard operating procedures resulting in tangible benefits to the government.

Rapid implementation of new technologies and capabilities without introduction of risk(s) that cannot be mitigated.

Performance measures or indicators that are tied to customer requirements.

3.0 Scope

IRES is an MDA-wide contract vehicle designed to enable the MDA mission; task orders issued under the contract will be directly or logically connected to the MDA mission and will be executed under the high level objectives identified below. (Reference Enclosure 1, “IRES High

Level Objectives and Capabilities Descriptions and Legacy Requirements,” for additional details and historical information related to the IRES HLOs and capabilities. The content of this document is not intended to limit the scope of the IRES contract nor is it a guarantee of future requirements that will be fulfilled under the IRES contract.)

Although it is very difficult to forecast all CTTO activities or predict how missile defense will evolve, this contract must be capable of adapting to and supporting evolving and new CTTO requirements, missile defense elements, and missions executed by or through the MDIOC and the enterprise communications and IT environment.

3.1 IRES Systems Engineering and Program Integration (SE&PI)

Successful realization of a single IRES HLO cannot be achieved without thorough systems integration, program integration, and alignment (both schedule and priorities) with the other

HLOs. The IRES SE&PI HLO provides de-confliction of critical assets, positive configuration control of test environments, and rapid reprioritization of resources. This HLO is essential to simultaneously and efficiently executing multiple stakeholder requirements that span multiple

HLOs in a dynamic test, training, and operational environment. Develops, manages, and maintains Department of Defense Architecture Framework (DoDAF) data used in a Federal and

Department of Defense (FEA, DODEA) compliant architectural repository for the IRES contract;

renders multiple views of the capabilities delivered under the contract which guides the development of solutions that will meet customer requirements; integrates technical artifacts from disparate MDA contract activities into the Enterprise repository as necessary to satisfy holistic views of the enterprise environment.

3.2 BMDS Mission Operations

The MDIOC is host to numerous BMDS operational missions, operational test assets, and developmental and prototype systems. BMDS Mission Operations ensures visibility and awareness of the multiple operational readiness postures, delivers warfighter mission support, and provides satellite operations in support of BMDS testing. In addition, BMDS Mission

Operations is responsible for Advanced Research activities and the development of prototype systems destined for fielding and maintenance in the operational BMDS architecture.

3.3 BMDS Testing

BMDS Testing is a continuous, evolutionary process that encompasses both developmental and operational activities to demonstrate the effectiveness, suitability, and survivability of the

BMDS. BMDS Testing develops secure test architectures that integrate multiple enclaves and disparate test resources across the enterprise communications and IT environment in accordance with test event requirements to enable testing of the BMDS and its elements while ensuring appropriate cyber security protections are enabled for the protection of all test elements.

3.4 Wargames and Exercises

MDA requires the capability to engineer, integrate, and execute wargames and exercises to demonstrate current and future BMDS capabilities. Wargames and exercises are comprised of a wide range of activities from tabletop seminars to fully interactive, distributed wargames to multi-stakeholder, Combatant Commands (CCMD) sponsored exercises. Delivery of wargames and exercises originates from the MDIOC platform and leverages the enterprise communications and IT environment to connect participants and distribute data around the globe.

3.5 Modeling and Simulation

MDA requires a modeling and simulation capability to develop, deliver, and support MDA models and simulations with functionality as described in requirements specification. Models and simulations are integrated into BMDS Test architectures in a cooperative mission focused manner to ensure test architecture specifications are met. The M&S program supports (1) BMD system concept evaluation, (2) engineering development of the BMD system and its components,

(3) BMD system verification and valuation, (4) credible assessment of system-level effectiveness and functionality, (5) warfighter/operator training, and (6) real-world operational analysis.

3.6 Enterprise Communications and Information Technology Environment

MDA’s Enterprise Communications and IT Environment HLO is the integrating and enabling platform that (in conjunction with SE&PI processes) ensures the coordination and secure cyber operation of multiple network and technology enclaves servicing the MDA RDT&E and associated operational mission environments across MDA. The Enterprise Communications and

IT Environment HLO provides critical communications and infrastructure used in the integration of BMDS elements in the development and fielding of BMDS capabilities. The Enterprise

Communications and IT Environment HLO also provides the MDA administrative and general services IT environment necessary to conduct MDA business functions through the operations, maintenance, and sustainment of collaboration services, networks, cloud computing infrastructure, computer network defense, communications gateways, end user productivity hardware/software, and mobile devices.

3.7 Operation of Facility Infrastructure

The Operation of Facility Infrastructure HLO encompasses the people, processes, tools, and infrastructure necessary to support mission-critical BMDS and RDT&E operations within the

MDIOC. This HLO provides rapid facility modifications (testbed/lab builds) to support MDA mission activities at the MDIOC and ensures the facility is operated, maintained, and sustained in a coordinated and synchronized manner to reduce impact and risk to operational and RDT&E missions.

4.0 Service Summary Items

Service Summary Items (SSIs) will be specified in individual task orders. In accordance with the

IRES Performance Evaluation and Incentive Plan, SSIs 1 through 4 are common [required] on all task orders and will be assessed at the contract level (i.e., all task orders will receive the same rating – one fail all fail model).

SSI 5 (through n) [Technical Performance] will capture the specific task order Service Summary

Items deemed essential to successful execution of the task order.

SSI # Title Weight / QPIs

SSI 1 Integration 10% / 10 QPIs

SSI 2 Small Business Utilization 5% / 5 QPIs

SSI 3 Customer Satisfaction 5% / 5 QPIs

SSI 4 CDRL / Proposal Timeliness 5% / 5 QPIs

SSI 5 Technical Performance No greater than 75%

5.0 Deliverables

The Contract Data Requirements List (CDRLs) is provided in Exhibit A – MDA Mandatory

CDRLs and Exhibit B – IRES CDRLs. Individual task orders will order/tailor CDRLs, as appropriate, to fulfill requirements.

6.0 Government Property

Workforce working in government facilities will be provided with the following. While these items are not listed on the Government-furnished property (GFP) attachment to the contract, the contractor shall ensure that all incidental property is returned to the Contracting Officer

Representative (COR) when no longer being used or at contract closeout. Accountability and responsibility for all IT related incidental property (e.g., computers, cell phones, printers) shall be documented by each contractor employee through the submittal of the MDA Form 111, “MDA Property Accountability Form.” Refusal to sign MDA Form 111 will result in removal of equipment.

Office facilities, equipment, and materials in accordance with FAR 45.000(b)(5) for daily business use. This includes office space, desk/work station, telephone, chair, and requisite consumable materials.

Network: access to classified DoD network resources, as required, common use access of workstations on the ULAN and CLAN, common use access of email, common use access of the internet for professional use only.

Communications: telephones, common use access to fax machines, and voice mail.

Specific Government property necessary for accomplishment of requirements will be identified within individual task order(s).

7.0 Special Requirements

7.1 Cost and Software Data Reporting (CSDR)

The contractor shall systematically collect and report actual contract costs to provide DoD cost analysts with needed data to estimate future costs. Contractor reports shall be prepared in accordance with the instructions contained in the most recently approved versions of DI-FNCL-

81565, DI-FNCL-81566, DI-FNCL-81567, and DI-FNCL-81765.

7.2 Supply Chain Risk Management (SCRM)

SCRM will be established to protect supplies purchased for or part of solutions developed to support MDA in accordance with DoD 5200.44, Protection of Mission Critical Functions to

Achieve Trusted Systems and Networks (TSN). In accordance with DoD 5200.44, identify the risks to the supply chain and the risk management strategies they will employ to counter those risks, identify critical components and subcomponents in their system design and describe how they will ensure visibility into the supply chain and to ensure the integrity of those critical components and subcomponents. Processes will be established to verify critical function components received from suppliers are free from malicious code, counterfeit parts or unauthorized product substitution (e.g., seals, inspection, secure shipping, testing, etc.) in accordance with “NSA Guidance for Addressing Malicious Code Risk” dated 10 September

2006. Processes shall also address the appropriate controls to ensure their subcontractor’s plans comply with supply chain risk management requirements in accordance with DoD 5200.44 and

Software Assurance Countermeasures in Program Protection Planning dated March 2014.

7.3 Cybersecurity

It is the Government’s objective for the contractor to:

Identify, manage, verify, and validate Cybersecurity requirements in the same manner as all other program requirements;

Integrate Cybersecurity considerations into program systems engineering and design processes, including risk management, SCRM;

Provide support, source data, and analysis required to support the Government in obtaining system authorization in accordance with DoD Instruction 8510.01, Risk

Management Framework;

Provide Cybersecurity measures to secure, safeguard and protect controlled unclassified information from unauthorized access, disclosure, incident or compromise provided by or generated for the Government that transits or resides on any non-Government information technology system (prime and all sub-contractors);

Integrate and support robust Cybersecurity testing in the Integrated Master Test Plan;

Provide support, analysis of the MDA Cybersecurity insider threat program, computer network defense support program, and RMF efforts within the supported programs.

7.4 Property Management and Accountability

Accountability will be established and maintained for all property purchased, leased, developed, currently in development, or otherwise acquired by MDA for the asset’s entire lifecycle, from receipt to disposal.

7.5 Network Access

In accordance with DoDD 8140.01 and its interim implementation manual, DoD 8570.01-M, any individual requiring access to government information technology systems must complete

Information Assurance Awareness training. In addition to the IA baseline training requirement for access, any personnel requiring privileged access must obtain appropriate Computing

Environment (CE) certifications for the operating system(s) and/or security related tools/devices they support or operate. Compliance with the guidelines established in DoD 8570.01-M is mandatory irrespective of the Task Order on which the work is performed. Personnel performing IA functions on national security systems must also meet the Committee on National

Security Systems training requirements. As reflected in DoD 8570.01-M paragraph C2.3.12, all personnel holding an approved IA baseline certification in fulfillment of the requirements of the

Manual must release their certification information to the Department of Defense through the

Defense Workforce Certification Application (DWCA):

https://www.dmdc.osd.mil/appj/dwc/index.jsp

7.6 Location and Hours of Work

Specific workforce location constraints will be identified in task orders issued under the contract.

Altered work hours and workweeks may be necessary to support requirements scheduled during off-hours. Note: BMDS Test and Exercise support may require portions of the workforce schedule and/or place of performance to be realigned for the duration of the test and or exercise.

Weather or security closures of government facilities will be handled in accordance with the contractor's DCAA-approved accounting procedures and policies.

The Contractor may elect to use an alternative worksite arrangement provided the Contractor has a company-approved alternative worksite plan. The primary worksite is the traditional "main office" worksite. An alternative worksite means an employee's residence or a telecommuting center. A telecommuting center is a geographically convenient office setting as an alternative to an employee's main office. The Government reserves the right to review the Contractor's alternative worksite plan. Regardless of work location, all contract terms and conditions, including security requirements and labor laws, remain in effect. The Government may require the contractor performance at the primary worksite. The Government shall not incur any additional cost nor provide additional equipment for contract performance beyond the IT related incidental property provided in paragraph 6.0 as a result of the Contractor's election to implement an alternative worksite plan.

7.6.1 Telework

For the purpose of this contract, Telework is defined as a work arrangement that allows a contractor employee to perform work at an alternate location (e.g., home). Notwithstanding the requirement for onsite work specified in this contract, the Contractor should have, and make available to the Government as requested, a telework strategy and policy for its workforce.

Regardless of work location, all contract terms and conditions, including security requirements and labor laws, remain in effect.

Under this contract, and at no additional cost to the Government or change of “onsite” status, the contractor may allow employees to telework at a designated location agreed to between the contractor and its employee as long as the duties/responsibilities can be adequately performed, monitored, and managed. The Contracting Officer Representative and/or Contracting Officer, in coordination with the respective Program Representative, will advise the contractor as to which requirements are to be performed on-site at the Government-provided facility and which requirements may be performed in a full-time/part-time telework basis. Even in a telework status, there will be times when contractor employees will be required to access Government facilities, e.g., required meetings, specialized training not available online, classified work, etc.

In cases where performance is authorized at an alternate location, equivalent workstation and collaboration/communication equipment that would normally be provided in a Government-provided location will be furnished to the Contractor as Government Furnished Property. The

Contractor assumes, until such time it is returned, responsibility for the equipment once it is assigned to its employees. The Contractor and/or its employee acknowledges receipt of the property with the closure of the MDA Kinetic Service Request (KSR). The Government will continue to provide network connection via VPN and technical support for the equipment provided. The Government will not provide internet connectivity for Contractor employees.

7.6.1.1 Telework falls into Three Categories for the purposes of this contract:

7.6.1.1.1. Routine Telework. An arrangement where, on a regular/recurring basis, an employee works away from a specified worksite. Examples of situations when this may be appropriate are when the Contracting Officer Representative and/or Contracting Officer notifies the contractor that a function is allowed to be performed at a non-Government provided location and/or when the contractor is notified that Government provided space is not available and the functions can be performed via a telework arrangement with “as required” access to the Government facilities, e.g., hoteling workspace, required meetings, etc.

7.6.1.1.2. Situational Telework. Situational or infrequent work done at an alternate work location may be implemented at the contractor's discretion to meet short-term requirements. Examples where situational telework may be appropriate are when an employee needs to complete discrete portions of projects or work assignments, recovery from an injury (generally 30 days or less), or when office space is unavailable due to renovations.

7.6.1.1.3. Unscheduled Telework. Unscheduled telework serves as a means to continue operations and maintain productivity during an emergency event involving inclement weather or other emergency situations that may result in the closure or restricted access to government installations and/or facilities. Unscheduled telework is only authorized when the designated senior government official declares an installation or facility closure/restriction that impacts the contractor's ability to perform onsite work. During periods of extended, unscheduled telework, the contracting officer will provide additional guidance regarding contractor activities during the event.

7.7 Security

All personnel must be in possession of at least an interim Secret security clearance to have unescorted access to areas within an MDA/Government facilities where performance is authorized (any location funded by and under the security cognizance of MDA is considered an

MDA facility). Some work may require a Top Secret, Sensitive Compartmented Information, Special Access Program or Special Access Required clearances.

DD Forms 254: Overarching security requirements and Contractor access to classified information shall be as specified in the basic DD Form 254, which will be further identified in the DD Form 254 for each task order, as required. All contractor personnel with access to unclassified information systems, including e-mail, shall have at a minimum a favorable National

Agency Check (NAC).

Access to the following Host Installations and Restricted areas may be required to execute the task orders issued under this contract:

7.7.1 Predominate MDA Facilities

Schriever AFB, CO and MDIOC (Primary work location).

Access to Schriever AFB (SAFB) is strictly controlled; to access the installation requires a sponsorship by a person assigned/employed on the installation for personnel who do not possess some form of current federal government issued identification. The MDIOC is located within a

USAF restricted area on SAFB, contractor employees require at a minimum a National Agency

Check Investigation (NACI) and a Visit Authorization Request (VAR) for issuance of a temporary or permanent badge that allows unescorted access to the restricted area. Contractors operating as visitor groups only may be issued a permanent badge for unescorted access if contract performance exceeds 90 consecutive days. The Commander may grant individuals access to the Restricted Area after the following has been completed: 1) the contractor completes the Standard Form (SF) 85P and it is submitted to Office of Personnel Management

(OPM) for a National Agency Check Investigation (NACI); 2) a check of the Defense Clearance and Investigation Index (DCII) reveals no relevant, significant information which might preclude unescorted access; and 3) a check of the appropriate local records has been accomplished. Since access to the MDIOC is controlled, it is important to understand the potential impacts to the contractor(s) ability to accommodate/respond to requirement fluctuations (e.g., surge support, competing/overlapping schedules, etc.); this potential impact must be considered in all proposed solutions.

Redstone Arsenal, AL and MDA Controlled Space(s).

Access to Redstone Arsenal is strictly controlled; to access the post requires a sponsorship by a person assigned/employed on the post for personnel who do not possess some form of current federal government issued identification. MDA facilities are controlled areas and require a

MDA-issued badge to gain unescorted entrance to any of the facilities. Unescorted access is granted to cleared MDA personnel and contractors and to other persons who, in the course of official business, have a current security clearance on file, a need to conduct MDA business, and having a need to know. Contract personnel are issued badges through COR and Security

Managers. Contact MDA Security Operations Center for information and procedures pertaining to MDA controlled space(s).

Fort Greely, AK and Missile Defense Complex Restricted Area.

Access to Fort Greely Army Garrison (FGA) is strictly controlled; contractor employees must have a local government sponsor and will be required to pass a National Crime Information

Center (NCIC) Criminal Background Check review prior to unescorted entry. Contractor employees that possess an interim Secret security clearance at a minimum will not be required to submit an NCIC criminal background check. Procedures and information pertaining to access is available by contacting the Fort Greely Installation Visitor Control Center. Additionally, the

Missile Defense Complex (MDC) is a designated restricted area on FGA. Contractor employees requiring unescorted entry to the MDC must have an approved Visit Authorization Request on file, possess an interim Secret security clearance at a minimum and have local government approval. Contact MDA/GMSG (Ground-based Midcourse Defense Operations Support at

FGA) Security Manager at for additional information on FGA restricted/control area access requirements.

Vandenberg AFB, CA and Ground-based Midcourse Defense (GMD) Restricted Areas.

Access to Vandenberg AFB is strictly controlled; to access the installation requires a sponsorship by a person assigned/employed on the installation for personnel who do not possess some form of current federal government issued identification. Contact the Security Forces Visitor Control

Office for procedures and information pertaining to installation access. Additionally, GMD has restricted areas on Vandenberg AFB. Contractor employees require a National Agency Check

Investigation (NACI) at a minimum for unescorted access to the GMD restricted area(s).

Contractors operating as visitor groups only (contract performance exceeding 90 consecutive days) may be issued a permanent badge for unescorted access to the GMD restricted areas.

Commanders may grant individuals access to the Restricted Area after the following has been completed: 1) the contractor completes the Standard Form (SF) 85P and it is submitted to Office of Personnel Management (OPM) for a National Agency Check Investigation (NACI); 2) a check of the Defense Clearance and Investigation Index (DCII) reveals no relevant, significant information which might preclude unescorted access; and 3) a check of the appropriate local records has been accomplished. Since access to the GMD operational areas is restricted, it is important to understand the potential impacts to the contractor(s) ability to accommodate/respond to requirement fluctuations (e.g., surge support, competing/overlapping schedules, etc.); this potential impact must be considered in all proposed solutions. Contact

Security Forces at 805-606-1853 for procedures and information pertaining to restricted area access.

Naval Support Facility-Dahlgren, VA and MDA Controlled Space(s).

Access to Dahlgren is strictly controlled; to access the installation requires a visit request sponsored by a person assigned/employed on the installation at the Pass & Identification (ID) center for personnel who do not possess some form of current federal government issued identification. A picture ID and vehicle registration are required prior to the issuance of guest badge and a temporary car pass from the Pass & ID center for installation access. Contact the

Dahlgren Visitor Control Office for procedures and information pertaining to installation access.

MDA facilities are controlled areas and require a MDA-issued badge to gain unescorted entrance to any of the facilities. Unescorted access is granted to cleared MDA personnel and contractors and to other persons who, in the course of official business, have a current security clearance on file, a need to conduct MDA business, and having a need to know. Contract personnel are issued badges through COR and Security Managers. Contact MDA for procedures and information.

Ft. Belvoir, VA and MDA Headquarters Command Center.

Access to Ft. Belvoir is strictly controlled; to access the post requires a sponsorship memorandum at the visitor center by a person assigned/employed at the MDA Headquarters

Command Center for personnel who do not possess some form of current federal government issued identification. Contact the US Army Garrison, Ft. Belvoir visitor center for information and procedures pertaining to post access. MDA Headquarters Command Center (HQCC) is a controlled area facility and requires a MDA-issued badge to gain unescorted access. Unescorted access is granted to cleared MDA personnel and contractors and to other persons who, in the course of official business, have a current security clearance on file, a need to conduct MDA business, and having a need to know. Contract personnel are issued badges through COR and

Security Managers. Contact MDA HQCC Security Operations Center for information and procedures pertaining to MDA controlled space(s).

Pacific Missile Range Facility and Aegis Facility Access.

Access to Pacific Missile Range Facility (PMRF) is controlled; to access the installation requires a sponsorship by a person assigned/employed on the installation for personnel who do not possess some form of current federal government issued identification. It is strongly recommended you contact the Security Pass & ID Office for procedures and information pertaining to installation access. Due to the geographical location of PMRF MDA contractors supporting missions at that location will require prior Government approval for travel due to limited supporting resources.

Outside the United States, Puerto Rico, U.S. possessions and trust territories.

Classified performance will occur at various MDA and/or other government locations as directed by the Performance Work Statement, Statement of Work, or Statement of Objectives. The contractor shall abide by government security requirements per NISPOM 6-105c. The cognizant security office at the performance location is MDA or the host installation.

7.7.2 Operations Security

The contractor is required to apply Operations Security (OPSEC) to enhance protection of classified and unclassified critical information pursuant to DoD Directive 5205.02, DoD OPSEC

Program; DoD 5205.02-M, OPSEC Program Manual; National Security Decision Directive

Number 298, National Operations Security Program; MDA Instruction 5205.02, OPSEC

Program; and supplementary instructions. In addition to the above access requirements, there is also annual training in the following: Antiterrorism Awareness (Level 1) training, Operational

Security, and other security related training specific to the above work areas.

7.8 Program Protection

Critical Program information (CPI) and Critical Technologies (CT), will be identified by MDA, and protected by the contractor to the standards articulated in DoDI 5200.39, Critical Program

Information (CPI) Protection within the Department of Defense, July 16, 2008, Incorporating

Change 1, December 28, 2010 and DoD Instruction 5200.44, Protection of Mission Critical

Functions to Achieve Trusted Systems and Networks (TSN), November 5, 2012 and implemented by a Program Protection Plan developed in conjunction with the MDA program offices associated with the task orders.

8.0 Applicable Directives/Regulations

Directives/regulations that are applicable to all task orders are identified in Attachment J-07, Compliance Documents. Tailoring, as necessary, may be done at the task order level.

All documentation delivered under this contract must comply with Section 508 of the

Rehabilitation Act of 1973, as amended. 29 U.S.C. § 794 (d), § 794d. Electronic and information technology Subpart D — Information, Documentation, and Support 1194.41

Information, documentation, and support. Authority: 29 U.S.C. 794d.

9.0 Revisions and Updates

This document will be reviewed annually to ensure the service summary items, desired outcomes and performance attributes are relevant and reflect the needs of the Agency.

Enclosure 1 – High Level Objectives and Capabilities Descriptions and

Legacy Requirements

Attach J-01 Encl 1 - HLO-Legacy Rqmts (10May2016).docx