B08 Attachment 0002 Gigamon PWS.pdf

US ARMY CYBER COMMAND

Performance Work Statement

(PWS)

Task Force Echo (TFE) Gigamon Training

Date: 21 October 2020

1.0. General. This is a non-personnel services contract to provide Gigamon trainings to Task Force ECHOv4 personnel. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service provider shall be accountable solely to the Contract who, in turn is responsible to the Government.

1.1. Introduction. The contractor shall provide all personnel, hardware, software, supplies, facilities, transportation, tools, material, supervision, and other items and non-personal service necessary to deliver Gigamon training as defined in this Performance Work Statement (PWS) except for those items specified as government furnished property and services. The Gigamon training will be conducted virtually therefore students/trainees will utilize a government provided laptop. The contractor is not required to provide students/trainees with hardware to attend the virtual course(s). The contractor shall perform to the standards defined in this contract.

1.2. Background.

1.2.1. In 2017, National Guard was mobilized to form Task Force Echo (TFE) with the purpose to conduct national security mission to protect critical infrastructure. National Guard rotates personnel each year to fill the TFE manning requirement. After each iteration, TFE training must adapt to new requirements. Gigamon Training was something identified as a requirement by Task Force ECHO version 3. The Defensive Cyber Operations-Engineering (DCO-Eng) section requires three Gigamon courses to be proficient in mission related duties. In order to prepare for the mission, the TF ECHOv5 personnel require Gigamon training in order to be trained and certified on the work roles no later than 10 November 2020. Gigamon training pipeline includes the “Gigamon Foundation Course”, the “Design and Implement the Gigamon Inline Bypass Threat Prevention Solution”, and the “Gigamon Certified Professional Bootcamp” Course.

1.2.2. The two-day Gigamon Foundation course is the first building block in learning how to implement and configure the GigaSECURE platform, required for Task Force Echo. This course includes comprehensive discussions, real-world use cases and practical hands-on labs.

1.2.3. The two-day Designing and Implementing Gigamon Inline Bypass Security Solution course will teach TF ECHOv5 staff how to best design and implement the Gigamon Inline Bypass Threat Prevention Solution to reduce costs, maximize security effectiveness and improve network resiliency. The training teaches how to deliver the right data to the right tool at the right time, and how integrating advanced inline bypass functions helps maximize the effectiveness of security enhancement practices. The Gigamon Foundation course is a recommended pre-requisite.

1.2.4 The five-day Gigamon Certified Professional Bootcamp will teach TF ECHOv5 personnel security fundamentals for implementing Gigamon technologies to monitor data in motion as part of a comprehensive security strategy.

1.3. Objectives.

1.3.1. The Gigamon training will be conducted using instructor-led online classroom delivery. Contractor shall provide all personnel, hardware, software, supplies, facilities, transportation, tools, material, supervision, and other items and non-personal service necessary to deliver the following Gigamon training to the Task Force ECHOv5 personnel. The Gigamon training will be conducted virtually therefore students/trainees will utilize a government provided laptop. The contractor is not required to provide students/trainees with hardware to attend the virtual course(s).

1.3.1.1. Facilitate Gigamon Foundations Course: one (1) class from 2 – 3 NOV 20.

Student capacity is 10 students. This course is online, instructor lead, (not self-paced).

1.3.1.2. Facilitate Designing and Implementing Gigamon Inline Bypass Security Solution Course: one (1) class from 4 – 5 NOV 20. Student capacity is 10 students. This course is online, instructor lead, (not self-paced).

1.3.1.3. Facilitate Gigamon Certified Professional Bootcamp: one (1) class from 6 – 10 NOV 20. Student capacity is 10 students. This course is online, instructor lead, (not self-paced).

1.4. Scope. This PWS covers the efforts to provide Gigamon training to the Task Force Echo personnel. Contractor provides all personnel, hardware, software, supplies, facilities, transportation, tools, material, supervision, and other items and non-personal service necessary to deliver the class contents to the Task Force ECHO personnel.

The Gigamon training will be conducted virtually therefore students/trainees will utilize a government provided laptop. The contractor is not required to provide students/trainees with hardware to attend the virtual course(s). One instructor must virtually present/facilitate all course material during the hours of 0800 – 1700 Eastern Standard Time (EST) with a one-hour lunch break (1130-1230) on TF ECHOv5 working days (defined as Monday through Sunday).

1.5. Contract Type. The Government anticipates award of a Firm Fixed Price (FFP) contract.

1.6. Place of Performance.

1.6.1. The primary place of performance will be a virtual classroom environment. The location of the instructor is not geographically limited so long as the virtual classroom meets the requirements set out in Section 1.4 of this document.

1.7. Hours of Operations.

1.7.1. The contractor is responsible for conducting business between the hours of 0800

– 1700 EST Monday thru Friday except Federal Holidays or when the Government facility is closed due to local or national emergencies, administrative closing, or similar Government directed facility closings. For other than FFP contracts, the contractor will not be reimbursed when the government facility is closed for the above reasons. The Contractor must always maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential. Training hour deviations must be approved Contract Officer Representative (COR).

1.7.2. Federal Holidays are exempt, and courses should not be conducted on these dates. Federal Holidays for 2020 as defined by the Office of Personnel Management are as follows:

Date Holiday

Wednesday, January 1 New Year’s Day

Monday, January 20 Birthday of Martin Luther King, Jr.

Monday, February 17 Washington’s Birthday

Monday, May 25 Memorial Day

Friday, July 3 Independence Day

Monday, September 7 Labor Day

Monday, October 12 Columbus Day

Wednesday, November 11 Veterans Day

Thursday, November 26 Thanksgiving Day

Friday, December 25 Christmas Day

1.7.3 Period of Performance. The period of performance for this effort at contract award through the final day of the last class.

1.8. Privacy Act. Protected information means all non-public information, including, but not limited to, trade secrets or proprietary information of other Contractors, Government source selection information, Privacy Act or personally identifiable information (PII), or any other information with distribution limited by the U.S. Government. If, during the performance of this requirement, Contractor personnel obtain access by any means to protected information, they shall not disclose, publish, divulge, release, or make known, in any manner or to any extent, the information except as necessary to carry out duties under this contract. Protected information shall be given only to persons specifically granted access to this sensitive information and may not be further divulged without specific prior written approval from an authorized U.S. Government individual. Further contractor employees may use any non-public information for official/authorized Government purposes, and they shall not use the information for their personal gain, the gain of their employer, or the gain of anyone else. The Contractor shall notify the Contracting Officer (KO) of any potential organizational conflicts of interest created by any such access; however, a nondisclosure agreement will not overcome an Organizational Conflict of Interest (OCI) as defined in Federal Acquisition Regulation (FAR) Subpart 9.5. Moreover, the Trade Secrets Act prohibits releasing proprietary information without the owner’s consent. Accordingly, all Government Contractors are required to mark their proprietary information, and any time the Contractor is given inadvertent access to such marked information, the Contractor shall inform the KO of the access.

1.9. Personal Service. The Government has determined that use of a contract to satisfy this requirement is in the best interest of the Government, economic and other factors considered, and is not being used to procure personal services prohibited by the FAR Part 37.104 titled “Personal services contract”.

1.10. Security. The project is Unclassified.

1.10.1. Physical Security. The Contractor shall be responsible to safeguarding all vendor equipment, information, and property that are necessary to deliver the class content to the customers. Government does not provide utilities, equipment, and training location in this contract.

1.11. Key Personnel.

1.11.1. The contractor shall identify key personnel at award.

1.12. Quality Control. The Contractor shall develop and maintain an effective quality control plan to ensure tasks are performed in accordance with this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control plan is how they assure themselves that their work complies with the requirement of the contract.

1.13. Records/Data. Indicate data normally generated in the performance of this task and ownership of the data at the end of the task. In addition, identify the format of the data.

1.14. Packaging/Packing/Shipping Instructions. None

1.15. Applicable Documents. Provide a listing of all documents cited in the PWS including Government directives, formal specifications and standards, and other documents cited. Identify each by title, number, and the date of edition or revision.

1.16. Points of Contact.

Primary/COR Noah Evans Contract Quality Specialist Acquisition Support & Oversight Division (ASOD), G4 U.S. Army Cyber Command 930th 15th Street Fort Gordon, GA 30905 Office: 762-206-2904 Mobile: 443-722-1426

Task Force Echo S3 MAJ Michelle Spangler TFE4 Operations Officer Bldg 8605 6th Armored Cavalry Rgt Rd Fort Meade, MD 20755

(301) 677-7854 michele.m.spangler.mil@mail.mil

1.17. COR: The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, and specifications;

monitor the Contractor's performance and notify both the KO and Contractor of any deficiencies; coordinate availability of Government furnished property, and provide site entry for Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.18. Contractor Travel. N/A.

1.19. Training. N/A.

1.20. Contractor Manpower Reporting. The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the Contractor shall report Contractor manpower information (including Sub-Contractor manpower information) required for performance of this contract. The Contractor shall submit all the information required in the format specified at the following web address: https://cmra.army.mil/default.aspx.

The Contractor shall fill in the below required fields on the website:

Contract Number https://cmra.army.mil/default.aspx

Delivery Order Number (if applicable)

Task Order Number (if applicable)

Requiring Activity Unit Identification Code (UIC)

Command

Contractor Contact Information

Federal Service Code (FSC)

Direct Labor Hours

Direct Labor Dollars

Location Information (where the Contractor and Sub-Contractors (if applicable) performed the services)

The reporting period will be the period of performance not to exceed 12 months ending

30 September of each Government fiscal year and must be reported by 15 October of each calendar year.

If your particular contract crosses fiscal years, two entries must be made to capture the data for the contract period, for example, if the contract start date is 1 January 2020 and ends 31 December 2020 the data for the period from 1 January 2020 through 30

September 2020 shall be entered not later than 15 October 2020 and the period 1

October 2020 through 31 December 2020 shall be entered not later than 15 January

2021.

2. DEFINITIONS AND ACRONYMS:

2.1. Definitions:

2.1.1. Contractor. A supplier (Vendor) having a contract to provide specific supplies or service to the Government. The term used in this contract refers only to the prime.

2.1.2. KO. A person whom has been duly appointed to negotiate, award, manage/administer, change and terminate contracts. A KO is the only individual who can legally bind the Government; this authority is not delegable or transferrable under the law. The KO reviews, analyzes, and makes determinations regarding all contractual matters under their authority.

2.1.3. COR. An employee of the U.S. Government appointed by a duly warranted KO to surveil, inspect and administer certain aspects of the contract. Such appointment shall be made in writing and provided to the Contractor, and shall state the scope of authority and limitations.

2.1.4. Defective Service. A service output that does not meet the standard of performance associated with the PWS and/or Performance Requirements Statement.

2.1.5. Deliverable. An end item (tangible item of supply) or a service (measurable but intangible) that is required to be delivered (or performed) under the contract for which the Contractor has incurred cost to deliver. Deliverables may include reports, participation in meetings, etc.

2.1.6. Key Personnel. Contractor personnel that act or perform on behalf of the Contractor and whose qualifications and experience may be evaluated as a part of the source selection process.

2.1.7. Physical Security. Action(s) taken to prevent loss or damage to Government property.

2.1.8. Quality Assurance. The process the Government utilizes to verify that services being performed by the Contractor are performed in accordance with acceptable standards.

2.1.9. Quality Assurance Surveillance Plan (QASP). An organized written document that specifies surveillance methodology used in assessing Contractor performance with specific regard to the PWS.

2.1.10. Quality Control. All necessary measures taken by the Contractor to assure that the quality of an end product or service meets contract specifications.

2.1.11. Subcontractor. Any entity corporate or individually that enters into a contract with a prime contractor.

2.1.12. Work Day. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.13. Work Week. A period defined as Monday through Friday, unless specified otherwise.

3.0. Government Furnished Items. N/A

4.0. Contractor Furnished Items. Contractor provides personnel, hardware, software, supplies, facilities, transportation, tools, material, supervision, training location, and other items and non-personal service to deliver training as defined in this PWS except for those items specified as government furnished property and services. Student computers will be provided by the government.

5.0. Specific Requirements. This project will consist of seven (7) tasks for which the Contractor shall be responsible.

5.1. Task Description.

5.1.1. The Contractor shall provide all personnel, hardware, software, supplies, facilities, transportation, tools, material, supervision, and other items and non-personal service necessary to deliver the following Gigamon classes.

5.1.2. Facilitate Gigamon Foundations Course: one (1) class shall be completed no later than 30 days after award Student capacity is 10 students.

5.1.3. Facilitate Designing and Implementing Gigamon Inline Bypass Security Solution Course: one (1) class shall be completed no later than 30 days after award. Student capacity is 10 students.

5.1.4. Facilitate Gigamon Certified Professional Bootcamp: one (1) class shall be completed no later than 30 days after award. Student capacity is 10 students. This course is online, instructor lead, (not self-paced).

5.1.5. Contractor shall provide an electronic certificate of attendance to the attendees and furnish copies to the COR. Certificates must clearly state the amount of course hours.

5.1.6. Contractor shall provide Gigamon authorized instructor for class instructions.

5.1.7. Contractor will provide course material to the students on the first day of the class as well as a welcome letter at least two business days prior to course commencement;

sent to student emails provided by the TFE S3 (POC in paragraph 1.16).

5.2. Quote Submission. The contractor shall submit a written quote for consideration before the due date and time within the Request for Quote (RFQ). In addition, the contractor shall submit quotes in accordance with the RFQ instructions.

5.3. Deliverables and Reports. In addition to the applicable requirements, the contractor shall provide the following deliverables:

5.3.1. A0001 Welcome Letter: Provide course welcome letter to the students two business days prior to the first day of the class.

5.3.2. A0002 Gigamon Course Material: Provide all course material to the students on the first day of the class. Course material can be either physical or virtually provided. If physical, material must be shipped in advance to arrive two business days prior to the first day of class. Shipping POC listed in paragraph 1.16.

5.3.3. A0003 Gigamon Certificate of Completion: Provide Certificate of Completion to the students and COR on the final day of class. All students must receive a course completion certification of training that clearly lists the amount of standard course hours completed (example: 15 Hours).

5.4. Site Survey. N/A

5.5. Other Reporting Requirements. In addition to the certificate of attendance (refer to A0003 Gigamon Certificate of Completion), the contractor shall provide the following:

5.5.1. The contractor shall inform the COR in writing of the actual task starting date on or before the starting date.

5.5.2. The contractor shall bring problems or potential problems affecting performance to the attention of the COR as soon as possible. Verbal reports will be followed up with written reports when requested by the COR.

5.6. Delivery Instructions. All deliverables shall be delivered to the client no later than the date specified in the PWS at Technical Exhibit 2 Deliverable Schedule. Deliverables are to be transmitted with a cover letter, on the contractor’s letterhead, describing the contents.

5.7. Inspection and Acceptance. In the absence of other agreements negotiated with respect to time provided for government review, deliverables will be inspected and the contractor notified of the COR’s findings within 5 work days of normally scheduled review.

TECHNICAL EXHIBIT 1

Performance Requirements Summary

The contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

Performance Objective

Standard Performance

Threshold Method of

Surveillance

PRS #1 Engaging and Supporitng All Students in Learning.

Connecting student’s prior knowledge, life experience, interests with learning goals. Engaging students in problem solving, critical thinking and other activities that make subject matter meaningful

95% within the specified time limits.

Customer feedback, random inspection, random monitoring, or any combination of the methods of surveillance.

PRS # 2

Understanding and Organizing Subject Matter for Student Learning

Teaches accurate and up-to-date information.

Coordinates learning content with instructional objectives. Uses effective examples and illustrations.

Presents learning content in a logical sequential order. Using materials, resources, and technologies to make subject matter accessible to students

95% within the specified time limits.

Customer feedback, random inspection, random monitoring, or any combination

PRS # 3 Maximize Time on Task

Schedule learning time according to policy for the subject area. Begins class work promptly. Minimizes management time.

Minimizes transition time.

Makes effective use of academic learning time.

Gives clear and concise directions.

95% within the specified time limits.

Customer feedback, random inspection, random monitoring, or any combination

TECHNICAL EXHIBIT 2

Deliverables Schedule

Deliverable Frequency # of Copies Medium/Format Submit To

A0001 Welcome Letter (PWS Para 5.3.1)

Two business days prior to the first day of the class

1 Electronic copy in Adobe Acrobat, or MS Word / Excel / PowerPoint in email correspondence

Student

A0002 Gigamon Course Material (PWS Para 5.3.2)

First day of the class; if physical, material must be shipped in advance to arrive two business days prior to first day of class

1 Paper (hard copy) and/or Adobe Acrobat / MS Word / Excel / PowerPoint in Cloud or

CD/DVD/USB

drive

Student

A0003 Gigamon Certificate of Attendance (PWS Para 5.3.3)

Last day of class

Electronic copy in Adobe Acrobat format

Students and

COR