C2IO-3_PWS_RFI.pdf

PERFORMANCE WORK STATEMENT

Headquarters (HQ) Intelligence and Security Command (INSCOM) Command, Control, and Infrastructure Operations (C2IO)

Draf t

PWS W50NH26####

Part 1: General Information

1. GENERAL. This is a non-personal services contract to operate and maintain the Command and Control(C2) and Infrastructure Operations (IO) for Headquarters (HQ) United States (US) Army Intelligence and Security Command (INSCOM), located at Fort Belvoir, VA, with operations in the Contiguous United States (CONUS) and Outside the Contiguous United States (OCONUS).

1.1 Description of Services/Introduction. The contractor shall provide subject matter experts necessary to provide support to maintain the C2 of INSCOM’s local networks and corollary infrastructure and those identified in this Performance Work Statement (PWS). The Government will not exercise supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the contractor who, in turn, is responsible to the Government.

1.2 Background. US Army INSCOM, a Direct Reporting Unit (DRU) to Headquarters, Department of the Army G2, executes mission command of operational intelligence and security forces; conducts and synchronizes worldwide multi-discipline and all-source intelligence and security operations; delivers linguist support and intelligence-related advanced skills training, acquisition support, logistics, communications, and other specialized capabilities in support of Army, Joint, and Coalition Commands and the US Intelligence Community (IC).

The Headquarters INSCOM resides in a secure office building and compound with controlled access. Employees are in separate offices or cubicles, supported by networked or stand-alone C2 and C2IO Systems (unclassified and at various classification levels). Facilities contain rooms configured to serve as data and/or communication centers.

The working environment typically requires controlled access to classified information and many of the work locations are within Sensitive Compartmented Information Facilities (SCIFs) and in some cases, Special Access Program (SAP) facilities. The equipment supported by the services included in this PWS is used to support worldwide intelligence and C2 operations. The equipment provides intelligence data to National Command Authorities (NCA), members of the IC, and various civilian agencies and departments. A typical supported site may include commercial off the-shelf (COTS)/Government off-the-shelf (GOTS) hardware and software; COTS/GOTS communication equipment; C2IO Systems including: Local, Metropolitan, and Wide Area Networks (WANs);

storage devices, workstations, laptops and servers (of different types, such as email and Web servers); printers, copiers, scanners, and facsimiles; digital senders, cellular phones and related support devices necessary for the sites’ effective operation.

INSCOM G6, Ground Support Intelligence Agency (GISA) and the Major Support Commands (MSC) provide the enabling layer to connect the Army and its tactical formations to defense and national intelligence agencies via tactical networks. The ability to provide mission critical intelligence is dependent on the successful use of its information technology (IT) networks worldwide. INSCOM has 16 organizations with varying breadths of intelligence responsibility spanning the Army and the world from the tactical edge to the strategic enterprise level or national levels.

1.3 Objective. This PWS is intended to provide a single support contract for all C2IO including networks, hardware, software, administrative support, and specialized tools at the point of customer need through effective support services. The contractor shall provide the full range of C2 support to include the full range of C2IO sustainment and technical support services to ensure uninterrupted service.

1.4 Scope. HQ INSCOM requires contractor support to provide reliable, uninterrupted C2IO including networks, hardware, software, administrative support, and specialized tools at the point of customer need through effective support services. The contractor shall provide the full range of C2 support to include the full range of C2IO sustainment and technical support services to ensure uninterrupted service. The systems supported under this PWS consist of commercial, modified- commercial and specially designed equipment items.

The scope of the required contractor support includes the totality of C2IO system capabilities located at Fort Belvoir, VA, INSCOM and MSCs both CONUS/OCONUS. Included are the Local Area Networks (LANs) that reside within the physical spaces controlled by the site and the systems the organization takes with it when deployed or travelling in support of other mission requirements. MSCs will require support for the systems.

Services provided by the Department of War (DoW), Army, or IC are not included in this definition and are not the responsibility of the contractor. The intent is to provide any of the functional requirements detailed in this PWS to any of the supported units. All resources required to fulfill this contract may be managed as one effort and cross-leveled as required, which will have dedicated resources and independent management.

1.5 Type of Contract. The Government anticipates award of Firm Fixed Price (FFP) Level of Effort (LOE) contract with separate contract line item numbers (CLINs) for travel and other direct costs (ODCs), and Surge Labor.

1.6 General Information

1.6.1 Period of Performance: The Period of Performance (POP) shall be a Base Period (BP) of 6 (six) months, with 4 (four) Option Periods (OP) of 12 (twelve) months and includes an -8 Extension Option for 6 (six) months. The POP reads as follows:

BP: 19 September 2026 – 18 March 2027 OP I: 19 March 2027 – 18 March 2028 OP II: 19 March 2028 – 18 March 2029 OP III: 19 March 2029 – 18 March 2030 OP IV: 19 March 2030 – 18 March 2031 -8 Extension Option: 19 March 2031 – 18 September 2031

1.6.2 Recognized Holidays: The Federal Government will be closed on the following 11 (eleven) holidays:

New Year’s Day Martin Luther King Jr.’s Birthday Presidents Day Memorial Day

Juneteenth Independence Day Labor Day Columbus Day

Veterans Day Thanksgiving Day Christmas Day

1.6.2.1 When a holiday falls on a non-workday - Saturday or Sunday - the holiday is typically observed on Monday (if the holiday falls on Sunday) or Friday (if the holiday falls on Saturday). Unless otherwise specified, the contractor shall observe the Federal holidays as set forth above.

1.6.3 Place of Performance: Locations may be worldwide but generally are represented in Table 1 Place of Performance of this PWS. Each unit has a central site and remote sites as designated below. The contractor shall provide support to these locations. Temporary Duty (TDY) locations include but are not limited to the following:

Table 1. Place of Performance Unit Location

HQ, INSCOM Fort Belvoir, VA GISA - Pacific Fort Shafter, HI GISA - CONUS Fort Bragg, NC National Ground Intelligence Center (NGIC) Charlottesville, VA 501st Military Intelligence Brigade (501st MI BDE) Seoul South Korea/ Pyeongtaek (Camp Humphreys)

1.6.4 Alternate Places of Performance: In the case of either Government-wide or installation closure, contractor personnel whose place of duty is the installation or facility are not authorized to perform at an alternate duty site, unless the Contracting Officer (KO) or Contracting Officer Representative (COR) approves the type of work and the alternate location in writing.

1.6.5 Hours of Operation: HQ INSCOM core hours are 0900 - 1500. HQ INSCOM personnel and Contractor personnel are expected to work an 8-hour workday and a 40 (forty) hour workweek. Prior to working outside of normal hours of operation, coordination must be made with the Government Contracting Officer Representative (COR) for approval, and coordination with the COR for site access.

1.6.6 Quality Assurance: The Government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.6.1 QASP: The contractor’s performance will be evaluated IAW the Government’s QASP and shall be used as the objective basis for determining the Contractor’s performance during any established reporting period. The QASP shall be used as the objective basis for determining the Contractor’s performance during any established reporting period. The QASP is a living document that the Government may review and revise on a regular basis. The intent of the QASP is to ensure performance IAW the metrics set forth in the contract documents, so the Government receives the quality of services specified and only pays for the acceptable level of services it receives. This plan aligns with the Performance Requirements Standards, Technical Exhibit 1, which outlines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.7 Travel: The contractor shall be prepared to travel to locations where INSCOM provides IT services. All travel shall be approved in advance by the COR.

All non-local travel requires Government issued Letters of Authorization (LOAs) or Letters of Instruction (LOI) and shall comply with the Joint Travel Regulations (JTR). A trip report (CDRL A002) shall be submitted to the COR no later than 10 working days following completion of any contractor or sub-contractor travel. Air travel will be reimbursed at the tourist/coach fare IAW the JTR. All other travel costs will be reimbursed IAW the JTR.

The contractor shall ensure their employees comply with 32 CFR Part 117, “National Industrial Security Program Operating Manual (NISPOM) requirements for notification and obtaining authorization prior to travel to areas listed by the State Department or other US Government Agencies as “denied or restricted” travel areas.

Prior to travel, the contractor shall utilize the Synchronized Pre-deployment and Operational Tracker (SPOT) (https://spot.altess.army.mil/privacy.aspx) to enter/validate new or previously entered employee data, validate contract information, identify task personnel, enter/validate company-provided equipment, update employee deployment details, certify deploying employees meet all eligibility requirements, and request LOAs for deploying company employees. For detailed information on user roles and SPOT processes, please refer to the Business Rules for the Synchronized Pre- deployment and Operational Tracker at the following link:

https://www.acq.osd.mil/asds/log/cso/ocs/docs/spot/SPOT%20DoD%20Business%20Rules%202025-02-04.pdf.

Except for emergency travel, LOAs shall be submitted with the following information at least 14 calendar days prior to the date of anticipated departure to facilitate processing and approval. In addition, the requirement for Theater Clearance Requests (TCRs) will be followed. The Government will approve LOAs only for properly cleared personnel who have appropriate country and travel clearances. The LOA must be executed by the KO.

The following information shall be included in the text of the LOA: reports shall reference the task number directing the travel and the corresponding LOA number. Travel to be performed is necessary in the public service. Cost for travel performed under this Letter of Authorization will be reimbursed to the contractor under the terms and conditions of the contract. Individual is authorized to travel on commercial or military aircraft or other conveyance under the contract as required for mission accomplishment. This LOA shall not be construed as authorization for the contractor to exceed the ceiling on travel funds set forth in the contract. When traveling, you are authorized to carry hand-receipted Government equipment. When traveling, use of Government facilities and services, i.e., club facilities and post office are authorized under the contract and will be in accordance with the appropriate local commander under the provisions of Army Regulation (AR) 700-32, Logistic Support of United States on-governmental, Non-military Agencies and Individuals in Oversea Military Commands. LOAs will not include logistical support for individuals traveling within CONUS. US Government rates are authorized at participating hotels\motels and rental car agencies while on travel required under this contract. Individual is considered “Key Personnel, Department of the Army Civilian” in connection with “non- Combatant Evacuation Orders” at OCONUS stations at the civil service equivalent grade indicated. Any questions resulting from this Letter of Authorization shall be directed to the KO or COR.

1.6.8 Overseas Travel:

1.6.8.1 OCONUS Performance Requirements: Contractor personnel assigned to work with Government entities located overseas shall be required to perform services OCONUS. The Government reserves the right to modify the contract to incorporate updated versions of applicable clauses for performance in OCONUS locations, including

Draf http://www.acq.osd.mil/asds/log/cso/ocs/docs/spot/SPOT%20DoD%20Business%20Rules%202025-02-04.pdf clauses specific to performance in a particular country. Any such modifications will be issued by the KO.

Designated contractors must maintain a current US Government issued passport, be eligible to freely visit Status of Forces Agreement (SOFA) approved countries and be eligible to acquire VISAs from those non-SOFA counties the Deployed Operations team regularly visits.

For Contract Performance or Delivery in a Foreign Country. This contract may require contractor personnel to perform services in countries and geographical locations other than the United States and CONUS.DFARS 252.225- 7043, Antiterrorism/Force Protection for Defense contractors OCONUS applies to both contingencies and non-contingency support. The key AT requirement is for non-local national contractor personnel to comply with theater clearance requirements and allows the combatant commander to exercise oversight to ensure the contractor's compliance with combatant commander and subordinate task force commander policies and directives.

Letter of Authorization. Prior to reporting for processing/travel to OCONUS locations, contractor personnel deploying may be required to obtain a Letter of Authorization (LOA) approved by the KO.

The Contractor shall ensure that all deployed employees and agents comply with pertinent Service and Department of War directives, policies, and procedures. The Contractor shall comply with all federal statutes, judicial interpretations and international agreements (e.g. Status of Forces Agreements (SOFA), Host Nation Support Agreements, Technical Expert Status Accreditation (TESA)/Technical Representative (TR) Compliance, etc.)

applicable to US Armed Forces or citizens in the area of operations. Failing to adhere to the applicable SOFAs and other similar related agreements and the instructions and general orders issued by the Theater Commander or his/her designated representative may result in the removal of the contract employee from the area at the Contractor’s expense.

Technical Expert Status Accreditation (TESA)/Technical Representative (TR) Compliance for work performed in Europe. The contractor shall adhere to all relevant provisions of the applicable TESA, TR or other similar related agreements. Contractor employees hired for positions in Europe as Technical Experts must be accredited by host nation authorities TESA in accordance with procedures established in Article 73 of the Supplementary Agreement (SA) to the NATO SOFA, managed by the DOD Contractor Personnel Office (DOCPER). The contractor is responsible for creating position descriptions for submittal to DOCPER, for all positions that require TESA accreditation. The contractor shall submit complete and accurate TESA documentation (e.g., applicant job description, employment contract, AE Form 715- 9C, resume, and education and training) for COR approval and submission to DOCPER. TESA submissions shall be accomplished online in accordance with (IAW) USAREUR Regulation 715-9. DOCPER will then generate the DD Form 1172-2 upon review and approval of the TESA application. The contractor’s employees traveling to Europe on TDY status shall be pre-approved for work in Europe via the USAREUR DOCPER established “fax-back” process. The fax-back application is available on the DOCPER website and must be submitted at least 30 (thirty) calendar days prior to the proposed travel.

1.6.9 DOCPER Compliance: The contractor shall adhere to all relevant provisions of the applicable Department of War Contractor Personnel Office (DOCPER) or other similar related agreements. The contractor shall use the ECOPS guidance found at https://ecops.ext.eur.army.mil for procedures in DOCPER accreditation or the DOCPER guidance found at https://www.europeafrica.army.mil/Contractor/ for procedures for DOCPER accreditation. For services to be performed in Germany, the contractor shall use the guidance found at usarmy.wiesbaden.usareur.mbx.odcs-g1-docper@army.mil; for services performed in Italy, the contractor shall use the guidance found at usarmy.wiesbaden.usareur.mbx.odcs-g1- docper@army.mil.

1.6.10 Status of Forces Agreements (SOFA) Compliance. The contractor shall adhere to all relevant provisions of the applicable SOFA.

SOFA Compliance for Work Performed in Korea. The contractor shall adhere to all relevant provisions of the applicable Status of Forces Agreements (SOFA) to include.

U.S.-Korea bilateral agreements govern the status of contractors and employees, criminal jurisdiction, and taxation.

USFK and component policy, as well as U.S.-Korea bilateral agreements, govern logistics support and base privileges of contractor employees.

The Commander, USFK, is primarily responsible for interpreting the SOFA and local laws applicable to US Forces in Korea and for requirements in support of USFK; and the contractor shall adhere to and comply with available

Draf t http://www.europeafrica.army.mil/Contractor/ mailto:usarmy.wiesbaden.usareur.mbx.odcs-g1-docper@army.mil mailto:docper@army.mil logistics support and the U.S.-Korea SOFA agreements. Review of the SOFA information can be found at the USFK website at http://www.usfk.mil/ under “About”, or at http://www.usfk.mil/About/SOFA/.Contact information for the Commander is also available at http://www.usfk.mil/Leadership/; and additional applicable directives and regulations are available at http://www.usfk.mil/, click on the drop down menu named “About”.

1.6.12 International Compliance Requirements: The contractor shall comply and ensure that its personnel authorized to accompany US Armed Forces deployed outside the United States are familiar with and comply with all applicable United States, host country, and third country national laws; provisions of the law of war, as well as any other applicable treaties and international agreements; United States regulations, directives, instructions, policies, and procedures; and orders, directives, and instructions issued by the Combatant Commander, including those relating to force protection, security, health, safety, or relations and interaction with local nationals.

1.6.13 For Contractors Authorized to Accompany the Force: DFARS 252.225-7040, contractor Personnel Authorized to Accompany US Armed Forces Deployed outside the United States discusses the following AT/OPSEC related topics: required compliance with laws and regulations, pre-deployment requirements, required training (per combatant command guidance), and required personnel data.

1.6.14 Contractor Law Compliance Program: The contractor shall institute and implement a program to prevent violations of the law of war by its employees and subcontractors and provide the KO and COR with a quarterly compliance.

1.6.15 Deployment Checklist: The contractor shall use the DFARS PGI deployment checklist when traveling overseas which can be found at: https://www.acq.osd.mil/dpap/dars/dfars/html/current/225_3.htm

1.6.17 Contingency Deployment of Contractor Personnel into Hostile Areas: This is a “Wartime Critical Contract” and the contractor shall follow applicable provisions as outlined in: DODI 1100.22, Policy and Procedures for Determining Workforce Mix, AR 25-30; Consolidated Index Of Army Publications And Blank Forms; FMs 100-10 and 100-10-2. Contractor employees assigned to the Republic of Korea shall comply with the provisions of USFK Regulation 700-19, “The Invited Contractor and Technical Representative Program” applies to this contract.

The continuation of DOD Contractor services during crisis situations is essential to the successful completion of INSCOM’s contingency mission(s). The Contractor shall be required to provide technical support services during military training exercises, deployments, contingency operations, hostilities, war, or other unusual situation at designated locations worldwide. In the event hostilities do occur and the Contractor personnel are present, the Contractor may be entitled to additional compensation. In these cases, a hostile area differential as outlined in US Code 37 will be implemented. In accordance with DA PAM 715-16, Contractor Deployment Guide, all deployed Contractor personnel shall be identified as Emergency Essential/Mission Essential Personnel.

1.6.18 Other Direct Costs ODC Contractor ODCs shall be approved by the COR in writing. ODCs will consist of Korea expenses Department of Defense Dependents Schools (DoDDS), Cost of Living Adjustments (COLA), and Oversees Housing Allowance (HOLA), travel and limited materials (to support as needed mission functions). The contractor shall provide estimated cost, including specifications, and other pertinent information to facilitate COR review and approval.

1.6.19 Organizational Conflict of Interest (OCI): Though contractor duties under this requirement should not have access to data that may cause an organizational conflict of interest, it is included as a precaution. Contractor and sub-contractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent OCI as defined in FAR Subpart 9.5. The contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the contractor from participating in subsequent contracted requirements which may be affected by the OCI.

http://www.usfk.mil/ http://www.usfk.mil/About/SOFA/.Contact http://www.usfk.mil/Leadership/%3B http://www.usfk.mil/ http://www.acq.osd.mil/dpap/dars/dfars/html/current/225_3.htm

1.6.20 Security Requirements.

1.6.20.1 Security Clearance. Contractor personnel shall have and maintain a TOP SECRET clearance with eligibility for Sensitive Compartmented Information (SCI) clearance with Special Background Investigation (SBI) and be able to attain SI, TK, G, and HCS access. Personnel will sign a Non-Disclosure Statement. A current Counterintelligence Scope Polygraph may be required. Personnel must perform within the security limitations of AR 381-10, USSID SE 1000, and other appropriate security regulations according to their intelligence disciplines. This contract effort requires access to classified Government information at US Government facilities only. Additional requirements are contained in the DD Form 254 Contract Security Classification Specifications. The Government reserves the right to direct any contractor employee to be removed for performance, directly or indirectly, whenever there is probable cause to believe, on the basis of all facts available, that such action is warranted in the interest of national security.

This action shall be made whether or not the cause is deemed of sufficient severity to warrant action to terminate the contractor’s or individual’s security clearance. The Government also reserves the right to remove any contractor for the purpose of conducting any investigation of alleged misconduct that may, in the opinion of the KO, jeopardize the security of the project. Loss or suspension of required facility security clearance as set forth on the DD Form 254 “Contract Security Classification Specifications,” would result in the contractor’s inability to perform in accordance with the terms and conditions of this contract.

1.6.20.2 Physical Security. The contractor shall be responsible for safeguarding all Government equipment, information and property provided for contractor use. The contractor employees and vehicles are subject to checks before entering or exiting INSCOM. All contractor personnel shall conform to all INSCOM, Department of Army, Department of Defense, and US Government Policies and Procedures relating to workplace security and safety at all times. The contactor shall report security and safety violations immediately to the COR/Contract Manager. Lost Government-issued security badges must be reported immediately to COR/Contract Manager and HQ INSCOM Security Office. The contractor shall be responsible for securing all Government owned hardware, software and the facilities that contractor personnel will be using. At the close of each work period, Government facilities, equipment, and materials shall be secured. The following personal electronic devices (PED) items are prohibited inside classified INSCOM workspaces at all times: cell phones/ Blackberries, portable USB drives, other portable USB devices, external hard drives, cameras, MP3 players, scanning devices, digital flash cards/disks, personal laptop computers, camera/USB watches and wireless transmitters.

1.6.20.3 Additional Security Requirements: This effort requires access to classified Government information at US Government facilities. Physical, personnel, information and operational security measures are part of the security specifications as outlined in the DD Form 254 and contractor shall comply in accordance with DIAM50-5 and other Government security regulations, manuals and directives.

The Government reserves the right to direct any contractor employee to be removed for substandard performance, directly or indirectly, whenever there is probable cause to believe that such action is warranted in the interest of national security.

1.6.20.4 Electronics Security. The following personal items are prohibited inside classified INSCOM workspaces at all times: any type of cell phone, Blackberry or communication device, portable USB memory drives, external hard drives, cameras or other visual or sound recording devices, MP3 players, scanning/coping devices, digital flash cards/disks, thumb drives, personal laptop computers, USB camera watches, wireless transmitters and Bluetooth enabled hearing devices (without written approval). Prior to reporting to assigned locations, contractor personnel with Bluetooth enabled hearing devices are required to obtain a medical statement from their doctor stating the need for the device. A Medical Device Authorization (MDA) Memorandum will be issued if the device is approved by the Special Security Office (SSO) to wear such device in a restricted area IAW the Intelligence Community Technical Specification (ICD 705) dated 28 September 2017.

1.6.20.5 Release of Materials to General Public. The contractor shall not release sensitive information to the general public without prior coordination with the COR and written approval from the KO. All contractor requests to release sensitive information shall be in writing and clearly explain the necessity for release of the information and consequences if approval is not granted. All material produced by the contractor which will be released to the general public will be presented to the COR and subject to OPSEC and Security reviews from INSCOM OPSEC Officer, Security Officer, and INSCOM Public Affairs Office prior to release.

1.6.20.6 Records Management. The contractor shall follow the processes outlined in the “DoD Records Management Program”, DoDI 5015.02 incorporating the most current change(s) and supporting references when managing records (paper or electronic) created or maintained during the period of performance for the contract.

These same requirements will flow down to all subcontractors working on the contract.

1.6.20.7 Handling or Access to Classified Information. Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “CONFIDENTIAL,” “SECRET,” or “TOP SECRET” and requires contractors to comply with (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual 32 Code of Federal Regulation Part 117, NISPOM; any revisions to 32 Code of Federal Regulation Part 117, NISPOM, notice of which has been furnished to the contractor.

1.6.20.8 Classification Review for Public Release: INSCOM Antiterrorism Operations Security Coversheet Desk Reference lists the info below: It is DoD policy that any official DoD information intended for public release that pertains to military matters, national security issues, or subjects of significant concern to the Department of Defense shall be reviewed for clearance prior to release. References cited should be DoD 5230.09 (Clearance of DoD Information for Public Release, 25 Jan 19), AR 360-1 (Army Public Affairs Program, 25 May 11), and DoDI

5230.29 (Security and Policy Review of DoD Information to the Public, with Change 1, 14 Apr 17).

1.6.20.9 Security Awareness Training (initial, refresher, and annual): Contract must specify information security training requirements identified in AR 380-5 to satisfy the 32 Code of Federal Regulation Part 117, NISPOM training provision for contractors on an installation. Other DA functional and/or security discipline offices may use this training provision for operational efficiency; however, the specific requirements must be identified in DD Form 254 and the security section of the contract document. Any training requirements that the installation or tenant facilities require of the contractors must be added to DD Form 254 and the security section of the contract document. Examples of training requirements include, but are not limited to, are information assurance and antiterrorism and force protection training.

Contracted personnel will receive initial, refresher, and annual information security awareness and other security awareness support to contractors on the installation and embedded or integrated in the DA activities. The DA activity, working in concert with the Industrial Security Specialist (ISS) will incorporate language into the contract and the DD Form 254, that requires contractor personnel to attend and/or receive information security training per DODM 5200.01–M and AR 380-5, as well as any additional DA training requirements such as AR 530-1, AR 25-2, and AR 525-13.

1.6.20.10 Security Clauses / Language to Address the Protection of Classified Information: Contractor personnel performing work under this contract must have a Top Secret with Sensitive Compartmented Information (TS/SCI) security clearance in accordance with DOD 5200.2-R at time of the proposal submission and must maintain the level of security required for the life of the contract. Future work related to this contract may require a TS/SCI with Counterintelligence Polygraph (TS/SCI w/CI Poly) clearance. The security requirements are in accordance with the attached DD254. Personnel must perform within the security limitations of AR 381-10, USSID 18, and other security regulations.

1.6.20.11 For Cybersecurity (IT) Certification. Per DoDM 8140.03, DFARS 252.239- 7001 and AR25-2, the contractor employees supporting CS/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoDM 8140.03 must be completed upon contract award. Along with the baseline certification, the contractor must have a computing environment (CE) certification or a certificate of training prior to the first day of work and prior to having privileged access to government systems.

1.6.20.12 Information Assurance/Information Technology (IT) Training. All contractor employees and associated sub-contractor employees must complete the DoD Cyber Awareness Challenge training and exam before issuance of network access and annually thereafter. All contractor employees working CS/IT functions must comply with DOD and Army training requirements in DoD Directive DoDM 8140.03 Change 1, 31 July 2017, DoDM 8140.03, 10 Nov 15 and AR 25-2 upon initial employment.

1.6.20.13 Intelligence Oversight Training. All contractor employees, including subcontractor employees requiring access to military installations, facilities, and controlled access areas shall complete Intelligence Oversight training.

Initial training shall be completed within 30 (thirty) calendar days of award and within 30 (thirty) calendar days of new employee's commencing performance then annually by the anniversary date thereafter. Certificates of completion for each affected contractor employee and subcontractor employee shall be made available to the contracting officer representative on request. The contractor shall report all Questionable Intelligence Activities (QIA) and Significant and Highly Sensitive Matters (S/HSM) to their appropriate Intelligence Oversight Officer (IOO). Reporting procedures will be provided by the Intelligence Oversight and Compliance Office (IOCO) after contract award. The contractor shall adhere to the command's Intelligence Oversight policy.

1.6.20.14 Account Validation System (AVS) Registration for Contractor Employees Who Require Access to Government Information Systems. All contractor employees with access to a government info system must be registered in the AVS (Account Validation System) at commencement of services and must successfully complete the DOD Information Assurance Awareness prior to access to the IS and then annually thereafter.

1.6.20.15 Information Assurance / Information Technology Training: All contractor employees and associated sub-contractor employees must complete the DoD Cyber Awareness Challenge training and exam before issuance of network access and annually thereafter (CDRL A003). All contractor employees which require an appointed ATCTS position performing CS/IT functions must comply with DOD and Army training and certification requirements in DoD Directive DoDM 8140.03 DoD Manual 8140.03 and AR 25-2 prior to first day of work and prior to having privileged access to government systems. All contractor employees working CS/IT functions must comply with DOD and Army training requirements in DoD Directive DoDM 8140.03 , DoD Manual DoDM 8140.03 , DoD Manual 8140.03, and AR 25-2 upon initial employment.

1.6.20.16 Personnel Security Standard. In accordance with AR 25-2 Section V, all personnel performing work on this contract shall possess the required favorable security investigation, security clearance, or formal access approvals, and fulfill any need-to-know requirements at the IT-I level.

1.6.21 Key/Key Card Control

1.6.21.1 Key Control Procedures. The contractor shall establish and implement procedures to ensure all keys/key cards issued to the contractor by the Government are not lost or misplaced and are not used by unauthorized personnel. All references to keys include key cards. No keys issued to the contractor by the Government shall be duplicated. The contractor’s procedures covering key control shall be included in the Quality Control Plan (QCP).

Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas.

The contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the COR and KO. The contractor shall prohibit the use of Government issued keys/key cards by any person other than the contractor’s employees. The contractor shall prohibit the opening of locked areas by contractor employees to permit entrance of people other than contractor employees engaged in the performance of assigned work in those areas or personnel authorized entrance by the Government.

In the event keys, other than master keys, are lost or duplicated, the contractor shall, upon direction of the KO, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re- keying or the replacement of the lock or locks shall be the responsibility of the contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost shall be the responsibility of the contractor.

The contractor shall prohibit the use of Government issued keys/key cards by any person other than the contractor’s employees. The contractor shall prohibit the opening of locked areas by contractor employees to permit entrance of people other than contractor employees engaged in the performance of assigned work in those areas or personnel authorized entrance by the Government.

1.6.21.2 Lock Combinations: The contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations.

These procedures shall be included in the contractor’s QCP.

1.6.22 Personnel

1.6.22.1 Qualified Personnel: The contractor shall provide qualified personnel to perform all PWS performance requirements. Contractor personnel supporting this effort shall have minimum certifications in accordance with DoD Directive 8410.01, Cyberspace Workforce Management, Change 1, dated 31 July 2017, Army Regulation 25-2, Army Cybersecurity, dated 4 April 2019, Department of the Army Pamphlet 25-2-6, Cybersecurity Training and Certification Program, dated 8 April 2019 (or the most current version of each of the listed documents), personnel performing work on this contract shall possess appropriate cybersecurity certifications at the time of performance.

All qualified personnel shall be able to read, write, speak, and understand English. The contractor shall be responsible to the Government for acts and omissions of their own employees and for any sub-contractor(s) and their employees.

1.6.22.2 Personnel Performance: In the event the contractor’s personnel performance is unsatisfactory to the Government, the KO reserves the right to request and receive satisfactory replacement. Contractor shall provide comprehensive Staffing Plan (CDRL A004) of all personnel performing on this contract (direct and indirect) upon award and the list shall be updated as personnel change. The COR shall provide the format after contract award.

1.6.22.3 Service Contract Reporting (SCR): The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract via a secure data collection site. The contractor is required to completely fill in all required data fields using the following web address https://www.sam.gov. Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year, beginning with 2019. Contractors may direct technical questions to the help desk at https://www.sam.gov.

1.6.22.4 Identification of contractor Employees. All contractor personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as a contractor to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed.

Contractor personnel will be provided and required to wear badges in the performance of the requirements of this contract.

1.6.22.5 Key Personnel. The contractor shall propose key personnel. The contractor shall propose, at a minimum, personnel to fill identified key positions that meet the position descriptions and qualifications for each key position identified in Table 2 - Key Personnel Requirements. There may be multiple positions arrayed across contractual performance locations. Persons proposed to fill key positions shall be identified as “key personnel” and the contractor shall provide the names, resumes, and proposed position 15 (fifteen) days after contract award. The Contractor shall provide a comprehensive list of key personnel performing on this contract. The list shall be updated as personnel change. The list shall be provided to the COR.

The contractor’s Program Manager shall have full authority to act for the contractor on all matters relating to operation of the contract. The contractor’s Program Manager or designated alternate shall be available whenever performance is occurring on the contract. The contractor shall ensure there is a designated assistant program manager or lead at each location not occupied by the Program Manager. The Program Manager identified shall be allocated to this contract 100% of the time and not dual hatted.

The Government considers the following to be key personnel: Program Manager; Change Management Lead; Lead Infrastructure Installation Specialist; PC Installation Lead; Logistics Analyst/Asset Manager; Lead Deployable Satellite and Expeditionary Communications Planner and Architect; INOSC Manager.

The contractor may identify other personnel as key personnel. For any key personnel designated by the contractor, a position, description of responsibilities, qualifications, and education equivalency shall be included in the proposal as per Table 2.

Table 2. Key Personnel Requirements http://www.sam.gov/ http://www.sam.gov/

Program Manager:

Responsible for large projects or a significant segment of a large complex project. Translates customer requirements into formal agreements and plans that culminate in customer acceptance of results while meeting business objectives. Works with customers to identify business requirements and develops the proposed solution.

Subsequently leads a team in initiating, planning, controlling, executing, and closing tasks of a project or segment of a project to produce the delivered solution. Executes a wide range of process activities beginning with the initial technical response to an order through development, test and final delivery. Formulates partnerships between customers, suppliers, and staff. Anticipates potential project related problems. Use refined techniques for identifying, eliminating, or mitigating solutions, project, and business risks. Understands customer, industry, and business trends. Applies this understanding to meet project objectives. As appropriate, challenges the validity of given procedures and processes to enhance or improve them. Analyzes information and situations and implements actions, independently or through the management team, to ensure project objectives are met.

Analyzes new and complex project related problems and creates innovative solutions involving finance, scheduling, technology, methodology, tools, and solution components.

Certification: Preferred - PMP or DAWIA Level III Program Management or the acceptable education listed below.

Acceptable:

Bachelor’s degree in comparable fields of study with 4 years’ experience in a related field; or Master’s degree in comparable fields of study with 2 years’ experience in a related field Change Management Lead:

The change manager is responsible for the quality and integrity of the change management process. Typical change manager activities include handling requests and monitoring support staff activity involved in implementing the change request. Assessing the impact of a proposed change. Initiates, Change Evaluation Board (CEB). Recommend Acceptance/Approval of proposed change requests. Use the management process to determine if there are other change requests scheduled to work during the same scheduled time and manage and resolve potentially harmful conflicting changes to the IT infrastructure. Makes sure Changes are being completed within the defined Service Targets and reviews the Changes that miss service targets. Uses the change management tool/application to view all the Change Requests and manages CEB decisions. Monitors and review all outstanding changes. Closes Request for Changes when the request has been fulfilled.

Responsible of the development of the change management status report. Ensure that all changes to the baselines go through appropriate change boards. Tracks all problems and changes in product documents/software, reports changes and controls standard operating procedures. Uses or recommends automated CM tools to implement CM policies and procedures.

Certification: Preferred - ITIL Foundation certification (version 4 or later) or the acceptable education listed below.

Acceptable:

Bachelor’s degree in comparable fields of study with 4 years’ experience in a related field; or Master’s degree in comparable fields of study with 2 years’ experience in a related field.

Lead Infrastructure Installation Specialist:

Conducts network infrastructure site surveys, planning, and design. Make recommendations on hardware, cabling, and equipment requirements. Provides installation management to include creating list of materials, bills of materials, estimating installation project timelines, determining installation team requirements, successfully executing installation projects, and documenting project status. Plans, builds, and installs cable patch panels and cable infrastructures. Installs and terminates all types of standard IT cable and fiber. Provides equipment rack installation, cable pathways such as cable trays and conduit and equipment installations within a variety of locations that includes, but is not limited to, data centers, equipment rooms, communications closets, operations centers, and user workspaces.

Certification: Preferred BICSI Technician Certification or DoD Basic Installers Course or the acceptable education listed below.

Acceptable:

Associate’s degree in comparable fields of study with 6 years’ experience in a related field; or

Bachelor’s degree in comparable fields of study with 4 years’ experience in a related field; or Master’s degree in comparable fields of study with 2 years’ experience in a related field Experience may be used in lieu of education. Resume must reflect 10 years or more of Infrastructure Installation experience.

INOSC Manager:

Responsible for all aspects of INSOC requirements and manages the hands-on, day-to-day issues related to operational activities. Responsible for operations including INOSC personnel accountability and availability.

Meeting all technical requirements within the scope of the INOSC duties. Ensuring that processes (TTPs and SOPs) facilitate meeting performance requirements. Coordinating process related training for all INOSC personnel.

Providing INSOC weekly and monthly reporting to the leadership team. Providing a fully manned, 24/7 INSOC schedule and onsite support. Acts as a “First-Level Supervisor” for site-employees. Works with the INSOC Government Lead to analyze information and situations, and implement actions, as approved by the leadership team, to ensure objectives are met. Is the Point-of-Contact for issues in INSOC activities and/or personnel. INOSC Manager is authorized to act on site-specific matters relating to the daily operation of the task order (CDRL A005).

Acceptable:

Associate’s degree in comparable fields of study with 6 years’ experience in a related field; or Bachelor’s degree in comparable fields of study with 4 years’ experience in a related field; or Master’s degree in comparable fields of study with 2 years’ experience in a related field

Logistics Analyst / Asset Manager:

Performs system fault analysis, life cycle maintenance and integrated product support (IPS) of major systems.

Controls the efficient flow of goods, services and information between points of origin through customer placement in order to meet customer requirements. Ensures the execution and continuous improvement of standard logistic processes. Logistics functions encompass maintenance, supply, transportation and logistics plans. Inherently included as logistics tasks are program formulation, policy planning, coordination, inspection, integrated logistics processes, joint planning logistics, acquisition and wholesale logistics, product support, asset visibility, material management and supervision.

Acceptable:

Bachelor’s degree in comparable fields of study with 4 years in a related field.; or Experience may be used in lieu of education.