DEOMI Internet Upgrade-Fiber-PWS-FINAL.pdf

1 Ver: Feb 2024

Performance Work Statement (PWS)

1.0 INTRODUCTION Upgrade of the existing 1GB coaxial cable internet connection to a 5Gbps fiber optic cable connection to enhance the internet speed and reliability for DEOMI, ensuring seamless and high-speed connectivity to support current and future digital operations.

The contractor will be responsible for all aspects of the upgrade, including planning, installation, testing, and validation of the new fiber optic infrastructure.

2.0 BACKGROUND The Defense Equal Opportunity Management Institute (DEOMI) has been a customer of Spectrum for over five years, relying on their robust internet services to support various operational and administrative functions. As DEOMI continues to advance its mission of promoting equal opportunity and diversity within the Department of Defense, the need for a more powerful and reliable internet connection has become increasingly critical.

In response to the growing demands of DEOMI’s expanding IT infrastructure, it has proposed an upgrade from the current 1GB internet connection to a 5Gbpsconnection is needed. This upgrade is essential to accommodate the institute’s enhanced digital capabilities, including high-volume data transfers, advanced research activities, and the integration of cutting-edge technologies.

The transition to a 5Gbps connection will not only ensure that DEOMI can meet its current operational requirements but also position the institute to effectively leverage future technological advancements. By enhancing its internet bandwidth, DEOMI will be better equipped to support its diverse range of programs and initiatives, thereby reinforcing its commitment to excellence and innovation in the field of equal opportunity management.

3.0 SCOPE The contractor will upgrade DEOMI’s existing 1GB coaxial cable internet connection to a 5Gbps fiber optic cable connection to enhance internet speed and reliability. This upgrade includes the installation of fiber optic cable to replace the existing coaxial cable, ensuring support for 5Gbpsinternet speeds. The contractor will configure the network to optimize the performance of the new fiber optic connection and conduct thorough testing to ensure the new connection meets specified speed and reliability standards. Comprehensive documentation of the new setup and training for relevant personnel on the operation and maintenance of the new system will be provided. The contractor must achieve a minimum internet speed of 5Gbpsdownload and upload, verified through speed tests conducted at multiple points within the network, and ensure a network uptime of 99.9%, with minimal latency and packet loss. The installation and configuration must be completed within 60 days from the contract start date. All performance tests must be successfully passed, with documented results provided to DEOMI.

Training sessions and detailed documentation must be delivered within 10 days post-installation.

Additionally, the contractor must ensure maximum uptime of the existing ISP connection throughout the upgrade process.

4.0 REQUIREMENTS The contractor shall achieve the following results:

4.1 Installation of Fiber Optic Cable: Replace the existing coaxial cable with fiber optic cable capable of supporting 5Gbps internet speeds.

2 Ver: Feb 2024

4.2.1 Network Configuration: Configure the network to optimize the performance of the new fiber optic connection.

4.3 Testing and Validation: Successfully pass all performance tests, with documented results provided to DEOMI. Conduct thorough testing to ensure the new connection meets the specified speed and reliability standards and provide the results to government representatives.

4.4 Documentation and Training: Provide comprehensive documentation of the new setup and training for relevant personnel on the operation and maintenance of the new system.

4.5 Internet Speed: Achieve a minimum internet speed of 5Gbps download and upload, verified through speed tests conducted at multiple points within the network.

4.6 Reliability: Ensure a network uptime of 99.9%, with minimal latency and packet loss.

4.7 Installation Timeline: Complete the installation and configuration within 60 days from the contract start date.

4.8 Ensure maximum uptime of the existing ISP connection throughout the upgrade process.

4.9 Participate in a Post-Award Conference. This meeting shall provide an introduction between the Contractor personnel and Government personnel who will be involved with the contract. The meeting shall provide the opportunity to discuss technical, management and security issues. The Post Award Conference will aid both the Government and Contractor in achieving a clear and mutual understanding of all requirements and identify and resolve any potential issues. The Contractor shall be prepared to discuss any items requiring clarification and gather information as necessary to support each deliverable.

5.0 DELIVERABLES The Contractor shall provide deliverable(s) in a format mutually agreed upon by the Government and the Contractor. All deliverables will be reviewed for timeliness, accuracy and format. If a deliverable due date falls on a weekend or holiday, the Contractor shall submit the deliverable on the last workday prior to the due date. In fulfillment of this effort, the Contractor shall provide the following deliverables to the COR.

5.1

5.2 The documented performance test results will be delivered to DEOMI’s Government representatives within 10 days. This process ensures that all stakeholders are informed of the connection’s performance and compliance with the required standards as stated in paragraph 3.0 in this PWS.

Deliverable PWS Ref. Delivery Date

The documented performance test 5.2 Within 10 days

3 Ver: Feb 2024

6.0 CONTRACTOR TRAVEL

6.1 Travel is not anticipated for this requirement. Should travel become necessary, a proposal will be requested, and the contract modified to reflect travel.

7.0 RECORDS MANAGEMENT

7.1 Contractor shall comply with all applicable records management laws and regulations, as well as National Archives and Records Administration (NARA) records policies, including but not limited to the Federal Records Act (44 U.S.C. chs. 21, 29, 31, 33), NARA regulations at 36 CFR Chapter XII Subchapter B, and those policies associated with the safeguarding of records covered by the Privacy Act of 1974 (5 U.S.C. 552a). These policies include the preservation of all records, regardless of form or characteristics, mode of transmission, or state of completion.

7.2 In accordance with 36 CFR 1222.32, all data created for Government use and delivered to, or falling under the legal control of, the Government are Federal records subject to the provisions of 44 U.S.C. chapters 21, 29, 31, and 33, the Freedom of Information Act (FOIA) (5 U.S.C. 552), as amended, and the Privacy Act of 1974 (5 U.S.C. 552a), as amended and must be managed and scheduled for disposition only as permitted by statute or regulation.

7.3 In accordance with 36 CFR 1222.32, Contractor shall maintain all records created for Government use or created in the course of performing the contract and/or delivered to, or under the legal control of the Government and must be managed in accordance with Federal law.

Electronic records and associated metadata must be accompanied by sufficient technical documentation to permit understanding and use of the records and data.

7.4 Defense Human Resources Activity and its contractors are responsible for preventing the alienation or unauthorized destruction of records, including all forms of mutilation. Records may not be removed from the legal custody of Defense Human Resources Activity or destroyed except for in accordance with the provisions of the agency records schedules and with the written concurrence of the Contracting Officer’s Representative (COR). Willful and unlawful destruction, damage or alienation of Federal records is subject to the fines and penalties imposed by 18 U.S.C. 2701. In the event of any unlawful or accidental removal, defacing, alteration, or destruction of records, Contractor must report to the COR and the Defense Human Resources Activity Component Records Management Officer at dodhra.mc-alex.dhra-hq.mbx.records@mail.mil so DHRA may report promptly to NARA in accordance with 36 CFR 1230.

7.5 The Contractor shall immediately notify the COR upon discovery of any inadvertent or unauthorized disclosures of information, data, documentary materials, records or equipment.

Disclosure of non-public information is limited to authorized personnel with a need-to-know in accordance with all applicable privacy, security, and information protection policies. The Contractor shall ensure that the appropriate personnel, administrative, technical, and physical safeguards are established to ensure the security and confidentiality of this information, data, documentary material, records and/or equipment is properly protected. The Contractor shall not mailto:dodhra.mc-alex.dhra-hq.mbx.records@mail.mil mailto:dodhra.mc-alex.dhra-hq.mbx.records@mail.mil

4 Ver: Feb 2024 remove material from Government facilities or systems, or facilities or systems operated or maintained on the Government’s behalf, without the express written permission of the COR.

When information, data, documentary material, records and/or equipment is no longer required, it shall be returned to DHRA control, or the Contractor must hold it until otherwise directed.

Items returned to the Government shall be hand carried, mailed, emailed, or securely electronically transmitted to the COR. Destruction of records is EXPRESSLY PROHIBITED unless in accordance with Paragraph (7.4).

7.6 The Contractor is required to obtain the Contracting Officer's approval prior to engaging in any contractual relationship (sub-contractor) in support of this contract requiring the disclosure of information, documentary material and/or records generated under, or relating to, contracts.

The Contractor (and any sub-contractor) is required to abide by Government and Defense Human Resources Activity guidance for protecting sensitive, proprietary information, classified, and controlled unclassified information.

7.7 The Contractor shall only use Government IT equipment for purposes specifically tied to or authorized by the contract and in accordance with Defense Human Resources Activity policy.

7.8 The Contractor shall not create or maintain any records containing any non-public Defense Human Resources Activity information that are not specifically tied to or authorized by the contract.

7.9 The Contractor shall not retain, use, sell, or disseminate copies of any deliverable that contains information covered by the Privacy Act of 1974 or that which is generally protected from public disclosure by an exemption to the Freedom of Information Act.

7.10 The Defense Human Resources Activity owns the rights to all data and records produced as part of this contract. The contractor shall not include any contractor markings on deliverables created under the contract. All deliverables under the contract are the property of the U.S.

Government for which Defense Human Resources Activity shall have unlimited rights to use, dispose of, or disclose such data contained therein as it determines to be in the public interest.

The contractor shall not use or disclose any data or deliverables under this contract for any purposes other than performing the contract, unless expressly approved by the Government.

8.0 SECURITY

8.1 Personnel Security. Overarching security requirements are UNCLASSIFIED. Contractor and subcontractor personnel require unclassified access to DoD network(s), Information Technology (IT) systems, and Government Furnished Equipment (GFE). Contractor and subcontractor personnel must obtain, DoD credentials, (also known as the Common Access Card (CAC)) for physical and logical access to federally controlled facilities and DoD Information Systems (IS) containing Personally Identifiable Information (PII) or Controlled Unclassified Information (CUI).

5 Ver: Feb 2024

8.1.1 All Contractor personnel assigned to this contract are required to obtain and maintain the appropriate background investigation (BI) and adjudication or suitability determination in accordance with DODI 5200.02-DoD Personnel Security Program (PSP).

8.1.2 The contractor/subcontractor personnel on this contract will be designated performing in Non-Sensitive positions for Unclassified access in accordance with Defense Counterintelligence and Security Agency (DCSA) and the Office of Personnel Management (OPM) investigative alignment, and DoDI 5200.02, DoDM 5200.02 and 32 C.F.R. Part 156.

8.1.3 No employee may perform under this contract or have access to information or systems under this contract until they have completed a Tier 3 or higher background investigation (BI) that meets the requirement or be in the process of a Personnel Security Investigation (PSI) with a minimum of interim eligibility.

8.3 Staffing. The personnel supporting this contract who require a DHRA sponsored CAC, access to DoD network(s), DoD information systems with CUI/PII data, or DoD IT/Information Systems must be Citizens of the United States. The citizenship requirement also applies to personnel assigned or working on the contract at any remote sites.

8.4 Onboarding. Prior to requesting access to DHRA sponsored resources (e.g., DoD credential(s), Network(s), IT systems, Information Systems (IS) or facility), the contractor must provide an official request via DHRA’s onboarding system(s)/encrypted email/DoD SAFE accompanied by a complete Defense Logistics Agency Headquarters (DLAH) Form 1728 - Request for HQC Contractor Badge and/or Information Technology (IT) Access. The DHRA Security and the Defense Logistics Agency (DLA) Personnel Security (PERSEC) will validate the contractor meet the requirement.

8.5 Listing of employees & Clearance Documentation. The Contractor shall maintain a current listing of employees. Within 10 calendar days of contract award, the Contractor shall provide the COR a list of all company employees assigned to this effort. The employee list should include the following information: Contract number, employee information (full legal names), DHRA center/office, location of performance, clearance level needed (e.g., Top Secret/SCI, Top Secret, Secret or None (Position of Trust for unclassified access)), IT access level needed (e.g., privilege, authorize or other). The list shall be validated by the company and DHRA Personnel Security (PERSEC). The Contractor shall provide the COR with an updated listing when any employee’s status or information changes.

8.6 Access to Sensitive Information. To the extent that the work under this contract requires the Contractor to have access to DoD sensitive information the Contractor shall after receipt thereof, treat such information as sensitive and safeguard such information from unauthorized use and disclosure. The Contractor shall not appropriate such information for its own use or disclose such information to third parties unless specifically authorized by the Government in writing.

8.6.1 The Contractor shall allow access only to those employees who need the sensitive information to perform services under this contract and who have acknowledge that sensitive

6 Ver: Feb 2024 information shall be used solely for the purpose of performing services under this contract. The Contractor shall prevent its employees from discussing, divulging, or disclosing any such information to any person or entity except those persons within the Contractor’s organization directly performing the contract.

8.7 Information Technology (IT) Level Investigation Requirements. The contractor/subcontractor personnel supporting this contract will require Authorize & Other Low access to DEOMI IT & Information.

8.7.1 Contractor personnel, who perform work on sensitive networks, IT systems or applications, must possess and maintain the appropriate investigation and adjudication determination. The Contractor shall assure that individuals assigned to the contract undergo the respective BI and have obtained the proper eligibility, based on job function or tasks performed, before performing any work or accessing any systems or information under the contract.

8.7.2 IT-Level position category designation does not imply or convey authorization to access classified information.

8.7.3 The IT Level will determine the access level needed to perform work on the DoD IT Systems/Networks. The IT access level is designated based on the IT system/network requirements according to the DoD Cyber, Security Technical Implementation Guides (STIGs) https://public.cyber.mil/stigs/.

8.7.4 It is the responsibility of the contractor to ensure the employees meet the appropriate Tier investigation prior to requesting IT access.

8.7.5 Authorize – Moderate Risk: All personnel in positions in which the individual is responsible for the-direction, planning, design, operation, or maintenance of a computer system, and whose work is technically reviewed by a higher authority of the Privilege to ensure the integrity of the system. All personnel identified in one or more of these job functions must complete a Tier 3 (T3) or Tier 3 Reinvestigation (T3R), an equivalent or higher BI to meet the Noncritical-Sensitive role. Roles may include, but are not limited to:

• Access to and/or processing of proprietary data, information requiring protection under the Privacy Act of 1974.

• Those with the ability to aggregate and extract data en masses from an automated records repository containing PII.

• Other positions designated by the Agency head that involve a degree of access to a system that creates a significant potential for damage or personal gain less than that in Privilege positions.

8.7.6 Other – Low Risk: All other non-sensitive determined low-risk positions involved in computer activities. Positions designated by the Agency head that involve a degree of access to a system that creates minimum to low damage less than that in Authorize positions. Other, designations require at least a favorable Tier 1 (T1), or higher BI.

https://public.cyber.mil/stigs/

7 Ver: Feb 2024

8.8 Personal Identifiable Information (PII) and Tier Investigations. All personnel supporting this contract must protect PII data according to the Privacy Act of 1974. Personnel requiring access to Information Technology (IT) or access to DoD Information Systems that contain military active duty, guard, or reservists’ PII or information pertaining to Service members that are otherwise protected from disclosure where such access has the potential to cause serious damage to national security, must be vetted accordingly and protect the data. BI levels required for each job function or necessary access, include, but are not limited to, the following:

8.8.1 Tier 5/Tier 5R for Special-Sensitive/Critical-Sensitive – High Risk: All personnel with administrative capabilities in a system storing PII, personnel security investigations or adjudication determinations require a Tier-5 (T5) BI.

8.8.2 Tier 3/Tier 3R for Noncritical-Sensitive – Moderate Risk: All personnel with the ability to aggregate or extract military PII en masses from an automated records repository requires at a minimum, a favorably adjudicated Tier-3 (T3) BI or equivalent.

8.8.3 Tier 1 for Non-Sensitive – Low Risk: All Personnel whose access to military PII is limited to data entry or singular search capability require, a minimum, a favorably adjudicated Tier-1

(T1) BI.

8.8.4 The Contractor shall report immediately to the DHRA Privacy Office and secondly to the COR discovery of any Privacy breach.

8.9 Controlled Unclassified Information Requirements for DoD Contractors. The following procedures will be used to protect Controlled Unclassified Information (CUI) documents and materials:

8.9.1 HANDLING: Access to CUI material shall be limited to those employees needing the material to perform their duties. The CUI marking is assigned to documents and material created by a DoD User Agency. CUI is not a classification but requires extra precautions to ensure it is properly safeguarded and disseminated and is not released to the public without government authorization.

8.9.2 MARKING: The Contractor shall mark unclassified documents containing CUI as follows: “CUI" at the top and bottom of each page, include the CUI warning box, and the CUI Designation Indicator Block as required in DoDI 5200.48.

8.9.2.1 Mark other records such as computer print outs, photographs, films, tapes, or slides in accordance with DoDI 5200.48 so the receiver or viewer knows that it contains CUI material.

8.9.2.2 Mark a message containing material in accordance with DoDI 5200.48. Unclassified messages containing CUI material must show the abbreviation (CUI) before the text begins.

8.9.2.3 Ensure documents transmitting CUI material call attention to any attachments containing CUI.

8 Ver: Feb 2024

8.9.2.4 CUI material released to a contractor by a DoD user agency must have the following statement on the front page or cover:

THIS DOCUMENT CONTAINS CUI MATERIAL AND MUST BE REVIEWED BY A

GOVERNMENT REPRESENTATIVE UNDER THE REQUIREMENTS OF DODI

5200.48, DODI 5230.09, and DODI 5230.29.

8.9.3 STORAGE: The Contractor shall, place CUI material in an out-of-sight location during normal work hours, if the work area is accessible to persons who do not have an authorized government purpose for access to the material. After normal duty hours, the Contractor shall store CUI material to prevent unauthorized access by filing it with other unclassified records in unlocked files or desks when internal building security is provided, and the file is marked as CUI. When there is no internal security, locked buildings or rooms usually provide adequate after-hours protection. For additional protection, store CUI material in locked containers such as file cabinets, desks, or bookcases.

8.9.4 TRANSMISSION: CUI documents and materials may be transmitted via first class mail, parcel post or, for bulky shipments, -fourth class mail. Within the CONUS discussion of CUI material on the telephone is authorized if necessary for the performance of the contract and no alternative is available. Electronic transmission of CUI (voice, data, or facsimile) should be by approved secure communications systems whenever practical. If there is a fax transmission, the sender must ensure the intended receiver is available to receive it or a cover sheet will be used to allow carrying it to the final recipient to avoid unauthorized disclosure of the CUI.

8.9.5 RELEASE: CUI material shall not be released outside of the contractor’s facility except to the representative of DoD or DHRA.

8.9.6 DESTRUCTION: When the CUI material no longer meets the threshold for safeguarding and dissemination, the Contractor shall immediately decontrol it, process it through the records management process, and destroyed by the approved methods identified in DoDI 5200.48 to preclude its disclosure to unauthorized individuals by rendering it unreadable, indecipherable, and irrecoverable.

8.10 Position of Trust (POT) Requirements. DCSA and OPM offers the Tier background investigations, Tier 1 (T1) – Tier 5 (T5) for Position of Trust determination. The T5 being the most stringent investigation and T1 being the least stringent.

8.10.1 The Government is responsible for the cost of POT or sponsor a DoD-determined equivalent background check for unclassified access.

8.10.2 The Position of Trust BI process requires the DoD Government Security Office to review each request and establish the BI sponsorship. Submit a request and list of personnel for security investigation to the DHRA Security Office point of contact(s) to be provided by the COR- NLT five (5) business days after contract award.

9 Ver: Feb 2024

8.10.3 Per DCSA a T3 or T3 Reinvestigation (T3R) meets the requirement for a Noncritical- Sensitive position. A new application for a DoD T3/T3R BI for Position of Trust determination requires FBI fingerprints check, proof of US Citizenship and a Personnel Security Questionnaire (PSQ) on the Standard Form (SF) 86 using the National Background Investigation Services – electronic Application (NBIS/eApp). The Contractor employees shall provide all requested information pursuant to the Privacy Act of 1974 when requested by the Government. The Government Security Office will provide instructions according to the individual case and Tier BI to access the eApp system. For information visit NBIS at https://www.dcsa.mil/is/nbis/

8.10.4 Reciprocity. The DHRA and DLA PERSEC will use reciprocity to the extent possible and if necessary, will request re-adjudication by the DCSA Adjudication and Vetting Services (AVS) to support the DoD standards per Executive Order E.O 13488.

8.10.4.1 A BI equivalency will be according to the investigative alignments offered by the OPM and the DCSA here, https://www.dcsa.mil/Portals/91/Documents/pv/GovHRSec/Position_Designation_Investigation_ Type_Chart_Sept_2017.pdf

8.10.4.2 Reciprocity consideration includes verifying break in service longer than 24 months as a US Military, US Civilian or US Contractor from the last favorable investigation.

8.10.5 A new Position of Trust applicant under this contract must obtain at a minimum interim eligibility from DLA Security prior to the assignment and performance of their duties in support of the Government in this contract.

8.10.6 DHRA’s interim Position of Trust eligibility is sponsored by DHRA Security and approved by DLA PERSEC.

8.10.7 Eligible interim Position of Trust personnel expectations include, but are not limited to:

8.10.7.1 Comply with all personnel security requirements as specified by DHRA and DLA

PERSEC.

8.10.7.2 Attain and maintain favorable FBI fingerprint results.

8.10.7.3 Comply with all investigative and adjudicative requirements, which includes responsiveness to time-sensitive requests (e.g., interview(s), additional information or clarification) from the DLA PERSEC, DCSA investigator or the adjudicative agency.

8.10.7.4 Attain and maintain favorable eligibility to the designated BI.

8.11 Controlled/Restricted Areas. The Contractor shall comply with local procedures for entry to DoD/DHRA controlled/restricted areas where Contractor personnel will work.

8.12 Physical Security. The Contractor shall safeguard all Government property and controlled forms provided for Contractor use and adhere to the Government property https://www.dcsa.mil/Portals/91/Documents/pv/GovHRSec/Position_Designation_Investigation_Type_Chart_Sept_2017.pdf https://www.dcsa.mil/Portals/91/Documents/pv/GovHRSec/Position_Designation_Investigation_Type_Chart_Sept_2017.pdf

10 Ver: Feb 2024 requirements contained in this contract. At the end of each workday, all Government facilities, equipment and materials shall be secured.

8.13 Pass and Identification Items. The Contractor shall ensure the pass and identification items required for contract performance are obtained for employees and non-government owned vehicles.

8.14 DoD Credentials/Common Access Card (CAC). Contractor personnel must obtain a DoD credential or CAC if they are assigned to perform work under this contract requiring access to DoD network(s), CUI/PII data, IT/Information Systems, DoD Facilities or non-DoD federally controlled facilities on behalf of the DoD on a recurring basis per DODM 1000.13, DoD Identification (ID) Cards: ID Card Lifecycle.

8.14.1 Comply with HSPD-12 Personal Identity Verification (PIV) issuance requirements. Be responsible for obtaining a CAC or PIV and be in ready status prior to requesting access to DoD resources such as DoD Facilities, DoD IT/Information Systems (IS).

8.14.2 CAC Applicant supporting this contract will need to meet the following requirements:

8.14.2.1 Execute, obtain/maintain a favorable FBI National Criminal History Check (fingerprint check).

8.14.2.2 Have an open Tier 3 or equivalent BI to meet Noncritical-Sensitive role.

8.14.2.3 Be ready to provide two forms of identification (I-9 document).

8.14.2.4 Provide proof of U.S Citizenship.

8.15 Retrieving Identification Media. The Contractor shall retrieve all identification media, including vehicle passes from employees, including those who depart for any reason before the contract expires, e.g. terminated for cause, retirement, etc.

8.16 Key Control/Access Badge Control. The Contractor shall establish and implement methods of making sure all keys/badges issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. The Contractor shall not duplicate any keys issued by the Government.

8.16.1 Prohibited Use. The Contractor shall prohibit the use of keys, issued by the Government, by any persons other than the Contractor’s employees and the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in performance of contract work requirements in those areas.

8.17 Conduct while on Government Installation. The Contractor shall not assign work or direct its employees to access government information, systems, or installations unless the employees have and maintain the required background investigation, clearances, and authorizations.

11 Ver: Feb 2024

8.18 Weapons, Firearms, and Ammunition. Contractor employees are prohibited from possessing weapons, firearms, or ammunition, on themselves or within their contractor-owned vehicle or privately-owned vehicle while on all government installations.

8.19 Reporting Requirements. Contractor personnel shall report to an appropriate authority any information or circumstance of which they are aware that may pose a threat to the security of government or contractor personnel, resources, or information.

8.20 Government Furnished Equipment (GFE). The Contractor shall establish and implement procedures to ensure all GFE to include laptops and other data processing devices, issued to the Contractor by the Government are not lost or misplaced, are not used by unauthorized persons, and are not subject to unauthorized external devices. The Contractor shall immediately report to the COR any lost GFE within two (2) hours of discovery of occurrence. In the event that GFE is lost, the Contractor may be required, upon written direction of the Contracting Officer, to replace the equipment at no additional cost to the Government. The Government may replace the equipment and deduct the cost from the monthly payment due the Contractor.

8.21 Offboarding. Upon completion of the contract, an employee’s relocation or termination of an employee, or upon request from the COR in accordance with DHRA centers or offices security policies coordinate the employee’s removal from work under this contract with the

COR.

8.22.1 If at any time, any Contractor personnel supporting this contract are unable to obtain/maintain an adjudicated T3 BI, the Contractor shall immediately notify the COR and coordinate removal of such a person from work under this contract and replace the individual with appropriate level background investigation knowledge, skill and ability (KSA) required to perform services.

8.22.2 As the contractor replaces employees, the contractor shall submit the outgoing employee’s installation access and return all CACs/badge(s)/identification card(s) immediately to the COR, who will turn it into the local Installation Access Control Office or Government Security Office.

8.22.3 Submit an Off-boarding notification to the COR and the DHRA PERSEC as soon as the contractor knows an employee is leaving the contract.

8.22.4 When personnel change, provide updated personnel security list to the COR within three business days of a change.

9.0 Cybersecurity

9.1 Cyber Incident Reporting. In addition to DFARS 252.204-7012, the Contractor shall notify the DMDC Incident Response (IR) team by emailing an initial cyber incident report to dodhra.dodc-mb.dmdc.list.ir-team@mail.mil, the Contracting Officer, and the COR within one

12 Ver: Feb 2024 hour of discovering any cyber incident. The Contractor shall follow up with a supplemental report every 24 hours until the incident is closed.

9.2 Information System Security. The Contractor shall implement IS security protections that are appropriate for the confidentiality, integrity, and availability needs of the contract. The protections must include the administrative, technical, and physical safeguards necessary to protect all nonpublic Government data.

10.0 GOVERNMENT FURNISHED PROPERTY/EQUIPMENT/INFORMATION

(GFP/GFE/GFI) The contractor will not receive any government equipment. However, a government-issued laptop will be provided for interfacing with the system during remote technical support

11.0 PLACE OF PERFORMANCE All DEOMI IT/AV equipment is located at 366 Tuskegee Airmen Drive, Building 352, Patrick Space Force Base, Florida 32925. The contractor will perform all services and maintenance as outlined in this PWS at the equipment’s location.

12.0 QUALITY CONTROL

The contractor shall implement and maintain a Quality Control Plan (QCP) to ensure work performed conforms to the scope of work and meets the requirements under this PWS. The QCP shall, at a minimum provide a method for performing inspections; identifying, correcting and preventing problems/defective service; addressing customer complaints, and improving the quality of services over the life of the contract.

13.0 QUALITY ASSURANCE

13.1. The Government reserves the right to perform inspections and surveillance to evaluate the Contractor’s compliance to the contract terms and performance of the requirements in the PWS.

13.2. Contract Discrepancy Report (CDR). In the event of unsatisfactory contractor performance, the COR or CO will issue a CDR that will explain the circumstances and findings concerning the incomplete or unsatisfactory service. The contractor shall acknowledge receipt of the CDR and respond in writing as to how he/she shall correct the unacceptable performance and avoid a recurrence. The Government will review the contractor's corrective action response to determine acceptability and will use any completed CDR as part of an overall evaluation of Contractor performance when determining present or future contractual actions.

15.0 APPLICABLE DOCUMENTS

Document Web link

MIL-STD-1678/5B, DEPARTMENT OF

DEFENSE STANDARD PRACTICE:

FIBER OPTIC CABLING SYSTEMS

http://everyspec.com/MIL-STD/MIL-STD-1600-

1699/MIL-STD-16785B_54269/

13 Ver: Feb 2024

REQUIREMENTS AND

MEASUREMENTS (PART 5: DESIGN

PHASE AND LEGACY MEASUREMENTS

Unified Facilities Criteria Telecommunications Interior Infrastructure Planning and Design https://wbdg.org/FFC/DOD/UFC/ufc_3_580_01_2016_c1.

pdf

16.0 PERFORMANCE REQUIREMENT SUMMARY (PRS)

16.1 Purpose. The PRS lists performance objectives for the required services the Government will surveil. The absence of any contract requirement from the PRS shall not detract from its enforceability nor limit the rights or remedies of the Government under any other provision of the contract including the clauses entitled “Inspection of Services” or “Inspection” or “Default” in the contract.

16.2 Components. The PRS states the performance objective (required service), and threshold (performance standard, accept and reject points (if applicable)) in either a qualitative or quantitative fashion for each critical success factor.

Performance Objective

PWS paragraph

Performance Standard/Acceptable Quality Level

Successfully pass all performance tests, with documented results provided to DEOMI.

Conduct thorough testing to ensure the new connection meets the specified speed and reliability standards, and provide the results to government representatives.

4.0, 5.1 Performance is acceptable when:

a) 99% of deliverable requirements are met and received on time AND

b) critical information is accurate

Achieve a minimum internet speed of 5Gbps download and upload, verified through speed tests conducted at multiple points within the network.

4.5 Performance is acceptable when speeds are verified and documentation is provided to Government personnel.

14 Ver: Feb 2024

Ensure a network uptime of 99.9%, with minimal latency and packet loss.

4.8 Performance is acceptable when no more than 2

complaints are received per month.

Provide comprehensive documentation of the new setup and training for relevant personnel on the operation and maintenance of the new system.

4.4 Performance is deemed acceptable when training is

conducted and completed within the timeframe specified in the PWS, and key personnel demonstrate a thorough understanding of the upgraded systems.

17.0 Mandatory Training Requirements:

Contractor employees performing under this contract shall complete the following mandatory trainings within 30 calendar days of reporting for duty and annually thereafter when applicable.

1. OPSEC Awareness for Military Members, DoD Employees and Contractors IAW DoDM 5205.02, “DoD Operations Security (OPSEC) Program Manual”, dated October 29, 2020.

The training is currently available at:

https://securityawareness.usalearning.gov/opsec/index.htm

2. Unauthorized Disclosure of Classified Information and Controlled Unclassified Information IAW DoDI 5200.48, “Controlled Unclassified Information (CUI)”, dated March 6, 2020. The training is currently available at:

https://securityawareness.usalearning.gov/disclosure/index.html

3. DoD Mandatory Controlled Unclassified Information (CUI) Training, Executive Order 13556, Controlled Unclassified Information and DoDI 5200.48, “Controlled Unclassified Information (CUI)”, dated March 6, 2020. The training is currently available at:

https://securityawareness.usalearning.gov/cui/index.html

4. Insider Threat Awareness IAW DoDD 5205.16, “The DoD Insider Threat Program”, dated August 28, 2017. The Training is currently available at:

https://securityawareness.usalearning.gov/itawareness/index.htm

5. Privacy Act and Personally Identifiable Information IAW DoDI 5400.11, “DoD Privacy and Civil Liberties Programs”, dated January 29, 2019. The training is currently available at: https://securityawareness.usalearning.gov/piiv2/index.htm or https://public.cyber.mil/cyber-training/training-catalog/

6. IT Security Awareness IAW title 5, Code of Federal Regulations, section 930.301. The training is currently available at:

https://securityawareness.usalearning.gov/cybersecurity/index.htm or https://public.cyber.mil/cyber-training/training-catalog/ https://securityawareness.usalearning.gov/opsec/index.htm https://securityawareness.usalearning.gov/disclosure/index.html https://securityawareness.usalearning.gov/cui/index.html https://securityawareness.usalearning.gov/itawareness/index.htm https://securityawareness.usalearning.gov/piiv2/index.htm https://public.cyber.mil/cyber-training/training-catalog/ https://securityawareness.usalearning.gov/cybersecurity/index.htm https://public.cyber.mil/cyber-training/training-catalog/

15 Ver: Feb 2024

7. Counterintelligence Awareness and Reporting Training IAW DoD Directive 5240.06, “Counterintelligence Awareness and Reporting (CIAR)”, dated July 21, 2017. The training is currently available at:

https://securityawareness.usalearning.gov/cidod/index.html

8. Annual OSD Records and Information Management Training IAW DoD Records Management Program, DoDI 5015.02 dated February 24, 2015.

9. Antiterrorism (AT) Level 1 Training. IAW DoDI O-2000.16-V1, “DoD Antiterrorism Program Implementation” dated, November 17, 2016, Change 3, May 7, 2021. The training is currently available at: https://jkodirect.jten.mil/ (JS-US007).

The Contractor shall provide a copy of its employee(s)’ training certificates to the COR to meet the mandatory training requirements.

https://securityawareness.usalearning.gov/cidod/index.html https://jkodirect.jten.mil/