DRAFT Performance Work Statement PMA 273.docx

Performance Work Statement (PWS) for PMA-273 / CNATRA Predictive Business and Technical Decision Analysis Services for Naval Undergraduate Flight Training Systems Total Lifecycle Management

Date: 21 July 2026

1.0 INTRODUCTION AND SCOPE

1.1 Introduction

The Naval Air Systems Command (NAVAIR) PMA-273, in partnership with the Chief of Naval Air Training (CNATRA), requires Contractor support for the development, integration, sustainment, and modernization of data-driven readiness tools. These tools will enhance training, resource management, and operational decision-making across CNATRA and Navy Fleet Replacement Squadrons (FRS). This PWS defines the requirements for technical, programmatic, and security support to ensure the effective delivery and ongoing support of these tools and associated systems.

1.2 Scope

This PWS covers all activities necessary to design, develop, integrate, test, deploy, and sustain data-driven readiness tools and support infrastructure for PMA-273 and CNATRA, specifically for readiness tools including Lone Star TruNavigator® MAX platform tools; Platform Utilization and Logistics Status Enterprise (PULSE), Lifecycle Enhanced Asset Decision Software (LEADS), CNATRA Enterprise Model (CEM), Property Management module, Manning Model and modules that will integrate with these systems. The Contractor shall provide technical expertise, program management, cybersecurity, training, and documentation to ensure the effective delivery and ongoing support of these tools. The scope includes, but is not limited to, software development, data integration, cloud migration, system modernization, user support, configuration management, and compliance with all applicable DoD and Navy standards.

2.0 APPLICABLE DOCUMENTS

The following documents, in their latest versions, are applicable to this PWS and are incorporated by reference:

· Federal Acquisition Regulation (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS)

· Department of Defense (DoD) Directives and Instructions (e.g., DoDI 8500.01, DoDI 8140)

· Department of War (DoW) Cloud Computing Security Requirements Guides (SRG)

· DoD CSP SRG v1r1 – Security requirements for CSPs providing cloud services to DoD mission owners.

· DoD Mission Owner (MO) SRG – Technical requirements for the organization using the CSP’s service.

· NIST Special Publications (SP) 800-53, 800-171

3.0 GENERAL REQUIREMENTS

The Contractor shall conduct all general requirements with each of the individual Task Orders (TOs).

3.1 Data Integration and Interoperability within the War Data Platform (WDP) The Contractor shall ensure seamless integration of all relevant data sources into the WDP, enabling interoperability between CNATRA, FRS, and other Navy systems. This includes developing and maintaining data pipelines and data transformation processes to support real-time and batch data exchange. The Contractor will ensure data consistency, accuracy, and availability across all platforms.

3.2 Cloud-Based Systems

The Contractor shall design, implement, and maintain cloud-based solutions for hosting, processing, and analyzing readiness data. All cloud services must comply with Department of War (DoW) Cloud Computing Security Requirements Guides (SRG) and be hosted in authorized environments (e.g., AWS GovCloud, Azure Government). The Contractor will support cloud migration, scalability, and disaster recovery planning.

3.3 Configuration Management

The Contractor shall establish and maintain configuration management processes for all software, hardware, and documentation. This includes tracking changes, maintaining baselines, and ensuring traceability throughout the system lifecycle. The Contractor shall have documentation available for Government audit summarizing configuration items, change requests, version control activity, audit results, and recommendations.

3.3.1 Data Repository Management

The Contractor shall maintain data repositories for all systems (e.g., LEADS, CEM, WDP) to ensure data integrity and security. Routine backups will be implemented to avoid data loss.

3.3.2 Version Control

The Contractor shall adhere to strict version control protocols to prevent conflicts during software updates or system enhancements.

3.4 Program Management

The Contractor shall provide comprehensive program management support, including project planning, scheduling, risk management, resource allocation, and regular Program Status Reports (CDRL A001). The Contractor will coordinate with government stakeholders to ensure timely delivery of all requirements and deliverables. The Contractor shall attend an annual PMR at the Program Office to review all task orders and path forward.

3.5 Government Furnished Property (GFP)

The Contractor shall manage any assigned Government Furnished Property in accordance with FAR 52.245-1 and DFARS 252.245-7005. This includes tracking, safeguarding, and returning all GFP at contract completion or as directed by the Government.

3.6 Quality Assurance and Acceptance

The Contractor shall implement a robust quality assurance program to ensure all deliverables meet or exceed contract requirements. The Government will review and accept deliverables based on predefined acceptance criteria. Specific acceptable quality levels (AQLs) and performance metrics will be defined in a Quality Assurance Surveillance Plan (QASP) attached to each individual Task Order. Payment under Firm Fixed Price Task Orders is contingent upon meeting these established AQLs.

3.7 Compliance with Standards

The Contractor shall ensure all work complies with applicable federal, DoD, and Navy standards, including software development, cybersecurity, and data management best practices.

3.8 Security and Data Protection

The Contractor shall implement and maintain a comprehensive security program to ensure the integrity, confidentiality, and availability of all data, software, models, and systems managed under this contract. All security measures shall comply with DoW directives, Federal Acquisition Regulation (FAR), Defense Federal Acquisition Regulation Supplement (DFARS), and Cybersecurity Maturity Model Certification (CMMC) Level 2 (Self-Assessment).

3.8.1 Security Management

The Contractor shall maintain secure facilities and physical access controls in accordance with DoD standards. All personnel with access to CUI or classified information shall have appropriate clearances and complete DoW-mandated security training. The Contractor shall appoint a Facility Security Officer (FSO) to oversee compliance, training, and serve as liaison to the Government.

3.8.2 Risk, Vulnerability, and Incident Management

The Contractor shall establish and maintain a Risk Management Plan, conduct regular risk assessments, and address emerging threats. Continuous vulnerability management, including regular audits, scans, and prompt remediation, is required. The Contractor shall implement and maintain an Incident Response Plan (IRP) in accordance with NIST SP 800-171 and DoD requirements. The IRP must include immediate containment and mitigation of incidents, notification to the Government within 72 hours per DFARS 252.204-7012, and support for forensic analysis, root cause determination, and lessons learned.

3.9 Travel

Local and long-distance travel in performance of an individual task order. Costs associated with travel and lodging shall be reimbursed in accordance with the Joint Travel Regulation (JTR) and with NAVAIR clause 5252.232-9509 Reimbursement of Travel, Per Diem, and Special Material Costs.

3.10 Material

The Contractor shall provide material in accordance with individual task orders. The contractor shall provide all support data, and cost estimates necessary to justify a fair and reasonable price per item procured. The Contractor shall have adequate accounting and inventory systems to track all items and the acquisition status per task order and per item. Prior to material procurement, the contractor shall include a detailed list of all equipment and/or material needed for each task order. All material associated with this contract that is provided by the contractor shall become the property of the Federal Government.

4.0 PERFORMANCE REQUIREMENTS

4.1 Performance Requirements Summary

The Contractor shall conduct only the performance requirements specified in individual TOs. A summary of the performance requirement will be provided in each individual TO.

4.2 Support and Maintenance

4.2.1 Licensing

The Contractor shall procure, manage, and maintain all necessary software licenses required for the operation and support of readiness tools and systems. All licenses must be compliant with DoW and Navy policies and be available for government audit upon request. The Contractor shall provide a License Management Report (CDRL A002).

4.2.2 Seat Maintenance

The Contractor shall provide ongoing maintenance and support for all user seats, including provisioning, deprovisioning, and troubleshooting user access issues. The Contractor will ensure that all users have uninterrupted access to required systems and tools.

4.2.3 System Maintenance, Updates, Patches and Inspections

The Contractor shall perform regular system maintenance, including applying software updates, security patches, and conducting routine inspections to ensure optimal performance and security. Maintenance activities shall be scheduled to minimize operational disruptions. The Contractor shall deliver a maintenance and update schedule as a part of the Program Status Reports (CDRL A001).

4.2.4 Enhancements and Modifications

The Contractor shall implement system enhancements and modifications as directed by the Government. This includes developing new features, improving existing functionality, and adapting systems to evolving requirements.

4.2.5 User Support

The Contractor shall deliver user manuals and change documentation (CDRL A003).

The Contractor shall provide Tier 1 and Tier 2 Help Desk support. Individual Task Orders will specify the volume of users, required hours of coverage, and required ticket resolution times (e.g., 90% of critical tickets resolved within 4 hours). Support shall be available during normal business hours, with procedures in place for handling urgent issues outside of standard hours.

4.3 Development and Delivery of Future Simulations, Models, and Modules

4.3.1 Predictive Models and Simulations Development

The Contractor shall design and produce advanced predictive tools capable of analyzing, simulating, and forecasting mission readiness, resource allocation, and training optimization metrics to support CNATRA and FRS operations.

4.3.2 Scenario-Based Simulations

The Contractor shall develop situation and scenario-driven models that simulate training schedules, resource constraints, fleet readiness, and operational risks. These models shall be flexible for analyzing "what-if" scenarios critical for decision-making.

4.3.3 Business Case and Cost/ Benefit Modeling

The Contactor shall provide task, project and program level modeling of complex business case analysis with the capability to deliver outcomes and supporting rationale for probable cost and return, sensitivity, risk and other critical decision Key Performance Parameters (KPPs).

4.3.4 Total Ownership Cost Modeling

The Contactor shall model the Total Ownership Cost (TOC) of individual products/assets, systems, system of systems, tasks, projects and programs to deliver insight into the multi- organizational impact of the TOC as well as the impact on, and requirement for, different financial allocations

4.3.5 Manning Models

The Contractor shall produce customized manning models to forecast workforce and personnel requirements. The Contractor shall optimize operational or maintenance personnel deployment across CNATRA and FRS operations.

4.3.6 Performance and Gaming Simulations

The Contractor shall develop interactive and performance-oriented gaming simulations aimed at improving operational readiness, testing new strategies, and supporting decision-making under practical constraints.

4.3.7 Interoperability and Modernization

The Contractor shall ensure all new tools are fully interoperable with existing systems (e.g. CEM, Manning Model, LEADS, PULSE, and others). The Contractor shall utilize advanced technologies such as Artificial Intelligence (AI) and Machine Learning (ML) for enhanced automation, analytical capabilities, and scalability. The Contractor shall design all systems with cloud-based compatibility and emphasize modularity for future growth and upgrades.

4.3.8 Development of Data Modules

The Contractor shall produce data modules to support new PMA-273, CNATRA, and FRS requirements. Data modules refer to, but are not limited to, technical manuals/publications, logistics data, and engineering data.

4.3.9 Data Analytics and Reporting

The Contractor shall develop and implement advanced data analytics and reporting capabilities to support decision-making at all organizational levels. This includes creating dashboards, automated reports, and data visualization tools tailored to CNATRA and FRS operational needs. The Contractor shall ensure that analytics solutions are user-friendly, secure, and capable of integrating with existing and future systems.

4.3.10 Primary Data Collection

The Contractor shall provide primary and secondary data collection capabilities, including surveys, benchmarking, interviews, focus groups, and third-party data reviews, as required to develop and validate the business and technical analysis, modeling, or simulation requirements.

4.4 Training and Knowledge Transfer

The Contractor shall provide comprehensive training and knowledge transfer to government personnel and end users. This includes developing and delivering training materials (CDRL A004), conducting instructor-led and virtual training sessions, and providing ongoing support to ensure users are proficient in all delivered tools and systems. Additionally, the Contractor shall deliver a Data Accession List (DAL) (CDRL A005).

4.5 Cybersecurity Plan

For Cybersecurity requirements see the Cybersecurity Plan (CSP), Attachment X. Specific mentioned policies in the CS Plan can be accessed via the Cybersecurity Policy Chart at the following link: https://www.dtic.mil/document;accessionNumber=AD1128710;type=IAC;searchText=policy%20chart The Contractor shall be required to deliver a Program Cybersecurity Implementation Plan (CSIP) or Annex CSIP to address each of the sections of the Cybersecurity Plan (CSP). The contractor shall demonstrate its understanding of the CSP and describe how the requirement of each of the sections of the CSP will be achieved by the contractor. Sections of the CSP that are NOT applicable are required to be addressed.

The contractor shall describe why a particular section is not applicable. The final Program CSIP shall be in Adobe Acrobat format with a digital signature from the contractor cognizant authority.

If no approved Program CSIP currently exists between the contractor and the Government, then one must be created and submitted. If an approved Program CSIP already exists and sufficiently satisfies the CSP requirements for the contract, then no new CSIP delivery is required. In such cases, the Contractor in consultation with the Government shall only submit a Contract Letter to the Government stating that all CSP requirements are satisfied by the existing Program CSIP.

If CSP requirements are NOT adequately addressed by the existing Program CSIP, then an update to the Program CSIP or a supplemental CSIP document referred to as an “Annex CSIP” shall be created to satisfy the CSP requirements. An Annex CSIP shall address unique CSP Section "G" Assessment and Authorization requirements if a system is being delivered under the contract and unique Section "Q" Software requirements if software is being delivered. These Program CSIP updates or Annex CSIPs shall be submitted in accordance with (CDRL A006).

5.0 Data Deliverables

The Contractor shall deliver all CDRL deliverables IAW the requirements stated in DD Form 1423, See Exhibit A. Disposition (Government Acceptance/rejection and /or approval) of data deliverables will be completed and communicated to the Contractor via the AMS, CDRL Tool.

Users without a DoW issued Common Access Card (CAC) can access the Acquisition Management System (AMS) for CDRL data delivery with a “soft certificate.” The DoW’s External Certification Authority (ECA) program supports the issuance of DoW approved certificates to approved users. Approved EAC Vendors are WidePoint, https://eca.orc.com and IdenTrust, Inc., https://www.identrust.com/certificates/dod-eca-programs. Attachment X, using “Soft Certs” with AMS provides details on how to obtain a “soft cert”.

Once the “soft cert” is obtained, users must create an account at: https://ams.navair.navy.mil/home. PMA-273 will confirm the account request and provide access to the applicable CDRLs.

Attachment X, CDRL Modern Deliverable Home Page, outlines the steps for uploading data deliverables.

Table 1. CDRL Deliverable List

6.0 Acronyms