Draft PWS_CECOM IT Manpower.pdf

PERFORMANCE WORK STATEMENT (PWS)

For

Army Contracting Command (ACC) Aberdeen Proving Ground (APG)

US Army Communication Electronics Command (CECOM)

CONSOLIDATED MANPOWER for INFORMATION TECHNOLOGY (IT) SUPPORT

SERVICES

November 4, 2022

Contents Section 1 Descriptions and Specifications

Introduction:

Scope of Work:

Administrative and Management:

Type of Contract period of performance:

Place of Performance:

Hours of Operation:

Contract Management (Government Side):

Contract Management (Contractor Side):

Project Reporting:

Contractor’s Progress, Status and Management Report, Monthly Status Report):

Contract Data Requirements List (CDRL):

Government Furnished Property (GFP) Reporting

Contractor Labor Hours Reporting:

Administrative / Compliance Plans and Deliverables:

Transition-In Plan:

Transition-Out Plan:

OPSEC Standing Operating Procedure/Plan:

Quality Control Plan:

Meetings:

Contractor Staff PERSONNEL IDENTIFICATION AND CONDUCT:

Key Personnel:

Personal Appearance Standards

Intoxicants:

Criminal Actions:

Safeguarding Controlled Unclassified Information (CUI):

Sexual Harassment/Assault Response and Prevention (SHARP)

Government Data and Data Rights:

Organizational Conflict of Interest:

Government Business Communications and Content:

Contractor Correspondence:

Personnel Security Requirements and Required Training

General:

Physical Security Requirements

Access Control and Identification:

Safety Compliance:

Travel and Training:

Transportation of Equipment/Material:

Process Improvement:

Document List:

Government Furnished Property (GFP)/Worksite:

Joint Ethics Regulation:

Section 2 Functional Areas

Desktop and Lifecycle Support Services APG

Desktop and Lifecycle Support Services Ft. Huachuca

Server, Database, Cloud, and Cyber Security Administration

System Administrator:

Cloud Administrator:

System Administrator Senior (SQL):

Information Assurance Analyst

Video Teleconference (VTC) and Audio/Visual (A/V) Support

CECOM Web Support:

SharePoint Support

SharePoint Developer:

SharePoint Administrator:

SharePoint Requirements Analyst:

Mobility Device Support

APPENDIX A: ACRONYMS

APPENDIX B: DEFINITIONS

APPENDIX C: DOCUMENT LIST

APPENDIX D: CECOM CONUS LOCATIONS

APPENDIX E: C5ISR MAJOR TENANTS

APPENDIX F: ABERDEEN PROVING GROUNDS TENANTS

APPENDIX G: Government Furnished Property Reporting Templates

Appendix H Security and AT/OPSEC Appendix to the PWS

Appendix I Monthly CDRL Forms

Section 1 Descriptions and Specifications

Introduction:

The US Army Communications- Electronics Command (CECOM) CIO/G6 is responsible for supporting the Information Technology (IT) infrastructure and equipment requirements for approximately 9000 Soldiers, Civilians, and Contractors worldwide. The infrastructure and equipment CIO/G6 provides is a key support enabling CECOM personnel to execute the command’s mission:

“CECOM delivers integrated C5ISR weapon systems, business systems, and medical sustainment to enable full spectrum combat operations at the point of need.”

The Contractor shall provide and maintain; all management, supervision, labor, training, equipment, materials, tools, supplies, facilities, transportation, travel, licenses, permits, certificates, certifications, insurance, pre-employment screenings, reports, files and non-personal services necessary to perform the functions as defined in this Performance Work Statement (PWS) except for those items specified as Government Furnished Equipment (GFE). The Contractor shall perform to the standards in this contract.

All solutions and services shall be performed in accordance with all Department of Defense (DoD) and Army policies, regulations, standards and procedures.

It is the inherent responsibility of the installation Network Enterprise Center (NEC) to monitor NIPRnet and SIPRnet network activity and user rights and privileges. The Contractor performing IT Services on this contract shall comply with the NEC network rules and regulations when performing contractual responsibilities as set forth herein.

Scope of Work:

The US Army Communications- Electronics Command (CECOM), CIO/G6 intends to execute a Firm-Fixed Price (FFP) Indefinite Delivery/Indefinite Quantity (ID/IQ) contract for Services that include Desktop and Lifecycle Support Services at Aberdeen Proving Ground (APG), MD, Desktop Support Services at Fort Huachuca, AZ, Server, Database, Cloud, and Cyber Security Administration, Video Teleconference (VTC) and Audio-Visual Systems (AV) Support, Website Development Support, SharePoint Development and Administrative Support, and Mobility Device Support . The Government will place task/delivery orders against the ID/IQ base contract for individual requirements for each areas listed below. The base period of performance will be twelve (12) months from date of ID/IQ award/delivery order start date. There are four (4) consecutive 12-month option periods to be exercised at the Government’s discretion.

The Scope of Work for this contract will consist of the Functional areas listed in the table below:

Delivery Order Description Desktop and Lifecycle Support Services at at Aberdeen Proving Ground (APG), MD

Services provide technical support, system administration support, imaging and lifecycle support to all CECOM users at APG. User devices in scope; Laptops, Desktops, Tablets, Mobile Devices, Printing and Scanning devices. Interfaces with the Northeast Regional Network Enterprise Center (NEC) personnel on behalf of customers advocating prompt resolution of issues.

Desktop Support Services Fort Huachuca, AZ

Services provide technical support, system administration support, imaging and lifecycle support to all CECOM users at Ft. Huachuca User devices in scope; Laptops, Desktops, Tablets, Mobile Devices, Printing and Scanning devices. Interfaces with the Fort Huachuca Network Enterprise Center personnel on behalf of customers advocating prompt resolution of issues.

Server, Database, Cloud, and Cyber Security Administration

Services provide server administration, database administration, cloud administration and cyber-security support to the CECOM application portfolio. This group is responsible for deploying and maintaining CECOM applications hosted in the Northeast Regional Network Enterprise Center (NEC) and the cArmy Cloud (Microsoft Azure government Impact Level 4). In addition, this group supports the migration of the application portfolio from the NEC to the cArmy Cloud.

Video Teleconference (VTC) and Audio-Visual Systems (AV) Support

Services provide resource scheduling, user support, large meeting operations support, tier one VTC and AV System technical support to all CECOM APG AV and Conferencing Systems. Systems include Standard SIP / H.323 VTC codecs, Microsoft Teams based Systems, and teleconferencing services and hardware. This service interfaces with external conferencing resources such VTC conferencing bridges, teleconferencing bridges for scheduling and meting support. Additionally, this service includes primary operation support for conference facilities located in building 6000 (Meyer Auditorium) and building 6008 the Mallet training facility.

Website Development Support Services provide deployment and maintenance of CECOM’s public facing websites. These websites are built and hosted in a Microsoft Azure Impact Level 2 Commercial cloud Hosted on the Public internet.

SharePoint Development and Administrative Support

Services provide administration and solution development support across CECOM. Group services directly support all staff elements SharePoint requirements and provides administrative support to CECOM Major Subordinate Command (MSC) elements. In addition, these services will support the migration of SharePoint 2013 / 16 libraries, lists and solutions to Army Office 365. This service includes modernizing solutions currently in SharePoint 2013/16 to Power Apps and Power based applications.

Mobility Device Support Services provide technical support for portable electronic devices (PEDs). The mobility support team is responsible for the setup, configuration, and troubleshooting of the U.S. Army, Communications Electronics Command’s (CECOM’s) Department of Defense Mobility Unclassified Capability (DMUC) devices as well as other PEDs such as MiFi Devices and flip phones.

Administrative and Management:

Type of Contract period of performance:

CECOM intends to execute an indefinite delivery/indefinite quantity (IDIQ) firm fixed price contract with delivery orders for each functional area of the scope listed above. This contract will have a base year beginning XXXX with Four option years.

Place of Performance:

This requirement for nonpersonal IT support services is for personnel at Aberdeen Proving Grounds (APG) MD. and Other CONUS and OCONUS locations. Please see Appendices D,E,F, for a listing of locations. In the event of an emergency situation in which the CECOM and/or APG locations are closed, and the workforce is directed to telework, the Contractor must be able to perform work from an alternate location. Telework-eligible duties are only permitted for systems that are accessible via VPN.

The decision to require telework comes solely from the CECOM Commander, or the Commander of the installation where the Contractor performs the duties contained in this PWS.

When the Contractor’s place of performance is reopened, and/or the CECOM Commander/Installation Commander rescinds the instruction to telework, the Contractor must return to their normal place of performance.

Routine telework is permitted for personnel not required to be physically present at APG or assigned duty station. Contractor personnel will be issued Government-furnished equipment (GFE) for telework, the equipment must be used and protected in accordance with DoD, Army, CECOM and APG NEC procedures. Contractor personnel using GFE for telework agree to comply with the terms of computer software license and copyright agreements, and computer virus and protection requirements and procedures. No classified documents (hard copy or electronic) may be taken to, or created at, the alternative work location. Controlled unclassified information (CUI) data may be taken to alternative worksites if necessary, precautions are taken to protect the data, consistent with DoD, Army, and CECOM regulations. Contractor personnel will apply approved safeguards to protect Government records form unauthorized disclosure or damage and will comply with Privacy Act requirements set forth in the Privacy Act of 1974, and codified at section 552a of title 5, United States Code. The use of personal email accounts for transmission of Personally Identifiable Information (PII) is strictly prohibited and must be encrypted and digitally signed. The Government will not be responsible for operating, maintenance, or any other costs associated with the use of an alternate work location. The Government is not liable for damages to the alternate work location.

Hours of Operation:

With the exception of emergency operations support or specific support functions requiring twenty-four

(24) hours per day, seven (7) days per week coverage, the Contractor is responsible for conducting business, between the core hours of 0700 - 1700 Monday thru Friday, except Federal holidays or Government directed facility closures. However, hours of operation shall correspond to the core hours of the Government customer, or as defined by each task order. The Contractor shall at all times maintain an adequate workforce for the uninterrupted performance of all tasks, when the Government facility is not closed for the above reasons. Stability and continuity of the workforce are essential. On occasion, authorized Government officials may grant its civilian workforce administrative dismissal. The Government may not grant the Contractor an early release such a “59 minute” early release.

Government recognized Federal Holidays apply to all Contractor employees except those performing essential support functions or providing twenty-four (24) hours per day, seven (7) days per week coverage as specified in contract task orders. When a holiday occurs on a Saturday, Federal employees are normally granted the previous Friday as a holiday observance. When a holiday occurs on a Sunday, Federal employees are normally granted the following Monday as the holiday observance. If a Federal Holiday falls on a weekday, it is not recognized as a, “business day.” The Contractor shall not report for work on the below recognized Federal Holidays. Depending on the calendar year, the Contractor should confirm with the TCOR the exact day which the Federal Holiday falls on. The recognized Federal

Government Holidays are as follows:

New Year’s Day Labor Day

Martin Luther King Jr.’s Birthday Columbus Day

President’s Day Veteran’s Day

Memorial Day Thanksgiving Day

Juneteenth National Independence Day Christmas Day

Independence Day

Facility closures may occur due to unplanned events. Other reasons for facility closures include: (a) Closure designated by Federal statute, executive order, or Presidential Proclamation; (b) Adverse weather conditions; (c) national emergencies.

Contract Management (Government Side):

Pursuant to DFARS 201.602-2, the Contracting Officer (KO) shall appoint a Contracting Officer Representative (COR) who will oversee contract administration as a whole to the IDIQ. Each individual Delivery Order (DO) shall have its own Technical COR (TCOR) assigned. A Delivery Order shall not be approved by the KO until a TCOR has been appointed. The IDIQ COR and TCOR will be identified by separate appointment letter. The KO will provide a copy of the IDIQ COR and TCOR appointment letter (given to and appointing the COR). This appointment letter states the responsibilities and limitations of the COR and TCOR as they pertain to this contract. The IDIQ COR and TCOR monitor all technical aspects of the contract and assists in contract administration. The IDIQ COR and TCOR are authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract;

perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, specifications;

monitor Contractor's performance and notify the KO and Contractor of any deficiencies; coordinate availability of Government Furnished Equipment (GFE), and provide site entry of Contractor personnel.

The IDIQ COR or TCOR is not authorized to change any of the terms and conditions within the contract award or any TO award against the base contract.

Contract Management (Contractor Side):

Functions of program management and contractor personnel management are part of the contractor’s general operating overhead in fulfilling this contract. The Government expects the contractor shall fulfill these functions as efficiently as possible and does not require a full-time onsite Program or Project Manager. Rather the Government expects the contractor to put forward the best solution to manage the contract reporting and contractor personnel meeting the requirements of the Performance Work Statement as outlined in the IDIQ and individual Delivery Orders.

Contractor employees performing services under this contract shall be controlled, directed and supervised at all times by the contractor’s management personnel. The contractor's management shall ensure that its employees properly comply with the performance standards outlined in this PWS and as required by the Contracting Officer (KO) or the Contracting Officer's Representative (COR).

Contractor employees shall perform independent of and without the supervision of any Government official. Actions of contractor employees may not be interpreted or implemented in any manner that results in any contractor employee creating or modifying Federal policy, obligating the appropriated funds of the U.S. Government, overseeing the work of Federal employees, providing direct personal services to any Federal employee or otherwise violating the prohibitions set forth in Parts 7.5 and 37.1 of the FAR.

The Government shall control access to the facility and shall perform the inspection and acceptance of completed work and tasks. The contractor shall provide the services required by the task order pursuant to the general requirements specified herein.

Project Reporting:

Contractor’s Progress, Status and Management Report, Monthly Status Report):

The Contractor shall provide Monthly Progress Reports (MPRs) for each delivery order awarded under this IDIQ . Reports are due to the TCOR and COR by the 10th of the month or the next business day following the 10th. Monthly Reports for each delivery order shall contain the following:

• Cover page Listing the Program, Delivery Order Number, Report title, Frequency, Date, Reporting period, Prime contractor Name and address, Preparer Name.

• Staffing Status, and personnel names

• Summary of current activities completed

• Future Activities to be undertaken

• Issues and problems – with proposed mitigations / solutions

• Risks and Mitigations

• Other relevant information.

Contract Data Requirements List (CDRL):

The Contractor shall provide monthly CDRL reports; Contractor Status, Contractor Directory, and Vacancy Summary, please see appendix I for report forms. CDRL reports are due to the TCOR and COR by the 10th of the month or the next business day following the 10th

Government Furnished Property (GFP) Reporting Contractor shall provide Government Furnished Property Reports on a monthly basis. Reports are due to the TCOR and COR by the 10th of the month or the next business day following the 10th. See Appendix G for example reports

Contractor Labor Hours Reporting:

The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the Army via a secure data collection site. The contractor is required to completely fill in all required data fields using the following web address:

https://www.sam.gov/ Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30.

While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year, beginning with 2023 Contractors may direct questions to the help desk at help desk at: https://www.sam.gov/.

Administrative / Compliance Plans and Deliverables:

Transition-In Plan:

The awarded Contractor shall submit a draft transition-in plan within fifteen (15) days after contract award for Government review and approval. This plan shall include, but is not limited to:

• Coordination with Government IDIQ COR.

• Review, evaluation, and transition of current support services.

• Transition of historic data to new Contractor system.

• Control and accountability of all Government Furnished Information (GFI) and GFP transferred from the incumbent and from the Government.

• Orientation phase to introduce Government personnel, programs, and users to the Contractor's team, tools, methodologies, and business processes.

• Within 30 calendar days after contract award, the contractor shall staff at 100% all labor categories related to Delivery Orders under this IDIQ.

Transition-Out Plan:

The transition-out shall be completed on the last day of the period of performance and in accordance with FAR 52.237-3 Continuity of Services. A Transition-Out Plan shall be provided by the Contractor awarded this IDIQ to the Government. The Contractor shall submit a draft Transition-Out Plan ninety

(90) calendar days prior to the period of performance end date for Government review and approval. In accordance with the Government-approved plan, the Contractor shall assist the Government in planning and implementing a complete transition from this contract to any new contract awarded for these services. This transition plan shall include, but is not limited to:

• Coordination with Government representatives.

https://www.sam.gov/ https://www.sam.gov/

• Review, evaluation, and transition of current support services.

• Transition of historic data to new Contractor system.

• Transition of hardware warranties and software licenses (if applicable).

• Transfer of all necessary Government data, business and/or technical documentation.

• Return of all GFE to the Government.

• Applicable personnel out-processing procedures. • Turn-in of all Government keys, ID, access cards, and security codes.

If the contract option is exercised to extend the term of the contract, the plan shall be updated during the same time period each year thereafter. If the Government exercises the option for the Transition- Out Plan, the plan shall be implemented during the final thirty (30) calendar days prior to the contract completion. The Contractor shall establish procedures with any successor to ensure a smooth transition of all responsibilities and requirements without any degradation of services.

OPSEC Standing Operating Procedure/Plan:

The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer.

This plan will include a process to identify critical information, where it is located, who is responsible for it, how to protect it and why it needs to be protected. The contractor shall implement OPSEC measures as ordered by the commander. In addition, the contractor shall have an identified certified Level II OPSEC coordinator per AR 530-1. If available, the Contractor shall utilize the Government Organization’s existing OPSEC SOP specified in each task order PWS.

Quality Control Plan:

The Contractor shall develop and maintain a Quality Control Plan (QCP) that contains at a minimum, the items listed below and shall submit it to the COR for acceptance no later than thirty (30) calendar days after date of award. The Government will have fifteen (15) calendar days to review, accept and/or comment on the draft deliverable. The final plan is due fifteen (15) calendar days after receipt of comments. The QCP shall include the following minimum requirements:

• A description of the inspection process to cover all major services and deliverables. The description shall include specifics as to the areas to be inspected on both a scheduled and unscheduled basis, frequency of inspections, and the title of the inspectors, a description of the records to be kept documenting inspections and corrective or preventative actions taken.

• All records of inspections performed shall be retained and made available to the Government upon request throughout the task order performance period, and for the period after task order completion, until final settlement of any claims under this contract.

Meetings:

The Contractor shall agree to attend any post award meeting convened by the Contracting Office or the Requiring Activity. The KO, IDIQ COR and/or TCOR, and other Government personnel, as appropriate, may request periodic meetings with the Contractor to review the Contractor's performance. At these meetings the IDIQ COR and/or TCOR will apprise the Contractor of how the Government views the Contractor's performance and the Contractor shall apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve any outstanding issues. These meetings shall be at no additional cost to the Government. The Contractor shall conduct, In Process Review (IPR) Meetings at the government’s request.

Contractor Staff PERSONNEL IDENTIFICATION AND CONDUCT:

The Contractor shall maintain an adequate staff of employees meeting all the requirements specified in the IDIQ PWS and each task order PWS. The Contractor shall ensure that all employees are professional, reliable, and meet the training, certification and experience requirements of the IDIQ contract and its delivery orders. The Government reserves the right to direct the Contractor to remove an employee from the work site for failure to comply with the terms and conditions within the contract and task orders.

In the event an employee resigns the contractor will notify the TCOR and COR of the vacancy on the next business day following receipt of the resignation. The contractor shall make adjustments to staff and schedule ensuring the services provided to the government are not degraded and do not lapse in the while hiring a replacement employee. The Contractor has thirty (30) days to fill any vacancies except for key personnel that may occur throughout the contract and task orders to receive payment for the services. Key Personnel will be replaced within five (5) business days. Payment will not be made for employee vacancies exceeding the specified replacement durations. The contractor will adjust and notate billing submitted through WAWF to reflect this reduction in cost due to failure to replace the employee in the specified time period.

Contractor personnel performing service on a military base or facility shall comply with all applicable rules, regulations, directions, and requirements pertaining to conduct of personnel on a military reservation. The contractor shall recognize and comply with the authority of the military Commander to suspend, restrain, or restrict the activities of contractor personnel for the protection of personnel and equipment under his or her military jurisdiction. Contractor personnel shall wear a contractor-provided identification badge and a PEO IEW&S Contractor Badge while performing work for PEO IEW&S.

Contractor personnel shall identify themselves as a contractor in all verbal and written communications, to include email signature, while performing work for PEO IEW&S. When attending meetings in support of PEO IEW&S, contractor personnel shall introduce themselves as a contract employee supporting PEO IEW&S. Contractor personnel shall sign a non-disclosure statement relative to Government business sensitive info

Key Personnel:

Desktop / Lifecycle Team Lead APG

Desktop Team Lead Ft. Huachuca

Sever Admin, Cloud Admin, DBA, and Cyber-security Team Lead

Web developer Team Lead

VTC Team Lead

SharePoint Team Lead

Mobility Device Support Team Lead

Personal Appearance Standards While performing services in CECOM, C5ISR, or APG (Reference Appendices E, F, and G) facilities, contract employees shall wear neat, conservative clothing in good repair. Clothing shall be of proper fit, becoming to the individual, appropriate for business wear and the job to which assigned. Abnormally tight or revealing clothing or excessively baggy or oversized clothing is prohibited, as well as tank tops, halter tops, halter dresses, mini- skirts, mini- dresses, leggings or tights as outer wear. Imprinted clothing with embroidered messages of any kind shall not be worn. Baseball caps, non-safety hats, or any type of caps shall not be worn while indoors of a Government facility. Particularly offensive tattoos, or tattoos which are lewd or profanely indecent, racially motivated, offensive in language, or obscene in nature, shall always remain covered while performing contract services in CECOM, C5ISR, or APG facilities.

The Contractor shall assess the work environment to determine required Personal Protective Equipment (PPE) in accordance with Occupational Safety and Health Administration (OSHA) standards. The Contractor shall ensure its personnel are outfitted with the proper PPE during task performance of this contract and its task orders.

Intoxicants:

Contractor personnel performing under this contract/TO are prohibited from being under the influence of alcohol intoxicants, drugs, or substances that produce similar effects, during business hours stated within this PWS. If any Contractor personnel are found to be under the influence of any intoxicants, he/ she shall be immediately removed from their position. This offense may be grounds for removal of that Contractor employee per the discretion of the Contract PM of that TO.

Criminal Actions:

Contractor employees are subject to prosecution for criminal actions due to improper performance of duty as allowed by law. These criminal actions include, but are not limited to the following:

• Falsification or unlawful concealment, removal, mutilation or destruction of any official documents or records or concealment of material facts by willful omission from official documents or records.

• Unauthorized use of Government property, theft, or vandalism.

• Unethical or improper use of official authority or credentials.

• Security violations.

Safeguarding Controlled Unclassified Information (CUI):

CUI Information generated and/or provided under this contract shall be safeguarded and marked as specified in AR 25-55 and DoD 5200.1-M. (Marking is in Volume 2).

Privacy Act: The Contractor shall implement and adhere to appropriate procedural, administrative, technical and physical safeguards to prevent the unauthorized use and/or disclosure of any personally identifiable information (PII). Breaches of PII must be immediately reported to the Government Privacy Officer.

Disclosure of Information: The Contractor shall not release any Government data received, created, or accessed in the performance of this contract, and shall not release any unclassified information, regardless of medium, pertaining to any part of this contract or related program without prior written approval from the KO.

Nondisclosure: During the POP, the Contractor may be required to access nonpublic information, including acquisition sensitive information which shall not be used or disclosed unless authorized by the KO. Contractor employees performing under each TO issued against the base contract shall be required to sign the Certificate of Nondisclosure.

Sexual Harassment/Assault Response and Prevention (SHARP).

Sexual harassment and sexual assault violate everything the U.S. Army stands for including Army Values and Warrior Ethos, and therefore the Army is enforcing a zero-tolerance policy. The Contractor shall cooperate with Army operationalized Sexual Harassment/Assault Response and Prevention (SHARP) procedures to meet the DoD Strategic Direction on Sexual Assault Prevention and Response objectives.

It is the responsibility of every leader, soldier, civilian and contractor to set the conditions for a positive command climate based on prevention, education, bystander intervention, victim support and accountability.

The Government will perform SHARP monitoring and measurement procedures in the Government workplace. Onsite contractors shall be subject to work area inspections.

The Contractor shall create and uphold a positive climate and an environment of trust and respect in which every person can thrive and achieve their full potential.

The Contractor shall execute sexual harassment and sexual assault prevention policies, training initiatives, and education programs.

The Contractor and its individual employees shall be held accountable for their behavior, actions and inactions.

Government Data and Data Rights:

The Government has unlimited rights to any information, document, media, source code, and machine-readable material, regardless of physical form or characteristics, that is created or obtained in the course of official Government business under this contract. This is Government data, and all Government data produced under this contract and its task orders shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government.

Organizational Conflict of Interest:

Contractor and subcontractor personnel performing work under this contract may receive, have access to, or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall immediately notify the KO when it becomes apparent that such access or participation may result in any actual or potential OCI. The Contractor shall promptly submit a plan to the KO of how to mitigate any such OCI. The determination of acceptability of the Contractor’s mitigation plan, will be at the discretion of the KO. In the event that the KO determines that any OCI cannot be resolved, avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements.

Government data may not be used or sold by the Contractor without written permission from the IDIQ COR. All materials supplied to the Government shall be the sole property of the Government and shall not be used for any other purpose.

Government Business Communications and Content:

For the purpose of performing work under this contract, the Contractor shall use only authorized Government-provided services for email, telecommunications, collaboration, and content management.

In particular, the Contractor shall use Government email account for electronic messaging correspondence under this contract. All work performed under this contract shall be conducted on and through a government-managed device operating on a government-managed network. Commercial internet service provider networks are not authorized for official government business.

Contractor Correspondence:

All Contractor correspondence (telephone, oral presentation, written, facsimile, and email display) shall explicitly identify or announce themselves as a contractor and their company name. All email correspondence generated under this contract and TO shall be conducted through a government email account.

Personnel Security Requirements and Required Training General:

Please see the document attached in Appendix H

Physical Security Requirements The Contractor shall be responsible for safeguarding all Government equipment, information, and property provided for Contractor use. The Contractor shall secure Government facilities, equipment, and materials at the close of each business day.

The Contractor shall establish and implement methods of ensuring all keys, key cards, and PIN codes issued by the Government, to Contractor personnel, are accounted for and not in the possession of unauthorized persons. No keys issued to the Contractor, by the Government, shall be duplicated. The Contractor shall develop procedures covering key, key cards, and PIN, controls that shall be included in the QCP. Such procedures shall include turn-in of any issued keys or requests for new PIN Codes in situations where there is a changeover of personnel.

The Contractor shall immediately report any occurrences of lost, duplicated keys, key cards, or compromised PIN codes to the TCOR. PIN Codes shall not be used by anyone other than the person or organization that it is assigned to. In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the TCOR, re-key or replace the affected lock(s). When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key which the Contractor shall be responsible for, is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost will be deducted from the monthly payment due to the Contractor.

Access Control and Identification:

Contractor employees shall comply with applicable DoD/Army identification and access control policies and procedures.

In-processing/Out-processing: The Contractor employees who are cleared to commence work shall complete an in-processing requirement checklist, submit necessary forms, and shall submit a sponsorship application via automated DoD system, before security/ photo ID badges and access accounts will be issued. Employees shall be escorted, as necessary, prior to completion of all in-processing requirements.

The Contractor shall immediately notify the IDIQ COR and TCOR and Security Officer of contract employee resignations or terminations. The Contractor shall ensure all employee out- processing requirements are completed including collection and turn-in of employee identification and security badges, turn-in of equipment, disable/delete actions for employee access accounts.

Department of Defense (DoD) Common Access Card (CAC): During contract task order (TO) POP, Contractor personnel shall be required to have a valid DoD CAC if they are to be granted network access in performance of their duties. Contractor personnel assigned to a DO shall return CAC’s that were issued to them to the sponsoring organization’s Security Officer when their employment as a DoD contract employee is terminated or the DO is complete. Contractor personnel who do not require network access for the performance of their duties, may not require a CAC; however, they shall be required to obtain a civilian ID for physical access to the Army installation.

For contractors requiring Common Access Card (CAC): Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

For contractors that do not require CAC, but require access to a DoD facility or installation:

Contractor and all associated sub-contractor’s employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC- III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

Security Badges: While performing contractual work, the Contractor shall be required to present and display Government-issued security area identification badges in order to gain and exercise entry into the security areas. The Contractor shall only obtain badges for the minimum number of employees required for the performance of the contract TO. Contractor employees shall be required to wear the badge at all times while in a Government facility and shall be required to remove the badge while outside of the Government facility.

C5ISR Campus Badges: Contractor personnel assigned to the APG, MD C5ISR campus (Reference Appendix F) shall obtain a C5ISR badge for physical access within the campus. The sponsoring organization’s Security Officer will make the determination as to what type of badge is required for Contractor personnel and process the appropriate applications.

Access and General Protection/Security Policy and Procedures: Contractor and all associated sub-contractors employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

Safety Compliance:

The Contractor shall comply with all applicable DOD, Army, Federal, state, and local safety, health and environmental regulations and requirements. Any noncompliance shall be immediately reported to the TCOR. The Contractor shall prevent Contractor activities from presenting hazards to Contractor personnel, the public, and Army personnel and property. Any hazardous conditions related to the performance of work, outside of the Contractor’s control, shall be reported to the TCOR. The work is typically performed in adequately lighted and climate- controlled areas. Government Furnished facilities may be equipped with building alarms to include security, fire, water and uninterruptable power sources. These alarms are centrally monitored by the employees who work for the Directorate of Public Works who, in the event of an alarm, will contact facility occupants to ascertain the nature of the problem. Contractor personnel shall be required to cooperate with the TCOR for troubleshooting and reporting the cause of various alarms. Contractor personnel shall respond to all evacuation and emergency egress procedures to preserve their safety. An awareness and application of safety precautions shall be utilized when using, unpacking, lifting, moving, transporting, installing and/or uninstalling and racking IT equipment. The Contractor shall provide any Personal Protective Equipment (PPE) required.

Travel and Training:

Travel may be required throughout the C5ISR Campus, APG facilities, and in support of training held off the installation. Travel may be required to other CECOM CONUS and OCONUS locations (Reference Appendix E). Travel may be required to AMC headquarters in Huntsville, Alabama. Contractor personnel shall provide their own transportation in the course of accomplishing normal duties. In instances where a Privately Owned Vehicle (POV) is used, the Government will provide reimbursement for mileage at the rates established by the current Joint Travel Regulation (JTR). Contractor personnel shall be required to attend training courses for newly acquired or updated software/hardware. The Government will reimburse the Contractor for training approved by the TCOR. On an annual basis, the Contractor shall submit a proposed refresher training plan to the TCOR for review and planning purposes. The KO or designated representative will approve and authorize in writing any training determined to be necessary in performance of the IDIQ and TO contract.

Transportation of Equipment/Material:

The Contractor shall be responsible for the shipping/delivery of any Contractor purchased equipment and material.

Process Improvement:

If at any time the Contractor determines a way to improve the current processes, they are encouraged to submit a Value Engineering Change Proposal (VECP) following the procedures at FAR clause 52.248-1, incorporated into the resulting contract.

Document List:

The Contractor shall be compliant with all current editions of applicable documents, policies, and directives, included in the list at Appendix C.

Government Furnished Property (GFP)/Worksite:

Government will furnish workspace for personnel assigned as a result of this contract. While at a Government installation/operating location, the Government will provide all equipment necessary to perform their duties that shall include, but not be limited to, computer workstations, Local Area Networks /Wide Area Network connectivity and all administrative office equipment and expendable supplies necessary to perform normal operations. The Contractor shall control all Government property assigned to them. The Contractor shall be required to sign a hand receipt for all equipment provided by the Government. Contactor personnel shall obtain an Individual Property Pass (IPP) when transporting computer equipment on the installation. Supplies and equipment required, but not provided by the Government, may be purchased by the Contractor, subject to fund availability and pre-approval in writing by the KO, and equipment becomes the property of the Government.

Government provided phone lines will be available to make official calls pertaining to contractual work performance. Telephone service is subject to the standard monitoring requirements of the Government telephone network. The Government-furnished phones are subject to security monitoring at all times.

Use of these phones constitutes consent to security monitoring. The Contractor shall be responsible for all unofficial (non-Government) long distance calls. Adequate utilities will be provided for the safe and convenient performance of duties required.

Joint Ethics Regulation:

The Contractor acknowledges that Government personnel are required to comply with all provisions of DoD Regulation 5500.7-R, Joint Ethics Regulation (JER). The Contractor hereby agrees to use its best efforts to prevent its employees from taking any action which could be construed as soliciting, encouraging, assisting, aiding, or abetting any Government employee to violate any provision of the Joint Ethics Regulation (JER). The Contractor further agrees to provide a copy of the JER to all of its employees assigned to work under this contract in any Government owned or leased facility. It is available at no cost at http://www.defenselink.mil/dodgc/defense_ethics/index.html.

Section 2 Functional Areas The information below summarizes the requirements for Information Technology Support Services to be awarded on individual delivery orders issues under this IDIQ

Desktop and Lifecycle Support Services APG Contractor shall provide technical support, system administration support, imaging and lifecycle support to all CECOM. User devices in scope; Laptops, Desktops, Tablets, Printing and Scanning devices.

Interfaces with the Northeast Regional Network Enterprise Center (NEC) personnel on behalf of customers advocating prompt resolution of issues.

The Contractor shall employ CECOM authorized IT management systems and business processes for customer support. CECOM will comply with Army Enterprise Service Desk (AESD) policy. The Contractor shall acquire access to the current AESD service management system (i.e. Remedy) and shall process and manage service tickets allocated to the technician assignment group satisfying CECOM service performance standards. The Contractor shall maintain current CECOM IT asset status in the current government system of record.

Desktop Service Support and Equipment Lifecycle:

CECOM requires Fourteen (14) full-time personnel performing desktop service support / Lifecycle support including, but not limited to:

• Desktop software support

• Respond and resolve help desk tickets

• Install and support Government furnished software and hardware

• Service all tickets for installation and replacement of printer toner cartridges

• Service all tickets for installation/replacement of printer fuser kits

• Provide IAVA/STIG compliance for all supported laptops and desktops and printers

• Analyze network failures

• Analyze new hardware performance and issues

• Install network Multi-Function Printers (MFP)

• Perform hard drive sanitization as required

• Provide written evaluations, procedures, checklists and instructions for CIO approval

• Provide technical advice and IT Acquisition planning support

• Provide off-site support

• Provide rapid response for Very Important Personnel (VIP)

• Transfer of user data.

Desktop service support shall be provided on NIPR and SIPR networks, or in standalone, non-networked operating environment. All desktop technician personnel shall acquire and maintain NIPR elevated privilege tenant desktop administrator accounts for NIPR desktop service support performance. No less than five (5) of the ten (10) desktop technician personnel shall acquire and maintain SIPR elevated privilege tenant desktop administrator accounts for SIPR desktop service support performance.

Support for Surge Events:

In support of IT refresh projects, the Contractor shall provide a project lead to work directly with the assigned CECOM Project Lead. The contractor shall be responsible for the packing, transportation, unpacking, configuration and set-up of the system(s) both to and from the destination. The Contractor will provide the necessary labor, transportation vehicles, tools, equipment, and materials to complete the project. The contractor shall:

• Provide basic support in the set-up, removal, distribution, and redistribution of resources;

printers, desktops, laptops, furniture, boxes, and other related items with minimal disruption, as required.

• Assemble and/or disassemble equipment upon arrival to a receiving point. The contractor shall distribute items/furniture to the customer IAW guidance received from the Government.

• Assist in loading and unloading inventory.

• Transport equipment to and/or from designated locations.

• Transport excess equipment to the appropriate disposal point designated by the Government.

• Safeguard and protect all resources being moved during the entire transfer process to prevent damage.

• Use padding for equipment and/or furniture when appropriate

• Inspect and immediately report any damages to the COR.

Damages:

The Contractor shall be liable for any equipment damage resulting from task relocation of IT equipment from origination to destination locations, except when loss and/or damage arises out of the causes beyond the control and without the fault or negligence of the Contractor. The Contractor and the Government shall visually inspect all IT assets before and after the relocation to assess condition.

Ex…