_DRAFT PWS.pdf

Procurement Sensitive Information – See FAR 2.101/3.104

Do Not Release Beyond ACC-RSA and USASMDC

USASMDC SIMULATION CENTER (SimCtr)

PERFORMANCE WORK STATEMENT (PWS)

08 MARCH 2021 (REV 00)

1.0 BACKGROUND.

The U.S. Army Space and Missile Defense Command (USASMDC) (W4T8AA) manages the SimCtr, a high performance computing (HPC) resource facility, for the Missile Defense Agency (MDA) to support the development, testing, and integration of the Department of Defense (DoD) space, high altitude, missile defense, and cyber capabilities for the Warfighter. The SimCtr is a long-term program spanning approximately thirty (30) years and is housed in the Redstone Arsenal Von Braun Complex (Bldg. 5220) co-located with USASMDC Headquarters. As a HPC, the SimCtr obtains computing upgrades via the High Performance Computing Modernization Program (HPCMP). It provides secure operations for modeling and simulation activities.

The SimCtr architecture has changed over the years to remain at the leading edge of information technology innovations.

The SimCtr serves as one of USASMDC's major research and development (R&D) facilities for space, missile defense, and high altitude research, design, and analysis of complex missile defense systems with state-of-the-art computational and modeling and simulation resources, integration, demonstration, and performance verification and visualization capabilities. The SimCtr executes these services in support of its prime stakeholders, the MDA and its program elements, and HPCMP. Effort include (but not limited to) reliable fault tolerant computing, software techniques for complex systems, real-time algorithms computation, local and wide area communications, computer networking, computational fluid dynamics, phenomenology, threats and countermeasures, and advanced hardware. In addition to providing local and remote organizations with large scale computational assets, the SimCtr also provides access to other DoD research networks to meet customer mission requirements.

The SimCtr is a high performance supercomputing center that provides users within MDA, USASMDC, HPCMP, and other Government agencies, as well as authorized contractors, a centralized resource for classified and unclassified high performance computing processing, parallel processing, data visualization, modeling and simulation, networked communications, software development, testbed, and technical and administrative support services. Additionally, the SimCtr participates as a node on the Ballistic Missile Defense Network (BMDN).

As a participant of the HPCMP Affiliated Resource Center (ARC), the SimCtr is connected to the high performance computing network of DoD Supercomputing Resource Centers (DSRCs) and other resource centers via the Defense Research and Engineering Network (DREN), Secret Defense Research and Engineering Network (SDREN), and the Missile Defense Agency Classified Network (MDACNet).

USASMDC SimCtr PWS

08 MAR 21 (REV 00)

The SimCtr provides facility resources, system administrative support, security controls, procurement and configuration of hardware/software, and shipping to various worldwide locations. Multiple individual laboratories are housed in the SimCtr. These laboratories are connected to geographically dispersed locations and are utilized to support various CONUS/OCONUS exercises and wargames (integration and testing prior to event execution are conducted from the SimCtr).

While, in most instances, the laboratories participate in event execution from the SimCtr, there are occasions where onsite CONUS/OCONUS support is needed.

Finally, over the years, the SimCtr capabilities and expertise have been leveraged to support various customers in areas such as analysis, engineering/design, enhancement, migration, integration, testing, information assurance (IA) services, and acquisition support.

Program resources come from the MDA and other Government agencies with USASMDC as the executing agent of the SimCtr, while the Army Contracting Command- Redstone (ACC-RSA) provides contracting support to program executive offices and program managers supporting the U.S. Army’s major acquisition programs.

USASMDC requires an on-site contractor for the operation and maintenance (O&M) of the equipment and systems located in the SimCtr. This effort will provide O&M of computing platforms ranging from personal computers (PC) to HPC platforms, auxiliary equipment such as storage media, high bandwidth communications equipment, multimedia communications equipment and all other equipment and facilities that form the SimCtr. The contractor shall also provide support for network engineering and communications design, implementation, operations and maintenance, systems integrations, administration, analysis, maintenance, performance upgrades, systems requirements analysis, hardware and software recommendations, computer operations, scheduling, system backups, user account management, hardware/software engineering and integration, system development and maintenance, model and simulation configuration, Government Furnished Equipment (GFE) property acquisition and tracking and facility and computer security

As noted below, the contractor will perform work supporting research and development efforts associated with the SimCtr’s high-performance computing systems. Of noteworthiness, the acquisition PWS states, “[t]he contractor shall provide all support necessary to operate, maintain, procure, engineer, integrate, test, migrate, and upgrade the SimCtr and to support special research and development tasks related to SimCtr customer requirements.”

2.0 PERFORMANCE REQUIREMENTS.

The contractor shall provide all support necessary to operate, maintain, procure, engineer, integrate, test, migrate, and upgrade the SimCtr and to support special research and development tasks related to SimCtr customer requirements. With the exception of that provided on a temporary duty basis, the principal place of performance is USASMDC, Bldg. 5220, Wernher von Braun Complex (VBC), Redstone Arsenal, Alabama. Specific support requirements are identified below.

It is the contractor's responsibility to provide and maintain a state-of-the-art trained workforce capable of providing the services specified in the contract. Unless directed by the Government, all related training, continuing education, certification courses, and other similar events are the financial responsibility of the contractor. The contractor shall ensure that adequate technical capability is available to provide responses to specific tasks based on a 40-hour work week. Except as specified as furnished by the Government, the contractor shall provide all necessary labor, services, supplies, equipment, materials and training to accomplish the following (but not limited to) representational requirements.

2.0.1 Operational Hours.

The contractor shall operate the SimCtr, Monday through Friday, from 7:00 a.m. to 5:00 p.m. (Central Standard Time) (0700-1700 in military time), providing both classified and unclassified processing capability to authorized users. When mission essential operations are underway (such as participation in joint CONUS/OCONUS exercises or wargames or model/simulation execution which run continuously for multiple, consecutive days that cannot be interrupted without the potential to impair these CONUS/OCONUS exercises/wargames and modeling/simulation execution or be performed under all circumstances to achieve DoD component missions or responsibilities), then with approval from the contracting officer the contractor shall be directed by the contracting officer's representative (COR) to extend the normal hours of operation, operate over weekends, or during base closures.

Contractor shall ensure personnel required to accomplish these operations are designated as “mission essential personnel” and report to an assigned work location to perform required tasks, regardless of weather or security conditions. As part of its transition plan, the contractor shall provide a list of essential personnel required to perform those tasks within 14 business days after contract award and with any change of mission essential personnel to contracting officer and COR. The contractor shall ensure controlled access to the SimCtr during hours of operation.

2.0.2 Network Support.

The contractor shall make best efforts to ensure uninterrupted unclassified/classified remote network access to the SimCtr 24 hours-a-day, 365 days-a-year (366 days on Leap Years). The contractor shall engineer, design, install, test, procure, operate and maintain, and secure all communications links (both local and remote ends) within or connected to the SimCtr.

The contractor shall provide support and capabilities as a node of the Missile Defense Agency Network (MDANet), MDACNet, DREN, and the Secret Defense Research Engineering Network (SDREN) and other networks as required. Activation and deactivation of links involving the SimCtr shall be directed by the COR.

2.0.3 Asset Management.

The contractor shall maintain an automated system to efficiently assign SimCtr assets to meet requirements. The contractor shall utilize an electronic means accessible to users to display asset schedules and accept user requests. The schedule shall be updated weekly. The schedule posting shall be no later than the last working day before the start of a new workweek.

The contractor shall identify potential resource schedule conflicts and shall attempt to resolve those SimCtr resource schedule conflicts with the COR/SimCtr users. For example, if a user has a requirement that cannot be met by SimCtr assets due to scheduling, then the contractor shall assist the user in identifying other resources (e.g., contractor shall coordinate with other HPC facilities). The contractor shall utilize electronic notifications to inform users of problems, equipment changes, or system downtimes.

2.0.4 Performance Analysis.

The contractor shall perform hardware and software performance analyses to ensure optimized performance and maximized utilization of all systems and supported programs. The contractor shall identify, develop, and measure a system of metrics to track those processes key to effective and efficient operations. At a minimum, the performance metrics shall measure user satisfaction, system performance, maintenance activities, and problem resolution statistics on a monthly basis. Metric reports shall be generated and submitted as part of the Monthly Status Report (CDRL A003) and Quarterly Progress Report (CDRL A004) or as required by the COR. The contractor shall report computer utilization time by system and supported program.

2.0.5 Technical Support / Problem Resolution.

The contractor shall establish and implement procedures to efficiently and effectively identify, trace, isolate, and resolve all facility, software, hardware, and communications problems. The contractor shall make an initial assessment of all problems and attempt to resolve. If the contractor cannot resolve the problem, and the problem involves SimCtr facilities then the contractor shall immediately contact the COR for direction. If the problem involves software and/or hardware that is under original equipment manufacturer (OEM) warranty, then the contractor shall promptly obtain applicable OEM vendor support; for software and/or hardware that is not under OEM warranty, then the contractor shall, if it does not violate any other warranties, first utilize in-house expertise to address and resolve the problem.

A log of all identified problems shall be maintained and tracked. At a minimum, the log shall reflect the date/time the problem was identified, the nature of the problem, the planned approach for resolving the problem, and the date/time the problem was resolved. All problems and resolutions shall be reported as part of the Monthly Status Report. (CDRL A003.)

2.0.6 Software Support.

The contractor shall obtain and maintain required software and licenses, and shall establish, implement, and update procedures for the protection of vendor and user proprietary software. The contractor shall produce, control, and distribute documentation of all software developed/modified under this effort. The contractor shall also analyze, design, develop, test, and integrate new applications, software systems, and/or program requirements as directed by the COR. A software license log shall be maintained by the contractor and provided to the Government as directed by the COR. (CDRL A003.)

2.0.7 Technology and Equipment Enhancements.

The contractor shall conduct analysis to identify technology and equipment enhancements that shall improve SimCtr operations and support, which includes hardware, software, visualization, associated and peripherals. Enhancement analyses results shall be provided as special technical reports when requested by the Government. (CDRL A005.)

2.0.8 Training Support.

As directed by the COR, the contractor shall conduct user training/orientation on new or upgrades to equipment, software, hardware, systems, etc. and shall develop and institute a technical training program for Government personnel (and other support contractor personnel as needed) in order to enhance the functions, capabilities, and ongoing technologies at the SimCtr.

2.0.9 Library Support.

The contractor shall maintain a record library of storage devices and documents for SimCtr users. The contractor shall maintain records regarding assignment, classification, year of activity, and other pertinent data. For tape and disk management, the contractor shall develop, maintain, and implement procedures for cleaning, degaussing, and deletions.

The contractor shall maintain a library of all application software, support documentation, and manuals. The contractor shall also maintain a library of the latest required compilers for all SimCtr systems.

2.0.10 Short and Long Range Planning.

When directed by the COR, the contractor shall provide support in the area of requirements definition, planning activities, resource logistics, integration, technical support, communications, system, and operational support. Short and long range support plans shall be submitted as special technical reports when requested by the Government. (CDRL A005.)

The contractor shall provide management, operational, and technical support to users and their respective projects. Support shall include the planning and scheduling of asset utilization.

2.0.11 Special Project Support.

When directed by the COR, the contractor shall assist the Government in identifying and, if required, procuring the proper hardware and software for specific programs/projects. When applicable, the contractor shall properly package all unclassified and classified shipments, and shall facilitate shipping of all unclassified and classified hardware and software.

The contractor shall also provide system administrative support as necessary, and shall develop, modify, and/or integrate simulations, models, or drivers to support user requirements and objectives. As further directed by the COR, the contractor shall install, integrate, checkout, update, maintain, and execute all SimCtr special purpose software. The contractor shall ensure that any special purpose software product problems are properly identified, documented, and corrected. The contractor shall analyze operating system software problems and resolve them appropriately.

The contractor shall provide Military Operations Specialists to support training events as required (note that this is a specified labor category under Section J of the contract). The Military Operations Specialists shall have the ability to install, manipulate, and configure basic Linux operating system as required.

2.0.12 Meetings and Conferences.

The contractor shall support modeling and simulation, super computer, HPC, engineering and technology conferences, HPC users’ group meetings, demonstrations and training exercises, both on-site and offsite, when directed by the

COR.

2.1 Facility Maintenance.

2.1.1 General Maintenance Standards and Processes.

In order to assure availability to the users, the contractor shall maintain the SimCtr facility (to include all GFE) in an operational condition. The contractor shall manage the repair parts, supplies, and maintenance service necessary to maintain the SimCtr at a high level of operational availability.

The contractor shall maintain SimCtr computational and supporting resources at a level of scheduled availability and reliability that provides 95% or better availability.

The contractor shall also plan for future facility requirements or expected changes in facility modifications, personnel or equipment.

The contractor shall develop and implement a process to record maintenance performance trends and equipment malfunctions (kind, cause severity, and duration). The contractor shall train in-house personnel in maintenance activities as a cost effective alternative to the use of OEM or other vendor maintenance and service providers. The contractor's maintenance activities shall provide training for all new GFE products/upgrades.

2.1.2 File Backup.

The contractor shall ensure that permanent electronic media files are archived. The contractor shall maintain an offsite full library of backup data, documentation, and master files at an alternate site in accordance with the safeguarding levels described in the DD Form 254 (DoD Contract Security Classification Specification) to ensure system and master file reconstruction capability.

2.1.3 Preventive Maintenance.

The contractor shall perform all GFE OEM recommended preventive maintenance (PM). PM shall be done with minimal disruption in services to the users. The contractor shall maintain a log of all PM activities and report activities as part of the Monthly Status Report. (CDRL A003.) PM shall be done during off-prime hours when possible (between 2400 and 0600 hours).

2.1.4 Remedial Maintenance.

The contractor shall provide non-scheduled on-site per call repair service for SimCtr equipment and SimCtr user equipment in cases where the user has provided funds for maintenance. Where possible, the repair service shall be done on site. Repair parts shall be equal to OEM quality. The contractor shall ensure that repairs are completed within one business day after the problem has been reported.

2.1.5 Warranties.

The contractor shall track and manage product warranties. The contractor shall obtain vendor maintenance for equipment under warranty in accordance with applicable warranties.

2.2 Phase In / Phase Out.

When directed by the COR, the contractor shall develop and deliver a phase-in/phase-out plan (CDRL A005) that states in detail the procedures, documentation that shall be provided, and the methodology for transitioning to a follow-on contractor at the completion of the contract. This plan shall address a 30 calendar day operational transition that allows an orderly and effective transition at the end of the contract performance period.

3.0 GENERAL REQUIREMENTS.

The contractor shall adhere to the following general requirements in performance of the services described in paragraph 2.0 above.

3.1 Program Management.

3.1.1 Program Manager.

The contractor shall establish a single program manager to serve as the focal point of contact for the overall contract and to whom all technical and management issues can be addressed (note that this is a specified labor category under Section J of the contract).

3.1.2 Management Plan.

The contractor shall establish a management process to accomplish the administrative, managerial, security, and financial aspects for the contract. This process shall provide the overall management of contract, personnel, planning, quality control, direction, coordination, and reviews necessary to ensure effective contract performance. The management process shall be documented via a comprehensive Management Plan and submitted for Government approval within 45 calendar days after contract award and/or as requested by the COR. (CDRL A002.)

3.1.3 Program Reviews.

The contractor shall provide program reviews to present the accomplishment of technical and programmatic efforts as requested by the COR.

3.2 Quality Assurance.

The contractor shall develop, implement, and maintain a quality assurance program to ensure products and services conform to requirements, which is captured in the contractor’s Quality Control Plan shall be submitted as part of the Management Plan, subject to COR approval. (CDRL A002.) Further, the contractor shall cooperate with the Government to facilitate the Government to implement its own Quality Assurance Surveillance Plan (QASP).

3.3 Configuration Management.

The contractor shall develop, implement and maintain a configuration management procedure for hardware and software components, disks, tapes, documents, library system configurations, and facility configurations that at a minimum provides: 1) configuration identification (drawings and specifications), 2) configuration control, and 3) support for reviews and audits required for the programs. The contractor shall provide copies of Configuration Management Documents to the Government as requested by the COR. (CDRL A005.)

3.4 Financial Controls.

The contractor shall maintain controls to ensure compliance with all financial requirements including the requirements of Federal Acquisition Regulation (FAR) Clause 52.232-20, Limitation of Cost, and FAR Clause 52.232-22, Limitation of Funds. The contractor shall submit the requisite Funds and Man-Hour Expenditure Report. (CDRL A001.) Additionally, contractor agrees to work cordially with the COR and/or contracting officer to provide/respond to any additional, ad hoc requests regarding the financial status of the contract.

3.5 Purchasing / Inventory Control.

In the performance of this contract the contractor shall procure any needed assets in the most cost effective manner taking into account schedule and performance. The contractor shall employ procurement procedures that are consistent with all applicable federal regulations, and shall provide, implement, and maintain procurement controls to prevent fraud, waste, and abuse.

The contractor shall perform property management and administration of all GFE, government furnished property (GFP) and contractor acquired property (CAP) so that it complies with the property clauses of the contract and any other applicable regulations as directed by the COR and by the contracting officer. In particular, the contractor shall be responsible for maintaining the records of all GFE and GFP in the Global Combat Support System – Army (GCSS-Army). Unless otherwise directed by the COR, all CAP shall become Government property per direction of the COR.

3.5.1 Material.

Materials are defined as the purchase of large systems or upgrades to systems that shall be defined by the Government as funding becomes available.

3.5.2 Other Direct Cost (ODC).

ODCs include (but are not limited to) software and associated licenses and other purchases. The contractor shall acquire consumable/ODC items incidental to the operation, maintenance, and security of the SimCtr facility. The purchase of all ODC items is subject to the provisions of Section C, PWS paragraph 3.5.

3.6 Work Environment.

The contractor shall provide and maintain a safe and healthful work environment within the SimCtr facility, and shall comply with all Federal, state, DoD and Department of the Army safety laws and regulations.

3.7 Human Trafficking.

As part of the Management Plan (CDRL A002), the contractor shall submit a combating trafficking in persons (CTIP) plan which ensures that the contractor and all employees shall comply with the policy of the United States Government with respect to human trafficking and prostitution as expressed in National Security Presidential Directive (NSPD)-22. Pursuant to NSPD-22, failure to enforce this provision shall subject the contractor to debarment and suspension procedures. Contractor shall ensure that this Human Trafficking clause flows down to all subcontracts.

4.0 SECURITY AND PROTECTION OF DATA.

The contractor shall comply with the security requirements specified below, the DoD Contract Security Classification Specification (DD Form 254), and any other security requirements associated with the specific programs and/or projects supported by the SimCtr.

4.1 Security Clearance Requirements.

All contractor personnel with an assigned duty location at USASMDC, Bldg. 5220, VBC, Redstone Arsenal, Alabama, shall be a U.S. citizen and shall have a minimum of a SECRET security clearance. The contractor shall have personnel with security clearances at the appropriate level of classification required to install, train, operate, and maintain GFE encryption devices and keying materials.

The contractor shall submit completed security clearance packages within ten calendar days of identification of any increased security requirements. Security requirements are defined by the DD Form 254 (DoD Contract Security Classification Specification) and by all applicable, laws, regulations and command policies.

4.2 High Performance Computing Modernization Program

Office (HPCMPO) Security.

The contractor shall operate the HPCMP systems in compliance with HPCMO security guidelines as required and provided by the appropriate HPCMP ARC, U.S. Army, and USASMDC security regulations. HPCMP security reports shall be provided as special technical reports when requested by the Government. (CDRL A005.)

4.3 Automated Information System (AIS) Security Plans.

The contractor shall develop, incorporate, maintain, update and enforce AIS security plans to describe practices and procedures of the SimCtr in safeguarding unclassified, sensitive, and classified information while operating and maintaining classified automated information systems.

4.4 System Security Document.

The contractor shall prepare, update, implement, and maintain a System Security Document to describe the practices and procedures of the SimCtr in safeguarding classified information. The contractor shall provide the document to the Government.

(CDRL A005.)

4.5 Cryptographic Equipment.

The contractor shall protect the cryptographic equipment IAW Department of Army Pamphlet 25- 380-2, Security Procedures for Controlled Cryptographic Items.

4.6 Information Assurance.

The contractor shall provide network security IAW AR 25-2, Information Assurance, and DoD 8500.1, DoDD 8500.2, Information Assurance Implementation.

The contractor shall protect all non-classified, contractor and Government sensitive data required to be maintained in the SimCtr IAW AR 25-2, Information Assurance, and Directive 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT).

The contractor shall meet all information assurance (IA) requirements in accordance with the most current DoD 8500 series of instructions, and shall provide personnel appropriately certified to support IA functions in accordance with DoDD 8570.01.

The contractor shall meet all IA requirements in accordance with the Army Information Assurance Program (AIAP), as instructed in AR 25-2, Information Assurance. The contractor shall report the status of required IA personnel certifications in the Quarterly Progress Report. (CDRL A004.)

4.7 Antiterrorism / Operations Security.

The contractor shall comply with Government-provided Operations Security Guidelines IAW AR 530-1, Operations Security (OPSEC), for the protection of unclassified sensitive information and comply with Command OPSEC Plan.

4.7.1 AT Level I Training.

This provision/contract text is for contractor employees with an area of performance within an Army controlled installation, facility or area. All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the Contracting Officer, if a COR is not assigned, within 30 calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at the following website:

https://atlevel1.dtic.mil/at.

4.7.2 Annual Command OPSEC.

IAW AR 530-1 Operations Security, all contractor employees must complete Level I OPSEC Awareness training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter. OPSEC awareness for contractors is available at the following website: http://cdsetrain.dtic.mil/opsec/index.html.

https://atlevel1.dtic.mil/at http://cdsetrain.dtic.mil/opsec/index.html

4.7.3 Access and General Protection/Security Policy and Procedures.

This standard language text is for contractor employees with an area of performance within an Army controlled installation, facility or area. Contractor and all associated subcontractors employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DoD, Headquarters Department of the Army (HQDA) and/or local policy.

In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government shall require changes in contractor security matters or processes.

4.7.4 For Contractors requiring Common Access Card (CAC).

Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee shall be issued a CAC only if duties involve one of the following: (1) both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of six (6) months or more.

At the discretion of the sponsoring activity, an initial CAC shall be issued based on a favorable review of the Federal Bureau of Investigation (FBI) fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

4.7.5 For Contractors that do not require access to a DoD facility or installation.

Contractor and all associated subcontractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by Government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

4.7.6 AT Awareness Training for Contractor Personnel Travelling Overseas.

U.S. based contractor employees and associated subcontractor employees to make available and to receive Government provided area of responsibility (AOR) specific AT awareness training as directed by AR 525-13. Specific AOR training content is directed by the combatant commander with the unit anti-terrorism officer (ATO) being the local point of contact.

4.7.7 iWATCH Training.

This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area. The contractor and all associated subcontractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training shall be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT 30 calendar days after contract award.

4.7.8 Contractor Employees Who Require Access to Government Information Systems.

All contractor employees with access to a Government info system must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to any information systems and then annually thereafter.

4.7.9 For Contracts that require a formal OPSEC program.

The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer. This plan shall include a process to identify critical information, where it is located, who is responsible for it, how to protect it and why it needs to be protected. The contractor shall implement OPSEC measures as ordered by the commander. In addition, the contractor shall have an identified certified Level II OPSEC coordinator per AR 530-1.

4.7.10 For Contracts that require OPSEC Training.

Per AR 530-1, Operations Security, the contractor employees must complete Level I OPSEC Awareness training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter. OPSEC awareness for contractors is available at the following website:

http://cdsetrain.dtic.mil/opsec/index.html

4.7.11 For Information assurance (IA)/information technology (IT) training.

All contractor employees and associated subcontractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2 within six months of employment.

4.7.12 For information assurance (IA)/information technology (IT) certification.

Per DoD 8570.01-M, DFARS 252.239-7001 and AR 25-2, contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

4.7.13 For Contractors authorized to accompany the force.

DFARS Clause 252.225-7040, Contractor Personnel Authorized to Accompany U.S. Armed Forces Deployed Outside the United States. The clause shall be used in solicitations and contracts that authorize contractor personnel to accompany U.S. Armed Forces deployed outside the U.S. in contingency operations; humanitarian or peacekeeping operations; or other military operations or exercises, when designated by the combatant commander. The clause discusses the following AT/OPSEC related topics: required compliance with laws and regulations, pre-deployment requirements, required training (per combatant command guidance), and personnel data required.

4.7.14 For Contractors Authorized to Accompany the Force, DFARS Clause 252.225-7040, Contractor Personnel Authorized to Accompany U.S. Armed Forces Deployed Outside the United States.

The clause shall be used in solicitations and contracts that authorize contractor personnel to accompany U.S. Armed Forces deployed outside the U.S. in contingency operations; humanitarian or peacekeeping operations; or other military operations or exercises, when designated by the combatant commander.

The clause discusses the following AT/OPSEC related topics: required compliance with laws and regulations, pre-deployment requirements, required training (per combatant command guidance), and personnel data required.

http://cdsetrain.dtic.mil/opsec/index.html

4.7.15 For Contracts That Require Handling or Access to Classified Information.

Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with— (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); any revisions to DOD 5220.22-M, notice of which has been furnished to the contractor.

4.8 Delivery of Media.

The contractor shall ensure that all electronic media delivered are virus and malware free.

4.9 Disaster Recovery / System Shutdown.

Consistent with the File Backup requirements described in paragraph 2.1.2 above, the contractor shall develop/maintain, and implement as necessary, COR approved processes and procedures to recover all SimCtr systems and files in an orderly manner in the event of a complete power failure. The contractor shall provide a plan to reconstitute full or partial operational capability in the event of a disaster, natural or otherwise. The contractor shall coordinate this plan and any subsequent actions taken pursuant to this plan with the Building 5220/VBC I facility manager and with USASMDC and MDA security offices through the COR.

The contractor shall plan for the orderly shutdown of systems and retention of user data in the event of threatening weather or other threats to the SimCtr. When required, the contractor shall provide the plans to the Government. (CDRL A005.)

5.0 TRAVEL.

The principal place of performance is USASMDC, VBC (Bldg. 5220/VBC I), Redstone Arsenal, Alabama; infrequent CONUS and/or OCONUS travel is also anticipated. All required travel shall be approved in writing by the COR prior to the start of the travel. Only pre-approved travel shall be reimbursed under this contract.

Travel must be completed within the cost reimbursable amounts allowed per FAR Part 31 and its supplements, as well as Defense Contract Audit Agency (DCAA) approved Company-Implemented Policy and Procedures.

5.1 OCONUS Travel.

In the event that OCONUS travel is required, the contractor shall use and comply with the Synchronized Pre-deployment and Operational Tracker (SPOT) web-based system. All personnel performing duties in hazardous areas OCONUS shall be included in and insured with a policy covering Defense Base Act (DBA) requirements - see FAR 52.228-3, Workers Compensation Insurance (Defense Base Act). Contractor shall comply with all regulations, laws, treaties, international agreements and pre-deployment / security requirements. Contractor shall ensure that special area, country, and theater clearance is obtained for traveling personnel. Security clearance requirements are in DoDD 4500.54E, Official Temporary Duty Abroad, and DoD 4500.54E, DoD Foreign clearance guide.

5.2 Clearance Guide.

Contractor personnel are considered non-DoD personnel traveling under DoD sponsorship. All travel required under the contract shall be paid in accordance with the basic contract by reimbursement to the contractor and be consistent with the provisions of the Joint Travel Regulation.

6.0 MANPOWER REPORTING.

Contractor Manpower Report (CMR). The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the contractor shall report ALL contractor manpower (including subcontractor manpower) required for performance of this contract. The contractor is required to completely fill in all the information in the format using the following web address https://www.sam.gov/SAM/.

The required information includes: (1) Contracting Office, Contracting Officer, Contracting Officer's Technical Representative; (2) Contract number, including task and/or delivery order number; (3) Beginning and ending dates covered by reporting period; (4) Contractor name, address, phone number, e-mail address, identity of contractor employee entering data; (5) Estimated direct labor hours (including sub-contractors); (6) Estimated direct labor dollars (including sub- contractors); (7) Total payments (including sub-contractors); (8) Predominant Federal Service Code (FSC) for each sub-contractor if different); (9) Estimated data collection cost; (10) Organizational title associated with the Unit Identification Code (UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the contractor with its UIC for the purposes of reporting this information); (11) Locations where contractor and sub-contractors perform the work (specified by zip code in the United States and nearest city, country, when in an overseas location, using standardized nomenclature provided on website); (12) Presence of deployment or contingency contract language; and (13) Number of contractor and sub-contractor employees deployed in theater this reporting period (by country).

As part of its submission, the contractor shall also provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period shall be the period of performance not to exceed 12 months ending September 30 of each Government fiscal year and must be reported by 31 October of each calendar year.

Contractors shall use a direct XML data transfer to the database server or fill in the fields on the website. The XML direct transfer is a format for transferring files from a contractor's systems to the secure web site without the need for separate data entries for each required data element at the web site. The specific formats for the XML direct transfer shall be downloaded from the web site. If you need assistance or have questions about CMR, please contact the CMR Helpdesk by phone at 703-377-6199 or email contractormanpower@hqda.army.mil.

7.0 DELIVERABLES.

The contractor shall deliver all applicable reports and data in accordance with the requirements set forth herein. The contractor shall deliver all applicable data items specified in the Section J Exhibit A, Contract Data Requirements List (CDRL), DD Form 1423. The CDRLs identify each data item, the frequency of submission, and other information pertaining to data deliverables. All deliverable reports shall be provided to the Government in electronic format by e-mail. The deliverables stated in the table below are required in performance of this contract.

CDRL

Title Of Data Item

Subtitle

PWS Reference

A001 Funds And Man- Hours Expenditure Report

FMER PWS 3.4

A002 Management Plan

MNGT / QUALITY CTRL / CTIP

PLAN

PWS 3.1.2; 3.2;

3.7

A003 Contractor’s Progress, Status, And Management Report

Contractor Monthly Status Report PWS 2.0.4; 2.0.5;

2.0.6, 2.1.3

A004 Scientific And Technical Reports

QRTLY Progress Report PWS 2.0.4; 4.6

A005 Scientific And Technical Reports

Special Reports:

• Short and Long Range Plans

• Configuration Management Documentation

PWS 2.0.7;

2.0.10; 2.2; 3.3;

4.2; 4.4;

4.9 mailto:contractormanpower@hqda.army.mil

• System Security Document

• HPCMP Security Reports

• Disaster Recovery / System - Shutdown Plan

• Technology and Equipment Enhancement Recommendations Phase In/Phase Out Requirements

8.0 PERFORMANCE OBJECTIVES.

This performance-based service contract incorporates the performance objectives set forth at Appendix A. It is the contractor’s responsibility to employ the necessary resources to ensure accomplishment of these objectives. The Government’s assessment of the contractor’s performance in achieving these objectives shall utilize the standards, acceptable quality levels, surveillance methods, and performance incentives described in the Performance Requirements Summary matrix. The performance incentives shall be implemented via the Government’s annual past performance assessment conducted in accordance with FAR Part 42, as applicable.

The Government shall conduct informal interim counseling sessions with the contractor’s program manager to identify any contract performance that is not meeting the acceptable quality levels. These sessions shall be conducted at least on a quarterly basis in order to provide the contractor a fair opportunity to improve its performance level.

The contractor shall be notified, in writing, of the Government’s determination of its performance level for each performance objective including all instances where the contractor failed to meet the acceptable quality level.

APPENDIX A

PERFORMANCE REQUIREMENT SUMMARY MATRIX

Performance

Objective Performance

Standard Acceptable Quality

Level (AQL) Method of

Surveillance Performance

Incentive Technical Quality

Provide 24/7, 365 days-a-year (366 days on Leap Years) network access 100% of time

Provide 24/7 network access with less than 5% downtime

Random monitoring and routine assessment of Monthly Status Reports

Exceptional:

Performance meets or exceeds performance standard.

Very Good:

Performance exceeds AQL, but does not meet performance standard.

Satisfactory:

Performance meets AQL.

Marginal:

Performance does not meet AQL, but the contractor has implemented corrective measures that should result in AQL being met in future.

Unsatisfactory:

Performance does not meet AQL, and the contractor has not implemented

Provide level of maintenance that results in equipment availability 100% of time

Provide level of maintenance that results in equipment availability 95% of time

Random monitoring and routine assessment of Monthly Status Reports

Support customer projects/requirements with no valid user complaints

Support customer projects/requirements with no more than 2 valid user complaints per month

Random monitoring, routine assessment of Monthly Status/Quarterly Progress Reports, and assessment of verbal customer reports

Schedule Resolve 100% of facility, software, hardware, and communications problems within 24 hours of problem identification

Resolve 80% of facility, software, hardware, and communications problems within 24 hours of problem identification

Random monitoring, routine assessment of Monthly Status/Quarterly Progress Reports, and assessment of verbal customer reports

100% of deliverable reports submitted on time

95% of deliverable reports submitted on time

100% inspection of deliverable reports sufficient corrective measures that shall ensure future performance shall meet the

AQL.

Cost No cost overruns incurred

Less than 5% cost overruns incurred

100% inspection of FMERs

Management 100% GFE accountability

95% GFE

accountability

Government property audits

Maintain annual retention rate of qualified personnel at +/= 95%

Maintain annual retention rate of qualified personnel at no less than 85%

Random monitoring and annual assessment of contractor retention rates

Security and Protection of Data

No security violations or data compromises

No more than 2 security violations/ data compromises per year

Routine review of G2 security reports

All security incidents reported within 24 hours

No more than 2 security incidents reported outside of 24 hour requirement

Random monitoring

APPENDIX B

ACRONYMS/ABBREVIATIONS

ACC-RSA………………………………………......Army Contracting Command- Redstone AIAP…………………………………………………..Army Information Assurance Program AIS…………………………………………………………….Automated Information System AOR……………………………………………………………………...Area of Responsibility AQL……………………………………………………………………….Acceptable Quality Level AR…………………………………………………………………………..…Army Regulation ARC……….…………………………………………………..……Affiliated Resource Center AT………………………………………………………………………………...Anti-Terrorism ATCTS…………………………………………Army Training Certification Tracking System ATO……………………………………………………………………...Anti-Terrorism Officer

BLDG……………………………………………………………………………………Building BMDN…………………………………………………...…Ballistic Missile Defense Network

CAC.……………………………………………………………...........Common Access Card CAP…………………………………………………………….Contractor Acquired Property CDRL……………………………………………………....Contract Data Requirements List CMR…………………………………………………………….Contractor Manpower Report CONUS…………………………………………………...………..Continental United States COR…………………………………………………..….Contracting Officer Representative CTIP………………………………………………………..Combating trafficking in Persons CTRL……………………………………………………………………………………..Control

DBA…………………………………………………………………………..Defense Base Act DCAA…………………………………………………………Defense Contract Audit Agency DFARS……………..Department of Defense Federal Acquisition Regulation Supplement DoD…………………………………………………………………...Department of Defense DoDD……………………………………………………….Department of Defense Directive DREN………………………………………………Defense Research Engineering Network DSRC………………………………...…………….DoD Supercomputing Resource Center

FAR………………………………………………………..…...Federal Acquisition Regulation FBI………………………………………………………….…Federal Bureau of Investigation FMER…………………………………………...Funds and Man-Hours Expenditure Report FPCON……………………………………………………………Force Protection Condition FSC………………………………………………………………………Federal Service Code

GCSS-Army………………………………………….Global Combat Support System-Army GFE……………………………………………………….Government Furnished Equipment GFP…………………………………………………………Government Furnished Property

HQDA………………………………………………...Headquarters Department of the Army

IA………………………………………………………………………..Information Assurance IAW…………………………………………………………………………In Accordance With IT………………………………………………………………………Information Technology

HPC High Performance Computing HPCMP…………………………...High Performance Computing Modernization Program HPCMPO………………….High Performance Computing Modernization Program Office

MDA…………………………………………………………..………Missile Defense Agency MDACNET………………………………...…Missile Defense Agency Classified Network MDANET…………………………………………….…...Missile Defense Agency Network MNGT…………………………………………………………………………….Management

NACI…………………………………………………National Agency Check with Inquiries NCIC-III…………………National Crime Information Center Interstate Identification Index NSPD………………………………………………..National Security Presidential Directive

OCONUS…………………………………………………Outside Continental United States…