DRAFT PWS Harris LMR Sustainment FY20.pdf

PERFORMANCE WORK STATEMENT (PWS)

Land Mobile Radio (LMR) Maintenance For the Directorate of Information Management (DOIM)

At Letterkenny Army Depot (LEAD)

1.0 General

1.1 Scope: The contractor shall provide all personnel, equipment, tools, materials, supervision, quality control and other items and non-personal services necessary to perform Land Mobile Radio Maintenance as defined in this PWS, except as specified in Section 3.0 as Government Furnished Property or Services. The contractor shall perform to the standards in this contract.

1.2 Background: This contract is for the maintenance of existing Land Mobile Radios used on LEAD.

1.3 Period of Performance (PoP): The Period of Performance shall be one (1) Base Year of 12 months with two (2) option years. The Period of Performance reads as follows:

1.3.1 Base Year: 18 Apr 2020 to 17 Apr 2021

1.3.1 Option Year 1: 18 Apr 2021 to 17 Apr 2022

1.3.1 Option Year 2: 18 Apr 2022 to 17 Apr 2023

1.4 General Information

1.4.1 Recognized Holidays: The following are recognized US Federal holidays. The Contractor shall perform maintenance on these days when required:

1.4.1.1 New Year’s Day: January 1st

1.4.1.2 Martin Luther King, Jr.’s Birthday: Third Monday in January

1.4.1.3 President’s Day: Third Monday in February

1.4.1.4 Memorial Day: Last Monday in May

1.4.1.5 Independence Day: July 4th

1.4.1.6 Labor Day: First Monday in September

1.4.1.7 Columbus Day: Second Monday in October

1.4.1.8 Veteran’s Day: November 11th

1.4.1.9 Thanksgiving Day Fourth Thursday in November

1.4.1.10 Christmas Day: December 25th

1.4.2 Place and Performance of Services: The Contractor shall provide services 7:00 a.m. to 3:30 p.m. Monday through Friday excluding holidays, except when the Government facility/installation is closed due to local or national emergencies, administrative closings, or similar Government-directed facility/installation closings. The Contractor shall at all times maintain an adequate work force for the uninterrupted performance of all tasks defined within this PWS when the Government facility/installation is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the work force are essential.

1.4.3 Security Requirements: The Contractor and all associated sub-Contractor’s employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by Government representative). The Contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, or Security Office.

Contractor workforce shall comply with all personal identity verification requirements as directed by DOD, HQDA, and/or local policy. Should the Force Protection Condition (FPCON) change, the Government may require changes in Contractor security matters or processes.

1.4.3.1 Physical Security: The Contractor shall safeguard all Government property provided for Contractor use. At the close of each work period/day, Government facilities, equipment and materials shall be secured.

1.4.3.2 Access to a DoD Facility or Installation (no CAC): Contractor and all associated subcontractor personnel shall comply with adjudication standards and processes using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (Army Directive 2014-05/Army Regulation 190-13), applicable installation, facility, area and Commander access and local security policies and procedures (provided by Government representative), or at Outside the Continental Unites States locations, in accordance with status of forces agreements and other theater regulations.

1.4.3.3 AT Level 1 Awareness Training: All Contractor employees, to included subcontractor employees, requiring access to Army Installations, facilities, and controlled access areas shall complete AT Level 1 awareness training within 30 calendar days after contract start date and within 30 calendar days of new employees commencing performance. The Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 15 calendar days after completion of training. AT level 1 awareness training can be found on the Letterkenny Army Depot homepage – www.lead.army.mil.

1.4.3.4 iWATCH Training: The Contractor and all associated subcontractor employees with an area of performance within an Army-controlled installation, facilities, or area shall brief all employees on the local iWATCH program. This local developed training shall be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR or KO. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance. The Contractor shall report completion for each affected Contractor employee and subcontractor employee, to the COR or to the KO, if a COR is not assigned, within 15 calendar days after completion of training.

iWATCH training is available through the Letterkenny Army Depot website at http://www.lead.army.mil/iwatch.html.

1.4.3.5 Information Assurance Training: All Contractor employees and associated subcontractor employees shall complete the DoD Information Assurance Awareness Training (Cyber Awareness Challenge) before issuance of network access and annually thereafter. All Contractor employees working IA/IT functions shall comply with DoD and Army training requirements in DoDD 8140.01, DoDD 8570.01-M and AR 25-2 within six months of appointment to IA/IT functions.

1.4.3.6 OPSEC Training: Per AR 530-1, the contractor employees must complete Level I OPSEC Awareness training. New employees must be trained with 30 calendar days of their reporting for duty and annually thereafter.

1.4.3.7 Remote Access: Remote access into the Letterkenny Army Depot Network from employee-owned information systems (EOISs) for remote management activities is not authorized per AR 25-2 para. 4-31(g).

1.4.3.8 Information Technology Requirements: The Contractor shall provide maintenance, product license, upgrades, updates and patches for the software. The Contractor shall ensure software changes do not negatively impact the security posture of the environment, prior to maintenance, the deployment of upgrades, updates and patches.

1.4.3.8.1 DoD Approved Hardware/Software: The Contractor shall meet specified entrance criteria prior to hardware / software being deployed on the Government network. The hardware must be DoD approved through either Defense Information System Agency (DISA) Unified Capabilities Approved Products List (UC APL), Federal Information Processing Standards (FIPS) 140-2, NSA Crypto, National Information Assurance Partnership (NIAP) Common Criteria Evaluation and Validation Scheme (CCEVS), or Common Criteria.

1.4.3.8.2 Certificate of Network Worthiness (CoN): The Contractor shall ensure that all provided software has an approved Certificate of Network Worthiness (CoN) and a sustainment plan. This shall include periodic software upgrades, updates, firmware releases and patches when necessary in order to maintain DoD certification standards.

This condition must be met for the term of the contract in order to maintain the aforementioned DoD standards.

1.4.3.8.3 Software Permissions Restrictions: All supplied software must be capable of operating in a multi-user environment and data which contains permissions information shall be hidden from view and inaccessible to those with less than administrator level access. Shared accounts shall not be used, and users shall only be authorized the minimum security rights to operate the application software. Users will not have access to system or software configuration items (e.g., Control Panel, software and hardware installation). Under no circumstances will the intended end user log in using the Administrator or Root account for routine operation of the equipment. The use of these accounts will be restricted to only administrative activities which will be carried out by LEAD Information Technology personnel.

1.4.3.8.4 Government Operating Systems: The Contractor shall ensure that all application software is fully functional when residing on the latest Department of Defense (DoD) mandated version of operating system used by the Government. If applicable, the system’s OS must be Microsoft Windows 10, Windows Server 2012R2, Red Hat Linux v7.X or Red Hat Linux v6.X. Any OS supplied with the system must contain all service packs, updated patches, and hot fixes. All patching and fixes will be current as of a predefined date agreed upon by the vendor and the Government.

1.4.3.8.5 Security Technical Implementation Guides (STIGs): Defense Information System Agency (DISA) STIGs are configuration standards for the Department of Defense and contain technical guidance to lock down information systems and software applications that might otherwise be vulnerable to malicious attacks. The Contractor shall be responsible for ensuring all appropriate STIGs are implemented and their software runs acceptably while secure.

1.4.3.8.6 Army Golden Master: The Contractor shall ensure their software functions as intended when installed on top of the AGM. If necessary, LEAD will supply the Contractor with a copy of the AGM.

1.4.3.8.7 User Acceptance Testing (UAT): LEAD Cyber Security Personnel will have the ability to conduct validation testing with approved security tools prior to equipment being introduced to the shop floor. This testing will also satisfy any UAT requirements.

A UAT Plan will be furnished prior to testing and all equipment documentation will be made available for review during the test. If discrepancies are discovered the Contractor shall remediate identified issues prior to Government acceptance.

1.4.3.8.8 End of Life Requirements: Hardware and/or software that has reached end-of-life will be removed from the Government network. The Contractor shall provide the Government with a plan of action no later than 1 year prior to end-of-life that addresses any requirements of a new version of hardware or software needed to continue operations. This could involve submission of a new CoN.

1.4.3.9 Acceptable User Policy (AUP): Contractors performing work on an Information System that is part of the Letterkenny Army Depot Network shall be required to sign and comply with the Letterkenny Army Depot AUP prior to performing work and annually for the duration of the contract.

1.4.4 Special Qualifications: The Contractor shall have experience in the evaluation, repair and test of the Hardware and Software described in this PWS.

1.4.5 Contract Manager (CM): The Contractor shall provide a CM who shall ensure performance under this contract. The name of this person, and an alternate who shall act for the Contractor when the CM is absent, shall be designated in writing to the Contracting Officer. The CM or alternate shall have full authority to act for the Contractor on all contract matters relating to daily operation of this contract.

1.4.6 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones and working in other situations where their Contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. The Contractor shall also ensure that all documents or reports produced by Contractor personnel are suitably marked as Contractor products or that Contractor participation is appropriately disclosed.

2.0 Definitions and Acronyms

2.1 Definitions

2.1.1 Contracting Officer (KO). A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

2.1.2 Contractor. A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

2.1.3 Contracting Officer's Representative (COR). An employee of the U.S.

Government designated by the KO to monitor Contractor performance. Such appointment shall be in writing and shall state the scope of authority and limitations.

This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4 Defective Service. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5 Deliverable. Anything that can be physically delivered and includes non-manufactured things such as meeting minutes or reports.

2.1.6 Information Assurance (IA). A unified approach to protect unclassified, sensitive, or classified information stored, processed, accessed, or transmitted by Information Systems, established to consolidate and focus Army efforts in securing that information, including its associated systems and resources, to increase the level of trust of this information and the originating source.

2.1.7 Performance Work Statement (PWS): The PWS is the description of what the Government intends to buy, regardless of the outcome of the cost comparison. The PWS is a method for identifying what we require and for the Contractor to tell us how they will meet those requirements. The Government’s Most Efficient Organization

(MEO) and related costs and Contractor technical and cost proposals are all based on the PWS.

2.1.8 Quality Assurance. The Government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.9 Quality Assurance Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of Contractor performance.

2.1.10 Quality Control. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.11 Subcontractor. One that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subcontractor.

2.1.12 Work Day. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.13 Work Week. Monday through Friday, unless specified otherwise.

2.2 Acronyms:

AFARS Army Federal Acquisition Regulation Supplement AGM Army Golden Master AR Army Regulation ATO Antiterrorism Officer CFR Code of Federal Regulations CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTS Commercial-Off-the-Shelf DA Department of the Army DD250 Department of Defense Form 250 (Receiving Report) DD254 Department of Defense Form 254 (Contract Security Classification Specification) DFARS Defense Federal Acquisition Regulation Supplement DOD Department of Defense FAR Federal Acquisition Regulation KO Contracting Officer OCI Organizational Conflict of Interest POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QC Quality Control TE Technical Exhibit

3.0 Government Furnished Property, Equipment and Services:

3.1 General: The Government shall provide:

3.1.1 Facilities: The Government shall furnish the necessary workspace for the contractor staff to provide the support outlined in this PWS.

3.1.2 Utilities: All utilities in the facility shall be available for the contactor’s use in the performance of duties outlined in this PWS.

3.1.3 Equipment/Hardware: None

3.1.4 Software/Firmware: LEAD shall provide the software updates and patches.

4.0 Contractor Furnished Property, Equipment/Hardware, Software/Firmware and Services:

4.1.1 Equipment/Hardware: The Contractor shall supply all the equipment and hardware required to maintain the LMR System. A separate CLIN shall be included to cover items such as batteries and parts.

4.1.2 Software/Firmware: None

4.1.3 Except for those items specifically stated to be Government-Furnished in Section

3.0 above, the contractor shall furnish everything required to perform these installations and maintenance for the life of this contract.

5.0 The contractor shall:

5.0.1 Respond to service calls placed by the Contracting Officer Representative (COR) or Authorized Government Official (AGO) within four (4) hours to evaluate or repair the Software and/or Hardware for a minor issue. A minor issue is one that only affects several users and is not a possible life threating incident. In the case of a major issue the response time shall be within one (1) hour. A major issue is one that affects more than a few users or is a possible life threating incident.

5.0.2 Repair or replace all equipment and hardware required to maintain the LMR System within four (4) business days for a minor issue or one (1) business day if a major issue.

5.0.3 Perform all software and firmware updates and patches required to maintain the LMR System within 30 business days of release. See paragraph 3.1.4.

5.0.4 Installation and De-installation of mobile radio systems. To include labor and normal install parts which include: Wire loom, electrical connectors and up to 20ft of power hook up wire. Other required parts would be invoiced accordingly.

5.0.5 All replacement equipment and hardware shall be shipped overnight at no additional cost to the government.

5.0.6 Provide a service call memo after each maintenance call within five (5) business days. The service call memo shall include in detail the corrective actions to the equipment or software being repaired. Please note, a maintenance memo is not the invoice but a description of what was done to include any equipment or hardware replacement and repairs.

6.0 CONTRACTOR MANPOWER REPORTING (CMR): The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the Contractor shall report ALL Contractor manpower (including subcontractor manpower) required for performance of this contract. The Contractor shall completely fill in all the information in the format using the following web address https://www.ecmra.mil. The required information includes: (1) Contracting Office, KO, Contracting Officer’s Technical Representative (COTR) or also known as the Contracting Officer’s Representative (COR); (2) Contract number, including task and delivery order number; (3) Beginning and ending dates covered by reporting period; (4) Contractor's name, address, phone number, e-mail address, identity of Contractor employee entering data; (5) Estimated direct labor hours (including subcontractors); (6) Estimated direct labor dollars paid this reporting period (including subcontractors); (7) Total payments (including subcontractors); (8) Predominant Federal Service Code (FSC) reflecting services provided by Contractor (and separate predominant FSC for each subcontractor if different); (9) Estimated data collection cost; (10) Organizational title associated with the Unit Identification Code (UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the Contractor with its UIC for the purposes of reporting this information); (11) Locations where Contractor and subcontractors perform the work (specified by zip code in the United States and nearest city, country, when in an overseas location, using standardized nomenclature provided on website); (12) Presence of deployment or contingency contract language; and (13) Number of Contractor and subcontractor employees deployed in theater this reporting period (by country). As part of its submission, the Contractor shall provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period shall be the period of performance not to exceed 12 months ending September 30 of each Government fiscal year and must be reported by 31 October of each calendar year. Contractors may use a direct XML data transfer to the database server or fill in the fields on the website. The XML direct transfer is a format for transferring files from a Contractor’s system to the secure website without the need for separate data entries for each required data element at the website. The specific formats for the XML direct transfer may be downloaded from the website.

TECHNICAL EXHIBIT 1

Performance Requirements Summary

This Performance Requirements Summary includes performance standards. The Government will use these standards to determine Contractor performance and shall compare Contractor performance to the Acceptable Quality Level (AQL).

PWS

Paragraph

Performance Objective

Standard Performance Threshold (Minimum

Acceptable Level (AQL))

Method of Surveillance / Performed By

5.1 Software License, Upgrades, Service Packs and Patches

When available 100% Customer Feedback

5.2 Telephone Support Four (4) hours 100% Customer

Feedback

5.3 Emergency Onsite

Maintenance

Two (2) days 100% Customer Feedback

5.4 Onsite Maintenance Three (3) days 90% Customer

Feedback

5.5 Preventive

Maintenance

Two (2) weeks 90% Customer Feedback

5.6 Hardware Updates Two (2) weeks 90% Customer

Feedback

5.7 New User Training Four (4) weeks 100% Customer

Feedback

5.8 Maintenance Memo Five (5) work

days

90% Customer Feedback

TECHNICAL EXHIBIT 2

Deliverables Schedule

Deliverable Frequency

Numbe r of

Copies Medium / Format Submit To

6.0 - CMR Annually N/A

Electroni c

Submissi on https://www.ecmr a.mil