Draft RFP SST OTD001 - 12-10-2020.doc

SECTION B - SUPPLIES OR SERVICES AND PRICES/COSTS

B.1 General

The Contractor shall provide, in accordance with issued Task Orders (TOs), all management, supervision, labor, facilities, and materials necessary to perform the services on an Indefinite-Delivery-Indefinite-Quantity basis. Task Orders may be Labor Hour (LH), Time and Materials (T&M) or Firm Fixed Price (FFP).

B.2 Base and Option Periods

The term of this indefinite delivery indefinite quantity (IDIQ) contract is a one-year base period and four one-year option periods. Task orders may be issued at any time during the one-year base period or during any one of the four one-year option periods of the IDIQ.

B.3

MINIMUM GUARANTEE

The Government guarantees a minimum of $250,000.00 . In addition, the Government is not obligated to issue any future Task Orders over the minimum guarantee. The Government reserves the right to not award the first Task Order at the time of Contract Award.

B.4

CONTRACT CEILING

This contract will have a ceiling amount of $200,000,000.00. TSA may issue task orders for services up to $200,000,000.00, but Not To Exceed (NTE) this amount.

B.5 Contract Pricing

See Attachment XX for the price proposal worksheets. These worksheets are required to be submitted as the price proposal and identify all price elements requirements for the potential period of performance. See Section L and M for additional instruction on submitting a price proposal.

B.5.1.1 Firm Fixed Price (FFP) type Task Orders

For FFP type task orders, the quantity of each item or labor category ordered will be multiplied against the rate(s) listed in Attachment 1 “Firm Fixed Price” Tab Labor Rate Table and the cumulative extended total of all items ordered will define the lump sum fixed price for the TO. Travel costs will be in accordance with the Federal Travel Regulations (FTR), if applicable, and may be estimated for each TO and will be funded on a NTE basis. Travel shall remain separate from the total fixed price for labor. Other Direct Costs (ODC’s) shall include all other direct costs to include any other non-labor related cost specified by the Government. Travel and ODC’s shall remain separate from the labor and will be funded on a Not-to-Exceed (NTE) basis.

B.5.1.2 Time & Material (T&M)/Labor Hour (LH) Type Task Orders For T&M/LH type orders, the fully loaded hourly labor rates as identified in Attachment XX will be multiplied by the level of effort proposed and deemed adequate to the requirement to equal the total price for the labor portion of the Task Order. The fully-loaded hourly labor rates are the ceiling rates representing the maximum rates allowable. The fully-burdened labor rates include all direct, indirect, general and administrative costs, and profit associated with providing the required skill. Travel costs will be in accordance with the Federal Travel Regulations (FTR), if applicable, and may be estimated for each TO. Other Direct Costs (ODC’s) shall include all other direct costs to include any other non-labor related cost specified by the Government. Travel and ODC’s shall remain separate from the labor and will be funded on a Not-to-Exceed (NTE) basis.

SECTION C – PERFORMANCE WORK STATEMENT

C.1 General

The primary goal of this acquisition is to establish a Single Award Indefinite Delivery Indefinite Quantity (IDIQ) contract vehicle available for use by all Transportation Security Administration (TSA) offices to assist with the training and engagement of the TSA workforce. The resulting contract will be collectively referred to as Specialized Security Training (SST) 4.0.

C.2 Objective

These task orders will provide TSA with a full array of training and training-related support services needed to accomplish TSA’s evolving mission. This Statement of Work (SOW) defines comprehensive high-level training support required under this vehicle, including curriculum development and delivery, Threat Mitigation Engineering and Imaging (TME&I), program management, integration, and logistics.

Specific requirements will be further identified and defined at the task order (TO) level.

C.3 Background

The Aviation and Transportation Security Act (ATSA, Public Law 107-71) requires TSA to develop, implement, and manage training programs for its transportation security workforce. TSA’s security workforce primarily consists of Transportation Security Officers (TSOs), but also includes Inspectors, Explosives Experts, Federal Flight Deck Officers, and others.

P.L. 107-71 also mandates that TSOs employed as security screeners may not use any security screening device or equipment in the scope of their employment unless they have been trained on that device or equipment and have successfully passed all required assessments for certification or recertification. Additionally, TSOs must be proficient in using the most up-to-date technology and in recognizing new threats and weapons, including dual-use items that appear harmless but may be used as weapons.

TSA is required to provide initial and recurring training and assessments to more than 45,000 security officers based on the standard operating procedures and screening equipment used at the passenger and baggage checkpoints. To comprehensively support all security workforce personnel, TSA specialized security training may entail firearms and law enforcement training.

To ensure that TSA complies with ATSA and other established training requirements, the contractor shall:

· Provide TSA with various training methodologies for TSOs, inspectors, and other security workforce members

· Provide initial and recurring specialized security training to the security workforce in support of the mission to protect our Nation’s transportation systems

· Satisfy new security training needs related to emerging technologies, including those related to new threats and weapons, in a timely manner

· Develop and deliver curricula, training tools and materials, and courseware for TSA personnel C.4 Scope

TSA’s continued evolution of screening practices requires training content to be flexible and modifiable. Two examples of this evolution are emerging threats and security technology advancement. In addition, frequent Standard Operation Procedure (SOP) changes require continuous updates to training. SST 4.0 must be flexible enough to keep pace with an evolving threat environment. The contract vehicle must also accommodate diverse student populations, incorporate new screening tools, techniques, and procedures, and provide additional training that may become necessary to support effective security operations across additional modes of transportation.

The contractor shall furnish the full range of solutions and services necessary to meet requirements of this contract and individual TOs in support of TSA’s training requirements. All solutions and services must meet applicable Federal Acquisition Regulation (FAR), and Department of Homeland Security (DHS) and TSA policies, standards, and procedures (e.g., enterprise architecture, information assurance, and personnel, physical, and system security).

The Government anticipates most training solutions and services required to be represented under core functions, but the core functions are not intended to be all-inclusive of the required solutions/services. The Government may require services and/or solutions based on the TSA’s evolving mission. Task Orders may require services across all the core functions, or within a single function, as determined by the Government.

The contractor will be required to support a diverse workforce across all TSA offices, both in the Continental US and US Territories (CONUS) and Outside the Continental US (OCONUS).

C.4.1 Curriculum Development

The contractor shall provide development and maintenance of basic, advanced, and recurrent technical and general training. The training enables the TSA workforce to perform their duties in executing the agency’s counterterrorism mission in the commercial aviation domain, conduct training in procedures and technologies required for proper execution of defined SOPs, and provide cost savings and best practices for curriculum development (e.g., usage of simulation, cloud systems, and e-learning classes)

a. Curriculum Analysis, Design, Development, and Maintenance

The contractor shall analyze, design, and develop a curriculum that utilizes and incorporates the appropriate SOPs based upon industry best practices related to emerging training methodologies and technology. Training methodologies should also foster high performance and increase participant motivation. The contractor shall utilize industry standards for curriculum development, which allows for the application of various proven models based on the specific requirements of the project. Final training products should educate target audiences in the appropriate knowledge, skills, and abilities required for role proficiency and career growth. This may also require the creation of new courses and revisions to existing courses.

Potential revisions to products and/or courses may be driven by changes to existing policies and/or procedures which may include, but are not limited to:

· Standard Operating Procedure (SOP) changes

· Policy changes

· Emerging threats

· New screening technology/equipment insertions and changes

· Training methodology changes

· Performance assessment results

· Integration of digital images

· Incorporation of Cognitive Enhancement strategies

· Lessons learned Additionally, TSA may have a need to employ a blended training model between general and technical training, such as firearms and law enforcement training. The contractor must be able to support this type of effort when applicable. The use of a blended approach will be determined at the task order level.

Curriculum Analysis, Design, and Development may include, but are not limited to, the following training methods/strategies:

· Instructor-led

· Web-Based Training (WBT)

· Computer-Based Training (CBT)

· Video

· Facilitation/Coaching

· Practical Skills Demonstrations

· On-the-Job Training (OJT)

· Commercial Off-the-Shelf (COTS)

· Government Off-the-Shelf (GOTS)

· Shadow/Co-Teach

· Train-the-Trainer (T3)

· Job Aids/Kits and Images

· Security Training Kits and Boards

· Simulation

· Other innovative training methodologies (e.g., mobile learning/m-Learning, social media)

· Pilots and/or Operational Tryouts

· Virtual Instructor-Led The contractor shall maintain and catalog all SST training curricula to ensure that the program curriculum is current and accurate through periodic evaluations. Any deficiency noted as a result of an evaluation or surveillance may require an integrated change to the affected curriculum or training. In addition, the TSA may require hosting of all information, courses, and materials related to these services on its learning management and content management systems. The contractor shall plan, design, develop, and deliver recommendations to establish TSA competency-driven curriculum priorities. The recommendations shall be comprehensively incorporated throughout the service deliverables.

TSA may also require the following capabilities:

· Blended WBT and ILT

· Gaming

· Information Technology (IT) computing environments with graphic support and associated curriculum development

· Instructional Methodology/Design Expertise

· “Train-the-trainer” expert instructors leading pilots and training development along with SME support for Instructional Assistants

· Responsive design to increase accessibility of training to a larger audience of users via desktop and mobile applications

b. Curriculum Delivery/Instruction

The contractor shall provide instructors new and/or updated course materials and training necessary to acquire the knowledge, skills, and ability required to deliver courses to the TSA security workforce utilizing industry best practices that incorporate emerging training methodologies and technologies.

c. Evaluation of Curriculum

The contractor shall follow industry-standard evaluation models to allow for critical assessments of curriculum effectiveness (e.g., the Kirkpatrick Four-Level Evaluation Model, which measures learner reaction, post-course vs. pre-course learning, behavior change, and training results). The contractor may also utilize an industry-standard instructional system design framework, such as the Analysis, Design, Development, Implementation, and Evaluation (ADDIE) model. Results of the evaluation shall be integrated into the analysis, design, development, and delivery of curriculum.

d. Distributed Learning/Communications Network Support

The contractor shall provide distributed learning where instructional models will allow instructors, students, and content to be in different locations so that instruction and learning can occur independent of time and place. The distributed learning model can be used in combination with traditional classroom-based courses, with traditional distance learning courses, or it can be used to create wholly virtual classrooms.

C.4.2 Threat Mitigation

The contractor shall provide development and delivery of technical training on emerging and next generation screening technologies (including three-dimensional imaging). TME&I encompasses, but is not limited to, the development and delivery of training kits, physical training aids, and specialized materials to enhance the TSA workforce’s general and technical skillsets and abilities to identify threat items. Threat items include, but are not limited to, weapons and Improvised Explosive Devices (IEDs) and components. TME&I additionally includes providing easily scalable, robust simulator platform(s) for existing and future technology, as well as identifying and deploying technology solutions for image simulation and capture.

a. Training Aid Development and Maintenance

The contractor shall provide analytical, technical, operational, diagnostic, and program management for various screening equipment with imaging capabilities. The contractor shall maintain, or develop, flexible training that encompasses all current and future deployed scanners for training purposes. Current and future deployed scanners include, but are not limited to, Advanced Technology (AT) and Computed Tomography (CT) scanners from various vendors. The contractor shall develop, manufacture and deliver threat training kits and training aids to assist in the identification of prohibited items, explosives, and other deadly or dangerous articles. Examples of training kits include, but are not limited to, Bomb Kits, IED Kits, Metal Detector Kits, Generic Weapons Kits, and Advanced Imaging Technology Kits.

The contractor shall provide training aid development and maintenance supporting the following areas:

· Curriculum Analysis, Design, Development, Delivery/Instruction, and Maintenance

· Simulation Software

· Image Development & Image Library

· Threat Training Kits

· Weapons Training Kit

· Modular Bomb Training Kit

· Modular Bomb Set Training Kit

· TSWG Explosives Simulant Training Kit

· Liquid Explosives Training Kit

· Practical Skill Evaluation Test Kit

· Improvised Explosives Device Display Board

· Simulated x-ray images for future capabilities

· Rapid response capability for new and emerging threats

· Facility access capable of producing/supporting above requirements

· Testing/certification

C.4.3 Federal Flight Deck Officer (FFDO)

The contractor shall support the FFDO Program in the areas of project management, Government Furnished Equipment, Information and Property, planning & scheduling, data management, logistics, and technical assistance in the areas of initial training, firearms re-qualification, and recurrent training.

Title XIV of the Homeland Security Act of 2002, known as the Arming Pilots Against Terrorism Act or APATA, requires the Under Secretary of Transportation for Security (Administrator, TSA) to establish a program to train, equip, and deputize eligible volunteer pilots of commercial passenger air carriers as Federal law enforcement officers, to be known as Federal Flight Deck Officers (FFDOs), for the purpose of defending the flight decks of aircraft against acts of criminal violence and air piracy. The subsequent enactment of the Vision 100 – Century of Aviation Reauthorization Act in December 2003 expanded eligibility for the FFDO program to pilots of all-cargo aircraft, flight engineers, and navigators.

APATA requires FFDOs to re-qualify to carry their firearm at an interval that is determined by the TSA Administrator. Procedural requirements established for the program pursuant to APATA also mandate that FFDOs shall successfully complete a program of recurrent training that includes instruction in firearms proficiency, use-of-force, judgmental pistol shooting, weapon retention, and other selected topics.

C.4.4 Image Testing Program Assessments (Human Capital)

The contractor shall support the TSA Human Capital office in the areas of project management, planning & scheduling, data management, image capture & classification, pilot design & delivery, logistics, proctoring, and technical assistance in support of image testing program assessments administered to Transportation Security Officers (TSO) for initial certification and mandated annual certification requirements.

C.4.5 Program

The contractor shall provide comprehensive program management support to ensure efficiencies and integration across all task orders as well as timely logistical support for training classes, shipping of training aids and materials, and facility management. GOTS and COTS solutions are preferred.

a. Program Operations and Logistical Support:

The contractor shall provide an integrated approach to effectively support nation-wide program operations and logistics as it relates to the comprehensive TSA training program, such as:

· Planning

· Scheduling

· Personnel Deployment

· Data Management and Reporting

· Logistics

· Call Center and Customer Service Activities and Tools to assist with general training-related questions

· Property Distribution, Storage, Maintenance, Purchase and Management, and Asset Lifecycle in accordance with all applicable regulations (FAR/DHS/TSA/DEP/etc.) and related requirements; to ensure the performance of physical accountability, property, internal controls, inventory and financial management functions to support agency missions and comply with laws and regulations, the contractor shall have an inventory management system that provides TSA real time visibility of the location and status of all Government-Furnished Equipment (GFE) and adheres to the applicable FAR, OMB Circular A-127, Joint Financial Management Improvement Program (JFMIP) Inventory, Property Management Systems Requirements, Property Management Requirements, and Information Technology Standards issued by the TSA, DHS, and Federal government

· Government-Furnished Equipment/Government-Furnished Property (GFE/GFP) will be managed and maintained in accordance with applicable regulations (FAR/DHS/TSA/DEP/etc.)

· Transition Services

· The contractor is required to report, and/or support the consolidated reporting of, the operational elements of the SST contract, including the completion of required standard government forms

· All assets and asset activities shall be tracked and reported under the base contract

· The contractor shall design, develop, and coordinate all property and asset management, operations, and supports across all task orders, unless otherwise directed; this includes the consistent and reoccurring costs associated with the facility itself and safeguarding GFE and Sensitive Security Information (SSI) material for the Office of Training and Development(OTD). The contractor shall provide a single point of contact (POC) to interface with the Property Administrator, Technical Monitor, and other associate contractors. The contractor shall ensure that logistical reliability and controls for shipments are reflected via the dependability of the providers and the development of a resilient distribution network able to deliver required support when promised. When, and as appropriate, the contractor shall execute and/or coordinate reliability, availability, and maintainability of assets;

· The contractor shall ensure that all data be managed and maintained using the contractor’s integrated and automated data management system, ensuring the traceability of assets and record of chain of custody for assets; All government equipment and property assigned to the contractor shall be managed within the contractor property system to include warehousing support, shipping and receiving services; however, spare kits and those assigned to entities not within the control of the contractor shall be managed in the TSA Sunflower system and the contractor property system to include assets outlined in the contract and/or task order

· The configuration of any Transportation Security Equipment (TSE) systems shall be the same as fielded units operating at the TSA specification for U.S. airports unless otherwise directed by the Government; should a deviation (Request for Deviation [RFD]) to configuration be required, the contractor shall submit the request to the Government for approval

· The contractor may be required to purchase equipment if GFE is not available - this may include equipment of a sensitive nature; TSA Contracting Officer approval will be required, and a separate modification will be issued for these purchases. All contractor acquired equipment subsequently becomes GFE as defined by the terms of the contract

· Supply Chain Risk Management

· U.S. critical infrastructure relies on Information and Communications Technology (ICT)—defined by the National Institute of Standards and Technology as “the capture, storage, retrieval, processing, display, representation, presentation, organization, management, security, transfer, and interchange of data and information”—for daily operations and functionality. The Design, Development and Production, Distribution, Acquisition and Deployment, Maintenance, and Disposal phases of the ICT supply chain are susceptible to the malicious or inadvertent introduction of vulnerabilities such as malicious software and hardware; counterfeit components; and poor product designs, manufacturing processes, and maintenance procedures.

The cyber threat from foreign adversaries, hackers, and criminals presents significant and new risks to government and industry. Constant, targeted, and well-funded attacks by malicious actors threaten government and industry alike by way of their contractors, sub-contractors, and suppliers at all tiers of the supply chain. Sophisticated threat actors exploit vulnerabilities deep in the ICT supply chain as a beachhead from which they can gain access to sensitive and proprietary information further along the chain.

Exploitation of ICT supply chain vulnerabilities can lead to: system reliability issues, data theft and manipulation, malware dissemination, and persistent unauthorized access within networks.

C.4.6 Emerging Technologies and Innovation

The contractor shall provide and develop cutting edge solutions to stay ahead of future threats. To achieve this goal, the contractor shall present innovative approaches and emerging technologies/solutions to the Contracting Officer (CO)/Contracting Officer Representative (COR)/Technical Monitors (TM) at Quarterly Program Management Reviews (PMR).

C.5 Contract Reporting and Deliverables

C.5.1 Monthly Status Reports

The contractor shall prepare and submit monthly status reports reflecting the status, progress, potential schedule impacts and cost of activities and project expenditures by project/task to the CO/COR/TMs, by the fifteenth (15th) calendar day following the end of each month. If there was no contract activity, the monthly report shall state “No Activity.” Reporting separate TO support/services shall be clearly stated.

a. Monthly Financial Summary Report

The Monthly Financial Summary Report (MFSR) shall detail all financial information contract-wide, and on each task order, by calendar month.

The MFSR shall include a section to identify contract information, including:

· Contract number, Task Order Numbers, and modification number(s), if any;

· Reporting period;

· Contract period of performance start and end date;

· Brief contract description; and

· Unless otherwise specified in the TO, shall be due five (5) days after month end

The MFSR shall include a section reflecting actual monthly/cumulative expenditures, staffing utilization (labor hours and cost), other direct costs (ODCs), and travel services for the reporting period, as follows:

· A breakout of funds expended on Task Orders (TOs) shall be included in this information including cumulative total funds provided to date by program and/or TO and a detail of actual monthly/cumulative expenditures and funds remaining to date by program and/or TO, inclusive of current period charges;

· The contractor shall detail the cost expenditures on a per project/task basis broken down by work breakdown structure (WBS), reflecting current and cumulative labor hour costs, ODCs and travel expended, for each TO. When a project/task is submitted, the contractor shall provide an initial cost estimate of expenditures at completion (EAC). The monthly report shall include a variance (%) comparison to the current actual, EAC and actual cumulative expenditures per project, rolled up to the TO level;

· The contractor shall provide a Resource Utilization calculation (%) comparing the total resources expended per project to the total estimated resources required per project using the WBS for all project tasks including Firm Fixed Price (FFP) and Time & Materials (T&M). Total resources include Labor hours, ODCs and Travel;

· The contractor shall be required to support consolidated labor hour, travel and cost reporting of each project across TOs of the Base contract, including TOs where support is provided by associate contractors;

· For each contractor/subcontract employee, identify the name, labor category/skill level, regular and overtime hours worked per WBS element for each project or task on a TO, during the current period. Include cumulative regular and overtime hours worked; total negotiated hours and hours remaining during the contract performance period; hourly rates; current period extended costs; and percent (%) remaining, in accordance with FAR and the contractor’s accounting methodology. The negotiated hours and cost data shall accurately reflect the current negotiated value of the contract, as modified;

· Staffing levels, number of arrivals, departures, vacancies, and issues;

· The contractor shall include an organizational chart of all contractors/subcontractors with names, labor category names, and labor category numbers;

· Description of any travel or unique services provided;

· Commitments costs, broken-down by subcontractor;

· Any miscellaneous remarks or explanations needed to support or justify financial information; and

· Any differences between hours worked by subcontractors and hours invoiced due to accounting lag times shall be reflected in the remarks section.

b. Monthly Technical Summary Report (MTSR)

The Monthly Technical Summary Report (MTSR) shall summarize work accomplished (to align with activity based-cost reporting) during the reporting period reflecting the status of technical services on each TO by project or task under the TO, to include:

· A summary of status and completion of significant events/milestones by project or task;

· Deliverables submitted, or progress achieved on deliverables;

· The contractor shall provide detailed Plan of Action and Milestone (POA&M) updates by work breakdown structure (WBS), reflecting current and cumulative milestone progress per project, and/or other specific taskings on a per TO basis. The contractor shall identify an industry standard development process, for example, Analysis, Design, Development, Implementation, and Evaluation (ADDIE) model ADDIE model phase to which each WBS element pertains. Schedule report shall provide an initial baseline schedule estimate, as well as variance comparison (%) current and estimate at completion (EAC). The report shall provide project progress, rolled up to the TO level;

· A summary of activity planned for the next reporting period; include current or anticipated problem areas, estimate of any effects on subsequent steps/milestones, actions taken to resolve, or corrective action recommendations;

· MTSRs shall report all tasks in a SOW including Travel and Trouble Tickets;

· Other relevant information, as necessary to convey program status; quality assurance; and/or quality control information;

· The contractor shall be required to provide a project management plan and an integrated master schedule for all tasks and projects that fall under and across TOs, including TOs where support is provided by associate contractors;

· Technical Exchange Meeting (TEM) – The contractor shall be required to attend and report TO –wide TEMs monthly with the Government and/or other associate contractors. TO specific TEM requirements will be detailed at the TO level; and

· Unless otherwise specified in the TO, shall be due five (5) days after month end.

c. Program Management Review (PMR)

The contractor shall be required to attend and report contract-wide PMRs with the Government and/or other associate contractors, quarterly basis, to be held in the National Capital Region. TO-specific PMR requirements will be detailed at the TO level.

d. Asset and Property Reports

The contractor shall produce the following reports for TSA:

· GFE / GFP Disposal and Maintenance Report to the TSA Property Administrator, and Technical Monitor on the last business day of the calendar quarter for the period of performance (PoP), upon significant recalls of assets from the field, and within thirty (30) days of termination of contract. This report shall identify all GFE / GFP maintenance actions accomplished, any asset proposed for excess, decommissioning, and/or damaged beyond economical repair equipment;

· GFE / GFI / GFP Inventory and Equipment Report(s) to the TSA COR, Property Administrator, and Technical Monitor within thirty (30) days following award, on the last business day of the calendar monthly and within fifteen (15) days of termination of contract;

This report shall detail: (1) GFE / GFP current location that is stored at the contractor, (2) detail GFE that is experiencing abnormal failure rates or reaching the end of its life cycle and provide recommendations on steps that could be taken to mitigate failures, (3) replacement of damaged equipment, (4) life-cycle refurbishment/replacement of equipment, (5) report deltas between contractor and Sunflower database, and when appropriate, (6) results from contractor and Property Administrator’s inventories, audits, and reviews;

· Hardware and Software Configuration Report for all electronics shall be reported the last business day of the calendar quarter for the period of performance to the TSA COR and Property Administrator;

· Asset Lifecycle Plans, Support, and Maintenance Reports to the TSA COR, Property Administrator, and Technical Monitor the first business day of the calendar quarter for the PoP and within ninety (90) days of termination of contract about Government excess of GFE, to include but limited to:

· Reviewing life-cycle support elements for all GFE and determine timelines for replacement and upgrade of equipment;

· Tracking common key performance measures (KPMs), such as asset utilization rate, maintenance cost, and performance reliability; and

· Recommend updates to supply chain processes based on actuals using methods such as Lean, Six Sigma results or balancing logistics support through thorough review of readiness degraders, maintenance data, and maintenance and support process implementation, as appropriate.

· Provide a Consolidated History of All SST Report of Surveys (ROS) and Serious Incident Reports (SIR) to the TSA COR and Property Administrator within 30 days following acceptance of award, the first business day of the calendar semi-annually for the PoP and within 120 days of termination of contract; and

· Provide reports in response to Data Calls on Assets from TSA Office of Finance, Property Management Division, and/or other TSA COR and Property Administrator, upon request.

C.5.2 Place of Performance

Work shall be performed primarily off-site. Contractor performance may be required at TSA headquarters or other designated location on an as-needed basis, to be determined at the task order level.

C.5.3 Task Order Specific Requirements

a. Deliverables TO required deliverables will be detailed at the TO level. The deliverable due dates, recipient(s), deliverable format, and other relevant information will be specified in the TO SOW. For performance-based tasks, performance metrics will be identified at the TO level.

Examples of TO specific deliverables may include, but are not limited to the following:

· Work Break Down Structure (WBS)

· Briefings

· Final Reports

· Interim Reports

· Monthly Cost Performance Reports

· Monthly Progress/Status Report

· Program/Project Schedule

· Curriculum Development Cost Estimate Tool

· Quality Assurance Plan

· Technical Exchange Meetings (TEMs)

· Quarterly Program Management Reviews (QPMRs)

· Risk Management Plan

· Staffing Plan

· Transition Plan

· Weekly Status Report

· Property Records

· Inventory Report

· Help Desk Call Log

· Customer Service Field Support Log

· Site Readiness Report

· Safety Plans

· Designs, blue prints, images and schematics

· Contractor process and Standard Operating Procedures, technical records/notes

· Image files

· Software upgrades

· Supplier libraries

· Chemical formula and synthesis processes

· Software licenses listings

· Supply Chain Risk Management Plan

b. Government Furnished Resources and Information

GFE and GFI will be detailed at the TO level. Personnel shall be responsible for the physical security of their area and GFE issued to the contractor under the terms of the contract.

Examples of TO specific GFE/GFI may include, but are not limited to the following:

· Facilities space

· Utilization of TSA owned licenses

· Access to the TSA Intranet and related software tools

· Access to Transportation Security Equipment (TSE)

· Hardware (laptop, desktop, thumb drives, hard drives)

· Standard Operation Procedures (SOPs)

· Course Curriculum Materials and Templates C.5.4 Transition

The contractor shall deliver a final Transition Plan within thirty (30) calendar days of award that addresses the following:

· How services will be transitioned from the current service provider addressing the general issues, risks, timetables and levels of resource commitments required for a successful transition;

· The technical, administrative, and financial aspects for assuring a smooth, seamless, and transparent continuity of operations;

· The priorities and timelines for the transitioning of specific services based on a logical sequence of service implementation;

· Identify transition risks, describe mitigation strategies, and describe how these risks as well as new risks identified during transition will be managed;

· Staffing approach and ramp up;

· Describe transition communication plan identifying methods and types of communication to key stakeholders;

· The contractor shall provide a plan for the intake, management and transmittal of Personal Identifiable Information (PII) including grade records, student IDs, etc. (Family Educational TO specific requirements, such as security requirements and Government-furnished material, will be outlined at the TO level;

· Transition In

· The contractor shall develop and implement the detailed transition strategies and processes needed to enable an efficient transfer of products and services from the incumbent service provider to the level of service required under this SOW without disruption to ongoing contract support levels;

· The contractor shall develop and implement detailed transition strategies and processes needed to maintain continuity of operations and quality of service during the transition-in period;

· The contractor shall implement and manage the activities necessary to transition service from the existing service provider(s) with no breaks in current service levels and no delays in support for new and ongoing projects;

· The Transition Plan shall include the schedule and milestones that indicate how the contractor plans to migrate all existing services from the current provider(s) and add new services, while minimizing operational and project impacts. The Transition Plan shall include project start up and staffing ramp up approach, a mobilization schedule, and a schedule of critical events and milestones that are to commence upon award. The Transition Plan shall include the plans for migrating assets, data, and services. The contractor shall incorporate termination dates of existing contractor performance periods and TSA/DHS planned major project dates. For planning purposes, the overall transition period shall not exceed three months. Transition of operational capabilities is to be completed within ninety (90) calendar days;

· The contractor shall provide the ability to recruit, assign, and manage the staff and resources in a quick and efficient manner to meet the transition requirements, schedule, and milestones;

· The contractor shall ensure that all necessary personnel actions, appropriate training (including any required certifications), and domain knowledge transfer are accomplished in accordance with the accepted Transition Plan. The contractor shall also address non-personnel considerations, such as materials and supplies, equipment, facilities, sub-contracts, leases, environmental issues, safety and security, etc. in the implementation of the Transition Plan, and

· The contractor shall identify an implementation strategy and perform critical tasks needed to obtain employee security clearances in the most expeditious manner possible during the transition period.

· Transition Out

· The contractor shall develop a Transition Out Plan that describes a transition-out strategy, and identifies transition data and information, systems, components, documentation, functionality, services, service dependencies, service interfaces, risks, transition work activities, schedule, staffing down approach, knowledge transfer, and any other information that needs to be considered to ensure a smooth transition;

· The contractor shall deliver the Transition Out Plan within thirty (30) calendar days from the TSA request;

· The contractor shall provide an inventory of all operational, engineering, procedural, educational, and any other documentation and presentations produced as part of delivering SST services;

· The contractor shall continue to fulfill the current contractual requirement(s) and continue all current work in progress until the successor contractor assumes full operational responsibility;

· The contractor shall not destroy, delete, or otherwise dispose of any files or data upon expiration or termination of the [contract/order], without prior permission from the COR;

· The contractor shall permit the successor contractor (and the successor contractor’s employees) to observe and become familiar with all operations specified in this [contract/order] for a minimum of thirty (30) calendar days, or for a COR specified timeframe, prior to the expiration or termination of the existing contract/TO;

· The contractor shall fully cooperate with the successor contractor and the Government during transition out so as not to interfere with their work or duties;

· The contractor shall fully support all TSA requests for information and data required to ensure a seamless transition of services to a new contractor, and

· The contractor shall deliver to the TSA electronic copies of all TSA data and information stored in contractor’s systems in the format requested by TSA within fifteen (15) business days from the TSA request. This must be received in an encrypted database. At the end of the contract, the contractor shall transition information collected or used during the performance period including computer files and databases in Microsoft and Adobe applications.

C.5.5 Supply Chain Risk Management Plan (SCRMP)

The contractor shall submit a SCRMP detailing processes and mitigation steps to protect against the compromise of supplies provided in support of this contract. The plan shall clearly state what processes and procedures are utilized to determine the trustworthiness of all subcontractors, at all tiers, while also addressing what measures and mitigation strategies are taken if a breach has been detected. If there are any changes to the plan, the contractor shall provide an updated plan within thirty (30) days of the change.

For more information, the contractor can contact the Cybersecurity and Infrastructure Security Agency (CISA), an operational component within DHS.

C.6 Compliances

C.6.1 Section 508 Requirements Section 508 of the Rehabilitation Act, as amended by the Workforce Investment Act of 1998 (P.L. 105-220) (codified at 29 U.S.C. § 794d) requires that when Federal agencies develop, procure, maintain, or use information and communications technology (ICT), it shall be accessible to people with disabilities. Federal employees and members of the public with disabilities must be afforded access to and use of information and data comparable to that of Federal employees and members of the public without disabilities.

a) All products, platforms and services delivered as part of this work statement that, by definition, are deemed ICT or that contain ICT shall conform to the revised regulatory implementation of Section 508 Standards, which are located at 36 C.F.R. § 1194.1 & Apps. A, C & D, and available at https://www.gpo.gov/fdsys/pkg/CFR-2017-title36-vol3/pdf/CFR-2017-title36-vol3-part1194.pdf. In the revised regulation, ICT replaced the term electronic and information technology (EIT) used in the original 508 standards.

Item that contains Information and Communications Technology (ICT): Specialized Security Training 4.0 Applicable Exception: N/A Authorization #: N/A

Applicable Functional Performance Criteria: All functional performance criteria in Chapter 3 apply to when using an alternative design or technology that results to achieve substantially equivalent or greater accessibility and usability by individuals with disabilities than would be provided by conformance to one or more of the requirements in Chapters 4 and 5 of the Revised 508 Standards, or when Chapters 4 or 5 do not address one or more functions of ICT.

Applicable 508 requirements for electronic content features and components (including Internet and Intranet website; Electronic documents; Electronic forms; Electronic document templates; Electronic emergency notifications; Electronic surveys; Electronic reports; Electronic training materials; Multi-media (video/audio); Interactive maps): All requirements in E205 apply, including all WCAG Level AA Success Criteria Apply

Applicable 508 requirements for software features and components (including Web, desktop, server, mobile client applications; Electronic content and software authoring tools and platforms; Software infrastructure; Service Offerings): All requirements in Chapter 5 apply, including all WCAG Level AA Success Criteria, 502 Interoperability with Assistive Technology, 503 Application, 504 Authoring Tools

Applicable 508 requirements for hardware features and components: Does not apply

Applicable 508 requirements for support services and documentation: All requirements in Chapter 6 apply

b) When providing installation, configuration or integration services for ICT, the contractor shall not reduce the original ICT item’s level of Section 508 conformance prior to the services being performed.

c) When providing maintenance upgrades, substitutions, and replacements to ICT, the contractor shall not reduce the original ICT’s level of Section 508 conformance prior to upgrade, substitution or replacement. The agency reserves the right to request an Accessibility Conformance Report (ACR) for proposed substitutions and replacements prior to acceptance. The ACR should be created using the on the Voluntary Product Accessibility Template Version 2.2 508 (or later). The template can be located at https://www.itic.org/policy/accessibility/vpat

d) When developing or modifying ICT for the government, the contractor shall ensure the ICT fully conforms to the applicable Section 508 Standards. When modifying a commercially available or government-owned ICT, the contractor shall not reduce the original ICT Item’s level of Section 508 conformance.

e) When developing or modifying web and software ICT, the contractor shall demonstrate Section 508 conformance by providing Section 508 test results based on the versions of the DHS Trusted Tester Methodology currently approved for use, as defined at https://www.dhs.gov/508-testing. The contractor shall use testers who are certified by DHS on how to use the DHS Trusted Tester Methodology (e.g. “DHS Certified Trusted Testers”) to conduct accessibility testing. Information on how testers can become certified is located at https://www.dhs.gov/trusted-tester.

f) When developing or modifying ICT that are delivered in an electronic Microsoft Office or Adobe PDF format, the contractor shall demonstrate conformance by providing Section 508 test results based on the Accessible Electronic Documents – Community of Practice (AED COP) Harmonized Testing Guidance at https://www.dhs.gov/508-testing.

g) When developing or modifying software that generates electronic content (e.g., an authoring tool that is used to create html pages, reports, surveys, charts, dashboards, etc.), the contractor shall ensure software can be used to create electronic content that conforms to the Section 508 standards.

h) Contractor personnel shall possess the knowledge, skills and abilities necessary to address the applicable revised Section 508 Standards for each ICT.

i) Exceptions for this work statement have been determined by DHS and only the exceptions described herein may be applied. Any request for additional exceptions shall be sent to the Contracting Officer and a determination will be made according to DHS Directive 139-05, Office of Accessible Systems and Technology, dated November 12, 2018 and DHS Instruction 139-05-001, Managing the Accessible Systems and Technology Program, dated November 20, 2018.

C.6.2 Information Assurance Requirements for TSA Government Acquisitions (April 2016)

a) General Security Requirements

· The Contractor shall comply with all Federal, Department of Homeland Security (DHS) and Transportation Security Administration (TSA) security and privacy guidelines in effect at the time of the award of the contract, as well as those requirements that may be discretely added during the contract.

· The Contractor shall perform periodic reviews to ensure compliance with all information security and privacy requirements.

· The Contractor shall comply with all DHS and TSA security controls to ensure that the Government's security requirements are met. These controls are described in DHS PD 4300A and TSA MD 1400 series security policy documents and are based on the current National Institute of Standards and Technology (NIST) Special Publication (SP) 800-53 standards.

· The Contractor shall include this guidance in all subcontracts at any tier where the subcontractor is performing the work defined in this statement of work (SOW).

· The Contractor shall ensure all staff have the required level of security clearance commensurate with the sensitivity of the information being accessed, stored, processed, transmitted or otherwise handled by the System or required to perform the work stipulated by the contract. At a minimum, all Contractor staff shall be subjected to a Public Trust background check and be granted a Public Trust clearance before access to the System or other TSA resources is granted.

· The Contractor shall sign a DHS Non-Disclosure Agreement (NDA) within (30) calendar days of the contract start date.

· The Contractor shall not release, publish, or disclose agency information to unauthorized personnel, and shall protect such information in accordance with the provisions of the pertinent laws and regulations governing the confidentiality of sensitive information.

· The Contractor shall ensure that its staff follow all policies…