Attachment_1_PWS_AFCOTERS_3-2-16.docx

FA2550-15-R-8005 Attachment #1

346th Test Squadron 2 March 2016 Table of Contents

1 SCOPE

1.1 Background.

1.1.1 The 688th Cyber Wing (688 CW), 346th Test Squadron (346 TS) is the Air Force Space Command’s only cyber operational test squadron. As such, the 346 TS plans, executes, and contributes as a participating test organization in a full array of operational tests of various cyber weapons and systems including but not limited to operational assessments (OA), early operational assessments (EOA) operational utility evaluations (OUE), initial operational test and evaluations (IOT&E), tactics development and evaluation (TD&E), force development evaluations (FDE) and participates in combined operational and developmental testing as a member of combined test forces. As part of the cyber test mission, the 346 TS participates in various activities of interest to the cyber OT&E community and provides technical expertise, to the Office of the Secretary of Defense, Director of Operational Test and Evaluation (OSD/DOT&E). The 346 TS provides direct test support to the 24th Air Force (24 AF) in support of real time ops and innovation. To support the cyber test mission, the 346 TS maintains instrumented cyber ranges capable of simulating operational networks. The 346 TS is the Air Force’s only Emissions Security (EMSEC) test organization. EMSEC is commonly known as TEMPEST in other areas. These two terms are synonymous. The 346 TS also provides Unified Capabilities (UC) testing and assessments IAW the DISA UC process.

1.1.2 The combined unique capabilities support the Air Force Network Operations Architecture Integration Product Team (AIPT) and sub-councils, as well as the Combat Information Transport System (CITS) Program Management Office (PMO), the Defense Information Systems Agency (DISA), the National Security Agency (NSA), the Air Force Research Labs (AFRL), the Air Force Network Integration Center (AFNIC), the United States Strategic Command (USSTRATCOM), the Cryptologic Systems Directorate (CPSD), the office of the Secretary of Defense (OSD), Air Force Space Command (AFSPC), the 24 AF, the 624th Operations Center (624 OC), the Office of the Secretary of the Air Force (SAF/XC), headquarters, OSD/DOT&E and other agencies. These efforts require the most advanced technical network skills and capabilities to support full operational tests, operational vulnerability assessments, policy review, risk determination, and mitigation strategies for enterprise-wide recommendations. Advancing and precarious technologies such as but not limited to Voice over Internet Protocol (VoIP), Internet Protocol version 6 (IPv6), public key infrastructure (PKI), AF virtual private network (VPN), server consolidation, social networking services (SNS), and standardized desktop and server configurations (SDCs, SSCs) all require the special services of these unique skills to provide certification and accreditation (C&A) for Air Force use. The task shall encompass all the tools and services known to accomplish the test, range, UC and EMSEC missions including the operationalization of new and emerging technologies that do not currently exist. This is the frontline defense on Air Force and DoD infrastructure security.

1.2 Scope of Work. The primary objective of this Performance Work Statement (PWS) is to provide test and range engineering, security, training and administrative support for the operational testing of cyber systems. The contractor shall:

1.2.1 Provide subject matter expertise (SME) and test engineering services, to include: planning, coordination, execution, reporting and closeout of operational tests and evaluations.

1.2.2 Provide SME to review, plan, coordinate, execute, report and closeout projects and artifacts of special interests to the Air Force (AF) and joint operational test community, DOT&E, joint ranges and other Department of Defense (DoD) requesting agencies.

1.2.3 Provide SME to scope, plan, coordinate, execute, report and closeout EMSEC tested systems.

1.2.4 Provide configuration management (usage of standardized document templates, team documentation coordination, interaction with technical editors, proper e-file storage, version controls, classification and disposition, and proper work-product disposal) to EMSEC test suites and equipment.

1.2.5 Define, document, and integrate EMSEC test equipment, training and certification plans, equipment maintenance, equipment specification and application research and planning and conduct test events.

1.2.6 Configure, maintain, and reconstitute 346 TS Cyber Test and Training Range (CTTR).

1.2.7 Provide configuration management and documentation services for 346 TS ranges.

1.2.8 Provide DOT&E documentation, setup, execution, evaluation and summary services for squadron tests, assessments, evaluations, and exercises involving range equipment including connectivity with the Joint Information Operations (JIO) Range.

1.2.9 Provide security clearance coordination for range activities and synchronization with JIO Range on inter-range connectivity.

1.2.10 Maintain technical understanding of standard Air Force network architectures.

1.2.11 Provide scoping, planning, coordinating, executing, reporting, and closeout in all testing phases of computer information technologies (IT). Tasks shall include defining, documenting, and integrating procedures, training, range development, and testing for all testing efforts.

1.2.12 Provide physical security for 346 TS in accordance with the 688 CW provided training and standard operating procedures.

1.2.13 Provide test setup, execution, data capture, and range reconstitution administrative system services for the 346 TS.

1.2.14 Develop and maintain training and certification programs for test and range operations. Provide training instruction for test and range training and certification programs. The developed training and certification programs shall become Government property.

1.2.15 Provide technical editing SME for test and range operations.

1.2.16 Provide SME and test documentation preparation, range setup, execution, data capture, and range reconstitution services for technologies under UC and DoD efforts for UC implementation.

1.2.17 Provide IA and penetration testing services to test and accredit information systems and components for connection to AF and DoD networks IAW AF, DISA and DoD security requirements and policy documents.

1.2.18 Provide interoperability services to test information systems and components for connection to AF and DoD networks IAW AF, DISA and DoD UC requirements documentation.

1.3 Program Management. The contractor shall perform program management by providing and orchestrating resources, financial management, executing contract actions, monitoring performance, making recommendations for improvement, attending technical interchange meetings, and preparing and providing deliverables.

1.3.1 Task Coordination. The contractor shall provide technical integration and resource management for all test, evaluation and supporting activities. The COR and Government task leads will coordinate all activities and scheduling as required. The Contractor Program Manager (CPM) shall coordinate with the COR and obtain approval from the CO prior to incurring any travel costs. Contractor support personnel identified for travel shall provide to the CPM, travel estimates, equipment procurement issues, and resource issues that may impede mission performance. The CPM in turn, will provide updates to the COR on any issues that may adversely affect mission performance and recommend possible courses of action to mitigate problems.

1.3.2 The contractor shall coordinate with the CO, COR and contractor management staff to expedite changes and modifications, to include: realignment of funds, level of effort adjustments, and addition of in-scope effort.

1.3.3 The contractor shall provide inspectors details of a mission (process, products, program status, and records management) as part of the Government self-inspection, unit compliance inspection and staff assistance visit programs.

1.3.4 Contractor Program Manager (CPM)

1.3.4.1 The contractor shall identify in writing to the CO, the individual assigned to act as the CPM and any authorized Deputy Contractor Program Manager (DCPM). The CPM or DCPM shall have full authority to act on behalf of the contractor in all matters relating to contract performance. The CPM or DCPM shall be made available to the COR or CO within two hours of notification during normal duty hours by most efficient means available, including email, telephone, or in person.

1.3.4.2 The contractor shall provide programmatic services to oversee all contractor activities, to include: monitoring deliverable status per this contract, tracking cost and funding documents, and managing both personnel and facility security requirements.

1.3.4.3 The contractor shall NOT represent the Government for inherently governmental functions, commit Government resources, nor provide direction to other contractor organizations.

2 SPECIFIC TASKS.

2.1 Research & Development (R&D) Efforts. The contractor shall conduct R&D efforts of a solution for a system or component under test, Force Development Evaluation (FDE) efforts, aircraft emissions security, and major program efforts such as the Combat Information Transport System.

2.2 Test Coordination/Engineering Services. The contractor shall coordinate and manage all forms of test projects conducted by the 346 TS, to include tests currently in progress. The contractor shall be pro-active, interface with a myriad of personnel, coordinate with multiple organizations, recommend courses of action, and provide test coordination and planning services of multiple and differing operational test projects, exercises and range events. The contractor shall manage test projects by providing test engineering services. The contractor shall provide technical test services for assessments, OAs, OUEs, IOT&Es, FDEs, TD&E, combined Operational Test/Developmental Test (OT/DT) and other test activities assigned to the 346 TS by the 318 Cyber Operations Group (COG), 688 CW, AFSPC, or DOT&E. Test projects will be from the entire Air Force and DoD Information Operations/Network Warfare/Cyber community over a broad range of capabilities; including but not limited, to Network Warfare, Network Operations, Information Assurance, Emissions Security, Supervisory Control and Data Acquisition (SCADA), UC technology and RDT&E of new and emerging technologies including IPv6 or other emerging protocols. The functions of test coordinator and test engineer are interchangeable and shall be accomplished by the contractor, as required. In service of test screening, planning, execution, and reporting for FDE, OUEs, OAs, command-directed testing, as well as tactics and concepts validation of cyber systems, the contractor shall:

2.2.1 Evaluate legacy, current and future network protocols, including: IP and IPv6. Assess the product development and implementation of legacy, current and future network protocols. Identify issues with legacy, current and future network protocols, in an operational environment, research networks and application technologies. Explore legacy, current and future network protocols, to include, but not limited to, IP and IPv6 applications suitable for peer-to-peer communications. Provide expertise with exploitive and malicious code and logic to maintain and support hostile evaluation scenarios as necessary.

2.2.2 Test and evaluate information operations, network warfare and cyber systems to include UC and associated ranges.

2.2.3 Provide IA and interoperability test services including test development, execution, analysis and reporting in support of UC technologies.

2.2.4 Provide expertise and technical services in system and product certification and accreditation, analysis and reporting of requirements in the area of IA and Computer Network Defense (CND) for the roll-out of next-generation Internet Protocol, IPv6 or future protocols. Evaluate AF network architecture, operating systems, applications, and appliance designs within proposed solutions and identify options for countermeasures and security.

2.2.5 Support the fielding of test support requests by compiling rough order magnitudes (ROMs) or rough estimates of cost utilizing resources to draft all required documentation, develop test scenarios, range preparation, range execution, test execution, data collection, range reconstitution, and test closeout.

2.2.6 Create and support the drafting of rough orders of magnitude (ROM) including weekly reporting of expended hours on each project, and non-project hours using Government-provided processes, in support of customer reimbursable business constructs. Establish and implement test and range schedules, training programs, and allocation and utilization of test resource (people, material and facilities).

2.2.7 Develop an integrated master test schedule for all 346 TS test programs; maintain and update the integrated master test schedule on a regular basis; develop and present scheduling reports and develop and conduct squadron schedule process training. Identify risks and develop management strategies (understanding of the issues and possible remedies) as possible courses of action with measure of risk with each strategy for informed decision judgment concerning test projects and range operations.

2.2.8 Complete requirements analysis of systems under test to gather test requirements and develop test measures in order to develop a test plan.

2.2.9 Develop test measures in the form of Critical Operational Issues (COI), Operational Capabilities (OC), Measures of Effectiveness and Suitability (MOE/MOS, also known as Characteristics), and Measures of Performance (MOP).

2.2.10 Review technical documentation (user, administrator, and deployment manuals, tactics, techniques, and procedures (TTPs), policies, guidelines, and instructions), and other technical products whereby a risk determination is required to evaluate breach of security policies, test project success or failure and procedures on implementation.

2.2.11 Develop and coordinate test planning documents, test objectives, test planning briefings, test team charters, and Memorandums of Understanding/Memorandums of Agreement (MOU/MOA).

2.2.12 Prepare test watch items, deficiency reports and provide input in deficiency review boards.

2.2.13 Ensure all test planning documents comply with applicable Air Force and or DoD standards IAW AFI 99-103 Capabilities-Based Test and Evaluation, and AFSPCI 99-103, Capabilities-Based Test and Evaluation of Space And Cyberspace Systems. Test planning documents include, but are not limited to: the test plan, detailed test procedures, data management and analysis plan (DMAP), deficiency analysis report, MOU/MOAs, and 346 TS test documentation and templates.

2.2.14 Coordinate with 688 CW, 318 COG and AFSPC test activities to coordinate 346 TS test on the AFSPC Test Priority List (TPL).

2.2.15 Attend technical interchange meetings and test plan working group meetings. Meetings may be required either in person or telephonically and may occur as often as daily.

2.2.16 Perform test close-out functions and archive test documentation, data and materials.

2.2.17 Ensure the consistent application of methodologies and processes, and process efficiencies throughout the test project.

2.2.18 Provide direct coordination with test director, range and other team members for the management of test, exercise and range activities.

2.2.19 Develop Test Evaluation Strategies (TES). The TES is a Government/contractor combined approach to develop the test plan strategy to test, capture data, analyze, and report findings.

2.2.20 Develop test plans IAW strategic plans, DoD and AF guidance and policies and master plan strategies along with Government task team members. Team with Government task partner to address test plan coordination efforts, analysis of issues affecting testing activities, and appropriate documentation preparation (e.g., position papers, background papers, briefings).

2.2.21 Draft products for the aforementioned actions such as Plan of Action and Milestones (POA&M), test facility architecture plans, procedural test plans, data capture plans, summary documents, and deliver products through proper 346 TS channels.

2.2.22 Provide test project management by developing documentation, executing test scenarios, preparing briefings for approval, capturing and analyzing test data, and drafting final reports. This includes providing schedule and test financial management.

2.2.23 Develop and deliver test methodologies for each measure with the purpose of performing statistical analysis to evaluate system performance and acquire validated truth data for each measure. Test methodologies may include sample sizes and expected data distributions. Statistical analysis shall include descriptive and inferential statistics such as determining central tendencies, calculating confidence values and point estimates and conducting hypothesis analyses. Design of experiments techniques will be used when practicable.

2.2.24 Develop test concepts for the purpose of gaining leadership support of test projects and approval of the Test Support Agreement.

2.2.25 Brief applicable Squadron, Group, Wing, 24 AF and AFSPC leadership on pertinent aspects of test project.

2.2.26 Provide technical recommendations to 346 TS flight leadership and 688 CW on how the AF should conduct information operations and network security in future portal and enterprise environment.

2.2.27 Design, develop, and deliver both test approaches and tool recommendations to collect test data. Test approaches may include scenario injection, M&S, or real-world system operations.

2.2.28 Prepare final reports that support the aforementioned actions, such as Plan of Action and Milestones (POA&M), policy references cited in the determination, repercussions of decisions, and recommendations in a summary document.

2.2.29 Provide SME research, recommendations and services to incorporate new tools and technologies supporting the assessment, evaluation, and testing process using automated systems provided by the Government or by the use of manual processes.

2.2.30 Develop test tools (templates and other documentation).

2.2.31 Design, develop, and deliver analytical tools using automated systems provided by the Government or manually, to evaluate test measures based on the collected data and validated data and develop and deliver backup procedures in the event specific tests fail certain criteria (i.e., re-test in real-time at a later date with an alternate procedure).

2.2.32 Develop surveys for the system operators and maintainers. These surveys perform subjective assessments of overall system suitability. The scope of these surveys may include software suitability (maintainability, usability, supportability and compatibility), user suitability (training, human factors), and logistics suitability.

2.2.33 Travel during test planning to attend Integrated Test Team (ITT) meetings and other working groups in support of test planning.

2.2.34 Provide input to integrated product teams, test plan working groups, test teams, and joint AFSPC/24AF/67 CW/AFOTEC/688 CW/318 COG/AFMC meetings and working sessions as test process and schedule dictate SME participation.

2.2.35 Execute test activities to include OAs, OUEs, IOT&Es, FDEs, TD&Es, combined OT/DT and other test activities assigned to 346 TS.

2.2.36 Provide data collection, data analysis, survey administration, and other tasks such as test procedures revisions; provide input in test execution meetings and boards; and record meeting minutes. These meetings and boards include, but are not limited to: the Test Data Scoring Board, Joint Reliability and Maintainability Evaluation Team, Daily Hot Wash, End of Test Hot Wash and Deficiency Report Review Board. The contractor shall travel when tests or meetings are not onsite.

2.2.37 Analyze data derived from test execution and develop conclusions on the system under test (SUT).

2.2.38 Provide SME services during test discovery, planning, execution, reporting and close-out phases of EMSEC test projects. This includes drafting test plans, designing tests, executing the test, evaluating collected data, and reporting on the results in a final product.

2.2.39 Prepare detailed EMSEC test plans using 688 CW approved templates and deliver to the COR or designated Government representative no later than 14 calendar days prior to test start date. (CDRL A001)

2.2.40 Design experiments phase in, determining the requirements for conducting test events, equipment required and statistical relevance of test procedures to ensure required test measurements are taken and tests results are based on considered hypothesis and repeatable.

2.2.41 Design test procedures for the conduct of individual and group EMSEC test events by developing a test plan, determine required test equipment, make-ready the mobile assessment vehicle (MAV), prepare travel arrangements, execute, and report results in the test report.

2.2.42 Coordinate EMSEC SUT, locations, equipment, range availability, schedules, trip planning, logistics of manpower and equipment required for testing and other tasks relevant to planning EMSEC test events.

2.2.43 Conduct EMSEC testing as a test team member. Operating and making signal search, test data recordings, and measurements IAW approved test plan, under the guidance of the Test Director (TD).

2.2.44 Brief or provide expert clarification regarding test results and defend data analysis and test results to squadron, group, wing and other AF or DoD agencies.

2.2.45 Create, edit and publish EMSEC test reports. Deliver reports within 30 calendar days following test completion. (CDRL A002)

2.2.46 Provide configuration management, documentation, and integration of EMSEC test suites, tools and equipment. Configurations shall be applicable to TEMPEST testing effort.

2.2.47 The contractor shall send and receive EMSEC test equipment from Precision Measurement Equipment Laboratory (PMEL), as well as monitor the status of all equipment sent for calibration.

2.2.48 Coordinate EMSEC logistics, manpower and equipment required to successfully execute EMSEC test events.

2.2.49 Document the installation and configuration management practices and procedures to ensure continuity. Documentation shall include the architecture to include location of all major systems, network addressing schemes, and reconstitution practices and procedures. The contractor shall deliver configuration plans for individual tests to COR no later than 14 calendar days prior to start of test, or as indicated by the COR if there is not adequate notification of the test by the Government. (CDRL A003)

2.2.50 Provide test documentation, MAV setup, execution, analysis, and reconstitution services for the EMSEC test program.

2.2.51 Develop EMSEC training and certification programs.

2.2.52 Develop documentation and deliver 346 TS program advocacy materials to include briefing and position papers and training materials.

2.2.53 Provide accreditation documentation services to the Agent of the Certifying Authority (ACA) for the 346 TS for approval by AFNIC. (CDRL A004)

2.2.54 Provide concepts and develop efficiencies to improve test, range, documentation, training, and exercise support capabilities for the test and evaluation process.

2.3 Range Support. The contractor shall provide services in the development and on-going configuration, administration and maintenance of computer networks, equipment, platforms, software tools and infrastructure supporting the AFSPC CTTR. The contractor shall maintain external connectivity with other networks for exercises, training, and testing. The contractor shall provide a configuration management plan to include operations and configuration of range assets and configuration management practices and procedures to ensure continuity. Documentation shall include the network architecture to include location of all major systems, network addressing schemes, and reconstitution practices and procedures as a minimum.

2.3.1 Hardware and Software Requirements – The contractor shall maintain proficiency in the following:

2.3.1.1 Operating System (OS) installation, operation, maintenance, and system administration including but not limited to workstation and server platforms such as Microsoft (MS) Windows, UNIX, and Linux.

2.3.1.2 Network services/application installation, operation, maintenance, and system administration including but not limited to Active Directory, DNS, Web, email, FTP, DHCP, VDI and VPN services.

2.3.1.3 Keyboard/Video/Mouse (KVM) Systems installation, operation, maintenance, and administration including but not limited to Avocent and Raritan deployed solutions.

2.3.1.4 Deployment system installation, operation, maintenance, and administration, including but not limited to Altiris deployment solution and PXE boot environment using Windows and Linux-based services.

2.3.1.5 IDS/IPS Systems installation, operation, maintenance, and administration including but not limited to CISCO and Sourcefire as a minimum.

2.3.1.6 Virtual Systems installation, operation, maintenance, and administration including but not limited to Citrix XenServer, VMWare Vsphere, Hypervisor and their associated APIs.

2.3.1.7 Traffic generation system installation, operation, maintenance, and administration including but not limited to BreakingPoint, Spirent Avalanche, Lariat and other traffic generators as required.

2.3.1.8 Traffic analysis tool installation, operation, maintenance, and system administration including but not limited to Wireshark, Cascade and Snort.

2.3.1.9 Traffic capture tool installation, operation, maintenance, and system administration including but not limited to Wireshark and Cascade.

2.3.1.10 Network infrastructure installation, operation, maintenance, and administration of both physical and virtual assets including, but not limited to CISCO, HP, DELL, Juniper, Brocade, and Vyatta.

2.3.1.11 Configure multiple levels of routers, switches, and firewalls across topologies that include 10/100MB/1TB over Cat5 and Fiber, 1GB over Cat5 and Fiber, Optical Carrier (OC) 3 ATM, OC48 High-Level Data Link Control (HDLC), OC48 Packet Over SONET (POS), OC192 HDLC, T1-T3 (telecommunications carrier systems), and wireless technologies including, but not limited to, 802.11a/b/g/n.

2.3.1.12 Configuring virtual routing infrastructures using Vyatta in embedded environments to include VMWare, Citrix, and HyperV.

2.3.1.13 Firewall installation, operation, maintenance, and administration including but not limited to, McAfee, CISCO, Palo Alto and Vyatta security appliances.

2.3.1.14 Wireless and mobile commercial technology installation, operation, maintenance, and administration.

2.3.1.15 UC technologies and protocols, including but not limited to VoIP, H.323, H.225, Q.391, and SIP.

2.3.1.16 VoIP technology installation, operation, maintenance, and administration, including Call Managers, ASLAN components, session border controllers, VTC equipment and E-911.

2.3.1.17 Custom appliance installation, operation, maintenance, and administration including but not limited to BlueCoat proxy, Alteon load balancer.

2.3.1.18 Network storage systems installation, operation, maintenance, and system administration including but not limited to DELL, Nimble, NetApp, NetGear.

2.3.1.19 Scripting to automate various range activities including but not limited to PERL, Python, Ruby, TCL Windows powershell and Bash.

2.3.2 Required Tasks: The contractor shall accomplish all tasks related to the establishment and on-going configuration, administration and maintenance of computer networks, equipment, platforms, software tools and infrastructure supporting the AFSPC’s CTTR. The contractor shall:

2.3.2.1 Provide full-time (40 hrs/wk) system administration and security services to configure, operate, maintain and troubleshoot commercial ISP-based local area networks (i.e. Concept Local Area Network (CLAN) and the Exploration Local Area Network (ELAN)).

2.3.2.2 Prepare and deliver a Configuration Management Plan outlining the installation and configuration management practices and procedures to ensure continuity. Documentation shall include the network architecture to include location of all major systems, network addressing schemes, and reconstitution practices and procedures. At a minimum, plan shall include method for tracking and documenting the following: Architecture changes including wiring and connection diagrams, Implement Integrated Power Management Interface (IPMI) infrastructure, deployed hardware and software, to include type, version and associated licenses, OS fixes and patches during exercises, tests and training events. Contractor shall notify COR 6 months prior to all license expirations. The contractor shall deliver the plan NLT 30 calendar days after contract award.

2.3.2.3 Provide input in configuration management meetings, technical interchange meetings (TIM), test planning working groups (TPWG) and other meetings as needed either locally or a designated temporary duty (TDY) location.

2.3.2.4 Maintain the Air Force Gateway architectures to include Block 25 base architectures, Block 30 Gateway architectures, and Block 35 Vulnerability Lifecycle Management System (VLMS) architectures.

2.3.2.5 Provide range hardware and software documentation to designated Government personnel to include as a minimum, block diagrams, logic/network diagrams, interconnect diagrams, parts lists, software and hardware listings, rack diagrams, layout diagrams, source code, scripts etc.

2.3.2.6 Provide network Certification and Accreditation services, including creating documents, supply network diagrams and other required artifacts, and coordinating C&A package submission.

2.3.2.7 Provide technical services and coordinate with customers and test director for training, exercise and test events to include range development, operations and maintenance.

2.3.2.8 Provide training and curriculum for various range personnel and activities.

2.3.2.9 Install, configure, operate and maintain existing and future network equipment to include, but not limited to: range network infrastructure, equipment supporting UC capabilities and commercial mobile technologies, legacy, current and future network protocol technologies.

2.3.2.10 Install, configure, operate and maintain new Air Force network systems or advances in network technologies and systems.

2.3.2.11 Perform cabling installation including, but not limited to, Cat 5, Cat 6, and optical fiber, and manage cables and cabling systems.

2.3.2.12 Research recommendations for the Government’s acquisition of range equipment and provide all required supporting documentation for the purchase orders.

2.3.2.13 Perform as Primary and Alternate for the following duties: information technology (IT) equipment custodians, secure voice responsible officer, COMSEC responsible officer, CA/CRL, tool custodian, corrosion control program and electrostatic discharge program.

2.3.2.14 Accomplish vendor security patches, implement AF Computer Emergency Response Team (AFCERT) and CERT Advisories, and implement other security recommendations as required.

2.3.2.15 Develop and implement test schedules, training programs, test techniques and test resource (people, material, and facilities) allocation and utilization.

2.3.2.16 Perform system administration duties for all ranges to include:

2.3.2.16.1 Control and document the use of Internet Protocol (IP) addresses.

2.3.2.16.2 Coordinate equipment and system usage.

2.3.2.16.3 Maintain user access to range assets.

2.3.2.16.4 Add and delete user accounts.

2.3.2.16.5 Backup and restore software assets.

2.3.2.16.6 Maintain command and control applications.

2.3.2.16.7 Build and maintain range baseline.

2.3.2.16.8 Document range configuration, practices and procedures.

2.3.2.16.9 Troubleshoot and apply fix actions, when necessary.

2.3.2.17 Ensure systems are operated, maintained and disposed of IAW internal security policies and required information technology equipment custodian duties and requirements.

2.3.2.18 Ensure all users have the requisite security clearances, authorizations and need-to-know, and are aware of their security responsibilities before granting access to range assets.

2.3.2.19 Initiate protective or corrective measures when a security incident or vulnerability is discovered.

2.3.2.20 Ensure configuration management (CM) for security-relevant Internal Security (IS) software and firmware is maintained and documented.

2.3.2.21 Ensure the system recovery processes are monitored to ensure that security features and procedures are properly restored.

2.3.2.22 Ensure all IS security-related processes are monitored to ensure that security features and procedures are properly restored.

2.3.2.23 Ensure system security requirements are addressed during all phases of the system life cycle.

2.3.2.24 Follow procedures to authorize software, hardware and firmware use before implementation on the system.

2.3.2.25 Comply with applicable NOTAMs (Notice to All Airmen) received, DoD, AF Instructions and tech orders relating to range operations. See Appendix B.

2.4 Administrative Services.

2.4.1 Training and Standardization Services. The contractor shall develop, maintain and instruct the 346 TS training and certification program. The 346 TS training and certification program provides certified test directors, engineers, coordinator and range technicians to plan and execute tests and range events. (CDRL A005, A006) The contractor shall:

2.4.1.1 Develop and maintain a four-level certification program, IAW the 346 TS training plan, for test directors and engineers, test coordinators, technicians, range leads, and EMSEC test director personnel. The four-level program equates to apprentice, journeyman, expert and evaluator levels.

2.4.1.2 Develop and maintain course material including syllabi, lesson plans, briefings, instructional handouts, quizzes, in-class exercises and other material for each course module for the following: test director and engineer, test coordinator, range technician, range lead, and EMSEC test director personnel certification program.

2.4.1.3 Schedule and instruct certification training for new personnel, as well as refresher training.

2.4.1.4 Maintain certification training records of personnel undergoing certification training. Retain records and status of certifications of 346 TS personnel.

2.4.1.5 Inform squadron training officer of currency issues of personnel.

2.4.1.6 Assess trainee feedback, provide technical discussion, lessons learned from the contractor’s perspective, and evaluations of trainees performance during the certification process.

2.4.1.7 Develop Test Director and Range Technician Handbooks. Maintain currency of handbooks and distribute to squadron personnel.

2.4.1.8 Track ancillary, professional and developmental training and maintain a library of 346 TS training material.

2.4.2 Security Services. The contractor shall provide recommendations on the continuity of, and recommend courses of action to, the resolution of the security responsibilities and capabilities of the 346 TS range on the following:

2.4.2.1 Conduct Semi-annual self-inspections, updating inspection checklists and reporting inspection results to squadron and Group leadership.

2.4.2.2 Perform information security operations including TEMPEST inspections and personnel training.

2.4.2.3 Perform operations security management.

2.4.2.4 Perform industrial security management.

2.4.2.5 Maintain 346 TS security continuity book updates.

2.4.2.6 Provide security reviews of test plans, test reports, appraisals, award nominations and other test documentation and documentation requiring review.

2.4.2.7 Attend 25 AF and 688 CW quarterly security meetings.

2.4.2.8 Process proxy badge requests for physical entrance to the secure facility.

2.4.2.9 In-process and train new personnel of 688 CW, 318 COG and 346 TS on security policies and practices.

2.4.2.10 Provide Document Destruction System (DDS) management to ensure unneeded documentation is destroyed properly by DDS or by shredder.

2.4.2.11 Process visit requests for 346 TS personnel, visits to outside agencies, and visitations from other organizations (including Foreign Nationals for approval) to 346 TS secure facilities.

2.4.2.12 Process compelling need letters to allow disclosure of secure materials on a need-to-know basis.

2.4.2.13 Process requests for equipment usage within the secure facilities.

2.4.2.14 Process requests for the introduction or the removal of vendor-owned assessment support equipment.

2.4.2.15 Provide thorough sanitizing preparation, serial number validation, and documentation of identified equipment for Defense Reutilization and Marketing Office (DRMO).

2.4.2.16 Process requests for courier cards and one-time courier authorization letters.

2.4.2.17 Maintain secure facility, physical security and visitation logs.

2.4.2.18 Conduct annual audit of entry credential and proxy badges.

2.4.2.19 Maintain password and combinations of secure storage management.

2.4.2.20 Manage end-of-day security checks on SF Form 701s, and personnel scheduling.

2.4.3 Technical Editing. The contractor shall produce cyber operational test documentation. The contractor shall:

2.4.3.1 Provide technical editing SME services during test discovery, planning, execution, reporting and close out phases of 346 TS test projects. Services shall include the drafting and editing of all documents including: rough order magnitudes (ROM) cost estimates, test support agreements (TSA), 346 TS test plans, 346 TS data management analysis plans (DMAPS), test procedure documentation, test reports, advocacy materials to include briefings, pamphlets, brochures and position papers, developing templates for required future documents and editing existing technical document templates to bring them to current Air Force, AFSPC, 688 CW and 346 TS standards, and training materials along with the coordination of each item mentioned above through 346 TS processes.

2.4.3.2 Maintain the 346 TS test documentation archival library, archiving documents upon test close-outs and maintaining manual or electronic index of archive test documents and data from past projects.

2.4.3.3 Create, edit and maintain 346 TS organizational test documentation templates and template library IAW Air Force, AFSPC, 688 CW, and 346 TS standards and formats. Templates shall contain sufficient information to allow test personnel to complete the type of respective document with minimal additional formatting. (CDRL A007)

2.4.3.4 Attend test plan working groups (TPWG), or other working groups involving technical documentation development strategy.

2.4.3.5 As part of 346 TS test project teams, provide technical documentation development and editing of required 346 TS, 318th COG or 688 CW technical documentation.

2.4.3.6 Coordinate with the 346 TS Director of Operations or designated representative and the 346 TS Technical Advisor for current and future changes to technical document standards.

2.4.3.7 Provide editing in all areas to include, technical, administrative, and web-master.

2.4.4 Information Management Services. Ensure proper and efficient operations of squadron processes IAW AFI 33-364, Records Disposition-Procedures and Responsibilities; AFI 33-321, Authentication of Air Force Records; AFI33-322, Records Program Management; AFMAN 33-326, Preparing Official Communication; and AFMAN33-363, Management of Records. The contractor shall:

2.4.4.1 Maintain Command Section administrative files IAW established regulations and 688 CW, 318 COG and 346 TS file plans.

2.4.4.2 Establish, maintain, control, protect and provide disposition of records for retrieval of information and materials.

2.4.4.3 Receive and review incoming correspondence to promptly identify the appropriate action and suspense data.

2.4.4.4 Maintain current records or controls to ensure the timely completion of actions or responses.

2.4.4.5 Review files and obtain information from various sources for Command Section use in responding to inquiries.

2.4.4.6 Divert inquiries, correspondence, and request for information to appropriate technical specialists.

2.4.4.7 Receive callers and visitors, ascertaining the nature of the request and provide information that addresses all routine or procedural issues.

2.4.4.8 Consolidate and finalize information from individual tasks for test reports and final reports IAW prescribed formats, established reporting procedures and specific instructions.

2.4.4.9 Ensure information is finalized in a timely manner, meeting prescribed test schedule deadlines.

2.4.4.10 Review outgoing non-technical correspondence, documents, and forms generated by others for conformance with regulations, policies, format and assembly and initiates resolution when corrections are required.

2.4.4.11 Ensure correct format, spelling, punctuation, grammar and completeness.

2.4.4.12 Use a variety of approved software types to produce final products to include office automation (Microsoft Office) to perform basic functions as word processing, electronic mail and data updates in electronic files.

2.4.4.13 Monitor Command Section communications, to include Task Management Tool, Line of Sight taskings, phones and e-mail; distributing the requests to the appropriate personnel in order to provide time-critical responses.

3 DELIVERABLES AND DELIVERY SCHEDULE

3.1 Conference Minutes (kick-off meeting). The contractor shall conduct a kick-off meeting, at the Government Facility in San Antonio, Texas, within 15 calendar days of contract award, to ensure understanding of the requirements. The contractor may be required to conduct a kick-off meeting within 5 calendar days of task order award. The contractor shall prepare agendas for Kick-Off meetings and meeting minutes, including identification of all unresolved issues and actions. The contractor shall deliver all presentation material, providing copies to the attendees at the meetings. The contractor shall maintain a log of action items, providing the status in the meeting minutes. Meeting minutes shall be provided within 15 business days of the meeting. (CDRL A008)

3.2 Monthly Status Reports. The contractor shall prepare and deliver a Monthly Status Report to the COR and the CO. The report shall provide a narrative description of the previous month’s progress, accomplishments, and analysis for the effort of each task order. At a minimum, the report shall contain overall progress of each task order, schedule data, work progress, quality assurance, configuration management, security management, detailed progress, design decisions, and the task results completed or to be completed. (CDRL A009)

3.3 Monthly Funds and Manpower Expenditure Reports. The contractor shall prepare and deliver a funds and man-hour expenditure report to the COR and the CO. The report shall provide a narrative description of the previous month’s progress, accomplishments, and analysis for the effort of each task order. At a minimum, the report shall contain overall progress of each task order, to include: cost, schedule data, work progress, quality assurance, configuration management, security management, detailed progress, design decisions, hours expended overall, hours expended per project, non-project hours and hours remaining for each individual working on this task and the task order results completed or to be completed. Data contained, such as project hours worked, is the sole property of the Government. (CDRL A010)

3.4 Project Management Plan. The contractor shall provide the program management necessary to manage and schedule the contractor’s resources needed to execute and report on the progress of each task identified in this PWS. The contractor shall deliver the Management Plan at the contract award Kickoff Meeting. (CDRL A011)

3.5 Configuration Management Plan. The contractor shall prepare and deliver a Configuration Management Plan outlining the installation and configuration management practices and procedures to ensure continuity. Documentation shall include the network architecture to include location of all major systems, network addressing schemes, and reconstitution practices and procedures. (CDRL A003)

3.6 Test Documentation. The contractor shall provide test documentation that is appropriate to document the techniques, procedures, and tools required. Examples include ROMs, Test Support Agreements, Test Plans, Data Management Analysis Plans, Test Reports, Test Concept Briefings, Test Readiness Review Briefings and other products required for planning, executing and reporting on test projects. Additionally, the contractor shall provide range designs, to support test projects and range-only activities. The COR may provide technical direction to the contractor during each of the phases of test project or range event in accordance with the authorities delegated by the CO. (CDRL A012, A013)

3.7 Contractor Manpower Reporting. The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the AIR FORCE via a secure data collection site. The contractor is required to completely fill in all required data fields using the following web address http://www.ecmra.mil. Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the ECMRA help desk.

3.8 Task Order Professional Employee Compensation Report (PECR). The contractor shall provide a final task order PECR in accordance with CDRL A016.

3.9 The contractor shall deliver all end items specified to the COR before or on the due date. Deliverables shall meet 346 TS formats, standards and the requirements set forth in the contractual documentation. Deliverables developed and charged to this contract become the property of the Government; the contractor may not release information to other agencies or entities without written approval from the COR and CO. The following deliverables fall within the scope of this task:

DI-MISC-81459A

Test Coordinator, Range Technician, Range Lead, and

EMSEC

Certification Program As required per test schedule

Test Coordinator, Range Technician, Range Lead, and

EMSEC

Certification Training Course Material As required per test schedule

DI-ADMN-81505

4 GENERAL INFORMATION

4.1 Contract Performance Management.