FINAL_PWS_-_SIMTEX_22_Nov.docx

PERFORMANCE WORK STATEMENT

for 333d Training Squadron

Simulator Training Exercise (SIMTEX) Support at Keesler Air Force Base, Mississippi

Attachment 1 22 Nov 13 Attachment 1 22 Nov13

TABLE OF CONTENTS

Page

1. DESCRIPTION OF SERVICES AND GENERAL INFORMATION 3

2. SERVICES SUMMARY (SS) 28

3. GOVERNMENT-FURNISHED PROPERTY (GFP) AND/OR SERVICES 31

4. APPENDICES

APPENDIX C Sample SSO KEESLER SCI Addendum to DD Form 254 41

APPENDIX D AETC Form 281, Instructor Evaluation Checklist 43

APPENDIX F Specific Terms – Definitions and Acronyms Terms 46

APPENDIX G Software/Hardware List 59

PERFORMANCE WORK STATEMENT

NETWORK WARFARE OPERATIONS FORMAL TRAINING

SUPPORT SERVICES

Non-Personal Services

1. DESCRIPTION OF SERVICES AND GENERAL INFORMATION. The Contractor shall perform planning, research and development, technical analysis, maintenance, training, and instruction of Cyber Operations initial skills and advanced training courses conducted at the 333d Training Squadron (333 TRS), 81st Training Group (81 TRG), 81st Training Wing (81 TRW), Second Air Force (2 AF), Air Education and Training Command (AETC), at Keesler Air Force Base (KAFB), Mississippi (MS). These duties shall be conducted on each of the following network types: Internet Protocol (IP), Voice over IP (VoIP), Industrial Control Systems (ICS), Command and Control (C2) Systems, wireless and airborne networking technologies, and other networks or systems that provide critical operations or support services.

1.1. Specific Procedures for Which the Contractor Shall Be Responsible. Contractor shall provide the following services in support of the 333 TRS requirements:

1.1.1. Planning, Research, and Development.

1.1.1.1. In accordance with (IAW) Air Force (AF) Instructional System Development (ISD) processes and procedures, develop and implement courseware and materials used in all AF Cyber Operations training as stated in paragraph 1, which includes, but is not limited to briefings, handouts, study guides, evaluations and progress checks, exercises, instructor-training materials, and lesson plans; and create and design virtual training images, scripts and scenarios. All course material and programs developed per this contract will become the property of the United States Air Force (USAF) and shall not be released to third party organizations without written consent from the 333 TRS commander or higher Government authority.

1.1.1.2. Provide Cyber Operations subject matter expertise and support services (see paragraph 1.2.) to the 333 TRS initial skills training, development, documentation, and maintenance of all AF training courses taught by the 333 TRS.

1.1.1.3. Provide planning timeline for development, revision, administration, or instruction of Cyber Operations courseware material within Government specified timeframe. At a minimum, the timeline(s) will include milestones, additional Government furnished resources as listed in paragraph 3, if required, additional funding requirements, and limitations or constraints.

1.1.2. Training, Instruction, and Administration.

1.1.2.3. Coordinate, revise, format, and standardize Cyber Operations information and courseware from the AF, Department of Defense (DoD), other Government agencies, industry, or other sources as directed.

1.1.2.4. Schedule, coordinate, and integrate Contractor personnel, including subject matter experts (SMEs), engineers, and designers, to augment and enhance instruction for Cyber Operations courses conducted in-residence and or as a member of a MTT.

1.1.2.5. Provide and/or assist 333 TRS instructors with Cyber Operations courses in scenario development and exercise control for demonstration/task performance training.

1.1.2.6. Ensure Cyber Operations materials comply with current 81 TRG, AETC, Department of the Air Force (DAF), and DoD directives.

1.1.2.7. Assist in identifying and developing Cyber Operations courses’ instructor initial skills training requirements.

1.1.2.8. Assist in providing updates of Cyber Operations courses status to squadron leadership.

1.1.2.9. Provide support for Cyber Operations courses’ MTTs. Includes, but is not limited to: coordinating resources, scheduling classrooms, audio/visual equipment, IT, training material, etc., for all scheduled MTTs.

1.1.2.10. Develop and maintain new and existing Cyber Operations and special subject area courseware. All material shall be stored on Government-provided shared servers or Government-provided storage cabinets and shall not be removed from squadron premises without written authorization from the Government representative known as the Contracting Officer’s Representative (COR).

1.1.3. Technical Analysis and Maintenance.

1.1.3.3. Review, coordinate, and prepare responses for external directives and documents pertaining to Cyber Operations, Network Warfare Operations/Cyber Network Operations, Information Operations (IO), and AF doctrine as directed. Documents will be marked as FOUO as a minimum.

1.1.3.4. Assist in the development of standards, processes, and best practices which may be developed into AF training tasks lists (TTL); course training plans; course training standards; tactics, techniques, and procedures (TTPs); concepts of operations (CONOPS); and other instructions for IO and Cyberspace.

1.1.3.5. Contractor personnel shall travel, as required, to support Cyber Operations initial skills courses’ training efforts. The Contractor shall accomplish no travel without authorization from the COR. Travel arrangements shall be made by the Contractor and paid by the Contractor. The Government will reimburse incurred contract travel costs to the Contractor IAW Joint Travel Regulations (JTR) and Federal Travel Regulations (FTR). The Contractor may use Government-provided means of travel, such as Government-owned vehicle or rented vehicles.

1.1.4. Manage Simulator Nodes. The Simulator Training Exercises (SIMTEX) is built to mimic network enclaves (Nodes), along with the common environment enabling capabilities. Simulators can operate as a single network enclave or be interconnected to simulate the World Wide Web (WWW) and Global Information Grid (GIG) environment. This flexibility allows multiple types of configurations, from the conceptual level to matching systems used on the operational environment. This simulator configuration flexibility and integration are required to establish and support different education, training, exercise, validation, and mission rehearsal requirements. Simulator/synthetic range configurations include:

Classroom setting – Cyber simulators provide multiple identical environments. Hands-on experience and a reliable environment test academic concepts. Within the classroom setting, the simulators may be configured to support a single student, small group, or teams.

The SIMTEX consists of networks configured to provide education or training at the conceptual level or simulate actual toolsuite and network operations and security structure, associated networked user base, and appropriate simulated world entities required to complete objective scenarios. The contract shall, as requested, manage SIMTEX Nodes to include each simulator’s associated documentation, configuration management, and any required location Project Support Agreements. The Contractor shall, as required, using available resources, ensure event required SIMTEX capabilities are available, assembled, configured, and operational on schedule to meet planned education, training, validation, and exercise events.

1.1.4.1. Manage SIMTEX Wide Area Network (WAN). The Contractor shall provide as required architecture analysis/engineering to continue to define, develop, architect, and support the SIMTEX WAN. The Contractor shall provide as required new SIMTEX and SIMTEX WAN development or upgrade recommendations. Portions of the SIMTEX may reside on other WAN capabilities; for example, the Joint Forces Command (JFCOM) IO-Range or the Defense Information Systems Agency (DISA) Information Assurance (IA)-Range. In these cases, the Contractor shall provide support as required to utilize/connect SIMTEX Nodes to the other WAN capabilities coordinating with appropriate support staffs. In some cases, for example, the AF Cyberspace schoolhouse SIMTEX WAN is used as the interconnecting WAN. The Contractor shall provide, as required, the architecture analysis/engineering to support the schoolhouse interconnectivity riding over the SIMTEX WAN. Note: Specific instances of the SIMTEX WAN may require the implementation of Government-approved IA controls applied to the simulator interface (Platform Information Technology Interconnect). Personnel responsible for conducting the tasks IA controls are required to hold appropriate certification as defined in DoD 8570.01-M, Information Assurance Workforce Improvement Program, 19 Dec 05.

1.1.4.2. SIMTEX Service Training System/Simulator Architecture Development/Updates. The Contractor shall provide, as required, architecture analysis/engineering to create required simulator specifications for ongoing or possible future simulator builds, to continue the development and sustainment and features to provide realistic education, training, and exercise scenarios for the full range of Cyberspace Operations (C2, DoD Information Network Operations, Defensive Cyber Operations, and Offensive Cyber Operations). The Contractor shall provide, as required, new SIMTEX simulator development or upgrade recommendations modeled from current and future Service network and Cyberspace Operations implementation strategies and evaluating and analyzing current information technology networking infrastructure components, network security tools, and standard simulation and network practices. The Contractor shall ensure simulators designs and implementations use required/appropriate standards and protocols, thus creating simulators which are interoperable in Live Virtual Constructive (LVC) simulator/synthetic environments. The Contractor shall ensure simulators’ designs and implementations use required/appropriate standards and protocols, thus creating simulators which may be designated to validate systems and technologies that will operate on the GIG IAW Security, Interoperability, Supportability, Sustainability, and Usability (SISSU) criteria and standards.

1.1.4.3. SIMTEX Service Training System/Simulator Documentation and Configuration Management. The Contractor shall develop/maintain SIMTEX simulator architecture drawings, software listing with version numbers and licensing, WAN configuration, and developed training materials and scenarios to accurately reflect all SIMTEX Service simulator components, configuration, and training/exercise capabilities. For each SIMTEX simulator baseline, the Contractor shall maintain configuration control specifically stating the simulator’s hardware/software baseline configuration/build.

1.1.4.4. SIMTEX Service Equipment/Software Management and Equipment/Software Tracking. For all SIMTEX Service Simulator Government-owned equipment, the Contractor shall maintain configuration control specifically tracking hardware model and serial numbers, IP and MAC address if applicable, software versions, patches, licenses, and serial numbers if applicable for the purposes of positive control and managing licenses of software products. If the Service allows Contractors to assume the role/responsibility of Software Manager and/or Information Technology Equipment Custodian, the Contractor shall, if requested, perform the duties to manage and track all SIMTEX software and or equipment (Government Property) using the Government’s/Service’s Information Technology Asset Management program or Service similar program. The Contractor shall follow all local requirements associated with this duty. Note: For the AF, the Government Information Technology Asset management program is defined in Air Force Instruction (AFI) 33-112, Information Technology Hardware Asset Management, 7 Jan 11, and AFI 33-114, Software Management, 13 May 04. For definition of Government Property, refer to the Federal Acquisition Regulation (FAR).

1.1.4.5. SIMTEX Service Simulator/Hardware/Software Installation. The Contractor shall provide services to assemble, connect, and install SIMTEX Service simulator hardware and software to the SIMTEX Service simulator designed configuration. SIMTEX Service simulator installation may require travel to CONUS and OCONUS SIMTEX Service simulator locations.

1.1.4.6. SIMTEX Service Simulator Hardware/Software Baseline Administration and Configuration. The Contractor shall maintain for each designated simulator Baseline, simulator administration or support to configure automated re-baseline capabilities. As SIMTEX can purchase additional hardware/software, the Contractor shall, as requested, continue to enhance the capability to have multiple baselines and sub-baselines or snapshots such that during a training event, sub-baselines or snapshots can be captured so training events can be quickly reverted to distinct times during the training/exercise event without losing crew configurations prior to the snapshot, thus allowing the simulator to be reverted back to the captured sub-baseline or snapshot.

1.1.4.7. SIMTEX Service Simulator Site Hardware/Software Administration and Configuration Assistance. The Contractor shall, as required, provide administration and or support to on-site individuals to administer equipment/software or associated hardware platforms to ensure a SIMTEX Service Simulator baseline configuration at the start of education, training, and exercise events. During training events, the Contractor shall, as required, provide administration or support to on-site individuals to administer equipment/software or associated hardware platforms to ensure a SIMTEX Service Simulator continues to operate throughout the event. SIMTEX Service simulator administration and configuration includes positive control to be able to apply or remove software versions, patches, Security Technical Implementation Guide (STIGs), and Time Compliance Network Orders (TCNOs) relative to a known baseline. As much as possible, administration activities shall be automated and capable of being conducted by local education, training, and exercise support personnel or remotely from other SIMTEX WAN locations. Configuration and exercise execution shall be remotely managed whenever possible; however, support may require travel to SIMTEX Service simulator or remote access locations. Travel may be required to CONUS and OCONUS SIMTEX Service simulator locations.

1.1.4.8. SIMTEX Service Environment Administration and Configuration Assistance. The Contractor shall, as required, provide administration, and or support to on-site individuals to administer any equipment/software or associated hardware platforms to ensure any SIMTEX Service training and exercise environment is operational throughout the training and exercise period. The term “environment” in this case refers to the items that are not directly considered to be part of the SIMTEX and SIMTEX Service Simulator components but are necessary for the completion of the training/exercise. This usually includes, but is not limited to, SIMTEX crew workstations, SIPR and or NIPR workstations, Plain Old Telephone System (POTS) telephones, Secure Telephone Equipment (STE) telephones, presentation equipment, Schoolhouse lab integration, LAN drops to the classroom environment, etc. The assembly and configuration of these type items to complete the training environment are normally completed by local personnel. Any assistance provided shall not be a substitute for local (users: trainers, exercise coordinators, etc.) training or exercise site preparation due to poor planning to properly prepare for the training or exercise event. Any assistance provided should only be used if all SIMTEX and SIMTEX Service tasks are completed, the local unit is properly engaged, and the training or exercise will fail to meet the schedule affecting other organizations if additional assistance is not provided. Any assistance provided must be COR pre-approved.

1.1.4.9. SIMTEX Service Network Certification and Accreditation (C&A). The Contractor shall, as required, develop and maintain the accreditation package for the SIMTEX Platform Information Technology Interconnect (PITI) and SIMTEX Service Simulator nodes as applicable. Additionally C&A packages may have to be developed to connect SIMTEX nodes to other WAN capabilities; for example, the JFCOM IO-Range or the DISA IA-Range.

1.1.4.10. SIMTEX Service Simulator Support Agreements. The Contractor shall, as required, DRAFT/develop and maintain (softcopy library of) Project Support Agreements (PSA) or Memorandums of Agreement (MOA) for hosting the SIMTEX Service simulators and any required exercise support.

1.1.4.11. SIMTEX Service Simulator Management and Training Tool-Suite Development. The Contractor shall, as required, develop, maintain, and/or integrate tool-suites to automate simulator network management for the purposes of, but not limited to, simulator reconstitution, remote administration, local instructor/trainer, exercise controller usage, and interface to external data collection capabilities. The Contractor shall, as required, develop, maintain, and/or integrate simulator tools to add/enhance realism to the simulator network, to include, but are not limited to, Simulator tool development and the integration of hardware and software to include Commercial Off-the-Shelf (COTS), Government Off-the-Shelf (GOTS), and Research Lab tools to create a simulated network cloud of servers and users to emulate user’s actions, actual and/or stateful application layer traffic, and simulated/virtual users and machines using and conducting network operations, such as email, http, data transfers, and other applications to include military applications; tools to simulate additional real-world network; items to add realism to training and exercises; for example, but not limited to, news, corporate, universities, and foreign websites; tools as required to simulate/emulate military applications and standard network traffic usages. The Contractor shall, as required, develop and/or integrate tools and maintain the tool-suite to provide a library of scenario components to assist instructors, trainers, crew certifiers, and exercise controllers to provide the simulator effects to accurately portray the operational network in given training and exercise scenarios. This tool set shall include, but not be limited to, “Red” aggressor actions (attack scripts). The Contractor shall, as required, develop attack scripts or assist in the development of attack scripts for all simulator base education, training, crew certification and/or exercise, mission rehearsal, and validations. The user of these scripts will include the Contractor and non-Contractor instructors, trainers, crew certifiers, and exercise controllers. The Contractor shall develop the simulator tool-suite so that the user can formulate scenarios from available scripts and also be able to include user defined scripts. Therefore, the Contractor shall package and document all scenarios and scenario components so an instructor, trainer, crew certifier, or exercise controller can also use the scenarios or scenario components and provide training information to crews as to the scenario’s purpose, network/system actions, effects, and, as appropriate, mitigation or recovery tactics, techniques, or procedures. The required tool-suite development will use a variety of methods and integration of tools. The computer and/or scripting languages include, but are not limited to, Python, C, C++, Java, Perl, TKL, XML, Visual Basic, Batch and Commands for the Operating Systems Windows, DOS, UNIX, and Linux. Currently, the primary scripting language is perl. The current set of Hardware/Software requiring scripting to integration to form the simulator/simulations may include, but is not limited to, Lariat and IXIA Traffic Generator systems, Dell servers, Attack workstations, virtual crew workstation, virtual users, virtual servers, virtual infrastructure devices, Cisco routers, and switches. The operating systems and software the scripting may interface with and/or operate through includes, but is not limited to, Window’s OSs, Sun Solaris, RedHat Linux, VMware, Xen, Cisco products, VPNs, IDSs, Antiviruses, Firewalls, exchange, and VoIP, etc.

1.1.5. Network Architecture/System Engineering, Analysis, Validation, and Evaluations. The Contactor shall, as requested, provide Network Architecture/System Engineering, Analysis, Validation, and Evaluation reports to meet specific SIMTEX objectives. Possible subjects include standard configuration of Joint and Service Cyberspace Operations and Security equipment, assessment/usage of new information technology, network operations tools, network defense tools, and evaluation of Service specific education and training curriculums/programs.

1.1.5.1. Cyberspace Training Systems Evaluations. The Contractor shall provide, when requested, training evaluations of course curriculum for courses identified to support the Cyberspace Operations related to the usage and configuration of the Cyberspace Operator’s tool suite.

1.1.6. Event Planning, Preparation, Execution, and Reporting. One purpose of the SIMTEX Service Simulator environment is to support education, training, crew certification, exercise, and mission rehearsal events. SIMTEX Service managers shall not be the lead for all training and exercises events conducted on the SIMTEX simulators. The task description explains both lead and co-sponsor responsibilities. Training and Exercise event size can vary from a large scale National, Theater, Joint, or Service Level exercise (FLAG like) to smaller events on the scale of organized training (Schoolhouse labs, student progress checks, and crew certification evaluations). Depending upon the size, complexity, and needs of the exercise or training, the tasks, milestones, and deliverables may be tailored to the exercise or training event. The actual mix of large/small and sponsor/co-sponsorship cannot be projected at this time. In all cases, the Contractor has available as a starting/reference point the documentation produced from previous exercises. For the purposes of this document, the term “Event” refers to all SIMTEX Service usages (education, training, crew certification, exercise, mission rehearsals, etc). The term “Event” can refer to the appropriate named activity for the task. For example, “Event Planning” can refer to “Exercise Planning,” “Competition Planning,” “Training Scenario Planning,” etc. Types of events/usages of the simulators include, but are not limited to,

- Cyberspace Operations standard operating procedure testing, validation, evaluation, or training

1.1.6.1. Event Planning and Development Schedule. The Contractor shall, as required, develop and update an exercise planning and development schedule for each scheduled exercise as pertaining to the SIMTEX portion of the exercise. The schedule shall, as required, contain a high-level work breakdown structure defining the timeline of key components to keep the planning, development, and execution of the exercise on schedule. Example milestones associated with exercises include exercise concept and objectives definition, draft execution plans and scenarios, final execution plans and scenarios, participant orientation and training, start of exercise, end of exercise, exercise out-brief, analysis of data, and distribution of exercise results. Individual exercise plans and development schedules should be separable from the Master Work Plan to allow communication to outside organizations concerning status of specific exercises. If co-sponsoring, this task is the lead’s responsibility. If required, the Contractor shall provide information to assist the lead to accomplish the task as pertaining to the SIMTEX portion of the exercise.

1.1.6.2. Event Control Procedures, Handbooks, Checklists, and Forms. The Contractor shall collect necessary data/inputs from Service and exercise partners and participants to develop/update the SIMTEX exercise environment’s exercise procedures, handbooks, checklists and data collection forms, and templates as pertaining to the SIMTEX portion of the exercise. If co-sponsoring, this task is the lead’s responsibility. If required, the Contractor shall provide information to assist the lead to accomplish the task as pertaining to the SIMTEX portion of the exercise.

1.1.6.3. Event Exercise/Training Development and Implementation. The Contractor shall, as required, develop training plans, training and lesson objectives, lesson materials, to include but not limited to, hand-outs, audio/visual presentations, briefs, documents, demonstrations, etc., simulator based labs, and scenarios, to include scripted or (Range only live) “Red” aggressor activities. The Contractor shall, as required, present training material to students. The target audiences include, but are not limited to, Schoolhouse and Field Training Unit instructors local training and crew certification personnel, exercise controllers, and Cyberspace Operations crews. The focus of the training is different for each of these groups ranging from training individuals to use the simulator, present training material (train-the-trainer), experience controlling an exercise, or provide current Cyberspace Operations training to crew forces, Schoolhouse, or Field Training Unit students. All Training Materials shall be under configuration management and entered into the SIMTEX eLibrary. If co-sponsoring, this task is the Lead’s responsibility. If required and with COR approval, the Contractor shall provide any task associated with this PWS to assist in the development and integration of course materials and labs of courses utilizing the SIMTEX Service components.

1.1.6.4. Event Execution Support. Due to the nature of military exercises and the military organizations’ missions, the military/Government personnel primarily execute the exercises. During exercise execution, the Contractor shall continue to provide network engineering and exercise development support as defined in this PWS. This engineering support may be required to be on site at exercise locations, to include overseas. It is also expected that the engineering support may have to be on site a few days prior to the exercise execution to ensure the SIMTEX Service simulator(s) are configured and working at the exercise starting baseline. If co-sponsoring, same as above.

1.1.6.5. Event Documentation eLibrary and Configuration Management. For each training/exercise event, the Contractor shall maintain an electronic library of all Simulator-developed training material scenarios and reports to accurately reflect baseline used during the event and store all simulator components, configuration, and training/exercise materials for possible future use.

1.2. Capabilities. Contractor is responsible for providing individuals with subject matter expertise for the following:

1.2.1. Automatic Data Processing Skills. All Contractor personnel shall possess experience with AF-standard desktop applications.

1.2.2. Cyber Operations and Network Warfare Instructor Capabilities. Responsibilities include, but are not limited to, developing and modifying Network Warfare and Cyber Operations instructional materials (lesson plans, textbooks, and visual aids) for both in-residence courseware and non-resident on-line ADL courseware; developing evaluation and testing scenarios/devices; developing practical application training missions, mission scenarios, and mission evaluation tests/demonstrations; and ensuring that course material meets the specifications set forth by 333 TRS, 81 TRG, 81 TRW, and AETC. Instructors shall audit feedback from internal and external sources to ensure currency, consistency, and quality of course material. Instructors shall conduct academic/professional counseling to optimize student learning and provide written assessments on students’ overall performance. This position requires a minimum of an associate’s degree in a related area and 6 years of experience. A certification in a related area is highly desired.

1.2.2.1. Computer Internet Protocol (IP) Networking. Contractor shall provide instruction to Network Warfare (NW) Ops and Cyber Operations students in classroom and mission simulator environments in skills related to NW Operations activities in IP and other data networks. Contractor shall explore emerging IP technologies for integration into the NW Ops and Cyber Operations curriculum and provide subject matter expertise, as well as provide information systems security, intrusion detection, IP addressing, firewall theory, routing theory, systems architecture/construction/topology, circuit switching, packet switching, network protocol, topology, and encryption expertise to NW Ops and Cyber Operations students. This capability will have extensive experience in the management and understanding of malicious programs capable of harassing advanced computers and networks, including, but not limited to, WinNuke applications, Back Orifice, Poison Ivy, NetCat, NetBus, Sub7, Metasploit, Pro Rat, and any auditing programs or computer worms that serve to slow or stop system performance. They will have extensive experience in the use of Denial of Service (DoS) attacks (e.g., SYN flood, ICMP, and ping floods, as well as other Gray Hat/Black Hat-utilized attack methodologies).

1.2.2.2. Network & Electronic Intelligence. Contractor shall provide instruction to NW Ops and Cyber Operations students in classroom and mission simulator environments in skills related to the intelligence resources, tools, and skills available to conduct network support to the Network Warfare and Cyber Operator. Contractor shall instruct on intelligence oversight limitations for network support, NW Ops and Cyber Operations students in a classroom, and mission simulator environment in skills related to the exploitation and attack of adversary analog and digital communication systems/networks. Contractor shall provide computer hardware, application software, and operating system vulnerability analysis expertise to NW Ops and Cyber Operations students and impart knowledge of the deployment of intelligence analysis tactics, techniques, and procedures to NW Ops and Cyber Operations students.

1.2.3. Mission System and Network Support Capabilities. The following capabilities are listed for mission support personnel. The Contractor shall submit resumes only upon request for a specific capability.

1.2.3.1. Senior Systems Administration and Maintenance. Contractor duties include installing new software releases and system upgrades; evaluating, installing patches, and resolving software-related problems; performing system backups and recovery; maintaining data files; and monitoring system configuration to ensure data integrity. Contractor shall also assist with training students in the process of administering Government client and network operating systems, with a focus on client and network security. Contractor shall perform implementation, management, and maintenance of complex computing environment of mid-sized to large organizations. Duties shall also include installing, operating, and maintaining a variety of operating systems (e.g., various Microsoft Windows® versions, UNIX variants, and Linux variants) and virtualization platforms (e.g., VM Ware, Zen,) to include installation, configuration, administration, system maintenance, troubleshooting, as well as how to identify, install, and maintain system hardware. Contractor shall also assist with training students in the processes used to build, defend, and exploit an enterprise-class virtual infrastructure to enhance or decrease ability to provide centralized management across an IT environment. Abilities shall include partitioning a single server into multiple virtual machines (e.g., VM Ware, Zen, and others) and partition a single Windows® or Linux server into multiple virtual machines which run as an application on top of the operating system. Contractor shall perform Information Assurance Officer duties and comply with commercial certification mandates as directed in DoD 8570.01-M. These duties include, but are not limited to, ensuring system operation, maintenance, and disposition IAW applicable policies and directives; attending required technical and security training as outlined by the system and facility owners; managing access to automated information systems; reporting security incidents to the Information System Security Manager (ISSM); conducting periodic review of system accreditations to ensure compliance with applicable security requirements; participating in Configuration Management Board as required by the ISSM; notifying proper personnel of any changes to systems affecting security; monitoring access control to recovery procedures and media; and performing audits of security records, as required. Contractor shall complete and comply with periodic/annual training related to network or system administration as set forth by 333 TRS, 81 TRG, 81 TRW, AETC, and higher headquarters. Contractor may lead and direct the work of others, to include students and staff. A wide degree of creativity and latitude is expected. This position requires a bachelor’s degree in a related area and 4 years of experience or 10 years of experience and certification in a related area.

1.2.3.2. Junior Systems Administration and Maintenance. Contractor duties include installing new software releases and system upgrades; evaluating and installing patches; and resolving software related problems. Contractor shall perform system backups and recovery. Maintain data files and monitor system configurations to ensure data integrity. Contractor shall also assist with training students in the process of administering Government client and network operating systems, with a focus on client and network security. Perform implementation, management, and maintenance of complex computing environment of mid-sized to large organizations. Duties also include installing, operating, and maintaining a variety of operating systems (e.g., various Microsoft Windows® versions, UNIX variants, and Linux variants) and virtualization platforms (e.g., VM Ware, Zen,) to include installation, configuration, administration, system maintenance; troubleshooting; and identifying, installing, and maintaining system hardware. Perform Information Assurance Officer duties and comply with commercial certification mandates as directed in DoD 8570.01-M. These duties include, but are not limited to, ensuring system operation, maintenance, and disposition IAW applicable policies and directives; attending required technical and security training as outlined by the system and facility owners; managing access to automated information systems; reporting security incidents to the Information System Security Manager (ISSM); conducting periodic review of system accreditations to ensure compliance with applicable security requirements, participating in Configuration Management Board as required by the ISSM, notifying proper personnel of any changes to systems affecting security; monitoring access control to recovery procedures and media; and performing audits of security records, as required. Complete and comply with periodic/annual training related to network or system administration as set forth by 333 TRS, 81 TRG, 81 TRW, AETC, and higher headquarters. This position requires a bachelor’s degree in a related area or associate’s degree with 2 years of experience and certification in a related area or 4 years of experience and certification in a related area.

1.4. Approval of Course Material and Instruction. All material planned for use in the training and education of students will be approved by the Government prior to first use. All courseware materials and source materials shall be maintained in an area accessible by the Government COR for review. All instruction shall strictly follow approved Course Training Plans (CTP) and Plans of Instruction (POI) at 333 TRS. All instructional training aids, student guides, checklists, and other handouts/control documents will include only Government approved course material, unless specifically approved by the Government.

1.5. Deliverables. All deliverables shall meet professional standards and meet the requirements set forth in contract documentation. The Contractor shall be responsible for delivering all end items specified. The following items are deliverables that fall within the scope of the aforementioned tasks and all other stated deliverables (see paragraphs 1 through 1.2.).

1.5.2. Soft Copy Course Material. The Contractor shall provide soft copy of completed course materials, to include references used IAW formats defined by 333 TRS. The following are examples (but not all inclusive) of required course materials: lesson plans, course syllabi, outlines and plans of instruction, lecture presentations, mission scenarios, instructor notes and slides, student training materials, instructor guides, formal measurement devices, progress checks, handouts, exercise materials, training guides, critique forms, schedules, trend analysis, tailored training packets, and classification markings.

1.5.3. Hard Copy Course Material. The Contractor shall maintain adequate copies of complete, current, and accurate course materials, to include references used with section 1.5.2. above in a Government-provided storage area for review by the Contractor and the Government. All hard copy course material shall be marked with the appropriate classification as determined by content originator, content developer, 333 TRS, 81 TRW/SSO, or other designated Government authority for information on classification markings. The Contractor shall update the hard copy reference files on a weekly basis, and all copies shall be current before the commencement of a class. All reference files used in the Cyber Operations course shall be coordinated with and approved by 333 TRS/TDE (Training Development Element) prior to implementation.

1.5.4. Soft Copy Support Summary. The Contractor shall provide soft copy of mission support services summarizing activities accomplished. The following are examples (but not all inclusive) of mission support activities: create/manage user account, configuration control, configure hardware, system baseline, install software, design exercise, operate training simulator, repair fiber optic cables, troubleshoot network connectivity problem, develop technical solution, manage user rights and permissions, and test hands-on training exercises.

1.5.5. Hard Copy Support Summary. The Contractor shall provide adequate copies of completed mission support requests to include references used with section 1.5.4. above shall be maintained in a Government-provided storage area for review by the Contractor and the Government. All hard copy course material shall be marked with the appropriate classification as determined by content originator, content developer, 333 TRS, 81 TRW/SSO, or other designated Government authority for information on classification markings. The Contractor shall update the hard copy reference files on a weekly basis, and all copies shall be current before the first day of each month. All reference files used in the Cyber Operations mission support must be coordinated with and approved by 333 TRS COR prior to implementation.

1.5.6. Reports. The Contractor shall provide, at a minimum, two types of reports: progress reports and trip summary reports as necessary to the COR. The following reports are required:

1.5.6.1. Monthly Status Report (MSR). The Program Manager shall submit a MSR to the COR no later than the 15th of every month. The MSRs shall be compiled, reviewed, and submitted by the Program Manager with a cover letter which summarizes the activities and significant events occurring during the preceding month. The report shall include:

1.5.6.2. Weekly Activity Reports (WAR). The Contractor shall provide a WAR to the COR no later than 1600 hours (4:00 p.m.) each Monday at the 333 TRS. The WAR shall contain status of all current tasks, timeline milestones status, and comments as required.

1.5.6.3. Trip Reports. Trip reports shall be completed following each official trip within 5 business days upon return. Trip reports shall include, but shall not be limited to:

1.5.7. Delivery Instructions. Deliverables shall be submitted soft copy and be compatible with AF-standard desktop applications.

1.5.8. Project Management Plan. The Contractor shall provide a project management plan within 20 working days after contract award that reports the method and approach to completing the tasks required by this PWS.