Tech_Educational_Consultant_PWS_7SEP16.docx

Attachment 1 7 September 2016

PERFORMANCE WORK STATEMENT (PWS)

CYBER TECHNICAL EDUCATION CONSULTANT

333D TRAINING SQUADRON (333 TRS)

KEESLER AIR FORCE BASE, BILOXI, MISSISSIPPI

Non-Personal Services

1. DESCRIPTION OF SERVICES. The Contractor shall provide all personnel, supervision and other items and services necessary to perform Cyber Technical Education Consultant duties as defined in this Performance Work Statement (PWS). The Contractor shall provide comprehensive technical education advisement and recommendations for course design and content for five officer, enlisted, and joint/combined cyber operations courses to achieve:

1.1. Standardization and consistency among common training elements across all courses. Maintain original training standard proficiency codes for each course.

1.2. Improvements in training and training resource efficiency and effectiveness.

1.3. Consistent, cross-course training narrative in a Joint Operations Planning Process (JOPP) or “Road to War” theme transitioning from strategic JOPP style planning to tactical cyber mission planning.

1.4. Analysis and design of the courses for efficient use of stand-alone computer training network mimicking multiple operational Air Force domains.

1.5. The contractor shall design the individual objectives, units and blocks of instruction for each of the five courses. They will also design the courses so that they share similar content where possible, and are synchronized and scheduled to allow for the most efficient use of training resources. Details of student production, available classrooms and other resources will be provided in the “Other Training and Course Information” paragraphs provided upon contract award.

1.5.1. Existing Courses: Undergraduate Cyberspace Training (UCT) Phase 1, UCT Phase 2, UCT Phase 3, Cyber Warfare Operations Apprentice Course (CWO).

1.5.2. New Course: UCT Bridge (UCTB)

1.6. The Government will provide the course design of existing courses for reference upon contract award.

1.7. SPECIFIC REQUIREMENTS

1.7.1. OVERARCHING VISION/OBJECTIVE. The Contractor shall use the latest research supported innovations in adult education and training to analyze training requirements and provide course design recommendations to maximize student retention of training materials and minimize training time.

1.7.2. ANALYZE AND RECOMMEND TRAINING DESIGN IMPROVEMENTS. Analyze the Course Training Standards and Specialty Training Standards, Training Proficiency Codes, Career Field Education and Training Plans, and existing course design documents and provide course design recommendations to meet the overarching vision and objective.

1.7.2.1. The recommended design will include:

1.7.2.1.1. Unit and Block Titles.

1.7.2.1.2. Content and length in days and hours.

1.7.2.1.3. Objectives and samples of behavior.

1.7.2.1.4. Test measurement items for the objectives and samples of behavior.

1.7.2.1.5. Overall course relationships between the content and timing for the five courses.

1.7.2.1.6. Sample course scheduling plan to support the required number of graduates from each course given the classroom resources indicated in paragraph 1.8. Required number of graduates to be provided as per paragraph 1.11.

1.7.3. COMBINED TRAINING AND JOINT TACTICAL MISSION PLANNING. The contractor shall design the five courses so that students progressing through the courses will experience a continual mission planning and operations scenario, which offers deliberate times and places in training for the students of all courses to train together.

1.7.4. COMBINED TRAINING. Officer and enlisted curriculum must be designed to have content alignment to offer combined training opportunities at least three times. For example, a third of the way through the course, officers and enlisted will intermix to perform basic cyber mission operational planning and execution. Two thirds of the way through the course they will meet and perform intermediate cyber operational planning and execution, and before graduation, they will meet for a capstone level combined operational planning and execution event.

1.7.5. JOINT AND TACTICAL MISSION PLANNING. Curriculum must be designed so there is a continual operational mission thread which provides a framework to learn joint and tactical mission planning and apply it in the course as training progresses. Students should “work through” operational and tactical mission planning to understand operational level of planning and war, as well as tactical mission planning as it applies to air, space, and cyberspace.

1.7.6. TRAINING SOURCES. The Contractor shall provide sources and references to support the recommended training design down to the unit level. For example: Source for Course X, Block Y, Unit Z is <website> and <textbook>. Use the best freely and readily available unclassified, commercial and governmental resources. Sources should be aligned to the appropriate objective and provide content sufficient to meet the measurement (test) for each item.

1.7.7. TECHNICAL CONTENT. Content should reflect current and planned Air Force network architectures and Joint Information Environment and contain industry best practices set by federal and international standards and organizations, e.g. National Institute of Standards and Technology (NIST), Institute of Electrical and Electronics Engineers (IEEE), etc. Graduates must pass the Computing Technology Industry Association (COMPTIA) Security + exam. Time may be built into the course for the material and exam.

1.7.8. HANDS ON TRAINING. In many instances the training proficiency codes are “B”; however, the curriculum shall (or should or may??) afford additional training techniques and time in each block for practical application and hands on training. Include the training design, methodology, training guides and training sources for each hands on training event. A format and/or template will be provided. Many individual Course Training Standard (CTS)/Specialty Training Standard (STS) items may be re-emphasized in a single hands on training event. Events may be designed for individuals, small groups, the entire class or multiple classes.

1.7.9. CONTENT CLASSIFICATION. Training design will be for unclassified content; however, for overall course design and synchronization between the five courses, include an additional 20% training time slot reserved/dedicated to classified discussions and lesson material for each block. Do not include additional time for UCT Phase 1.

1.7.10. DELIVERABLES. Deliverables become Air Force property upon delivery and are to be provided for each course.

1.7.10.1. Deliverables will be reviewed, coordinated and approved by the Air Force Curriculum Area Manager (CAM), Training Specialist, and Training Development Element Chief and/or Training Manager as appropriate.

1.7.10.2. CAMS are in the following subject areas: Operating Systems and Scripting, Offensive Cyberspace Operations, Defensive Cyberspace Operations, Networking, Joint Organizations and Doctrine, and Battlespace (traditional IP space, outer space, battlefield/datalinks, telephony, and Industrial Control Systems).

1.7.10.3. Initial Due Date: Physical performance will start 26 Septmeber 2016. The due date for each deliverable will be calculated in calendar days after the physical performance start date.

1.7.10.4. Revision Due Date: The number of days the contractor has to submit the revision of each deliverable will start on the day the Government returns the product to the contractor. The Government will return the deliverable to the contractor no later than 30 days after the contractor submits the initial submission.

Phase

1.8. CURRICULUM DEVELOPMENT AND MANAGEMENT DOCUMENTS. The following documents will be provided after award so the contractor can understand the current solution from which to develop the new course design and efficiency improvements:

1.8.1. Instructional Systems Development Management Plan.

1.8.2. Overview, showing course lengths and blocks of training, with length.

1.8.3. Detailed, showing each deliverable and corresponding due date.

1.8.4. Course Chart (CC)

1.8.5. Measurement Plan (MP)

1.8.6. Validation Plan

1.8.7. Copyright releases as applicable.

1.9. INSTRUCTOR MATERIALS.

1.9.1. Training Objectives correlated to CTS/STS elements

1.9.2. Plan of Instruction Part 1 (POI Part 1)

1.9.3. Plan of Instruction Part 2 – Teaching Guide (POI Part 2)

1.9.4. Tests

1.9.5. Test Analysis

1.9.6. Progress Checks (PCs), appraisals, quizzes, etc.

1.9.7. Audio/Visuals and other training aids (Network Maps, Handouts, etc.)

1.9.8. Validation Data Report

1.10. STUDENT MATERIALS. Current student text, workbooks, handout, etc. will be furnished after award.

1.11. OTHER TRAINING AND COURSE INFORMATION.

1.11.1. GRADUATES AND PREDICTED STUDENT PRODUCTION. Provided upon award for all courses.

1.11.2. STUDENT TRAINING ENVIRONMENT. Provided upon award for all courses.

1.11.3. QUANTITY OF CLASSROOMS. Provided upon award for all courses.

1.11.4. STUDENT WORKSTATIONS. Provided upon award for all courses.

1.11.5. COURSE LENGTH ESTIMATES. Provided upon award for all courses.

1.12. GENERAL INFORMATION.

1.12.1. WORK LOCATION. Stennis Hall, Keesler AFB, Biloxi Mississippi including a modern office environment will be provided with computers, phones, and printer access.

1.12.2. HOURS OF OPERATION. KAFB operates on a Compressed Work Schedule (CWS), which means over a two-week period, 80 hours of work is performed; thirty-six hours during the first (or compressed) week, and forty-four hours during the second week.

1.12.2.1. Duty hours over a two-week period are Monday-Thursday, 0730-1630 (7:30 a.m. to 4:30 p.m.), with one hour for lunch each day; and in addition, on alternating Fridays, work hours will be 0730-1530 (7:30 a.m. to 3:30 p.m.), with one hour for lunch.

1.12.3. STANDARDS OF CONDUCT. Contractor personnel must adhere to standards of conduct as established by the Installation Commander and AETCI 36-2909.

1.12.4. SECURITY REQUIREMENTS.

1.12.4.1. Security Clearance: Security Clearance: National Agency Check with Written Inquiries (TIER 1). As a minimum, Contractor personnel shall successfully complete a Tier 1 before operating Government-furnished workstations that have access to AF automated information systems. Requests for Contractor personnel hired at the beginning of the contract shall be submitted to the Government not later than 45 workdays from the contract start date. Requests for Contractor personnel hired subsequent to contract start date shall be submitted to the Government not later than 10 workdays from the Contractor personnel’s first duty day. Contractor personnel receiving unfavorable Tier 1’s shall not be employed. The Government will submit requests for investigations on AF IMT 2583, Request for Personnel Security Action, at no additional cost to the Contractor. Any personnel with access to classified material will be submitted by the Contractor’s Facility Security Officer (FSO) for a Secret security clearance. The Contractor shall comply with the requirements of DOD 5200.2-R, Personnel Security Program; AFI 31-501, Personnel Security Program Management, 25 Jan 05; and AFMAN 33-152, User Responsibilities and Guidance for Information Systems, 1 Jun 12.

1.12.4.2. Contractor personnel shall comply with the requirements of AFI 71-101, Volume 1, Criminal Investigations, 4 Feb 15 and AFI 71-101, Volume 2, Protective Service Matters, 23 Jan 15. These regulations require Contractor personnel to report any information or circumstances of which they are aware that may pose a threat to the security of DoD personnel, Contractor personnel, resources, and classified or unclassified Defense information to their immediate supervisor. The immediate supervisor of Contractor personnel shall brief on this requirement during initial on-base assignment and as required thereafter.

1.12.4.3. The Unit Security Manager will assist the Contractor with any Joint Personnel Adjudication System (JPAS) Joint Clearance and Access Verification System (JCAVS) and eQIP by Design information for inputting Tier 1’s with assistance from 81 TRW/IP.

1.12.4.4. Security Monitoring. The Contractor shall comply with all security requirements. Submit reports, classified if appropriate, of any information coming to their attention concerning any of their employees who have been cleared or are in the process of being cleared for access to classified information, which indicates that such access or determination may not be clearly consistent with the national interest. Reports shall be submitted to the Defense Industrial Security Clearance Office (DISCO) immediately upon notification of any adverse information, change in employee’s status, official investigation, or any other reason. In addition, a copy of this report shall be furnished to the Contracting Officer’s Representative(s) (COR(s)) and 81 TRW Installation Commander (81 TRW/CC).

1.12.4.5. Listing of Employees. The Contractor shall maintain a current listing of all Contractor personnel. The list shall include Contractor personnel’s names, Social Security numbers, and level of security clearance. The list will be validated and signed by the FSO and provided to the CO, COR, Base Visual Information Manager (BVIM), 81 TRW/IP, Unit Security Manager, and FSO prior to the contract start date. Updated listings shall be provided when a Contractor personnel’s status or information changes. Documents will be marked as FOUO as a minimum.

1.12.4.6. PHYSICAL SECURITY. The Contractor shall safeguard all Government property, including controlled forms provided for Contractor use. At the close of each work period, Government equipment, facilities, and other valuable materials shall be secured.

1.12.4.7. Entry Procedures to Controlled/Restricted Areas. The Contractor shall implement local base procedures for entry to AF controlled/restricted areas where Contractor will work.

1.13. OPERATIONS SECURITY (OPSEC)

1.13.1. OPSEC TRAINING.

1.13.1.1. All OPSEC training shall be provided by the 81st Training Group OPSEC Coordinator.

1.13.1.2. All Contractor personnel and Contractor Management Staff shall complete initial OPSEC training within 30 calendar days of reporting for duty.

1.13.1.3. All Contract personnel and Contractor Management Staff shall complete annual refresher OPSEC Awareness Training

1.13.2. DISCLOSURE OF INFORMATION.

1.14. LEVEL I ANTI-TERRORISM (AT) AWARENESS. Level I Anti-Terrorism (AT) Awareness Training is available upon request and will be conducted by the Installation Anti-Terrorism Officer (ATO). Contact the 81st Security Forces Squadron (81 SFS/S2AT), at 228-376-6613.

(b) When passing from the front, proceed without stopping, but slow to 10 mph while passing.

1.16. SMOKING IN AETC FACILITIES. Contractors are advised that the Commander has placed restrictions on the smoking of tobacco products in AETC facilities. AFI 40-102, Tobacco Free Living, 4 Mar 15, outline the procedures used by the commander to control smoking in our facilities. Contractors and visitors are subject to the same restrictions as Government personnel. Smoking is permitted only in designated smoking areas.

1.17. ENVIRONMENTAL MANAGEMENT SYSTEM (EMS). All Contractor personnel shall complete Environmental Management System (EMS) Awareness training prior to commencement of any activities. Training is available through the Air Force Advanced Distributed Learning Service (ADLS), the Environmental, Safety and Occupational Health Training Network (ESOHTN), or through the Environmental Office (KBOS/CEV).

1.18. Hazardous Materials. In the event that hazardous materials will be used in the execution of this contract, the Contractor shall be required to obtain authorization from the Installation Hazardous Materials Management Program before ordering or purchasing the hazardous product, IAW AFI 32-7086, Hazardous Materials Management, 2 Feb 15. This authorization process may take up to two weeks, which should be considered in the performance period of this contract.

1.19. RECORDS. The Contractor shall create, maintain, and provide Government-owned/Contractor-held records, regardless of media, in performance of this contract IAW the following directives:

AFI 33-322, Records Management Program, 4 Jun 12, Incorporating Change 1, 18 Dec 14, and Keesler AFB Sup 1, 29 Oct 12 AFMAN 33-363, Management of Records, 1 Mar 08; Incorporating Change 2, 9 Jun 16, and Keesler Supplement, 23 Apr 15 AFI 33-364, Records Disposition—Procedures and Responsibilities, 22 Dec 06 and incorporating Change 1, 6 Nov 14 Air Force Information Management System database (AFRIMS) (access through the Air Force Portal at https://www.my.af.mil/afrims/afrims/afrims/rims.cfm Air Force Electronic Records Management Solution

1.19.1. The Contractor shall segregate the Government-owned records from the Contractor-owned records and identify all records required to be created by the PWS on the AFRIMS file plans. The Contractor shall create and maintain paper and electronic records (\\52mahg-fs-106) as appropriate. The Contractor shall maintain the software and background data to retrieve official electronic Government records throughout the lifecycle of the records.

1.19.2. The Contractor maintains and disposes of records IAW the AF records disposition schedules.

1.19.3. Electronically Stored Information (ESI). The Contractor shall maintain Government owned electronic non-official records on the organizational shared network drive according the subjective categories (example: template, common, reference material, and working files). Grant the base records manager access to all files located on the organizational shared network drive. The Contractor shall maintain the official electronic records on the base designated shared network drive (\\52mahg-fs-106) IAW the Air Force Electronic Records Management System and AFMAN 33-363, Chapter 6.

1.19.4. Upon completion of this contract, all Government-owned/Contractor-held records (regardless of media) received, created, maintained, or provided in the performance of the PWS shall be turned over to the Government. Background electronic data and records specified for delivery to the contracting agency must be accompanied by sufficient technical documentation and software to permit the Air Force to use the data. In the event of default or non-performance, the Government will have access to all records in order to ensure mission support is not interrupted.

1.19.5. CONTRACTOR-OWNED RECORDS. Maintain records that relate exclusively to the Contractor’s internal business or are of a general nature not specifically related the performance of work under the contract separately from the Government-owned records.

1.19.6. FREEDOM OF INFORMATION ACT (FOIA) PROGRAM. Freedom of Information Act (FOIA) Program. The Contractor shall comply with the requirements of DoD 5400.7-R/AFMAN 33-302, Freedom of Information Act Program, 21 Oct 10, incorporating through Change 3, 16 May 2016. If the Contractor receives a FOIA request, the Contractor shall ensure it is delivered immediately to the base FOIA manager (81 CS/SCOK) for processing. The FOIA manager will task a Government official who, as the authorized official, will make the decision on releasing Government records.

1.19.7. PRIVACY ACT PROGRAM. The Contractor shall create, maintain, and destroy Privacy Act data IAW AFI 33-332, The Air Force Privacy and Civil Liberties Program, 12 Jan 15; and Privacy Act systems of records notice(s) (http://dpcld.defense.gov/Privacy/SORNs.aspxl). The Contractor shall not create or maintain a Privacy Act system of records prior to public notice. If the Contractor receives a Privacy Act request, the Contractor shall be responsible for searching for the records and providing those records to a Government official who, as the authorized official, will make the decision on releasing the Government records.

1.19.8. FUNCTIONAL REQUESTS. A functional request is a written request for DOD records received from any person (including a member of the public), or a business that does not cite either the FOIA or Privacy Act. The Contractor shall be responsible for searching for the records and providing those records to a Government official who, as the authorized official, will make the decision on releasing the Government records.

1.20. CONTRACTOR MANPOWER REPORTING. The Contractor shall report ALL Contractor labor hours (including subcontractor labor hours) for performance of services under this contract via a secure data collection site. The Contractor is required to completely fill in all required data fields at http://www.ecmra.mil. Reporting inputs will be for all labor executed during the performance for each Government fiscal year (FY) which runs 1 October through 30 September. While inputs may be reported at any time during the FY, all data shall be reported no later than 31 October of each calendar year. Contractors may direct questions to the Contractor Manpower Reporting Application (CMRA) help desk.

1.21. SPECIAL QUALIFICATIONS. For additional information regarding special qualifications, refer to the attached course training standards. Additionally, the following list enhances and clarifies contractor qualifications and course content:

· Windows 7 and newer

· Linux

· Virtualized environments

· Data Network Fundamentals and configurations for Cisco and Juniper

· Network Security

· Traffic analysis

· Analyzing big data

· Fundamental data and packet forensics

· Fundamentals of Scripting in Linux, Python, Power Shell

· Familiarity with Air Force and DODIN operations

· Familiarity with Air Force and DOD Defensive Cyber Operations

· Familiarity with Air Force and DOD Offensive Cyber Operations,

· Familiarity with Cyber Mission Planning, Briefing, Execution and Debriefing

· Familiarity with Air Force cyber weapons systems

· Familiarity with Air Force cyber organizations, roles and responsibilities

· Datalink concepts and architectures

· SCADA concepts and architectures

· Telephony and VoIP concepts and architectures

· Telecommunication and radio frequency principles and management.

2. SERVICES SUMMARY

1.7.2 100% compliance.

2.1. The Government will periodically evaluate the Contractor’s performance by appointing Government representatives known as CORs to monitor performance to ensure services are received. The CORs will evaluate the Contractor’s performance through inspections of call logs/reports and receive and investigate all complaints from base personnel. The Government may inspect each task as completed or increase the number of quality assurance inspections if deemed appropriate because of repeated failures or because of repeated customer complaints. Likewise, the Government may decrease the number of quality assurance inspections if performance dictates. The CO shall make final determination of the validity of customer complaint(s).

2.2. If any of the services do not conform with contract requirements, the Government may require the Contractor to perform the services again in conformity with contract requirements, at no increase in contract amount. When the defects in services cannot be corrected by re-performance, the Government may:

2.3. Require the Contractor to take necessary action to ensure that future performance conforms to contract requirements; and

2.4. Reduce the contract price to reflect the reduced value of the services performed.

3. LIST OF ATTACHMENTS: