Attachment_4_-_SAVR_PWS_5_Dec_17_Amendment_1.pdf

Performance Work Statement (PWS) United States Air Force Air Mobility Command AMC/A2 Staff Assistance Visit Request (SAVR)

1. Background. Air Mobility Command Intelligence Surveillance and Reconnaissance Directorate (AMC/A2) requests a Staff Assistance Visit (SAV) to support our upcoming Command Cyber Readiness Inspection (CCRI). This is a time sensitive request due to our scheduled CCRI in Jan 2018.

2. Objectives. Request review and constructive feedback of all CCRI inspect able areas to include Command Network Defense (CND) and Network Security, Assured Compliance Assessment Solution (ACAS), Exchange, Host Based Security System (HBSS), Tradition/Physical Security, Web and Databases, Windows Domain Naming System (DNS), Active Directory, Insider Threat and Defense Information Systems Agency (DISA) Security Technical Implementation Guide (STIG).

3. Scope. AMC/A2 requires a 5 (five) day SAV providing a CCRI like inspection to evaluate AMC/A2’s current preparation status and identify any remaining discrepancies which will then be corrected prior to the January 2018 CCRI. AMC/A2 Network Team also requires additional duty support during the week of the CCRI.

4. Specific Tasks. The following tasks will be provided by the contractor:

4.1 Task Area 1 - The contractor shall provide qualified inspectors for 5 (five) days on site at Scott AFB, IL, Bldg. 1600 in the AMC/A2 workspaces. The inspectors must obtain the required skills to inspect and provide constructive feedback to cover the functional areas identified in para. 2 of this PWS.

4.2 Task Area 2 - The contractor shall provide CCRI grading criteria interpretation for 5 (five) days on site at Scott AFB, IL, Bldg. 1600 during the AMC/A2 scheduled CCRI in January 2018.

The grading criteria shall be provided while on site at Scott AFB, IL during the period of performance.

4.2 Task Area 3 - The contractor shall provide documented feedback on the inspected areas covered in para. 2 of this PWS. The documented feedback shall be provided while on site at Scott AFB, IL during the period of performance.

5. Place of Performance. The place of performance shall be in Government facilities at Building 1600 Scott Air Force Base, IL 62225. The contractor may perform task related activities, such as reach back support, at other Government sites and contractor facilities within the local area when required and authorized by the COR or the CO. Reimbursement for local travel is not authorized. Classified work, if required, will only occur at a United States Government facility or at another contractor’s cleared facility.

5.1 Travel: The contractor may be required to travel in performance of this PWS. All travel arrangements shall be the responsibility of the contractor, to include airline, hotel, and rental car reservations. The contractor shall make all efforts to schedule travel far enough in advance to take advantage of reduced airfares. Airfare shall be the prevailing rates for commercial airlines at coach class. When required, the most reasonable means of ground transportation (i.e. taxi, bus, rental car) shall also be used. At least five working days prior to the travel start date, the contractor shall submit a travel itinerary and estimated cost to the AMC/A2XI POC and CO. The AMC/A4PI POC and CO will confirm the need for travel. The CO will confirm the availability of funds. The contractor shall coordinate specific travel arrangements with the AMC/A2XI POC and CO to obtain advance, written approval for the travel about to be conducted. The contractor’s request for travel shall be in writing and contain the dates, locations and estimated costs of the travel in accordance with the basic contract clause H047.

If any travel arrangements cause additional costs to the TO that exceed those previously negotiated, written approval by CO is required, prior to undertaking such travel. Costs associated with contractor travel shall be in accordance with FAR Part 31.205-46, Travel Costs. The contractor shall travel using the lower cost mode transportation commensurate with the mission requirements. Travel will be reimbursed on a cost reimbursable basis; no profit or fee will be paid. All travel reimbursements shall be submitted for repayment via WAWF after approval from CO.

5.2 The contractor shall notify the Contracting Officer Representative (COR) in writing (e-mail preferred) prior to their issuance of their inspector(s) and coordinate with AMC/A2 to obtain access for the appropriate areas.

5.3 Contractor shall comply with the requirements outlined in para. 8, Security, of this PWS.

5.4 The contractor is not authorized to have an employee begin work until contractor has received written notification (e-mail preferred) from the COR that the employee has met all prerequisites, including all security-related prerequisites as described in para. 8 below.

5.5 The place of performance shall be in Government facilities at Building 1600 Scott Air Force Base, IL 62225. The contractor may perform task related activities, such as reach back support, at other Government sites and contractor facilities within the local area when required and authorized by the COR or the CO. Reimbursement for local travel is not authorized. Classified work, if required, will only occur at a United States Government facility or at another contractor’s cleared facility.

6. SERVICES SUMMARY (SS)

The SS table below summarizes the most important performance objectives and performance thresholds (specific standards) as identified within the body of the PWS. The absence of any performance objective and threshold from this SS shall not detract from its enforceability nor limit the rights or remedies of the government under any provision of the contract.

Table 1: Services Summary

Performance Objective

PWS Para. Performance Threshold Provide documented evaluation of all inspected areas

4.1, 4.3 Five (5) working days after inspection

Provide SME feedback on CCRI inspector write-ups

4.2 Within four (4) hours of

issue discovery

7. Deliverables.

The following items are outputs which fall within the scope of this requirement and are illustrative of the type of work the Government requires. Deliverables required by the Government in accordance with (IAW) this PWS shall have a Data Item Description (DID) and shall be provided in a commercially acceptable format. All deliverables shall be reviewed for timeliness, accuracy and format. If a deliverable due date falls on a weekend or holiday, the Contractor shall submit the deliverable on the last work day prior to the due date. One electronic copy of each output shall be delivered to the Government Program Manager (PM)/COR on date specified. In addition, unscheduled project updates shall be provided by Government PM/COR. Table 2, Data Deliverables, provides a list of the required PWS deliverables; reference PWS paragraphs for all required deliverables. If not otherwise stated below, all required deliverables shall be provided if no requested by the Government PM/COR, no later than the end of the Period of Performance.

Deliverables are to be transmitted electronically with a cover letter, on the Contractor’s letterhead, describing the contents. The Contractor shall provide hard copy deliverables as required per Government PM/COR request. All deliverables shall be produced using recommended software tools/versions as approved by the Government. All reports shall be accomplished utilizing a commercially acceptable format. Products and documentation under this PWS become the property of the Government.

Para Deliverable Title Para 4.1, 4.3 Inspection Evaluation Report 4.1, 4.3

4.2 CCRI Feedback 4.2

8. Security. The Contractor will follow and meet the security requirements.

8.1 Contractor Consent to Background Checks. The contractor and, as applicable, subcontractor will not employ persons for work on this contract if such employee is identified as a potential threat to the health, safety, security, general well-being or operational mission of the installation and its population, nor will the contractor or subcontractor employ persons under this contract who have an outstanding criminal warrant as identified by Law Enforcement Agency Data System (LEADS) through the National Crime Information Center. LEADS checks will verify if a person is wanted by local, state, and federal agencies. All contractor and subcontractor personnel will consent to LEADS background checks. Contractor and subcontractor personnel who do not consent to an LEADS check will be denied access to the installation. Information required to conduct an LEADS check includes: full name, driver’s license number, and/or social security number, date of birth of the person entering the installation, and completion of a background check questionnaire. The contractor will provide this information using the Scott AFB Form 21, Contractors Consent for Background Check, and will submit it in conjunction with the contractor’s request for either base or vehicle passes. Completion of a successful

LEADS check does not invalidate the requirement for an escort when contractor or subcontractor personnel are working within controlled or restricted areas.

8.1.1 Contractors will ensure their employees and those of their subcontracts have the proper credentials allowing them to work in the United States. Persons later found to be undocumented or illegal aliens will be remanded to the proper authorities. The contractor will not be entitled to any compensation for delays or expenses associated with complying with the provisions of this clause. Furthermore, nothing in this clause will excuse the contractor from proceeding with the contract as required.

8.2 Badges. The contractor is required to provide identification badges for their employees. All contractor personnel will wear these badges while on duty on the government site. Badges are required to identify the individual, company name, and be clearly and distinctly marked as contractor. Size, color, style, etc. are to be mutually agreed to by contractor and government.

The contractor’s identification badge will not be used as an entry requirement for installation entry or into any government designated controlled or restricted area.

8.3 Contractor Registration of Vehicles on Scott AFB. All contractor or contractor employees’ vehicles used for the performance of this contract will comply with all local, state and federal regulations. Additionally any pass will be surrendered to Security Forces upon demand to positively identify a person's need to be on Scott AFB.

8.4 Access to Installation during Force Protection Conditions (FPCONs). Contractors will be assigned a mission essential designation IAW requirements contained in SAFBI 31- 101/Installation Security Instruction. Only the installation commander or the unit commander requesting contract support will assign the mission essential designation.

8.5 Property Protection. Property protection for facility where the contractors’ primary work center is located will be the responsibility of the local facility manager and local Government Security Manager, or their duly authorized representative IAW AFI 31-101, The Air Force Installation Security Program and command/local directives. The contractor will safeguard all government-owned equipment and materials in his/her possession or use.

8.6 Safeguarding Classified or Unclassified Information. The contractor will meet Air Force standards for storing, processing, and handling classified information and systems. Additionally, all resources (e.g. maps, publication/instructions, photos) provided by the government to assist the contractor in the performance of their contract will be surrendered upon termination of employment or the end of the contract performance period. All inspectors must hold a minimum of SECRET security clearance verified prior to arrival in the Joint Personnel Adjudication System (JPAS)

8.7 Privacy Act. Work on this project requires that personnel have access to Privacy Information. Personnel will adhere to the Privacy Act, Title 5 of the U.S. Code, Section 552a and applicable agency rules and regulations.

8.8 Contractors Working in Controlled or Restricted Areas. The unit requesting contract support will provide escort (s) for contractors’ at all times when within a controlled area as required. In addition, contractors will fulfill, maintain, and comply with all security requirements IAW AFI 31-101, The Air Force Installation Security Program, and command/local directives.

8.9 Access to Government Facilities with Controlled or Restricted Areas. The contractor will comply with security regulations imposed by the installation commander and/or the agency responsible for the project location. Due to specific mission requirements inherent in the nature of controlled or restricted areas on Scott AFB, the government may direct the contractor to leave the controlled or restricted areas at any given time.

8.10 Contractors Responsibilities while Working within Controlled or Restricted Areas.

Only contractor personnel with proper authority and qualifications will enter a controlled or restricted area. Certain facilities require the issuance of an AF Form 1199CD. The government, at any time, may revoke the AF Form 1199CD. The procedures for the issuance of an AF Form 1199CD are contained in SAFBI 31-101, Installation Security Instruction. Contractors will not escort other contractor employees within controlled or restricted areas. In addition, contractors will fulfill, maintain, and comply with all security requirements contained in SAFBI 31-101, Installation Security Instruction.

9. Government-Furnished Equipment (GFE)/Government-Furnished Information (GFI). The Government will furnish or make available to the contractor any mutually agreed upon documentation, software, hardware, and equipment necessary to accomplish this PWS.

10. Certification Requirements. The Contractor shall ensure that personnel accessing information systems have the proper and current information assurance certification to perform information assurance functions in accordance with DOD 8570.01-M, IAWIP. The Contractor shall meet the applicable information assurance certification requirements, including –

10.1 DOD-approved information assurance workforce certifications appropriate for each category and level as listed in the current version of DOD 8570.01-M; and

10.2 Appropriate operating system certification for information assurance technical positions as required by DOD 8570.01-M.

The SS table below summarizes the most important performance objectives and performance thresholds (specific standards) as identified within the body of the PWS. The absence of any performance objective and threshold from this SS shall not detract fro...