Attachment_1-PWS_CLEM_Module_Support_PWS_20190910.docx

FA4890-19RCN04

Civilian Law Enforcement Module (CLEM) Support Performance Work Statement (PWS) 10 September 2019

Table of Contents

1.0 MISSION OBJECTIVE

USNORTHCOM is located at Colorado Springs, Colorado and is responsible for providing Department of Defense (DOD) support to domestic and foreign Law Enforcement Agencies (LEA) and military organizations to enable their operations to disrupt Transnational Criminal Organizations that threaten the US and its interests. USNORTHCOM performs this task by receiving requests for support from US and foreign LEAs; facilitating those requests through the approval process; and once approved, managing the planning and execution of approved LEA support missions by service components.

2.0 SCOPE/BACKGROUND

CLEM is a USNORTHCOM web-based application that automates and streamlines the validation/approval process of Law Enforcement requests received by USNORTHCOM; CLEM also provides functionality for operational planning and monitoring of missions once support requests are approved and executed. CLEM is a derivative of the DOD Defense Support to Civil Authorities (DSCA), Automated Support System (DDASS). Both applications are maintained for USNORTHCOM by US Army North (ARNORTH) who provide combined System Administration (SA) and Risk Management Framework (RMF) support within the Defense Information Services Agency (DISA), cloud computing environment, MilCloud.

Development of the CLEM application began in 2016 when USNORTHCOM J34 Counter Transnational Organized Crime Branch (CTOC Branch) entered into an agreement with Army Geospatial Center (AGC) to manage the development of the system. CLEM became operational on MilCloud in February of 2019 and is used 24/7/365.

Since its inception, CLEM and DDASS remain similar in code, functionally, and general appearance, differing primarily in its Graphic User Interface (GUI) and the datasets they maintain. Due to their similar nature, both applications are maintained and developed in tandem as a cost saving function for the government. The U.S. Army Geospatial Center (AGC) serves as the technical project manager for both CLEM and DDASS, with USNORTHCOM funding CLEM maintenance and development while ARNORTH funds DDASS maintenance and development. This creates a synergistic development and maintenance environment for both applications.

3.0 PERFORMANCE REQUIREMENTS

The contractor shall provide CLEM application administrative and information technology (IT) support services to manage daily and ongoing CLEM operations for USNORTHCOM J34. Duties include data management, writing and upkeep of CLEM IT/Information Assurance/SOP documentation, records management for CLEM, training and familiarization of the CLEM application to new users, meeting/conference support, data research, and procurement/purchase of IT services. The contractor is NOT required to provide coding or development of the CLEM application (which is provided by a different “coder-developer contractor”). While the contractor is expected to regularly interact with the coder-developer contractor in the performance of this contract to facilitate use of the CLEM application, the contractor does not provide oversight of, or direction to, the coder/developer contractor. The coder-developer contractor will provide CLEM training and support to the contractor’s employees as authorized users/operators of the application. The Contractor shall also prepare weekly status reports regarding the CLEM application, and answer e-mails and direct callers regarding CLEM functions. Additionally, the contractor shall perform visitor control, administrative, and security duties; these duties will take approximately 10 percent of the time. The Contractor shall possess a Top Secret SCI clearance prior to contract award as the Contractor shall handle/update all material including classified or unclassified records and/or documents.

CLEM Database Services/Support

The contractor shall monitor and oversee the technical functions within the CLEM application to ensure the system is performing as needed for all users; the contractor will be given administrative permissions to accomplish the application services and support. The contractor shall also work less technical CLEM functions to ensure the application is coordinated and integrated with the USNORTHCOM enterprise, and for future planning of CLEM functionality. The contractor shall provide a DoD 8570.01-M Information Assurance Technical (IAT) Level II certified technician.

3.1.1 Task 1: CLEM Data Management

a. The contractor shall monitor the application and/or interact with new CLEM users over email/phone to adjudicate new user access requests. The contractor shall have one business day to adjudicate access requests and assign proper roles/permissions within the application.

b. The contractor shall monitor the CLEM application on a daily basis and work with DOD and Interagency users to ensure the information being submitted is accurate and relevant to the given functions.

c. The contractor shall work with DOD and Interagency users to ensure that proper validation and approval processes are being followed and accurately reflected in the application.

d. The contractor shall monitor the CLEM application daily and verify that it is functioning properly for all users and administrators. As required, the contractor shall coordinate with the technical project manager and application developers to resolve any issues in a timely manner.

e. The contractor shall add, modify, or remove CLEM application reference data, as required to accurately reflect the needs of users.

f. The contractor shall monitor the CLEM application for user inactivity, and with government approval, modify user permissions or remove users who no longer need access.

3.1.2 Task 2: Additional CLEM Application Responsibilities

a. The contractor shall write, maintain, and update CLEM User guide/SOP documents to facilitate application ease of use. USNORTHCOM J34 government representation will review and approve all documents.

b. The contractor shall be knowledgeable and maintain the current Risk Management Framework (RMF) in coordination with the technical project manager and DDASS program.

c. The contractor shall work with the technical project manager and the DDASS program to ensure the CLEM application meets all DOD Information Assurance (IA) requirements.

d. The contractor shall work with the technical project manager and DDASS program to maintain the current Authority to Operate (ATO) on the hosted network.

e. The contractor shall develop and maintain a records management program for that is in compliance with USNORTHCOM and Federal regulations.

f. The contractor shall provide technical assistance to USNORTHCOM J34 government representatives when IT goods and/or services are required to facilitate ongoing CLEM operations (i.e. software license renewal or purchases.)

3.1.3 Task 3: CLEM Coordination

a. The contractor shall regularly coordinate and communicate with the technical project manager, application developers, and the ARNORTH DDASS program on application related issues.

b. The contractor shall attend weekly teleconferences with the technical project manager, application developers, and ARNORTH DDASS representatives to discuss CLEM/DDASS issues.

c. The contractor shall coordinate with USNORTHCOM J6 on any issues that need J6 approval or concurrence.

d. The contractor shall work with technical project manager to ensure that LEA partners can access the CLEM application on other government domains (i.e. usdoj.gov, dhs.gov, state.gov, etc.)

3.1.4 Task 4: CLEM Training and Familiarization

a. Upon startup of the contract, USNORTHCOM J34 CTOC will give the Contractor training and familiarization with the CLEM application and the J34 CTOC workflow processes.

b. The contractor shall provide training and/or familiarization on the CLEM application to new and current users.

c. The Contractor shall develop a short training program of instruction that can be used to train users.

d. The contractor shall provide informational briefings at meetings and conferences, as required.

3.1.5 Task 5: CLEM Support for Future planning

a. The contractor shall provide input and recommendations to USNORTHCOM J34 on future enhancements and modifications to the CLEM application.

b. The contractor shall work with applicable DOD and Interagency CLEM users, the technical project manager, ARNORTH DDASS program representatives, and application developers to develop a list of maintenance tasks required to maintain the CLEM application. USNORTHCOM J34 representatives will prioritize and approve all maintenance tasks.

c. The contractor will work with DOD and Interagency CLEM users, the technical project manager, ARNORTH DDASS program representatives, and application developers to develop a running list of modifications that will help to improve the CLEM application. USNORTHCOM government representatives will prioritize and approve all modifications.

d. The contractor shall work with the technical project manager ARNORTH DDASS program representatives, and application developers to develop a schedule for accomplishment of maintenance tasks and application modifications. USNORTHCOM J34 representatives will approve the schedule.

3.1.6 Task 6: Visitor control, Administrative, and Security duties

a. The contractor shall be required to follow and abide by all USNORTHCOM security requirements.

b. When visitors are required for CLEM activities, the contractor will host and ensure all visitor control procedures are followed.

c. The contractor shall be required to provide weekly status reports on the CLEM application that summarize and explain the past week’s activities and developments.

4.0 QUALITY CONTROL

The Contractor is responsible for implementing and maintaining a Quality Control Program (QCP) that assures all required services conform to contract requirements and an effective corrective/preventive action program is in place to prevent reoccurrence of identified non-conformances. The Government shall rely upon the Contractor's QCP to ensure that service shall be performed in accordance with this contract, commercial standards, and applicable laws. The QCP shall be implemented on the first day of contract performance. The QCP shall encompass all positions/services the Contractor is supplying to the Government during the period of performance.

5.0 INCIDENTAL GOVERNMENT FURNISHED PROPERTY

The Government will provide a furnished workspace, document reproduction, scanner, fax and telephone services, computer, printer, software, and network resources, and reference materials for on-site work requirements. The Government will also make available relevant standards, functional statements, technical manuals, computer systems guides, regulations, instructions, and operational procedures required to complete the requested services. The following regulations, instructions and Standard Operating Procedures (SOP) are utilized in the performance of the duties listed above: CJCSI 3710.01, 10 USC Section 124, 10 USC Section 272-277, 10 USC Section 284, DODI 3025.21 Defense Support of Civilian Law Enforcement Agencies, CLEM User Guide (SOP), DODI 5015.02 (DOD Records Management Program)

6.0 CONTRACTOR QUALIFICATIONS

6.1 The Contractor will provide a qualified individual that possesses a bachelor’s degree in Information Technology and at least 7-10 years of prior work experience in managing web applications. Additionally the individual must meet baseline DoD 8570.01-M certification requirements at time of hire and be fully qualified in the primary environment in 6 months. The contracted individual will also have basic administrative skills and a working knowledge of DOD security procedures. The contractor will also be proficient in Microsoft Office Suite (Word, Excel, PowerPoint, etc), and a working knowledge of Microsoft SharePoint.

6.2 Notice and substitution of personnel: In the event a Contractor employee leaves or is unable to work, the Contractor shall notify the Government within three business days of learning a Contractor employee is leaving or unable to work. In the event the Contractor desires to replace or temporarily substitute a Contractor employee, the Contractor shall provide a prospective replacement that at a minimum, meets the PWS requirements within seven (7) calendar days of the employee's last workday.

6.3 U.S. Citizenship and a Top Secret SCI Clearance are required for system/facility access.

6.4 The Contractor shall have the Contractor employee(s) fully qualified and in place at the Government work center within 30 calendar days after contract award.

7.0 CONTRACTOR PERSONNEL

7.1 Contractor employee performing services shall comply with all HQ NORTHCOM installation rules and regulations applicable to conduct, safety, security, and procedures governing site entry and exit.

7.2 Privacy Act: Work on this project requires that Contractor personnel have access to Privacy Information. Personnel shall comply with the Privacy Act, Title 5 of the U.S. Code, Section 552a and applicable agency rules and regulations.

7.3 The Contractor shall pre-clear any new employees prior to their starting on this contract. This includes the completion of a successful NAC “National Agency Check” for all positions. The contractor shall be required to wear a contractor identification badge at all times while on Government property. Contractor shall submit a completed “Conflict of Interest and Non-Disclosure Statement” form for every employee and appropriate corporate officer on behalf of the corporation.

7.4 The Contractor is required to comply with Public law 105-270, Section 5 (2)(A). This law states that Contractors shall not perform inherently governmental functions. Section 5(2)(A) of this Public law defines the term “inherently governmental function” as “a function that is so intimately related to the public interest as to require performance by Federal Government employees.” Per Section 5(2)(B), inherently governmental functions include management of Government programs requiring value judgments, conduct of foreign relations, selection of program priorities, and the direction of intelligence and counter-intelligence operations. Per Section 5(2)(C), inherent governmental functions DO NOT include, (i) gathering information for or providing advice, opinions, recommendations, or ideas to Federal Government officials or (ii) any function that is primarily ministerial and internal in nature.”

7.5 Contractor personnel shall not manage, supervise, direct, or task US military or other personnel not associated with the Contractor while performing the tasks within this PWS.

7.6 Contractor personnel shall not make any commitment which commits the expenditure of US Government resources.

7.7 Contractor personnel shall not establish an employee-employer relationship with NORTHCOM under this PWS.

7.8 Contractor shall not provide personal services to USNORTHCOM. If Contractor employees are directed by any Government employee at any time to perform services not covered under this contract, the Contractor shall immediately notify the Contracting Officer’s Representative or Program Manager (COR or PM).

7.9 Any Contractor employee who procures or attempts to procure commercial sex acts or contributes in any way to trafficking in persons, per the Federal Acquisition Regulations (FAR) 22.17, shall be immediately removed from the existing task on this contract.

7.10 NORTHCOM normal business hours are between the hours of 0730-1600, with the exception of the following Federal Holidays.

8.0 SECURITY REQUIREMENTS

8.1 Visitor Group Agreement (VGSA)

The contractor shall enter into a long term visitor group security agreement if contract performance is on base for 90 days or more. This agreement shall outline how the contractor integrates security requirements for contract operations with the base to ensure effective and economical operation on the installation. The agreement should address:

8.1.1 Security support provided by the Air Force to the contractor to include storage containers for classified information/material, use of base destruction facilities, classified reproduction facilities, use of base classified mail services, security badging, base visitor control, investigation of security incidents, base traffic regulations, the use of security forms, and conducting inspections required by Executive Order 12829 National Industrial Security Program January 1993, Department of Defense 5220.22-M National Industrial Security Operating Manual February 2006 and Secretary of the Navy Manual 5510.36 Information Security Program, Chapter 11: Industrial Security, June 2006.

8.1.2 Security support requiring NORTHCOM and contractor coordination includes packaging classified information, mailing and receiving classified materials, implementing emergency procedures for protection of classified information, security checks, and internal security controls for protection of classified material and high value pilferable property.

8.1.3 On base, the long-term visitor group security agreement may take the place of a Standard Practice Procedure (SPP).

8.2 Clearance Requirements

The Contractor shall be a U.S. citizen and have a Top Secret Sensitive Compartmental Information (TS/SCI) clearance, which are required to obtain access to the building and work spaces. The Contractor shall provide cleared personnel on the start day of work. The Contractor shall obtain clearance approval for personnel supporting this requirement from the NORTHCOM security officer prior to start of work. Contact the TPOC for further information. As applicable, NORTHCOM will prepare and submit a DD Form 254. The Contractor shall comply with guidelines specified in the DD Form 254.

8.2.1 The Contractor shall possess a facility security clearance at the classification level of Top Secret to perform contract tasks and responsibilities at contract performance start. The contractor shall request security clearances (submit clearance paperwork through DSS to the National Background Investigations Bureau (NBIB) ) for personnel requiring access to classified information within 15 days after receiving a facility clearance or, if the contractor is already cleared, within 15 days or as soon as possible after contract award. Due to costs involved with security investigations, requests for contractor security clearances shall be kept to an absolute minimum necessary to perform contract requirements.

8.2.2 The contractor shall notify the Servicing Security Activity (SSA) at each location (s) and the local unit through the Joint Personnel Adjudicative System (JPAS), 30 days or as soon as possible prior to contract performance on base. In the remarks section in the JPAS visit request add: the contract number, period of performance, and the company Facility Security Officer's (FSO) name and contact.

8.2.3 The contractor shall maintain a current listing of employees. The list shall include the employee's name, social security number and level of security clearance. The list shall be validated and signed by the company Facility Security Officer (FSO) and provided to the Sponsoring Agencies Security Manager. An updated listing shall be provided when an employee's status or information changes.

8.3 Retrieving Identification Media

The contractor shall retrieve all identification media, including vehicle passes from employees who depart for any reason before the contract expires; e.g. terminated for cause, retirement, etc.

8.4 Traffic Laws

The contractor and its employees shall comply with base traffic regulations.

8.5 Physical Security

The Contractor shall be responsible for safeguarding all Government information or property provided for Contractor use. At the end of each work period, Government information, facilities, equipment and materials shall be secured as specified.

8.6 Government Facility Access

8.6.1 The Contractor shall ensure that all employees who have DoD Facility access badges turn in the badge immediately upon termination of their employment under this contract. The above requirement shall be made a part of the standard employee facility clearance procedures for all separated personnel. The Contractor shall advise the COR of all changes in their contract personnel requiring facility access.

8.6.2 For voluntary or involuntarily separated personnel and those separated under adverse circumstances, the Contractor shall notify the CO, PM or COR in advance of the date, time, and location where the appropriate DoD representative may physically retrieve the DoD badge (and any other Government badges to include keys, courier cards, etc.) prior to the employee departing.

8.7 Government Controlled Information Access

Specific written authorization for classified electronic processing, storage, handling, dissemination, destruction, and access to all classified and Controlled Unclassified Information (CUI) and material shall be accomplished IAW with applicable National, DOD, and service-specific directives.

8.7.1 The contractor shall not release intelligence material to any activity, employee, or other person not directly engaged in providing services under this contract unless specific written authorization for such release is received from the Government Contracting Activity (GCA). This prohibition precludes release without authority to another contractor, Government agency, private individual, or organization unless a contractual relationship exists in support of this contract.

8.7.2 Contractor requires Secret Internet Protocol Network (SIPRNET) SIPRNET access at the Government location. The contractor shall not access, download, or further disseminate any special caveated data outside the execution of the defined contract requirements within applicable directives.

8.7.3 The NORTJHCOM SSO and Security Manager will provide the applicable security classification guide(s), as required within the performance of referenced contract.

8.7.4 The Contractor shall comply with DOD 5200.01, Vol 4, with regard to safeguarding and handling Controlled Unclassified Information (CUI). Prohibitions with regard to release out of Government channels are applicable.

8.7.5 The Contractor shall comply with DoD 5400.7-R, Chapter 4, DoD Freedom of Information Act (FOIA) Program, requirements. This regulation sets policy and procedures for the disclosure of records to the public and for marking, handling, transmitting, and safeguarding FOUO material.

8.8 Key Control

The Contractor shall establish and implement methods in accordance with the National Industrial Security Program Operating Manual (DOD 5220.22-M) to ensure all keys and access cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include access cards and related access methods. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the QCP. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost, stolen, or duplicate keys/key cards to the Physical Security Officer identified on the contract DD Form 254.

8.8.1 The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s authorized employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Physical Security Officer.

8.9 Lock Combinations

The Contractor shall establish and implement methods of ensuring that no lock combinations are revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s QCP.

8.10 Privacy Act

The Contractor shall ensure that employees assigned to this order understand and comply with Title 5 of the U.S. Code, Section 552.a and DoD 5400.7-R, “DoD Freedom of Information Act Program.” Agency procedures shall be followed to identify and safeguard reports and data accordingly. The Contractor shall ensure that Contractor employees assigned to this contract are briefed annually on properly identifying and handling Privacy Act data/information.

8.11 Pass and Identification Items

The Contractor shall ensure the pass and identification items required for contract performance are obtained for employees and non-government owned vehicles.

8.12 Weapons, Firearms and Ammunition

Contractor employees are prohibited from possessing weapons, firearms, or ammunition, on themselves or within their Contractor-owned vehicle or privately-owned vehicle while on DoD and Government installations and facilities.

8.13 Reporting Requirements

Contractor personnel shall report to an appropriate authority any information or circumstances of which they are aware may pose a threat to the security of DOD personnel, Contractor personnel, resources, and classified or unclassified defense information. Contractor employees shall be briefed by the Contractor lead upon initial assignment.

9.0 PLACE OF PERFORMANCE:

9.1 Peterson AFB, Colorado Springs, CO. USNORTHCOM Headquarters building 2.

9.2 Government Point of Contact information:

Mr. Josh Piela NC J34 Counter Transnational Organized Crime Branch Phone: (719) 554-3182 Address: 250 Vandenberg St., Peterson AFB, CO 80914

10.0 OTHER PERFORMANCE REQUIREMENTS

10.1 Contractor Communication and Issue Resolution

All Contractor personnel shall communicate professionally and only with respect to contract business concerns with non-acquisition personnel. All contract information and communication shall flow through and be provided to the CO, PM and/or COR, as applicable, to affect appropriate contract action and address in-country issues. Only the CO, PM and/or COR or officially designated representative, will report and communicate contract performance status with other Government personnel and management chains.

10.1.1 The Contractor shall monitor and report all situations that could cause delays in performance or unsuccessful contract performance to the Government within one business day.

10.2 Meetings

The Contractor shall participate in a kick-off meeting to be coordinated by the Government after contract award. As required by the Government, the Contractor shall participate in periodic progress meetings to discuss and to informally evaluate the Contractor's efforts and accomplishments of the requirements. During the meetings, the Contractor may present necessary data to enable a joint review of its various assigned tasks, schedules, and resource expenditures. The Contractor shall participate in technical discussions and shall inform, in a timely fashion, the COR/PM of any problems with contract execution, and any proposed solutions. The Contractor shall attend and participate in other meetings, as scheduled by the Government. Meetings can be in person, via teleconference, or exchange of information via electronic mail as required by the Government.

10.3 Organizational Conflict of Interest (OCI)

Contractors shall address OCI as part of their on-going management of the contract.

10.4 Contractor Furnished Supplies and Services

Except for those items or services specifically stated in PWS Section 5.0 as Government furnished, the Contractor shall furnish the required supplies and services needed to perform the requirements set forth in PWS Section 3.0.

10.5 Contractor Identification

Contractor employee shall, while on duty, wear in plain view on the upper portion of his/her outer garment a metal or plastic identification badge to be furnished by the Contractor, containing the company name, employee name, and the government organization where the employee works. Contractor employees shall clearly identify themselves as “Contractors” at all times, in all communications and representations, including in the workplace, at meetings, in conversations, telecommunications, mail, electronic mail (e-mail), and faxes, whether with Government personnel, other Contractor personnel, or with the public. Contractors with access to the base Local Area Network (LAN) or with an official Government e-mail address shall include their company name in the signature block and the designation “CTR” in the global address. The Contractor shall notify the Government if the “CTR” designation is not included in the global address.

10.6 Telework

Telework is not authorized in support of this contract.

10.7 Facility Shutdown/Inclement Weather

The Contractor shall follow the guidance of the installation containing their place of performance to determine reporting schedules whether due to a facility closure or inclement weather. Contractor personnel shall follow the schedule of the NORTHCOM J1 Directorate office they are assigned to under the classification of Nonessential Personnel.

11.0 DELIVERABLES

The following are deliverables required by this contract:

Contract Deliverables

Notes:

1. Submit one copy each electronically in Adobe (PDF) or as a Microsoft Office Suite product. If copies are to exceed five

(5) megabytes post the copies to https://safe.amrdec.army.mil/safe/Default.aspx. Unless otherwise stated, submit deliverables electronically (one copy each) to the following recipients: COR, PM, CO, AMIC Acquisition Org Email Box (amic.pmt.acq@us.af.mil), and amic.pmt.seta@us.af.mil.

2. All deliverables shall be submitted by the established due date. If the due date falls on a weekend or holiday, the deliverable shall be submitted the next business day.

3. Unless specified otherwise, calendar days will be used.

4. The Government will have 20 calendar days to review and accept (or reject) deliverables. If the submittal is rejected by the Government the Contractor shall resubmit within 15 days of receiving the rejection.

5. The deliverables listed are not all inclusive list and do not relieve the Contractor of responsibility for providing deliverables as required elsewhere in the PWS and contract.

11.1 Weekly Status Report

The Contractor shall deliver a weekly status and management report that highlights support provided in the previous week and known planned activities for the next 7 calendar days. As appropriate or required, the report shall also include:

· Brief task description: A recap of work accomplished during the reporting period;

· Key Activities: Review of both resolved and pending priority activities/issues over the last week;

· Problem areas: The Contractor shall recap problems or potential problems affecting performance that were brought to the attention of the client representative during the previous month. Provide current status of problem and recommended way-ahead if still effecting performance;

· Overtime hours approved and worked;

· Travel approved and performed;

· Material and services approved for purchase;

· Document expenditures related to overtime, travel, and materials and services purchased during the last week;

· Quality Control activities (See paragraph 11.2)

11.2 Quality Control Plan (QCP).

The Contractor shall establish and maintain a contract-specific QCP that ensures CD/CNT support services are performed In Accordance With (IAW) this contract, applicable laws and regulations, and best commercial practices. The Contractor’s QCP shall provide a detailed approach for ensuring effective controls, processes, and procedures are developed and implemented to meet all requirements of the PWS and mitigation of any contract unique risk(s). Additionally, the Contractor shall include how invoice reviews shall be conducted, to include discussion on how the primes, subcontractor, and supplier supporting data shall be reviewed for consistency with contract requirements. The QCP shall focus on how quality control shall be performed specific to this contract rather than a high level/generic approach. As part of the Weekly Status Report, the Contractor shall specifically discuss quality control activities over the reporting period and planned activities for the next period. Information shall specifically address WHO conducted the QC, WHEN was the QC executed, HOW was the QC executed and WHAT the findings and corrective actions were. .

12.0 SERVICES SUMMARY

Appendix A, Performance Requirements Summary Matrix.

Appendix A - Performance Requirements Summary Matrix

b) The mission is not impacted due to position vacancies or personnel qualifications

a) The Contractor provides the CO written notification within three (3) business days when the Contractor becomes aware of a pending employee resignation or dismissal regardless of the circumstances

AND

b) Vacancies are filled with qualified personnel within 14 calendar days of vacancy, unless approved in writing or otherwise directed in advanced by the CO

AND

c) There is no mission impact due to position vacancies or unqualified personnel

The contractor shall monitor and oversee the technical functions within the CLEM application to ensure the system is performing as needed for all users

PWS Paragraphs 3.1 thru 3.1.6

Performance is acceptable when the Contractor accurately provides services described in referenced paragraphs within two business days or as specified by the Government

13.0 OPTIONAL CLIN 1, IAM II CERTIFICATION SUPPORT:

13.1 Optional CLIN SCOPE

In the event USNORTHCOM decides to pursue CLEM as an independent application from DDAS, additional work will be required to establish independent Risk Management Framework requirements and achieve as well as sustain the Authority to Operate. These tasks drive the work performed from Information Assurance Category IAT II to Information Assurance Category IAM II. This is as an optional CLIN which could be exercised in either optional year of performance. The contracting officer will notify the contractor NLT 6 months prior to start of the next period of performance should this optional CLIN be exercised. The 6-month period notification provides a window for the contractor to comply with the increased DoD 8570.01-M baseline certification requirement.

13.1.1 Optional Tasks: Establish Independent ATO and RMF for CLEM application.

Establish independent ATO and DOD RMF for the CLEM application from DDASS system. The Contractor shall work with applicable parties (USNORTHCOM J6, DISA, etc.) to write, maintain, and update technical documents required to satisfy DOD Risk Management Framework requirements. Government representation will review and approve all documents. The contractor shall provide a DoD 8570.01-M Information Assurance Manager (IAM) Level II certified technician.

1) Contractor shall work with applicable parties (USNORTHCOM J6, DISA, etc.) to establish the RMF process and ensure that the independent application meets all DOD Information Assurance (IA) requirements.

2) Contractor shall work with applicable parties (USNORTHCOM J6, DISA, etc.) to pursue, obtain, and maintain an ATO on the hosted network.

13.2 Optional CLIN Contractor Qualifications.

Beginning at the period of performance following notification of USG decision to exercise the Optional CLIN, the contractor qualifications identified in Paragraph 3.1 with implementation in 6.1 are changed from DoD 8570.01-M Information Assurance Category II to Information Assurance category IAM II. All other qualifications criteria remain unchanged.

image2.png image1.jpeg