CS_TAT_Draft_RFP_FBO_Posting_3Jul14.doc

Section B - Supplies or Services and Prices

IDIQ Level Program Management Support

FFP

This CLIN is for non-personal services to support the IDIQ-Level Program Management Support requirements of CS TAT Performance Work Statement (PWS). A FFP task order will be issued against this CLIN to cover the base ordering period. This excludes the program/project management support to be priced at the individual Technical Area Task (TAT) level.

FOB: Destination

SIGNAL CODE: A

MAX

NET AMT

RDT&E CS TAT

CPFF

This CLIN, with an amount to be specified by the Government, will provide the scope for non-personal Research, Development, Test, and Evaluation (RDT&E) to be issued as Technical Area Task (TAT) that are within the scope of the CS TAT PWS. TATs will be priced separately and may be issued as CPFF, FFP, or FFP-LOE task orders. If the government exercises the option(s) for CLIN X001 or CLIN 0003XX, the ordering period dates will be extended for CLIN 0002.

MAX COST

FIXED FEE

TOTAL MAX COST + FEE

UNDEFINED

Extension of Services

FFP

Conduct Extension of Services for IDIQ-Level Program Management Support for CS TAT in accordance with the Performance Work Statement. If the government exercises the option(s) for CLIN 0003 the ordering period dates will be extended for CLINs 0002.

MAX

0003AA

FFP

Conduct Extension of Services for IDIQ-Level Program Management Support for CS TAT in accordance with the Performance Work Statement.

MAX

0003AB

FFP

Conduct Extension of Services for IDIQ-Level Program Management Support for CS TAT in accordance with the Performance Work Statement.

MAX

0003AC

FFP

Conduct Extension of Services for IDIQ-Level Program Management Support for CS TAT in accordance with the Performance Work Statement.

MAX

0003AD

FFP

Conduct Extension of Services for IDIQ-Level Program Management Support for CS TAT in accordance with the Performance Work Statement.

MAX

0003AE

FFP

Conduct Extension of Services for IDIQ-Level Program Management Support for CS TAT in accordance with the Performance Work Statement.

MAX

0003AF

FFP

Conduct Extension of Services for IDIQ-Level Program Management Support for CS TAT in accordance with the Performance Work Statement.

MAX

DATA

Develop and provide data in accordance with Section J, Exhibit A, DD Form 1423-2 (Contract Data Requirements List) made part of this solicitation/contract.

This line item is Not Separately Priced. If the government exercises the option(s) for CLINs X001 or CLINs 0003XX, the ordering period dates will be extended for CLIN 0004.

MAX COST

FFP

This CLIN is for non-personal services to support the IDIQ-Level Program Management Support requirements of CS TATs Performance Work Statement (PWS). A FFP task order will be issued against this CLIN to cover Option One/Years Two and Three. This excludes the program/project management support to be priced at the individual Technical Area Task (TAT) level.

MAX

FFP

This CLIN is for non-personal services to support the IDIQ-Level Program Management Support requirements of CS TATs Performance Work Statement (PWS). A FFP task order will be issued against this CLIN to cover Option Two/Years Four and Five. This excludes the program/project management support to be priced at the individual Technical Area Task (TAT) level.

MAX

MINIMUM AND MAXIMUM VALUES

The minimum obligation under any awarded contract shall not be less than the minimum quantity and minimum contract value stated in the following table. This minimum amount will be issued via a Task Order against CLIN 0001 Management Reporting issued concurrently with the CS TATs IDIQ Award and shall be at least a minimum $3,600.

Base Period (CLIN 0001):

Optional Ordering Periods (CLINs 1001, 2001):

*The total of all Task Orders issued to the multiple award contract holders collectively under the CS TATs multiple award IDIQ contracts shall not exceed the maximum ceiling amount of $2B. The amount proposed for CLINs X001and 0003XX and amounts established by the Government at the time of award for CLIN 0002 will establish the maximum ceiling value for each awarded contract.

The Government may provide all contract holders an annual notification of the total remaining IDIQ contract value available for award.

OPTION EXERCISE/ORDERING PERIOD EXTENSION

CLIN 0002: If the Government exercises the option(s) for CLIN X001 and/or CLIN 0003XX, the ordering period dates will be extended for CLIN 0002. The exercising of the options is at the sole discretion of the Government and not guaranteed.

Section C - Descriptions and Specifications

PERFORMANCE WORK STATEMENT

Cyber Security and Information Systems Technical Area Task (CS TAT)

TABLE OF CONTENTS

SECTION 1

DESCRIPTION OF SERVICES/GENERAL INFO/ADMIN

1.1 Background

1.2 CS TAT Objectives and Mission

1.3 CS TAT Breadth of Support/Potential Customers

1.4 Technical Scope

1.4.1 Representative Tasks

1.4.2 Technical Focus Areas

1.5 Program Management & Reporting

1.5.1 Management Requirements

1.5.2 Reporting Requirements

1.6 General Information/Administration

1.6.1 Publications and References

1.6.2 Documentation

1.7 Security Requirements

1.7.1 General

1.7.2 Personnel & Facility Clearance Security Qualifications

1.7.3 Protection of Government Systems/Information

1.8 Publishing Requirements

1.8.1 Marking of Products

1.9 Period and Place of Performance

SECTION 2

SERVICES SUMMARY (SS)

SECTION 3

GOVERNMENT-FURNISHED PROPERTY AND SERVICES

3.1 General Information

3.2 Government-Furnished Property/Equipment

3.2.1 Documents

3.2.2 Government Systems

SECTION 4

APPENDICES

4.1 Acronyms

4.2 Glossary

SECTION 1:

DESCRIPTION OF SERVICES

1.1 Background. The Department of Defense (DoD) Information Analysis Center (IAC) Program operates in accordance with (IAW) DoD Instruction 3200.14, Principles and Operational Parameters of the DoD Scientific and Technical Information Program, 13 May 97 through Change 3 dated 28 June 2001. DoD IACs function as specialized subject focal points, supplementing the Defense Technical Information Center (DTIC) services within DoD Instruction 3200.12, DoD Scientific and Technical Information Program (STIP), Aug 13. All DoD IAC’s are directed to operate IAW all directives, instructions, regulations, and military standards. The Director, DoD IACs Program Management Office (PMO) is responsible for administrative and operational management of all DoD IACs. Technical report number AD-A184 002, Information Analysis Centers in the Department of Defense, July 87, provides a detailed review of the IAC concept, the 30-year history and the IAC role in the transfer of Scientific and Technical Information (STI). Technical reports can be ordered by DTIC-registered users.

In order to facilitate use of STI, the DTIC IAC PMO undertakes a variety of activities focusing on the development, identification, access, analysis, processing, and dissemination of STI. In accordance with guidance in the FY2008 National Defense Authorization Act, the IAC Program has undertaken an initiative to transition from a single award to a multiple award environment. IAC Program operations encompass two primary categories: Basic Center Operations (BCO) and Technical Area Tasks (TATs). The function of the BCO, which is performed under a separate contract, is focused on Information Collection, Processing/Management, Analysis and Dissemination, with typical activities including maintaining comprehensive knowledge bases, maintaining a presence in the technical community, growing scientific and technical collections (based on relevant research), maintaining a web presence, promoting customer awareness, preparing and publishing a newsletter, maintaining a Subject Matter Expert (SME) network database, responding to technical inquiries, and performing literature searches. TATs fulfill government requirements and necessitate a thoroughly researched and authoritative response, integrating the expertise of a diverse cadre of professionals positioned across various organizations, including representatives from government, industry and academia. The level of research and analysis are above and beyond that required by the Basic Center Operations. The CS TAT provides this advanced level of research and analysis to the DoD Research, Development, Test, and Evaluation (RDT&E) and Acquisition communities. The terms "task order" (TO) and "technical area task" (TAT) are used interchangeably throughout this PWS.

The IACs provide the long-term institutional memory of STI for the DoD (reference the Defense Federal Acquisition Regulation Supplement (DFARS) 235.010); along with the ability to avoid duplicating STI holdings and analytical capabilities in various Research and Development (R&D) support components. Specifically, Cyber Security and Information Systems (CS) TAT efforts assist in creating new STI, which is added to the DTIC repository, based on the technical focus of the STI. Additionally, CS TAT efforts provide scientific and technical advice to Government, industry, academia, and other approved domestic users in the areas of cyber security and information systems. The STI products and services provided under CS TAT efforts are intended to increase the productivity of the RDT&E community, as well as other scientific and engineering groups.

1.2 CS TAT Objectives and Mission.

The objectives and mission of the CS TAT contract is to:

1.2.1. Draw from and build on the cyber security and information systems (CS) knowledge base of BCOs and, in turn, add to that knowledge base through the development and delivery of STI that advances the body of cyber security and information systems knowledge in the technical community and can be shared within that community.

1.2.2 Obtain a wide range of cyber security and information systems-related research, development, studies, evaluations, analyses and similar services for the potential customers delineated under paragraph 1.3, within the technical scope described under paragraph 1.4.

In the course of achieving the dual objectives of performing TATs and developing STI, the CS TAT contractors shall:

a. Foster a connection and engage collaboratively with the IAC BCOs performing work in relevant subject areas so as to maximize utilization of BCO products and services and existing STI;

b. Minimize unnecessary duplication of research, information collection and analysis, and information dissemination efforts; and

c. Promote standardization within the field of cyber security and information systems-related technology in the DoD environment.

1.3. Breadth of Support/Potential Customers.

The technical scope described in this PWS below under paragraph 1.4 includes cyber security and information systems- related research, development and/or analyses necessary to support the following customers (requiring activities):

1.3.1 DoD components, other U.S. Government agencies and departments and their contractors, and state and local governments; and

1.3.2 Industry, academia, international organizations in which the U.S. Government is a member or participant, foreign governments with which the United States has international agreements for military or related operations ,and other institutions where the results of such research, development and/or analyses are expected to provide benefits to the U.S. Government in the future.

1.4 Technical Scope.

The broad technical scope described herein includes all cyber security and information systems-related research, development, test and evaluation (RDT&E) services that will generate STI in support of the objectives described in paragraph 1.2. RDT&E services are defined at DFARS 235.001 and DoD Financial Management Regulation Volume 2B/Chapter 5, paragraph 050201.

These services may support all aspects of identified or potential military, national security-related, and dual use applications of related technologies and methods, as well as the development of tools and techniques that enhance the mission of the DoD Research and Engineering community. TATs can be multi-million dollar efforts, may involve multi-year performance, may involve work for other than DoD customers, may be performed at multiple locations (to include performance outside the Continental United States), require Top Secret facility clearance, and may require personnel clearances up to Top Secret (compartmented and collateral). TATs are not government-staff augmentation support services. The level of research and analysis are over and above BCO products and services.

Specific examples of the types of tasks the contractor shall perform under TATs are listed below. This list is not all inclusive but representative of typical TATs tasks. Each TAT (task order) may consist of only one task or may consist of multiple tasks. All efforts shall be related to the Cyber Security and Information Systems focus areas listed below in paragraph 1.4.2. The contractor shall not provide staff augmentation services under any scope area.

All TATs must include an analysis component and generate new STI. The CS TAT scope does not include task orders where the predominant amount of effort is for any, or a combination of, routine operational and maintenance-type services such as data entry, maintenance and training on fully developed/deployed systems, help-desk support on developed systems, functions that are solely administrative, etc. All TATs must be for the primary purpose of analysis or development that will generate re-useable STI. Routine "operational" type services will be permitted to be included on a TAT only as long as they are incidental to, and necessary for, completion of related scientific and technical analysis/developmental efforts that will generate STI.

1.4.1 Representative Tasks

1.4.1.1. Technical Development. Develop, or improve/modify designs, standards, specifications, networks, materials, methods, solutions, models, applications, systems, tools, surveys, configurations, agents, formulas, practices, processes or other technologies, i.e., provide engineering and technical support on physical, biological, organizational, or information technology resources. This may include laboratory or field work.

1.4.1.2 Evaluation. Analyze, demonstrate, review, evaluate, validate, or test designs, methods, materials, discoveries, networks, agents, formulas, models, applications, systems, tools, surveys, configurations, practices, processes or other technologies.

1.4.1.3 Plans and Frameworks. Develop and/or modify plans, architectures, frameworks, protocols, tactics, policies, procedures, manuals, guides or strategies.

1.4.1.4. Implementation. Transition, integrate, upgrade, deploy, install or otherwise implement designs, methods, models, applications, systems, networks, tools, surveys, configurations, processes or other technologies.

1.4.1.5. Research and Analyses. Perform and document assessments, analyses, studies, reports, reviews, estimates, surveys or investigations.

1.4.1.6 Training (non-routine). Develop and/or deliver, conduct or facilitate trainings, instructions, tutorials, briefings, presentations, exercises, workshops or formal courses on developmental, non-commercial methods, models, applications, systems, tools, configurations, or other technologies; surveys, processes, phenomena, incidents, events, trends or patterns. This is not "routine" stand-alone training. All training services provided in this scope area must include an analysis component. The training must be incidental to and an adjunct of the analysis task.

1.4.1.7 Operations and Support Developmental Analysis. Provide analysis of operations and support activities. This includes analysis of systems (even those in the operational and support phase of their lifecycle) and processes, identification of potential improvements, and implementation of those improvements. This is not routine operational and maintenance (O&M) services. All services provided in this scope area must include an analysis component. For example, analysis of maintenance practices on a mature system would be considered in-scope, conducting maintenance activities would be out of scope.

1.4.1.8 General Subject Matter Expertise. Provide subject matter expertise, consultation, recommendations, advice and other advisory support. The contractor shall not provide staff augmentation services under this scope area. These services shall be for a specific, identifiable R&D effort, defined in the PWS, with associated STI deliverable(s).

1.4.1.9 Technical Conferences and Meetings. Organize, facilitate or participate in conferences, forums, symposia, events and meetings. All services provided in this scope area must include an analysis component. The conference/meeting support must be incidental to and an adjunct of the analysis task. The contractor shall be engaged in developing content for the conference/meeting and not just provide administrative hosting support.

1.4.1.10 Other RDT&EServices. Provide other RDTE& services, not elsewhere classified. Tasks included in this scope area must be for a specific, identifiable R&D effort, defined in the PWS, with associated STI deliverable(s).

1.4.2 Technical Focus Areas

1.4.2.1 Software Data & Analysis is defined as the process of inspecting, cleaning, transforming, and modeling data with the goal of highlighting useful information, suggesting conclusions, and supporting decision making. The scope, as it relates to the DoD RDT&E communities‘ needs, includes the entire field of software technologies and engineering specifically as related to information, documentation, databases, model and architecture repositories, analysis, training, testing, data synthesis, hardware, software, standards, economic consideration of selection of techniques and processes, and interoperability. The contractor shall have technical familiarity to work with the following STI subject areas:

1) Installation, demonstration, test, validation and evaluation of new and existing software, tools, methods and software measurement technologies; 2) evaluations of the quality of existing software systems and recommending improvements; 3) needs and risk analyses of software packages (developmental, non-developmental and commercial off the shelf (COTS) relative to mission requirements; 4) development, updating, and evaluation of software engineering standards, specifications, handbooks, or manuals; 5) supporting the revision and development of military standards and specifications; 6) verification and validation of solution sets and protocols; 7) assisting user organizations with all aspects of software acquisition; 8) development of life cycle cost models; and 9) customization of software analytical tools, models, decision aids, screening methods and techniques used to evaluate and support the authenticity and continuity of DoD, national, commercial, and international information systems.

1.4.2.2 Cyber Security (CS) is defined as the technologies, processes, and practices designed for prevention of damage to, protection of, and restoration of computers, electronic communications systems, electronic communication services, wire communication, and electronic communication, including information contained therein, to ensure its availability, integrity, authentication, confidentiality, and non-repudiation. While focused dominantly on information in digital form, the full range of CS also encompasses analog and physical form. The scope is not limited to information security; it includes the entire field of CS (availability, identification and authentication, confidentiality, integrity, and non-repudiation) and includes the economic considerations with respect to selection of CS techniques, CS processes, and industry trends. It also includes Information Operations (IO), e.g. operational security of IT, the use of the electromagnetic spectrum for IT purposes and computer network operations. In a contested cyber environment, CS supports Mission Assurance (MA) measures required to accomplish mission essential objectives. CS support to MA entails prioritizing mission essential functions, mapping mission dependence on cyberspace, identifying cyber-related vulnerabilities, and mitigating risk of these vulnerabilities. The contractor shall have technical familiarity to work with the following STI subject areas:

1) Full spectrum cyber operations including developing CS planning frameworks and development of requirements and mission needs documents and conducting trade-off analyses; 2) cyber threat avoidance; 3) defensive cyber operations (DCO) including red teaming threat assessments; and 4) cyber offensive and exploitative operations, to include: cyber technology research, analysis and prototyping, cyber situational and mission awareness, cyber modeling, simulation and war gaming, integrating innovative cyber technologies to enable cyber superiority and the facilitation of technology transition.

1.4.2.3 Modeling and Simulation (M&S) is defined as the use of models, including emulators, prototypes, simulators, and stimulators, either statically or over time, to develop data as a basis for making managerial or technical decisions. The scope includes all classes of models and simulations, and may involve the interface of real-world systems (e.g., command and control systems, intelligence systems, weapon systems and components, sensors) with models or simulations, as well as working with model elements, standards and specifications, and modeling system descriptions, interfaces, and data communication methods. The contractor shall have technical familiarity to work with the following STI subject areas:

1) M&S subject matter expertise for supporting program reviews, strategic planning, exercise management, knowledge acquisition, and operations coordination and monitoring; 2) providing support for DoD certification of compliance with High Level Architecture (HLA) for federates; 3) evaluating and improving models and databases that support IA; 4) the development and implementation of modeling and analysis tools for collaborative databases and data stores; 5) applying M&S for evaluating the effectiveness of forces, systems, doctrines, tactics and plans in support of training, analysis and acquisition activities; 6) evaluating M&S interoperability, reuse, capabilities and cost-effectiveness, particularly as fostered by the common technical framework; and 7) supporting cross-domain coordination, configuration management, and military exercises and demonstrations.

1.4.2.4 Knowledge Management and Information Sharing. Knowledge management (KM) is defined as the analysis and technical support of practices used in an organization to identify, create, represent, distribute, conduct and enable the adoption and leveraging of good practices embedded in collaborative settings and, in particular, in organizational processes. Information Sharing (IS) is defined as data exchange, communication protocols and technological infrastructures. It includes standardization of information, as well as the human functions involved in the semantic, pragmatic and social levels of organizational semiotics. The two areas of KM and IS are intertwined as information sharing is the foundation for knowledge management. The contractor shall have technical familiarity to work with the following STI subject areas:

1) Expertise in working with comprehensive collections of empirical data on the development, operation, and maintenance of software systems; 2) analysis of this data (data may be from new or existing sources) – this includes data analytics (data to decisions); 3) supporting the development, delivery and/or evaluation of training (including classroom, computer-based-instruction, videotape, distance learning, and other forms of instruction); 4) expertise in advanced collaborative analysis tools that allow for the integration of existing and in-process social networking and intelligence data exploitation tools; and 5) supporting the evaluation, development and implementation of a wide variety of intelligence and collaboration systems including Global Net Centric Systems -- this subject area could involve computer system engineering and integration, software engineering and software technology, R&D transition, and computer network and communication engineering, development and deployment (including engineering, development and deployment involving both network devices/hardware and applications).

1.5 Program Management & Reporting

1.5.1 Management Requirements

1.5.1.1 General. The Contractor’s organization shall be established with authority and capacity to effectively accomplish the management of this CS TAT Indefinite Delivery/Indefinite Quantity (IDIQ) contract and the oversight of resultant TAT order requirements. The program management required to manage the requirements within an individual TAT will be proposed at the TAT level.

1.5.1.2 The Contractor shall manage all aspects of work associated with providing services to the Government under this contract and any associated TAT orders. At a minimum, the Contractor shall:

a. Respond to, execute, and manage a large volume of task orders effectively;

b. Manage employees and performance associated with any issued TAT order.

c. Maintain a capable and stable workforce (recruit, retain, and replace qualified employee with appropriate security clearances), to include reachback capability as necessary.

d. Ensure that new/replacement personnel meet or exceed the qualifications stated in the original TAT proposal.

e. Develop and maintain a customer-oriented philosophy, create an environment that improves employee performance, solves programmatic issues and delivers high-quality performance.

f. Respond to Contracting Officer (CO), Government Program Manager (PM) or Deputy Program Manager (DPM), and Contracting Officer Representative (COR) requests in a timely manner.

g. Identify, mitigate, and manage organizational conflicts of interest and other performance risks.

h. Document and notify the Government of actual or potential Contractor program management problems and/or performance deficiencies. Perform corrective actions for all identified Contractor program management problems and/or deficiencies IAW time frames specified by CO.

i. Develop and submit all required information and deliverables in accordance with individual TAT requirements and timelines (to include the final technical report).

j. Plan, control, monitor, and report cost, schedule and performance metrics.

1.5.1.3 Resumes may be required on individual task orders.

1.5.1.4 The Contractor shall continually monitor the cost and performance of applicable TATs awarded under this contract. The contractor shall immediately notify the CO of any problems noted. The Contractor shall provide any additional cost and schedule information as requested by the CO to support TAT performance. The Contractor shall provide this information in the Monthly Cost Tracking/Financial Report.

1.5.1.5 The Contractor shall provide the technical approach and expertise, organizational resources, and management controls necessary to meet the cost, performance and schedule requirements specified herein and in any resultant TAT during the period of performance of this contract and/or applicable TAT order.

1.5.2 Reporting Requirements

1.5.2.1 General. The reporting requirements listed below are meant to assist the DTIC IAC PMO in tracking and managing the overall CS TAT effort. The information requested below will also be required to be reported on individual task orders and is not to be viewed as a duplication of data reporting but a summation of data for all task order efforts under the CS TAT contract.

1.5.2.2. Final Technical Report (TR). For each TAT, the contractor shall provide a final detailed technical report to include task background, objectives, assumptions, specific data collected, analyses conducted, conclusions and recommendations. Each report shall be delivered to the Requiring Activity (RA) and COR. Under authority of the RA, (when an unclassified document or a classified document) with approval by the COR, each TR shall have a Distribution Statement. Every effort will be made to avoid utilizing Distribution F (Further Distribution Only As Directed By The Requesting Activity Identified In The PWS For Each Individual Task Order). However, if sensitive internal information is contained in the TR, a sanitized version of the TR shall be created for distribution within DoD (Distribution D) and inclusion in the DTIC Database (STI repository). If the TR is CLASSIFIED, the COR and RA will review the document for appropriate security markings IAW DoD Security Guidelines and will also have an appropriate distribution statement assigned. The Contractor shall submit an UNCLASSIFIED abstract (Report Documentation Forms, Standard Form 298) of every TR (i.e., all TAT report deliverables) for all TRs containing classified information. The COR will be responsible for coordinating and submitting documents to the IAC BCO centers for inclusion in the DTIC Database. (CDRL A001).

1.5.2.3. Monthly Metrics Report. The contractor shall obtain feedback on the quality, timeliness, and overall utility of its CS TAT products and services from CS TAT RA customers. The contractor shall submit a monthly electronic report that will include, as a minimum: List of technical reports/deliverables submitted to the Government; number of training, symposia, seminars, or similar events; brief summary of activities completed during the period; number of attendees at training or similar events; customer satisfaction & surveys. Template for submission is embedded in the CDRL provided in Section J. The report shall be submitted via email to the Contracting Officer and DTIC-I COR. (CDRL A002)

1.5.2.4. Monthly Cost Tracking and Financial Report. This report shall provide cumulative totals for each TAT. The report shall include as a minimum: List of all open/closed delivery orders with an abbreviated title of requirement, RA, start and end date, ceiling value, funded level, amount expended, percent expended, obligated balance, total dollars awarded to all subcontractors, total dollars awarded to small business subcontractors, performance schedule status, Security Clearance requirements, task order status (open or closed by Contracting Officer), total Full Time Equivalents (FTE), and change of FTEs during the period (plus or minus), and for small business prime contractors in the Directed Energy and Advanced Materials award pools, the percentage of personnel costs incurred for employees of the prime contractor. Template for submission is embedded in the CDRL provided in Section J. As of 30 September (government fiscal year end), the contractor shall submit the report providing a summation for the fiscal year. These reports shall be submitted via email to the CO and the DTIC-I COR. (CDRL A003)

1.5.2.5. Weekly Activity Report (WAR). The DTIC-IAC WAR is the CS TAT contractor’s weekly report that details the contractor’s most significant accomplishments. Procedures for submission are embedded in the CDRL provided in Section J. Electronic submissions (MS Word compatible) should be sent to iacwar@dtic.mil and to the specific DTIC-I COR not later than noon every Tuesday. (CDRL A004)

1.5.2.6. STI Repository Deliverables. The IAC Basic Center Operations centers serve as the DoD repository for collection, processing, management, analysis, and dissemination of DoD STI, including STI generated as a part of the CS TAT effort. The CS TAT contractors shall allow free use and access among all IACs to all information generated under this contract or any associated task order subject to the limitations posed by the RA for which the TAT work was performed. All CS TAT generated or collected STI (e.g. Final Technical Report and other technical data thereto) shall be provided to the COR and/or TAT Technical Point of Contact (TPOC) for inclusion in the DTIC repository. The DTIC PMO will coordinate with the RA for release of such data and/or information. (CDRL A006). This will be further defined per TO. CS TAT contractors shall submit, on a quarterly basis, an STI Assessment Report (CDRL A005) for each TAT.

1.5.2.7. Redacted CS TAT Contract and TATs. To support transparency of Government contracting the contractor shall provide a redacted copy of the awarded CS TAT contract appropriate for public release, which the Government intends to post to a public web site. Additionally, for each TAT awarded, the contractor shall provide a redacted copy appropriate for public release, which the Government also intends to post to a public website. (CDRL A008).

1.5.2.8. Contract Manpower Reporting (CMR). The contractor shall report ALL contractor labor hours (including subcontractor, independent consultant and wholly owned subsidiary labor hours) required for the performance of services provided under this contract via a secure data collection site. The contractor is required to completely fill in all required data fields at http://www.ecmra.mil. Reporting will be at the order level and must be reported according to the Requesting Activity of the order.

Reporting inputs will be for the labor executed during the period of performance for each Government Fiscal Year (FY), which runs 1 October through 30 September, while the order remains active. While inputs may be reported any time during the FY, all data shall be reported no later than 31 October* of each calendar year. Contractors may direct questions to the Contract Manpower Reporting Application (CMRA) help desk.

*Reporting Period: Contractors are required to input data by 31 October of each year.

Uses and Safeguarding of Information: Information from the secure web site is considered to be proprietary in nature when the contract number and contractor identity are associated with the direct labor hours and direct labor dollars. At no time will any data be released to the public with the contractor name and contract number associated with the data.

User Manuals: Data for Air Force service requirements must be input at the Air Force CMRA link. However, user manuals for Government personnel and contractors are available at the Army CMRA link at http://www.ecmra.mil.

1.6 General Information/Administration

1.6.1 Publications and References. Applicable publications, directives, handbooks, and standards provide guidance and direction in performance of the requirements. Applicable publications, directives, and/or standards will be specified within each task order and the contractor shall comply with the most current version of any applicable document. Unless otherwise specified the issue of these documents are those listed in the effective Department of Defense Index of Specifications and Standards, maintained on-line at http://www.dtic.mil/whs/directives/. In the event of a conflict between this PWS and any document referred to herein, the requirements of this PWS shall prevail unless the document is mandated by law. The Contractor shall be responsible for notifying the CO in writing within 30 days of publication revisions/changes/supplements if there is any impact on the scope of work to be performed under this contract or order hereto.

1.6.1.1 Directive/Guidance Documents. The terms “directive” and “guidance” shall be defined as follows:

1.6.1.1.1 Directive Publication. Compliance with directive publications by the Contractor is mandatory. If a directive publication requires compliance with one or more publications or parts of other publications, the referenced publication(s) shall be applicable to the Contractor as it applies to the original directive.

1.6.1.1.2 Guidance Publication. Provides information and guidance for the Contractor to perform a particular job or carry out an operation in a manner compatible with the applicable procedure.

1.6.2 Documentation. Documentation developed or acquired may include existing data only if such data has been provided to the Government with unlimited data rights as defined by DFARS clause 252.227-7013, Rights in Technical Data--Noncommercial Items or DFARS clause 252.227-7014, Rights in Noncommercial Computer Software and Noncommercial Computer Software Documentation, as incorporated in Section I. The Contractor may choose to document its own, subcontractors, and vendors existing commercial off-the-shelf (COTS) hardware; however, the Contractor must comply with the requirements in 252.227-7013 and 252.227-7014, and notify the Contracting Officer prior to committing to the use of privately developed items, components, processes or computer software to be delivered with other than unlimited rights. If at any time documentation with other than unlimited rights is proposed for delivery under this contract, the Contracting Officer reserves the right to negotiate the minimum technical data rights required under this contract.

1.6.2.1 The contractor shall be required to allow free use and access among all IACs to all information generated under this contract subject to the limitations posed by the RA for which the TAT work was performed. The Government will coordinate with the RA for release of such data and/or information. STI generated and/or developed exclusively with Government funds will be made available for distribution by the Government under the Rights in Technical Data Clause, DFARS 252.227-7013. The Government holds unlimited rights to the distribution of the material as stated in DFARS 252.227-7013.

1.7 Security Requirements

1.7.1 General. Access to classified information will be limited to the subject fields of interest evidenced by the scope of the task order PWS. The contractor shall handle any classified information required to perform its tasks in conformity with established DoD security regulations, including DoD 5220.22-R, the DoD Industrial Security Regulation, and DoD 5220.22-M, National Industrial Security Program Operating Manual.

1.7.2. Personnel & Facility Security Qualifications. Security qualifications include the following:

a. All Contractor personnel shall comply with the provisions of DoD 5220.22M, National Industrial Security Program Operating Manual, March 2013, (hereafter known as the NISPOM) and DoD Instruction 5200.01, “Security Program and Protection of Sensitive Compartmented Information,” Jun 11.

b. The prime contractor shall possess a minimum Top Secret Facility Clearance. Specific security clearance requirements will be specified on a DoD Contract Security Classification Specification (DD Form 254) per individual TAT order. Unclassified task orders do not require a facility clearance issued by DSS nor a DD Form 254. Individual TATs may require contractor employees to have routine physical access to a Federally-controlled facility and/or routine access to a Federally-controlled information system. Personnel performing on individual TATs may be required to have a clearance up to the Top Secret (compartmented and collateral) level. The contractor shall be required to safeguard information at the level specified in the DD Form 254 in this contract and/or the TAT. Collection and use of unclassified, unclassified but limited distribution, and classified (foreign and domestic) information in the performance of this PWS is authorized as long as all security regulations and restrictions are adhered to.

c. The contractor shall be required to provide employees who already possess the appropriate security clearance level for all task orders. The planned utilization of non-U.S. Citizens in task order performance must be identified by name and country of citizenship in the task order proposal. Foreign Nationals shall not be allowed access to Classified or Critical Program Information unless approved on a case-by-case basis by DSS.

d. Any costs incurred for clearances shall be done at the contractor’s expense and shall not be allowed as direct cost against this contract.

e. The Defense Security Service (DSS) has security inspection responsibility for Top Secret information and retains responsibility for all classified information released or developed under the contract and held within the DoD Contractor’s facility. Guidance is appended as per the DoD Contract Security Classification Specification (DD FORM 254 Section J Exhibit A).

1.7.3. Protection of Government Systems/Information. The contractor shall be responsible for safeguarding all Government information or property provided for contractor use. At the close of each work period, Government information, facilities, equipment and materials shall be secured as specified.

1.8 Publishing Requirements

1.8.1. Marking of Products.

a. All information products prepared and published by the CS TAT Contractor shall contain a Distribution Statement in accordance with DoD Directive 5230.24, ‘Distribution Statements on Technical Documents,’ on the cover page of a report or document, on the media case containing information in electronic format, and on the opening screens of any computer or visual display. All information products shall also include proper unclassified and classified markings in accordance with DoD Directives.

b. All items published and/or furnished by the CS TAT Contractor shall reflect that the products were prepared in part, or wholly, as the case may be, under the auspices of the DoD IAC program and will include the CS TAT contract number and distribution statement. Items shall also include the statement that the work effort was sponsored by the Department of Defense Information Analysis Centers.

1.9 Period and Place of Performance. The period and place of performance will be specified in each task order. The contractor shall provide all facilities, including office space, which includes classified and unclassified storage, utilities, materials, equipment (including all computer hardware) and any other property necessary and sufficient for any task order not taking place onsite at a Government location, unless otherwise specified in the task order.

SECTION 2

SERVICES SUMMARY

The Government will evaluate performance of the services listed in the services summary (SS) table below to determine if it meets the performance thresholds. CORs will follow the methods of surveillance specified in the Government’s Quality Assurance Surveillance Plan, record all surveillance observations, and when the proper level of performance is not met, the CO will issue a Corrective Action Request (CAR). When an observation indicates defective performance, the COR will require the contractor representative to initial the observation. The initialing of the observation does not necessarily constitute concurrence with the observation, only acknowledgment that they have been made aware of the defective performance.

SERVICE SUMMARY TABLE 2-1

SECTION 3

GOVERNMENT-FURNISHED PROPERTY AND SERVICES

3.1 General Information. The Contractor shall ensure accurate control and accountability of all Government Furnished Property (GFP) in accordance with Government regulations. As applicable, any GFP to be provided the Contractor will be identified in each TO.

3.2 Government-Furnished Property/Equipment (GFP/GFE)

As applicable, any GFP/GFE to be provided the Contractor will be identified in each TO.

3.2.1 Documents. Unless otherwise indicated, the Government will furnish or make available to the Contractor any documentation/material required to support performance on a TO-by-TO basis under this contract.

3.2.2 Government Systems. Unless otherwise indicated, the Government will furnish or make available to the Contractor access to any Government systems required to support performance on a TO-by-TO basis under this contract.

SECTION 4

APPENDICES

4.1 Acronyms

Acronym

Meaning

BCO

Basic Center of Operations

CAR

Corrective Action Request

CDRL

Contract Data Requirements List

CIP

Critical Infrastructure Protection

CO

Contracting Officer

CR/TA

Critical Reviews and Technical Assessments

COCOM

Combatant Command

COR

Contracting Officer's Representative

COTS

Commercial-off-the-shelf

DFARS

Defense Federal Acquisition Regulation Supplement

DIACAP

Department of Defense Information Assurance Certification and Accreditation Process

DoD

Department of Defense

DoDD

Department of Defense Directive

DoDI

Department of Defense Instruction

DoD-R

Department of Defense Regulation

DoD-M

Department of Defense Manual

DPM

DTIC-IAC Deputy Program Manager

CS

Cyber security and information systems

DIACAP

DoD Information Assurance Certification and Accreditation Program

DSS

Defense Security Service

DTIC

Defense Technical Information Center

FTE

Full Time Equivalent

GFE

Government Furnished Equipment

GFP

Government Furnished Property

HTML

Hyper Text Mark-up Language

IA

Information Assurance

IAC

Information Analysis Center

IAW

In Accordance With

IDIQ

Indefinite Delivery/Indefinite Quantity

ISS

Information Support System

NISPOM

National Industrial Security Program Operation Manual

NTIS

National Technical Information Service

OPSEC

Operational Security

OSD

Office of the Secretary of Defense

PM

Program Manager

PMA

Program Management Analyst

PMO

Program Management Office

PWS

Performance Work Statement

RA

Requesting Activity

R&D

Research & Development

RDT&E

DoD Research Development Test and Evaluation

SME

Subject Matter Expert

SOARs

State-of-the-Art Reports

SOW

Statement of Work

SS

Services Summary

STI

Scientific and Technical Information

STIP

Scientific and Technical Information Program

TAT

Technical Area Task

TO

Task Order

TPOC

Technical Point of Contact

WAR

Weekly Activity Report

WWW

World Wide Web

XML

Extensible Markup Language

4.2 GLOSSARY

1. Analysis - A qualitative or quantitative information evaluation requiring technical knowledge and judgment.

2. Applied Research - Applied research means the effort that (a) normally follows basic research, but may not be severable from the related basic research; (b) attempts to determine and exploit the potential of scientific discoveries or improvements in technology, materials, processes, methods, devices, or techniques; and (c) attempts to advance the state-of-the-art. When being used by contractors in cost principle applications, this term does not include efforts whose principal aim is the design, development, or testing of specific items or services to be considered for sale.

3. Basic Center of Operations (BCO) – Performed under a separate contract, the IAC Basic Centers of Operation serve as the DoD repository for collection, processing, management, analysis, and dissemination of DoD STI, including STI generated as a part of the CS TAT effort.

4. Basic Research - Research directed toward increasing knowledge in science. The primary aim of basic research is a fuller knowledge or understanding of the subject under study, rather than any practical application of that knowledge.

5. Certification - Comprehensive evaluation of the technical and non-technical security features of an IT system and other safeguards, made in support of the accreditation process, to establish the extent that a particular design and implementation meets a set of specified security requirements.

6. Contracting Officer (CO) - A person with the authority to enter into, administer, and/or terminate contracts and make related determinations and findings. The term includes certain authorized representatives of the Contracting Officer acting within the limits of their authority as delegated by the Contracting Officer.

7. Contracting Officer's Representative (COR) - The COR must be a Government employee, unless otherwise authorized in agency regulations; must be qualified by training and experience commensurate with the responsibilities to be delegated in accordance with department/agency guidelines; may not be delegated responsibility to perform functions at a contractor's location that have been delegated under FAR 42.202(a) to a contract administration office; has no authority to make any commitments or changes that affect price, quality, quantity, delivery, or other terms and conditions of the contract; and must be designated in writing, and a copy furnished the contractor and the contract administration office.

8. Contractor - The use of the word "contractor" identifies the company, group or university who will be awarded the contract to perform the requirements of this PWS.

9. Designated Approval Authority (DAA) - Official with the authority to formally assume the responsibility for operating a system or network at an acceptable…