DSOR_II_DRAFTPWS_Oct2019.pdf

DRAFT : DRAFT : DRAFT

Performance Work Statement

AFMC Workflow Management Support

(DSOR AMS/DMA)

DSOR II FA8770-20-R-0010

October 2019

DRAFT Performance Work Statement: AFMC Workflow Management Support (DSOR AMS/DMA) Contract Number: FA8770-20-R-0010 DRAFT

Air Force Life-Cycle Management Center 2 Business Enterprise Logistics Systems Depot Maintenance Branch

TABLE OF CONTENTS

1.0 DESCRIPTION OF SERVICES AND GENERAL INFORMATION

1.1 PROGRAM OVERVIEW

1.2 PROGRAM OBJECTIVE AND BACKGROUND

1.3 APPLICABLE DOCUMENTS

1.4 DESCRIPTION AND SCOPE OF WORK

1.5 DELIVERABLES SCHEDULE

1.5.1 Inspection and Acceptance Criteria

1.6 PROGRAM MANAGEMENT SUPPORT ACTIVITIES

1.7 CONTRACTOR RESPONSIBILITIES

1.7.1 Provision of Services

1.7.2 Constraints

1.7.3 Reporting and Communications

1.7.4 Change Management

1.8 PLACE OF PERFORMANCE

1.9 HOURS OF OPERATION AND HOLIDAYS

1.9.1 Hours of Work

1.9.2 Government Holidays

1.10 PERIOD OF PERFORMANCE

1.11 CONTRACTOR PERSONNEL REQUIREMENTS

1.12 TRAVEL

1.13 QUALITY ASSURANCE/CONTRACTING OFFICER’S REPRESENTATIVE

1.14 TECHNICAL PERFORMANCE

1.15 CONTRACTOR PERFORMANCE ASSESSMENT REPORT (CPAR)

1.16 BASE ACCESS REQUIREMENTS

1.16.1 Common Access Card (CAC)

1.16.3 Local Security Requirements

1.16.4 Operations Security

1.16.5 Level of Security Requirements

1.16.6 National Agency Check With Inquiries (NACI)

1.16.7 Sensitivity of Data

1.16.8 Mission Essential

Air Force Life-Cycle Management Center 3 Business Enterprise Logistics Systems

1.16.9 Section 508 of the Rehabilitation Act

1.16.10 Government POCs

2.0 SERVICES SUMMARY (SS)

3.0 GOVERNMENT-FURNISHED RESOURCES

3.0.1 Base Support

3.0.2 Information Sources Access

3.0.3 Utilities

3.0.4 Security Police and Fire Protection

APPENDIX A – CONTRACTOR MANPOWER REPORTING APPLICATION (CMRA)

APPENDIX B – VOLUNTARY PROTECTION PROGRAM (VPP)

APPENDIX C – ACRONYMS

Air Force Life-Cycle Management Center 4 Business Enterprise Logistics Systems

1.0 DESCRIPTION OF SERVICES AND GENERAL INFORMATION

The Contractor shall possess expertise and leadership to support the Depot Source of Repair Automated Management System (DSOR AMS) and the Depot Maintenance Interservice Support Agreement (DMISA) Management Application (DMA) utilizing SharePoint 2013 for “no code” customization of SharePoint capabilities. The Contractor shall possess technology expertise in SharePoint 2016 and 2019; and support a scheduled SharePoint 2019 migration in Fiscal Year 2020. The Agile methodology project management approach is mandatory and applied through a collaborative effort between the program office, technical designer team, and customer.

1.1 PROGRAM OVERVIEW

The Air Force Materiel Command (AFMC) Workflow Management Support, Depot Source of Repair Automated Management System (DSOR AMS) and Depot Maintenance Interservice Support Agreement Management System (DMA) is managed in the Air Force Life-Cycle Management Center (AFLCMC), Business and Enterprise Systems Directorate (AFLCMC/HI), Enterprise Logistics Systems Division (AFLCMC/HIA), Depot Maintenance Branch (HIAM), at Wright-Patterson Air Force Base (WPAFB), Ohio (OH). The AFMC Workflow Management Support (DSOR AMS/DMA) initiatives provide detailed technical and functional support for the Headquarters (HQ) AFMC Directorate of Logistics, Engineering, and Force Protection (HQ AFMC/A4), HQ AFMC Product Support Management Division (A4F), and Source of Repair Branch

(A4FD).

The DSOR AMS is the authoritative source for all DSOR activities and associated processes. The DSOR AMS is an automated tool that provides both the steps for each DSOR process and a repository for the historical documentation. The DSOR AMS provides workflows used by the Air Force (AF) to capture and manage all DSOR supporting documents and decisions used to posture repair work to the appropriate repair depot. The DSOR AMS design concept allows for joint expansion into other Department of Defense (DoD) Services, Defense Logistics Agency (DLA), and Federal Agencies. The DSOR AMS is not a Joint service application.

The DMA supports the DSOR Depot Maintenance Interservice (DMI) process, a DoD Joint Process. The DMA is a DMISA Management and Execution Tool for the AF, other DoD-Services, DLA, and other Federal agencies supporting the establishment, management, execution, and approval of AF DMISA documentation. The capability was designed for the AF, but could be made available outside the AF. The DMA establishes a standardized DoD DMISA repeatable process; and provides a shared data repository between the DoD-Services. The AF DMA is not designated Joint, but is a Joint Collaborative effort. The AF mandates the usage of the DMA tool to manage all AF DMISAs and all DoD-Services utilize the toolset in support of AF DMISAs.

Air Force Life-Cycle Management Center 5 Business Enterprise Logistics Systems

The Defense Information Systems Agency (DISA), Defense Enterprise Portal Services (DEPS), provides the hosting platform for the DSOR AMS and the integrated DMA site collections.

1.2 PROGRAM OBJECTIVE AND BACKGROUND

1.2.1 The DSOR AMS initiative supports the AFMC DSOR business management processes by moving to an AFMC enterprise environment and automating the processes.

The DSOR processes provide a structured approach for making and implementing depot maintenance support decisions. The DSOR decision process is a mandatory requirement for systems and equipment which will require depot maintenance support. DSOR AMS captures and manages all supporting documentation and decisions used in the DSOR life-cycle process across HQ AFMC, AFMC Centers, and Air Force Space Command (AFSPC).

The objective of this initiative is to significantly reduce time and manpower required by improving information accessibility; and reduce redundant or duplicative data entries into multiple systems within the AFMC community.

1.2.2 The DMA initiative supports the DSOR DMI process, a DoD Joint Process, across HQ AFMC, AFMC Centers, and AFSPC. A DMISA is a formalized agreement whereby one Service/Agency (the Agent) obligates itself to provide depot maintenance support for another Service/Agency (the Principal). DMISAs may be used when a Military Service is the Agent, and another Federal Government department or agency, or element thereof, is the Principal. The DMA is a data repository where the standardized DoD DMISA process, templates, and documentation are maintained and stored. The objective of this initiative is to improve document execution of DoD DMISA documentation; and maintain the established shared data repository for a centralized storage location for all DoD-Services supporting AF DMISAs.

In support of the DMA, HQ AFMC A4FD has established an on-going Joint DMISA Integrated Product Team (IPT) to further standardize the DMISA process, templates, exhibits, and documentation across all DoD-Services. The AF maintains configuration control of the DMA site content and the DEPS site collection.

1.2.3 The DSOR AMS and DMA workflows currently utilize SharePoint 2013 out-of-the-box features for required configuration designs and changes to meet all capability and functionality requirements. The Contractor shall maximize available components within the Microsoft SharePoint environment; and shall utilize the tools and capabilities provided within the DISA DEPS environment. DSOR AMS and DMA is a “no code” customization of SharePoint capabilities supporting configuration design, Baseline Change Requests (BCRs), configuration modifications (maintenance/sustainment), technical workflow re-designs (major/minor) associated with mandated policy guidance, prototyping, life-cycle support documentation, interservice agreement documentation, functional administration, training (on-site and temporary duty (TDY)), and Help Desk Support Tier Levels 2-3 (technical and functional).

Air Force Life-Cycle Management Center 6 Business Enterprise Logistics Systems

1.2.4 DSOR AMS and DMA are hosted in the DISA Joint Information Environment, which operates within the DISA Defense Enterprise Computing Center (DECC) at Mechanicsburg, Pennsylvania. DSOR AMS and DMA are site collections on the DISA DEPS SharePoint Shared Farm. DISA provides operational support for an integrated network and application infrastructure serving a range of hosting environment needs. The Contractor shall provide technical planning and security measure support to DISA addressing operational issues impacting the life-cycle management of the DSOR AMS and DMA. The Contractor shall support technology upgrades when the DEPS environment moves to a newer version of SharePoint.

The DSOR AMS inherits the DISA DEPS Authority to Connect (ATO). This initiative does not require any Risk Management Framework (RMF), Information System Security Manager (ISSM), and Information System Security Officer (ISSO) support.

The DSOR AMS, DMA, and DAPM site collections will migrate to SharePoint 2019 between 01 October 2019 and 24 June 2020. The Contractor shall possess comprehensive knowledge of SharePoint 2010, 2013, 2016, and 2019. Additionally, the Contractor shall possess technology background in SharePoint Designer, InfoPath, Visio, Quick Apps, and Nintex in support of the DSOR AMS, DMA, and DAPM site collections.

1.3 APPLICABLE DOCUMENTS

In performing the services specified in the Performance Work Statement (PWS), the Contractor shall comply with the most current revision, change, or version of the Federal statutes and DoD, AF, and AFMC regulations, policies, instructions, and directives.

However, these are subject to change by the legislating or issuing authority.

United States Code, Title 10, Section 2460, Definition of Depot-Level Maintenance and Repair

United States Code, Title 10, Section 2464 “Core” law United States Code, Title 10, Section 2466 “50/50” law United States Code, Title 10, 2366a, core requirement by Milestone A United States Code, Title 10, 2366b, core percentages by Milestone B DoDD 4151.18, Maintenance of Military Materiel DoDI 4151.24, Depot Source of Repair (DSOR) Determination Process DoDI 5000.02, Operation of the Defense Acquisition System AFI 63-101/20-101, Integrated Life-Cycle Management AFMCI 21-101, Depot Maintenance Activation Planning AFMCI 21-201, The Overseas Workload Program AFMAN 63-122, Depot Source of Repair Planning and Activation AFMAN 63-122, Chapter 7, Paragraph 7.2.3, Depot Maintenance Interservice

Support Agreements

Air Force Life-Cycle Management Center 7 Business Enterprise Logistics Systems

1.4 DESCRIPTION AND SCOPE OF WORK

1.4.1 This is a non-personal services contract as defined in the Federal Acquisition Regulation (FAR) 37.101—Definitions. The Contractor shall have a comprehensive understanding of the DoD DSOR/DMISA business management processes; and shall provide technical and functional support for process and workflow management, AFMC business management processes and templates, and maintenance and sustainment of workflows, technical re-designs (major/minor) associated with Statutory Law, Federal, DoD Directives, and mandated AFI 63-101 and AFMAN 63-122 policy guidance. The Contractor shall also provide maintenance and sustainment of the DSOR AMS and DMA site collections. The Contractor shall design a ready-to-use deliverable based on the Government’s requirements.

The Contractor’s responsibilities shall include “no code” configuration design and maintenance and sustainment of the following activities:

System, application, platform, and configuration design support and administration operating within the Air Force and Department of Defense computing environment.

Transitional start-up of the maintenance and support activities for the system that was previously designed, implemented, and supported by another provider.

Maintenance and Sustainment of Depot Source of Repair II (DSOR II), DSOR AMS, DMA, DAPM, and other associated program site collection environments hosted on the DISA DEPS SharePoint Farm.

Site Collection Administrators for the DSOR II, DSOR AMS, DMA, DAPM, and other associated program site collections designed to support the mission requirements.

Maintenance and Sustainment of DSOR II, DSOR AMS, DMA, and DAPM applications – all SharePoint versions 2010, 2013, 2016, 2019, SharePoint Designer, InfoPath, Visio, Quick Apps, and Nintex.

Maintenance and Sustainment of the DSOR AMS and integrated DMA application providing technical design and functional support for process and workflow management.

Maintenance and Sustainment of the DAPM statistical model providing technical design and functional support.

Maintenance and Sustainment of the repositories for historical documentation of the DSOR II, DSOR AMS, and DMA site collections.

Senior-level technical design and functional support of workflows, technical workflow designs/re-designs (major/minor) associated with mandated policy guidance, maintenance and sustainment of the business management processes templates, and the application hosted environments.

Senior-level technical design and functional expertise to support complex DSOR workflow management to configure, customize, and prototype designs supporting the DSOR processes, instructions, templates, and modification requirements. Requires utilizing SharePoint out-of-the-box and third-party toolsets from a different, unconventional, and new perspective to meet complex design requirements.

Air Force Life-Cycle Management Center 8 Business Enterprise Logistics Systems

Senior-level technical design and functional expertise to support complex factors aligning with AF Enterprise Objectives for the Depot Activation Prioritization Model (DAPM) supporting depot activation prioritizations

Senior-level technical design and functional expertise to support complex and robust SharePoint designs to bring calculations and formulas into SharePoint to replace the functionality of spreadsheets; and to support automated and web-based Metrics through implementation of “no code” solutions.

Senior-level technical expertise to support Preliminary and Critical Design Reviews in support of four quarterly releases yearly.

Technical, operational, and administration support for the DEPS site collections (DSOR II, DSOR AMS/DMA, DAPM and other associated program site collection environments) during Defense Information Systems Agency (DISA) Defense Enterprise Portal Services (DEPS) SharePoint technology upgrades.

Senior-level software engineering support activities associated with site collection administration, hosting environments, and leading technical upgrades and re-design activities.

Senior-level software engineering technical support to maintain currency of the operational architecture diagrams supporting DSOR II, DSOR AMS, and DMA. These diagrams shall be in alignment with the DoD Architecture Framework (DoDAF), Version 2.02, dated August 2010.

Technical and functional support for re-designs (major/minor) associated with mandated DSOR policy guidance levied on the DSOR business management processes.

Technical and functional support for configuration designs and production environments.

Functional, technical, and business process administration for technical interchange and requirements definition and discussions, prototypes, testing, and deployment activities.

Technical and functional senior-level support for DSOR health metrics and established and DSOR/DMISA reporting requirements.

Technical and functional direct operational support for requirements implementation, configuration and customization design, modifications, test activities, delivery, and deployment.

Technical and functional support for providing workflow and product documentation in-line help sources and references for DSOR II, DSOR AMS, DMA, and other associated program site collection environments.

Technical and functional senior-level support for problem resolution to DSOR/DMISA processes, workflows, data, and site collections.

Technical and functional Help Desk Support – Tier Levels 2-3, 0800-1700 EST/EDT, Monday-Friday.

Technical and functional senior-level support for data conversion and data migration in support of process improvements, technical upgrades, and technical and functional re-designs.

The Contractor shall maintain regular communications with DISA DEPS and provide to the Government immediate notification of any downtime, issues, problems, or areas of concern with the DISA DEPS site collection environments. Downtime of DSOR II, DSOR AMS, DMA, DAPM, and other associated program site collection environments

Air Force Life-Cycle Management Center 9 Business Enterprise Logistics Systems within the control of the DSOR II program office Site Collection Administrators need to be resolved within 4-hours.

The Contractor shall report application downtimes in the Monthly Status Report identifying root cause of problem, length of downtime, and resolution measures.

(A001)

The Contractor shall possess senior-level knowledge of SharePoint, Nintex, and Quick Apps to support robust and complex SharePoint designs utilizing “no code” solutions. Designer skills shall utilize SharePoint Lists, Libraries, Workflows, Web Parts, and the following associated tools to include:

SharePoint 2010, 2013, 2016, and 2019 (SharePoint Designer, InfoPath, and

Visio) Quick Apps – supporting SharePoint 2010, 2013, 2016, 2019 and future technology upgrades Nintex – supporting SharePoint 2010, 2013, 2016, 2019 and future technology upgrades Client-side scripting languages such as HTML, XML, CSS, and Javscript.

New software products and capabilities may be added during the Period of

Performance (PoP).

1.4.2 The Contractor shall provide senior-level technical and functional SharePoint administration support for an integrated set of AFMC DSOR/DMISA business management processes supporting the DoD DSOR/DMISA processes. This effort supports process workflow management, customization and modification of business management process designs (maintenance/sustainment), BCRs, prototyping, design testing activities, data collection and usage, data migration, DSOR life-cycle support documentation, interservice agreement documentation, technical design/re-designs (major/minor) associated with Statutory Law, Federal, DoD Directives, and mandated AFI 63-101 and AFMAN 63-122 policy guidance of the following HQ AFMC A4FD processes: (A002)

50/50 – Refers to Title 10 United States Code (USC) 2466, which states no more than 50% of depot maintenance funds made available in a fiscal year may be used to contract for depot-level maintenance and repair by Non-Federal Government personnel

Core Assessment and Candidate Depot (CCD) Depot Activation (DA) and DAPM Depot Maintenance Interservice Periodic and Gated Review (3-Year Review) Pre-Source of Repair Assignment (Pre-SORA) Source of Repair Assignment (SORA) Workload Approval Document (WAD)

Air Force Life-Cycle Management Center 10 Business Enterprise Logistics Systems

1.4.2.1 This effort supports the DSOR processes for depot-level maintenance utilizing current DSOR workflows as designed; and provides support for modifications to further customize or design supplemental workflows. This effort shall include designing supplemental workflows based upon the Technology Repair Center (TRC) construct. The AF utilizes the TRC construct of grouped technology descriptions to posture depot maintenance workloads requiring major, overhaul, or complete rebuilding of commodity groups associated with weapon systems, equipment end items, parts, and assemblies at the System/Sub-System levels. The DAPM supports complex factors aligning with AF Enterprise Objectives supporting depot activation prioritizations. Reporting requirements include the activation of prioritized workloads; and compliance with statutory and regulatory guidance.

The Contractor shall not design to requirements not currently covered under the contract, until the Contracting Officer (CO) has issued a scope determination and a contract modification.

1.4.3 The Contractor shall provide support for the DMA hosted at DISA DEPS; and the associated processes, templates, documentation, and repository supporting the DMISA process. This shall include support for modifications to further customize or design supplemental functionality. The DMA supports a one-stop view of active DMISA’s across all DoD and Other Federal Agencies; and provides a collaborative storage environment to store DMI Decision Letters. DMISAs define the agreement between the AF and other DoD entities to provide depot maintenance and related support functions for weapon systems, equipment end items, systems, sub-systems, components, or commodity groups (to include software maintenance). (A002)

AF and DoD DMISA Process AF and DoD DMISA Template AF and DoD DMISA Exhibits Documentation Coordination/Signature Workflow AF and DoD DMISA Training – DMA Operational Capabilities Only

1.4.3.1 The Contractor shall support the on-going DMISA IPT as the Government continues to further customize and design workflows unique to the DMISA business management processes. This shall include designs/redesigns (major/minor) associated with mandated policy guidance, integration.

The Contractor shall not design to requirements not currently covered under the contract, until the CO has issued a scope determination and a contract modification.

1.4.4 The Contractor shall support the following program mission requirements:

The DSOR II Weekly Status Meetings to discuss current and future workload requirements, implementation schedule review, and upgrades to application environments

Air Force Life-Cycle Management Center 11 Business Enterprise Logistics Systems

The Contractor and Government shall capture agenda topics and minutes from the DSOR II Weekly Status Meeting, capturing release status, future release planning, and pending actions items

HQ AFMC A4FD Process Owner Meetings – requirements discussions from a technical design solution perspective

HQ AFMC A4FD planning discussions regarding program specific requirements and functionality associated with new or revised policy guidance

Integrated Product Teams – customer driven support teams to collectively deliver a process design solution

Program Management Reviews with HQ AFMC A4FD Functional Review Board (FRB) Requirements Review Board (RRB) Preliminary and Critical Design Reviews Technical Interchange Meetings (TIMs) Test Readiness Reviews Field Readiness Reviews Teleconferences regarding program specific requirements and functionality

1.4.5 The Contractor shall provide senior-level SharePoint 2010, 2013, and 2016 configuration designs; Life-Cycle Support/BCR Modifications; requirements management;

configuration design changes; workflow management; knowledge of business management processes; data validation and migration; designs/redesigns (major/minor) associated with mandated policy guidance, integration testing; release management; functional administration as it pertains to DSOR AMS and DMA workflows; site collection maintenance and sustainment; site collection administrator activities to include susceptibility and vulnerability management ensuring no insecure configuration designs cause problems or impact the DSOR AMS and DMA workflows; Tier Levels 2-3 Help Desk support (technical and functional); and on-site technical support for the DSOR AMS and DMA workflows and site collections. (A002) (A003) (A004)

1.4.5.1 The Contractor shall provide senior-level technical, analytical, taxonomy management and impacts, and administration of the DSOR AMS and DMA site collections. The Contractor shall provide support to the Government to include analysis, design, configuration, testing, and implementation of the DSOR AMS and DMA site collections and environments. The Contractor shall support site and content structure, design and modify navigation and security, complex and detailed design site definition and template customizations, perform content management collaboration, design and configure detailed and complex process management workflows to include managing metadata, extracting DSOR process data into reporting requirements, configuring search options, uploading customizations, performance testing, capacity planning, establishing integration with other Office products, supporting data migration activities, designing and customizing web parts and workflow applications, maintaining document library capabilities, pages, lists, columns, and data and application back-up and restoration services. The Contractor shall support rapid prototyping providing the customer

Air Force Life-Cycle Management Center 12 Business Enterprise Logistics Systems functionality testing of new designs and concepts in support of functional requirements. (A002), (A003), (A004), (A005) (A006)

1.4.5.2 The Contractor shall provide technical expertise to configure and design Information Technology (IT) solutions for workflow management support. The Contractor shall submit, as appropriate, recommendations for streamlining and improving all elements of the workflow process from a technical design perspective during requirements definition and discussions, configuration design, test, and deployment. The Contractor shall have a comprehensive understanding of the DSOR business management processes. Associated process flowcharts shall be provided by the Government and will assist in concepts, designs, drawings, specifications, tests, documentation, and analyses of the DSOR business management processes. The Contractor shall have comprehensive knowledge of applicable DSOR statutes, regulations, policies, and codes. The Contractor shall review any new mandated policy guidance and work with the Government to incorporate requirements into the toolsets. (A002) (A003)

1.4.5.3 The Contractor shall evaluate and analyze requirements to ensure there is not duplication of existing workload or functionality. The Contractor shall group similar requirements into a workload status, and identify all open requirements for an internal Government program requirements review (quarterly), prior to the scheduled FRB with HQ AFMC A4FD. The Contractor shall not identify for scheduling and implementing any requirements not approved by the Government.

The Contractor shall identify BCR progress, issues, challenges, strategies, and achievements. The monthly status report shall provide in-depth technical design details to include design, data, testing, and deployment. Program details shall include user management, project management, meetings supported, and help desk activities. This report shall also document AF Network and DISA/DEPS environment issues. (A001) (A002) (A003)

1.4.5.3.1 The Contractor shall provide DSOR AMS and DMA support for customization and configuration design, BCRs, and other mandated requirements based on policy changes; which shall be validated and prioritized by the DSOR AMS and DMA FRB, chaired by HQ AFMC A4FD. The Contractor shall document analysis of the requirements including resources and lead times to design and deploy the requirements, identifying any associated technical and functional dependencies or constraints. (A002) (A003)

1.4.5.3.2 The Contractor shall be required to participate in formal TIMs (approximately 4-6 per year) with HQ AFMC, AFMC Centers, and AFSPC; and other DoD-Services and DLA, as required by the Government. The Contractor shall identify any complex challenges to configuration design dependencies and capability or functionality constraints. (A002) (A003) (A004)

Air Force Life-Cycle Management Center 13 Business Enterprise Logistics Systems

1.4.5.3.3 The Contractor shall provide functional administration support with comprehensive knowledge of the Federal statutes, regulatory directives, codes, AF management policies, and business management processes as they pertain to the DSOR AMS and DMA applications. The Contractor shall identify associated functional dependencies or constraints during requirements gathering activities. The Contractor shall support the DSOR and DMISA business management processes from a DoD and AF level as they relate to DSOR AMS and DMA capability and functionality. (A002) (A003)

1.4.6 The Contractor shall provide senior-level site collection administration activities for the DSOR AMS and DMA to include routine maintenance, troubleshooting during unplanned and scheduled maintenance events impacting operational readiness of the DSOR AMS and DMA; and problem resolution to include working with DISA DEPS points of contact to bring the DSOR AMS and DMA back to operational readiness. This shall involve troubleshooting and re-building any workflows, lists, templates, or web parts no longer functioning properly. The Contractor shall coordinate and work closely with the Government to ensure any DISA DEPS downtime is tracked and reported real-time to the Government as it occurs.

1.4.6.1 The Contractor shall provide senior-level site collection administration activities to ensure no configuration designs impact the security posture of the DISA DEPS environment, impacting the DISA DEPS ATO. The Contractor shall notify the Government immediately if any Classified data or documentation is discovered or unexpectedly unloaded in the DSOR AMS or DMA toolsets. Highest classification level of the DSOR AMS and DMA site collections shall be at the Unclassified, For Official Use Only (FOUO) level.

1.4.6.2 The Contractor shall perform user account management established by the Government; which shall include coordinating with HQ AFMC A4FD to monitor and control DSOR AMS and DMA site access through controlled role management processes. The Contractor shall perform management reporting by monitoring, providing usage metrics, and audit logs of DISA DEPS Contribute Users access through the DSOR AMS. Contribute Users shall not exceed 1,500 and Read User access is Unlimited. The Contractor shall maintain the Site Collection Users Tool within the DSOR AMS. (A001)

1.4.6.3 The Contractor shall establish processes and perform annual technical and functional maintenance activities to optimize site collection performance;

which shall include recommendations for deletion and archiving of historical data.

The Contractor shall establish and manage a mechanism for corrective and preventive maintainability and reliability to preserve the value of the workflows and capabilities in conjunction with the technical team and the Government.

1.4.7 The Contractor shall support requirements and application configuration management; and deliver a combined Requirements/Configuration Management Plan

Air Force Life-Cycle Management Center 14 Business Enterprise Logistics Systems

(R/CMP). The R/CMP shall define techniques of identification, change control, status accounting, and auditing during the project life-cycle by providing the processes for identifying and tracking changes to the applications. The R/CMP shall define the methodologies for the management of requirements, all configuration design changes, and supporting documentation to the application baselines. (A003)

1.4.7.1 In support of functional process improvements, the Contractor shall participate in the analysis of process improvement discussions from the user community for improving the quality, productivity, and response time of the DSOR business processes; and the supporting DSOR AMS and DMA applications.

Proposed changes will be evaluated by A4FD functional personnel with input from the Contractor from a technical perspective only. The Contractor shall participate in reviews of these suggestions by providing analysis of the technical concepts utilized and provide any impacts to the Customer to the existing automated business processes. DSOR AMS and DMA requirements shall be defined by HQ AFMC A4FD, and not the Contractor. A4FD personnel shall determine if the proposed changes are valid requirements and submit any resulting BCRs. The Contractor shall assist A4FD in submitting BCR requirements to the DSOR AMS and DMA from a technical perspective only, if requested by the Government.

1.4.8 The Contractor shall maintain and deliver a detailed SharePoint Design Document (SDD). The SDD shall detail the design, maintenance, and implementation strategies utilized to support the functionality and capabilities implemented into the DSOR AMS and DMA. The SDD shall provide traceability of each release content as documented in the BCR tools contained within DSOR AMS and DMA. The Contractor shall also follow the Logistics Information Technology Change Control Process (CCP); and utilize the Information System Management Tool (ISMT) supporting the CCP. The SDD shall document and contain Process Maps for each of the DSOR business management process workflows. Process Maps are provided by the Customer and shall be included in the SDD.

The Contractor shall ensure the Process Maps are current in the SDD as the Customer provides process updates. (A002)

1.4.8.1 The Contractor shall provide workflow integration technology, bringing together the business processes and ensuring the functionality between the workflows in the DSOR AMS and DMA, linked to or impacted by a shared functionality source, act as a coordinated whole. The workflow technology utilized shall provide flexibility to evolve with minimum re-design.

1.4.8.2 The Contractor shall apply business rules to create, display, track, and store the data. The business rules are provided by the Customer and shall be included in the SDD. The workflow designs shall bring together business processes with the information to support them ensuring functionality is consistent and accessible to deliver all over-arching and integrating functionality.

1.4.8.3 The Contractor shall perform configuration design prototypes and capability and functionality gap analysis to allow for joint expansion into other

Air Force Life-Cycle Management Center 15 Business Enterprise Logistics Systems

DoD-Services, DLA, and Federal Agencies, as requested by the Government. The Contractor shall provide an analysis to the Government identifying any current capabilities, which do not yet exist within DSOR AMS and DMA. This analysis shall include an evaluation of the existing data identifying any operational gaps.

(A008)

1.4.9 The Contractor shall provide and update DSOR AMS and DMA program data for on-line program compliance reporting systems supporting the Government for IT Compliance Reporting, program status reporting, data collection, and recurrent taskings.

This shall include daily, weekly, monthly, quarterly, and yearly taskers. The Government is responsible for all program compliance reporting, with the Contractor providing technical input from an operational readiness status.

1.4.10 The Contractor shall generate reports and metrics to support the execution and management of the DSOR AMS and DMA reporting requirements as directed by the Government. Reporting and metrics shall track, monitor, and assess the workload associated with the business management processes; and provide an overall health assessment of depot-level maintenance requirements. Additionally, these reports and metrics shall provide audit trail history, status of decision documents, depot maintenance best value (organic vs. contractor), commodity data metrics, and other data and trends associated with cost and schedule as they relate to performance of depot-level maintenance requirements. Reporting and metrics are based on mandatory DSOR policy guidance and compliance regulation requirements, as levied on the Customer.

1.4.11 The Contractor shall provide senior-level technical support to maintain currency of the architectural diagrams supporting the DSOR AMS and DMA. These diagrams shall be in alignment with the DoDAF, Version 2.02, dated August 2010. These views are artifacts for visualizing the DSOR AMS and DMA architectural designs; and shall include all operational views applicable to the applications. The Government is responsible for all DoDAF requirements ensuring architectural diagrams are maintained and sustained by the Contractor as DSOR AMS and DMA system designs occur. (A010)

1.4.12 The Contractor shall conduct operationally relevant capability and functionality testing activities incorporating support from the Government, technical and SharePoint engineering, and functional business management process stakeholders. The Contractor shall perform capability and functionality testing for each new configuration design and configuration re-design releases providing all Government stakeholders the opportunity to conduct relevant testing of submitted requirements and specifications. (A005)

1.4.12.1 A test program is operationally-relevant when the workflows are tested in an environment which represents the intended operational environment in regards to hardware, software, and applied configuration designs. The Government reserves the right to inspect any test environment to evaluate operational relevance.

All capability and functionality configuration design releases shall be tested and approved for release to production by the Government prior to delivery and

Air Force Life-Cycle Management Center 16 Business Enterprise Logistics Systems implementation. The overall objective is to ensure usability and maintainability of the workflows are not negatively impacted by the capability and functionality configuration design implementations. (A005)

1.4.12.2 The Contractor shall initiate test techniques that include the process of executing configured capability and functionality with the intent to identify any errors or defects impacting existing functionality. The Contractor shall validate and verify configuration and re-configuration designs meet the requirements, capability functions as expected, and the full requirement is implemented. The Contractor shall not deploy a phased solution, unless agreed to by the customer and approved by the Government Program Manager (PM). Testing shall be validated and verified by all Government stakeholders ensuring the workflow functionality and capability is functioning according to the expectations defined by the requirements and specifications. Every release has an identified target audience to include policy owners, process owners, and end users. (A005)

1.4.12.3 The Contractor shall deliver an over-arching Software Test Plan (STP) to convey the methodologies and processes to be used for testing activities. The Contractor shall conduct an operationally relevant test program incorporating support from the Government, technical and software (SharePoint) engineering, and functional business process stakeholders. Testing activities shall be conducted, for each new configuration design or re-design release, to provide all Government stakeholders the opportunity to conduct relevant testing of submitted requirements and specifications. This plan shall provide high-level functional (user acceptance) and integration testing methodologies. The STP shall define the scope of testing, identification of test case approaches, how risks are defined and identified, and define schedule timelines for all testing activities. (A005)

1.4.12.4 The Contractor shall ensure test activities for each new configuration and re-configuration designs include a combination of the following test methodologies, as applicable.

1.4.12.4.1 Unit Testing – The Contractor shall have an established Unit Test Plan (UTP), to test internally among peer technical designers, supporting configuration design, BCRs, and configuration modifications (maintenance/sustainment) workload activities. The Contractor shall conduct unit tests to verify a specific section of functionality design or re-design meets requirements and specifications. Unit testing shall be performed for each scheduled release. (A005)

1.4.12.4.2 Integration Testing - The Contractor shall conduct testing to verify, for each functionality design or re-design phase, the release does not impact existing functionality and capabilities. The Contractor shall conduct tests to ensure the data population process and business rules are

Air Force Life-Cycle Management Center 17 Business Enterprise Logistics Systems accurate and in accordance with (IAW) documented requirements.

(A005)

1.4.12.4.3 Customer Acceptance Testing (CAT) – The Contractor shall conduct a CAT to ensure the functionality meets the documented requirements. The Contractor shall ensure test activities for each new configuration and re-configuration design includes the policy owners, process owners, and end users associated with the requirement being tested, involving their participation in all phases of the CAT activities.

(A005)

1.4.12.4.4 Regression Testing – The Contractor shall conduct regression testing to ensure configuration design changes scheduled for implementation have not impacted existing functionality and capabilities.

Any deficiencies identified during this testing phase must be resolved, prior to the implementation of new configuration design changes. (A005)

1.4.12.5 The Contractor shall provide specific executable written test cases which examine all aspects including inputs and outputs of the workflows; and which provide a detailed description of the steps which shall be taken, the results which shall be achieved, and other elements which shall be identified as they relate to the requirement. The written test case shall consist of conditions or variables under which a tester shall determine whether the requirement has been satisfied. Written test cases shall be prepared to fully test all requirements, as applicable, for each release; and shall support regression testing to ensure the configuration design changes have not impacted existing functionality and capabilities. Written test cases shall include a description of the functionality to be tested and the preparation required to ensure the test can be conducted. Steps explained in the test case shall include all details even if they are assumed to be common knowledge. The test case shall provide a “known input” and an “expected output”. The known input shall test a pre-condition and the expected output shall test a post-condition.

(A006)

1.4.12.6 The Contractor shall deliver a Software Test Report (STR) to document all test results associated with CAT activities for each capability and functionality configuration design release. This report shall provide all information uncovered by the tests accomplished, including assessments of the quality of the testing effort, and the quality of the configured functionality release under test. DSOR AMS and DMA are no-code customization of SharePoint capabilities and do not utilize Deficiency Reports or Software Problem Reports. Configuration changes captured during testing shall become new requirements that are documented with detailed resolutions identified. Additionally, the report shall identify what testing was accomplished, whether the release met entrance and exit criteria, the resources supporting the testing, and the timeline for the testing. (A006)

Air Force Life-Cycle Management Center 18 Business Enterprise Logistics Systems

1.4.13 The Contractor shall be the single point of contact (POC) for all functional administration and Help Desk Support, Tier Levels 2-3, troubleshooting and resolution activities, as it relates to the capabilities and functionality provided in the DSOR AMS and DMA applications. The Contractor shall restore failed operations as soon as possible and report progress real-time to the Government. The Contractor’s knowledge shall be at a senior-level to effectively troubleshoot common problems, assess and escalate serious or unusual problems, and research and document solutions and new troubleshooting procedures. The Contractor shall provide timely and effective status updates to the Government for all problem ticket management. The Contractor shall support help desk management to include confirmation of the validity of reported problems, analyzing, troubleshooting, and resolving complex problem issues as they relate to the DSOR AMS and DMA applications operational use and workflow capability and functionality in support of the DSOR business management processes. Additionally, the Contractor shall accomplish problem ticket management through DISA DEPS for all Tier Level 3 identified issues impacting capabilities and functionality at the site collection level impacting operational use of the DSOR AMS and DMA applications. The Contractor shall provide Tier Levels 2-3 support for approximately 2,500 AF users during normal business hours as defined in Section 1.9.1, Hours of Work, at WPAFB. Tier Level 1 support activities are provided by HQ AFMC A4FD and includes user role management and basic user support for the DSOR AMS and DMA.

1.4.13.1 The Contractor shall provide Tier Level 2 support and report immediately to the Government when the DSOR AMS and DMA has experienced failed operations. The Contractor shall respond to user telephone and email requests for assistance and guidance; troubleshooting workflow malfunctions and associated escalated issues impacting capability and functionality of the DSOR AMS and DMA applications; data calls; user access and maintenance; tracking, analysis, establishing new user accounts, maintenance and deactivation of user accounts, reporting of Help Desk metrics; providing users with schedules for training opportunities; maintaining the DSOR AMS and DMA Site News, and responding to BCRs requiring minor application changes.

1.4.13.2 The Contractor shall provide Tier Level 3 support and report immediately to the Government when the DSOR AMS and DMA applications or the DISA DEPS site collections have experienced failed operations. The Contractor shall accomplish problem ticket management through DISA DEPS identifying issues impacting the operational readiness of the DSOR AMS and DMA applications. The Contractor shall provide detailed documented capability and functionality impacts and provide support to DISA DEPS in troubleshooting the root cause and implementing a resolution. The Contractor shall support telecons from a technical perspective and provide assistance to the Government in documenting impact details. The Contractor shall provide support for extraction of data-specific requirements to support complex and detailed AFMC, AF-Level DSOR and DMISA metrics reporting data calls; provide analytical and troubleshooting skills to

Air Force Life-Cycle Management Center 19 Business Enterprise Logistics Systems manage complex and multi-level tasking priorities at the AFMC and AF-Levels;

troubleshooting and resolving DSOR and DMISA process workflows, and design issues.

1.4.13.3 The Contractor shall track and report DSOR AMS and DMA Help Desk metrics monthly to the Government. This shall include new user accounts; de-activation of user accounts; user licenses, application problems; data adjustment;

feature activation and deactivation; minor application changes and troubleshooting;

data adjustments, DISA DEPS Network downtimes; permissions and access, user one-on-one training; and report generation. (A001)

1.4.13.4 The Contractor shall be knowledgeable of Federal statutes, regulatory directives, codes, and sound management guides required by the AF to manage the AF DSOR requirements as they pertain to the DSOR AMS business management workflows; and the AF DMISA requirements as they pertain to the DoD DMISA process. Reference Sections 1.4.2 and 1.4.3 for DSOR and DMISA business management processes supported by the DSOR AMS and DMA workflows.

1.4.13.5 The Contractor shall provide support to the Government during DSOR AMS and DMA application and site collection audit activities. Audit support shall include demonstrations of the applications and how the workflows support policy guidance compliance. The Contractor shall support audit discussions, where applicable, on role management, controlled user access, supporting system and training documentation, and tracking of new, active, and deactivated users. The Government is responsible for all audit activities with the Contractor supporting from a system design perspective only.

1.4.14 The Contractor shall serve as the Site Collection Administrator (SCA), updating templates, language, security, navigation, web pages, site layouts, themes, regional settings, search, content types, and workflows within the DSOR AMS and DMA site collections.

The Contractor shall manage security, policies, and features for the site collections ensuring security compliance and optimal site performance. The SCA shall also manage and support monthly maintenance activities for the site collections.

1.4.14.1 The Contractor shall provide support functions and monitor daily activities to assess potential risks in order to detect, isolate, and react to intrusions, disruptions of services, or other incidents that threaten the Information Assurance (IA) Security posture of the DSOR AMS and DMA applications, to include internal misuse. The Contractor shall notify the Government immediately of any potential vulnerabilities. The Government and Contractor shall provide DISA DEPS a detailed report of any potential vulnerabilities or risks IAW DoD Directive 8500.1 directed solutions. The Government and Contractor shall mitigate the vulnerabilities and risks in parallel with DISA DEPS and track to resolution.

Support for IA services and compliance do not go beyond those inherent in being a

Air Force Life-Cycle Management Center 20 Business Enterprise Logistics Systems

SCA. The DSOR AMS inherits the DISA DEPS ATO and ISSM and ISSO support is provided by DISA DEPS. (A009)

1.4.14.2 The Contractor shall inform the Government when there are DISA DEPS connectivity issues. The Contractor shall provide DISA DEPS problem ticket management support for the DSOR AMS and DMA site collections. The Contractor, as the SCA, shall open tickets with DISA DEPS when operational issues, by the hosting environment platform, server, SharePoint Farm instance, DISA Network, and weekly or monthly security maintenance patches occurs. This shall include corresponding with the DISA DEPS technical support team via email, telecons, or technical meetings to resolve operational issues.