CyOFTS_II_PWS_Sep_2017.docx

Attachment 1

PERFORMANCE WORK STATEMENT

CyO Formal Training Support II (CyOFTS II) At 39th Information Operations Squadron, Hurlburt Field, Florida 39th Information Operations Squadron, Detachment 1 Joint Base San Antonio, Texas

AugustSeptember 2017

Cyber Operation (CO) Formal Training Support

Page Contents

1.0 INTRODUCTION

1.1 Objective

This contract will provide essential capabilities in support of the 39th Information Operations Squadron’s (39 IOS) mission at the Air Force (AF) and Air Force Space Command (AFSPC) Cyber Operations (CyO) and Information Operations (IO) Formal Training Unit (FTU). This contract provides subject matter expertise (SME) and other essential capabilities to augment and support the 39 IOS, Hurlburt Field, FL and the 39 IOS, Detachment 1, Joint Base San Antonio (JBSA) TX in conducting its mission of CyO and IO Initial Qualification Training (IQT) in support of AFSPC, Air Force Cyber (AFCYBER), US Cyber Command (USCC), and the US Government.

1.2 Mission

The mission of the 39 IOS and their mission partners is to provide IQT for Airmen to plan and execute missions requiring CyO and IO capabilities. The 39 IOS, as the CyO and IO FTU, provides supplemental skills training (SST), IQT, and advanced training for CyO and IO. FTU course offerings currently include Cyberspace Operations, Cyberspace Warfare, IO, Influence Operations (IFO), and Instructor Training courses.

1.3 Background

1.3.1 The cyberspace domain is a contested domain. Unlike the other domains (Air, Land, Sea, and Space), the cyber domain is required to create and maintain the domain in order to produce battlespace effects for commanders within the domain. The Cyberspace domain creates cross-domain effects by providing the conduit for battlespace effects between Air, Land, Sea, Space, and including Cyberspace (Kinetic and Non-Kinetic effects). The Cyberspace domain covers much more than computer networks. Within the cyberspace domain, multiple functional network types exist. As technology improves and functional networks converge to automate more and more of our military and civilian processes, our nation’s networks and critical infrastructure are vulnerable to attack and must be defended. This highly technologically complex domain is much more dependent on civilian/commercial industry than on military development. The 39 IOS is responsible for providing the IQT for the entire Cyberspace Operations Domain and the AF Cyber Weapon Systems that operates in, on, and through Cyberspace. The ability to integrate civilian/commercial technology and military rigor, tactics, techniques and discipline into the training enables our graduates to defend our nation.

1.3.1.1 The Air Force operates six Cyber Defensive Weapon Systems:

(a) Air Force Cyberspace Defense (ACD)

(b) Cyberspace Defense Analysis (CDA)

(c) Cyberspace Vulnerability Assessment/Hunter (CVA/H)

(d) Cyber Command and Control Mission System (C3MS)

(e) Air Force Intranet Control (AFINC)

(f) Cyber Security and Control System (CSCS)

1.3.2 The CyO and IO FTU is accredited through the Community College of the Air Force (CCAF) as well as the Joint Staff. CCAF awards college credits to enlisted graduates; the Joint Staff awards Joint Service Points to Officers and Government Civilians.

1.3.3 The 39 IOS develops all courseware in accordance with (IAW) Air Force Instructional System Development (ISD) processes and procedures (Air Force Handbook (AFH) 36-2235 Vol 1-13; Air Force Instruction (AFI) 36-2251), as well as 39 IOS Standard Operating Procedures (SOPs). The 39 IOS utilizes the ISD ADDIE method (Analyze, Design, Develop, Implement, & Evaluate) to implement its curriculum.

1.4 Scope

The contractor shall provide qualified SME manpower equivalents to augment and support CyO and IO training for the FTU. The contractor shall augment and support 39 IOS to include course planning, administrative support, technical writing, course development, project management, instructor training, student mission training systems administration, network system administration, training range engineering maintenance and management, computer help desk support, and hardware/infrastructure maintenance.

2.0 BASIC REQUIREMENTS

2.1 Business Relations

The contractor shall work with the Government Contracting Officer’s Representatives (COR) or Government team leads to accomplish Government requirements, goals, and mission objectives as efficiently and effectively as possible. This shall include sharing or coordinating information resulting from the work required within this PWS or previous Government efforts and working as a team to perform tasks in concert. The contractor shall ensure minimum duplication of effort in the execution of all work specified within this PWS and build upon work previously accomplished by the Government, the contractor, or other contractors to the fullest extent practical.

2.2 Non-Personal Services

The Government shall neither supervise contractor personnel nor control the method by which the contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual contractor employees. It shall be the responsibility of the contractor to manage its employees and to guard against any actions that are of the nature of personal services, or give the perception of personal services. If the contractor believes that any actions constitute, or are perceived to constitute personal services, it shall be the contractor’s responsibility to notify the Contracting Officer (CO) immediately. The contractor will neither command forces nor lead military personnel.

2.3 Contract Administration and Management

2.3.1 Contract Personnel Staff

2.3.1.1 The contractor shall ensure the number of personnel, job category and expertise of the personnel assigned are sufficient to cover the work specified within this PWS. Contractor shall notify the COR 10 business days prior of any personnel re-assignments. The contractor, at its own expense, shall maintain proficiency, certification, and continuing education requirements in each performance area as listed within Appendix B: Education and Certification Requirements.

2.3.1.2 The contractor shall fully cooperate with the Government and other contractors assigned to the same functional areas, raising the level of proficiency and effectiveness.

2.3.1.3 The contractor shall provide employees who understand the unique requirements for the Operational and Tactical level of war in Defensive Cyber Operations (DCO), Offensive Cyber Operations (OCO), and DoD Information Networks (DoDIN) Operations. Provide employees who understand how to plan and integrate Cyberspace capabilities into the Operational level of war. Provide employees who have the ability to manage/maintain the array of networks, infrastructure, ranges, and student mission training equipment required for the FTU to effectively function.

2.3.1.4 The contractor shall identify one primary on-site (Hurlburt Field, Fl.) Program Manager (PM) and two alternate on-site (Hurlburt Field, Fl. and JBSA) PM as key personnel. The PM is responsible for the overall management of contractor personnel and all contractual issues, and is the primary interface between the Government and the contractor. These individuals shall have full contractor authority to act in all contract matters and be responsible and accountable to the CO in representing the contractor for meeting the performance requirements of this PWS. The PMs shall be available during normal business hours to meet with the COR or Government team lead to discuss program and/or technical issues. The PM shall attend scheduled staff meetings, as requested by the COR. The Primary PM is responsible for the overall management of contractor employees and all contractual issues, and is the primary interface between the Government and contractor. PMs will be the daily interface; therefore, PMs must have ongoing knowledge of daily activities within each work section. The PM shall provide accountability of all employees to the COR/Government team leads no later than (NLT) 9000hrs each duty day. The PM is responsible for submitting a monthly summary report as outlined in Paragraph 4.4, Contract Delivery Requirements List (CDRL) A004 Monthly Status Report (MSR). If both the Primary and Alternate PMs are unavailable for an extended period of time (more than 48 hours), these duties must be delegated to another Contractor Manpower Equivalent (CME) and the Government notified who will be performing these duties. The contractor personnel shall perform daily activities as coordinated with the PM. The PM shall coordinate with the designated COR/Government team leads on all tasks. The PM, along with the COR/Government team leads, shall establish workload requirements for the PM to align contractor employees to fulfill the task assignments.

2.3.1.5 The contractor shall ensure that personnel accessing information systems have the proper and current information assurance (IA) certification to perform information assurance functions IAW Department of Defense Directive (DoDD) 8570.01-M, Information Assurance Workforce Improvement Program and DoDD 8140.01 Cyberspace Workforce Management. The contractor shall meet the applicable IA certification requirements, including (1) DoD-approved IA workforce certifications appropriate for each category and level as listed in the current version of DoD 8570.01-M; and (2) appropriate operating system certification for IA technical positions as required by DoDD 8570.01-M. Appendix B: Education and Certification Requirements

2.3.1.6 Upon request by the Government, the contractor shall provide documentation supporting the IA certification status of personnel performing IA functions.

2.3.1.7 Contractor personnel who do not possess proper and current certifications shall be denied access to DoD information systems for the purpose of performing IA functions.

2.3.1.8 IAW the DoD IA Workforce Improvement Program, all contractor personnel performing IA functions must obtain one of the certifications required for their position category or specialty and level. Contractor personnel assigned to perform Cyber and Cyber Weapon System IQT, IA, and Computing Environment (CE)/Infrastructure Support (IS) functions shall have a current applicable baseline certification as described in Appendix B: Education and Certification Requirements. The certificates must be provided to the COR during squadron in-processing. Throughout the course of this contract, internal movement of personnel may require updated certifications prior to move. Maintain the minimum certification/training requirements as an electronic record through a Government- shared network drive location.

2.3.1.9 The contractor shall comply with all applicable Air Force Instruction, Technical orders, and 39IOS Standard Operating Procedures (SOP) listed in Appendix D: Applicable Documents.

2.3.1.10 The contractor shall complete 688th Cyberspace Wing (688 CW) and 39 IOS required ancillary training. This shall include Operations Security (OPSEC), Force Protection, Human Relations, Security, and Information Protection training and other ancillary training assigned and approved by the COR.

2.3.1.11 Contractor shall be proficient in Microsoft Office® (or equal) suite of software products.

2.4 Contract Management

2.4.1 The contractor may participate in unit tasking and task update meetings. The contractor or Government may schedule additional formal or informal meetings to review deliverables, address any issues, and review contract status.

2.4.2 Contractor shall provide an Employee Work Schedule consisting of all personnel to support resource allocation of operational schedules. The schedule shall list employee names and functions supported. The schedule shall be updated on a continual basis as changes occur, located on a Government-shared network drive, and reported in the MSR (CDRL A004). Any unforeseen calendar changes shall be coordinated with the COR within 24 hours of notification of change. This information is vital and ensures mission is covered during times of emergency. The contractor shall identify all acronyms, codes, abbreviations, signs and symbols used in the schedule. The contractor shall use the same format for initial and subsequent submissions of the same schedule unless otherwise approved by the COR.

2.4.3 The contractor shall provide the COR/Government team leads a recall roster of contract personnel to include phone number and address who are available to contact in emergencies. This information is considered Personal Protective Information (PPI) and will be labeled, routed, and stored IAW 39 IOS SOPs, IOs, AF, AFSPC & other Instructions.

2.4.4 The contractor shall report all labor hours (including subcontractor labor hours) required for performance of services under this contract for the CyO Formal Training Support II contract effort via a secure data collection site. The contractor shall completely fill in all required data fields using the following web address: http://www.ecmra.mil. Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the Enterprise-wide Contractor Manpower Reporting Application (ECMRA) help desk.

2.4.5 The contractor shall be responsible for any subcontract management necessary to integrate work performed on this requirement and shall be responsible and accountable for subcontractor performance.

2.4.6 Organizational conflict of interest (OCI)

2.4.6.1 The prime contractor shall manage work distribution to ensure there are no OCI considerations. The contractor may add or remove subcontractors to its team after CO and COR notification.

2.4.6.2 The contractor shall not employ any person who is an employee of the US Government if employing that person would create a conflict of interest. Additionally, the contractor shall not employ any person who is an employee of the Department of the Air Force, either military or civilian, unless such person seeks and receives approval according to DoD Regulation 5500.7- R, Joint Ethics Regulation (JER). The contractor shall not employ any person who is an employee of the Department of the Air Force if such employment would be contrary to the policies in AFI 64-106, Air Force Industrial Labor Relations Activities. Contractor employees shall work in conjunction with and in coordination with all contractor organizations and Government and contractor employees supporting 39 IOS initiatives. This includes, but is not limited to: conducting research, establishing program schedules, and identification of potential problem areas.

2.4.7 Associate Contractor Agreements (ACA)

2.4.7.1 During performance of this contract, the contractor shall be required to work with other contractors who have separate Government contracts. IAW the AF Federal Acquisition Regulation (AFFAR 5317.9000, Associate Contractor Agreements), the contractor shall enter into an ACA for any portion of the contract requiring joint participation in the accomplishment of the Government requirement. The agreements shall include the basis for sharing information, data, technical knowledge, expertise, and/or resources essential to the success of 39 IOS and 39 IOS, Det 1 Mission and the success of mission partners. The agreements ensure the greatest degree of cooperation for successfully meeting the terms of the contract. The agreements shall also include the agreement start and expiration dates and appropriate protection proprietary information and restrictions on personnel.

2.4.7.2 Associate contract agreements shall be initiated as soon as practical after contract award; not later than 60 calendar days for existing contracts. Associate contractor agreements shall be provided to the Government for review within 30 calendar days of notification and prior to execution by the parties. Any costs of entering into and maintaining the associate contractor agreements shall be included in the negotiated cost of this contract. Liability for improper disclosure of any proprietary data contained in or referenced by any agreement shall rest with the parties to the agreement and not the Government. Failure to resolve disagreements with associate contractors does not entitle the contractor to any adjustment or waiver of terms of this contract.

2.5 Contractor Employees

2.5.1 The contractor shall not employ any person for work on this contract if such employment is identified to the contractor by the CO as a potential threat to the health, safety, security, general wellbeing, or maintenance mission of the installation and its population.

2.5.2 All contractor employees shall be able to read, write, speak and understand the English language to the extent necessary in the performance of the work.

2.5.3 Contractor employees shall identify themselves as contractor personnel by introducing themselves or being introduced as contractor personnel and displaying distinguishing badges or other visible identification for meetings with Government personnel. In addition, contractor personnel shall appropriately identify themselves as contractor employees in telephone conversations and in formal and informal written correspondence.

2.5.4 The office environment at the 39 IOS is predominately business casual. Contractor’s attire shall be business casual or contractor company logo apparel, depending on position and duties. The COR may allow flexibility for this requirement. Contractor personnel shall present a clean and neat appearance. Contractor shall not permit cut off shorts and clothing with tears, faddish style, revealing/tight clothing or clothing with obscene or inflammatory designs, slogans, or remarks, and clothing representing military attire such as Battle Dress Uniforms (BDU) or Desert Camouflages (DCU). The contractor PM/site leads shall ensure personnel wear appropriate clothes suited for their job.

2.5.6 The contractor shall provide resumes and certifications for all prospective candidates, identifying the position being filled and their ability to perform task in the described performance areas (CDRL A003). All resumes, throughout the life of the contract, will be vetted through the CO and COR for education and experience as well as through the 39 IOS/Security Office (SO) to ensure security compliance prior to performing on this contract.

2.5.7 The contractor shall ensure all personnel are qualified, commensurate with education and experience levels for each labor category. The contractor shall ensure all employees possess the following professional qualifications before starting work under this contract:

2.5.7.1 The contractor shall ensure all employees possess a valid civilian driver’s license, and be able to hold a valid military driver’s license.

2.5.7.2 The contractor shall ensure all employees submit to drug testing as required by the Government.

2.5.7.3 The contractor shall maintain a current listing of employees, which includes each employee’s full name, aliases, and areas of subject matter expertise (labor category) and shall be marked “For Official Use Only”. The original and one copy of this list shall be furnished to the contracting officer at the pre-performance conference. Personnel changes that are made during the performance of this contract shall be sent to the CO, COR and 39 IOS SO within one working day of the change and included into the MSR (CDRL A004).

2.5.8 Contractor Common Access Cards (CAC)

Contractor personnel will be issued a CAC identified by a green stripe. The CAC is required to access any Government base and certain facilities. Contractor personnel indoctrinated for Sensitive Compartmented Information (SCI) access shall be identified by a locally produced Badge, visible and worn above the belt and below the shoulders when present within the SCI Facility (SCIF). When exiting the SCIF, contractor personnel shall conceal their credentials from plain view and keep said credentials secure when not inside the SCIF.

2.5.9 Work Locations

The contractor shall perform the required support at the 39 IOS (Government facilities may be subject to modification), or at a contractor facility located off-base. Contractor personnel shall comply with all installation and facility safety and security regulations, as well as, the health, safety, and security provisions of the contract. Contractor personnel shall report security or safety problems to the CO and/or security police as appropriate. Contractor will not perform any classified work in a contractor facility (off-base) unless the facility is cleared to the appropriate security levels and coordinated with the Government before any classified work is accomplished. The COR or Government team lead will notify the PM of any current or future change in work location, if required.

Current locations are:

39 IOS, Bldg 90074 and 90089 Hurlburt Field FL 32544

39 IOS, Det 1, Bldg 2000, 2008, 3 (178) , and 4 (179) Joint Base San Antonio TX

2.6 Travel Requirements

2.6.1 Separate contract line item numbers (CLIN) will be established to reimburse the contractor for allowable direct costs related to the performance of the contract requirements.

2.6.2 Travel shall be required under this contract to support 39 IOS mission activities. The contractor shall be required to travel within the Continental United States (CONUS) and may be required to travel to other than Continental United States (OCONUS) to base location(s) or AF site(s) in performing site visits, conference and training attendance, and Mobile Training Teams (MTT). All travel requirements (including plans, agenda, itinerary, dates) shall be pre-approved by the CO, and are on a cost reimbursable basis. Cost for travel shall be billed IAW the Joint Travel Regulation (JTR) and Federal Acquisition Regulation (FAR) 31.205-46 Travel Costs. Government contractors presenting themselves for travel shall have letters of identification and shall require passports for OCONUS travel. Government Contract City Pair fares are not available to contractors. The contractor shall provide the trip report (CDRL A005) with the MSR (CDRL A004). The trip report shall detail the work completed, lessons learned, and applicable recommendations. Report shall include a copy of the traveler’s submitted travel voucher.

2.6.3 Contractor on-site personnel may be required to travel to worldwide locations. The contractor is responsible for acquiring the contractor DBA insurance expense for travel outside the United States (US). These trips may be necessary to support CyO and IO training, conference attendance, real world or exercise planning and participation, and other travel as required supporting Cyber Ops training and training development. Contractor personnel expenses for lodging and per-diem will not exceed the Government rates listed in the JTR. Contractor personnel are authorized and may be directed to utilize Air Force and military lodging facilities. All contractor travel requests must be submitted and approved in advance of travel by the COR.

2.6.4 Lump Sum Invoicing shall be processed through Wide Area Work Flow (WAWF) for each CLIN of this requirement; however, the contractor shall provide a separate detailed breakdown of the costs associated with the reimbursable CLINs. Government rates used in the request for reimbursement will be verified for compliance with the JTR at the time of billing.

2.7 TRAINING

2.7.1 The contractor is responsible to schedule and coordinate specialized training that insures contractor personnel maintain currency in military/defense specific systems to include hardware, software, and other systems throughout the performance of the contract. As the need for additional training is discovered/identified, the contractor will identify the location of the training and prepare a cost estimate for attendance and submit this estimate to the Government for approval. If attendance is approved, the contractor will be reimbursed for all allowable and allocable costs through other direct costs (ODC). Employees of the contractor are expected to maintain currency in their core professional competencies in a manner that is standard practice in the industry, which includes the maintenance of certifications, attendance at required refresher courses, and obtaining training in new product releases or updates. The Government will not reimburse the contractor for professional training and the maintenance of certifications, except where the requirement is new and Government directed. The Government may allow no cost Letter of Intent (LOI) for the employee to attend applicable required training.

2.7.2 Government Provided Formal Training. If the contractor attends any Government provided formal training, the contractor is responsible to provide the trained capability for the duration of the contract base or option year. The Government will provide FTU specific required formal training to contract employees requiring the training to complete their instructor certification requirements. If a Government trained contract employee leaves the employment of the contractor within one year, then the contractor shall reimburse the Government for the provided formal training or hire a replacement with the same education credentials. Government reimbursement shall be negotiated with the CO on a case-by-case basis.

2.8 INTELLECTUAL PROPERTY

All programs/deliverables developed per this contract are the property of the US Air Force and shall not be released by the contractor to third party organizations.

3.0 PERFORMANCE REQUIREMENTS

3.1 Mission Operations

3.1.1 Professional Technical Instruction/Development/ Analyze, Design, Develop, Implement and Evaluate CyO and IO Curriculum.

The contractor shall comprehend the FTU training mission, the student training mission simulators (located at the FTU or connected to the FTU) and AF Weapon Systems associated with the CyO and IO IQT. Required knowledge, skills and abilities to accomplish the following tasks are outlined in Appendix F: Knowledge and Skills Required.

3.1.1.1 CyO and IO Training Analysis and Research

3.1.1.1.1 Contractor shall plan, research, and analyze the System Training Plans (STP), Training Needs Analysis (TNA), Training System Requirements Analysis (TSRA), Master Training Task List (MTTL), Task Analysis Worksheets (TAW), Training Task List (TTL), and provide a report IAW 39 IOS approved direction/guidance and timeline milestones.

3.1.1.1.2 Contractor shall plan, research, and analyze Department of Defense (DoD) information systems associated with AFIN, AFNET, DoDIN, and Joint Information Environment (JIE) in a manner that enables integration into Cyberspace Training Systems.

3.1.1.1.3 Contractor shall plan, research, and analyze USCYBERCOM/AFCYBER Cyber Mission Forces (CMF), Cyber Protection Team (CPT), Cyber Support Team (CST), Cyber Mission Team (CMT), and National Mission Team (NMT) operations in a manner that enables integration into Cyberspace Training Systems.

3.1.1.1.4 Contractor shall plan, research, and analyze 24 AF/AFCYBER Cyber Weapon System operations in a manner that enables integration into Cyberspace Training Systems. (e.g. AFINC, CSCS, ACD, CVA/H, C3MS, and CDA.)

3.1.1.1.5 Contractor shall plan, research, and analyze computer Internet Protocol (IP) fundamentals, advanced IP concepts, CyO fundamentals, advanced CyO concepts, converging networks, and emerging technologies for integration into the curriculum and into mission systems where applicable.

3.1.1.1.6 Contractor shall plan, research, and analyze Air Force and Joint Cyber OCO, DCO, and DoDIN operations for integration into the curriculum and into mission systems where applicable.

3.1.1.1.7 Contractor shall analyze and review feedback from internal and external sources with military and Government staff to ensure currency, consistency, and quality of course material for integration into the curriculum and into mission systems where applicable.

3.1.1.1.8 Contractor shall observe/participate in exercises both internal and external and document the most up-to-date, unique processes and lessons learned for integration into the curriculum and into mission systems where applicable.

3.1.1.1.9 Contractor shall survey current and past CyO and IO post graduates and team members in order to fill information gaps and obtain recent real-world examples for inclusion in curricula for integration into the curriculum and into mission systems where applicable.

3.1.1.2 CyO and IO Training Design, Development, and Instruction

3.1.1.2.1 Contractor shall provide associated documentation for design, development, revision, and administration of FTU CyO and IO training.

3.1.1.2.2 Contractor shall plan, design, develop, integrate, modify, update, and instruct advanced CyO and IO instructional materials IAW 39 IOS SOPs/operating instructions (OI) for in-residence courseware, MTT, non-resident, on-line, Advanced Distributed Learning (ADL) courseware.

3.1.1.2.3 Contractor shall plan, design, develop, integrate, modify, update, and instruct practical application student training missions, mission scenarios, and mission evaluation tests or demonstrations for in-residence courseware, MTT, non-resident, on-line, and ADL.

3.1.1.2.4 Contractor shall utilize the ISD, ADDIE Model, and Bloom’s taxonomy level of learning for all course development.

3.1.1.2.5 Contractor shall provide lesson plans of instruction (Part I’s) within the Government specified timeframe, as outlined by IAW 39 IOS SOPs/OIs and established templates (CDRL A001).

3.1.1.2.6 Contractor shall provide instructor notes/aides (Part II’s) within the Government specified as outlined by IAW 39 IOS SOPs/OIs and established templates (CDRL A001).

3.1.1.2.7 Contractor shall provide lesson test/evaluation questions (Part III’s) within the Government specified timeframe, as outlined by IAW 39 IOS SOPs/OIs and established templates (CDRL A001).

3.1.1.2.8 Contractor shall provide lesson student materials (Part IV’s) within the Government specified timeframe, as outlined by IAW 39 IOS SOPs/OIs and established templates (CDRL A001).

3.1.1.2.9 Contractor shall plan, design and develop e-learning products, including objectives, storyboards, web-based aids, video instruction or performance support systems for inclusion into a learning management system.

3.1.1.2.10 Contractor shall assist in the creation of mission simulator virtual environments for use in training missions, mission scenarios, and mission evaluation tests or demonstrations.

3.1.1.2.11 Contractor shall validate CyO and IO course schedules (Daily, Weekly, Monthly, Annual) for completeness and instruction assignment.

3.1.1.2.12 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct Cyber curriculum (e.g. Internet Protocol Networking).

3.1.1.2.13 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct on Department of Defense information systems architecture,

3.1.1.2.14 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct on the employment and executions of Air Force and Joint CMF capabilities.

3.1.1.2.15 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct on the employment of Air Force and Joint Cyber Operations:

3.1.1.2.16 Contractor shall provide instruction to CyO and IO students in classroom, student training mission simulator environments, and mission systems in skills related to operational activities on IP and other data networks.

3.1.1.2.17 Contractor shall provide advanced instruction in creating CyO effects, both defensive and offensive, against multiple functional network types (e.g. IP, cellular, wireless, public switch telephone, industrial control, radio, mission systems and air defense...).

3.1.1.2.18 Contractor shall integrate defensive and offensive skill sets related to CyO, IO, and DoDIN Ops as they relate to USCYBERCOM and 24 AF/AFCYBER employment of Cyber weapons systems and capabilities into classroom instruction.

3.1.1.2.19 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct on the employment, capabilities, management, maintenance and security of Air Force Weapon Systems.

3.1.1.2.20 Contractor shall provide advanced instruction in 24 AF/AFCYBER presentation of forces to US Cyber Command and other supported commanders, tactical and operational cyber mission planning, weapons systems execution for battlespace effects, and synchronization between cyber ops, weapons systems and non-cyber capabilities.

3.1.1.2.21 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct curriculum on information systems security.

3.1.1.2.22 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct curriculum on Operating Systems.

3.1.1.2.23 Contractor shall provide analyze, plan, design, develop, integrate, modify, update, and instruct curriculum on intrusion detection and intrusion prevention methods.

3.1.1.2.24 Contractor shall provide analyze, plan, design, develop, integrate, modify, update, and instruct curriculum on computer programming and scripting.

3.1.1.2.25 Contractor shall provide analyze, plan, design, develop, integrate, modify, update, and instruct curriculum on Cyber Threat Analysis.

3.1.1.2.26 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct curriculum on Cyber Attack and Penetration.

3.1.1.2.27 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct curriculum on Intelligence Support to CyO and IO.

3.1.1.2.28 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct curriculum on Operational and Tactical planning in support of CyO and IO.

3.1.1.2.29 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct curriculum on Cyber Threat Intelligence Analysis.

3.1.1.2.30 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct CyO curriculum in support of IO Tactics, Techniques, and Procedures, AFTTP 3-1.IO/NKO and JP 3-13.

3.1.1.2.31 Contractor shall analyze, plan, design, develop, integrate, modify, update, and instruct CyO curriculum in support of the operational planning processes as described in JP 5-0.

3.1.1.2.32 Contractor provide all lesson material in both soft and hard copy. (CDRL A001).

3.1.1.3 CyO and IO Student Evaluation

3.1.1.3.1 Contractor shall develop advanced cognitive evaluation/testing methods and scenarios.

3.1.1.3.2 Contractor shall develop advanced psychomotor/hands-on evaluation/testing methods and scenarios in support of CyO and IO courses.

3.1.1.3.3 Contractor shall develop student training missions, mission scenarios, and mission evaluation tests or demonstrations in support of CyO and IO courses.

3.1.1.3.4 Contractor shall evaluate CyO and IO students in classroom, student training mission, and mission evaluations related to supporting CyO and IO courses.

3.1.1.3.5 Contractor shall proctor staff, CyO and IO students in classroom and student training mission supporting student measurement and evaluation’s related to supporting CyO and IO courses to include commercial certifications.

3.1.1.3.6 Contractor shall review student and stakeholder feedback, critiques and surveys from internal and external sources with military and Government staff to ensure currency, consistency, and quality of course material.

3.1.1.3.7 Contractor shall plan and conduct student/instructor review panels with military and Government staff to identify, consult and mediate issues/concerns related to student and instructor evaluations.

3.1.1.3.8 Contractor shall provide test proctoring for staff and students.

3.1.2 ISD Curriculum Management

3.1.2.1 Contractor shall augment and support the Government in course development planning, project management, planning timeline for design and development of CyO and IO formal training courses, lessons, and related courseware material (e.g. a Gantt chart, critical path method, or other agreed upon project management process).

3.1.2.2 Contractor shall develop curriculum IAW applicable MTTL and TTL requirements as well as audit and edit all developed courseware for accuracy, completeness, flow, balance, and clarity of understanding, IAW specifications 39 IOS SOPs, AFSPC & Air Combat Command (ACC) Instructions.

3.1.2.3 Contractor shall assist in the development of Training Systems Requirements Analysis to include Mission/Task Analysis (MTA), Training Requirements Analysis (TRA), Objective Media Analysis (OMA), and Training Systems Basis Analysis (TSBA).

3.1.2.4 Contractor shall assist in the analysis of all tasks performed in the operation and maintenance of the weapon system; and assist in producing a MTTL for each mission area.

3.1.2.5 Contractor shall analyze Task Analysis Worksheets to ensure training requirements are derived by identifying Knowledge, Skills and Attitudes (KSA) needed to perform each task, and comparing the entry level of learning to the required Bloom’s taxonomy level of learning.

3.1.2.6 Contractor shall provide instructional strategies, methods, media analysis, objective analysis media and a syllabus/course map.

3.1.2.7 Contractor shall work with other schools, institutions, industry, or Government agencies (i.e. Government, DoD, Joint, USAF, industry, academia, or foreign government) to identify and implement new information applicable to specific courses (or lessons).

3.1.2.8 Contractor shall review all guidance, technical documents, and manuals to ensure they effectively enable Government personnel to utilize training systems in instruction.

3.1.2.9 Contractor shall assess and analyze training needs through surveys, interviews with staff members, student feedback, training needs analysis, customer site visits, and training planning team direction, and recommend changes and modify and improve existing curriculum related to CyO and IO.

3.1.2.10 Contractor shall work with internal and external SMEs to incorporate new material developed by SMEs into current or new courseware.

3.1.2.11 Contractor shall utilize ADDIE for development of new training programs and curriculum updates and assist in the Spiral Development Cycle (SDC).

3.1.2.12 Contractor shall audit feedback from internal and external sources with military and Government staff to ensure currency, consistency, and quality of course material.

3.1.2.13 Contractor shall audit and analyze student test administration policies and procedures to ensure compliance with 39 IOS SOPs, IOs, AFSPC & ACC Instructions.

3.1.2.14 Contractor shall review, coordinate, and prepare responses for internal and external directives and documents pertaining to CyO and IO training.

3.1.2.15 Contractor shall operate an application-based Learning Management System Authoring Manager to build and deploy questions. (e.g. Question Mark®)

3.1.2.16 Contractor shall operate Learning Management Systems Perception Manager to include scheduling tests, retrieving and analyzing test and critique metrics, building classes and student rosters and grading student tests. (e.g. Question Mark®)

3.1.2.17 Contractor shall provide objective training evaluation IAW unit evaluation guidance of student instructors and must successfully complete unit training to become a certified evaluator.

3.1.2.18 Contractor shall assist in data entry into the CCAF Faculty Management Database (currently STARS-FD).

3.1.2.19 Contractor shall perform curriculum quality assurance audits on all 39IOS managed lessons per direction from the COR/Alt COR.

3.1.3 Training Mission Simulator (TMS) and Cyber Range Engineering

3.1.3.1 Contractor shall provide technical expertise and support of the Enterprise Backup Software, supporting backup infrastructure, and associated processes for the systems hosted at the centralized data center.

3.1.3.2 Contractor shall provide technical expertise and support of the Enterprise Backup Software, supporting backup infrastructure, and associated processes for the systems hosted at the remote training locations. Work in conjunction with LABNET system administrators in the support of these systems.

3.1.3.3 Contractor shall provide technical expertise and support of the Enterprise Backup Software, supporting backup infrastructure, and associated processes for the systems hosted at the disaster recovery data center and participate in scheduled disaster recovery test for the organization.

3.1.3.4 Contractor shall manage and participate in the monitoring, optimization and diagnosis of backup and supporting storage solutions.

3.1.3.5 Contractor shall provide documentation to management, detailing the root cause analysis of outages, performance concerns, and proposed resolution and optimization options.

3.1.3.6 Contractor shall perform in-depth research, evaluation and analysis of enterprise backup technologies and storage solutions. Maintain vendor relationships and coordinate vendor activities.

3.1.3.7 Contractor shall participate in business and contingency planning meetings in order to understand and recommend the best technical, most cost-effective, backup and storage solutions that meet initial capacity, long-term growth, and anticipated performance requirements.

3.1.3.8 Contractor shall provide proactive and cost-effective planning documentation, based on proven methods and historical trends, to anticipate initial size and growth of new systems as well as continued growth for existing solutions

3.1.3.9 Contractor shall provide architect solutions and plans for upgrading and fielding weapon system software and hardware updates.

3.1.3.10 Contractor shall troubleshoot and maintain the training Cyber weapon systems.

3.1.3.11 Contractor shall integrate with Cyber Weapon Systems Students/Instructors and provide Tier 1-3 Maintenance support.

3.1.3.12 Contractor shall install all images and maintain system images for training Cyber weapon systems equipment.

3.1.3.13 Contractor shall communicate to leadership operational status, outage notifications, and delays to training.

3.1.3.14 Contractor shall maintain and administer computer networks and related computing environments including computer hardware, systems software, applications software, and all configurations.

3.1.3.15 Contractor shall diagnose, troubleshoot, and resolve hardware, software, or other network and system problems, replacing defective components when necessary.

3.1.3.16 Contractor shall analyze equipment performance records to determine the need for repair or replacement.

3.1.3.17 Contractor shall design/engineer, implement, manage, and maintain unclassified and classified training mission simulators, network systems, cross-domain solutions, and long haul data connectivity.

3.1.3.18 Contractor shall identify, evaluate, and recommend utility of training range, simulator technology, and information technology for inclusion in the CyO and IO training systems. Contractor shall label recommendations as For Official Use Only (FOUO) as a minimum.

3.1.3.19 Contractor shall create, modify, and maintain unclassified and classified TMS that can operate as a single network enclave or be interconnected to simulate the World Wide Web (WWW), DoDIN, and AFIN environments.

3.1.3.20 Contractor shall provide configuration management ensuring architecture drawings, software listing with version numbers and licensing, wide area network (WAN) configuration, virtual machine snapshots, and developed user guidance and manuals reflect all system components, configuration, and capabilities.

3.1.3.21 Contractor shall design/engineer, implement, manage, and maintain various virtualization environment platforms (e.g., VMware, VMWorkstation, VMPlayer, Xen, VirtualBox, and Hybervisor).

3.1.3.22 Contractor shall design/engineer, implement, manage, and maintain various virtualized environments components (e.g., vSphere, vCloud, vCenter, ESXi, virtual machines, virtual switches, and hypervisors).

3.1.3.23 Contractor shall design, modify, develop, write, and implement software programming and scripting applications for integration into CyO and IO training systems.

3.1.3.24 Contractor shall design, modify, develop, write, and implement networking attack scripts that simulate an advanced persistent threat.

3.1.3.25 Contractor shall develop, maintain, and integrate tool-suites to automate simulator network management.

3.1.3.26 Contractor shall develop and provide training on tool suites for automated simulator network management.

3.1.3.27 Contractor shall modify networking switches and routers IAW appropriate AF Standards, TOs and guidance as well as 39 IOS SOPs.

3.1.3.28 Contractor shall develop and maintain TMS and network systems communications.

3.1.3.29 Contractor shall design, install, configure, and maintain TMS and network systems network services for internal and external networks.

3.1.3.30 Contractor shall evaluate and analyze the TMS and network systems to eliminate problems and make improvements.

3.1.3.31 Contractor shall create and maintain computer-aided drawings/diagrams of the TMS/Range to include infrastructure, equipment rack location, wiring and patching systems.

3.1.3.32 Contractor shall support and/or install software applications/operating systems.

3.1.3.33 Contractor shall provide translation of storyboards to files compatible with the Shared Common Object Reusable Modules (SCORM) standards for use in an ADL Learning Management System (LMS).

3.1.3.34 Contractor shall configure and manage the LMS used to administer and offer ADL course material for internal and external customers.

3.1.3.35 Contractor shall assist with training students in the process used to build network systems and administering Government network systems with a focus on OCO and DCO.

3.1.3.36 Contractor shall design, modify, develop, write, and implement networking attack scripts that simulate offensive Tactics, Techniques and Procedures (TTP) used by an Advanced Persistent Threat (APT).

3.1.3.37 Contractor shall provide project management documentation, to include milestones, timelines, and funding requirements, for design, development, revision, and administration of TMS equipment, hardware and software.

3.1.3.38 Contractor shall provide detailed research on specific systems, hardware, and software used in or associated with the AFIN, AFNET, DoDIN, JIE, USCYBERCOM CMF, Cyber Weapon Systems, and taught within the 39 IOS, FTU. Results shall be provided in a manner that enables integration into Cyberspace Training Systems.

3.1.3.39 Contractor shall participate in the Configuration Management Board as required by COR/Government team lead, notify COR/Government team lead of any changes to systems affecting security, monitor access control to recovery procedures and media, and perform audits of security records as required.

3.1.3.40 Contractor shall confer with staff, users, and management to establish requirements for new systems or modifications.

3.1.3.41 Contractor shall on a quarterly basis provide Tier 3/4 network support to optimize the Cyber Training Range for optimal performance to include: Network Monitoring, routing, and virtualization, upgrade operating systems, firmware and applications for the virtualized hosts and guest operating systems, identify network deficiencies and recommend the implementation of software or hardware changes to mitigate deficiencies or to enhance network performance, and provide recommendations for network design changes/enhancements for improved systems availability and performance (e.g. VMware Sphere, VCSA, VSAN, NSX, and Horizon View).

3.1.4 Training Mission Simulator (TMS) and Range Administration

3.1.4.1 Contractor shall provide planning and design for unclassified and classified network infrastructure and enterprise network solutions, troubleshooting, installing, implementing and administering network systems and providing Tier III support.

3.1.4.2 Contractor shall provide network capacity analysis and develop capacity-planning models.

3.1.4.3 Contractor shall perform testing activities IAW network security guidelines.

3.1.4.4 Contractor shall manage internal network, day-to-day operations which include patches and upgrades to our network infrastructure.

3.1.4.5 Contractor shall design, setup, troubleshoot and configure complex switching environments.

3.1.4.6 Contractor shall design, setup, troubleshoot and configure complex routing topologies.

3.1.4.7 Contractor shall notify COR/Government team lead of any changes to systems affecting security; monitor access control to recovery procedures and media; and perform audits of security records.

3.1.4.8 Contractor shall interface with vendors and third parties for installation and troubleshooting.

3.1.4.9 Contractor shall identify potential network problems, report outages, suggest corrective actions, and apply corrective actions.

3.1.4.10 Contractor shall perform periodic preventive maintenance to network components.

3.1.4.11 Contractor shall perform regular testing of failover and redundancy to allow for power/WAN failures.

3.1.4.12 Contractor shall maintain security posture of local area network (LAN)/WAN using best practices.

3.1.4.13 Contractor shall provide regular health-check and failover test results to management.

3.1.4.14 Contractor shall troubleshoot network anomalies and malfunctions on network hardware, within software applications, VoIP environment, and our security systems.

3.1.4.15 Contractor shall maintain and administer computer networks and related computing environments including computer hardware, systems software, applications software, and all configurations.

3.1.4.16 Contractor shall diagnose, troubleshoot, resolve…