FES PWS 16Jan25_Final.pdf

PERFORMANCE WORK STATEMENT (PWS)

For

U.S. Army Fire & Emergency Services (F&ES) Enterprise Wide Information Technology Cloud-Based Software License Solution & Ancillary Support Services

Dated: 16 Jan 2025

PART 1

GENERAL INFORMATION

1. General: The Deputy Chief of Staff, G-9 (DCS, G-9/DAIN-ISL), is responsible for policy, prioritization, resourcing and oversight of programs supporting installation logistics base operations services. A key focus area is Fire and Emergency Services (F&ES). The G-9 F&ES program directly supports Army Readiness and Mission assuredness by providing expert prevention, protection, rescue, education, mitigation and consulting services, enabling Army Soldiers, Families and Civilians to live, work and thrive in a work environment. In order to fulfil this responsibility, G-9/F&ES is requesting the Mission and Installation Contracting Command (MICC), Fort Sam Houston (FSH), provide contracting support to procure a Federal Risk and Authorization Management Program (FedRAMP) compliant Information Technology (IT) Cloud-Based Hosting Software License solution. Once fielded, this solution will provide U.S.

Army F&ES organizations the ability to standardize and execute its F&ES program requirements across 109 Army F&ES organizations and 273 fire stations used by 5,051 firefighters. The proposed contract action will be treated primarily as a commodities acquisition with ancillary non-personal services described as Program Management, Software Reporting/Licensing and Support Services. The government shall not exercise any supervision or control over the contract commodity/service providers delivering the commodity and performing the ancillary services described herein. Such contract commodity/service providers shall be accountable solely to the contractor who, in turn, is responsible to the government.

1.1 Description of Services/Introduction: The contractor shall provide all personnel, software, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal ancillary services necessary to obtain software licenses and ancillary services in support of a Fire & Emergency Services Enterprise Wide FedRAMP compliant Information Technology Cloud-Based Software License solution as defined in this Performance Work Statement (PWS) except for those items specified in Part 3 as Government Furnished Property (GFP) and services. The contractor shall perform to the standards in this PWS.

1.2 Background: There is currently a U.S. Army Enterprise Wide F&ES Information Technology Cloud-Based Software License solution that has been used for the last 8 years. The G-9 F&ES program objective is to continue Army F&ES Installation local organizational F&ES solutions on an Enterprise Wide application that is a FedRAMP compliant IT Cloud-Based Software License solution. There are 109 F&ES organizations are currently using a G-9 funded, standardized, commercially available web-based solution to run day-to-day record management and Emergency Operations. This standardized Cloud-Based F&ES solution results in efficient operations across the Army enterprise.

1.3 Objectives: The G-9/F&ES program objective procure an Army Enterprise records management solution for 109 Army F&ES organizations and 273 fire stations and for the contractor to provide a single FedRAMP compliant Commercial-Off-The-Shelf (COTS) Cloud- Based U.S. Army Enterprise Wide IT Software License solution to include ancillary non-personal services that fulfills the following overarching capabilities and objectives.

Data Management o Provide a FedRAMP compliant COTS Software As A Service (SAAS) automated web-enabled emergency records management application.

o Provide a FedRAMP compliant Cloud-Based hosting data storage solution to include remote and redundant storage.

o Possess the ability to standardize records management and validate existing and new data prior to data or record transfer to the Cloud-Based enterprise product solution and to the National Fire Information Reporting System (NFIRS) or National Emergency Response Information System (NERIS) to eliminate the transfer of incomplete or incorrect records.

o Standardize records management and reporting capabilities.

o 100% of mutually agreed upon data transfer of existing, Emergency Reporting, F&ES organizational data transfer to the Enterprise FedRAMP compliant Cloud- Based COTS solution.

o Centralized data storing while meeting information security standards.

o Possess FedRamp High, DISA DCAS IL4 certification, and obtain a DoD

Provisional Authorization.

Accessibility o Multi-point web-based remote access using Government furnished mobile devices capable of securing web browsing.

o User real-time access to Data and Reports.

o Unlimited higher level organizational and headquarters access to system Reports.

o In process user visibility to Army Action Officers and Decision Makers that promotes a consistent framework and format for capturing essential program data and trends for the F&ES Program.

o Allow for real time access to Fire and Emergency Service Call information and Call Data Tracking.

o The enterprise FedRAMP compliant Cloud-Based F&ES product solution shall be Government Public Key Enabled (PKE) controlled and accessible.

Reports/Reporting o Provide standardized reporting applications.

o Simplified Data Integration and Reporting capabilities into NFIRS/NERIS.

o Allows for NFIRS/NERIS report submission.

1.4 Scope: Contractor is required to provide a Commodity described as a Commercial Off the Shelf (COTS) U.S. Army Enterprise Wide FedRAMP compliant Cloud-Based Hosting Information Technology Software License solution and ancillary non-personal services described as Set-Up, Installation, Training and 24/7/365 Day Help Desk support. The COTS solution and ancillary services shall be Cloud-Based and allow for full-integration of existing U.S. Army

F&ES program data while meeting all PWS Part 5 requirements and Part 6 Standards/Regulations.

1.4.1 Ancillary Services: Contractor shall provide non-personal services described as:

Software and Licensing Product Program Management Support Services

A detailed description of the ancillary service requirements identified above can be found in Part 5, Specific Tasks.

1.5 Period of Performance: The period of performance shall be for a base year consisting of twelve consecutive months after contract award and four (4) 12-month option periods with a 6 month extension after option year 4 as required. The period of performance reads as follows:

Base Year: Beginning at the contract award date and ending twelve (12) Months thereafter.

Option Period I: Starting at the end of the Base Year period of performance and ending twelve

(12) months thereafter.

Option Period II: Starting at the end of the Option Period I period of performance and ending twelve (12) months thereafter.

Option Period III: Starting at the end of the Option Period II period of performance and ending twelve (12) months thereafter.

Option Period IV: Starting at the end of the Option Period III period of performance and ending twelve (12) months thereafter.

6 Month Extension: Starting at the end of the Option Period IV period of performance and ending six (6) months thereafter.

1.6 General Information

1.6.1 Quality Control: Quality control is the responsibility of the contractor. The contractor is responsible for the delivery of quality services/supplies to the government (see FAR 52.246-1, Contractor Inspection Requirements and FAR 52.246-4, Inspection of Services-Fixed Price).

The contractor shall develop, implement and maintain an effective quality control system that includes a written quality control plan (QCP). The QCP shall implement standardized procedure/methodology for monitoring and documenting contract performance to ensure all contract requirements are met. The contractors’ QCP must contain a systematic approach to monitor operations to ensure acceptable services/products are provided to the government. The QCP, as a minimum, shall address continuous process improvement; procedures for scheduling, conducting and documentation of inspections; discrepancy identification and correction;

corrective action procedures to include procedures for addressing government discovered non-conformances; procedures for root cause analysis to identify the root cause and root cause corrective action to prevent re-occurrence of discrepancies; procedures for trend analysis; and procedures for collecting and addressing customer feedback/complaints. The contractor shall upon request provide to the government its quality control documentation. The contractor shall deliver to the Contracting Officer (KO) and Contracting Officer Representative (COR) within 45 days after contract award an electronic copy of the QCP. After the Contractor has received the KO’s written acceptance of the final QCP, any Contractor proposed changes to the QCP must first be reviewed and approved in writing by the KO. Contractor proposed changes to the QCP shall be delivered to the KO and COR within five (5) working days after required changes are identified.

1.6.2 Quality Assurance: The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This QASP is a government only document primarily focused on what the government must do to assure that the contractor has performed in accordance with the requirements of the contract.

1.6.3 Federal Government Holidays: The Contractor is required to perform 24/7/365 Day Help Desk support services to include on the Government recognized Holidays shown below. All other Contractor ancillary services are not required to be provided on the Federal Holidays shown below.

New Year’s Day 1st day of January Martin Luther King Jr. Day 3rd Monday of January Presidents Day 3rd Monday of February Memorial Day Last Monday of May Juneteenth Day 19th day of June Independence Day 4th day of July Labor Day 1st Monday of September Columbus Day 2nd Monday of October Veterans Day 11th day of November Thanksgiving Day 4th Thursday of November Christmas Day 25th day of December

1.6.4 Hours of Operation: The contractor is responsible for conducting business, between the hours of 0800 – 1800 EDT, Monday through Friday, for all ancillary services with the exception of the 24/7/365 Day Help Desk support services. Contractor is not required to provide ancillary services other than 24/7/365 Day Help Desk support services when the government facility is closed due to local or national emergencies, administrative closings, or similar government directed facility closings. For other than firm fixed price contracts, the contractor will not be reimbursed when the government facility is closed for the above reasons. The contractor shall at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the government facility is not closed for the above reasons. When hiring personnel, the contractor shall keep in mind that the stability and continuity of the workforce are essential.

1.6.5 Place of Performance: The work to be performed under this contract will be performed at the Contractor’s facility with periodic trips to Government locations as required by the PWS Part 5, Specific Tasks, requirements.

1.6.6 Type of Contract: The government will award a Firm Fixed Price (FFP) contract type and Time and Material (No Fee) to reimburse the Contractor for authorized and allowable Travel and Other Direct Costs.

1.6.7 Security Requirements: This is an unclassified contract. There are no requirements for Contractor employees to have access to classified Government information in the performance of this contract effort.

1.6.8 Personal Identity Verification (PIV).

1.6.8.1. The Contractor and its employees shall comply with PIV procedures implemented by Homeland Security Presidential Directive-12 (HSPD-12), Federal Information Processing Standards Publication (FIPS PUB) Number 201-1, Office of Management and Budget (OMB) Guidance M-05-24 and G-9.

1.6.8.2. The Contractor shall insert this clause in all subcontracts when the subcontractor is required to have physical access to a Federally controlled facility or access to a Federally controlled information system.

1.6.8.3. In accordance with HSPD-12, OMB M-05-24 and FIPS 201-1, unless a previous favorable background investigation has been completed in the last ten (10) years, all contractor employees will be the subject of a background investigation conducted by the Government.

1.6.8.4. No contractor employee will commence work until an appropriate personnel security investigation (PSI) paperwork has been submitted to the Office of Personnel Management (OPM) and an interim eligibility/suitability determination has been completed.

1.6.8.4.1 When access to classified information or the contractor employee will be providing full-time, on-site support at a secure Government facility, the Contractor will process the investigation request through the Defense Industrial Security Clearance Office (DISCO).

1.6.8.4.2 When contract support does not involve access to classified information and support is not provided at a secure Government facility, the Government will process the investigation request with assistance from the Government COR.

1.6.8.5. In addition to the submission of the required PSI, contractor employees not meeting the minimum requirements will be the subject of a National Crime Information Center (NCIC) check by G-9 Security prior to beginning work regardless of the sensitivity of the work being performed.

1.6.8.6. Non-US citizens will not be used in the performance of this contract unless the provisions of Army Regulation 25-2, Information Assurance have been fully completed and approval has been granted by the Government for the non-US citizen to perform the required support.

1.6.9 Visit Notification.

1.6.9.1. If the Contractor has previously been granted a facility clearance (FCL) through DISCO, the Facility Security Officer (FSO) shall submit visit notifications via JPAS in the format prescribed by the G-9 Security Officer; the prescribed format will be provided to the Contractor by the Government COR.

1.6.9.2. If the Contractor is not cleared through DISCO, the Contractor shall submit a signed visit request on company letterhead stationery through the Government COR for all contractor employees supporting the contract. The request will include the following:

Full name (last, first, middle) Date of birth (MM/DD/YYYY) Place of birth (city, state, country) Citizenship Type of last investigation Date last investigation was completed

1.6.10 Post Award Conference/Periodic Progress Meetings: The contractor shall attend, a limited number, of post award conferences, located in the DC area, convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5, Post Award Orientation, and PWS Part 5, requirements. The contracting officer, COR, and other government personnel, as appropriate, will meet quarterly, with the contractor to review the contractor's performance. At these meetings the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.6.11 Contracting Officer Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including government drawings, designs, and specifications; monitor contractor's performance and notify both the contracting officer and contractor of any deficiencies;

coordinate availability of government furnished property; and facilitate site entry of contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.12 Key Personnel: The government requires part time staff who can properly support these requirements. The government expects that these key personnel will be supported by the appropriate number of additional part time supporting staff to properly deliver and sustain the F&ES requirements. The following personnel are considered key personnel by the government:

Program Manager Service Delivery Manager Contract Manager

1.6.12.1 Program Manager. The Program Manager shall possess a minimum of a Bachelor’s Degree in Emergency Management from an accredited college or equivalent (seven (7) years) experience. In addition to the bachelor’s degree, a master’s degree is desirable. A Program Management Institute Certified Program Management Professional certification in Program Management is required. Required work experiences are a minimum of seven (7) years of experience within the last fifteen (15) years as a Program, Project Manager Action Officer or Team Lead with increasing responsibility, preferably with Public or Private sector experiences managing projects in:

Emergency Management and Information Technology Programs/Projects of a similar size and scope as described in this PWS.

Demonstrated Experience in system/application design and development.

Program Manager must also possess and demonstrate the ability to direct, plan and coordinate multiple IT projects/tasks including estimating of resources, project planning, cost accounting, schedules, risk assessments, critical path method, contract reporting and problem resolution.

The Program Manager shall be responsible for:

Directing project-specific staff and review work products for completeness and adherence to customer requirements.

Providing communication to management to review project plans, status reports, and deliverables.

Developing overall project milestones and monitors the execution of the project against planned timelines.

Directs and reviews program plans, status reports, and deliverables with program director and project teams.

1.6.12.2 Service Delivery Manager. The Services Delivery Manager shall possess a minimum of ten (10) years of experience within the last fifteen (15) years in software configuration related to Emergency Management solutions. The Services Delivery Manager shall possess a DoD 8570.01 IAT Level II Certification. Demonstrated work experiences with complex IT projects installing or upgrading software is required.

The Services Delivery Manager shall be responsible for:

Creating installation files for each product/upgrade into an installable application.

Verifying that all components and configuration steps of the build package are true to the specification of the build.

Providing technical guidance to the Program Manager and other administrator personnel.

The Applications Administrator shall be responsible for:

Installation, Implementing, Administering, Supporting and Maintaining applications.

Monitors designated applications and takes corrective action to prevent or minimize system down time.

Troubleshoots to resolve system related problems; coordinates with relevant system administrators, others regarding user support and problem resolution.

Creates user documentation and trains personnel on new applications software.

Assists with developing policies, procedures, programs, scripts, or web pages as required.

Supports and serves as a technical expert for applications in all stages of development, testing and production.

Performs application and web administration related to Security Technical

Implementation Guides (STIGs) and Vulnerability Management System (VMS) reporting.

1.6.12.3 Contract Manager. The Contract Manager shall be responsible for representing the contractor in interactions with the Government’s Contracting Officer and Contract Specialist with regard to all aspects of contract administration beginning with award of the prime contract.

The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the contracting officer. The contract manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The contract manager or alternate shall be available between the hours of 0800am to 5:00pm, Monday through Friday except federal holidays or when the government facility is closed for administrative reasons. The Contract Manager shall possess at a minimum eight (8) years work experiences providing pre-award acquisition support services and post-award contract administration/management work experiences in support of the contractor’s U.S.

Federal Government prime contracts. The Contract Manager shall possess a bachelor’s degree, or equivalent experience. The Contract Manager needs to have in-depth knowledge and understanding of the proposed application architecture, cyber-security compliance and how it relates to the offering.

1.6.13 Identification of Contractor Employees: N/A.

1.6.14 Anti-Terrorism and Operations Security Requirements:

1.6.14.1 AT Level I Training: This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area. All contractor employees, to include subcontractor employees, requiring access Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 15 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website: http://jko.jten.mil

1.6.14.2 Access and General Protection/Security Policy and Procedures: This standard language is for contractor employees with an area of performance within Army controlled installation, facility, or area. Contractor and all associated sub-contractors employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.6.14.3 For Contractors Requiring Common Access Card (CAC). Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of six (6) months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

1.6.14.4 iWATCH Training. This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 15 calendar days of new employees commencing performance with the results reported to the COR NLT 45 calendar days after contract award.

1.6.14.5 Army Training Certification Tracking System (ATCTS) Registration for Contractor Employees Who Require Access to Government Information Systems. All contractor employees with access to a Government information system must be registered in the ATCTS at commencement of services and must successfully complete the DoD Cyber Security Awareness prior to access to the information system and annually thereafter.

1.6.14.6 For Contracts That Require OPSEC Training. Per AR 530-1, Operations Security, new contractor employees must complete Level I OPSEC training within 30 calendar days of their reporting for duty. All contractor employees must complete annual OPSEC awareness training, and adhere to organization’s security program. http://cdsetrain.dtic.mil/opsec/

1.6.14.7 For Cyber Security/Information Technology (CS/IT) Training. All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2 within six months of appointment to IA/IT functions.

1.6.14.8 AT Awareness Training for Contractor Personnel Traveling Overseas. This standard language requires U.S.-based contractor employees and associated subcontractor employees to make available and to receive Government-provided area of responsibility (AOR)–specific AT awareness training as directed by AR 525-13. Specific AOR training content is directed by the combatant commander, with the unit ATO being the local point of contact.

1.6.15. Supervision of Contractor Employees: The government will not exercise any supervision or control over contractor or subcontractor employees while performing work under the contract.

Such employees shall be accountable solely to the contractor, not the government. The contractor, in turn, shall be accountable to the government for contractor or subcontractor employees.

1.6.16 Contractor Travel. The contractor shall be required to travel CONUS, OCONUS (Federal Republic of Germany) and within the National Capital Region (NCR) during the performance of this contract to conduct training. The contractor may be required to travel to off-site (Government location) training locations and to ship training aids to these locations in support of this PWS. The contractor will be authorized travel expenses to be reimbursed on a Time and Materials No Fee basis consistent with the substantive provisions of the Joint Travel Regulation (JTR) and the limitation of funds specified in this contract. All travel requires government approval/authorization and notification to the COR.

1.6.17 Other Direct Costs. This category excludes travel (outlined in 1.6.16), and includes reproduction, miscellaneous materials and shipping costs in support of contractor travel, training and contractor direct labor providing the non-personal services described in this PWS.

1.6.18 Data Rights. The government has unlimited rights to all agency produced data and project documents/reports with the exception of contractor developed source code produced under this contract. The government does not intend to take ownership or have unlimited data rights over any Intellectual Property (IP). All documents and reports produced under this contract shall be government owned and are the property of the government with all rights and privileges of ownership/copyright belonging exclusively to the government. These documents and reports shall not be used or sold by the contractor without written permission from the contracting officer. All materials supplied to the government shall be the sole property of the government and shall not be used for any other purpose. This right does not abrogate any other government rights.

1.6.19 Organizational Conflict of Interest:

a. Purpose. The primary purpose of this clause is to aid in ensuring that:

(1) The Contractor does not obtain an unfair competitive advantage by establishing the ground rules for a future competition;

(2) The Contractor's objectivity and judgment are not biased because of its present or future interests (financial, contractual, organizational, or otherwise) which relate to work performed under this contract; and

(3) The Contractor does not obtain an unfair competitive advantage by virtue of its access to non-public or proprietary information belonging to others.

b. Definitions.

(1) The term “Contractor” herein used means: (a) the organization (hereinafter referred to as "it" or "its") entering into this agreement with the Government; (b) all business organizations with which it may merge, join or affiliate now or in the future and in any manner whatsoever, or which hold or may obtain, by purchase or otherwise, direct or indirect control of it; (c) its parent organization if any and any of its present or future subsidiaries, associates, affiliates, or holding companies, and; (d) any organization or enterprise over which it has direct or indirect control now or in the future.

(2) The term "proprietary information" for purposes of this clause means any information considered so valuable by its owners that it is held secret by them and their licensees.

Information furnished voluntarily by the owner without limitations on its use, or which is available without restrictions from other sources, is not considered proprietary.

c. Organizational Conflicts of Interest Examples. The following examples illustrate situations in which organizational conflicts of interest may arise. These examples are not all inclusive.

(1) Biased Ground Rules. This type of conflict may arise in situations where a company sets the ground rules for a future competition. For example, when a Contractor develops requirements then competes to provide products or services to satisfy those requirements, thus obtaining a competitive advantage.

(2) Impaired Objectivity. This type of conflict may exist where a Contractor’s obligations under a contract require objectivity, but another role of the Contractor casts doubt on its ability to be truly objective. An example of this type of conflict is where a Contractor’s work under one contract entails evaluating itself, its affiliates, or its competitors under a separate contract.

(3) Unequal Access to Information. This type of conflict may arise when a Contractor has access to nonpublic or proprietary information as part of its performance under a contract that gives it an unfair advantage in a competition for a later contract.

d. General Constraints. The provisions of FAR Subpart 9.5, Organizational and Consultant Conflicts of Interest, concerning organizational conflicts of interest govern this contract.

Potential conflicts may exist in accordance with FAR 9.505-1, Providing Systems Engineering and Technical Direction, through 9.505-4, Obtaining Access to Proprietary Information. In this regard, the Contractor is responsible for identifying any actual or potential organizational conflicts of interest to the Contracting Officer that arise as the result of performance under this contract. To avoid or mitigate a potential conflict related to performance under this contract, the

Contracting Officer will impose appropriate constraints such as the constraints discussed below.

Since it is impossible to foresee all of the circumstances that might give rise to organizational conflicts of interest, the constraints discussed below are not all inclusive and the Contracting Officer may impose constraints other than, or in addition to, the constraints listed below.

(1) The Contractor agrees that if it provides, under a contract or task order or delivery order, systems engineering and technical guidance for systems and programs, but does not have overall contractual responsibility, it will not be allowed to be awarded a contract or task or delivery order to supply the system or any of its major components or be a Subcontractor or consultant to a supplier of the system or any of its major components

(2) The Contractor agrees that if it prepares complete specifications for non-developmental items or assists in the preparation of work statements for a system or services under a contract or task order or delivery order, it shall not be allowed to furnish these items, either as a prime Contractor, a Subcontractor or as a consultant.

(3) The Contractor agrees that it shall neither evaluate nor advise the Government with regard to its own products or activities. The Contractor shall objectively evaluate or advise the Government concerning products or activities of any prospective competitors.

(4) The Contractor agrees that if it gains access to proprietary information of other companies, it shall exercise diligent effort to protect such proprietary information from unauthorized use or disclosure. In addition, the Contractor agrees to protect the proprietary information of other organizations disclosed to the Contractor during performance of this contract with the same caution that a reasonably prudent Contractor would use to safeguard highly valuable property.

The Contractor also agrees that if it gains access to the proprietary information of other companies it shall enter into written agreements with the other companies to protect their information from unauthorized use or disclosure for as long as it remains proprietary and to refrain from using the information for any purpose other than that for which it was furnished.

The Contractor shall provide copies of such agreements to the Contracting Officer.

(5) If the Contractor, in the performance of this contract, obtains access to plans, policies, reports, studies, financial plans, data or other information of any nature which has not been released or otherwise made available to the public, the Contractor agrees that without prior written approval of the Contracting Officer, it shall not: (a) use such information for any private purpose unless the information has been released or otherwise made available to the public, or

(b) release such information unless release is otherwise authorized under the contract or such information has previously been released or otherwise made available to the public by the Government.

e. Non-Disclosure Agreements. The Contractor shall obtain from each employee who has access to proprietary information under this contract, a written agreement which shall in substance provide that such employee shall not, during his/her employment by the Contractor or thereafter, disclose to others or use for their benefit, proprietary information received in connection with the work under this contract. The Contractor shall educate its employees regarding the restrictions so that they shall not use or disclose proprietary information or data generated or acquired in the performance of this contract except as provided herein.

f. Training. The Contractor shall effectively educate its employees, through formal training, company policy, information directives and procedures, in an awareness of the legal issues so that each employee shall know and understand the absolute necessity of safeguarding information from anyone other than the Contractor's employees who have a need to know, and the U.S. Government.

g. Subcontracts. The Contractor agrees that it shall include the provisions in paragraphs d., e., and f. above and this paragraph in consulting agreements, teaming agreements, and subcontracts of all tiers which involve access to information or the performance of services described in paragraph d. above. The use of this clause in such agreements shall be read by substituting the word "consultant" or "Subcontractor" for the word "Contractor" whenever the latter appears.

h. Additional Constraints. If this contract provides for the issuance of task or delivery orders, such orders may impose additional requirements and restrictions relating to this clause to include the requirement for the Contractor and its Subcontractors and employees to furnish the Government with written non-disclosure agreements or statements of no conflict of interest.

With regard to any proposal submitted by the Contractor in response to a Request for Task or Delivery Order Proposal, by submitting its proposal the Contractor represents that it has disclosed to the Contracting Officer, prior to the issuance of the task or delivery order, all facts relevant to the existence or potential existence of organizational conflict of interest.

i. Conflicts Involving Future Procurements. The award of this contract, task or delivery orders issued under this contract, Government taskings, or acquiescence in the Contractor’s performance of services hereunder shall not constitute or be interpreted as a determination that the Contractor is eligible to participate in future procurements, developmental efforts, implementation efforts, or related activities. Only the Contracting Officers for such efforts, applying the rules, principles, and procedures have the authority to determine whether a conflict exists in connection with such procurements.

j. Representations and Disclosures.

(1) The Contractor represents that it has disclosed to the Contracting Officer, prior to award of this contract, all facts relevant to the existence or potential existence of organizational conflict of interest.

(2) The Contractor represents that if it discovers an organizational conflict of interest or potential conflict of interest after award of this contract, a prompt and full disclosure shall be made in writing to the Contracting Officer. This disclosure shall include a description of the action the Contractor has taken or proposes to take in order to avoid or mitigate such conflict.

k. Remedies and Waiver.

(1) For breach of any of the above restrictions or for non-disclosure or misrepresentation of any relevant facts required to be disclosed concerning this contract, the Government may terminate this contract for default, disqualify the Contractor for subsequent related contractual efforts, and pursue such other remedies as may be permitted by law or this contract. If, however, in compliance with this clause, the Contractor discovers and promptly reports an organizational conflict of interest (or the potential thereof) subsequent to contract award, the Contracting Officer may terminate this contract or any task or delivery order issued under this contract for convenience if such termination is deemed to be in the best interest of the Government.

(2) The parties recognize that this clause has potential effects which will survive the performance of this contract and that it is impossible to foresee each circumstance to which it might be applied in the future. Accordingly, the Contractor may at any time seek a waiver from the cognizant Contracting Officer by submitting a full written description of the requested waiver and the reasons.

1.6.20 COMBAT TRAFFICKING IN PERSON.

IAW FAR 52-222-50. Contractor Requirements.

The Contractor shall –

(1) Notify its employees of

(i) The U.S. Government's zero tolerance policy.

(ii) Actions that will be taken against employees for violations of this policy.

(2) Take appropriate action.

Part II, Trafficking in Persons (TIP)

1. The Contractor has a procedure for notifying employees of TIP and proof of such notification on file via:

i. Training records or

ii. Employee signature

2. Has documented actions on file citing appropriate action to TIP violations.

3. Record of documented violations to date (if any).

4. The Contractor has a procedure for notifying the Contracting Officer if information is received or actions related to TIP are observed.

1.6.21. IAW FAR 39.2, F&ES product solution shall be compliant with Section 508, an amendment to the United States Workforce Rehabilitation Act of 1973. The Contractor shall ensure all F&ES applications are accessible to people with disabilities and that current and future requirements to maintain compliance with Section 508 are met.

1.6.22 PHASE IN /PHASE OUT PERIOD. Not Applicable.

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1. DEFINITIONS:

2.1.1. CONTRACT ADMINISTRATOR. The official government representative delegated authority by the contracting officer to administer a contract. This individual is normally a member of the appropriate contracting/procurement career field and advises on all technical contractual matters.

2.1.2. CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or services to the government. The term used in this contract refers to the prime.

2.1.3. CONTRACTING OFFICER. A person with authority to enter into, administer, and/or terminate contracts, and make related determinations and findings on behalf of the government.

Note: The only individual who can legally bind the government.

2.1.4. CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S.

government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does not have authority to change the terms and conditions of the contract.

2.1.5. DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the PWS.

2.1.6. DELIVERABLE. Anything that can be physically delivered but may include non-manufactured things such as meeting minutes or reports.

2.1.7. GOVERNMENT-FURNISHED PROPERTY (GFP) OR GOVERNMENT PROPERTY

(GP). Property in the possession of, or directly acquired by, the government and subsequently made available to the contractor.

2.1.8. KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the key personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.9. PHYSICAL SECURITY. Actions that prevent the loss or damage of government property.

2.1.10. QUALITY ASSURANCE. The government procedures to verify that services being performed by the contractor are acceptable in accordance with established standards and requirements of this contract.

2.1.11. QUALITY ASSURANCE SPECIALIST. An official government representative concerned with matters pertaining to the contract administration process and quality assurance/quality control. Acts as technical advisor to the contracting officer in these areas.

2.1.12. QUALITY ASSURANCE SURVEILLANCE PLAN (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.13. QUALITY CONTROL. All necessary measures taken by the contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.14. SUBCONTRACTOR. One that enters into a contract with a prime contractor. The government does not have privity of contract with the subcontractor.

2.1.15. WORKDAY. The number of hours per day the contractor provides services in accordance with the contract.

2.1.16. WORK WEEK. Monday through Friday, except for federal holidays unless specified otherwise.

2.2. ACRONYMS.

AD Army Directive AFARS Army Federal Acquisition Regulation Supplement AR Army Regulation AT Anti-Terrorism ATCTS Army Training Certification Tracking System ATO Authority to Operate CAC Common Access Code CAD Computer Aided Dispatch CFCM Certified Federal Contracts Manager CFE Contractor Furnished Equipment CFR Code of Federal Regulations CI Counter Intelligence CMR Contract Manpower Reporting CNSSI Committee on National Security Systems Instruction CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTS Commercial-Off-the-Shelf (e.g. Commercially available and not government owned) CPCM Certified Professional Contracts Manager DA Department of the Army

DAWAI Defense Acquisition Workforce Improvement Act DCS,G-9 Deputy Chief of Staff, G-9 DD250 Department of Defense Form 250 (Receiving Report) DD254 Department of Defense Contract Security Requirement List DFARS Defense Federal Acquisition Regulation Supplement DMDC Defense Manpower Data Center DOD Department of Defense DODI Department of Defense Instruction EPCR Electronic Patient Care Record FAR Federal Acquisition Regulation FBI Federal Bureau of Investigation FFP Firm Fixed Price FPCON Force Protection Condition FSC Federal Service Code FSH Fort Sam Houston FedRAMP Federal Risk and Authorization Management Program F&ES Fire and Emergency Services GFP Government Furnished Property GPS Global Positioning System HIPAA Health Insurance Portability and Accountability Act of 1996 HQDA Headquarters Department of the Army HSPD Homeland Security Presidential Directive IAM Information Assurance Management IAT Information Assurance Technician IAW In Accordance With ID Identification IMS Integrated Management Schedule IP Intellectual Property IPR In Process Review IS Information System ISD Installation Services Directorate IT Information Technology JTR Joint Travel Regulation KO Contracting Officer LSD Logistics Services Division MICC Mission and Installation Contracting Command MPPR Monthly Performance and Progress Report NAC-I National Agency Check with Inquiries NCIC-III National Crime Information Center Interstate Identification Index NDA Non-Disclosure Agreement NERIS National Emergency Response Information System NEMSIS National Emergency Medical Services Information System NFIRS National Fire Incident Reporting System NFPA National Fire Protection Association NIST National Institute of Standards and Technology NLT No Later Than

OCOI Organizational Conflict of Interest OCONUS Outside Continental United States (includes Alaska and Hawaii) ODC Other Direct Costs OPM Office of Personnel Management OPSEC Operational Security OS Operating System PIPO Phase In/Phase Out PIV Personal Identity Verification PjM Project Manager PM Program Manager PMO Program Management Office PMP Program Management Plan POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Program RMF Risk Management Framework SAAS Software As A Service (e.g. Vendor hosted and maintained solution) SP Special Publication STIG Security Technical Implementation Guide TE Technical Exhibit TIP Trafficking in Persons TSDB Terrorist Screening Data Base TARP Threat Awareness Reporting Program UIC Unit Identification Code VMS Vulnerability Management System WBS Work Breakdown Structure

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1. Services. Not Applicable.

3.2 Facilities. Not Applicable.

3.3 Utilities. Not Applicable.

3.4 Equipment. Not Applicable.

3.5 Materials. Not Applicable.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES:

4.1 General. The contractor shall furnish all supplies, equipment, facilities and services required to perform work under this contract that are not listed under Part 3 of this PWS.

4.2 Secret Facility Clearance. Not Applicable

4.3. Materials. Not Applicable.

4.4. Equipment. The contractor shall ensure that all contractor furnished equipment (CFE) employed to access Army networks, systems, applications, and databases meets the following minimum Army Cyber Security requirements. The contractor shall provide certification of compliance as a pre-requisite to being granted network access. The contractor shall:

Utilize only those operating systems (OS) capable of joining an Active Directory domain (e.g., Windows10). Employment of “home use” operating systems is prohibited.

Configure operating systems, databases, and applications for compliance with the Risk Management Framework (RMF) process.

Employ DOD approved Anti-virus and Anti-Spyware software with installation and updated signatures in accordance with Army IA policy. The contractor shall push updates from a trusted source using a centrally managed server.

Scan computers with the appropriate Army vulnerability scanner (or current approved DOD scanner solution) at a minimum of every 30 days. All vulnerabilities must be remediated and reported to the responsible IAM.

Comply with the security requirements documented in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations” as specified in this PWS.