FY2020 Curriculum and Trainer Update final SOW 2020-05-13.docx

Statement of Work LCAC FY20 Curriculum and Trainer Update 15 May 2020

SOW XXXXX

30 April 2020 Appendix D

STATEMENT OF WORK

FOR

LANDING CRAFT, AIR CUSHION (LCAC)

SERVICE LIFE EXTENSION PROGRAM (SLEP)

CURRICULUM AND TRAINER UPDATE FY2020

NAVAL AIR WARFARE CENTER

TRAINING SYSTEMS DIVISION

12211 SCIENCE DRIVE

ORLANDO, FLORIDA 32826-3275

PREPARED BY:

DATE:

Scott Tanner Research Psychologist, GT 5.3.2

APPROVED BY:

DATE:

John Bilbruck Project Manager

APPROVED BY:

DATE:

John Lomax Branch Head, GT 5.3.2

DISTRIBUTION STATEMENT D - Distribution authorized to U.S. Government agencies and their contractors for Administrative or Operational Use, 09 APR 2020. Other requests for this document shall be referred to Commander, Naval Air Warfare Center Training Systems Division (NAWCTSD PJM), 12211 Science Drive, Orlando, FL 32826.

WARNING - INFORMATION SUBJECT TO EXPORT CONTROL LAWS - This document contains technical data whose export is restricted by the Arms Export Control Act (Title 22, U.S.C., Section 2751 et seq.) or the Export Administration Act of 1979 (Title 50, U.S.C., App. 2401 et seq.), as amended. Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with the provisions of DoD Directive 5230.25.

DESTRUCTION NOTICE - For unclassified, limited distribution documents, destroy by any method that will prevent disclosure of contents or reconstruction of the document.

Table of Contents

TABLES

APPENDICES

Statement of Work

13 May 2020 iii

Statement of Work For Landing Craft Air Cushion (LCAC) Service Life Extension Program (SLEP) Operations and Maintenance Training Curriculum Update

SCOPE

This Statement of Work (SOW) sets forth the requirements to update the LCAC SLEP Operations and Maintenance curriculum and trainers based upon the Naval Sea Systems Command’s (NAVSEA) Safe Engineering and Operations (SEAOPS) 2020 Feedback Reports (FBRs) Training Impact Analysis and yearly curriculum and course discrepancy trackers. The current operations and maintenance curriculum requires revision due to changes in the SEAOPS manuals provided with the associated FBRs listed in the Appendices, as well as a course discrepancy tracker maintained by the Naval Air Warfare Center Training Systems Division (NAWCTSD) with input from schoolhouse Subject Matter Experts (SMEs). The Full Mission Trainer (FMT), Virtual Environment LCAC (VELCAC), Computer-Based Training (CBT), and Instructor-Led Training (ILT) will be modified to make them compliant with current LCAC SLEP Operation and Casualty Procedures (OCP). Unless specified otherwise, ILT curriculum, to include Instructor Guides (IGs), Student Guides (SGs), and PowerPoints requiring revision, will be completed by the Course Curriculum Model Manager (C2M2).

Requirements to complete the work listed above are delineated into five separate areas:

· SEAOPS

· Loss of Navigation (Nav) Casualties

· Craft Control Deficiencies

· Out-of-Scope Craft Control Deficiencies

· Mechanical Maintenance Deficiencies Appendix A contains a list of acronyms used in this SOW. Appendix B contains a summarized list of all discrepancies that need correcting, unless otherwise denoted. Appendix C contains the annual SEAOPS Training Impact Analysis. Appendix D contains the embedded course discrepancy tracker.

Course Background Information LCAC Operator and Maintenance courses are unclassified and are delivered using a blended approach consisting of ILT, CBT, computer simulations, part-task trainers, VELCAC, FMT, and live craft. Schoolhouse operator training courses for SLEP LCAC operations are listed below and are taught at Expeditionary Warfare Training Group – Pacific (EWTGPAC) in Coronado, California (CA); and Expeditionary Warfare Training Group – Atlantic (EWTGLANT) in Little Creek, Virginia (VA). EWTGPAC is the C2M2. Schoolhouse maintenance courses for SLEP LCAC are taught only at EWTGPAC. The LCAC courses are identified in TABLE 1 with the corresponding Navy Course Identification Number (CIN), course length, and Navy Enlisted Classification (NEC) awarded at the completion of the course.

Craftmaster Training (K-062-0100) The Craftmaster Training course provides LCAC Craftmasters with the knowledge and skills required to operate the SLEP LCAC in accordance with (IAW) LCAC SEAOPS manual under normal, emergency, and degraded modes over water and land in all conditions, including ship’s well deck entry and exit. The course prepares the student to be certified as an LCAC Craftmaster. Students who satisfactorily complete this course are awarded NEC BM 0167 (LCAC Operator).

Engineer Training (K-652-0312) The Engineer Training course provides the Craft Engineer with the knowledge and skills required to operate the SLEP LCAC IAW LCAC SEAOPS manuals specifically in the area of electrical and mechanical systems operations and control systems, equipment casualty control procedures and basic craft operational capabilities. The course provides gas turbine systems technicians with the knowledge and skills required to function as the assistant operator assisting in operating the LCAC in normal, emergency, and degraded modes over water and land in all conditions, including ships well deck entry and exit. The course prepares the student to be certified as an LCAC Engineer/Assistant Operator. Students who satisfactorily complete this course are awarded NEC GS 4131 (LCAC Craft Engineer/Assistant Operator).

Navigator Training (K-193-0436) The Navigator Training course provides the LCAC Navigator with the knowledge and skills required to operate the SLEP LCAC navigation and communication equipment IAW the LCAC SEAOPS manuals. The course also provides practical application on mission planning, high speed radar navigation, tactical maneuvering, and communication techniques necessary for LCAC operation. Students who satisfactorily complete this course are awarded NEC OS 0304 (LCAC Radar Operator/Navigator).

Craft Control Systems Maintenance (K-652-0315) The Craft Control Systems Maintenance course provides LCAC maintenance personnel with the necessary information and skills to maintain LCAC command, control, communication, navigation, electrical, and auxiliary systems at the apprentice level. Students are provided with technical data required to set-up, check out, inspect, disassemble, assemble, troubleshoot and repair the Craft Control system with the practical applications to reinforce the knowledge. Basic electronics maintenance skills to include soldering, basic troubleshooting techniques, multi-meter, operation, installation and weather proofing of cables and connectors will be reinforced.

Mechanical Maintenance (K-652-0314) The LCAC Mechanical Maintenance course objective is to provide LCAC maintenance personnel with necessary information, skill development, and practical application to setup, maintain, and perform maintenance on the LCAC gas turbine engines, propulsion, lift systems, and mechanical auxiliaries. Personnel are provided with technical data required for maintenance related checkout, inspection, disassembly, assembly, troubleshooting, use of tools, text equipment, and repair of applicable LCAC systems. Personnel will be provided with the technical data required for maintenance-related checkout, inspection, disassembly, assembly, troubleshooting, use of tools and test equipment, and repair of the systems and associated subsystems at the organizational level of maintenance (O-level).

LCAC Background Information The LCAC is a non-self-sustaining amphibious Air-Cushioned Vehicle (ACV), used to transport up to 60-tons of equipment and/or troops, from ship to shore at speeds in excess of 40 knots. LCAC can be outfitted with a personnel transport module that carries up to 180 non-combatants or 145 combatants. In civil emergencies or humanitarian relief, the LCAC can deliver lifesaving supplies and equipment to otherwise inaccessible sites, and provide medical evacuation, utilizing the LCAC’s speed to ensure rapid response and timely extraction.

Government-Furnished Equipment (GFE) GFE will not be provided to the Contractor. For this effort, the Government will provide limited scheduled access to existing training devices and operational LCAC on a not-to-interfere with training basis. The training devices are:

a. Device 20G8-F – Electronic classroom with Instructor workstations, student stations, and networks, located at EWTGPAC and EWTGLANT.

b. Device 20G9 - Virtual Environment Landing Craft Air Cushion (VELCAC), located at EWTGPAC, EWTGLANT, Assault Craft Unit 4, Little Creek, VA (ACU-4), and Assault Craft Unit 5, Camp Pendleton, CA (ACU-5)

c. Device 20G6 – Full Mission Trainer (FMT), located at EWTGPAC, EWTGLANT, Assault Craft Unit 4, Little Creek, VA (ACU-4), and Assault Craft Unit 5, Camp Pendleton, CA (ACU-5) Technical Point of Contact (TPOC) A Government Technical Point of Contact (TPOC), who is an expert in Instructional Systems Design (ISD), will be the technical lead supporting the Government Contracting Officer and Project Manager (PJM). The PJM makes performance, cost, and schedule decisions based on technical input from the TPOC. The SMEs from the LCAC training community will assist the TPOC with content reviews.

Approval Authority Overall coordination, final approval, and authority for this project are the responsibility of the NAWCTSD. The LCAC training community is an integral part of the review process to ensure that quality training materials are produced and delivered IAW the defined requirements. The Contracting Officer is the administrative point of contact at NAWCTSD for all official correspondence and information concerning this contract. Final acceptance or rejection of all deliverables and tasks performed by the Contractor is the responsibility of the NAWCTSD Contracting Officer.

APPLICABLE DOCUMENTS

The following document of the issue listed form a part of this SOW to the extent specified herein. In the event of a conflict between documents referenced herein and the contents of this SOW, the contents of this SOW take first precedence. Nothing in this SOW, however, supersedes applicable laws and regulations, unless a specific exemption has been obtained.

Government Documents Department of the Navy (DoN) Documents Secretary of the Navy (SECNAV) Instructions (SECNAVINST):

(Copies of the SECNAV Instructions are available at http://doni.daps.dla.mil/SECNAV.aspx) NOTE: The most current guidance, policy, standards, specifications, instructions, and style guide apply.

LCAC Technical Documentation

· S9LCA-AA-SLP-A10 – Landing Craft, Air Cushion (LCAC) System Baseline Configuration Four (SBC4)

· S9LCA-AA-SLP-010 – Landing Craft, Air Cushion (LCAC) Service Life Extension Program (SLEP)

· S9LCA-AA-SLP-A20 – Operation and Casualty Procedures (OCP), System Baseline Configuration Four (SBC4)

· S9LCA-AA-SLP-090 – Mission Preparation Checklists (MPC)(Legacy/Navigation Data Integrator Replacement (NDIR))

Other Publications Code of Federal Regulations (CFR)

(The above regulations are available through the U.S. Government Publishing Office (GPO) at http://www.access.gpo.gov/nara/cfr/waisidx_09/5cfr731_09.html)

Federal Acquisition Regulations (FAR)

(FAR Clauses are downloadable from http://farsite.hill.af.mil/vffara.htm.)

Defense Federal Acquisition Regulations Supplement (DFARS)

(DFARS Clauses are downloadable from http://farsite.hill.af.mil/vfdfara.htm.)

National Institute of Standards and Technology (NIST) Special Publications (SP)

(Copies of this document are available from https://csrc.nist.gov/publications/)

White House National Security Decision Directive (NSDD)

(Copies of this document are available from https://catalog.archives.gov/id/6879871)

Committee on National Security Systems (CNSS) Directive (CNSSD)

CNSSD-505

Supply Chain Risk Management (SCRM)

(Copies of this document are available from https://www.cnss.gov/cnss/issuances/Directives.)

REQUIREMENTS

General Requirements The Contractor shall revise LCAC training that is precipitated by changes in the SEAOPS manuals provided with the associated FBRs listed in the Appendices, as well as a course discrepancy tracker maintained by the Naval Air Warfare Center Training Systems Division (NAWCTSD) with input from schoolhouse Subject Matter Experts (SMEs). The Contractor shall update and republish current operations and maintenance curriculum and the affected trainer graphic interfaces. The Contractor shall modify the LCAC Instructor-Led Training (ILT), Computer-Based Training (CBT), Full Mission Trainer (FMT), and Virtual Environment LCAC (VELCAC) to make them compliant with current LCAC SLEP Operation and Casualty Procedures (OCP).

Risk Management The Contractor shall maintain a risk management process to identify and mitigate all program risks. Identification of risk items and associated risk mitigation or avoidance shall require a constant vigilance and active participation at every level of the project by both contractor and government personnel. The Contractor shall identify risks early and shall have the overall responsibility and accountability for risk management, to include both programmatic and technical risks. Risk identification may come from sources such as SOW requirements, design impacts, lessons learned, earlier corrective actions, and action items.

Progress Monitoring and Reporting The Contractor shall monitor the work performed under this contract and shall collect and report all of the information that is necessary for the Government to ensure compliance with the contract requirements and the timely delivery of the required products.

Status Report The Contractor shall document the program status, technical accomplishments, planned activities, program risks and mitigations, planned travel, information needed from the Government, and status of deliverables in the Contractor’s Status Report. The Contractor shall prepare the Status Report IAW with the Contract Data Requirements List (CDRL). (CDRL B001 Status Report) Integrated Program Management Report (IPMR)/Integrated Master Schedule (IMS) The Contractor shall generate, document, manage, and apply an Integrated Master Schedule (IMS) that presents the contractor’s plans and schedules to meet the requirements of the contract. The Contractor shall generate and document a tiered scheduling system showing program milestones and prerequisite events, conferences, reviews, data submittals, contract deliverables, and subcontractor schedules. The Contractor shall construct the IMS to monitor the program milestones are met and to verify that deliveries meet the requirements of the contract. Contractor schedule information delivered to the Government or presented at program reviews shall originate from the IMS. The Contractor shall analyze the IMS tasks, compare the IMS tasks to the schedule baseline, report potential or existing problem areas, and recommend corrective actions to eliminate or reduce schedule impact. The Contractor shall use the IMS as a day-to-day execution tool and to periodically assess progress in meeting program requirements. The Contractor shall prepare the Integrated Program Management Report (IPMR)/Integrated Master Schedule (IMS) IAW the CDRL. (CDRL B002 IMS) Government-Furnished Information (GFI) Requirements The applicable Government-Furnished Information (GFI) is listed in Section J of the contract. The Contractor shall request additional information directly through the NAWCTSD Contracting Officer’s TPOC, in writing, 15 working days after receiving the GFI. The Contractor shall, in writing, acknowledge receipt and completeness of all delivered GFI to the NAWCTSD Contracting Officer’s TPOC within 30 days after receipt. All GFI accepted by the Contractor shall come from NAWCTSD Orlando. The Contractor shall return all GFI to NAWCTSD upon completing the contract.

Unlimited Rights Agreement The Contractor shall provide the Government an Unlimited Rights License, per contract terms, for all deliverable technical data, computer software, and computer software documentation. The Unlimited Rights License shall be irrevocable, fully paid up, perpetual, and world-wide. Furthermore, the Contractor shall not use multimedia software packages for production, authoring, or presentation to produce, modify, view, or execute the content; whether in progress or final, if such software requires the Government to pay a royalty after delivery. Royalties after delivery includes running or recurring royalties, special license fees, run-time fees, user fees, or other similar additional payments to any organization including the Contractor, third-party providers, and providers of commercial computer software. All third-party licenses procured shall be irrevocable, fully paid-up, perpetual, and world-wide, and shall be authorized by the Contracting Officer. The required source files (unlocked or fully layered and with the creation software identified) that are necessary for lifecycle management of the assets and all other data used or needed to produce, display, deliver, or manage the final and approved content shall be provided to the Government.

Licensing and Ownership Rights All technical data and computer software, including source files, two-dimensional (2-D) and three-dimensional (3-D) imagery, 3-D models and wire-frames, video, audio, animations, physics models, design documentation, other support documentation and content, produced by the Contractor are contemplated to be produced with Government funding and not private funding. Therefore, the Contractor shall provide the Government an Unlimited Rights License for all such technical data and computer software, and shall not be sold commercially. If the Contractor is involved in future efforts with the Government, pursuant to the Government’s Unlimited Rights as provided for under this contract, the Contractor shall warrant that the Government will not be charged again for the technical data and computer software produced under this contract when provided to, or expected to be used by, or for the use by all other U.S. Government agencies, organizations, or commands. The Contractor’s stated warrant shall also include all changes, derivative works, and integrated products created through a non-segregable interface to the technical data or computer software. All data shall be loaded into the repository on Government-provided storage media and delivered IAW the contract terms.

Software Applications, Databases, Web Sites, and Portals SECNAVINST 5000.36A requires that all DoN Information Technology (IT) applications, databases, tools, websites, and portals be registered and approved through the DoN Application Database Management System (DADMS). The Contractor shall confirm that all software and tools used to produce, implement, evaluate and manage the products produced under this contract adhere to the requirements of SECNAVINST 5000.36A and are DADMS approved. Contractor web sites shall not include classified material, “For Official Use Only” (FOUO) information, proprietary information, or information that could enable the user or viewer to infer this type of information.

Security The Interactive Multimedia Instruction (IMI) learning content effort and its resulting courseware has a security classification of Unclassified FOUO. The security requirements specified herein shall apply to the Contractor and subcontractors. The Contractor shall comply with applicable on-site security regulations related to government installation and facility access. The Contractor shall adhere to all local security procedures required by the end-user, and the security procedures when on government property.

Operations Security (OPSEC) [No OPSEC Plan Deliverable] The Contractor shall develop, implement, and maintain an OPSEC program to protect controlled unclassified and classified activities, information, equipment, and material used or developed by the Contractor and subcontractors throughout the contract. Guidelines for applying the Risk Management Framework (RMF) to federal information systems to include conducting the activities of security categorization, security control selection and implementation, security control assessment, information system authorization, and security control monitoring are provided in National Institute of Standards and Technology (NIST) Special Publication (SP) NIST SP 800-37. This program may include Cybersecurity and Communications Security (COMSEC). The OPSEC program shall be IAW National Security Decision Directive (NSDD) NSDD 298. If the Contractor does not have an established OPSEC Plan that addresses the protection of classified information, critical information, sensitive, proprietary, or Controlled Unclassified Information (CUI), the Government will provide a template for the Contractor’s internal development of an OPSEC Plan. Additional OPSEC program planning guidance can be found in DI-MGMT-80934C, Operations Security (OPSEC) Plan and Naval Air Systems Command (NAVAIR) Operations Security (OPSEC) Requirements. The OPSEC program, at a minimum, shall include:

a. Assignment of responsibility for OPSEC direction and implementation.

b. Issuance of procedures and planning guidance for the use of OPSEC techniques to identify vulnerabilities and apply applicable countermeasures.

c. Establishment of OPSEC education and awareness training to include basic OPSEC training, produced by the Interagency OPSEC Support Staff (IOSS). More information can be found at the National Security Agency (NSA) website at https://www.nsa.gov/what-we-do/cybersecurity/ and https://apps.nsa.gov/iaarchive/help/site/index.cfm.

d. Provisions for management, annual review, and evaluation of OPSEC programs.

e. Flow down OPSEC requirements to subcontractors.

Access to DoD Installations, Government Information, and Information Technology (IT) Systems - Personnel Security Background Checks

a. The Common Access Card (CAC) shall be the principal identity credential for supporting interoperable access to DoD installations, facilities, buildings, controlled spaces, and access to U.S. Government information systems IAW FAR 52.204-9. The Contractor shall coordinate with the appropriate NAWCTSD TPOC, Contracting Officer Representative (COR), government sponsor, and NAWCTSD Security Office Trusted Agents for issuance of the CAC via the Trusted Associate Sponsorship System (TASS) Program. More information for obtaining the CAC can be found at http://www.cac.mil/common-access-card/getting-your-cac/for-contractors/.

b. Contractor personnel whom do not have a security clearance, but require a CAC in performance of their sensitive duties (including access to CUI, but not access classified information), shall coordinate with the NAWCTSD Security Office to complete a National Agency Check with Local Agency Checks including Credit Check (NACLC/TIER-3) background investigation, which includes submission of fingerprints and the Standard Form SF-86 (Questionnaire for National Security Positions). The Contractor shall submit the SF-86 to the NAWCTSD Security Office for processing. There shall be no additional NACLC/TIER-3 submissions for contractors holding a valid national security clearance. The Government may issue the credential upon favorable return of the Federal Bureau of Investigation (FBI) fingerprint check, pending final favorable completion of the NACLC/TIER-3.

c. Access to restricted areas, CUI, or U.S. Government IT by Contractor personnel shall be limited to those individuals who have been determined trustworthy as a result of the favorable completion of a NACLC/TIER-3 or who are under the escort of appropriately cleared personnel. Where escorting such persons is not feasible, a NACLC/TIER-3 shall be conducted and favorably reviewed by the appropriate DoD component, agency, or activity prior to permitting such access.

d. The Contractor shall comply with the cybersecurity and personnel security requirements for accessing U.S. Government IT systems specified in the contract. The Contractor shall review and become familiar with the credentialing standards presented in Office of Personnel Management (OPM) Memorandum for Issuing Personal Identity Verification Cards (PIV) to use as an aid in their employee selection process. The NAWCTSD Security Office will apply the credentialing standards and execute the credentialing process for individual contractors.

Government-Issued Personal Identification Credentials The Contractor and subcontractor(s) (when applicable) shall account for all forms of U.S Government-provided identification credentials (CAC or U.S. Government-issued identification badges) issued to the Contractor (or their employees in connection with performance) under the contract. The Contractor shall return such identification credentials to the issuing agency at the earliest of the circumstances listed below, unless otherwise determined by the U.S. Government. The contracting officer may delay final payment under the contract if the Contractor or subcontractor fails to comply with these requirements.

a. When no longer needed for contract performance.

b. Upon completion of the Contractor employee’s employment.

c. Upon contract completion or termination.

Personnel Security – Background Checks Contractor personnel shall undergo the company internal vetting process prior to gaining access to U.S. Government CUI. To comply with immigration law, the Contractor shall use the Employment Eligibility Verification Program (E-Verify) IAW FAR 52.222-54.

Personnel Security – Reporting of Adverse or Derogatory Information Related to Contractors The Contractor shall report to the NAWCTSD Security Office adverse or derogatory information pertaining to on-site Contractor personnel (when applicable) or Contractor personnel in direct support of this contract. Information reported to the government contracting agency shall be integrated and reported in the Contractor Performance Assessment Reporting System (CPARS) on the PERsonnel SECurity (PERSEC) related aspects of the Contractor’s performance:

a. Adverse or derogatory information reporting of Contractor personnel. Example: domestic violence arrest, or other violent or sexual crime arrest or self-report.

b. When Contractor personnel receive a revocation of an Interim or denial for the issuance of a CAC until final adjudication.

c. When a denial or suspension of clearance occurs for a Contractor employee.

d. When a Contractor employee receives a final denial of eligibility for a security clearance.

Contractor “Out-Processing” Policy The Contractor and subcontractor(s) (when applicable) shall have in place (established and enforced) an “out-processing” policy for employees that leave the company, including suspension of account access, return of all computers, laptops, smartphones, and other electronic devices (Government-furnished IT equipment and Contractor-issued IT equipment) that contain U.S. Government CUI. The Contractor shall also ensure that out-processed employees receive debriefings on the need to maintain confidentiality of U.S. Government CUI.

International Traffic and Arms Regulation (ITAR) The Contractor shall ensure that foreign persons, as defined under section 120.16 of the International Traffic in Arms Regulation (ITAR) (22 CFR, Parts 120 - 130), are not given access to U.S. Government CUI, sensitive information, defense articles, defense services, or technical data, as defined in the ITAR, Part 120, without proper issuance of an export license from the U.S. Government authority.

Unclassified Contractor-Owned Network Security - Safeguarding of Unclassified Controlled Technical Information The safeguarding of Controlled Unclassified Technical Information applies to prime contractors and their subcontractors (if applicable) for information resident on or transiting through Contractor unclassified information systems. The Contractor shall provide security to safeguard unclassified controlled technical information on their unclassified information systems from unauthorized access and disclosure. The Contractor shall take all means (defense-in-depth measures) necessary to protect the confidentiality, integrity, and availability of U.S. Government CUI.

a. The Contractor shall manage and maintain contractor-owned unclassified Information Technology (IT) network assets used to process U.S. Government CUI (sensitive information) IAW DFARS 252.204-7012,

1. The security requirements in NIST SP 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations,” https://csrc.nist.gov/publications/sp800 that is in effect at the time the solicitation is issued or as authorized by the Contracting Officer. The Contractor shall notify the DoD Chief Information Officer (CIO), via e-mail at osd.dibcsia@mail.mil, within 30 days of contract award, of all security requirements specified by NIST SP 800-171 that are not implemented at the time of contract award; or

2. Alternative but equally effective security measures used to compensate for the inability to satisfy a particular requirement and achieve equivalent protection accepted in writing by an authorized representative of the DoD CIO; and

b. Apply other information systems security measures when the Contractor reasonably determines that information systems security measures, in addition to those identified in paragraph (b)(1) of DFARS 252.204-7012, may be required to provide adequate security in a dynamic environment based on an assessed risk or vulnerability.

Information Security Requirements for Protection of Unclassified DoD Information on Non-DoD Systems The Contractor shall safeguard unclassified DoD information stored on non-DoD information systems to prevent the loss, misuse, and unauthorized access to or modification of this information. The Contractor shall:

a. Not process DoD information on public computers (e.g., those available for use by the general public in kiosks or hotel business centers) or computers that do not have access control.

b. Protect information by no less than one physical or electronic barrier (e.g., locked container or room, login and password) when not under direct individual control.

c. Sanitize media (e.g., overwrite) before external release or disposal.

d. Encrypt the information that has been identified as CUI when it is stored on mobile computing devices such as laptops and personal digital assistants, or removable storage media such as compact disks, using the best available encryption technology.

e. Limit information transfer to subcontractors or teaming partners with a need to know and a commitment to at least the same level of protection.

f. Transmit e-mail, text messages, and similar communications using technology and processes that provide the best level of privacy available, given facilities, conditions, and environment. Examples of recommended technologies or processes include closed networks, virtual private networks, public key-enabled encryption, and Transport Layer Security (TLS).

g. Encrypt organizational wireless connections and use encrypted wireless connection, where available, when traveling. When encrypted wireless is not available, encrypt application files (e.g., spreadsheet and word processing files), using no less than application-provided password protection level encryption.

h. Transmit voice and fax transmissions only when there is a reasonable assurance that access is limited to authorized recipients.

i. Not post DoD information to Web site pages that are publicly available or have access limited only by domain or Internet protocol restriction. Such information may be posted to Web site pages that control access by user identification or password, user certificates, or other technical means and provide protection via use of TLS or other equivalent technologies. Access control may be provided by the intranet (vice the Web site itself or the application it hosts).

j. Provide protection against computer network intrusions and data exfiltration, including no less than the following:

1. Current and regularly updated malware protection services, e.g., anti-virus, anti-spyware.

2. Monitoring and control of inbound and outbound network traffic (e.g., at the external boundary, sub-networks, individual hosts) including blocking unauthorized ingress, egress, and exfiltration through technologies such as firewalls and router policies, intrusion prevention or detection services, and host-based security services.

3. Prompt application of security-relevant software patches, service packs, and hot fixes.

k. Comply with other current Federal and DoD information protection and reporting requirements for specified categories of information (e.g., critical program information, Personally Identifiable Information (PII), export controlled information) IAW the requirements of the contract.

Cyber Incident and Compromise Reporting The Contractor shall report to DoD certain cyber incidents that affect unclassified controlled technical information resident on or transiting Contractor unclassified information systems set forth IAW DFARS 252.204-7012. The Contractor shall also provide the report to the NAWCTSD Contracting Officer, NAWCTSD Security Manager, and the NAWCTSD Information Systems Security Manager (ISSM).

Supply Chain Risk Management (SCRM) for National Security Systems The Contractor shall mitigate supply chain risk in the provision of supplies and services to the Government per FAR 252.239-7018, Supply Chain Risk, and Committee on National Security Systems (CNSS) Directive CNSSD-505, Supply Chain Risk Management (SCRM). The Contractor shall, implement a process for managing supply chain risk by identifying susceptibilities, vulnerabilities, and threats throughout the supply chain and devise mitigation strategies to combat those threats whether presented by the supplier, the supplied product and its subcomponents, or the supply chain (e.g., initial production, packaging, handling, storage, transport, mission operation, and disposal).

Branding The Contractor shall not brand content created for this effort with their logo or corporate name.

Government Subject Matter Experts (SME) When necessary, Government Subject Matter Experts (SME) will be made available to the Contractor for consultation from the award of this contract until the completion of the Contractor’s effort. The Contractor shall coordinate all requests for Government SME participation with the NAWCTSD Program Manager. A lead SME will coordinate all SME activities related to their technical area. The Contractor shall contact the SMEs via e-mail and telephone. The Contractor shall copy the NAWCTSD Program Manager and the TPOC on all e-mails sent to the SMEs. The Government’s SMEs will provide information via e-mail, phone or by video-teleconference (VTC), whenever practical. The Contractor shall coordinate all face-to-face SME support with NAWCTSD Program Manager and inform the Government if travel is required.

Change Management The Contractor shall define, document, manage, and apply a process to accomplish change management. The Contractor shall use Engineering Change Proposals (ECPs) to request changes to an approved baseline. (CDRL A001 ECP) Engineering Changes When directed by the Procuring Contracting Officer (PCO), the Contractor shall generate an ECP to request a design change to the approved baseline of the training system.

Engineering Change Proposals (ECP) The Contractor shall prepare the Engineering Change Proposal (ECP) IAW the CDRL. (CDRL A001 ECP) Detailed Requirements The Contractor shall:

a. Revise the CBT lessons, and update VELCAC and FMT hardware and software impacted and outlined in Appendix A of the 2020 Annual SEAOPS Training Impact Analysis Report and provided in Appendix C of this document.

b. Update training to add eight Loss of Navigation (Nav) casualties summarized in Appendix B of this document and provided in the Course Discrepancy Tracker embedded in Appendix D of this document.

c. Revise three Craft Control CBTs summarized in Appendix B of this document and provided in the Course Discrepancy Tracker embedded in Appendix D of this document.

d. Update training to add or revise six additional Out-of-Scope Craft Control CBTs summarized in Appendix B of this document and provided in the Course Discrepancy Tracker embedded in Appendix D of this document.

e. Update training to add or revise the Mechanical Maintenance discrepancies summarized in Appendix B of this document and provided in the Course Discrepancy Tracker embedded in Appendix D of this document, that includes creating one ILT lesson with the Mechanical Maintenance discrepancies. The C2M2 will revise Student Guides, Instructor Guides, Job Sheets, Exercise Controller Guides, and Test/Assessment items unless otherwise specified.

Operating System The Contractor shall confirm that the modified lessons run on the current configuration of Training Device 20G8-F.

Course Manager The Contractor shall confirm that the modified CBTs are operational and fully functional with the Computer-Managed Instruction (CMI) Shell software (i.e., “Instructor Operator Station (IOS)”).

Course Design Post-Award Conference (PAC) The Contractor shall participate in a Post-Award Conference (PAC) to be conducted after contract award. The specific meeting date shall be coordinated between the Contractor and the Government. The PAC will be held at NAWCTSD, Orlando, Florida or the Contractor’s facility and will be one day in length. This conference will be used to communicate the roles and responsibilities of team members, present the planned approach to all members, and discuss the design approach. During the PAC:

a. The Contractor shall orally present its proposed approach for the content production.

b. The Contractor shall be prepared to discuss its proposed approach with the entire Government team.

c. The Government team will formalize the review and acceptance process for contractor-produced products.

d. The Government will provide available GFI to assist the Contractor with meeting the required schedule.

Conference Documentation The Contractor shall prepare and provide documentation in preparation for and subsequent to the PAC and other events identified herein.

Conference Agenda Prior to an event, the Contractor shall prepare and provide a Conference Agenda to all participants IAW the CDRL. (CDRL B003 Agenda) Presentation Materials The Contractor shall prepare and provide event Presentation Materials IAW the CDRL. (CDRL B004 Presentation Material) Conference Minutes The Contractor shall document the proceedings of an event in the Conference Minutes IAW the CDRL. (CDRL B005 Minutes) Preliminary Integrated Courseware Reviews (PICR) The Contractor shall attend and participate in the PICRs. The estimated length of these meetings is a maximum of three working days and shall be held at a location mutually agreeable to the Contractor and the Government. The purpose of the PICR is for the Government to perform a complete inspection of the courseware and its integration into the existing software using the applicable documentation. During the PICR, the Government will verify both the technical content and performance of the courseware. During the conduct of the PICR, the Contractor shall make available all Government-accepted design information. The Contractor shall correct the documented discrepancies prior to the beginning of the Course Installation and Verification. The Contractor shall document the results of the PICR, including all identified discrepancies, in the PICR Report. The Contractor shall consolidate the results of one or more PICRs, when applicable, into a single report. The Contractor shall prepare the Training Evaluation Document (PICR Report) IAW the CDRL. (CDRL F001 PICR) In-Progress Reviews (IPRs) The Contractor shall:

a. Conduct program IPRs monthly to provide the Government with updated status and information regarding completed and remaining planned activities of the program.

b. Present the following topics at the program IPRs:

1. Status of the overall program, including the IMS, design, testing, and production.

2. Review of major events since the last program IPR.

3. Review of software status to include progress to date, testing, and issues.

4. Review of CDRLs to include delivery, review, and acceptance dates.

5. Review of contract awards, invoice status, and cost data.

6. Review of program risks, mitigation status, and problems (and solutions) identified since the last program IPR.

In-Progress Review (IPR) Documentation The Contractor shall prepare a Conference Agenda, Presentation Materials, and Conference Minutes IAW the CDRLs. (CDRLs B003 Agenda, B004 Presentation Material, and B005 Minutes) Courseware Installation and Verification The Contractor shall conduct an in-plant test to confirm, to the maximum extent practicable, the integration of the software and hardware prior to installing the new materials at EWTGPAC and EWTGLANT. The Contractor, along with the Government, will test the courseware after installation to confirm the course runs correctly. The Contractor shall correct the discrepancies identified during this process. The Contractor shall prepare the Training Evaluation Document (Courseware Installation and Verification Report) IAW the CDRL. (CDRL F002 Courseware Installation and Verification Report) Instructional and Support Materials The Contractor shall produce and provide the following instructional and support materials.

Master Curriculum Files The Contractor shall provide all software data and logic data files used to produce the requested curriculum with clearly stated dependency matrices, source codes, commands, compilers, and interface mechanisms required for Government Configuration Management (CM).

Production Support Materials Throughout the period of performance, the Contractor shall produce and maintain the new version of all source and courseware files. The Contractor shall maintain a back-up for all new courseware files until final Government acceptance. The Contractor shall provide all design and production support materials generated for this effort, to include all audio files, still photography, graphic files, 3-D models, physics models, working files, and other storage media used in the design and production process. The Contractor shall organize all materials, text-based and graphic, with digital copies in a manner that facilitates revision by the school house.

Final Delivery Once the curriculum is approved, the Contractor shall compile the Master Curriculum Files and Production Support Materials onto portable storage media procured by the Contractor for delivery to and continued use by the Government. The portable storage media shall contain all source data files including all logic source files, transportability and maintainability data, portability commands, courseware data files, instructional media generation programs and files, and production source materials. The Contractor shall deliver the portable storage media to NAWCTSD Orlando, EWTGPAC, and EWTGLANT In-service Engineers (ISEs). During final acceptance testing, the Government will ensure that the portable storage media works as required and that all source data is loaded. The Contractor shall prepare Instructional Media Package (IMP) (Final Deliverable) and the Training Conduct Support Document (TCSD) IAW the CDRLs. (CDRLs F003 IMP and F004 TCSD).

Appendix A

Acronyms and Abbreviations Acronym/ Abbreviation Meaning