GSC-QF0B-15-32959_RFP_Amendment_06.pdf

GSC-QF0B-15-32959

Amendment 06

REQUEST FOR PROPOSAL (RFP)

GSC-QF0B-15-32959

USCYBERCOM Support Contract in support of:

United States Cyber Command

(USCYBERCOM)

Issued to:

All Contractors performing work under NAICS code 541511

Conducted under FAR Part 15

Issued by:

The Federal Systems Integration and Management Center (FEDSIM)

1800 F Street, NW

Suite 3100 (QF0B)

Washington, D.C. 20405

September 15, 2015

FEDSIM Project Number AF00753

SECTION B – SUPPLIES OR SERVICES AND PRICES/COSTS

GSC-QF0B-15-32959 PAGE B-1

B.1 GENERAL

This acquisition is being conducted under Federal Acquisition Regulation (FAR) Part 15 to establish a Multiple Award, Indefinite Delivery, Indefinite Quantity (MA-IDIQ) contract for the

United States Cyber Command (USCYBERCOM). The contractor shall provide all management, supervision, labor, facilities, and materials necessary to perform on a Task Order

(TO) basis. Hereafter, the USCYBERCOM IDIQ will be referred to as the Basic Contract while

TOs issued under the Basic Contract will be referred to as individual TOs. The TOs shall be performed in accordance with (IAW) all sections of the Basic Contract.

An acronym listing to support the Basic Contract is included in Section J (Attachment L).

B.1.1 CONTRACT TYPES

The USCYBERCOM Basic Contract is an MA-IDIQ contract for services based requirements in support of USCYBERCOM, and is available for use by the Cyber Mission Force (CMF), Service

Cyber components, and Joint Force Headquarters (JFHQs).

The Basic Contract allows for all contract types at the TO level (e.g., Cost-Reimbursement (all types), Fixed-Price (all types), Time-and-Materials (T&M), and Labor-Hour (LH)). TOs may also combine more than one contract type (e.g., Firm-Fixed-Price (FFP)/Cost, FFP/LH etc.).

Additionally, TOs may include incentives, performance-based measures, multi-year or option periods, and commercial or non-commercial items.

B.1.2 MINIMUM GUARANTEE AND MAXIMUM CEILING

The guaranteed minimum for each awarded Basic contract is $2,500. The maximum dollar ceiling for each individual TO placed under the Basic Contract is $300,000,000. There is no limit to the number of TOs that may be placed under this Basic Contract. The maximum dollar ceiling for this Basic Contract is $460,000,000.

B.2 PRICES/COSTS

The Contractor shall furnish all personnel, material, services, and facilities to perform the requirements set forth in the Basic Contract.

B.2.1 TASK ORDER PRICING

The Basic Contract provides the Ordering Contracting Officer (CO) the flexibility to determine fair and reasonable pricing tailored to the TO requirement dependent upon level of competition, risk, uncertainties, complexity, urgency, and contract type. The Ordering CO has the authority and responsibility for the determination of cost or price reasonableness for each TO’s requirements. Adequate price competition at the TO level, in response to a Task Order Request

(TOR), is the preferred method of establishing fair and reasonable pricing.

The Ordering CO must identify the applicable contract type for all Contract Line Item Numbers

(CLINs) in each individual TO.

GSC-QF0B-15-32959 PAGE B-2

B.2.2 LABOR RATES

B.2.2.1 BURDENED LABOR RATE

The term “burdened labor rate” is defined as the technical, management, and support staff required to complete tasking on a project, along with appropriate load factors, and exclusive of any profit or fee.

B.2.2.2 LOADING FACTORS

The loading factors are those defined in the Contractor’s forward pricing rates, and include such items as overhead, fringe, general and administration (G&A), or any other elements of cost.

B.2.2.3 CEILING RATES

The term “Ceiling Rates” represents the maximum direct labor rates to be proposed and/or billed under this Contract. These ceiling direct labor rates apply to cost-reimbursable orders and proposals for fixed-price orders.

Ceiling rates do not govern T&M and LH TO proposals, as ceiling rates do not include fee/profit. However, ceiling rates will be used in the evaluation of T&M/LH TO proposals.

The ceiling rate should anticipate the maximum technical expertise needed over the life of the contract and is not necessarily bound by current staff.

B.2.2.4 COMPOSITE RATES

The term “composite rate” is defined as the average burdened hourly labor rate experienced by the Contractor for similar scope of work and shall be based on current personnel in labor category descriptions in Section J (Attachment B).

The composite rate is the average rate based on current staff and similar tasking.

B.2.2.5 SUBCONTRACTOR RATES

Subcontractor rates will be negotiated separately as TO awards require.

B.2.3 CONTRACT TYPES

B.2.3.1 FIXED-PRICE TASK ORDERS

Fixed price is defined under Federal Acquisition Regulation (FAR) Subpart 16.2, Fixed-Price

Contracts.

B.2.3.2 COST-REIMBURSEMENT TASK ORDERS

Cost Reimbursement is defined under FAR Subpart 16.3, Cost-Reimbursement Contracts. FAR

Part 30, Cost Accounting Standards Administration and FAR Part 31, Contract Cost Principles and Procedures, may apply to cost-reimbursement TOs.

The contractor shall have and maintain an acceptable accounting system that will permit timely development of all necessary cost data in the form required by the proposed contract type.

GSC-QF0B-15-32959 PAGE B-3

The contractor may be required to submit a cost proposal with supporting information for each cost element, including, but not limited to, direct labor, fringe benefits, overhead, general and administrative (G&A) expenses, facilities capital cost of money, other direct costs, and fee consistent with its cost accounting system, provisional billing rates, forward pricing rate agreements, and/or Cost Accounting Standards (CAS).

Cost Reimbursement TOs shall only be used for the acquisition of non-commercial items.

B.2.3.3 INCENTIVE TASK ORDERS

Incentives are defined under FAR Subpart 16.4, Incentive Contracts.

B.2.3. TIME AND MATERIALS (T&M) AND LABOR HOUR (LH) TASK ORDERS

T&M and LH are defined under FAR Subpart 16.6, T&M and LH Contracts.

The contractor may provide separate and/or blended loaded hourly labor rates for prime contractor labor, each subcontractor, and/or each Division, Subsidiary, or Affiliate in accordance with the provisions set forth in FAR 52.216-29, Defense Federal Acquisition Regulation

Supplements (DFARs) 252.216-7002, FAR 52.216-30, or FAR 52.216-31 at the TO level. The

CO must identify which provision is applicable in the TO solicitation, and the contractor must comply with the provision.

T&M and LH TOs require the USCYBERCOM standardized labor categories and their associated rates to be identified in the TO proposal and award document.

Ancillary subcontract labor shall be proposed and awarded as Materials in accordance with FAR

52.232-7, Payments under Time-and-Materials and Labor-Hour Contracts.

B.3 BASIC CONTRACT ESTABLISHED SCHEDULE RATES

The Basic Contract includes the standard set of labor categories in Section J (Attachment B).

The contractor’s rates included in the Basic Contract Excel Cost Workbook in Section J

(Attachment N) are hereby incorporated and made a material part of this contract

Basic Contract labor rates shall be established as “composite and ceiling rates” as defined within

Sections B.2.2.3 and B.2.2.4. The ceiling rates contain the fully burdened hourly rates for work performed at any location within the US including Alaska and Hawaii excluding profit/fee.

The ceiling rates proposed are the maximum rates that will be invoiced at the TO level when billing against the Basic Contract labor categories when being invoiced by the prime in accordance with Section G.

Profit and Fee will be negotiated at the individual TO level.

B.4 INDIRECT RATES

Indirect rates include, but may not be limited to, indirect material handling rates, overhead rates, and G&A rates.

B.5 LONG DISTANCE TRAVEL

Long Distance Travel required in the performance of TOs issued under this contract shall be reimbursed at actual cost in accordance with the limitations set forth in FAR 31.205-

GSC-QF0B-15-32959 PAGE B-4

46. Profit/fee shall not be applied to travel costs. Unless otherwise directed by TO terms and conditions, the contractor may apply indirect costs to long distance travel consistent with the contractor’s approved accounting practices.

Local travel will not be reimbursed under TOs issued against the contract.

The Ordering CO must identify a not-to-exceed (NTE) long distance travel ceiling under a separate CLIN on the TO.

B.6 TOOLS AND ODCS

Tools and ODCs acquired under this contract will be on a cost-reimbursable basis. Unless otherwise directed by individual TO terms and conditions, the contractor may apply indirect costs and fee to Tools and ODCs consistent with the contractor’s approved accounting practices.

B.7 SUBCONTRACTING

Subcontractor rates will be negotiated separately as TO awards require.

For non-commercial items, subcontracting shall follow the procedures set forth in FAR Part 44, Subcontracting Policies and Procedures. For commercial items, subcontracting shall follow the procedures set forth in FAR Part 12, Acquisition of Commercial Items.

SECTION C – DESCRIPTION OF WORK

GSC-QF0B-15-32959 PAGE C-1

Amendment 06

C.1 BACKGROUND

On June 23, 2009, the Secretary of Defense directed the Commander of US Strategic Command

(USSTRATCOM) to establish a sub-unified command, USCYBERCOM. The newly established

USCYBERCOM developed a mission to plan, coordinate, integrate, synchronize, and conduct activities to: direct the operations and defense of specified Department of Defense (DoD) information networks (DODIN) and prepare to, and when directed, conduct full spectrum military Cyberspace Operations in order to enable actions in all domains.

USCYBERCOM is charged with accomplishing the following:

a. Unifying existing cyberspace resources, creating synergy that does not currently exist, and synchronizing war-fighting effects to defend the information security environment

b. Centralizing command of cyberspace operations in order to strengthen DoD cyberspace capabilities and integrate and bolster the DoD’s cyber expertise

c. Improving the DoD’s capabilities to ensure resilient, reliable information and communication networks, counter cyberspace threats, and assure access to cyberspace

d. Supporting the Armed Services’ ability to confidently conduct high-tempo, effective operations, as well as, protect command and control systems and the cyberspace infrastructure supporting weapons system platforms from disruptions, intrusions and attacks.

USCYBERCOM accomplishes this by organizing supporting forces to achieve unity of effort across three lines of effort: protect and defend US cyberspace interests, project power in and through cyberspace, and partner with interagency and partner nations. Each line of effort is applied to three mission objectives: deter or defeat strategic threats to U.S. interests and infrastructure, ensure DoD mission assurance, and achieve Joint Force Commander objectives.

C.1.1 USCYBERCOM MISSION

USCYBERCOM conducts and synchronizes activities to: secure, operate, and defend the

DODIN; attain freedom of action in cyberspace while denying same to adversaries; and, when directed, conduct full spectrum cyberspace operations in order to deter or defeat strategic threats to U.S. interests and infrastructure, ensure DoD mission assurance, and achieve Joint Force

Commander objectives.

C.1.2 CURRENT ENVIRONMENT

Background information relating to each of the task areas below is detailed in Section J, Attachment Q.

“The 2015 DoD Cyber Strategy” provides additional background information related to the current strategic goals and objectives of USCYBERCOM.

C.1.3 JOINT DIRECTORATES

USCYBERCOM is comprised of 10 J-Directorates; their functions are as follows:

J0 - Chief of Staff: Provides enterprise-level staff leadership, strategic communications coordination, logistics requirements, Command information, business management, support, and enabling functions.

GSC-QF0B-15-32959 PAGE C-2

Amendment 06

J1 - Manpower & Personnel: Leads the Command in creating an integrated, agile, responsive, and ready cyber workforce capable of conducting full spectrum Cyberspace Operations.

J2 - Intelligence: Provides decision-quality, timely all-source intelligence which informs and enables USCYBERCOM across the full spectrum of military Cyberspace Operations.

J3 - Operations: Plans, coordinates, integrates, synchronizes, and conducts activities directing the operation and defense of the DODIN and, when directed, conducts full spectrum military

Cyberspace Operations in order to enable actions in all domains, ensure U.S./Allied freedom of action in cyberspace, and deny the same to our adversaries.

J4 - Logistics: Provides integrated logistics capabilities enabling USCYBERCOM and components to achieve desired global effects.

J5 - Plans and Policy: Responsible for cyberspace strategies, policies, doctrine, deliberate plans, assessments, and partnerships.

J6 - Command and Control (C4) Systems and Information Technology (IT): Provides premier C4 and IT capabilities for USCYBERCOM to conduct full spectrum military

Cyberspace Operations.

J7 - Joint Exercises and Training: Develops and prepares world-class fully capable cyber forces for the present and future, ready to conduct military operations, build partner capacity, and promote engagement through doctrine, education, training, exercises, simulation, wargames, and readiness.

J8 - Capability and Resource Integration: Guides the Planning, Programming, Budgeting, and

Execution (PPBE) process in acquiring resources to satisfy mission requirements. Provides procurement and financial management services for effective expenditure of funding. Conducts analyses and assessments to ensure investments are balanced to achieve maximum benefit.

J9 - Advanced Concepts and Technology: Drives delivery of Tactics, Techniques, and

Procedures (TTPs) and corresponding material capability solutions designed to meet

USCYBERCOM and Combatant Command (CCMD) cyberspace requirements across full spectrum Cyberspace Operations.

C.2 SCOPE

The scope of this contract includes services and associated tools needed to support

USCYBERCOM’s mission. It is a broad scope of cyberspace support services including new and emerging technologies which will evolve over the life of the contract.

The scope of these requirements includes capabilities, knowledge, and expertise in the full range of technologies, Cyberspace Operations, joint operation planning, training and exercises, and business areas needed to support USCYBERCOM’s operational mission, which extends throughout the CMF, Service Cyber Components, and JFHQs. In addition, the scope includes all-source intelligence, research and development, test, and evaluation services.

These services may be required throughout the United States, its territories and possessions and in foreign countries.

GSC-QF0B-15-32959 PAGE C-3

Amendment 06

C.3 OBJECTIVE

The objective of this requirement is an IDIQ contract dedicated to providing mission support services to USCYBERCOM, CMF, Service Cyber Components, and JFHQs. These required core disciplines include the following:

a. Business Area Support and Project Management

b. Cyberspace Operations

c. Cyberspace Planning

d. All-Source Intelligence

e. Capability Management and Development

f. Cyberspace Training and Exercises

g. Information Technology (IT)/Communications (COMMS)

h. Strategy/Policy/Doctrine Development and Campaign Assessments

i. Engagement Activities

j. Security

C.4 CORE DISCIPLINES

The following describes the services required for each core discipline. The specific support requirements will be the subject of fully defined TOs that will be executed and administered in accordance with the terms and conditions defined in the Basic Contract and TO. The evolving responsibilities of USCYBERCOM may require additional support for responding to cyber events that are not known at this time. High quality products and services delivered in a timely and cost-effective manner will be the primary criteria for the work performed under the Basic

Contract. The specific application of these criteria will be supplied with the individual TOs. All core disciplines within the scope of this Basic Contract and at the individual TO level require coordination and collaboration with other contractors in order to be performed effectively.

Particularly in the case of responding to a specific threat, all personnel involved, including contractors, will be integrated to produce results quickly. Quick response times required to counter threats are unique to the domain of warfare and require tightly coupled integration for mission success. The following core disciplines are vital to enabling USCYBERCOM mission success.

C.4.1 CORE DISCIPLINE 1 – BUSINESS AREA SUPPORT AND PROJECT

MANAGEMENT SUPPORT

The business area support core discipline is defined as support to enable an efficient and effective work environment within and across all Directorates, including Government, military, and contractor personnel, and with JFHQs subordinate headquarters, Service Cyber Components, CCMD, components and agencies with cyber-related missions.

C.4.1.1 SUB CORE DISCIPLINE 1 – ADMINISTRATIVE SUPPORT

Administrative Support includes general office support; coordination between organizations for day-to-day operations; scheduling and coordinating meetings, visits, conferences, and events;

GSC-QF0B-15-32959 PAGE C-4

Amendment 06 preparing, processing, and tracking correspondence; preparing meeting minutes and meeting notes; preparing briefings; conducting data collection and reporting; conducting workflow/project tracking; and tracking action items. The Government also requires support for providing specialized administrative support in offices throughout USCYBERCOM such as the

Command Section, Public Affairs Office, Records Management Office, Publications

Management Office, Knowledge Management Office, and the History Office.

Administrative Support also includes providing support to cyber exercise planning conferences including Joint Worldwide Planning Conference, Joint Event Life Cycle (JELC) planning conferences (Concept Development Conference, Initial Planning Conference, Main Planning

Conference, Final Planning Conferences), and Master Scenario Events List (MSEL)

Development Conference. Conference design, facilitation, and analysis also fall under this core discipline.

This sub core discipline includes support providing routine administrative and clerical assistance, such as receiving/screening telephone calls and visitors. For example, support includes, but is not limited to, the following:

a. Responding to routine, non-technical requests for information; scheduling appointments;

making arrangements for conferences, meetings, and presentations, including location, schedule, and agenda; and coordinating all other arrangements with staff/participants

b. Providing specialized Administrative Support to USCYBERCOM Joint Directorates, organizations and special staff offices such as the Legislative Affairs Office, Public

Affairs Office, Command Secretariat, Command Engagements/Visits, Inspector General, and the Commander’s Action Group

c. Assisting with office procedures, Command protocol, correspondence, messages, reports, forms, filing, mail, training, travel security, personnel procedures, and preparation for office moves

d. Composing routine/non-technical correspondence and preparing reports, and making content contributions and corrections to internal Command administrative/clerical correspondence or other appropriate subjects

e. Providing support to initiate travel arrangements, complete travel orders, and prepare vouchers for Command leadership

f. Preparing PowerPoint presentations in support of management briefings

Supporting this core discipline may require contractors to work within Government-provided software packages with emphasis on the Defense Travel System, Microsoft Word, Microsoft

Excel, Microsoft PowerPoint, and Microsoft SharePoint 2010, 2013, and later upgrades or additional software based upon the requirements in individual TOs.

Support for this core discipline also includes providing administrative and clerical expertise to support the achievement of operations and research objectives, information analysis, exercise and training development, and implementation of training objectives. For example, support includes maintaining Microsoft SharePoint and shared file locations for knowledge management of documentation and office-related information. This core discipline also includes providing administrative support for exercise and training design, planning, preparation, execution, GSC-QF0B-15-32959 PAGE C-5

Amendment 06 analysis, evaluation, and reporting; Joint Training Plans and After-Actions Programs development; and individual, team, and collective mission area training.

Administrative Support services may also include providing administrative coordination activities for obtaining spaces to accommodate meetings, working groups, events, conferences, conference support, materials required to support such events, and the IT and audio/visual/video teleconferencing (VTC) services and equipment that may be needed at the unclassified, secret, and top secret (TS) levels.

C.4.1.2 SUB CORE DISCIPLINE 2 – KNOWLEDGE MANAGEMENT

Knowledge Management support services include providing technical expertise to support

USCYBERCOM Directorates and the Chief Knowledge Officer (CKO) to formulate and implement Knowledge Management strategies, policies, processes and procedures to enable

USCYBERCOM to create, share, and maintain records in accordance with the DoD Knowledge

Management Policy requirements.

DoD Knowledge Management services also include the maintenance and utilization of

Knowledge Management communication and collaboration tools to capture, reuse, and transfer

Command knowledge efficiently and effectively. Knowledge Management support will be required across all network domains. Additional background information is provided in Section J

(Attachment Q).

C.4.1.3 SUB CORE DISCIPLINE 3 – RECORDS MANAGEMENT

The contractor shall provide Records Management support in accordance with the Executive

Office of the President Memorandum M-12-18, Managing Government Records Directive, 24

August 2012, DOD 5015.02-STD, and DOD 5015.2-STD (2007). For example, this support shall include identifying, prioritizing, storing, securing, preserving, retrieving, tracking, and archiving records. Additional background information is provided in Section J, Attachment Q.

Records Management is defined as providing technical expertise to support the formulation of

Records Management strategies and policies to enable USCYBERCOM to create and maintain records in accordance with the DoD Record Management Policy requirements and to document the roles and responsibilities of USCYBERCOM in the conduct of its mission. Furthermore, Records Management includes assisting the Chief of Command Secretariat, Command

Publications Manager, and several directorates within USCYBERCOM with the development and maintenance of a Command Publications Library as appropriate on the three network domains. Support shall include accounting for work product history in conjunction with the record.

C.4.1.4 SUB CORE DISCIPLINE 4 – BUSINESS PROCESS REENGINEERING

Business Process Reengineering is defined as providing Enterprise Business Transformation expertise, including Lean Six Sigma and Process Change Management methodology, to support the CKO in analyzing current USCYBERCOM workflows and processes to identify process inefficiencies and areas of improvement, reduce redundancy, and re-engineer applicable processes to increase efficiency. Additional background information is provided in Section J, Attachment Q. This core discipline includes, but is not limited to, the following services:

http://en.wikipedia.org/wiki/Design_Criteria_Standard_for_Electronic_Records_Management_Software_Applications

GSC-QF0B-15-32959 PAGE C-6

Amendment 06

a. Developing approaches for improving organizational performance and the activities needed to implement new or revised business or functional processes arising from business process reengineering undertakings

b. Identifying the necessary development and/or integration of IT to enable improvements in processes

c. Providing technical expertise to ensure approved solutions to re-engineer processes are implemented and their effectiveness is measured against current processes

d. Revising performance measures in alignment with new business processes

C.4.1.5 SUB CORE DISCIPLINE 5 – LOGISTICS

Logistics support is defined as providing Logistics planning and management expertise for obtaining and managing facility and space requirements, as well as the supply and the planning and executing movements of materials and the transportation required. Logistics includes obtaining offsite facilities as needed for the conduct of crisis action planning, simultaneous planning events, cyber event management, and planning for periods of non-disruption and continuity of operations. Additional background information is provided in Section J, Attachment Q.

The support for this core discipline includes providing management logistical oversight for facility management and asset management. This support includes utilizing existing

Government proprietary systems/protocols for automation purposes of asset management and equipment tracking within Government-owned Sensitive Compartmented Information Facilities

(SCIFs) in the local travel area and within satellite facilities. For example, logistics support includes, but is not limited to, the following:

a. Providing support in management of Government-owned SCIFs in multiple locations

b. Managing the flow of resources between the point of origin, procurement, configuration management, and through disposal, to include purchasing, handling, controlling, and transportation of material and other property

c. Maintaining proper retention of logs, files, and supporting documentation for all movement of materials

d. Communicating and coordinating with all parties involved in materials movements

Support for this core discipline includes assisting the Government in managing the development of upgrades and system improvements, tracking and reporting material, establishing and maintaining material handling procedures, and providing asset management, configuration management, and scheduling. Logistics Support also includes developing and managing power/space/cooling requests, and Baseline Exemption Requests (BERs). The contractor’s

Logistics Support shall adhere to and be provided in accordance with Federal and DoD policy.

C.4.1.6 SUB CORE DISCIPLINE 6– PROJECT ANALYSIS

Project Analysis is defined as providing technical expertise to assist with the following Project

Analysis functions to ensure proper and efficient execution and performance of programs, and that capabilities are successfully developed and acquired to meet USCYBERCOM's requirements. These requirements include, but are not limited to, the following:

GSC-QF0B-15-32959 PAGE C-7

Amendment 06

a. Tracking and analyzing the status of programs fulfilling USCYBERCOM requirements for remaining within scope, within budget, and on schedule, while mitigating risks

b. Maintaining program information and status of ongoing program activities

c. Analyzing and refining initial user needs and assist in defining requirements

d. Analyzing validated and prioritized requirements to manage timelines and risks

e. Assisting with validating and prioritizing requirements

f. Collaborating with teams managing related and dependent requirements to maintain status of collective progress

g. Supporting execution and delivery of capabilities to end-users

h. Providing lifecycle support to close out capability development and implementation

i. Analyzing project risks and developing risk mitigation plans

j. Developing courses of action to fulfill gaps and requirements

k. Conducting analysis of programs, managing deliverables, and preparing graphs, tables, diagrams, and presentations to present analysis conclusions and recommendations

Project Analysis support is also defined as assisting the USCYBERCOM with proper and efficient execution of programs, requirements identification and definition, and course of action development for the integration, management, and sustainment of Offensive Cyberspace

Operations (OCO) and Defensive Cyberspace Operations (DCO) capabilities, and efforts to secure, operate, and defend the DODIN.

Project Analysis support includes, but is not limited to, providing support to prepare, review, and update program documentation and status in support of milestone decisions, leadership, and external reviews. Project Analysis support also includes assisting with organizing and preparing for program meetings and conferences.

Project Analysis support includes preparing white papers, graphs, tables, diagrams, and briefings to present analysis conclusions and recommendations. Support for the Project Analysis core discipline also includes, but is not limited to, the following:

l. Developing methods for tracking program performance and refining project analysis processes, methods, and tools

m. Maintaining program plans and coordinating with the program managers to ensure programs fulfill requirements upon delivery

n. Developing and maintaining program files in accordance with records management processes

C.4.1.7 SUB CORE DISCIPLINE 7 – PROJECT MANAGEMENT

Project Management support is defined as assisting in the management of the project’s scope, schedule, budget, and manage risk to ensure the accomplishment of project goals, as well as providing TO Project Management. Support includes, but is not limited to, developing project documentation, risk management documentation, plans, and project schedules. Project

Management support includes tracking project status in Government-approved formats, GSC-QF0B-15-32959 PAGE C-8

Amendment 06 evaluating operational and technical alternatives, and performing risk assessments. Support also includes identifying the project critical path and risk mitigation strategies.

Project Management support includes, but is not limited to, the following:

a. Developing work breakdown structures and integrated master schedules

b. Preparing charts, tables, graphs, and diagrams to assist in analyzing problems, project risks, and issues, and preparing project management plans, project documentation, and reports

c. Coordinating schedules to facilitate completion of contract deliverables, briefings/presentations, and project reviews; performing analysis; and developing and reviewing project administrative operating procedures

C.4.2 CORE DISCIPLINE 2 - CYBERSPACE OPERATIONS

Cyberspace Operations support is defined as providing technical expertise to assist in the planning, coordination, and synchronization of OCO and DCO, and operation of the DODIN.

Additional background information is provided in Section J (Attachment Q). At TO award, the

Government will provide information concerning the training, format of the forms, and appropriate use of the tools, roles, and reporting procedures.

Cyberspace Operations support is also defined as providing technical expertise during the conduct of assessments of Cyberspace Operations, including the development and deliberate comparison of forecasted outcomes with actual events utilizing Measures of Effectiveness

(MOE) and Measures of Performance (MOP) when determining progress toward desired end-states and satisfying objectives. Support for this core discipline includes participating in and contributing to the development of the Joint Operations Center (JOC) Emergency Action

Procedures in preparedness to defend the nation through inter-agency emergency cyber procedures. Support for this core discipline shall also entail surge support in the occurrence of a crisis action matter. The surge support shall participate in activities to respond to a crisis action matter and unknown cyber threats. The duration of surge support during the period of performance may or may not be determined by USCYBERCOM at the time of occurrence.

Cyberspace Operations support also includes:

a. Assisting in providing maneuver, fires, and effects through the application of capabilities in and through the cyberspace domain

b. Supporting USCYBERCOM in the creation and dissemination of orders and directives to provide guidance to the DoD

c. Conducting critical and technical research and analysis to define Commander’s Critical

Information Requirements (CCIR), Priority Intelligence Requirements (PIR), and

Essential Elements of Friendly Information (EEFI) for reporting cybersecurity incidents

d. Contributing technical expertise to develop TTPs for conducting Cyberspace Operations, measures, and countermeasures and supporting their implementation

e. Developing and implementing incidence reporting, event handling, and secure configuration guidance to protect, mitigate, and remediate service outages and adversarial activities; and assisting with USCYBERCOM’s efforts in the DoD and whole

GSC-QF0B-15-32959 PAGE C-9

Amendment 06 of Government by contributing to the development of policies, doctrine and processes, courses of action, the Situational Awareness Report (SAR), and input for the National

Defense Authorization Act (NDAA) 935 report

f. Providing assistance and input to the maneuver, fires, and effects planning process through the application of capabilities in and through the cyberspace domain

Services that are included in the Cyberspace Operations core discipline also include providing technical expertise to assist in fulfilling USCYBERCOM’s responsibilities to the Joint

Information Environment (JIE) initiative by identifying requirements and Concept of Operations

(CONOPS) that focus on the execution of DODIN Operations and DCO-IDM, in addition to assisting in the development, synchronization, integration, and assessment of operational standards in support of achieving the JIE end-state.

C.4.3 CORE DISCIPLINE 3 - CYBERSPACE PLANNING

Cyberspace Planning support is defined as providing comprehensive strategic operational planning support to USCYBERCOM. This includes organizing the work of the Commander, staff, subordinate/supporting Commanders and partners to develop effective plans and orders;

synchronizing planning for Cyberspace Operations in coordination with other combatant

Commanders, the Services, and others as directed; transforming national strategic objectives into activities; and providing options, identifying resources, and identifying and mitigating risks. It also includes efforts to plan, manage, and integrate the USCYBERCOM and Cyber National

Mission Force (CNMF) joint exercise and training programs and after-action processes to achieve and sustain USCYBERCOM mission-essential task proficiency. Additional background information is provided in Section J (Attachment Q).

Support for this core discipline includes, but is not limited to, providing in-depth deliberate planning expertise, planning support during rapidly developing situations, and plans and orders development for current and future operations. It also includes supporting USCYBERCOM in the development of policy, plans, processes, procedures, and governing directives for securing, operating, and defending the DODIN and projection of power through cyberspace. The contractor shall provide input to address shortfalls, prioritize and validate requirements, and be prepared to modify development planning efforts based on the changing cyberspace environment.

a. Deliberate Planning includes the management and implementation of the Adaptive

Planning Process from strategic guidance to completion of USCYBERCOM level one through level four contingency plans, synchronization of USCYBERCOM’s missions into plans through internal and external collaboration, and coordination with all mission partners. Deliberate Planning encompasses the preparation of plans that occur in non-crisis situations.

b. Crisis Action Planning is defined as providing technical input and content recommendations to assist in short-term crisis action plans through internal and external collaboration and coordination with all mission partners. Support includes assisting with

Crisis Action Planning and the development of all orders and plans to meet time-sensitive event horizons.

c. Future Operations Planning is defined as providing technical input and content recommendations to assist in future operations plans through internal and external

GSC-QF0B-15-32959 PAGE C-10

Amendment 06 collaboration and coordination with all mission partners. Support includes assisting with

Future Operations Planning and the development of all orders and plans to meet mid-range time horizons.

d. Joint Operational Planning support includes, but is not limited to, providing technical expertise to assist with the development of operational plans that contain a variety of viable cyberspace options, including following the Joint Operation Planning Process

(JOPP) of planning initiation, mission analysis, courses of action (COA) development, COA analysis war gaming, COA comparison and approval, and plan or order development.

e. National Mission Team/Execution Planning support includes, but is not limited to, providing technical and joint planning expertise to assist with the development of tactical joint operational plans in coordination with higher headquarters, mission partners, and tactical teams. Support for this functional area also includes assisting with future operations and mission planning for the development of tactical-level plans and execution of orders.

f. Joint Exercise and Training Planning support includes, but is not limited to, comprehensive strategic planning support to USCYBERCOM to plan, manage, and integrate the USCYBERCOM and CNMF joint exercise and training programs and after-action processes to achieve and sustain USCYBERCOM mission-essential task proficiency.

C.4.4 CORE DISCIPLINE 4 – ALL-SOURCE INTELLIGENCE

All-Source Intelligence analysis is defined as support for planning efforts, from strategic to the tactical level. This discipline area shall include conducting research and analysis, collection management, indications and warning, targeting, imagery analysis, signals intelligence analysis, joint intelligence preparation of the battlespace, and crisis planning to standing and deployed cyberspace forces engaged in operations. Additional background information is provided in

Section J (Attachment Q). Support for this core discipline includes, but is not limited to, screening All Source Intelligence reporting, accessing and summarizing evaluated and previously unevaluated information, discriminating threat information from All Source

Intelligence into actionable intelligence, and disseminating warning and threat analysis for real-world contingencies. Support also includes researching all source reporting to produce predictive and current finished intelligence products and coordinating all analytical products and support national level organizations and theater staffs for dissemination across tactical, operational, and strategic environments. All-Source Intelligence support also includes communicating factual information clearly and concisely, both orally and in writing, often under pressure and tight deadlines.

Services in support of All-Source Intelligence include, but are not limited to, the following:

a. Analyzing All Source Intelligence information to produce assessments, reports, articles, threat analyses, special studies etc., responsive to user needs, and complying with suspense dates for draft and final products

b. Maintaining all source databases on area of responsibility, and using multiple source intelligence tools to perform all source threat force analysis

GSC-QF0B-15-32959 PAGE C-11

Amendment 06

c. Analyzing and fusing reports from multiple intelligence sources (Human Intelligence

(HUMINT), Signals Intelligence (SIGINT), Imagery Intelligence (IMINT), Measurement and Signatures Intelligence (MASINT), Open Source) to provide intelligence preparation of the battlespace, target development, and early warning of emerging threats

d. Screening and researching all source reporting, accessing and summarizing previously unevaluated information, and discriminating threat information into actionable intelligence

e. Monitoring all sources of intelligence to ensure adequacy of coverage and timeliness of assessments, and tasking incoming Requests for Information (RFIs) to appropriate cyberspace division

f. Identifying intelligence gaps and requesting solutions via collections process

C.4.5 CORE DISCIPLINE 5 - CAPABILITY MANAGEMENT AND DEVELOPMENT

Capability Management and Development is defined as providing technical assurance, engineering and architecture analysis, and research for the creation and updating of system architectures’ initial capability documents, capability development documents, capability production documents, and engineering guidance documents (standards, specifications, technical architectures, systems). Additional background information is provided in Section J (Attachment

Q). Support for this core discipline includes conducting tests and evaluations to support the analysis and testing of cyber-related capabilities.

Tasks in support of Capability Management and Development include, but are not limited to, the following:

a. Researching, developing, demonstrating, integrating, and testing innovative technology in support of cyberspace threat defense and management in an effort to facilitate proactive development and testing of cyberspace offensive and defensive capabilities

b. Evaluating and validating sensor system performance capabilities and effectiveness, assessing risk, and determining operational feasibility and benefits of USCYBERCOM’s systems or technology prototypes, to include recommending assessments of system performance, identifying deficiencies, and investigation of physical science phenomena

c. Providing IT support and performing studies, analyses, and experimentation in both laboratory and non-laboratory environments. When supporting Research, Development, Test, and Evaluation (RDT&E) tasks, the contractor shall address, at minimum, any life cycle phase(s) and include science and technology efforts.

d. Evaluating unproven technology applications, identifying potential risks, and documenting and submit results in support of evaluation findings

e. Providing drawing support services

f. Participating in technical reviews and meetings in support of capability management and development activities

Support for this core discipline also includes providing technical expertise and collaborating with

USCYBERCOM and its partners to identify and capture capability development requirements.

Service in support of this core discipline includes developing artifacts for capability development

GSC-QF0B-15-32959 PAGE C-12

Amendment 06 requirements, including white papers and CONOPs. Support for Capability Management and

Development also includes providing technical expertise and participating in activities to identify courses of action for fulfilling capability development requirements, and collaborating with stakeholders to determine the best course of action. Support also includes conducting requirements decomposition and requirements elicitation activities for capability development efforts. Services to be supported also include, for example, providing technical expertise during participation in program reviews to ensure the capability development program is fulfilling the requirement.

Additional tasks in support of Capability Management and Development include, but are not limited to, the following:

g. Supporting the capability management and development process by coordinating with

Intelligence Community (IC) tool developers, the CMF tool developers, and other weapon/tool/capability providers and submitting data on cyber capabilities, and reviewing, analyzing, and maintaining data provided by end users and developers on operational cyber capabilities and associated data

h. Conducting cyber capability analysis to pair operational requirements with cyber capabilities

i. Providing technical input for the development of requirements and support the development of both offensive and defensive cyberspace capabilities to achieve

USCYBERCOM goals, and for achieving situational awareness and a common operating picture of activities happening in cyberspace

j. Supporting the Government in providing situational awareness of cyber incidents, health, performance, availability, and reliability of the DODIN

C.4.6 CORE DISCIPLINE 6 – CYBERSPACE TRAINING AND EXERCISES

Cyberspace Training and Exercises support is defined as providing technical expertise for the development and assessment of Cyberspace Training and Exercise programs. These programs provide for and enhance the quality for, and of, the Cyber Forces in support of command mission objectives. Cyberspace Training and Exercises also includes supporting the creation of sustainable, repeatable training programs to meet this demand. Additional background information is provided in Section J (Attachment Q).

Services in support of the Cyberspace Training and Exercises discipline include providing comprehensive cyber training and exercise support for USCYBERCOM to plan, manage, conduct, and integrate the cyber training and exercise programs. This includes identifying, tracking, and resolving issues impacting training, exercises, and daily operations. Services in support of this core discipline also include assisting in the analysis of training requirements in order to ensure that both individual members and cyber teams are adequately trained and prepared to maintain the requisite level of readiness.

C.4.6.1 SUB CORE DISCIPLINE 1 – CYBERSPACE TRAINING

Support of the Cyberspace Training sub core discipline includes assisting in the analysis of the training curriculum, performance objectives, training plans, certification standards, exercise objectives, and evaluation standards. For example, as part of the analysis, contractors shall

GSC-QF0B-15-32959 PAGE C-13

Amendment 06 project future performance objectives and assist with the development of training plans and materials to support Joint Cyber Training objectives in order to ensure Command personnel possess the necessary skills required to accomplish their missions.

Services that are included in support of the Cyberspace Training sub core discipline include, but are not limited to, the following:

a. Providing facilitators and instructors for cyberspace curriculum planning, development, scheduling, delivery, assessment, evaluation, and maintenance

b. Assisting in preparing instructors to facilitate USCYBERCOM training requirements, coordinating with, and assisting in preparing, Government instructors and guest speakers for delivery of curriculum training modules, and preparing materials for course delivery

c. Developing and maintaining joint standards and assessing and documenting readiness of individuals, teams, and units against joint standards

d. Assessing training curriculum and courses to ensure an emphasis on the application of skill with opportunities for students to demonstrate the attainment of the learning objectives

e. Developing and integrating updates to the curriculum. Requirements for updates will come as a result of feedback from student evaluations as well as Government input, or the contractor’s suggested alterations.

f. Preparing to support Mobile Training Teams (MTT) that will be utilized to instruct curriculum for an average of a two-week period. Coordinate MTT training schedules, locations, instructors, and course materials.

g. Assisting with continuous performance improvement and standardization efforts based on future capabilities needs, alternate approaches, flexible applications, and adversary modifications

h. Assisting in the maintenance of training requirements to ensure accuracy and timeliness of records

i. Assisting in the training waiver process through facilitation of the process and coordination with individuals for completeness of documentation

j. Assisting with maintaining training schedules, enrollments, and associated travel plans

k. Assisting with and conduct cyber training across USCYBERCOM to support the cyber training program

l. Creating call out messages (e.g., CONOPs and Orders) for Government review and processing

m. Developing COAs in response to training objectives

n. Assisting with facilitating the establishment of training environments to includes a next-generation CMF Persistent Training Environment (PTE)

o. Designing, developing, and maintaining registration websites, and portals providing course information and materials

GSC-QF0B-15-32959 PAGE C-14

Amendment 06

C.4.6.2 SUB CORE DISCIPLINE 2 – CYBERSPACE EXERCISES

The Cyberspace Exercises, war games, and Table Top Exercises (TTXs) that occur regularly throughout every fiscal year are anticipated as follows:

Type of Event Estimated Number of

Events per year

Average Number of

Participants

Team Certification

Events 9 50-60

CCMD Exercise Support 10-15 20-60

Cyber Knight or similar 9 50-60

Cyber Flag or similar 3 (2 mini & 1 full) Mini = 50-60/Full = 800

Cyber Guard or similar 5 (4 mini and 1 full) Mini = 50-60/Full = 500

Cyber Wargame 3 150

TTX 25 15-30

Cyberspace exercises support is defined as analyzing outputs stemming from USCYBERCOM exercises and supporting the development, architecture, and infrastructure capabilities of persistent training and test environments. Support for this sub core discipline includes providing technical input for the development of requirements of training and test environments including the physical infrastructure and facilities.

Services in support of this sub core discipline include, but are not limited to, collaborating with

Command elements to implement objectives, priorities, and plans for the USCYBERCOM joint exercise program. Support also includes contributing to the development of exercises utilizing inputs from the Cyberspace Operations Planning process, and to focus on Joint Mission Essential

Tasks (JMETs) for known and anticipated operational missions, capabilities, and improving of

Comma…