Attachment 10 - SOCPAC-JSOTFP SOO Package.pdf

H92222-10-R-0044 Attachment 10

STATEMENT OF OBJECTIVES PACKAGE

FOR EVALUATION

HEADQUARTERS SPECIAL OPERATIONS COMMAND-PACIFIC (SOCPAC) & JOINT

SPECIAL OPERATIONS TASK FORCE-PHILIPPINES (JSOTF-P)

23 Nov 2010

1.0 DESCRIPTION OF SERVICES: Contractor shall operate and maintain operational and tactical Command, Control, Communications, Computers, and Intelligence (C4I) network architecture providing unclassified, secret, and top secret voice, video, and data services, information assurance and network defense support for U.S. Government personnel performing duties at Headquarters SOCPAC, the Republic of the Philippines (RP), and other locations in the USPACOM AOR identified by the SOCPAC SOJ6 supporting Operation Enduring

Freedom Philippines (OEF-P) and other Overseas Contingency Operations.

2.0 PURPOSE: Provide deployed and garrison communications, voice, video teleconferencing, and data services, systems administration, information assurance, communications security, disaster recovery, site integration, hardware maintenance, desktop support, web/database/application services, and associated Information Technology (IT) logistics support to elements of SOCPAC.

3.0 SPECIFIC REQUIREMENTS/DELIVERABLES:

3.1 System Support Requirements.

3.1.1 Contractor shall fully comply with all objectives within the Government Task Order.

Contractor shall provide dedicated support to operate and maintain the C4I operational networks including all voice, data, and video services extended either via space or terrestrial links. Contractor shall provide training and administration of specific software applications and their supporting network infrastructure, and install, integrate, operate, and maintain local and campus area deployable networks at various classification levels for the SOCPAC forces while in the objective areas to include HQ SOCPAC garrison support.

3.1.2 Contractor personnel shall respond to assigned SOCPAC personnel located in HQ

SOCPAC, the Philippines, and other locations in the USPACOM AOR identified by the SOCPAC

SOJ6 as they define mission requirements and, if necessary, specific tasks to be accomplished in the preparation for, and the conduct of operations.

3.1.3 Contractor shall provide the capabilities, articulated in Table A below, to three major sites via satellite hubs and one minor site via terrestrial microwave to provide 24/7 support to

SOCPAC, JSOTF-P, and other locations in the USPACOM AOR identified by the SOCPAC SOJ6.

SOCPAC

SITEC FUNCTIONS

BY

SYSTEM

.1

.1

LA

N / M

A N

.1

.3 N

E T

W O

R K

M G

M T

.4

IN

FR

A

ST

R

U C

T U

R E

.5 D

E P

LO

Y

E D

C O

M M

S

.1

.6 V

O

IC

.7 V

ID

O

.8 H

A R

D W

A R

E M

A

IN

.9 D

IST

R

E C

O V

E R

Y

.2

.1 H

E

LP

D

SK

.2 D

E

SK

T O

P

.3 T

R A

IN

G

.3

.1 P

LA

N

N

G

.2

SIF

.3

.3

SIT

E

IN

T E

G R

A T

IO

.4

SIM

.1 W

B

.2 D

A T

A B

A

SE

.3 A

P P

LIC

A

T

IO

.5

.1

IN

FO

A

SSU

R

A N

C

.5

.2 C

O M

M

SE

C U

R

IT

Y

.6

.1 C

O N

FIG

M

G M

DSN

NIPRNET X X X X X X X X X X X X X X

Unclass DMS X X X X X X X X X X X X X

Secret DMS X X X X X X X X X X X X X

Secret DVSG X X

SIPRNET X X X X X X X X X X X X X X X

SIPRNET Focal Point

VPN

Unclass Network

Security

X X X X X X X X X X X X X X

Unclass LANs X X X X X X X X X X X X X

Unclass RAS X X X X X X X X X

Unclass Servers X X X X X X X X X X X X X X X

Unclass

Workstation/Periph erals

X X X X X X X X X X X X X

Focal Point LAN X X X X X X X X X X X X X X X X

GCCS X X X X X X X X X X X X X X X

Secret Network

Security

X X X X X X X X X X X X X X

Secret LAN X X X X X X X X X X X X X

Secret RAS X X X X X X X X X X X X X

Secret Servers X X X X X X X X X X X X X X X

Secret Work

Stations

/Peripherals

X X X X X X X X X X X X X

SCI Network

Security

SCI LAN X X X X X

SOCRATES (JWICS) X X X X X X X X X X X X X

Autodin R/Y (CSP)

DMS TS/SCI X X X X X X X X X X X X X

Table A- SOCPAC SITEC functions by system.

3.1.4 Contractor shall develop and maintain the proper certification and accreditation artifacts and documentation in accordance with Department of Defense Information Assurance

Certification and Accreditation Process (DIACAP) directives and Command policies for approval by the SOCPAC IAM. Contractor shall provide computer network defense support by installing, managing and monitoring firewalls, proxy devices, domain name services in accordance with established DoD and Cyber Command policies. Contractor shall provide personnel to integrate, operate and maintain HBSS, manage the Vulnerability Management System (VMS), conduct vulnerability scans, and remediate all SOCPAC network enclaves located at HQ SOCPAC, JSOTF-

P, and other locations in the USPACOM AOR identified by the SOCPAC SOJ6 in accordance with

DoD and Cyber Command direction and site procedures under the direction of the SOCPAC IAM and Chief of Network Operations. Personnel shall recommend, install and integrate the above tasks into the current network architecture and provide recommendations to the government to ensure compliance with downward directed actions and reporting.

3.1.5 Contractors augment government personnel at all sites except those sites where 24/7 support is required as described in paragraph 3.1.3. Contractor personnel may be required to perform other IT duties within the scope of this task order as required by the COR or contracting officer.

JWICS VTC

NSTS

Blk Voice Network X X X X X X

X

USASOC NIPRNET

Autodin R/Y X

Focal Point Data

Network

X X X X X

VTC X X X X X X X X X

USASOC SIPRNET

Grey VTC X X X X X

SCI Servers

TACLAN X X X X X X X X X X X X X X

SCI Work Stations

/Peripherals

X X X

3.1.6 All Contractors shall fall under the provisions of the Information Assurance Workforce

Improvement Program (DoD 8570) and must possess the required Information Assurance (IA) baseline certifications commensurate with their assigned duty position as determined by the government. (EX; IAT II, IAT III, IAM III, CND-SP, etc.)

3.2 Operational Requirements.

3.2.1 Contractor shall operate and maintain all tactical C4I network with voice, video, and data services extended via space and terrestrial links. Voice services shall consist of, but are not limited to, the National Secure Telephone System (NSTS), Defense Red Switch Network (DRSN), USSOCOM Voice over Internet Protocol (VoIP), Defense Switch Network (DSN), US commercial long-distance and local voice switch dialing. Video services shall consist of, but are not limited, to DISN Video Services–Global (DVSG) and Video teleconferencing (VTC) via Internet Protocols

(IP). Data services shall consist of, but are not limited to, Joint Worldwide Intelligence

Communications System (JWICS), Secure Internet Protocol Router Network (SIPRNET), Non-

Secure Internet Protocol Router Network (NIPRNET), Commercial Internet, Coalition Wide Area

Network (COWAN), SOCOM Research, Analysis, and Threat Evaluation System (SOCRATES) and possibly Focal Point networks. Contractor shall also provide application management for Web

Information Centers (WIC), Common Operational Pictures (COP), Microsoft Office SharePoint

Server and collaborative tools.

3.2.2 Voice Services. Contractor shall install, operate, administer, and maintain the Defense

Switched Network (DSN), Defense Red Switched Network (DRSN), USSOCOM Voice over

Internet Protocol (VoIP) Red phone, Public Switched Telephone Network - United States (PSTN-

US), the Philippine Public Switched Telephone Network (PSTN), and National Secure Telephone.

Contractor shall:

3.2.2.1 Install, configure, and maintain secure VoIP phones on the Secure Internet Protocol

Router Network (SIPRNET). Contractor shall ensure selected JSOTF-P sites have U.S.

commercial long-distance (Continental U.S.) and limited international and local Hawaii dialing capability.

3.2.2.2 Provide, troubleshoot, and repair NSTS (Gray phone) services to selected JSOTF-P locations.

3.2.2.3 Enable, via DSN and PSTN-US, all telephones and modems to make calls to U.S.

Government fixed and tactical networks that have U.S. commercial access at the DISN gateway.

Contractor shall limit tactical secure voice integration with the commercial systems to those locations identified in the Engineering Design Concept (EDC). Contractor shall accomplish integration of DSN voice services in coordination with the DISN gateway’s multi-function switch with secure, multi-level precedence and pre-emption (MLPP) capable and DoD interoperable switching equipment.

3.2.2.4 Troubleshoot voice network issues and end-user phone equipment. Voice capabilities shall be implemented and maintained to interface transparently with U.S. Government multiplexers, fixed tandem voice switches, tactical switches, and U.S. fixed voice switches in a secure mode utilizing encryption devices.

3.2.2.5 Perform preventive maintenance procedures on the DRSN telephones and conduct weekly test of the DRSN Phone network that includes:

• Testing the path to ensure quality

• Placing a test call to the Red switch

• Checking the back-up line and performing a loop test using a FIREBERD test set

• Ensuring “speed dial” information is coordinated, verified and updated.

• Provide DSN telephone numbering and dialing plans capable of accommodating DSN and PSTN-US phone calls.

• Publish and maintain a user-friendly, consolidated telephone directory. The directory shall contain specific dialing instructions to dial between all connected voice networks and the JSOTF-P DSN, commercial, USSOCOM VoIP, DRSN, PLDT, cell phones, Iridium and International Maritime Satellite (INMARSAT) phone numbers of all end-users.

Additionally, Contractor shall conduct annual inspections of all telephones to ensure they have the Information Security (INFOSEC) Monitoring Notification and Department of Defense (DD-forms only) Label 2056 affixed to them and notify the government when the inspection is complete and all telephones are compliant. Contractor shall also ensure phone directories have appropriate monitoring notifications placed on the front cover in accordance with Army Regulation (AR) 380-53.

3.2.3 Video Teleconferencing Services. Contractor shall maintain and operate Video

Teleconferencing Systems. Contractor shall establish video teleconferences (VTCs) sessions thirty (30) minutes prior or earlier depending on JSOTF-P J6 and SOCPAC direction and shall establish VTC connections using either DVSG, IDSN or IP-based VTC connections. Specifically, Contractor personnel shall:

3.2.3.1 Create, test, and implement procedures that ensure a capability to switch between

DVSG/DVSII VTC within 5 minutes.

3.2.3.2 Make weekly test connections with the DVSG hub as part of Preventive Maintenance

Checks and Services (PMCS) and ensure receipt of the DVSG hub notification publication.

3.2.3.3 Implement Quality of Service (QoS) policies in HQ SOCPAC to ensure proper transmission of IP-based services.

3.2.3.4 Contractor personnel in the Philippines shall schedule through the SOCPAC SSEP, in advance, all VTCs that include participants outside the JSOTF-P AOR.

3.2.4 Data Services. Contractor shall maintain all IP LANs that support classified (JWICS, SIPRNET and Focal Point) and unclassified (NIPRNET) network services at designated SOCPAC sites (to include JSOTF-P locations specified by SOCPAC). Contractor shall perform all network and system administration tasks. Contractor shall provide the following services:

3.2.4.1 NIPRNET WAN connectivity, not provided by the SSEP, to selected sites in the JSOTF-P.

3.2.4.2 Sufficient NIPR, JWICS, (Option) Focal Point, and (Option) COWAN terminations to meet JSOTF-P operational requirements.

3.2.4.3 JWICS WAN connectivity to selected sites, not provided by the SSEP, in accredited

JSOTF-P Secure Compartmented Intelligence Facilities (SCIF).

3.2.4.4 Establish and maintain a network performance tactical standard of 10-6 bit error rate

(BER) at the trunk level.

3.2.4.5 Establish and maintain a NetOps log 24/7 and furnish it to the on-site J6 upon request.

3.2.4.6 Establish, manage, maintain and monitor the health of the network, in coordination with USSOCOM J63 and the SITEC EN Service provider, using the SOCPAC standard tool, currently Solar Winds.

3.2.4.7 Install, operate and maintain Windows Server Update Service (WSUS), or other government directed tools such as System Center Configuration manager, (SCCM) to facilitate server and client system patching at each supported location.

3.2.4.8 Establish, implement, and maintain port security on network devices IAW Cyber

Command, SOCPAC SOJ6 and IAM directives.

3.2.4.9 Establish and implement scanning and remediation procedures ensuring all end user workstations are updated and compliant.

3.2.4.10 Utilize HBSS McAfee Agent on SIPRNET and NIPRNET at each supported location to facilitate the installation and updates of anti-virus software.

3.2.4.11 Conduct and document defensive vulnerability scans using the SOCPAC standard scanning tool, currently Retina, on a weekly basis; resolve and provide the results to the JSOTF-

P J6 and SOCPAC SOJ6; comply with the suspense time for vulnerability remediation as required by Cyber Command and immediately brief any exceptions to the JSOTF-P J6 and SOCPAC SOJ6 as applicable.

3.2.4.12 Utilize Vulnerability Management System (VMS) to comply, track and report compliance with all Information Assurance Vulnerability Alerts (IAVAs), Network Defense

Directives (NDD), Tailored Readiness Options (TRO) and Information Assurance Vulnerability

Bulletins (IAVB) within the specified timeframe as directed by the TNC.

3.2.4.13 Use Windows Domain Authentication or a central authentication, authorization accounting server to control access to shared files.

3.2.4.14 Install the approved DoD computer-warning banner on all workstations connected to the SOCPAC and JSOTF-P networks.

3.2.4.15 Manage passwords and exchange accounts IAW Cyber Command standards and directives.

3.2.4.16 Install the USSOCOM TACLAN software baseline on all USSOCOM TACLAN-compatible hardware as directed by the SOCPAC SOJ6.

3.2.4.17 Develop and install a SOCPAC software baseline for all computers on the SOCPAC

Network Domain. Incorporate the SOCPAC software baseline on all systems located in JSOTF-P, HQ SOCPAC and other locations in the USPACOM AOR identified by the SOCPAC SOJ6. This applies to both SOCNIPR and SOCSIPR.

3.2.4.18 Install accredited software applications as directed by the SOCPAC SOJ6.

3.2.4.19 Maintain a current software and software license inventory.

3.2.4.20 Maintain a current IP addressing scheme.

3.2.4.21 Troubleshoot and repair data network and email issues.

3.2.4.22 Perform a weekly full system back-up and incremental daily back-up of all servers.

Perform monthly validation tests of backup media on off-line systems (may be performed at centralized location). Identify a suitable storage location to store backup media on a recurring basis.

3.2.4.23 Maintain JWICS, SIPR and NIPR file servers at each JSOTF-P location, HQ SOCPAC, and/or other locations in the USPACOM AOR identified by the SOCPAC SOJ6 where domain services are provided.

3.2.4.24 Maintain a multi-terabyte storage server at JSOTF-P HQs on SIPR.

3.2.4.25 Establish, maintain and operate MS Exchange mail servers on all SIPR and NIPR domains.

3.2.4.26 Contractor shall PKI enable servers and websites, install Common Access Card devices, software, and drivers on clients to facilitate Cryptographic Log-On (CLO) at all locations with NIPRNET domain services.

3.2.4.27 Troubleshoot and repair JWICS data network issues and coordinate SCIF access with

JSOTF-P SCIF personnel. Contractor shall adhere to SOCPAC JSOTF-P and DoD guidelines and policy on TS-SCI products and data. Contractor shall operate and maintain local and campus area deployable networks at various levels of classification in accordance with DoD regulations and JSOTF-P procedures.

3.2.4.28 Recommend, install and integrate network enhancements as approved by SOCPAC

SOJ6.

3.2.4.29 Contractor shall ensure full interoperability and seamless interface between internal and external systems to include the deployed communications devices as defined by the government, not including end user application operation and training.

3.2.4.30 Assist in the development, maintenance and implementation of information assurance policies, procedures, certification and accreditation in accordance with applicable

DoD regulations, CERT notices and best business practices.

3.2.5 Focal Point. When workload allows, the Contractor shall assist in providing a WIC, file and print sharing capability.

3.2.6 COALITION WAN (COWAN). When directed, Contractor shall provide connectivity to

U.S. Forces and collocated RP forces at selected sites using USPACOM provided equipment.

Contractor shall ensure email, WIC, and file sharing capability are available on the Coalition

Network. Contractor can coordinate with the appropriate Government agencies to ensure export of technology shall not be an issue in JSOTF-P operations. This option is not priced in this proposal.

3.3 Command and Control.

3.3.1 Common Operational Picture (COP)/IM Manager. The COP provides battle space information to the commander. Contractor shall ensure that the COP environment remains operational in compliance with current USSOCOM software standards. Contractor COP

Managers require in-depth knowledge and application of SOF methods of ground, naval, and air operations and the systems used to support tactical and operational level intelligence gathering correlation, and dissemination. Contractor shall provide system administration for a C2PC gateway and JADOCS server at the JSOTF-P HQs. Contractor shall work with the JSOTF-P Chief of Staff to assist with the development and implementation of Information Management (IM) policies, procedures and systems.

3.3.2 Command and Control Personal Computer (C2PC). As part of the COP environment, Contractor shall operate and maintain a C2PC gateway at the JSOTF-P HQs. Contractor shall be responsible for server administration and maintenance of a C2PC gateway server ensuring coverage of, but not limited to, the JSOTF-P Area of Operation (AO), ensuring the gateway server is refreshed hourly or more frequently as needed with the GCCS-J server it is homed with. Contractor understands the primary client software used for the COP is C2PC and shall maintain the USSOCOM approved version, the users manual, installation instructions and

USSOCOM points of contact. In addition, Contractor shall maintain the latest version of the

Portable Flight Planning System (PFPS) and FalconView client software along with the users guide, installation instructions and SOCPAC points of contact. As approved by JSOTF-P/SOCPAC

SOJ6. Maintaining the environment, Contractor shall ensure the appropriate ports are open for

C2PC client and gateway operations.

3.3.3 JADOCS. Contractor shall provide server administration and maintenance, ensuring coverage of, but not limited to, the JSOTF-P AO. Contractor also recognizes that if the server is operating as the primary COP tool, the team shall ensure the server is refreshed hourly or more frequently as needed. Contractor shall maintain the latest version of the software, the installation instructions, user manuals and all JADOCS POCs.

3.3.4 ISR Feeds. Contractor shall setup and operate V-Brick or other video broadcasting systems on the SIPRNet.

3.3.5 RoIP. Contractor shall integrate Radio over IP into the JSOTF-P LAN for use during SOF operations.

3.3.6 GCCS. Contractor shall operate and maintain the GCCS-J servers and/or workstations through the Government Program Office at both JSOTF-P and HQ SOCPAC.

3.3.7 SOCOM Research, Analysis, and Threat Evaluation System (SOCRATES) and Enhanced

Imagery Workstation (EIW). Contractor shall operate and maintain government furnished

SOCRATES and EIWs.

3.3.8 Audio/Video Data Wall. Contractor shall maintain components needed to provide a C2

Data Wall comprised of multi-monitors and multiple audio-video sources from either military or commercial signal sources.

3.3.9 Collaboration Tools. Contractor understands the current collaborative tools are Defense

Collaboration Online (DCO), Microsoft (MS) Chat, Microsoft SharePoint Portal and web pages and shall maintain these capabilities to SIE standards. Contractor shall integrate new or additional collaboration tools as directed by the SOCPAC SOJ6. Contractor shall provide system administrators to install, operate, and maintain client applications.

3.3.10 Commercial Very Small Aperture Terminal (VSAT) systems: SOCPAC currently utilizes these systems in lieu of program of record systems and calls them “Secure Tunnel Over WAN

(STOW)” (equipment originally provided by 3Di). Contractor shall provide support for these systems throughout the SOCPAC AOR. Contractor shall ensure at least 2 personnel assigned at

JSOTF-P and 1 person assigned at the SOCPAC Garrison shall receive training, through

Government procured resources, to provide troubleshooting and repair services for these systems deployed throughout the SOCPAC AOR.

3.3.11 Secure Virtual Private Network (VPN) kits: SOCPAC currently utilizes these systems in lieu of program of record systems and calls them “DSL Kits” (equipment originally provided by

Data Line). Contractor shall provide support for these systems throughout the SOCPAC AOR.

3.3.12 WIC. When applicable, Contractor shall operate and maintain the U.S. Joint Forces

Command (USJFCOM) web-based file sharing application at the JSOTF-P HQs. In addition, Contractor shall provide user training and Help Desk support as required.

3.3.13 Help Desk.

3.3.13.1 Contractor shall utilize proven Help Desk procedures already in place at USSOCOM to provide the foundation for the JSOTF-P Help Desk. Contractor shall manage Help Desk requests via WIC and the SOCPAC standard tool (currently HelpSTAR) which reflect the status of open and closed Help Desk tickets.

3.3.13.2 The table below identifies the priorities, response times and goals for Contractor Help desk personnel.

Problem Description Standard Goal

Priority

Critical Initial response within 15 minutes of detection

Response within 5 minutes

Priority

Significant Initial response within 1 hour of detection

Response within 30 minutes

Priority

Routine Initial response within 4 hours of detection

Response within 2 hours

•••• Problem Escalation – Tier 2 and Tier 3. Whenever possible, the Help Desk

Tier-1 analyst shall attempt to “warm transfer” a call to a Tier-2 engineer to try and resolve the SOF Warfighter’s problem on the initial call, while the user remains on the line. Help Desk personnel shall have access to Tier 2 engineering support locally and from Hawaii, as well as Tier 2 and 3 support from Tampa and other CONUS sites.

•••• Links to External Support. The Operations Manager/Technical Lead shall ensure the Help Desk maintains an updated “directory of links” to

Government Off-the-Shelf (GOTS)/Commercial Off-the-Shelf (COTS) application systems’ Help Desks and web sites for coordination efforts and to assist the supported command in troubleshooting any issues that may arise with the application systems hosted within the JSOTF-P networks.

Additionally, vendor points of contact and contact numbers for quick reference to assist Tier 1 and Tier 2 Help Desk analysts shall be maintained;

along with contact numbers for Regional Support Center (RSC) information and “theater” Help Desks. This shall facilitate the exchange of theater information across the breadth and scope of the JSOTF-P environment.

Information and available links shall be posted on a discretionary access controlled web site (https:) environment.

• Ticket Closure. Trouble tickets are not considered resolved or closed until the Help Desk has received positive confirmation by personally speaking with the supported command or receiving a confirmation by voicemail or email that the problem has been resolved to the command’s satisfaction. The resolution to the problem is completely documented in the trouble ticket by the responsible tier group and may be used as input to the knowledge base;

updating troubleshooting scripts as necessary.

• FAQs Website. Contractor shall maintain and update the Help Desk

Frequently Asked Questions (FAQs) within the knowledge base. The JSOTF-P user community shall have access to and can find answers to FAQs, tips and tricks, and solutions to common problems. Our knowledge base FAQs shall be accessible via the web interface. Updates to FAQs shall be linked to all troubleshooting efforts.

• Trouble Ticket Metrics. Contractor shall continuously track received calls

(minute, hour, and day) and compile statistics that shall be closely monitored and compiled for weekly and monthly analysis. Captured metrics shall be the basis for conducting incident and problem trend analysis and formation of recommended changes to the program and/or updates files such as FAQs, lessons learned, and troubleshooting scripts. Based on analysis and where appropriate, we shall make recommendations for changes to the

Government COR for review and approval.

• Customer Satisfaction Surveys. With Government review and approval, Contractor shall apply its customer satisfaction surveys which shall be sent to users who have had tickets closed the previous week. The surveys shall help measure customer satisfaction so that improvements can be made accordingly. The Technical Lead shall personally contact users who have provided negative responses for further clarification and resolution. Other questions may be added as needed, but the survey should be kept brief to allow for a higher return rate. The customer shall have the option to elaborate further if they choose. The results from these customer satisfaction surveys shall be compiled and posted on the website.

3.4 Help Desk HQ SOCPAC: The HQ SOCPAC Help Desk is managed by the HQ SOCPAC military personnel. Contactor shall augment the help desk during normal duty hours.

3.4.1 SharePoint.

3.4.1.1 Contractor’s SharePoint Manager, located at HQ SOCPAC, shall gather and document user generated requirements by interviewing the customers and subject matter experts and develops detailed design plans from these requirements.

3.4.1.2 The SharePoint Manager shall also analyze unit requirements and develop a portal design which addresses SOCPAC’s portal requirements, to include JSOTF-P.

3.4.1.3 Additionally, the Contractor SharePoint manager shall implement a SOCPAC portal solution on the NIPRNET, SIPRNET and other designated closed community segments in accordance with the timeline & requirements approved by the SOCPAC SOJ6

3.4.1.4 Contractor shall provide operations, maintenance and customer support of the installed network and ensure interoperability with the Enterprise Portal.

3.4.2 SharePoint Portal Content Management. Contractor shall manage user access and upload specialized content on the SOCPAC Portals.

3.5 Technical Requirements.

3.5.1 Performance Requirements. Contractor shall begin to collect and track the metrics required to develop feasible performance objectives for use by the Government and contractor to transition this to a performance based contract. As part of the transition, Contractor shall provide the JSOTF-P J6 a Performance Management Plan (PMP) for implementing performance agreements and a roadmap for achieving 99% availability for all JSOTF-P required services.

Contractor shall use communications reliability, network (LAN) availability, server availability, customer satisfaction, Help Desk response, IAVA implementation timeliness, e-mail availability, and asset control as the initial performance measures.

3.5.2 Interoperability. Contractor shall provide all telecommunication capabilities and services that are capable of connecting to and interoperating with government fixed communications networks and U.S. Forces tactical networks. In addition, Contractor shall accept responsibility for compatibility and interoperability of the offered systems/equipment/items with the capability at all facilities provided by the government and shall ensure all provided equipment/systems do not cause damage to any government equipment/systems.

3.5.3 Contractor shall engineer systems to fulfill the user requirements and ensure the solutions are redundant when applicable, reliable, secure, flexible and interoperable with all on-site existing equipment and networks and have connectivity to the Global Information Grid, the Defense Information System Network and USSOCOM networks. Contractor shall also fulfill these requirements by completing an Engineering Design Concept (EDC).

3.5.4 Technical Advice. Contractor shall provide technical advice and help coordinate and facilitate the planning for expansion and/or modification of required services. The team shall also provide engineering and technical expertise and shall make recommendations and proposed architectures for future network plans.

3.5.5 Technical Conferences. When directed, Contractor shall participate in and be prepared to provide technical input and network information during any technical conference and understands that SOCPAC SOJ6 shall provide conference leadership.

3.5.6 System Installation Standards. Contractor shall follow all SOCPAC system installation standards.

3.5.7 Local Distribution and Interface Standards. Contractor shall provide, install, operate and maintain all mediums between U.S. Government end-user equipment and U.S. Forces’

NIPRNET, SIPRNET and JWICS routers and Promina multiplexers for existing facilities.

3.5.8 Customer Interface. Contractor recognizes the need for quality and shall visit end-users on a weekly basis to assess quality of services, provide customer surveys for feedback, and understand issues related to communications and IT requirements.

3.5.9 Strategic Connectivity. Contractor, assigned to the SOCPAC Garrison, shall ensure connectivity to the GIG, DISN and all USSOCOM networks is maintained and shall be prepared to connect to other U.S. Government networks and U.S. commercial networks as directed.

Contractor understands that SOCPAC shall provide any additional equipment needed for the C4

Commercialization Network to connect to the USSOCOM Network.

3.5.10 Inter-Base Connectivity. Contractor shall design the future communications architecture to provide inter-base connectivity. Contractor shall also install, maintain, and operate commercial satellite earth stations and multiplexers.

3.5.11 NetOps Standards. Contractor shall adhere to the “TCCC-TNC-OEF-P Reporting,” also known as the OEF-P Network Operations NetOps Reporting procedures. Contractor understands these procedures define the theater C4 roles, Communication Statistics Report

(COMSTATs), Communications Spot Report (COMSPOT), Authorized Service Interruptions (ASIs), outage procedures, troubleshooting and information assurance procedures.

3.5.12 Trend Analysis Reporting. Contractor shall provide a monthly trend analysis report on status and capability of voice, video and data network and sub-networks. Contractor shall also provide recommendations to JSOTF-P J6 to rectify any noted degraded service.

3.5.13 Satellite Access Requests (SAR)/Gateway Access Requests (GAR). Contractor shall submit SAR/GARs when necessary via the C4 Access Request System (CARS).

3.5.14 Circuit Actions Requests Contractor shall submit all required circuit action requests

(RFS) for communications services IAW DoD Policies and Procedures via DISADirect or other system as required.

3.5.14.1 Quality of Service (QoS). Contractor shall maintain a network performance tactical standard of 10-6 bit error rate (BER) at the trunk level. We shall implement QoS on all SIPR LAN equipment not maintained by the SITEC EN Service provider, to enable VoIP phones through coordination with the SITEC EN Service Provider, USPACOM and SOCPAC. Contractor shall maintain equipment/system design criteria for voice services within the following specifications:

• less than 4 Frame Slips within 24 hours

• less than 864 Errored Seconds within 24 hours

• less than 225 Severely Errored Seconds within 24 hours

• internal switch call blocking not to exceed P.01

• external call blocking not to exceed P.03

3.5.14.2 Information Assurance. The SOCPAC SOJ6 shall appoint the Information Assurance

Managers (IAM) for all SOCPAC networks. Contractor shall adhere to CJCSI 6510.01C, Information Assurance and Computer Network Defense and resolve resulting network IAM issues.

3.5.14.2.1 Contractor shall provide support and training on Secure Configuration Compliance

Validation Initiative (SCCVI) Retina Scanning, Secure Configuration Remediation Initiative (SCRI)

Remediation using WSUS, SCCM, and HBSS. Build, configure, and troubleshoot all IA systems.

3.5.14.2.2 Contractor shall be responsible for tracking all IAVM and reporting through VMS.

Contractor will run recurring Retina scans and upload into VMS for analysis. Contractor shall generate compliance reports based on scan results and provide to the government as requested.

3.5.14.2.3 Contractor shall be responsible for ensuring the IA-related servers and systems are running the most up to date scanning engines and versions and that they’re running properly.

3.5.14.2.4 Contractor shall ensure site System Administrators maintain IA compliance and shall work in conjunction with the site IAM to ensure all IA IT requirements are being met.

Contractor shall gather and report appropriate information.

3.5.14.2.5 Contractor shall support the development, testing, documenting, integrating, operation and maintenance of the information assurance infrastructure.

3.5.14.2.6 The core of these services includes:

• Providing problem resolution and administration of network security infrastructure services and equipment.

• Performing security incident monitoring and analysis and response as directed by the IAM.

• Assisting with the integration of new information assurance services and solutions.

• Assisting with the certification and accreditation of SOF systems and infrastructure.

• Assisting with the compliance and monitoring of IAVA and INFOCON processes.

• Providing problem resolution and administration of network security infrastructure services and equipment.

• Administering network security devices, such as firewalls, VPNs, and intrusion detection systems IAW DoD and Cyber Command directives.

• Installing, maintaining, and administering Bluecoat proxy server as part of the installation of the DMZ on NIPRNET.

• Installing, maintaining, and administering ISA server as required to support

Microsoft OWA and SharePoint CLO services.

• Providing problem resolution with network security devices to include:

o Troubleshooting connectivity problems o Coordinating access change requests o Equipment relocation o Architecture changes

3.5.14.2.7 Contractor shall assist with the certification and accreditation of SOF systems and infrastructure. (SOCPAC SIPR, SOCPAC NIPR, SOF Deployable Node, Global Command and

Control System-Korea, Special Operations Mission Planning Environment (TACLAN), Global

Command and Control System-Joint).

3.5.14.2.8 Provide support to the government with the development and maintenance of

SSAA documentation in accordance with DIACAP requirements and the requirements of the appropriate DAA.

3.5.14.2.9 Assist with the coordination of CT&E requirements and other risk assessment needs.

3.5.14.2.10 Contractor shall provide security engineering expertise as part of the Information

Assurance staff.

3.6 Logistics Support.

3.6.1 Integrated Logistics Support (ILS) Plan. Contractor shall provide life-cycle sustainment and maintenance for JSOTF-P systems and components. Contractor shall provide technical and sustainment support, and develop and implement training for personnel.

3.6.2 Contractor’s ILS Plan shall include all issues associated with equipment sparing, provisioning, warranty administration (both legacy and new), technical support, inventory management, unique identification devices (UID), and software licensing. All elements of logistics shall be addressed within the appropriate sections of our ILS Plan and shall apply to all facets of JSOTF-P operations. Relevant ILS data and information shall be readily available to the appropriate personnel via an information sharing portal.

3.6.3 The contractor shall provide support to dislocated units preparing for movement. The

Contractor shall coordinate closure of open support task trouble tickets prior to departure.

When required the contractor shall provide a flyaway team to be launched to support the mission. Each team shall be task organized for the assignment, meaning that, if a particular skill is necessary, the contractor shall ensure that it has a subject matter expert on the team (e.g., hardware, software, and communications) who is pre-deployment cleared to travel. All travel shall be approved in accordance with the contract.

3.6.4 The COR shall ensure proper processes and procedures are established to maintain 100% accountability of GFE associated with this Task Order. The contractor shall ensure all SOCPAC procured GFE equipment is processed through the JSOTF-P J4. The JSOTF-P J4 shall account for all government property purchased under this TO and create a sub-hand receipt for the equipment in the physical possession of Contractor. Contractor shall provide an accounting to

J4 for any equipment hand receipted to them from other government sources, if required to support the SOCPAC mission and controlled by Contractor. All unaccounted for property last identified under Contractor possession shall be immediately reported to the JSOTF-P J4 PBO and the contractor shall reimburse the government for lost property.

3.7 Government Furnished Equipment (GFE): Contractor shall identify items of US

Government Furnished Equipment (GFE) required to implement the solution described in the

US Government approved Engineering Design Concept (EDC). GFE shall be mutually agreed upon and documented during review of the EDC. Items provided to Contractor as GFE shall be operated and maintained by the Contractor. Contractor shall create and establish Standard

Operating Procedures (SOPs) to ensure accountability of GFE is maintained. These SOPs shall include but not be limited to the following: handling procedures for equipment coming into country, traveling between sites, being shipped for repair and being turned in when no longer of value to the TO. Appropriate military forms or appropriate property book inventory reconciliation shall be used to document accountability of equipment by serial number.

Contractor shall provide signed copy of the inventory and any property book inventory reconciliation to the COR on an annual basis. New items of GFE may be provided to Contractor as requested through the COR. Contractor shall sign for the new items of GFE using the appropriate Department of Defense forms for 100% property book inventory and provide to the COR.

3.8 Operations and Maintenance Plan. Contractor shall update the current Operations and

Maintenance Plan (OMP) as required. The OMP shall describe in detail all tasks associated with operating and maintaining the entire garrison and JSOTF-P communications and network infrastructure.

3.9 Network Maintenance and Preventive Maintenance Inspections. Contractor shall perform daily incremental backups, full system weekly backups, and establish and maintain a preventive maintenance check schedule for all telecommunications equipment. Contractor shall also maintain an off-site storage capability for the full system backup media within government facilities.

3.10 Spares. Contractor shall recommend adequate stock levels of major components to the

JSOTF-P J6 to be stored in the Site A area, or another area directed by the JSOTF-P or SOCPAC

SOJ6. The appropriate stock levels shall be derived from the analysis of historical metrics, commercial vendor data, and past performance experiences. A Logistics Support Analysis

Record (LSAR) shall identify stocking requirements. These components shall be readily available to be shipped within 24 hours when an outage is reported to the Help Desk and technical analysis has confirmed that the problem is a hardware component failure.

3.11 At the sites, JSOTF-P support personnel shall repair the failed component if possible.

Otherwise, the failed component shall be either shipped to the manufacturer for repair or taken out of service predicated on its service history. When repaired by the manufacturer, upon return receipt of the component, it shall be placed back into service and readied for use.

The entire life cycle from “cradle-to-grave” for legacy and new production models shall be managed using ISO 9001:2000 compliant processes and completely documented.

3.12 Communications Security. Contractor shall maintain 100% inventory for all

Cryptographic Controlled Items (CCI) and maintain an active COMSEC hand receipt (SF-153) with the appropriate COMSEC Manager for all keying material (KEYMAT) and accounting legend coded (ALC 1 & 2) materials.

3.12.1 Contractor shall coordinate with SOCPAC to maintain an updated COMSEC

Authorization Letter that includes the COMSEC handlers’ names, last four digits of their social security numbers, clearances, dates of investigation and investigation agencies.

3.12.2 With SOCPAC’s concurrence and under their authority, Contractor shall submit requests to provide multiple personnel authorized to courier KEYMAT.

3.12.3 Contractor shall develop, provide and implement an Emergency Action Plan (EAP) and

Emergency Destruction Plan (EDP) for COMSEC material, per Electronic Keying Material System

(EKMS) 1. JSOTF-P J6 shall approve the EAP and EDP.

3.13 Web Access. Contractor shall manage a HTTPS Task Web Site and populate it with support task documentation such as Standard Operating Procedures, ANNEX K documentation, Inventories of Government Owned – Contractor Operated Equipment, Equipment Warranty

Documentation and other task documents, as required.

3.14 Host Based Security System (HBSS) Support Requirements. Contractor shall:

3.14.1 Provide installation support for HBSS.

3.14.1.1 Provide IA and System Administration support to SOCPAC to ensure proper installation, operation and maintenance of HBSS server(s)/clients and workstations.

3.14.1.2 Provide IA and System Administrator support to SIF personnel to ensure proper integration of HBSS into USSOCOM networks.

3.14.1.3 Document changes to Cyber Command certification and accreditation (C&A) documentation for the Site Certification.

3.14.1.4 Provide IA Configuration and Sustainment Support for HBSS.

3.14.1.5 Review installation and C&A documentation and provide recommendations for the proper configuration and installation and implementation.

3.14.1.6 Provide input and maintain the HBSS site C&A documentation and provide recommendation to the site Certification Authority as required.

3.14.1.7 Coordinate with SOCPAC sites, DISA and other government agencies on technical improvements to network security associated with HBSS operations.

3.14.1.8 Conduct periodic scans of the information stored to identify potential content that is incorrectly stored and take measures to correct the deficiency

3.14.1.9 Collect, analyze and provide network activity (e.g., central processing unit (CPU) utilization, memory utilization, hard drive space, application usage, and bandwidth utilization) for the government

3.14.1.10 Provide Administrative Support for HBSS.

3.14.1.10.1 Administer and maintain HBSS server.

3.14.1.10.2 Ensure servers are maintained and identified through configuration manager controls and processes.

3.14.1.10.3 Ensure upgrades and fixes are implemented and reported per DoD direction.

3.14.1.10.4 Provide support to address specific mission requirements of HBSS as required, with regard to security, functionality, classification, performance (i.e., latency and packet loss), and survivability to include fault tolerance, interoperability, network management and bandwidth availability to accommodate surge requirements.

3.14.1.10.5 Plan, conduct, test, and document system/maintenance upgrades for HBSS hardware, firmware, and software (e.g., servers, switches, routers, and back-up equipment), to include information protection measures.

3.14.1.10.6 Coordinate with vendors to apply vendor-supplied corrections to operating system and applications on HBSS server/clients.

3.15 Implement new operating systems, applications, and system updates to systems/software application as applicable

3.15.1 Provide daily, weekly, and monthly back-ups of core data and network servers and restoration of data.

3.15.2 Transfer back-ups to off-site storage in accordance with site standard operating procedures (SOP).

3.15.3 Coordinate planned upgrades and outages in accordance with site SOPs.

3.16 Manage user accounts, system policies and profiles.

3.16.1 Provide maintenance and connectivity to all required legacy systems and applications.

3.16.2 Coordinate with site Information Assurance personnel to implement and enforce network security measures.

3.17 Provide Sustainment Support for HBSS.

3.17.1 Support development, testing, documentation, integration and maintenance of current and future releases of HBSS.

3.17.2 Provide support for integration under the Enterprise concept and phased approach implementation plan.

4.0 SECURITY REQUIREMENTS.

4.1 Security shall be in accordance with the attached DD254. Contractor team individual(s) supporting this task shall be cleared at the Top Secret levels at the start of this task.

Contractors shall require access to NIPRNET/SIPRNET/JWICS systems only at government facilities. Contractor shall be authorized to courier classified information up to the “Secret” level in performance of official duties upon approval of and designation by the COR.

4.2 The Contractor shall insure requirements for safeguarding classified information and classified materials, for obtaining and verifying personnel security clearances, for verifying security clearances and indoctrination of visitors, for controlling access to restricted areas, for protecting government property, and for the security of automated and non-automated management information systems and data are fulfilled. The contractor’s management system shall prevent unauthorized disclosure of classified and sensitive unclassified information. The government shall be immediately notified if any security incident or any indication of a potential unauthorized disclosure or compromise of classified or sensitive unclassified information.

4.3 The Contractor shall provide security management support. Typical efforts include, but are not limited to, performing classified document control functions, classified materials inventories, program access requests, preparing and monitoring personnel indoctrination and debriefing agreements, and maintaining and using security-related databases.

4.4 Cable Plant Security: Contractor shall conduct at least weekly inspections of the cable plant, providing visible labeling in interior facilities, to distinguish all twisted pair cables and conduit supporting the releasable telephones from unclassified cables. Contractor shall perform weekly inspections of cables and facilities, in conjunction with Government representatives, to ensure that no tampering of the exterior and interior cable plants has occurred. Deviations from these policies can only be approved by JSOTF-P Commander written authority.

5.0 REPORTS (CDRLs). CDRLs E001, E002, E003, E004, E005, E008, E009, E010, E013, E014, and E022 apply to this SOO. All documentation provided as a result of this Task Order shall be considered sensitive and not subject to public disclosure.

6.0 SERVICE LEVEL AGREEMENTS. Service Level Agreements F1 – F8 apply to this task.

7.0 MATERIALS.

7.1 The government shall provide necessary materials as direct issue.

7.2 The government shall provide organizational and individual equipment, and documentation needed for Contractor to accomplish the task. If required, the site commander shall provide protective gear for Contractor employees. Contractor understands government issued items shall be issued on hand-receipts to the employee and shall be considered accountable government property in accordance government rules and regulations.

7.3 The government shall provide necessary office space, for a maximum of 51 contractor personnel, local transportation, and facilities for materials storage as direct issue.

7.4 Contractor personnel under this Task Order shall be assigned to Manila as their permanent duty station and shall rotate to other JSOTF-P sites. Housing within the Joint Operating Area will be provided by the government.

7.5 Contractor shall notify the JSOTF-P J6 and COR of any lost or inoperable equipment within

72 hours and immediately initiate actions to recover or repair the equipment. Contractor shall perform all maintenance and corrective actions in accordance with the directions established in the operations and maintenance manuals of each device.

7.6 Contractor assumes operational responsibility for existing facilities and may be required to move or dispose of equipment and infrastructure not previously installed by team members.

Any disposable costs incurred as a result of the removal of this equipment shall be reimbursable.

7.7 Contractor installed equipment must be environmentally protected against the elements and able to operate where installed. Any equipment or temporary facilities installed by the contractor should blend into the Government environment or meet force protection requirements. Contractor shall acknowledge that any equipment not installed in a facility must be self-sustaining with environmental control and adequate power supply.

7.8 Contractor shall coordinate all approvals and permits for the import, installation, and operation of equipment into the Republic of the Philippines.

7.9 Contractor has included an estimate for the costs of DBA coverage required in the performance of this task.

8.0 PACKAGING, HANDLING, STORAGE, & TRANSPORTATION. Contractor shall coordinate all movement of equipment and contractor personnel between the various JSOTF-P sites and other destinations. The logistics engineer shall coordinate with the COR and receive authorization for any shipment or movement prior to execution. Contractor shall provide a

Movement Plan (MP) to identify the Standard Operating Procedures for all communications and network equipment moves and specifically address accountability during transportation, assembly and disassembly of equipment, and site de-activation and…