Attach_9-_TO1PWS_Nov30.docx

PERFORMANCE WORK STATEMENT (PWS)

for the Defense Information Systems Agency (DISA) Operations Center (OC) Directorate National Leadership Command Capability Directorate Program Engineering Security & Technical Support Task Order 1 30 November 17

1. Contracting Officer Representative (COR)

a. Primary Contracting Officer Representative (COR)

b. Alternate Contracting Officer Representative (ACOR)

1. Task Order Title: National Leadership Command Capability Service and Infrastructure Office (NLCC) Program, Engineering, Security & Technical Support (NLCC PEST Support) Task Order 1

1. Background: The NLCC PEST Support Task Order 1 is sponsored by the National Leadership Command Capability (NLCC) Directorate, of the Operations Center (OC) at the Defense Information Systems Agency (DISA). Task Order 1 will support the National Leadership Command Capability Service and Infrastructure Office (NSIO) by providing acquisition, programmatic, security, financial, program protection, cyber security, information security services, engineering, professional, scientific, technical, management and other related support for programs and projects. This requirement spans a wide range of activities including conceptualization, planning, analysis, evaluation, assessment, and reporting.

1. Objectives

The objective of the this task order is to obtain various skills to support activities within DISA and the NSIO Division which has several programs and projects at various stages of completion or execution. The NSIO Office consists of seven (7) Divisions; NSIO1 Integrated Division, NSIO2 Communications Division, NSIO3 Security Division, NSIO4 DCIN PMO Division, NSIO5 CMS PMO Division, NSIO6 PAGCN PMO Division, and NSIO7 Operations Division. These programs and projects require skills in multiple disciplines including engineering technology, management, security, and business processes. The programs and projects require superior, integrated, technologically leading-edge engineering, technology, management, security, telecommunications, and IT solutions providing mission readiness. The description of each skill for this effort is provided in section 6 of this performance work statement (PWS) under the Tasks.

1. Scope

This requirement includes acquisition, programmatic, security, financial, program protection, cybersecurity, information security services, engineering, scientific, technical, management and other related support services for multiple programs and projects. The NSIO provides a wide variety of support that is both unclassified and classified. NSIO requires a variety of personnel with an appropriate amount of skills, knowledge and abilities with a variety of technologies, business processes and missions, as well as, activities that are flexible and scalable to execute tasks quickly. Most of the performance described herein is conducted in a Sensitive Compartmentalized Information Facility (SCIF). Information pertaining to the activities in the SCIF is tightly controlled; therefore, the contractor must possess the proper security clearance before being granted access to information about NSIO activities and access to the SCIF. There are a few instances where the work will not need to be performed inside of a secure location. The contractor shall not perform inherently governmental functions under this task order, such as determining federal program priorities for budget requests, determining budget policy, guidance, or strategy, directing or controlling federal employees, or determining what supplies or services are to be acquired by the Government. Services closely associated with some of these inherently governmental functions may be required under this task order, but any exercise of discretion, policy judgments, or final decisions must be reserved for Government officials only.

The Task Order 1 scope of work to be performed is further described in Section 6 and is organized within the following task areas:

· MANAGEMENT SUPPORT

· ENGINEERING SUPPORT

· CYBERSECURITY AND SECURITY SUPPORT

The Government may require surge support during the base or any option period, and surge modifications will be within the scope of the task order and provide increased support for the defined task areas of this PWS. Surge support over the life of the task order will not exceed 18% of the contractor’s total proposed cost/price for the base and all option periods, excluding any six-month extension of services pursuant to FAR 52.217-8.

1. Performance Requirements.

NSIO consisting of the following organizations, National Leadership Command Capability Service and Infrastructure Office (NSIO) works within an extremely dynamic environment with continually-changing requirements. The contractor must demonstrate the flexibility to provide mission-critical resources as needed by the Government. The contractor shall ensure that sufficient staffing and appropriately skilled personnel are employed in the execution of this task order. The contractor shall perform the work and provide the deliverables as specified herein in paragraph 6 task areas and paragraph 7 performance standards. All documents shall follow DISA’s standard formats/templates, unless otherwise approved by COR/ACOR.

The contractor shall maintain awareness of evolving developments in the areas supported. The contractor shall provide recommendations on ways to enhance the effectiveness of activities through the application of such developments. The contractor shall identify and recommend actions to minimize risk in support of the mission and apply industry and engineering best practices as much as possible. The contractor shall suggest innovations that improve performance. The contractor shall identify innovative approaches and technical solutions that streamline delivery and/or improve operational efficiency.

The Government is aware that evolving or changing mission requirements may present challenges that prove difficult to initially define and may require the employment of sophisticated techniques and innovative solutions. Personnel shall stay abreast of new methodologies, databases and tools in order to assess their applicability with PEST and subsequent risks or benefits they may present to the Government. Support personnel will also be required to make recommendations which demonstrate mature judgment in anticipating and solving complex problems. The contractor shall assess the implications of existing and projected technological advances, as well as being able to evaluate the impact of new and innovative acquisition and technical strategies. These requirements encompass a comprehensive knowledge of statistical techniques in the areas of applied mathematical, economic, and engineering disciplines.

6.1 Task 1 – Management Support Tasks.

6.1.1 Subtask 1 – Task Management. The contractor shall ensure all tasks are completed according to the agreed upon schedule and quality performance for this task orders. The contractor shall prepare a Task Order Management Plan, describing the technical approach, organizational resources, and management controls to be employed to meet the performance, and schedule requirements. The contractor’s task order management plan shall provide the planning, direction, coordination, and control necessary for effective and efficient accomplishment of all requirements contained in this task order PWS. The contractor’s task order management processes shall verify and validate the level of effort and deliverables for each task. The contractor shall provide a Monthly Status Report (MSR) throughout the life cycle of this task order to communicate the status of tasks performed during the month and/or successful completion of tasks, as applicable to the phase of the task order. The MSR shall include the status of active tasks, quality and performance results, project/milestone schedules, level of funds and other items requested by the Government or that the contractor views as noteworthy information for the Government.

In addition to the overall task management of this requirement, the contractor shall provide task management support across NSIO Divisions within the NLCC Directorates. This support will include the overall management of the specific tasks and ensuring that the technical solutions and schedules in the tasks are implemented in a timely manner. The contractor shall provide support to the Government in working the NSIO programs and projects that the Government Program Managers are managing. The management tasks performed and information derived at this level shall be communicated to the lead task manager and consolidated into the required deliverables.

The primary place of performance for work performed under this subtask is Fort Meade, MD.

6.1.1.1 Contractor Personnel, Disciplines, and Specialties. The contractor shall ensure that sufficient staffing and appropriately skilled personnel are employed in the execution of this PWS. Throughout the PWS there is mention of Key and Non-Key Personnel. Please refer to Section 14: Key Personnel for additional information regarding Key Personnel requirements. In addition, please refer to Section 15. d. and the Skill Summary Matrix 11/07/2017 Ver. 1 for Experience and Educational Requirements for Key and Non-Key Personnel.

6.1.1.2 Task Order Transition. Prior to task order expiration, or in the event of a contractual change or turnover, the contractor shall provide at a minimum all materials and support necessary to accomplish a seamless and expeditious transition of the tasks identified in this PWS to the incoming contractor. The transition shall include digital and hard copies of the following: all in-progress working files; historical files for all tasks; product portfolio; briefings for incoming personnel; timelines and standards for completion; and final phase out meeting with Government, incumbent and the new contractor.

Deliverables: Task Order Management Plan Monthly Status Reports Work Breakdown Structure Briefing Materials Transition Plan and all applicable files

6.1.2 Subtask 2 – Knowledge Management/ Management Support. The contractor shall support the organization’s operational business processes and systems by strengthening links between knowledge sharing and the information systems, and improving integration among information systems in the organization to facilitate seamless exchange of information across systems. The contractor shall develop and maintain website pages, via SharePoint for three different systems that shall be customized in accordance with DISA policy and facilitate knowledge sharing and improve information integration. These systems include the Non-Secure Internet Protocol Router Network (NIPRNet), Joint Worldwide Intelligence Communications System (JWICS), and one additional classified network. The contractor shall provide technical and functional support to ensure an integrated approach of identifying, capturing, evaluating, retrieving, and exchanging DISA’s information assets internally. The contractor shall develop an e-library for the above three different systems to house policies, processes, and procedures for retrieval as needed. The contractor shall provide instruction on how to properly navigate knowledge management tools and access the data and documents that they have uploaded and organized. This information will include organizational structure and naming conventions. The contractor shall monitor the knowledge sharing program, including external benchmarking programs/opportunities and control documents within the organization. The contractor shall draft and edit reports, briefings, and Alternatives of Analysis, which are reports of findings and suggestions for different approaches. In addition, the contractor shall interface with COR/ACOR to coordinate meetings, maintain logs, records and file management. The contractor shall prepare and/or maintain systems, programming and operations documentation, procedures and methods, including user reference manuals. The primary place of performance for work performed under this subtask is Fort Meade.

6.1.3 Subtask 3 – Task Management Project Schedule. The contractor shall support the Government with Integrated Master Schedules that are developed and maintained for multiple projects. This will require the contractor to work with mission partners and task owners to determine the sequencing and duration of activities. The contractor shall develop network diagrams to determine critical paths and critical path activities. The contractor shall evaluate “what if” scenarios to determine how the project schedules are affected and review these project schedules and brief management on slippage or potential slippage. The contractor shall attend pertinent project meetings and proactively validate schedule milestones, document engineering constraints and/or slippage or acceleration of work activities while analyzing emerging risk items and performance trends for root causes. The contractor shall provide support to the Government with five to seven projects or programs. The contractor shall support the development and the sustainment of appropriate project Work Breakdown Structures (WBS). The primary place of performance for work performed under this subtask is Fort Meade.

6.1.4 Subtask 4 – Cost, Budgeting, Planning, and Execution Support. The functions described within this task shall support three projects with the organization. The contractor shall provide support to the Government in preparing issue papers to articulate the needs of the organization, analyzing future year organizational budget requirements and reprogramming future year funds to match organizational needs. The contractor shall provide support to the Government in preparing reclaims in defense of the organization’s budget against Congressional or DoD marks, as well as preparing budget exhibits for congressional justification of the budget. The contractor shall support all phases of the Planning, Programming, Budget & Execution (PPBE) system to include Program Objective Memorandum (POM) submissions, Program Review (PR) Memoranda, issue papers, reclaims, and coordinate efforts with DISA financial management and comptroller offices. The contractor shall provide technical and functional support required for effective and efficient financial analysis, tracking, trends and management. The contractor may only provide advice, alternatives, analysis, and technical input, and all decisions and policy judgments, including budget and program priorities must be made by Government personnel only.

The contractor shall develop, track, and monitor (using DISA Resource management template documentation) Military Interdepartmental Purchase Requests (MIPR) documentation. The contractor shall provide technical and functional support in all phases of the PPBE system and provide technical and functional support in the preparation and defense of reclaims. The contractor shall provide support to the Government in evaluating resource availability and allocation, prepare and monitor budget execution, and analyze the execution against the organization’s budget. The contractor shall provide support to the Government in areas of the current year execution budget, billing, reporting and financial management while supporting the area of the Life Cycle Cost Estimate (LCCE), and Program Objective Memorandum (POM) budget as required.

The contractor shall provide technical and functional support required for effective and efficient cost analysis, tracking, trends and management. The contractor shall develop products using government furnished MS Office products that track and monitor cost, schedule, and performance risks for acquisition programs, projects, and requirements.

The primary places of performance for work performed under this task are Fort Meade and Warrenton, VA.

MIPR Tracking Spreadsheets Briefing Materials

6.1.5 Subtask 5 – Acquisition Support. In support of the existing NSIO Portfolio of Services the contractor shall provide support in the acquisition disciplines to complete and/or update the statutory, regulatory, and other products identified in DoD 5000 series instructions, the Defense Acquisition Guidebook, Federal Acquisition Regulation (FAR), and other DoD/DISA guidelines. The contractor shall generate, review and update both formal and informal acquisition documents similar to and including: the Clinger Cohen Act, Life Cycle Cost Estimate, and Acquisition Strategy. During the course of preparation for program acquisition activities there are key acquisition documents that will be under varying levels of preparation, update, or review. Upon notification by the COR, the contractor shall support documentation preparation, coordination, and control. The contractor shall support the analysis of program schedules, identifying risks and evaluation/recommending proposed solutions. The contractor shall provide timely and comprehensive acquisition support as required. The contractor shall plan to provide support to the Government in the preparation of approximately ten to twenty (annually) acquisition documentations in accordance with DITCO guidelines. The contractor shall be required to interface regularly with NSIO personnel as well as with other government offices internal and external to DISA. The contractor shall be required to extract information from multiple documents as well as provide substantive input to others. The contractor shall be familiar with the overall program objectives and DoD Milestone Documents as mentioned previously in accordance with the DoD 5000 series Instructions. The contractor may only provide advice, alternatives, analysis, and technical input, and all decisions and policy judgments, including determining what supplies and services are to be acquired and approving acquisition documents, must be made by Government personnel only. The primary places of performance for work performed under this task are Fort Meade.

6.1.6 Subtask 6 – Configuration Management. The contractor shall support the Government in developing, maintaining, categorizing, and integrating with Configuration Management tool(s) and periodically update all technical data and documentation (e.g., user manuals, technical manuals, etc.). The contractor shall ensure all software, hardware, and other infrastructure components constituting the Government IT Infrastructure Common Operating Environment (COE) shall be developed and maintained utilizing the Government configuration management (CM) processes and procedures. The contractor shall provide support to the Government, CM Manager and associate staff by conducting CM activities such as planning, managing, technical reviews, etc. The contractor shall support configuration control boards, develop and support configuration management plans, support writing and implementing business processes across four different projects and programs. The contractor shall maintain configuration control of the functional and allocated baselines, placing system (hardware and/or software) requirements documentation under configuration control, placing test procedures under CM control, apply CM control to all installation procedures and apply CM control to all contractual deliverables. The primary place of performance for work performed under this subtask is Fort Meade.

Deliverables: Configuration Management Plans (CMP)

6.1.7 Subtask 7 – Planning Support. The contractor shall develop or provide support to the Government in the development of project and program documentation across four different program/projects. This includes coordinating and staffing documents for approval. The contractor shall develop or support the development of technical documents to support up to four projects/program for the Government.

The contractor shall provide program analysis support, analysis and research into exceptionally complex problems and processes relating to the subject matter. The program analysis support shall consist of supporting the Government with analyzing customer agencies requirements. The contractor shall provide management support to the NSIO in support of the specific program or project(s) and insuring that the technical solutions and schedules in the program or project are implemented in a timely manner. The contractor shall perform enterprise wide horizontal integration planning and interfaces to other functional systems. The contractor shall serve as technical expert on executive-level project teams providing technical direction, interpretation and alternatives. The contractor shall apply advanced technical principles, theories, and concepts and contribute to the development of new principles and concepts. The contractor shall support the Government with the analysis of the organization’s programs to support the development of more efficient systems, reducing cost, improving programs or implementing new programs.

The primary place of performance for work performed under this subtask is Fort Meade.

6.1.8 Subtask 8 – Strategic Planning and Enterprise IT Policy Support. The contractor shall review, develop and consolidate strategic plans (overarching facilities, information technology, communications, data, audio, visual, etc.), concepts of operations, and the communications architecture and modernization strategy. In support of strategic planning, the contractor shall provide technical and programmatic support for review, analysis and coordination of processes, policy, doctrine, directives, regulations and implementation of instructions in execution of those strategic plans across the NSIO portfolio and in support of the NSIO office division chief and deputy. The NSIO portfolio consists of seven divisions. The primary place of performance for work performed under this subtask is Fort Meade.

Deliverables: Program Management Recommendation Reports

6.2 Task 2 – Engineering Tasks.

6.2.1 Telecommunication Network- Optical Engineering Support. The contractor shall provide support to the Government in designing, implementing, testing and maintaining of the optical telecommunication networks across four to five different project/programs. This task is considered mission essential and personnel who perform this task are required to support the Government during times of natural disaster, war, and other times of crisis. The contractor shall provide planning, architecture, engineering, integration and implementation input to optical network project and program. The contractor shall provide implementation and operational support for environments containing fiber optic transmission system equipment (e.g., terminal optical line amplifiers and optical add/drop multiplexers and outside plant equipment to include fiber optic patch panels). The contractor shall provide extensive knowledge in DISA/DODIN infrastructure and enterprise services. The contractor shall conduct site surveys, develop engineering design packages, and draw up presentations to include Analyses of Alternatives, white papers and other engineering documentation in support of tasks. The primary place of performance for work performed under this subtask is Fort Meade.

6.2.2 IP Network Engineering Support. The contractor shall provide support to the Government in designing, implementing, testing and maintaining telecommunication networks across four to five different project/programs. The telecommunication networks may include local area network (LAN) or wide area network technology (WAN). The contractor shall develop overarching network strategy and architecture, conduct Analyses of Alternatives (AoA). The architecture may include Internet Protocol (IP), LAN, Virtual (V-LAN), WAN, Multi-Protocol Label Switching (MPLS), Virtual Private Network (VPN), Wave Division Multiplexing (WDM), etc. The contractor shall derive technical network requirements from stakeholders’ requirements. The primary place of performance for work performed under this subtask is Fort Meade.

6.2.3 Network Management Engineering Support. The contractor shall provide support to the Government in designing, implementing, testing and maintaining network management networks across four to five different project/programs. The contractor shall design network management systems or networks for various types of network applications. The design shall include hardware, software, protocols, cybersecurity, redundancy, timing and synchronization, modeling, configuration management, etc. The contractor shall implement or support the implementation of network management systems or networks. The primary place of performance for work performed under this subtask is Fort Meade.

6.2.4 Consultant Engineering Support. The contractor shall provide support to the Government in designing, implementing, testing and maintaining telecommunication networks solutions for telecommunication network across four to five different project/programs. The contractor shall apply knowledge to high-level analysis, collections, assessment, design, development, modeling, simulation, integration, installation, documentation and implementation. The contractor shall provide strategic planning of large projects or a significant segment of a strategic planning portion of a large complex project. The contractor shall have knowledge of Optical Transmission Networks (OTN), Synchronous Optical Networking (SONET), Synchronous Digital Hierarchy (SDH), Time Division Multiplexing (TDM), Dense Wave Division Multiplexing (DWDM), physical characteristics of Single Mode and Multi-mode fiber optic cables, Erbium Doped Amplifiers (EDFA), Optical Regenerators and the physics needed to understand data transmission over lambdas across the optical spectrum. The primary place of performance for work performed under this subtask is Fort Meade.

6.2.5 Network Operations Engineering Support. The contractor shall provide support to the Government in designing, implementing, testing and maintaining network operations solutions for telecommunication network across four to five different project/programs. This task is considered mission essential and personnel who perform this task are required to support the Government during times of natural disaster, war, and other times of crisis. The contractor shall perform technical analysis of operations, perform root cause analysis, track performance metrics and identify systemic problems and report these back to the customer in a logical format that can be understood at the senior level. The primary place of performance for work performed under this subtask is Fort Meade.

6.2.6 Test and Evaluation Engineering Support. The contractor shall provide overall support to Test and Evaluation activities including development and operational test and evaluation for communications systems across four to five different project/programs. The contractor shall provide technical support to early operational assessments, developmental testing, operational testing and evaluation of communication equipment, systems and capability in the laboratory or in the field. The contractor shall also be required to participate in and witness factory testing of communication systems. The contractor shall develop test and evaluation concepts, strategies and plans, including the data collection, reduction and analysis process and procedures. The contractor shall develop test and evaluation goals, objectives and pass/fail criteria to determine how well communication systems meet key performance parameters. The contractor shall also conduct the test and evaluation of communications equipment, systems and capabilities according to test plans. The contractor shall conduct integration test and evaluations between communications systems. The contractor shall also be able to review and evaluate completed test results to determine if items/systems under test are fit for operational service. The primary place of performance for work performed under this subtask is Fort Meade.

6.2.7 Systems Engineering Support. The contractor shall support the Government by performing a wide range of systems engineering tasks (e.g., network, communications, data engineering, system integration, etc.) across four to five different project/programs. This task is considered mission essential and personnel who perform this task are required to support the Government during times of natural disaster, war, and other times of crisis. This task shall entail business case development, Joint Capabilities Integration and Development System (JCIDS) type Functional Area and Functional Need analyses, System Engineering feasibility and trade studies, Statement of Requirement development, system trade-off analysis, PPBE Communication and Architecture Modernization Strategy (CAMS) and strategic alignment analysis, and technology forecast. The contractor shall identify and quantify system goals, create alternative system design concepts, perform design trades, propose the best design, verify design is properly built and integrated, and conduct post implementation assessment of how well the system meets (or met) the published goals. The contractor shall provide materials to support decision gates for life cycle stages. The contractor shall participate in the development and integration of Agency-wide Command and Control or C2 capabilities; including promotion of C2 related acquisition partnerships, prototypes, metrics, and analysis techniques. The contractor shall recommend, develop and document appropriate integration strategy(ies) which consider all integration management components in order to recommend a standard/common/migration system, provide cost and economic analyses supporting the migration strategy, identify and evaluate risks inherent with the proposed strategy and provide a tentative implementation plan. The primary place of performance for work performed under this subtask is Fort Meade.

6.2.8 Network Modeling / Enterprise Architecture Support. The contractor shall provide support to the Government in network modeling and the enterprise architecture across four to five different project/programs. The contractor shall provide support to the Government in developing network models and enterprise architectures that align with the organization’s overall vision and strategic plan and ensure interoperability among IT systems. This includes modeling to support operations engineering efforts that require trigger systems to signal the increase or decrease of key backbone circuits and trunks. This also includes modeling for the purpose of best fit methodology: will this circuit fit best on trunk X or trunk Y. Right alongside this effort is the requirement to model for what-if scenarios: if I increase my network by adding capacity in one part, will it negatively or positively affect my network in another part. The primary place of performance for work performed under this subtask is Fort Meade.

Network Management Plans

6.3 Task 3 – Cybersecurity and Security Tasks.

6.3.1 Subtask 1 – Personnel Security. The contractor shall review the SAP/SCI nomination packages for completeness, accuracy and to confirm the candidate meets the meets the prerequisites for SAP access in accordance with Special Access Programs (SAP) Security Manual; Personnel Security; DoD 5205.07-M Vol2. For SCI access in accordance with Intelligence Community Directive 704, Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmental Information and Other Controlled Access Program Information; DoD Manual 5105.21, Volume 1, Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Information and Information Systems Security; DoD Manual 5105.21, Volume 3, Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Personnel Security, Industrial Security and Special Activities; DoD 5220.22-R, Industrial Security Regulation. The contractor shall review/track/maintain SCI nominations. The contractor shall update and maintain JPAS, Scattered Castles and local personnel security databases while providing a working knowledge of DoDD 5205.07. The contractor shall provide support across four to five different projects and programs. This task is considered mission essential and personnel who perform this task are required to support the Government during times of natural disaster, war, and other times of crisis. The primary places of performance for work performed under this subtask is Fort Meade, MD.

6.3.2 Subtask 2 - Physical Security. The contractor shall develop a comprehensive security education and awareness program. The contractor shall provide physical security support which includes providing physical security planning, design and advice on government and contractor facilities ability to store, process and discuss classified information in accordance with the following: DoD Manual 5105.21, Volume 3, Sensitive Compartmented Information (SCI) Administrative Security Manual: Administration of Personnel Security, Industrial Security and Special Activities; DoD Special Access Program (SAP) Security Manual: Physical Security; DoD O-5205.07, Vol 3; Intelligence Community Directive 705,; DoD Manual 5105.21 Volume 2, Sensitive Compartmented Information (SCI) Administrative Security manual: Administration of Physical Security, Visitor Control and Technical Security; Federal Specification FF-L 2740B, Locks, Combinations, Electromechanical; DoD Instruction 5240.05, Technical Surveillance Countermeasure (TSCM). The contractor shall evaluate Government and industrial facility plans for physical security accreditation. The contractor shall prepare correspondence for submission to higher authorities that identify discrepancies in submitted plans or approve/accredit the facility. All correspondence will be prepared in accordance with the applicable security classification guide and in the Government supplied format. The contractor shall develop physical security operating procedures, inspection checklists, required by DoD, SCI and SAP physical security and TEMPEST requirements. The primary place of performance for work performed under this subtask is Fort Meade, MD.

6.3.3 Subtask 3 - Information System Security Management. This support contractor’s task is considered mission essential and personnel who perform this task are required to support the Government during times of natural disaster, war, and other times of crisis. The contractor shall perform cybersecurity (monitor, audit, analyze) enterprise information systems support for events to include unauthorized access, insider threat, hacking or penetration attempts from known threats, identifying presence of unauthorized software or malicious code on both classified and unclassified networks, such as Active Directory, firewalls, intrusion detection systems, log files, and remote access servers. The contractor shall take necessary actions to proactively address issues and guide support personnel to preclude system failures or disruptions; identifies and addresses vulnerable computers that may be used in exploitation, data infiltration, and data compromise. The contractor shall communicate effectively both orally and in writing. While assisting with the responsibilities of the position of the ISSM, the contractor shall, as needed, support the ISSM in maintaining a formal DoDIIS security program; support the ISSM in maintaining an ISSM program SOP that shall be reviewed/updated annually; Implement and enforce AIS security policies; and oversee all ISSOs to ensure they follow established AIS policies and procedures. The contractor shall ensure ISSM/ISSO review weekly bulletins and advisories that impact security of site information systems to include AFNOSC-NSD, ACERT, NAVCIRT, IAVA, and DISA ASSIST bulletins. The contractor shall ensure that periodic testing (monthly for PL-5 systems) is conducted to evaluate the security posture of the AISs by employing various intrusion/attack detections and monitoring tools (shared responsibility with ISSOs). The contractor shall support the ISSM to maintain, as required by the AO Rep/SCA, a repository for all system assessment and authorization documentation and modifications. The contractor shall coordinate and support AIS security inspections, tests, and reviews. The contractor must be aware of the policies, comply with policies, and if so authorized, enforce the policies. The contractor shall provide custom support to address unique computer security requirements. The primary place of performance for work performed under this subtask is Fort Meade, MD.

6.3.4 Subtask 4 - Program Protection / Program Security Support. The contractor shall integrate and synchronize the overall protection effort by building and sustaining relationships with program protection staff – Program Manager (PM), Program Security Officer (PSO), Leads for Information Systems Security, Cybersecurity, Physical Security, and Personnel Security and Counterintelligence agents (all government personnel). The contractor shall create a plan for an integrated security environment that will protect information throughout the life cycle of the program. The contractor shall codify protection decisions, procedures and countermeasures in a program protection plan and support the Government Program Security Officer (PSO) in the management and execution of acquisition and operational program security as it applies to program protection and industrial security oversight of industry location/personnel involved in the applicable acquisition efforts. The contractor shall develop/update security classification guides during all phases of an acquisition effort. The contractor shall review proposed industry interfaces, standard and enhanced OPSEC procedures. The contractor shall analyze threats to Critical Program Information (CPI) and other sensitive information and conduct vulnerability assessments and risk analyses. The primary place of performance for work performed under this subtask is Fort Meade, MD.

6.3.5 Subtask 5 – Cybersecurity/Risk Management. The senior support contractor shall establish applicable Cybersecurity/Risk Management (Cybersecurity/RM) engineering and configuration control plans, policies, and procedures for the execution of network activities. The contractor shall analyze Cybersecurity/RM requirements and implementation of required policies, directives, and guidance for certification and accreditation (C&A) towards Risk Management Framework Assessment and Authorization. The contractor will provide support across four to five different projects/ programs. This task is considered mission essential and personnel who perform this task are required to support the Government during times of natural disaster, war, and other times of crisis. The contractor shall analyze and develop strategies for administration of a network consistent with Cybersecurity/RM requirements. The contractor shall coordinate with the SCA and ISSM to ensure all applicable security controls are compliant or addressed and review weekly bulletins and advisories, including CERT bulletins that impact security of site IS to include, US-CERT, AFCERT, ACERT, IAVA and DISA ASSIST bulletins. The contractor shall support applying NIST/Risk Management Framework polices, standards, guides, overlays to programs within the NSIO portfolio. The contractor shall support identifying, mitigating and correcting known and unknown vulnerabilities in current and planned system architectures and capabilities. The contractor shall maintain accreditation baselines of information systems according to statements of accreditation and ensure compliance with iDoD information system security procedures and practices. The contractor shall ensure that information systems under their cognizance are operated, managed, secured, IAW internal security policies and procedures. The contractor shall provide consultation on Supply Chain Risk Management (SCRM), Insider Threat and Computer Defense Service Provider (CDSP) implementation. The primary place of performance for work performed under this subtask is Fort Meade, MD.

The contractor shall ensure systems are operated, maintained and disposed of in accordance with internal security policies and practices outlined in the security plan as well as OSHA. The contractor shall support the development and maintenance of all SSPs/Security Control Traceability Matrix/Security Assessment Report (SCTM/SARs).

6.3.6 Subtask 6 – Special Security Support. The contractor shall perform duties involved with Sensitive Compartmented Information security as a Special Security Representative (SSR) involving the protection of intelligence sources or methods/intelligence systems and means of collection, verifying/obtaining individual’s eligibility to access SCI and with the physical security of Sensitive Compartmented Information Facilities (SCIFs). The contractor will provide support across four or five different projects/programs. The contractor shall receive and respond to requests for SCI eligibility, recertification, and special purpose/interim SCI accesses, insuring validity of the requests. The contractor shall process SCI eligibility determinations, special purpose access and compelling need actions with Central Adjudication Facilities (CAF) prior to indoctrination and review and act upon authorities to indoctrinate SCI personnel, including conducting pre-screening interviews and indoctrination briefings. The contractor shall send and receive SCI visit requests and code badges for SCIF access. The contractor shall ensure all assigned personnel meet/maintain the appropriate security clearance requirements in accordance with Intelligence Community Directive 704, “Personnel Security Standards and Procedures Governing Eligibility for Access to Sensitive Compartmented Information and Other Controlled Access Program Information. . The contractor shall provide continuous training and guidance in all areas of SCI security; including local procedures, Operations Security (OPSEC), Communications Security (COMSEC), Security Awareness, handling/safeguarding/marking classified material/information, foreign travel requirements, entry procedures, escort procedures, document control procedures, security incident/violation reporting procedures, and classification review/guidance. The contractor shall support maintaining accreditation for SCI Facilities (SCIFs) and SCI systems in accordance withIntelligence Community Directive 705, “Sensitive Compartmented Information Facilities. The primary places of performance for work performed under this subtask are Virginia Beach, VA.

6.3.7 Subtask 7- Special Security Support- OCONUS Support. The Government anticipates a future need for the support described above in subtask 6.3.6 to be performed in the European Area of Responsibility (AOR) and Pacific Area of Responsibility (AOR). Due to the current uncertainty of these requirements the Government plans to use the SURGE CLIN to exercise these additional tasks once the Government becomes aware of the exact requirements for the various potential OCONUS support.

7. Performance Standards:

deliverables shall be delivered on time and IAW COR per the PWS.

8. Incentives: The Government will positively and/or negatively review the contractor’s performance based on the success or failure in meeting quality assurance surveillance plan objectives. The Government will make determinations for option period awards based on task order performance, as measured by the surveillance plan. The contractor is incentivized to earn favorable Government reviews to support continuation of DISA work and to support contract awards with other Government agencies seeking DISA’s input on the contractor’s past performance and the Contract Performance Assessment Reporting System (CPARS).

9. Place of Performance: Primary place of performance for services acquired under this task order is at the DISA's facilities at Ft. Meade, MD, a Government agency in Warrenton, VA, a Government Agency in Virginia Beach, VA; a Government agency in the European AOR and a Government agency in the Pacific AOR and other Government agencies. CONUS and OCONUS travel to other facilities will be required. Coordination meetings, conferences and designated tasks will be conducted at other locations specified by DISA, as required.

Alternate Place of Performance - Contingency Only. As determined by the Contracting Officer’s Representative (COR), contractor employees may be required to work at an alternate place of performance (e.g., home, the contractor's facility, or another approved activity within the local travel area) in cases of unforeseen conditions or contingencies (e.g., pandemic conditions, exercises, government closure due to inclement weather, etc.). Non-emergency/non-essential contractors should not report to a closed government facility. Contractor shall prepare all deliverables and other task order documentation utilizing contractor resources. To the extent possible, the contractor shall use best efforts to provide the same level of support as stated in the PWS. In the event the services are impacted, reduced, compromised, etc., the Contracting Officer or the contractor may request an equitable adjustment pursuant to the Changes clause of the contract.

9.1 Travel: Travel in and around the primary place of performance may be required throughout the period of performance. Additional travel within CONUS or OCONUS may be required to support the requirements of this PWS.

9.1.1 Local Travel. Travel will be considered local travel within 50 miles of the individual’s main place of performance/duty station. Local travel will not be reimbursed.

9.1.2 Stateside Travel. In coordination with the COR or ACOR, the contractor may be required to support activities outside the National Capital Region (NCR) or more than 50 miles outside an individual’s main place of performance. The contractor shall inform the COR, in writing, of the estimated total travel costs prior to any such travel.