Attachment_4_-_Task_4___Front_Office_and_PD-DASD(SE)_-_PWS.pdf

Amendment 5

OFFICE OF THE DEPUTY ASSISTANT SECRETARY OF DEFENSE FOR SYSTEMS

ENGINEERING

Performance Work Statement in support of

The Principal Deputy and ODASD(SE) Front Office

22 February 2016 Amendment 5

Contents 1 Support to DASD(SE) & PD, DASD(SE) Functions

2 Defense Industrial Base (DIB) Cyber Security and Information Assurance (IA)

3 Systems Engineering Research Center Administration

4 Continuing Process Improvement

5 MDAP / MAIS Database

6 Technical Editing & Graphics Support

7 GAO, IG and Congressional

8 Outreach

8.1 DASD(SE) Website and Intranet

8.2 Conferences

8.3 SE Forum

8.4 Publications

8.5 DASD(SE) Webinars

8.6 SE Excellence Awards

9 Special/Other Requirements

9.1 Data Rights

9.2 Security

9.3 Work Location

9.4 Training

Support to DASD(SE) and PD, DASD(SE)

Performance Work Statement

Professional Engineering Services for the Office of the Deputy Assistant Secretary of Defense for Systems Engineering and the

Principal Deputy Assistant Secretary of Defense for Systems Engineering

1 Support to DASD(SE) & PD, DASD(SE) Functions The contractor shall be directly responsible for ensuring the accuracy, timeliness, and completion of all requirements under this Performance Work Statement (PWS). The contractor shall provide professional engineering services to assist the DASD(SE) in execution of Defense Industrial Base Cyber Security and Information Assurance, the Systems Engineering Research Center, the Joint Federated Assurance Center, and Front Office support functions. The contractor shall establish common processes and procedures for the execution of all work under this PWS, train all contractor personnel in those processes and procedures, and enforce compliance.

2 Defense Industrial Base (DIB) Cyber Security and Information Assurance (IA)

The Joint Analysis Capability provides specialized analytical services and support services to assist the Government in protection of critical technologies from foreign exploitation. The Contractor shall work with other Departments and Agencies, including counterintelligence and law enforcement, to successfully identify and protect critical technologies from foreign exploitation. The Contractor shall provide specialized analytic and support services in the following areas:

• Support the management of the day to day execution of cyber intrusion damage assessments, policy development, inter-agency coordination, and process development conducted on-site at the Defense Cyber Crime Center, within the Office of DASD (Systems Engineering), and at other facilities as required in the local metropolitan area.

• Develop draft policy and issuance documents establishing damage and risk assessment procedures for analyzing compromised technical information within the Department of Defense in coordination with the Military Services and other OSD offices, agencies and activities as appropriate.

• Coordinate AT&L damage and risk assessment status / information internally within AT&L and ASD(R&E), with key stakeholders in the intelligence and counterintelligence communities, with other OSD staff offices, with other Federal Agencies playing key roles in damage assessment execution, planning and response.

• Provide Subject Matter Experts (SMEs) to assist in the execution of Intra-government / Inter-agency coordination for process agreements, report deadlines, resource requirements, analysis support, etc.

• Develop recommended budget and resource estimates for conducting damage assessments.

• Review and provide comments on key acquisition, cyber security and Defense Industrial Base related documents during formal staffing to ensure synchronization with current cyber security and acquisition policy and process.

• Coordinate meetings and information exchanges with key points of contact in the participating DIB companies and across the various OSD stakeholders and participants. Establish agendas, desired outcomes, and coordinate presentations with all government and industry stakeholders.

• Analyze potentially compromised data sets for key defense information that could provide an adversary with the capability to; develop countermeasures to the system/platform/technology; provide potentially damaging insight into defense plans and operations; impact U.S. political, military or economic policy; or shorten development of a similar adversary systems, platforms, or technologies.

• Conduct technical liaison and interaction with forensic examiners and cyber security analysts in order to assess the requirement for conducting damage assessments related to specific cyber intrusion incidents.

• Review all written materials requested for release from the security facility for adherence to current security, policy, and legal requirements.

• Provide daily interface with the numerous companies participating in damage assessments to ensure understanding of the case requirements, the overall process, additional requirements developed during the analysis, and requests for additional information related to the compromised data.

• Review law enforcement and counterintelligence reports of cyber intrusions in order to determine requirements for damage assessments, coordinate with the appropriate investigative agency, determine applicable defense agency or Service equities involved, and refer to the appropriate activity for action. Track ongoing cases and Service/Agency reporting on analysis outcomes.

• Analyze the results of past damage assessments and other reviews of compromised defense information for trend analysis.

• Provide research, analyses, evaluations, studies, assessments and other activities to support OUSD(AT&L) decision-making based on results of specific damage and risk assessments and analysis of other indications of compromised defense information.

• Execute daily coordination with the Defense Cyber Crime Center, and at other facilities as required in the local metropolitan area in order to maintain awareness of all reported cyber intrusions, their technical characteristics, and the need for initiation of damage assessments.

• Conduct open source analysis and, as feasible, interagency coordination on nominated damage and risk assessment cases, developing a formal report for distribution to OUSD(AT&L) and DoD CIO leadership requesting elevation of requests for release of compromised material to the Government.

• Oversee and coordinate for subject matter expert participation in damage assessments. Provide initial training on the analysis tools and the administrative requirements associated with the damage and risk assessments.

NOTE: This effort does not begin under this task until June 2016. Contractors assigned to this task will require a TS/SCI clearance

3 Systems Engineering Research Center Administration The Systems Engineering Research Center is a DoD-sponsored University Affiliated Research Center which conducts research in various areas of SE as needed. DASD(SE) is the primary sponsor of the SERC. The contractor shall support DASD(SE) in administering the activities of the SERC, to include activities needed to plan and execute specific research tasks, as well as activities needed to run the SERC as whole.

Monthly, the contractor shall support the DASD(SE) SERC Government Program Manager (GPM) by reviewing the SERC’s financial and technical performance statements for accuracy and completeness, and to address any shortcomings. The contractor shall support the SERC GPM by tracking distribution of the SERC’s monthly statements to the sponsors of specific research tasks and resolve any questions that arise.

The contractor shall support the GPM by working with the potential and current sponsors of SE research to properly scope the new and proposed changes to research requirements to ensure consistency with the SERC research strategy, as well as funding and schedule needs.

The contractor shall assist the GPM in developing statements of work for research tasks orders, independent cost estimates and technical evaluation of proposals. The contractor shall track the status of funding documents used to sponsor work at the SERC. The contractor shall administer the contract addenda needed to perform classified research on the SERC contract.

The contractor shall generate status reports showing the period of performance, deliverables, cost and schedule performance, as well as the progress toward awarding task orders. The contractor shall develop weekly activity reports that document significant SERC activities.

The contractor shall review interim and final products of specific research tasks for accuracy and completeness, supporting the GPM by tracking any shortfalls. The contractor shall submit research task products to be reviewed for public release. The contractor shall maintain a filing system for SERC products.

The contractor shall develop briefings that provide an overview of the SERC capabilities and current status. The contractor shall participate in SERC Government Program Manager meetings and weekly SERC teleconferences.

The contractor shall review proposed changes to the SERC website and drafts of the SERC Annual Report, providing recommended changes as needed. The contractor shall provide administrative support for the SERC Executive Advisory Board and the SERC Annual Research Review, to include preparing read-ahead packages, distributing invitations, taking minutes, recording action items, as well as developing agendas and briefings for the meetings.

The contractor shall review the yearly updates to the SERC Management Plan and SERC Research Strategy, recommending any necessary changes.

Once a year, the contractor shall identify and review potential research tasks for DASD(SE) sponsorship, developing briefings to with sufficient detail to allow DASD(SE) to decide whether or not to sponsor specific research tasks.

DASD(SE) anticipates establishing 20 new research tasks over the coming year, with 22-28 research tasks active at one time. DASD(SE) anticipates the need to develop six SERC capability and current status briefings. DASD(SE) anticipates one significant change to the SERC website over the coming year.

4 Continuing Process Improvement The contractor shall improve organizational effectiveness and efficiency through application of continuous Process Improvement (CPI). The contractor shall certify government and contractor SE workforce as Lean Six Sigma (LSS) Green Belts through approved LSS training and instructor led coursework and projects. The contractor shall report CPI statistics monthly to the DoD CPI/Lean Six Sigma Office. The contractor shall provide LSS Green Belt training tailored to the needs of the DASD(SE) and track progress in applying CPI tenets through individual improvement projects.

The contractor shall support a government led Systems Engineering Process Group (SEPG) as an internal review mechanism to oversee organizational processes, to ensure the processes are properly documented, and to act as a forum to review business metrics.

DASD(SE) has approximately 25 documented processes and executes an average of 4 CPI projects per year.

The contractor shall maintain a threshold of 75% of its workforce certified as Green Belt or higher with an objective of 90%.

The contractor shall lead and/or facilitate individual improvement projects as DASD(SE) government, IPA,TSA, and contractor staff members apply CPI tenets to specific problems.

The contractor shall coordinate periodic presentations to communicate the results of improvement projects across DASD(SE). Presentations may be formal or informal (Brown Bags) training sessions. The contractor should plan an average of 15 presentations per year.

The contractor shall conduct Lean Six Sigma, Green Belt level training courses for government, IPA,TSA, and contractor personnel supporting DASD(SE) as required (historically 1 or 2 classes are needed depending on the percentage of current LSS Green belt holders).

5 MDAP / MAIS Database The contactor shall maintain a current database of data on government, contractor, and other personnel assigned to or supporting DASD(SE). Data collection, storage and reporting shall comply with the Privacy Act and DoD implementing regulations and guidance. The Contractor shall prepare and distribute required reports and rosters including but not limited to phone rosters by facility and organization, e-mail lists, recall rosters, confidential emergency contact data, lists of personnel occupying specific space/facilities, security clearance rosters, etc. The contractor shall develop and maintain a comprehensive database of personnel assignments, function, and skills for all personnel (government, IPA,TSA, contractor) supporting DASD(SE). The contractor shall also maintain a database of MDAP/MAIS program milestones, acquisition document status, program POC’s, past and future SE reviews, the SE review schedule, and any other program data that relates to DASD(SE) office engagement with programs. The contractor shall collect, maintain and provide updates to program activity charts, prepare and provide weekly updates on program activities and review schedules for weekly reports. The contractor shall manage all data-calls to DASD(SE) staff to include: program data requests, updates to briefing charts reflecting program and personnel status, internal and external information requests, etc.

6 Technical Editing & Graphics Support The contractor shall provide a technical editor with strong engineering or technical background experience and the ability to assess and integrate technically-oriented written and visual information from multiple sources into well-structured and professionally articulated products.

The technical editor shall be familiar with the Department’s public release and security review procedures and processes to facilitate appropriate review and clearance through Public Affairs and the Office of Security Review. The technical editor shall exhibit the experience and skill needed to interact with technical experts and DASD(SE) staff to assess and evaluate technical content against DASD(SE) objectives and strategic messaging guidance to deliver written and visual products that facilitate the communication of DASD(SE) mission and content to both internal and external audiences. Examples of previous products requiring these skills included the most recent DASD(SE)- produced risk guide, work on System Security Engineering guidance, and updates to the various policy and guidance documents under the purview of DASD(SE). The technical editor shall be familiar with document coordination and work flow practices to facilitate the collection and dissemination of written and visual materials for coordination and approvals.

The contractor shall provide technical editing in accordance with USD(AT&L) guidelines;

conduct administrative quality assurance for correspondence development, and ensure proper correspondence control, and tracking.

Required for all actions, reports and publications prepared within DASD(SE) for distribution outside of DASD(SE). The contractor shall collect and consolidate inputs for the weekly activity reports as required, and provide value added inputs and quality assurance of the reports.

Collect and consolidate inputs into a single report for Director, SE to approve and submit to the

ASD(R&E).

Weekly reports are submitted 50 weeks per year.

The contractor shall provide graphic design support on an as-needed basis for document or briefing illustrations. This level of support shall be provided on specific request. DASD(SE) does not anticipate a routine requirement for this additional level of support on the majority of documents or briefings needed for routine mission execution, but may be required for specific support.

7 GAO, IG and Congressional Contractor shall act as the POC for DASD(SE) for recording and tracking IG, GAO and Congressional actions assigned to DASD(SE). The contractor shall maintain current and historical records on past and present actions undertaken by the GAO, IG, and Congress to assess how the information requested of DASD(SE) is evolving, what the previous DASD(SE) provided responses where to the same or similar questions, and consideration of current DASD(SE) efforts on responses to current questions. The contractor shall integrate this information into draft or proposed responses for coordination with the appropriate DASD(SE) government personnel to help prepare a formal DASD(SE) response to GAO, IG, or Congressional inquiries.

8 Outreach The contractor shall provide an outreach coordinator with a strong engineering or technical background. The outreach coordinator shall demonstrate the ability and experience to provide DASD(SE) senior leaders with recommendations on crafting strategic communication plans that advance the DASD(SE) mission and goals, communicating DASD(SE) activities effectively to target audiences, and providing recommendations on technical content to build effective presentations of DASD(SE) efforts.

The outreach coordinator works directly with DASD(SE) senior leadership to shape and build briefings and papers for a wide range of audiences, both technical and non-technical. The outreach coordinator shall demonstrate the ability to take general guidance on intent, target audience, and venue to build draft products with significant technical content for briefings or papers that effectively deliver the desired message or content. This includes the ability to effectively understand and communicate the overall DASD(SE) strategy and the ability to connect DASD(SE) technical content to the broader strategic context in which DASD(SE) operates. The outreach coordinator shall demonstrate a strong grasp of the larger science and technology efforts in the Department, understand the organizational elements across the Research and Engineering enterprise, and have the ability to liaison and coordinate with the technical communities in each of the Services. The outreach coordinator shall demonstrate a knowledge and familiarity with a range of professional engineering associates DASD(SE) typically interacts with as part of the routine basis of sustaining engineering policies and practices across the Department.

8.1 DASD(SE) Website and Intranet

The contractor shall work with ASD(R&E) webmasters to monitor and update the DASD(SE) website as required.

The contractor shall convert publically releasable source material from actions and publications described in the PWS to form and format appropriate to post on the website. The contractor shall maintain, on the DASD(SE) Share Drive, current sets of reference presentations for use by DASD(SE) personnel. The contractor shall maintain on the DASD(SE) share drive a file structure that facilitates easy access to all DASD(SE) presentations and reference material.

Contractor shall maintain the DASD(SE) portion of the ASD(R&E) front office share drive.

The contractor shall work with ASD(R&E) webmasters to monitor and update the DASD(SE) website and DASD(SE) space on the AT&L portal as required. The contractor shall work with leads for DASD(SE) Initiatives to create and update initiative-specific pages to disseminate the latest information to DASD(SE) stakeholders. The contractor shall update these pages quarterly. The contractor shall coordinate with government, IPA,TSA, and contractor personnel supporting DASD(SE) and DAU staff in identifying content to be posted for dissemination to SE and related communities. The contractor shall consolidate and submit the DASD(SE) and DAU approved information to be posted.

The contractor shall update website content twice monthly.

The contractor shall act as the DASD(SE)’s central knowledge source for web conferencing capabilities.

8.2 Conferences

The contractor shall coordinate initial planning, briefing development, graphics and editing support, and final review for all SE external speaking engagements. DASD(SE) participates in an average of two conferences per month requiring briefing package development. The contractor shall plan and host local and non-local DASD(SE) conferences and meetings with appropriate facilities, audio-visual support, and amenities.

The above includes support for DASD(SE) NDIA Annual SE Conference attendance. The contractor shall provide logistic support for DASD(SE) personnel and other attendees attending the NDIA conference.

DASD(SE) anticipates an average of six local and two non-local conferences and meetings per year with participation by 25 -100 people.

8.3 SE Forum

The contractor shall support the SE Forum to bring together lead systems engineers from across DoD to institutionalize SE discipline within the DoD and to collaborate and leverage SE activities across the Components. The contractor shall provide a secretariat to the forum responsible for scheduling and arranging meetings, recording and publishing meeting minutes, and tracking action items. The contractor shall develop, in conjunction with the DASD(SE), themes for meetings, coordinate all presentations around the themes and assist in developing draft DASD(SE) presentations.

The SE Forum meets every other month in government facilities.

8.4 Publications

The contractor shall prepare periodic papers and articles for publication by DASD(SE) in professional Journals. The contractor shall coordinate all external communications with Security, Public Affairs, and other cognizant organizations as required. The contractor shall document internal publication processes and update as required.

DASD(SE) annually releases a number of new and revised key policies, guides, and other technical products of interest to key stakeholders and the acquisition workforce. The contractor shall support DASD(SE) by developing strategic communication plans to publicize product release and obtain feedback from the community.

DASD(SE) presents at more than 20 DoD and public events and meets with more than 40 program offices annually. The contractor shall develop and produce a DASD(SE) informational brochure that can be both distributed at meetings and conferences and downloaded from the DSE website and printed.

DASD(SE) periodically publishes advertisements in print and online publications based on its involvement with organizations such as the International Council on Systems Engineering (INCOSE) and the DoD Software Technology Support Center. DASD(SE) also makes use of advertisements in publications such as the DAU-produced Defense AT&L Magazine to disseminate key programs and products to the acquisition workforce. The contractor shall work with DSE leadership to identify key ideas and images to be conveyed via the advertisement and develop at least two draft treatments for consideration. The contractor will incorporate feedback and provide updated advertisements for final approval and submit final advertisements in a format that meets the targeted publications’ requirements for size, color, and file format. The contractor shall prepare 5 CrossTalk ads and up to 3 additional ads on an annual basis.

8.5 DASD(SE) Webinars

DASD(SE) hosts public webinars twice monthly using DCO Connect on topics of interest to the SE community. DASD(SE) co-hosts (with the NDIA SoS Committee) public webinars twice monthly using DCO Connect on SoS topics of interest to the SE community. The contractor shall administer the SE/SoSE webinar program by working with the designated DASD(SE) leads to identify possible topics/speakers, forward invitations to speakers and track acceptances, maintain the webinar distribution list, distribute webinar information, host the webinar via DCO Connect, and provide speaker/briefing information and briefs for publication on the DSE website.

8.6 SE Excellence Awards

DASD(SE) sponsors in collaboration with the NDIA Systems Engineering Division on the LtGen Thomas Ferguson Individual and Group Awards for Engineering Excellence. The contractor shall coordinate with NDIA regarding submission status, providing logistic support to the Evaluation Committee Chair, and providing input for the DSE website and other targeted outreach methods. The contractor shall provide support to the Ferguson SE Excellence awards program by disseminating nomination information to the DoD community, coordinate with NDIA regarding submission status, and producing a nominations notebooks to DSE for the evaluation process.

9 Special/Other Requirements

9.1 Data Rights

All systems, methodologies, processes, software, databases, analysis tools, data, reference material, documents and other information obtained, produced, or developed by the contractors as part of this effort shall become the property of the Government and shall be delivered to the Government. Systems, methodologies, processes, software, databases, analysis tools and data to be developed, updated, modified, or converted under this task shall be delivered with unlimited and unrestricted rights to the U.S. Government.

9.2 Security

The contractor shall maintain a TOP SECRET facility clearance issued by the Defense Security Service (DSS). All employees designated to perform on this SOW must be U.S. citizens and those associated with providing technical support or working in government spaces must hold a minimum of a SECRET personnel security clearance. Certain employees will require a TOP SECRET security clearance and may be required to maintain their eligibility for access to

Sensitive Compartmented Information (SCI) current. The contractor shall maintain a DSS certified safeguarding capability to at least the SECRET level. The contractor will be required to hand carry classified material between government offices and the contractor's site. Specific security instructions will be detailed in the DD 254 associated with the master contract. Some tasks within this PWS will require TS or TS/SCI clearances, These will be noted in each of those tasks.

9.3 Work Location

The majority of the support will be performed within the metropolitan Washington, DC, area but may include other CONUS and OCONUS locations as required by specific technical requirements. Contractor personnel will work in a mix of contractor provided facilities and Government facilities. The government will provide space for up to five contractor personnel in support of this task. The contractor is encouraged to make maximum use of the government provided office space before locating staff in the contractor’s offices. The location of the contractor's facilities shall be in close proximity to the Pentagon, Arlington, VA.

9.4 Training

The contractor shall participate in organizational training as required. The contractor shall also complete OSD mandated training to include but not limited to Information Assurance and Security training, Privacy Act training, Combating Trafficking in Persons training, Operational Security, etc