A23_HQ0034-18-R-0002.pdf

COMBINED SYNOPSIS/SOLICITATION: HQ0034-18-R-0002

DoD Chief Information Officer (CIO) CIO Mission Support Services (CMSS) multiple award Indefinite Delivery Indefinite Quantity (IDIQ)

The period of performance shall be for one (1) Base Year of 12 months and (4) 12-month ordering periods.

This is a COMBINED SYNOPSIS/SOLICITATION for commercial and non-commercial items prepared in accordance with the information in FAR Subpart 15 and FAR 16.5 as supplemented with the additional information included in this notice. This announcement constitutes the only solicitation; a written solicitation will not be issued. PAPER COPIES OF THIS SOLICITATION WILL NOT BE AVAILABLE. This combined synopsis/solicitation shall be posted on FEDBIZOPPS.

1. The solicitation number is HQ0034-18-R-0002 and is issued as a Request for Proposals (RFP).

The solicitation document and incorporated provisions and clauses are those in effect through Federal Acquisition Circular (FAC) 2005-96 and Defense Federal Acquisition Regulations Supplement (DFARS) DPN current to 20171228. Offerors MUST be registered and active on System for Award Management (SAM) at time of proposal submission and at time of award.

2. It is the responsibility of the contractor to be familiar with the applicable clauses and provisions.

The clauses may be accessed in full text at these addresses: www.acquisition.gov/browsefar and http://www.acq.osd.mil/dpap/dars/dfarspgi/current/.

3. The associated North American Industrial Classification Systems (NAICS) code for this procurement is 541990: “All Other Professional, Scientific, and Technical Services” with an associated small business size standard of $15.0 Million. This requirement is unrestricted for purposes of business participation.

4. The Washingtong Headquarters Services, Acquistion Directorates (WHS/AD), 4800 Mark Center Drive, Alexandria, VA 22311 intends to procure a multiple award CMSS IDIQ(for the Chief Information Officer (CIO)).

5. Submit responses to this RFP to Leanne Condren via email leanne.m.condren.civ@mail.mil and Kellie Buck via email kellie.e.buck.civ@mail.mil. All proposals shall be submitted for services requested. Proposals must include all required documetation outlined in Section L and Section M.

Proposals shall be submitted NO LATER THAN : Monday, February 26, 2018 at 1200 Noon

ET.

6. Late submissions WILL NOT be accepted. It is each Offeror’s responsibility to ensure complete proposals (including Past Performance Questionaires filled out by third parties) are with the Government no later than the due date and time.

http://www.acquisition.gov/browsefar http://www.acq.osd.mil/dpap/dars/dfarspgi/current/ mailto:leanne.m.condren.civ@mail.mil mailto:kellie.e.buck.civ@mail.mil

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

HQ003418R0002

Section B - Supplies or Services and Prices

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 12 Months CMSS Commercial FFP

FFP

Determined at Task Order Level

NET AMT

PSC CD: R408

ITEM NO SUPPLIES/SERVICES ESTIMATED

QUANTITY

UNIT UNIT PRICE AMOUNT

0002 Lot CMSS LH (Commercial)

LH

Determined at Task Order Level. Cost under this CLIN shall not exceed the specified not-to-exceed amount.

TOT ESTIMATED PRICE

CEILING PRICE

0003 Lot CMSS Cost (Non-commercial)

COST

ESTIMATED COST

0004 Lot Travel (T&M)

T&M All travel will be authorized in advance by the contracting officer or the contracting officer's authorized representative (COR), for reasonable travel related expenses in accordance with FAR 31.205-46, Travel Costs. Cost under this CLIN shall not exceed the specified not-to-exceed amount. $250K per POP.

0005 12 Months CMSS Commercial FFP-LOE

FFP-LOE

0006 Lot CMSS ODCs

FFP

Determined at Task Order Level: Hardware and Software. Not to exceed $1M per

POP

1001 12 Months OPTION CMSS Commercial FFP

1002 Lot OPTION CMSS LH (Commercial)

LH

1003 Lot OPTION CMSS Cost (Non-commercial)

COST

1004 Lot OPTION Travel (T&M)

T&M All travel will be authorized in advance by the contracting officer or the contracting officer's authorized representative (COR), for reasonable travel

1005 12 Months OPTION CMSS Commercial FFP-LOE

1006 Lot OPTION CMSS ODCs

FFP

2001 12 Months OPTION CMSS Commercial FFP

2002 Lot OPTION CMSS LH (Commercial)

LH

2003 Lot OPTION CMSS Cost (Non-commercial)

COST

2004 Lot OPTION Travel (T&M)

T&M All travel will be authorized in advance by the contracting officer or the contracting officer's authorized representative (COR), for reasonable travel

2005 12 Months OPTION CMSS Commercial FFP-LOE

2006 Lot OPTION CMSS ODCs

FFP

3001 12 Months OPTION CMSS Commercial FFP

3002 Lot OPTION CMSS LH (Commercial)

LH

3003 Lot OPTION CMSS Cost (Non-commercial)

COST

3004 Lot OPTION Travel (T&M)

T&M All travel will be authorized in advance by the contracting officer or the contracting officer's authorized representative (COR), for reasonable travel

3005 12 Months OPTION CMSS Commercial FFP-LOE

3006 Lot OPTION CMSS ODCs

FFP

4001 12 Months OPTION CMSS Commercial FFP

4002 Lot OPTION CMSS LH (Commercial)

LH

4003 Lot OPTION CMSS Cost (Non-commercial)

COST

4004 Lot OPTION Travel (T&M)

T&M All travel will be authorized in advance by the contracting officer or the contracting officer's authorized representative (COR), for reasonable travel

4005 12 Months OPTION CMSS Commercial FFP-LOE

4006 Lot OPTION CMSS ODCs

FFP

CONTRACT MINIMUM/MAXIMUM QUANTITY AND CONTRACT VALUE

The minimum quantity and contract value for all orders issued against this contract shall not be less than the minimum quantity and contract value stated in the following table. The maximum quantity and contract value for all orders issued against this contract shall not exceed the maximum quantity and contract value stated in the following table.

MINIMUM

QUANTITY

MINIMUM

AMOUNT

MAXIMUM

QUANTITY

MAXIMUM

AMOUNT

$2,500.00 $360,000,000.00

CLIN DELIVERY/TASK ORDER MINIMUM/MAXIMUM QUANTITY AND CLIN ORDER VALUE

The minimum quantity and order value for the given Delivery/Task Order issued for this CLIN shall not be less than the minimum quantity and order value stated in the following table. The maximum quantity and order value for the given Delivery/Task Order issued for this CLIN shall not exceed the maximum quantity and order value stated in the following table.

CLIN

MINIMUM

QUANTITY

MINIMUM

AMOUNT

MAXIMUM

QUANTITY

MAXIMUM

AMOUNT

Section C - Descriptions and Specifications

PWS

Performance Work Statement (PWS) Office of the Department of Defense Chief Information Officer

(DOD CIO)

Cybersecurity (CS); Information Technology (IT); Information Enterprise (IE); Command, Control, Communications, and Computers and Information Infrastructure Capabilities (C4&IIC); IT Management Analytics and Data Analytics Support Services

Part 1

GENERAL INFORMATION

1.1 Description of Services/Introduction: The Office of the DoD Chief Information Officer (DoD CIO) requires Cybersecurity (CS); Information Technology (IT); Information Enterprise (IE); Command, Control, Communications, and Computers and Information Infrastructure Capabilities (C4&IIC); IT Management Analytics and Data Analytics Support Services. The DoD CIO drives the evolution of the Department’s network & information capabilities to meet its ever changing mission needs. Creating a seamless, secure information environment that delivers agile and secure information capabilities to enhance our Nation’s combat power and decision making is critical to the accomplishment of the DoD CIO’s vision. To that end, the DoD CIO requires contractor support services and expertise in areas which support the DoD CIO Top Priorities. The Top Priorities are:

• Modernizing the networks – fielding the Joint Regional Security Stacks is the CIO's top priority

• Sharing with mission partners by establishing the Mission Partner Environment

• Reducing the cost of DoD IT through a review directed by the Deputy Secretary of Defense

• Managing DoD’s data by partnering with industry to migrate data to the cloud

• Defending against cyber-attack is the CIO's highest cyber priority

• Empowering mobile data access through people and information across the Department

• Maximize Spectrum Access to Enhance Operational Effectiveness in an increasingly congested and contested environment

The contractor shall provide non-personal services to support the DOD CIO to include but not limited to expertise, personnel, equipment, software development capabilities & tools, and materials, in all matters associated with the Cybersecurity (CS); Information Technology (IT); Information Enterprise (IE);

Command, Control, Communications, and Computers and Information Infrastructure Capabilities (C4&IIC); IT Management Analytics and Data Analytics (CS/IT/IE/C4&IIC/ITMA/DA) Support Services tasks as outlined in this performance work statement (PWS). Detailed information regarding specific tasks, deliverables, timelines, and associated, specific Government/ Contractor furnished facilities, property, equipment, and services will be delineated in task order solicitations subsequent to the IDIQ Contract award. General information regarding Government/ Contractor furnished facilities, property, equipment, and services are provided in Part 3 below.

1.2 Background: The DoD CIO is the Principal Staff Assistant (PSA) and senior advisor to the Secretary of Defense for information technology (IT) (including national security systems and defense business systems), information resources management (IRM) and efficiencies. The DoD CIO is responsible for all matters relating to the DoD information enterprise, including communications; spectrum management; network policy and standards;

information systems; cybersecurity; positioning, navigation, and timing (PNT) policy; and the DoD information enterprise that supports DoD command and control (C2).

The DoD CIO is tasked with improving the combat power of the Department—as well as its security and efficiency—by ensuring that the Department treats information as a strategic asset and that innovative information capabilities are available throughout all areas of DoD supporting warfighting, business, and intelligence missions.

1.3 Objective: The objective of the resulting contract is to facilitate the needs of the DoD CIO to obtain the necessary contractor support to provide flexible, agile and responsive modern information capabilities to support the missions of and continually improve the combat power of the Department of Defense.

1.4 Scope: The scope of this IDIQ Contract is to fulfill the DoD CIO requirement for comprehensive Cybersecurity (CS); Information Technology (IT); Information Enterprise (IE); Command, Control, Communications, and Computers (C4) and Information Infrastructure Capabilities; IT Management Analytics and Data Analytics Support Services in areas (this list is not all-inclusive) such as strategic planning, capital planning, technology performance, assessments, research and analysis, architectures, modeling, hardware and/or software development and/or acquisition, standards development and evaluation, customization of software analytical tools, models, decision aids, screening methods and techniques, simulation and war-gaming, and day-to-day security and administration. As highlighted earlier, detailed information regarding specific tasks, deliverables, timelines, and associated, specific Government/ Contractor furnished facilities, property, equipment, and services will be delineated in task order solicitations subsequent to the Indefinite Delivery, Indefinite Quantity (IDIQ Contract) contract award.

1.5 Community of Interest: It is anticipated that the comprehensive support services under this contract shall primarily be available to the Office of the DoD CIO. With the consent of the Washington Headquarters Services, Acquisition Directorate (WHS/AD and DoD CIO, these services will be available to other elements of the OSD Staff. On such occasions, these services will only be available if the desired support activities have a direct impact on, interact with, or benefit from DoD CIO programs and activities.

1.6 (Reserved)

1.7 General Information

1.7.1 Quality Control: The contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s quality control program is the means by which the contractor is assured that its work complies with the requirement of the contract. As a minimum, the contractor shall develop quality control procedures that address the areas identified in Technical Exhibit 1, “Performance Requirements Summary”. After acceptance of the quality control plan the contractor shall receive the contracting officer’s acceptance in writing of any proposed change to the QC system. The contractor’s QC plan must be submitted to the Contracting Officer 10 days after contract award.

1.7.2 Quality Assurance: The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). A QASP is required in compliance with FAR Subparts 37-6 Performance Based Acquisition and 46-4, Contract Quality Assurance. The QASP shall consist of deliverable to be completed, performance standard, acceptable quality level (AQL), and surveillance method/frequency. The Government is required to evaluate and document progresses by establishing specific and objective performance standards. A QASP describes how performance will be measured against the performance standards.

1.7.3 Recognized Holidays: The contractor is not required to work on the following Federal holidays: TBD at Task Order Level

1.7.4 Hours of Operation/Place of Performance: Contractor personnel working under this contract can expect to work both on-site within Government facilities and off-site in contractor facilities. Allowance of Telecommunting shall be determined on a case by case basis at the task order level. Specifics will be delineated in each task order.

On-site Government facilities will predominantly be in the Pentagon, Mark Center, Crystal City, Rosslyn, Ft.

Belvoir and surrounding metropolitan Washington, DC area and at various contractor facilities. Contractor personnel are expected to conform to normal operating hours. The normal duty hours are 0800 to 1700 hours Monday through Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor must at all times maintain an adequate work force for the uninterrupted performance of all tasks defined within this PWS and the task order work statements when the Government facility is not closed for the above reasons.

1.7.5 Type of Contract: A multiple award IDIQ contract will be issued to support the services for this requirement.

The IDIQ contracts’ will be established to support commercial and non-commercial items. The contract type will be determined at the task order level. Base CLINS will be established for the following contract types: FFP, FPLOE, LH, T&M, and Cost.

1.7.6 Security and Privacy Requirements: Due to the nature of the work, all IDIQ Contract holders will be required to have TOP SECRET facility security clearance (FCL) and have TOP SECRET safeguarding capabilities. The Government anticipates access to classified data/information up to and including TS/SCI (SI/TK/G/HCS), Special Access Program/ Special Access Required (SAP/SAR). The work associated with this task order which is performed at the Government site(s) will be performed in accredited Government Sensitive Compartmented Information Facilities (SCIFs). Therefore, all contractors performing work at the Govt site(s) much hold an active TS clearance and be SCI eligible. Any contractor(s) working at the contractor site(s) must possess at least a SECRET clearance.

When TS//SCI (SI/TK/G/HCS) SAP/SAR access is required, a DD254 indicating TS/SCI (SI/TK/G/HCS) SAP/SAR requirements will be accomplished.

It is anticipated that some contractor personnel will support task orders for Special Access Programs (SAPs). It is further anticipated that some task orders will require contractor personnel to have access to Nuclear Command and Control, and Extremely Sensitive Information (NC2 ESI). The final Contract Security Classification Specification (DD254) associated with this PWS will reflect this information will be incorporated as a modification to the contract after award.

Some contractor personnel assigned to this contract on a full-time or near full-time basis will be issued a badge for access to the Pentagon building allowing unescorted access. Other contractor personnel will be issued other Government badges to allow unescorted access to Government buildings. Contractor personnel will be required to complete the appropriate security paperwork and comply with associated policies. It is imperative that all contractor personnel understand that these Government badges that allow unescorted access to Government buildings remain Government property and that they must be returned to the office that issued the badge immediately once the contractor has been informed that he/she is no longer working on that contract. For the Pentagon, all Pentagon badges and CAC cards must be returned to the DoD CIO Security Office in Rm. 3C1047, Pentagon.

Contractor personnel may be required to access data and information proprietary to the Government while performing under this contract. Contractor personnel may also have information of such a nature that its dissemination or use, other than in performance of this contract, would be adverse to the interest of the Government or others. The Contractor shall not divulge or release data or information developed or obtained in performance of this contract except to authorized Government personnel or upon written approval of the Contracting Officer Representative (COR). The Contractor shall not use, disclose, or reproduce proprietary data, other than as required in the performance of this contract. The limitations above do not apply to data or information that has been made public by the Government. In the course of performance pursuant to this contract, the contractor may require access to nonpublic information such as Planning, Programming, Budgeting and Execution (PPBE) information. In the event that the Contractor requires access to PPBE information while performing duties under this task order, the Contractor shall agree that each of its employees and others performing work under this task order shall sign the Non-Disclosure Agreement provided as part of the solicitation. All products produced and their associated work papers are to be considered the property of the Government.

The Contractor’s Facility Security Officer (FSO) shall report, in writing, to the Contracting Officer, Contracting Officer’s Representative (COR) and the Government Contracts Manager/Program

Manager (CM/PM) any changes in the Contractor’s security status throughout the contract period of performance. Contractor employees assigned to task orders under this IDIQ Contract will comply with the Personnel Clearance (PCL) at the level specified in the task order.

Prior to assignment of contractor employees to task orders under this IDIQ contract that require access to Government facilities, the Contractor’s FSO shall submit Personnel (Security) Clearance (PCL) validation through use of a Visit Authorization Request (VAR) for each employee, in accordance with DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), to the DoD CIO Security Office in Rm. 3C1047, Pentagon.

Changes in PCL status of Contractor employees shall be forwarded in writing to the Contracting Officer and the DoD CIO Security Office. Subcontractors shall comply with the same security requirements as the Contractor. The Contractor shall issue DD Form 254s to each subcontractor reflecting the same security requirements applicable to the prime contract. The contractor shall also sponsor subcontractor(s) for a Facility (Security) Clearance (FCL) and associated PCL(s) required in accordance with the DD Form 254.

1.7.6.1 Physical Security: The contractor is responsible for ensuring that contract employees that require routine access to Government facilities during their performance in-process and out-process through the DoD CIO Security Office in Rm. 3C1047, Pentagon (e-mail address is osd.pentagon.dod-cio.mbx.dod-cio-security@mail.mil). The IDIQ Contract holders will ensure that contractor employees surrender their Pentagon building pass and/or CAC card to the DoD CIO security staff in Rm. 3C1047, Pentagon during out-processing. The contractor shall be responsible for safeguarding all government property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured.

1.7.6.2 Operational Security: OPSEC is a structured process that identifies critical information, analyzes friendly actions, integrates threat analysis and risk assessments, then helps personnel apply protective measures to mitigate unacceptable risk. The contractor shall agree to comply with the same basic OPSEC rules, requirements, and standards as government personnel. When contractor personnel are working primarily in government facilities, OPSEC Awareness Education and Training will be provided or coordinated through the appropriate government security channels and OPSEC protective measures (countermeasures) will be applied as directed by the government. When contractor personnel are working primarily in contractor facilities, OPSEC Awareness Education and Training will be provided by the contractor. All contractor support personnel are required to receive OPSEC Awareness Education and Duty-Related Training.

The Contractor shall comply with the DoD Customers Operations Security Program, specifically DoDD 5205.02E “DoD Operations Security (OPSEC) Program” June 20, 2012.

1.7.7 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with the Federal Acquisition Regulation. The contracting officer, Contracting Officers Representative (COR), the DoD CIO IDIQ Contract Manager, and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.7.8 Contracting Officer Representative (COR): A separate COR will be assigned to each task order. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract;

mailto:osd.pentagon.dod-cio.mbx.dod-cio-security@mail.mil perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs and specifications; monitor Contractor's performance and notify both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property; and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order. Any and all changes to the terms and conditions of the IDIQ contract or any task order rest with the Contracting Officer.

1.7.9 DoD CIO POC: The government shall designate a Contract’s Manager/Program Manager (CM/PM) Point Of Contact for the Base contract.

1.7.10 Program Manager: The contractor shall identify a program manager who shall interface with the Government POC/COR. The name of this person and an alternate who shall act for the contractor when the program manager is absent shall be designated in writing to the Government POC/COR

1.7.11 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials.

1.7.12 Contractor Travel: Contractor travel will comply with FAR 31.205-46, “Travel Costs.” Contractors will be required to travel to and from the Pentagon and other government organizations’ facilities within the Washington, DC area. Limited travel outside the Washington, DC area in support of these tasks may be required. Travel may also be required in support of activities such as attendance at related conferences and forums. Costs of attendance by contractors, in terms of reasonable attendance fees at meeting/conventions/conferences/symposia/seminars/etc.

that are in support of tasks in this PWS, are allowable as a travel expense when approved by the COR. Any out of town travel required will be approved, in advance, by the COR for the task order. If written evidence of COR approval for contractor out of town travel cannot be provided upon request of the government official inspecting or accepting vendor invoices, reimbursement for such travel will be denied. Some local travel in conjunction with this effort is expected, and may be authorized in individual orders issued under this IDIQ contract. Travel to and from the normal place of duty will not be reimbursed.

1.7.13 Organizational Conflict of Interest and Non-Disclosure Requirements: The Contractor warrants that to the best of its knowledge and belief and except as otherwise disclosed, he or she does not have any organizational conflict of interest, which is defined as a situation in which the nature of work under a Government contract and a Contractor's organizational, financial, contractual or other interests are such that: award of the contract may result in an unfair competitive advantage; or the Contractor's objectivity in performing the contract work may be impaired.

Specific task orders issued under this IDIQ contract may require the contractor to provide systems engineering and technical direction, prepare specifications or work statements, or access proprietary information from other companies, as well as other areas for potential organizational conflicts of interest addressed in FAR 9.505.

Performance of such tasks may preclude the contractor from consideration for award of related programs. The contractor is required to advise the contracting officer whether it considers that an actual or potential OCI exists for each task order.

1.7.14 Reporting: To assist the Government POC/COR with the appropriate surveillance during task order performance, a Monthly Progress Report (MPR) at the IDIQ contract level that includes information on all active task orders is a requirement. The primary objective of the report is to provide the Government reasonable assurance the contractor is using efficient methods and effective cost controls in executing each task order. The contractor shall propose a format to the POC/COR that meets the intent of the report. The Monthly Progress Report (MPR) will be prepared and submitted monthly in a single document at the IDIQ contract level and will include status on all open task orders.

1.7.15 Non-Disclosure Agreement. In the course of performance pursuant to this contract, the contractor may access nonpublic information, including Planning, Programming, Budgeting and Execution (PPBE) information. In that event, the contractor shall agree that it will not use or disclose any such information unless authorized by the Contracting Officer’s Representative (COR) or the task order monitor. The contractor shall further agree that it will use its best efforts to ensure that its employees and others performing services under this contract will not use or disclose any such information unless authorized by the Contracting Officer’s Representative (COR) or the task order monitor. The contractor shall protect information in accordance with the Privacy Act of 1974 (5 U.S.C. 552a) and the Freedom of Information Act (5 U.S.C. 552, as amended). To that end, the contractor shall agree that each of its employees and others performing duties under this contract will sign the Non-Disclosure Agreement set forth below for each task order award as specified during the solicitation for that task order.

1.7.16 Deliverables and Departing Personnel: All contract deliverables are expected to continue regardless of any departing or on-boarding of personnel, personnel on short-term or long-term leave or any vacant positions.

Contractor shall backfill any permanently vacant position with thirty (30) calendar days. The thirty (30) calendar-day clock begins the day after the vacating employee’s last day of work. If any position is not filled with the thirty

(30) calendar-day window, the Government reserves the right to request reimbursement of that position for the length of its vacancy beginning on day thirty one (31).

NON-DISCLOSURE AGREEMENT

I, (Individual Name), (hereinafter RECIPIENT), an employee and authorized representative of (Company Name), a Contractor providing support services to the (Government Organization) and likely to have access to nonpublic information, agree to and promise the following:

WHEREAS RECIPIENT is engaged in delivering support services to (Government Organization) under (Contract Number); and WHEREAS it is the intention of (Government Organization) to protect and prevent access to and disclosure of nonpublic information, including Planning, Programming, Budgeting and Execution (PPBE) information, to anyone other than employees of the United States Government and others who have a need to know, unless so authorized by the Task Monitor; and WHEREAS (Government Organization) acknowledges that RECIPIENT will have or require access to such nonpublic information in the course of delivering the contract services; and therefore, WHEREAS RECIPIENT will be given or otherwise have access to nonpublic information while providing such services; and finally, WHEREAS "nonpublic information" includes such information as PPBE information, proprietary information (e.g., information submitted by a contractor marked as proprietary), advance procurement information (e.g., future requirements, statements of work, and acquisition strategies), source selection information (e.g., bids before made public, source selection plans, and rankings of proposals), trade secrets and other confidential business information (e.g., confidential business information submitted by a contractor), attorney work product, information protected by the Privacy Act (e.g., social security numbers, home addresses and telephone numbers), and other sensitive information that would not be released by (Government Organization) under the Freedom of Information Act (e.g., program, planning and budgeting system information);

NOW THEREFORE, RECIPIENT agrees to and promises as follows:

RECIPIENT shall not seek access to nonpublic information beyond what is required for the performance of the support services contract; RECIPIENT will ensure that his or her status as a contractor employee is known when seeking access to and receiving such nonpublic information from Government employees; As to any nonpublic information to which RECIPIENT has or is given access, RECIPIENT shall not use or disclose such information for any purpose other than providing the contract support services, and will not use or disclose the information for any personal or other commercial purpose; and If RECIPIENT becomes aware of any improper release or disclosure of such nonpublic information, RECIPIENT will advise the Task Monitor in writing as soon as possible.

The RECIPIENT agrees to return any nonpublic information given to him or her pursuant to this agreement, including any transcriptions by RECIPIENT of nonpublic information to which RECIPIENT was given access, if not already destroyed, upon RECIPIENT leaving the contract. RECIPIENT understands that any unauthorized use, release or disclosure of nonpublic information in violation of this CERTIFICATE will subject the RECIPIENT to administrative, civil or criminal remedies, as may be authorized by law.

RECIPIENT agrees that the obligations under this NDA are personal, continuing and do not expire and bind Recipient even if no longer employed by contractor.

RECIPIENT: ____________________________________DATE: __________________________________ (Signature)

PRINTED NAME: ________________________________________

TITLE: _________________________________________________

EMPLOYER: ____________________________________________

Part 2

DEFINITIONS & ACRONYMS

Contracting Officer’s Representative (COR). A representative from the requiring activity assigned by the Contracting Officer to perform surveillance and to act as liaison to the contractor.

Defective Service. A service output that does not meet the standard of performance associated with it in the Performance Work Statement.

FCL. Facility (Security) Clearance.

FSO. Contractor’s Facility Security Officer.

NISPOM. National Industrial Security Program Operating Manual.

OPSEC. Operational Security.

Quality Assurance Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

Quality Control. Those actions taken by a contractor to control the performance of services so that they meet the requirements of the PWS.

Quality Assurance. Those actions taken by the government to assure services meet the requirements of the Performance Work Statement.

PCL. Personnel (Security) Clearance.

PPBE. Planning, Programming, Budgeting and Execution.

PWS. Performance Work Statement.

Part 3

GOVERNMENT/CONTRACTOR FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3.1 General Information

3.1.1 General: Each Task Order will provide the specifics associated with specific tasks, deliverables, timelines, Government furnished property, equipment, and services. In general, for task orders and tasks where contractor personnel work on-site within Government facilities such as in the Pentagon, Mark Center, Crystal City, Rosslyn, Ft.

Belvoir and surrounding National Capital Region (NCR), the Government will provide the necessary facilities, equipment, and/or services. For tasks where contractor personnel work in contractor facilities, the contractor shall provide the necessary facilities, equipment, and/or services.

3.1.2 Utilities: For task orders and tasks where contractor personnel work on-site within Government facilities such as in the Pentagon, Mark Center, Crystal City, Rosslyn, Ft. Belvoir and surrounding metropolitan Washington, DC, the Government shall provide the utilities in the facility for the contractor’s use in performance of duties outlined in the task order work statement. The Contractor shall instruct employees in utilities conservation practices. The contractor shall be responsible for operating under conditions that preclude the waste of utilities. For tasks where contractor personnel work in contractor facilities, the contractor shall provide the utilities in the facility for the contractor’s use in performance of duties outlined in the task order work statement.

3.1.3 Facilities and Equipment: For task orders and tasks where contractor personnel work on-site within Government facilities such as in the Pentagon, Mark Center, Crystal City, Rosslyn, Ft. Belvoir and surrounding National Capital Region (NCR), the Government will furnish the necessary workspace for the contractor staff to provide the support outlined in the task order work statement to include desk space, telephones, computer equipment to include NIPRNet (Unclassified but Sensitive Internet Protocol Router Network) (formerly called the Non- Classified Internet Protocol Router Network) and SIPRNet (Secret Internet Protocol Router Network) access and other items necessary to perform in a normal office environment. For tasks where contractor personnel work in contractor facilities, the contractor shall furnish the necessary workspace for the contractor staff to provide the support outlined in the task order work statement to include desk space, telephones, computer equipment to include NIPRNet and SIPRNet access and other items necessary to perform in a normal office environment.

Part 4

Cybersecurity (CS); Information Technology (IT); Information Enterprise (IE); Command, Control, Communications, and Computers and Information Infrastructure (C4&IIC) Capabilities; IT Management

Analytics and Data Analytics Studies and Technical Analysis Support Services

4.1 General Task Information

4.1.1 The nature of the requirements issued under this contract will ultimately serve to create a seamless, secure information environment that delivers agile and secure information capabilities to enhance our Nation’s combat power and decision making critical to the accomplishment of the DoD CIO’s vision. The tasks will consist of Cybersecurity (CS); Information Technology (IT); Information Enterprise (IE); Command, Control, Communications, and Computers and Information Infrastructure Capabilities (C4&IIC); IT Management Analytics and Data Analytics (CS/IT/IE/C4&IIC/ITMA/DA) support services.

Representative tasks may include (this list is not all-inclusive):

• Develop, or improve/modify designs, standards, specifications, networks, materials, methods, solutions, models, applications, systems, tools, surveys, configurations, agents, formulas, practices, processes or other technologies, i.e., provide technical support on information technology and/or organizational resources.

• Analyze, demonstrate, review, evaluate, validate, or test designs, methods, materials, discoveries, networks, agents, formulas, models, applications, systems, tools, surveys, configurations, practices, processes or other technologies.

• Support the development and/or modification of plans, architectures, frameworks, protocols, tactics, policies, procedures, manuals, guides or strategies.

• Transition, integrate, upgrade, deploy, install or otherwise implement designs, methods, models, applications, tools, surveys, configurations, processes or other technologies.

• Perform and document assessments, analyses, studies, reports, reviews, estimates, surveys or investigations.

• Provide subject matter expertise, consultation, recommendations, advice and other advisory support. These services shall be for a specific, identifiable effort, defined in the task order

PWS.

4.1.2 The contractor shall support the DoD CIO by providing expertise, personnel, equipment, software development capabilities and tools, materials, and other items and the non-personal services necessary as delineated in the following Cybersecurity (CS); Information Technology (IT); Information Enterprise (IE); Command, Control, Communications, and Computers and Information Infrastructure (C4&IIC) Capabilities; IT Management Analytics and Data Analytics task areas.

4.1.3 The required outcome of this performance work statement is to support the DoD CIO Information Technology (IT) Enterprise goals – increase mission effectiveness, improve cybersecurity, and deliver efficiencies. The DoD CIO declared that Information is one of our Nation’s greatest sources of power. Therefore, the DoD CIO requires contractor support services that ultimately support the goal of delivering that power to enable the achievement of mission success in all operations of the Department: warfighting, business, and intelligence. Also, DoD CIO requires subject matter experts and technical support analysts to produce deliverables, reports, results and recommendations to support informed decisions relating to program investment strategies, guidance and directives, acquisition strategies and funding allocations for DoD CIO areas of responsibility and oversight.

4.2 Specific Tasks and Requirements

4.2.1 Task 1 – Cybersecurity (CS) Support. The contractor shall provide Cybersecurity Support as follows.

4.2.1.1 Help the DoD CIO in his role to ensure that the Department has a well-defined and well-executed cybersecurity program. Cybersecurity is defined as the technologies, processes, and practices designed for prevention of damage to, protection of, and restoration of computers, electronic communications systems, electronic communication services, wire communication, and electronic communication, including information contained therein, to ensure its availability, integrity, authentication, confidentiality, and non-repudiation. While focused predominantly on information in digital form, the full range of CS also encompasses analog and physical form. The scope is not limited to information security; it includes the entire field of CS (availability, identification and authentication, confidentiality, integrity, and non-repudiation) and includes the economic considerations with respect to selection of CS techniques, CS processes, and industry trends. It also includes Information Operations (IO), e.g. operational security of IT, the use of the electromagnetic spectrum for IT purposes and computer network operations. In a contested cyber environment, CS supports Mission Assurance (MA) measures required to accomplish mission essential objectives. Assist in the research, development, coordination, and on-going validity of effective, consistent, and up-to-date cybersecurity standards, policies, and procedures within DoD and with other federal agencies, international coalition partners, and industry. Assist CIO in its role to oversee cybersecurity strategy, policy, and workforce development, including technology innovation and the Risk Management Framework, as well as cybersecurity implementation and acquisition integration, such as acquisition oversight during the entire systems’ lifecycles; identity and access management, or IDAM; and lifecycle risk management, standards, and integration.

4.2.1.2 Focus on advancing cyber basics and improving cyber defenses, which are two of DoD CIO’s top priorities. Assist the Deputy CIO CS (DCIO CS) in improving cyber defenses on DoD networks through means such as secure configuration, fast patching, web-content filtering, and continual cyberspace workforce competencies. The top objective of DCIO CS is to ensure successful mission execution in the face of dynamic cyber warfare by capable adversaries.

4.2.1.3 Provide technical and analytical research and support related to Cybersecurity strategy, policy, capabilities, and associated management methodologies. Support the integration of these methodologies and associated services into measurement tools mapped to actionable and measurable CS metrics, emphasizing NIST security controls and the Risk Management Framework (RMF). Provide robust cyber analytic capability enabling informed, timely, effective, and accurate enterprise assessments of cyber and information technology portfolios and capabilities.

Support the implementation and use of metrics and enterprise scorecards to track and analyze implementation and execution of DoD CS objectives, as defined by DoD CS strategies, CS policies, DoD management documents, technical guidance, and Federal legislation and guidance.

4.2.1.4 Support plans and programs activities including CS portfolio management/focus team/issue paper support;

program review support; responses to Congressional, Inspectors General, and other stakeholders' reports and audits;

Legislative, Executive, and other Federal document review support, and Computer Network Defense oversight activities.

4.2.1.5 Support the design of a DoD CS compliance and verification program, and research new and innovative means to measure and improve DoD CS compliance. Support the development of data collection plans, identification of appropriate data elements, analysis and recommendation of technology solutions for compliance monitoring and reporting, pilot compliance initiatives and automation, and development of efficient automated assessment and reporting.

4.2.1.6 Provide subject matter expertise in the institutionalization of Continuous Monitoring across the DoD. This effort includes providing a consistent set of analytics to inform defensive cyber operation activities in the areas of cyber situational awareness, CS risk scoring, risk management decisions, and business decisions related to license and software management.

4.2.1.7 Provide support to include developing international DoD CIO outreach strategies, action plans, engagement plans, awareness activities, activity reports, and strategic recommendations; supporting efforts to promote regional cooperation, information sharing, and interoperability initiatives aligned to greater national and DoD policy objectives.

4.2.1.8 Assist with ensuring CS equities are properly embedded into the acquisition workforce by leading representatives from across the Department in addressing strategic direction, curriculum requirements, development of learning modules, and professional development, as well as assessment of the health and welfare of the IT Acquisition Workforce.

4.2.2 Task 2 – Information Technology (IT) Support. The contractor shall provide Information Technology support as follows.

4.2.2.1 Assist in development of guidance on the operation and protection of all DoD IT and information systems, including research, development and promulgation of enterprise-wide architecture. Assist in development, maintenance and management of a sound, secure, and integrated DoD IT architecture, ensure the interoperability of IT throughout the DoD, and prescribe IT standards, including network and cybersecurity standards that apply throughout the DoD. Assist in the analysis of solution architectures and alignment with the Joint Information Environment.

4.2.2.2 Provide support to the ongoing joint development of the DoD comprehensive IT Registry. Provide support for the monitoring of all DoD IT standards related aspects to ensure they are planned, designed, developed, configured, acquired, managed, operated, protected, and coordinated to promote the sharing of DoD IT standards to effectively and efficiently achieve the Department’s goals and priorities. Maintain a consolidated inventory of DoD mission-critical and mission-essential information systems, identify interfaces between these systems, and develop and maintain contingency plans for responding to disruptions in the operation of any of these information systems.

Provide support to the ongoing development of the DoD comprehensive technical and engineering framework and configuration management processes for managing data standards across functional boundaries.

4.2.2.3 Monitor and evaluate the performance of DoD IT investments through applicable performance measurements and advise the CIO on PSAs investments, as to whether to continue, modify, or terminate such investments; review and provide recommendations on the DoD IT budget requests and the management of information resources; recommend for the elimination of duplicate DoD IT (including systems, applications, and infrastructure) within and between the DoD Components and interagency partners, and identify opportunities for improving IT efficiencies. Provide Program Objective Memorandum (POM) technical analysis support. Perform research and technical analyses of major IT modernization initiatives, in coordination with DoD CIO architecture and IT governance functions, to assist in identifying high-priority candidate issues that are technically feasible and achievable in the anticipated time for submission and evaluation through the DoD CIO POM process. Work with Component subject matter experts, to evaluate and select initial sets of candidate issues for detailed analysis and inform development plans and activities. Perform research for technical assessments and business case analyses of proposed activities supporting development and modernization efforts.

4.2.2.4 Oversee the management of information resources to reduce information collection burdens on the public;

increase program efficiency and effectiveness; and improve the integrity, quality, and utility of information to all users within and outside DoD, including capabilities for ensuring dissemination of public information, public access to…