Attachment 1 PWS OMC Information Technology Support Services.pdf

PERFORMANCE WORK STATEMENT (PWS)

Office of Military Commissions (OMC)

Information Technology (IT) Support Services 5 December 2019

1. GENERAL: This is a non-personnel services contract to provide Information Technology (IT) Services. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction. The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform IT services as defined in this Performance Work Statement except for those items specified as government furnished property and services. The contractor shall perform to the standards in this contract.

1.2 Background. The Department of Defense (DOD) established the Office of Military Commissions in 2001 to conduct Military Commissions proceeding of detainees being held for crimes against the United States at U.S. Naval Station Guantanamo Bay, Cuba (NSGB). The commission tries accused alien unprivileged enemy belligerents who have engaged in hostilities, or who have purposefully and materially supported hostilities against the United States, its coalition partners or was a part of Al Qaeda. Additional background information is available on the OMC Public Website http://www.mc.mil.

1.3 Objectives. The following objectives are required in support of the OMC Mission.

1.3.1 Provide IT Program Management services.

1.3.2 Provide IT System Administration services.

1.3.3 Provide Forward Deployed IT Help Desk services.

1.3.4 Provide Information Security Specialist Services.

1.3.5 Provide Inside/Outside Plant Network Engineering services.

1.3.6 Provide Property Accountability support services.

1.3.7 Provide Identity Management/Public Key Engineering implementation services

Scope. This task provides the full time efforts necessary to effectively support OMC’s IT needs. This task delivers support to two independent OMC Component Groups. Each Group has independent government management who will coordinate with two separate Task Leads responsible for contract delivery to the separate groups. Historically, this has been accomplished by approximately 18 full time equivalent (FTEs), as represented in Technical Exhibit 3.

The first OMC Component Group is comprised of the Office of the Convening Authority (CA), Office of the Chief Prosecutor (OCP), Trial Judiciary (TJ), Periodic Review Secretariat (PRS), and the U.S. Court of Military Commission Review (USCMCR). These groups have offices throughout the National Capital Region (NCR) and operates from NSGB during legal events. This group consists of approximately 250 Users, and 425 computer systems.

The second OMC Component Group is comprised exclusively of the Military Commission Defense Organization (MCDO). This group has offices in Crystal City, VA and operates from NSGB during legal events. This group consists of approximately 200 Users, and 425 computer systems.

The contractor provides IT Support Services for following DoD Networked Systems: NIPRNET, SIPRNET, and JWICS. The contractor will also support both networked and standalone classified Special Access information systems. With the exception of the Special Access Systems, most domain administration services are provided by the Joint Service Provider (JSP). The JSP Enterprise provisions user accounts, email, file shares, and provides the bulk of Domain Administration support functions. The contractors under the scope of this effort will have privileged accounts to administer mission application servers, computer systems, file shares, property accountability, and Help Desk services.

http://www.mc.mil/

The Special Access networked and standalone information systems are managed and maintained exclusively by the OMC IT Contractors. The Special Access networked system is a Windows based domain employing Virtual Desktop Infrastructure (VDI) for approximately 150 users. There are also approximately 30 Special Access standalone systems using a Windows based operating system. The contractor will be required to provide all necessary support for the secure operation and management of these information systems.

There are two major IT Projects the Contractor will be required to design, implement, manage, and maintain solutions. This first project requires the Contractor to transition NSGB based NIPRNET and SIPRNET systems from a traditional client-server infrastructure to Virtual Desktop Infrastructure (VDI) utilizing thick/thin clients. The second project requires the Contractor to provide a complete Public Key Infrastructure (PKI) based authentication solution in accordance with Intelligence Community Standard (ISC) 500-26 for the Special Access networked system.

This initiative will support the OMC personnel rotating between the NCR and NSGB offices who are responsible for the trial of accused detainees held at NSGB. Personnel supporting this task will be required to travel in support of the OMC Mission in accordance with section 1.6.13 below.

1.5 Period of Performance: The period of performance shall be for a one (1) month Phase-In Period, one (1) Base Period of 12 months and four (4) 12-month option periods. The Period of Performance reads as follows:

Phase-In Period: 29 FEB 2020 to 28 March 2020 Base Period: 29 March 2020 to 28 FEB 2021 Option Period One: 01 MAR 2021 to 28 FEB 2022 Option Period Two: 01 MAR 2022 to 28 FEB 2023 Option Period Three: 01 MAR 2023 to 28 FEB 2024 Option Period Four: 29 FEB 2024 to 28 FEB 2025

1.6 General Information:

1.6.1 Quality Control: The contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract. The QCP shall be delivered via electronic mail within 30 days of contract award.

Amendments/changes to the QCP shall be delivered to the COR and CO within three business days following any change.

1.6.2 Quality Assurance: The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.3 Recognized Holidays: Contractor personnel are not customarily expected to work on holidays, but holiday work is possible, subject to advance scheduling with the Contractor. Recognized Federal holidays are as follows:

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day

The amounts in schedule of the contract include an allowance for holidays to be observed. The Government will not be billed for such holidays, except when services are required by the Government and are actually performed on a holiday. The Contractor must at all times maintain an adequate work force for the uninterrupted performance of all tasks defined within this performance work statement.

1.6.4 Hours of Operation: Normal workdays are Monday through Friday between the hours of 0800 and 1700, except U.S. Federal Holidays. Contractors shall work eight (8) hours per day, 40 hours per week.

Occasionally the Contractor may be required to work an alternate schedule (e.g. evening, weekend) in support of trial/court activities and scheduled maintenance windows. To the extent possible, these activities will be scheduled and accomplished within the standard 40-hour workweek.

Surge hours in excess of 40 hours per week may occasionally be required to support the OMC Mission. All surge hours in excess of the firm-fixed price (FFP) mission support as proposed must be requested in advance and approved in writing by the COR prior. It is imperative for the Contractor to maintain constant communication with its personnel to ensure the approval of overtime before commencing work.

1.6.5 Place of Performance: Contract work will be performed in OMC Operating locations within the NCR and U.S. Naval Station Guantanamo Bay, Cuba. Contractor personnel may be required to perform contract duties at an alternate CONUS/OCONUS location in support of judicial activities and special mission requirements as approved by the COR.

The Government may permit situational telework by Contractor employees when determined to be in the best interest of the Government. Telework will be at no additional cost to the Government. All telework agreements must be authorized and approved by the Task Monitor and COR, and include date, time, and description of the work to be performed. Upon approval of telework agreements, the Government may provide GFE (e.g. mobile productivity equipment) with access to the required portals, networks, and business applications as required (Internet connections will not be furnished).

1.6.6 Type of Contract: The government will award a hybrid contract with firm-fixed price other direct cost (ODC) and travel CLINs.

1.6.7 Security Requirements: Unless stated elsewhere all Contractor personnel performing work under this contract must have and maintain a Top Secret with Sensitive Compartmented Information and Special Access Programs eligibility identified in block 1.a. of the DD Form 254. Contractors may also be required to have Alternative Compensatory Control Measures (ACCM) access. The Contractor shall comply with all security policies and procedures that apply to DoD and WHS/OSS. Security procedures shall be made available to Contractor personnel.

Prior to assignment of Contractor employees to this project, the Contractor's FSO shall submit personnel security clearance validation through use of a Visit Authorization Request (VAR) for each employee, in accordance with DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM) to the designated security representative.

Changes in personnel security clearance status of Contractor employees shall be forwarded in writing to the Contracting Officer and the designated security representative. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the work force at the requisite Top Secret with Sensitive Compartmented Information and Special Access Programs eligibility security clearance level are essential.

1.6.7.1 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use. Government facilities, equipment, and materials shall be secured at the end of each work period.

1.6.7.2 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost, misplaced, or used by unauthorized persons.

NOTE: All references to keys include key cards. Government issued keys shall not be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan.

Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

1.6.7.2.1. In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.6.7.2.2. The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.7.3 Lock Combinations. The Contractor shall establish and implement methods of ensuring that lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s Quality Control Plan.

1.6.8 Special Qualifications: See Section H.

1.6.9 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The contracting officer, Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. The contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues.

These meetings shall be at no additional cost to the government.

1.6.10 Contracting Officer Representative (COR): The (COR) will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance, maintain written and oral communications with the Contractor concerning technical aspects of the contract, issue written interpretations of technical requirements, including Government drawings, designs, specifications, monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies, coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.11 Key Personnel: The personnel listed below are considered essential to the work being performed under this contract. Before removing, replacing, or diverting any of the listed or specified personnel or facilities, the Contractor shall (1) notify the Contracting Officer reasonably in advance and (2) submit justification (including proposed substitutions) in sufficient detail to permit evaluation of the impact on this contract. The Contractor shall make no diversion without the Contracting Officer's written consent.

# Position Qualifications

5.1.1 Program Manager Skill/Experience:

- 10+ years IT Program Management experience

- 7+ years of experience leading tasks of a similar size/scope

- Bachelor’s Degree in Computer Science or 10-years related field experience.

- Shall possess at the time of award a TOP SECRET w/ SCI Eligible security clearance Required Certifications: PMP

5.1.2 System Administrator/Task

Lead

Skill/Experience:

- 7+ years of experience with Microsoft System Administration in an enterprise environment, including Microsoft Active Directory, Group Policies, and Visual Basic Scripting

- 4+ years of experience leading tasks of a similar size/scope

- 4+ years of experience with the following IT disciplines:

-- Security configuration of Windows Server/Windows 10 -- Microsoft SCCM or similar technologies

-- Maintaining PKI Infrastructure -- Implementing and managing VDI Infrastructure -- Server Virtualization Technologies

- Bachelor’s degree in an IT related field, or 10-years equivalent experience

- Preferred; 3-years’ experience with Vormetric data encryption solutions

- Shall possess at the time of award a TOP SECRET w/ SCI Eligible security clearance

- Required Certifications:DoD8570.01M IAT Level II, VCP, and MCSE Core Infrastructure

5.1.6 Network Engineering Skill/Experience:

- 5+ years of experience delivering tasks of a similar size/scope

- Shall possess at the time of award a TOP SECRET w/ SCI Eligible security clearance

- Required Certifications: Cisco Certified Network Professional (CCNP) Routing and Switching, DOD 8570.01M IAT-Level II

1.6.11.1 Surge Staff: Based on OMC Mission needs and subject to COR approval, the Contractor shall provide Surge Staffing. All contract positions are inclusive and subject to Surge upon approved request.

Surge activities are limited to tasks within the scope of the contract, but exceed established firm-fixed price (FFP) mission support levels as proposed. The Contractor shall provide qualified Surge Staff within 30-days of COR Approval.

1.6.12 Identification of Contractor Employees: Contractors shall not begin performance until the complete documentation for a Personnel Background Investigation has been submitted. An Identification (ID) badge and Common Access Card (CAC) shall not be issued until complete documentation has been submitted to OMC. The CAC card is required for access to Government computer databases and entering military installations. If a background investigation results in an unfavorable finding, the Contracting Officer will notify the Contractor and the contractor employee will not be able to perform services at the facility, and must return all identification badges, CAC cards, and other items issued previously issued by the Government.

Upon award of the contract, the contractor will immediately contact the COR for processing procedures to meet the security requirements as well as in-processing forms.

Contractors shall comply with the local installation and OMC personnel identification and access requirements. The Contractor is responsible for absences of Contractor personnel due to expired identification and access documents Contractor personnel shall wear a visible Security badge ID when required. Contractor shall turn in the all issued badges, CAC and identification cards to the COR upon termination of their services under this contract. Contractors shall immediately report any lost or stolen badges or CAC to the COR.

1.6.13 Contractor Travel: Local travel, including to and from the Pentagon and in the surrounding NCR performed in the course of this contract is considered the cost of doing business and will not be reimbursed as a direct charge to the contract. All travel shall be approved by the COR prior to the contractor incurring expenses for travel or beginning any government related travel. The Contractor shall be reimbursed for actual allowable, allocable, and reasonable travel costs incurred during performance of this effort in accordance with FAR 31.205-46, "Travel Costs." The contractor will only be reimbursed for travel expenses; not for any labor hours arising from the travel, as labor is included in the LH CLIN. The contractor will not receive an hourly payment for the time contractor personnel spend in travel. Any travel or arrangements for travel are conducted without the required approvals(s), the Contractor shall be responsible for all associated costs. Requests for approval of costs in excess of maximum per diem rates in accordance with the procedures contained in FAR 31.205-46(a)(3) shall be submitted to the COR for final approval prior to commencement of travel.

Contractors are required to travel outside the Continental United States (OCONUS) under this contract and must possess a valid U.S. Government issued passport. All travel requires prior approval by the Contracting Officer’s Representative and must be in accordance with the Federal Acquisition Regulations.

Contractors will be required to travel to U.S. Naval Station Guantanamo Bay (NSGB), Cuba or other overseas locations. While in NSGB, contractors may be required to work up to 120 days. While deployed to NSGB on a temporary status, contractors shall reside in a containerized housing unit (CHU) trailer. In the event the CHU trailer is unavailable, with the COR’s approval, the contractor shall reside in the Navy Lodge, BOQ or other Government provided accommodations. Contractors will not be reimbursed for the cost of transient housing not previously approved by the COR.

The Government will provide contractors transportation while in NSGB; contractors shall possess the required licenses to operate all vehicles or equipment necessary to perform under this contract. Contractors permanently assigned to NSGB are authorized leased housing. The Contractor is responsible for providing leased housing through the Housing Service Center (HSC). The HSC website can be accessed at:

https://www.cnic.navy.mil/regions/cnrse/installations/ns_guantanamo_bay/ffr/housing_and_lodging.html

The Government will reimburse the contractor’s leased housing, in addition to the shipment of household goods to and from NSGB, with prior approval from the COR. In the event the contractor reside in NSGB for a period of less than one (1) year, the return shipment costs of their household goods will be borne by the contractor, unless the contract is terminated early by the Government.

The contracting agency must engage and work with the Contracting Officer to register in the Synchronized Pre-deployment and Operational Tracker (SPOT) to provide "Letters of Authorization" to their respective contractors to facilitate the travel and reimbursement of any and all OCONUS travel. Training and registration for SPOT can be accessed at https://spot.dmdc.mil/privacy.aspx.

1.6.14 Other Direct Costs (ODC): There is an ODC CLIN associated with the contract that will include Travel, Surge Support, and Hardware/Software equipment. The Travel category includes approved travel outlined in 1.6.13, reproduction, and shipping expenses associated with training activities and visits to contractor facilities. The surge support category includes both overtime and the onboarding of additional staff labor in support of trial or special project activities. The Equipment category includes IT hardware and software items required to support delivery of the tasks identified within the scope of the PWS.

1.6.15 Data Rights: N/A

1.6.16 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion https://spot.dmdc.mil/privacy.aspx of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.17 Phase In/Phase Out Period: The contractor shall provide a phase in transition plan that describes how the contractor will transition, with minimum to no disruption to OMC operations. The phase-in period shall not exceed 30 calendar days for the transition during which the contractor shall complete administrative requirements and overlap with the current contract. The phase-in period will include a 15-calendar day administrative period and a 15-calendar day overlap period. During administrative period, the contractor shall obtain network accounts, complete required SOUTHCOM Country-Theater Clearance training, travel, and secure lodging. During the 15-calendar day overlap period, the contractor shall become familiar with task performance requirements, transfer accountability of government furnished equipment and tools, review respective standard operating procedures, and interface with appropriate OMC government leadership. The plan must be detailed and include start-up activities required to transition to full operational capability to successfully assume all duties under this PWS. A draft plan, but near to complete draft plan, must to be provided to the government at proposal submission. The Final plan will be delivered to the government by the 7th day of the Phase-in Period. At a minimum, the contractor shall:

* Provide a detailed transition methodology in logical sequence to ensure a smooth transition of all tasks and subtasks of the contract without interruption or degradation of service levels;

* Interface and coordination with the government;

* Identification of key transition events and objectives with a corresponding completion timeline;

* Identification of associated risks and issues with risk mitigation strategies and;

* Identification of key persons participating in the transition.

The contractor shall also provide a phase-out plan no later than 45-days prior to expiration of the contract.

The contractor shall maintain complete documentation that is 100% assessable to the designated government representatives via a web portal or some other method directed by the government. The contractor shall overlap with the incoming contractor during transition for a nominal period of 30 days and, work with government personnel and the incoming contractor to transfer all knowledge, information and documentation related to this contract. At all times during the phase out period the contractor must exhibit professional conduct. The contractor must provide a working draft of the plan for government review 60-days prior to contract expiration date. The type of information and documentation to be transferred includes but is not limited to:

* System description and architecture (hardware, software, network)

* All government furnished equipment and inventory maintained during the life of the contract

* O&M and training manuals and material

* Data model schema’s and interface information

* Standard Operating Procedures

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1. DEFINITIONS:

2.1.1. CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER. A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5. DELIVERABLE. Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

2.1.6. KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.7. PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.8. QUALITY ASSURANCE. The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.9. QUALITY ASSURANCE Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.10. QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.11. SUBCONTRACTOR. One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.1.12. WORK DAY. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.12. WORK WEEK. Monday through Friday, unless specified otherwise.

2.2. ACRONYMS:

ACOR Alternate Contracting Officer's Representative APO Accountable Property Officer ATO Authorization to Operate BCTF Boards, Commissions, and Task Forces CA Convening Authority CAC Common Access Card

CCRI Command Cyber Readiness Inspection CCNP Cisco Certified Network Professional CFR Code of Federal Regulations CHU Containerized Housing Unit COMSEC Communications Security CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTR Contracting Officer's Technical Representative COTS Commercial-Off-the-Shelf CRL Certificate Revocation List DD Form 254 Department of Defense Contract Security Requirement List DFARS Defense Federal Acquisition Regulation Supplement DMDC Defense Manpower Data Center DOD Department of Defense DPAS Defense property Accountability System EM Enterprise Management Directorate eMASS Enterprise Mission Assurance Support Service FAR Federal Acquisition Regulation FFP Firm-Fixed Price FTE Full Time Employee HIPAA Health Insurance Portability and Accountability Act of 1996 HBSS Host Based Security System HSC Housing Service Center IPSEC Internet Protocol Security IA Information Assurance ICAM Identity, Credential, and Access Management ISSO Information System Security Officer IT Information Technology JWICS Joint Worldwide Intelligence Communication System JSP Joint Service Provider JTR Joint Travel Regulation KO Contracting Officer MCDO Military Commissions Defense Organization MCSE Microsoft Certified Solutions Expert NCR National Capital Region NIPR Non-Secure Internet Protocol Router Network NSGB Naval Station Guantanamo Bay OCI Organizational Conflict of Interest OCONUS Outside Continental United States (includes Alaska and Hawaii) OCP Office of the Chief Prosecutor ODC Other Direct Costs OMC Office of Military Commissions PC Property Custodian PIPO Phase In/Phase Out PKI Public Key Infrastructure PMP Project Management Professional POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Program RMF Risk Management Framework SAV Staff Assistance Visit SCAP Secure Content Automation Protocol SCCM System Center Configuration Manager STIG Secure Technical Implementation Guidance

SIPR Secure Internet Protocol Router Network SOP Standard Operating Procedure TE Technical Exhibit TJ Trial Judiciary USCMCR U.S. Court of Military Commission Review VAR Visit Access Request VCP VMware Certified Professional VOIP Voice Over Internet Protocol VPN Virtual Private Network WHS Washington Headquarters Services

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1. Services: The government will provide basic services to phones, utilities, information technology, and general office supplies) while working in Government facilities.

3.2 Facilities: Basic facilities such as workspace and its associated operating requirements (i.e., phones, desks, utilities, information technology, and general office supplies) will be provided while working in Government facilities.

3.3 Equipment: The Government will provide will provide standard information technology equipment for contractors working within government facilities; this is inclusive of phones, computers, printers, and remote access capabilities upon Information Technology Manager (ITM) approval. Teleworkers will only use government furnished equipment to remotely access the JSP network.

3.4 Software/Tools: The contractor shall use Government approved tools to accurately document, administer, and maintain data and information for all Joint Service Provider (JSP) network connected locations. Government provided tools include, the following: (1) BMC Remedy for ticket tracking and routing, configuration management database (CMDB), and asset management; and (2) the enterprise portal, using Microsoft SharePoint, as a knowledge management repository including incident reporting and standard operating procedure (SOP) library.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES:

4.1 General: The Contractor shall furnish all supplies, equipment, facilities and services required to perform work under this contract that are not listed under Section 3 of this PWS.

4.2 Top Secret Facility Clearance: The contractor shall maintain a TOP SECRET facility clearance from the Defense Security Service. The Contractor’s employees, performing work in support of this contract shall have been granted a TOP SECRET security clearance from the Defense Industrial Security Clearance Office. The DD 254 will be forwarded to the contractor upon award of the contract.

4.3. Equipment: The Contractor will be required to procure and provide the government with information technology hardware and software essential for successful contract delivery. Equipment procurements will be funded via ODC CLIN and are subject to availability of funds and COR approval.

PART 5

SPECIFIC TASKS

5 SPECIFIC TASKS:

5.1 Basic Services: The contractor shall provide IT support services for NIPRNET, SIPRNET, JWICS, and Special Access information systems in the NCR and NSGB duty locations. These are predominantly client/server networked systems, but do include standalone information systems.

The following tasks outline the mission essential functions within the OMC IT environment. All position must maintain compliance with 8570.01M IAT Level 2 or higher for administrative right to a DoD Network.

5.1.1 Program Manager. The Contract Program Manager shall be the primary liaison to the Government for all areas associated with this contract as well as manage the work schedules and activities performed by the contract employees. The contractor shall:

5.1.1.1 Provide contract Draft and Final Transition Plans.

5.1.1.2 Provide Staffing Management Plan of all assigned contractor staff.

5.1.1.3 Provide Monthly Status Report that captures or summarizes completed tasks, staffing status, financials (to include labor, travel and equipment ODC funds), and any issues/challenges encountered.

5.1.1.4 Provide Project planning, and facilitate implementation of government-approved projects.

5.1.1.5 Participate in authorized on-site meetings; prepare and present briefings on progress of work, prepare white papers and draft responses to IT-related data calls, as requested by the Government Task Monitors.

5.1.1.6 Develop and maintain Standard Operating Procedures (SOPs) to identify collaborative responsibilities and support process interaction with other Government and contractor IT groups.

Present SOPs to the Government Task Monitors for review and approval prior to implementation.

5.1.1.7 Facilitate integration with established JSP processes and procedures.

5.1.2 System Administration. The contractor shall:

5.1.2.1 Provide operational and maintenance (O&M) support for NIPRNET, SIPRNET, and JWICS system infrastructure for approximately 400 users.

5.1.2.2 Provide O&M support for Special Access System infrastructure for approximately 150 users.

5.1.2.3 Provide O&M support for Printer infrastructure, to include Pharos Secure Print.

5.1.2.4 Develop, implement, manage, and maintain VDI for thick/thin/zero clients and server virtualization technologies.

5.1.2.5 Provide O&M support for SQL Database infrastructure.

5.1.2.6 Provide O&M support for OMC server and desktop-based software applications.

5.1.2.7 Provide data backup and restoration capabilities for NIPRNET, SIPRNET, JWICS, and Special

Access Systems.

5.1.2.8 Support replication of network file share volumes via Distributed Files System w/ Replication

(DFS-R) between the NCR and NSGB locations.

5.1.2.9 Provide support for storage area network (SAN) and encrypted file storage capabilities.

5.1.2.10 Create/maintain a standalone workstation images in accordance with DOD security standards.

5.1.2.11 Provide systems recovery and repair operations employing industry best practices for systems troubleshooting and fault isolation.

5.1.3 Service Desk (Help Desk). The contractor shall:

5.1.3.1 Provide IT Help Desk support using the Information Technology Infrastructure Library (ITIL)

Information Technology Service Management (ITSM) model during OMC business hours.

5.1.3.2 Provide IT support services and call triage including First Call Resolution, Impact and Priority

Based Incident Categorization.

5.1.3.3 Provide timely customer feedback, monitor/update the status of assigned tickets, and ensure warm hand-off and/or ticket escalation.

5.1.3.4 Maintain a professional appearance and demeanor during duty hours, official travel, and when working with the user community.

5.1.3.5 Provide O&M support for OMC desktop, laptop, and tablet information systems.

5.1.3.6 Image information systems using government provided operating system images.

5.1.3.7 Provide onboarding and provisioning of new accounts, and deprecation for users departing the organization.

5.1.3.8 Submit tickets for all reported incidents, work orders, and service requests. They are required to utilize Government approved tools to accurately report, document, administer, and resolve customer issues. Government provided tools include, but are not limited to the following: (1) BMC Remedy for ticket tracking and routing; and (2) Microsoft SharePoint, as a knowledge management repository for SOP’s.

5.1.3.9 Provide surge support to NSGB in support of OMC Users participating in court hearings, trial activities, and other events as required.

5.1.3.10 Provide VTC support for scheduling, call setup, testing, and troubleshooting measures.

5.1.3.11 Facilitate mapping and troubleshooting user access to shared network resources.

5.1.3.12 Provide support for computer peripheral device requests, installation, and troubleshooting IAW established policies and procedures.

5.1.3.13 Provide support for software requests, installation, and troubleshooting IAW established policies and procedures.

5.1.3.14 Provide support for mobile device requests, issuance, accountability, troubleshooting, and retrieval IAW government approved processes.

5.1.3.15 Provide PKI Trusted Agent (TA) support, this is includes but is not limited to; submitting new token requests, retrieving, issuing tokens, and the collection/turn-in of returned/expired tokens IAW established policies and procedures.

5.1.3.16 Provide voice over Internet protocol (VOIP) and Secure VOIP troubleshooting, this includes port activation requests, connectivity, and trouble ticket submission.

5.1.3.17 Troubleshoot all information system hardware line replaceable units (LRU).

5.1.3.18 Provide maintenance and support for local/networked printers, scanners, digital senders, and other multi-function devices. The contractor will procure replacement parts (e.g. Fuser) and other consumables (e.g. Toner) on a cost reimbursable basis as required.

5.1.3.19 Provide transportation, delivery and setup of IT assets throughout the NCR and NSGB. The Government will provide transportation to Guantanamo Bay, Cuba and for shipment of IT assets.

Transportation, delivery and setup of IT assets throughout Guantanamo Bay, Cuba, will require the contractor to use Government vehicles in NSGB and will have to sign an indemnity agreement.

5.1.3.20 Provide desk side training to the end user for standard software and equipment issues as requested. Desk side training includes but is not limited to software and equipment demonstration, tri-fold brochures and quick start guides, and demonstration of links to online and web based IT training.

5.1.4 Information Security Specialist Services. The contractor shall:

5.1.4.1 Ensure that all OMC information systems meet Department of Defense Instruction 8500.01 mandated Cybersecurity requirements.

5.1.4.2 Provide Information System Security Officer (ISSO) support for OMC systems.

5.1.4.3 Facilitate information system authorization to operate (ATO) compliance and re-accreditations

IAW with DOD 8510.01 and ICD503.

5.1.4.4 Facilitate registration and maintenance of OMC information systems in the Enterprise Mission

Assurance Support Service (eMASS) system. This support is inclusive of all efforts associated with the Risk Management Framework (RMF) activities.

5.1.4.5 Facilitate the completion and submission of waivers, exception to policy requests, and system change requests.

5.1.4.6 Provide Host Based Security System (HBSS) client management.

5.1.4.7 Implement and maintain anti-virus and malicious code protection for all OMC information systems using government provided software.

5.1.4.8 Provide and/or facilitate the distribution and installation of security patches.

5.1.4.9 Provide security vulnerability scanning and reporting using government provided applications.

5.1.4.10 Support scheduled OMC Command Cyber Readiness Inspections (CCRI), security assessment visits (SAV).

5.1.4.11 Provide onsite incident management during normal working hours for NIPRNET, SIPRNET, JWICS and Special Access Systems and equipment. In addition, the contractor may be required to provide surge support after normal working hours to include weekends and holidays as approved by the COR.

5.1.5 Network Engineering. The contractor shall:

5.1.5.1 Provide O&M support for OMC NIPRNET, SIPRNET, JWICS, and Special Access System

Infrastructure located in NSGB, with the exception of the Special Access System that exists in both the NCR and NSGB.

5.1.5.2 Provide engineering and installation (E&I) support for inside/outside plant LAN wiring & fiber optic cable terminations throughout OMC facilities in NSGB.

5.1.5.3 Provide detailed engineering implementation plans, diagrams, List of Materials, and project schedule in support of E&I efforts. The government will provide necessary materials and surge staffing to support implementation projects that exceed established firm-fixed price (FFP) mission support levels as proposed.

5.1.5.4 Maintain as-built cabling/fiber documentation and diagrams for OMC Network infrastructure.

5.1.5.5 Configure and manage network encryption devices.

5.1.5.6 Manage assigned IP address allocations.

5.1.5.7 Coordinate with JSP/DISA and other Contractor personnel to provide support for WAN optimization and redundancy.

5.1.6 Quality Assurance Specialist (Sr. Property Admin). The Contractor shall:

5.1.6.1 Provide Property Custodian (PC) to support Accountable Property Officers (APOs) for accountable IT assets.

5.1.6.2 Perform duties as Property Custodian (PC) following mandatory DPAS training and certification requirements. As a primary hand receipt holder, the contractor shall sign for various program/administrative property on DPAS electronic hand receipt and further sub-hand receipt property to program sub-hand receipt holders/end-users.

5.1.6.3 Complete Defense Property Accountability System (DPAS) Training within 10 business days of assignment.

5.1.6.4 Process accountable property activity in the Defense Property Accountability System (DPAS) to include additions, deletions, transfers, adjustments vouchers, and disposal using proper financial documents to facilitate financial audit readiness in accordance with DoD Instruction 5000.64 “Accountability and Management of DOD Equipment and Other Accountable Property.”

5.1.6.5 Prepare inventory reports, sub-custodian hand receipts, and maintain inventory records of work accomplishments and administrative information, as requested. Coordinate the preparation, presentation and communication of work-related information to Mission Partners’ Government Lead, JSP Lead APO and subordinate APOs.

5.1.6.6 Conduct physical inventories to verify accuracy of information. Initiate and close out the monthly cyclic 10% inventory as well as the annual 100% inventory in DPAS.

5.1.6.7 Conduct analytical and problem solving related to DPAS data to ensure data quality and accuracy.

5.1.6.8 Assist APOs in building an accurate and complete supporting document File IAW with JSP SOPs and Processes in order to maintain an accurate DPAS history file. This type of support is also required during audits, inspections, and Financial Liability Investigation of Property Loss (FLIPL) processing.

5.1.6.9 Identify and advise on all hardware/software approaching End of Lifecycle (EOL).

5.1.6.10 Provide Monthly consumables supply report to identify/forecast low bench-stock levels of government identified key items (e.g. Print Toner, Print Fuser Kit)

5.1.7 Communications Security. The contractor may be required to function as a Communications

Security (COMSEC) custodian in support of network encryption devices. If required, the Government will provide requisite training. This will be identified on the DD254, Department of Defense Contract Security Classification Specification.

5.1.8 Identity Management/PKI Engineering. The PKI Engineer will support OMC PKI related technology requirements. The Contractor Shall:

5.1.8.1 Propose a turnkey solution for the design, implementation, management, and maintenance of a PKI based authentication capability for the Special Access networked system.

5.1.8.2 Provide necessary hardware, software, and tokens to support Special Access PKI solution.

5.1.8.3 Perform certificate generation and issuance for the Special Access system.

5.1.8.4 Provide secure key storage capabilities, and key recovery for the Special Access system.

5.1.8.5 Develop and maintain PKI Certificate Practice Statement (CPS) for the Special Access system.

5.1.8.6 Provide O&M support, and technical guidance for all OMC PKI related activities.

PART 6

APPLICABLE PUBLICATIONS

6. APPLICABLE PUBLICATIONS:

6.1. The Contractor must abide by all statutes, applicable regulations, publications, manuals, and federal policies, procedures.

PART 7

ATTACHMENT/TECHNICAL EXHIBIT LISTING

7. ATTACHMENT/TECHNICAL EXHIBIT LIST:

7.1. Attachment 1/Technical Exhibit 1 – Performance Requirements Summary

7.2. Attachment 2/Technical Exhibit 2 – Deliverables Schedule

7.3 Attachment 3/Technical Exhibit 3 – Estimated Workload Data

TECHNICAL EXHIBIT 1

Performance Requirements Summary The contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

Performance Objective (The Service required—usually a shall statement)

Standard Performance Threshold (This is the maximum error rate. It could possibly be “Zero deviation from standard”)

Method of Surveillance

PRS # 1. Prepare and Submit Monthly Reports

• Marked FOUO

• Report is submitted on the same day each month; unless submittal date falls on a holiday or weekend, then the following business day is acceptable.

• Reports are grammatically correct and professional in appearance.

Draft documents contain minor typographical errors; Final documents are error free

COR/Task Monitor Review

PRS # 2 Attendance of meetings, briefings and other related business

• Timely attendance

• Meeting minutes taken and delivered within 5 business days.

Draft documents contain minor typographical errors; Final documents are error free

Task Monitor Review

PRS # 3 Prepare and submit deliverables as described in PWS

• Deliverables are timely in accordance with agreed upon schedule and/or project plan.

• Briefings are thorough, accurate and well organized; articulate clear conclusions and/or recommendations, as appropriate;

are comprehensive, coherent and conducted with skill and competence and are developed and formatted with professionalism reflecting government guidance as appropriate.

• Draft reports are comprehensive, coherent, accurate, and submitted for inspection/review by government chain of inspection.

Draft documents contain minor typographical errors; Final documents are error free

COR/Task Monitor Review

TECHNICAL EXHIBIT 2

DELIVERABLES SCHEDULE

Deliverable Frequency # of Copies Medium/Format Submit To

1.6.1. Quality

Control Plan (QCP)

Once, within 30-days of contract award one MS Word Delivered to COR via email

1.6.17. Transition

Plan (FINAL)

Day 7 of Phase In Period one Mutually agreed format

Delivered to…