22F8003_PWS.pdf

Contract: HQ079617D0001 Order: HQ085722F8003

Missile Defense Agency

Integrated Research & Development for Enterprise Solutions (IRES)

PERFORMANCE WORK STATEMENT

8 June 2023

Contract Number:

HQ079617D0001

Task Order Title:

Enterprise Information Technology Services

Task Order Number:

HQ079617D0001/22F8003

Period of Performance:

5 September 2022 – 8 August 2025

Task Order Type: CPIF

Task Order Revision History

Rev Description of Changes Date

0 Contract Award TBD

A

10.5.5.1: Add Cisco Lab Support

10.14.9/10.14.10 : Add On Call Support for FGA and VSFB

ADD: 10.14.15 DEVSECOPS Software Factory Assessment and Development Pipeline

ADD: 10.7.2.1 Amazon Web Services (AWS) Resident Architect

ADD: 10.2.9 End User Standard Configuration - Headsets

9 Nov 2022

A.1 10.4.4.1: Add Software Procurement Approval process TBD

TABLE OF CONTENTS

1.0 VISION AND PURPOSE

2.0 BACKGROUND

3.0 SCOPE

4.0 SERVICE SUMMARY ITEMS

5.0 DELIVERABLES

5.1 CDRL IDENTIFICATION

5.2 CDRL TAILORING

6.0 MILESTONES

7.0 GOVERNMENT PROPERTY (GP)/GOVERNMENT FURNISHED PROPERTY

(GFP)/GOVERNMENT FURNISHED INFORMATION (GFI)/CONTRACTOR ACQUIRED PROPERTY

(CAP) 12

7.1 REQUEST FOR PROPOSAL (RFP) ATTACHMENT J-05 – GFP LIST

7.2 MDA-APPROVED SOFTWARE LIST

7.3 DIRECT TV SATELLITE TELEVISION LOCATIONS: HQ, VB COMPLEX, MDIOC, DLG

7.4 GOVERNMENT FACILITY EITS-DEDICATED WORKFORCE LOCATIONS

8.0 SPECIAL REQUIREMENTS

8.1 ADDITIONAL INFORMATION

8.2 INVITED CONTRACTOR OR TECHNICAL REPRESENTATIVE STATUS REPUBLIC OF KOREA (4 JUNE 2007) AS REQUIRED BY USFK

REG 700-19, 28 AUGUST 2012

8.3 UNITED STATES FORCES KOREA (USFK) WARTIME CLAUSE

9.0 APPLICABLE DIRECTIVES/REGULATIONS

10.0 STATEMENT OF OBJECTIVES AND OUTCOMES

10.1 TASK ORDER ADMINISTRATION

10.2 PORTFOLIO MANAGEMENT

10.3 DATA MANAGEMENT AND ANALYTICS

10.4 IT SUPPLIER AND ASSET MANAGEMENT

10.5 ARCHITECTURE ENGINEERING SERVICES

10.6 COMPUTER NETWORK DEFENSE

10.7 CLOUD/DATA CENTER SERVICES/APPLICATION SERVICES – (ICN/ICS)

10.8 DOD NETWORK PROVISIONING AND COMSEC

10.9 GLOBAL NETWORK OPERATIONS AND MISSION/EVENT SERVICES

10.10 CHANGE AND CONFIGURATION MANAGEMENT

10.11 CONTINUAL SERVICE IMPROVEMENT

10.12 MDA ELEMENT IT SERVICES – SAP IT AND JWICS

10.13 USER SERVICES

10.14 IC MANAGED SLA FUNDED SUPPORT

10.16 MDA FOREIGN MILITARY SALES IT SUPPORT

1.0 Vision and Purpose 1

The Enterprise Information Technology (IT) Services (EITS) Task Order (TO) provides the Missile 2

Defense Agency (MDA) with Enterprise (Agency-wide) IT services and solutions in support of 1) 3

Research, Development, Test, and Evaluation (RDT&E), 2) common-use IT and business 4 requirements, and 3) Missile Defense System (MDS) support tasks. This includes, but is not 5 limited to, providing deep experience in Engineering & Technical Services, Cybersecurity, Data 6

Science & Analytics, Cloud & Virtualization Services, and Software Development, Security, and 7

Operations (DevSecOps). EITS will help the MDA Chief Information Officer (CIO) lead the 8

Agency in a thorough modernization of current systems and services to offer all parts of the 9

Agency the best possible balance of value and performance across both commercial and on-10 premise infrastructures, yielding dramatic improvements in capacity, reliability, and security. 11

The Office of the CIO is responsible for ensuring that Information Management (IM)/IT are 12 acquired and that information resources are managed and protected for the MDA in a manner 13 that meets the requirements of legislation, regulations, and directives which include, but are 14 not limited to, the Clinger-Cohen Act of 1996, the Paperwork Reduction Act of 1995, the E-15

Government Act, the Federal Information Security (INFOSEC) Management Act (FISMA) of 2002, 16 the President’s Management Agenda, the DoD 8500 policy framework, DoD Directive (DoDD) 17

8000.1, National Security Agency (NSA) Information Assurance (IA) policies, and the priorities 18 established by the Director, MDA. 19

The MDA Enterprise Information Environment Mission Area (EIEMA) and Business Mission 20

Areas (BMAs) are Department of Defense (DoD) Architecture Framework (DoDAF) and Joint 21

Information Environment (JIE) compliant; they provide processing, storage, and transport of 22 information; systems and network management; information dissemination management; and 23 cybersecurity functions. The CIO provides the MDA with secure classified and unclassified IT 24 systems, data centers, operations and monitoring centers, telecommunications, Local Area 25

Network (LAN) and Wide Area Network (WAN) infrastructure, and customer services to meet 26 both DoD and MDA requirements of High Availability (HA) and Disaster Recovery (DR)–27

Continuity of Operations (COOP) (DR-COOP). The MDA CIO also provides support to the 28

Warfighter Mission Area and the Defense Intelligence Mission Area (DIMA) for various 29 components located within the MDA core sites. Components such as the Joint Functional 30

Component Command (JFCC) for Integrated Missile Defense (IMD) (JFCC-IMD) and the 31

Intelligence Support Center (ISC) represent two of the groups in these mission areas supported 32 by the Integrated Research and Development for Enterprise Solutions (IRES) contract. 33

2.0 Background 34

This TO is a follow-on to the IRES TOs listed below. 35

Predecessor TO: 18F8003 36

This TO will follow the Systems Engineering and Integration (SE&I) requirements identified in 37 the IRES Systems Engineering and Program Integration (SE&PI) TO. 38

3.0 Scope 39

This TO will support the MDA CIO’s mission to ensure that the MDA’s IT enterprise services and 40 resources are administered, acquired, managed, and operated in compliance with the goals and 41 directives of existing statutes and DoD regulations and the priorities set by the MDA Director 42 and MDA CIO. 43

This TO will provide effective, efficient, secure, and reliable information network services for 44 critical DoD and MDA communications and information processing utilizing accepted industry 45 best practices and standards. 46

This TO will administer two major data centers, one in Huntsville, AL (HSV) and the other in 47

Colorado Springs, CO (COS). Both data centers provide a mix of classified and unclassified IT 48 services, with each providing DR-COOP for critical services to the other. 49

This TO will administer the MDA RDT&E, Common Use IT, Specialty Systems, and Business 50

Systems within the Defense IT Portfolio Repository (DITPR) database. This TO shall provide the 51

Operations and Maintenance (O&M) support to the following systems: RDT&E (MDA/IC – 52

General Services [GENSER] ULAN, MDA/IC – GENSER CLAN, MDA/IC – Unclassified Demilitarized 53

Zone [DMZ] [UDMZ], MDA/IC – Classified DMZ [CDMZ], MDA/IC – MDA Unclassified Network 54

[UNet], MDA/IC – MDA Classified Network [CNet], MDA/IC – Classified Private Cloud [C-CLD]), 55

Common Use and Specialty Systems (MDA/IC – GENSER CLAN, MDA/IC – GENSER ULAN, 56

MDA/IC – Lenel OnGuard), and Business Systems (MDA/IC – Command IM System [CIMS]/IM 57

Program Activity Control [IMPACT], MDA/IC – Electronic Content and Records Tool [ECaRT], 58

MDA/IC – Human Resources [HR] Report Tracking System [HRTS]/Personnel Tracking System 59

[PTS], MDA/IC – MDA Program Resource Internet Database Environment [PRIDE], MDA/IC – 60

MDA Standardized Procurement System [SPS]). Systems within the DITPR not covered in this 61 section are called out specifically in the Performance Work Statement (PWS) or are not 62 supported by this TO. 63

4.0 Service Summary Items 64

In accordance with (IAW) the IRES Performance Evaluation and Incentive Plan, Service Summary 65

Items (SSIs) 1 – 4 are common (required) on all TOs and will be assessed at the contract level 66

(i.e., all TOs will receive the same rating – One Fail, All Fail model). 67

SSIs 5 – 10, identified below, capture the specific TO SSIs deemed essential to successful 68 execution of the TO. 69

SSI Definition

Identifier SSI 5 – 10

Weight SSI 5 = 5 points

SSI 6 = 30 points

SSI 7 = 15 points

SSI 8 = 15 points

SSI 9 = 5 points

SSI 10 = 5 points

Definition SSIs 5 – 10 will be scored using a Basic Scoring methodology.

Using this method, each SSI element is given a score of the same weight (within each SSI).

Valid Measure Ratings

Pass

Measure’s supporting data and information clearly displays it meets or exceeds criteria.

Fail

Measure’s supporting data and information clearly displays a failure to meet criteria.

Measurable Concept All SSI elements are equally important. Elements are evaluated on a Pass/Fail basis and the point values are awarded to passing metrics.

Baseline Measure Total SSI Points / Total # of Elements = Total Value of Individual

Element

Technical Performance

Measures

Total Value of Individual Element X # of Successful Elements =

SSI Quality Performance Index (QPI) Score

Notes The sum of the measures passed for each SSI will give the total

QPI score.

Attachment 3 Attachment 3 to this PWS identifies all the agreed upon 8003

SSIs – See Attachment 3 at the end of this PWS.

5.0 Deliverables 72

The point of delivery for all Contract Data Requirements List (CDRL) products, except as noted 73 in Exhibit C, is the MDA ECaRT system. The contractor shall deliver all such products by saving 74 and profiling them in ECaRT, with the appropriate notification of delivery letter transmitted 75 electronically to the Government’s Data Management Office (DMO). Reference Exhibit C for 76 specific CDRL delivery instructions. 77

5.1 CDRL Identification 78

Task CDRL DID Title Description

10.1.2.2 C001 DI-MGMT-

81861/T

Integrated Program Management Report (IPMR) Full EVM

This CDRL contains data for measuring cost and schedule performance. The IPMR is structured around seven formats that contain the content and relationships required for the electronic submissions.

10.1.2, 10.2.4, 10.2.10, 10.4.1, 10.4.4.1, 10.6.1.1, 10.6.1.2, 10.6.2, 10.7.1, 10.7.2, 10.7.4, 10.8.1, 10.8.3, 10.9.1, 10.9.3, 10.10.1, 10.10.2, 10.10.5, 10.11, 10.11.3, 10.13.1

C002 DI-MISC-

80508B/T

EITS Task Order Status Report

This CDRL provides significant accomplishments, issues, concerns, lessons learned, and risks associated with the TO.

10.2.2 C003

DI-MISC-

Role Based Administration (RBA) Plan

This CDRL contains the plan for the role provisioning process, governance to address role Life Cycle Management (LCM), roles and responsibilities, and measurement of these criteria.

Task CDRL DID Title Description

10.4.4.2 C004

Asset Management and Maintenance Report [Quarterly]

This CDRL captures all software licenses and deployed software obtained and in use for the MDA. The report will be configured by asset ID (barcode and/or serial number), software type and version installed, and the license accountability allocation.

Summary records will also be provided detailing the type of software deployed by version, number deployed, and number of licenses active and on file with the software librarian.

The report will contain a summary of IT hardware which requires or is under maintenance agreement, and the 2-Letter allocation. The report will contain licensing and maintenance agreement information to identify those assets under Enterprise License Agreement (ELA), Enterprise Support Agreement (ESA), co-term agreements, etc. Format and data fields can be modified as needed to ensure currency of the report.

10.5.1, 10.5.3, 10.7.8, 10.8.4

C005

Engineering Documentation

This CDRL contains engineering documentation which potentially includes some or all of the following components:

Slide Package, DoDAF Artifacts, Rack Elevation drawings, Facility Layout drawings, Concept of Operations (CONOPS), Requirements Traceability Matrices (RTMs), Task CDRL DID Title Description

Version Description Documents (VDDs), and Floor Plans.

10.2.10 C006 DI-MISC-

80508B/T

Operational Support Documents:

Customer IT Report

This CDRL contains the Customer IT Report and tracks the commodity IT process and procurements for each 2- Letter.

10.2.1 C007 DI-MISC-

80508B/T

Operational Support Documents:

MDA Enterprise Strategic Plan

This CDRL is the single governing document that portrays the key stakeholder’s high-level vision for the enterprise. The MDA Enterprise Strategic Plan describes the current context of the business and delivers a strategic direction purposed to posture the capabilities that currently exist in order to realize ongoing business value generation moving forward.

10.1.1, 10.2.1, C008 DI-MISC-

80508B/T

Operational Support Documents:

MDA CIO

Service Portfolio

This CDRL is the superset of formal services offered to partners, suppliers, internal business functions, external business functions, and customers that model accepted industry best practices and standards.

10.2.4, 10.8.3

C009 DI-MISC-

Operational Support Documents:

Technology Refresh Plan

This CDRL takes into account the formally documented current state of hardware necessary to execute business functions; deliver services; and maintain the logical relationships between customers, partners, and suppliers. Primarily, this superset will contain the system architecture, storage architecture, and network

Task CDRL DID Title Description architecture across the enterprise.

10.5.3, 10.8.1

C010 DI-MISC-

80508B/T

Operational Support Documents:

Capacity Management Plan

This CDRL addresses current capacity considerations for technology items supported by the Office of the CIO and establishes and reports on trigger points associated with the need for either increasing capacity or mitigating capacity considerations through some other innovative solution/technique.

10.1.2, 10.2.4, 10.2.8, 10.2.10, 10.4.1, 10.4.4.1, 10.6.1.1, 10.6.1.2, 10.6.2, 10.7.1, 10.7.2, 10.7.4, 10.8.1, 10.8.3, 10.9.1, 10.9.3, 10.10.1, 10.10.2, 10.10.5, 10.11, 10.11.3, 10.13.1

C011 DI-MISC-

Quarterly Report

This CDRL contains the Quarterly Service Level and Performance Metrics and Trend Analysis Reports, and IT Service Plans.

10.2.1 C012 DI-MISC-

80508B/T

Operational Support Documents:

This CDRL is a snapshot of the Service Pipeline and defines the variety of services that are currently under

Task CDRL DID Title Description

MDA CIO

Service Pipeline development/review within the service portfolios. The Service Pipeline is a futures-based concept that defines the future direction of the service portfolio and defines the health of the portfolio; requirements under development/consideration will remain in the Service Pipeline until transitioned to operations.

10.2.7, 10.4.2

C013 DI-MISC-

Charge-Back Show-Back Metrics

This CDRL identifies the consumption rates of MDA CIO-managed IT resources by 2- Letter organization and attributes costs for shared infrastructure and office productivity to the 2-Letter in both a show-back as well as a charge-back methodology based on both basic and enhanced Service-Level Agreements (SLAs).

10.6.1.2, 10.9.1

C014 DI-MISC-

80508B/T

Cyber Incident Handling Process

This CDRL provides enterprise-wide guidance for cybersecurity incident handling, analyzing incident data, and determining the appropriate response.

10.5.2 C015

Reference Architecture Reporting

This CDRL provides guidance for the handling of Reference Architecture (RA) reporting on a semi-annual basis and details contractor responsibility for recommendation, acquisition, deliverable timeline, and cost efficiencies.

Task CDRL DID Title Description

10.2.1

C016

DI-MGMT-

81453A/T

EITS Data Accession List (DAL) Report

This CDRL contains a monthly report identifying the Data Accession List (DAL) items that were delivered each month and those scheduled for delivery in upcoming months.

10.3, 10.7.8

C017 DI-MISC-

80508B/T

Operational Support Documents:

Data Management Plan

This CDRL contains the Data Management Plan for the Business Intelligence (BI) system, which includes some or all of the following components: Data Sources, Data Dictionary, Data Schema and Mapping.

5.2 CDRL Tailoring 80

The DD Form 1423 associated with each CDRL is attached as Exhibit C at the end of this PWS. 81

6.0 Milestones 82

Task Date/Days After Contract (DAC)

Integrated Baseline Review 90 DAC

Annual Integrated Baseline Review Annually from the initial IBR

7.0 Government Property (GP)/Government Furnished Property (GFP)/Government 83

Furnished Information (GFI)/Contractor Acquired Property (CAP) 84

None 85

All GP/GFP/GFI and CAP requirements are managed under the 8900 TO. 86

7.1 Request for Proposal (RFP) Attachment J-05 – GFP List 87

None 88

This listing is managed under the 8900 TO. 89

7.2 MDA-approved Software List 90

None 91

This listing can be found on the MDA portal under https://mko.mda.mil/e2f55. 92

7.3 Direct TV Satellite Television Locations: HQ, VB Complex, MDIOC, DLG 93

None 94

7.4 Government Facility EITS-dedicated Workforce Locations 95

National Capital Region (NCR) (Fort Belvoir [Headquarters (HQ)], Crystal Square [CS] 4, 96

Lockport); HSV (Von Braun [VB] Complex, Building 7319 Missile Assembly Building, Building 97

5201 Trotti Data Center [TDC]); COS (Missile Defense Integration and Operations Center 98

[MDIOC]); Dahlgren, VA (DLG) (David M. Altwegg Complex); Alaska (Building 10441 Joint Base 99

Elmendorf-Richardson [JBER] and Fort Greely [FGA] Buildings 663 and 652 [SLA with MDA/GM 100 for 2 cable plant personnel assisting MDA/GMB and MDA/DDW on Missile Defense Complex, as 101 tasked]); Kirtland Air Force Base (AFB) (KAFB) Building 20200; Vandenberg Space Force Base 102

(SFB) (VSFB) Building 6510; Kauai (Pacific Missile Range Facility [PMRF] Aegis Ashore Missile 103

Defense Test Center (AAMDTC), and as contracted by MDA/DTR for Buildings 104

327/328/155/Data Analytics and Reporting Technologies [DART]); National Science Foundation 105

(NSF), Redzikowo. 106

8.0 Special Requirements 107

The following are applicable to this TO: 108

None 109

8.1 Additional Information 110

Any activities that may degrade the performance of network environments, Operating 111

Systems (OSs), databases, and applications must be performed outside of core business 112 hours (0700 – 1700, Monday – Friday for the local time zones impacted). 113

All products and deliverables must be provided in a format supported by existing, 114 available tools to support future updates unless otherwise agreed to by the Program 115

Manager (PM). 116

Government facility seating capacity in the NCR is constrained to a maximum of 11 work 117 areas. 118

The contractor shall work with other contracts/contractors as defined in the following 119 controls: 120 o Research and Development Enterprise Collaboration Services (RECS): RECS 121 provides the MDA with Video Teleconference (VTC), Audio/Visual (A/V), MDA 122

Knowledge Online (MKO) portal, business automation, and data management 123 services. The RECS contract leverages the IRES-provided MDA Integrated Service 124

Desk (ISD) and the classified and unclassified enterprise IT backbones. Close 125 coordination and tight schedule integration is necessary to de-conflict technical 126 resources and Change Management activities. NMR is the prime contractor. 127 https://mko.mda.mil/e2f55 o Test Support Systems (TSSs): MDA/DTR provides a suite of IT services and test 128 support capabilities that tie directly to MDA enterprise networks in support of 129

MDA Flight Tests (FTs) and Ground Tests (GTs). TSS leverages the WAN and LAN 130 infrastructure and integrates with multiple conference room and auditorium A/V 131 systems maintained under both MDA IT Collaboration Services (MICS) and IRES. 132

LOGOS Enterprises is the prime contractor. 133 o Technical, Engineering, Advisory, and Management Support (TEAMS) (formerly 134 known as MDA Engineering and Support Services [MDAESS]): Agency-wide 135 contracts maintained by MDA/CS to provide Systems Engineering and Technical 136

Assistance (SETA) and advisory and assistance services to all program elements 137 and Agency functional areas. TEAMS personnel may assist the Government in 138 oversight and performance of the IRES contract. 139 o Development and Sustainment Contract (DSC): MDA/GM controls the 140 development and sustainment of the Ground-based Midcourse Defense (GMD) 141 element of the Ballistic MDS (BMDS) via the DSC, awarded to Boeing Corporation 142 as the prime contractor. IRES provides infrastructure and support services to the 143

DSC contractor to enable integration and testing within both the MDA RDT&E 144 mission area and the Warfighter Mission Area. Boeing is the prime contractor. 145 o Misty Thunder (MT): MDA/IC controls the MT contract to provide above secret IT 146 services to select components within the Agency and maintains external 147 connections to other DoD partners for the conduct of interoperability and data 148 sharing. IRES provides core infrastructure interconnecting the components and 149 provides circuit management and distribution for principal and remote sites. 150

General Dynamics Mission Systems is the prime contractor for MT. 151

8.2 Invited Contractor or Technical Representative Status Republic of Korea (4 June 2007) 152 as required by USFK REG 700-19, 28 August 2012 153

Invited Contractor (IC) and Technical Representative (TR) status shall be governed by the U.S.-154

ROK Status of Forces Agreement (SOFA) as implemented by United States Forces Korea (USFK) 155

Reg 700-19, which can be found under the “publications” tab on the US Forces Korea 156 homepage http://www.usfk.mil. 157

(a) Definitions. As used in this clause— 158

“U.S. – ROK Status of Forces Agreement” (SOFA) means the Mutual Defense Treaty between 159 the Republic of Korea and the U.S. of America, Regarding Facilities and Areas and the Status of 160

U.S. Armed Forces in the Republic of Korea, as amended. 161

“Combatant Commander” means the commander of a unified or specified combatant 162 command established in accordance with 10 U.S.C. 161. In Korea, the Combatant Commander is 163 the Commander, United States Pacific Command. 164

“United States Forces Korea” (USFK) means the subordinate unified command through which 165

US forces would be sent to the Combined Forces Command fighting components. 166 http://www.usfk.mil/

“Commander, United States Forces Korea” (COMUSK) means the commander of all U.S. forces 167 present in Korea. In the Republic of Korea, COMUSK also serves as Commander, Combined 168

Forces Command (CDR CFC) and Commander, United Nations Command (CDR UNC). 169

“USFK, Assistant Chief of Staff, Acquisition Management” (USFK/FKAQ) means the principal 170 staff office to USFK for all acquisition matters and administrator of the U.S.-ROK SOFA as 171 applied to US and Third Country contractors under the Invited Contractor (IC) and Technical 172

Representative (TR) Program (USFK Reg 700-19). 173

“Responsible Officer (RO)” means a senior DoD employee (such as a military E5 and above or 174 civilian GS-7 and above), appointed by the USFK Sponsoring Agency (SA), who is directly 175 responsible for determining and administering appropriate logistics support for IC/TRs during 176 contract performance in the ROK. 177

(b) IC or TR status under the SOFA is subject to the written approval of USFK, Assistant Chief of 178

Staff, Acquisition Management (FKAQ), Unit #15237, APO AP 96205-5237. 179

(c) The contracting officer will coordinate with HQ USFK/FKAQ, IAW FAR 25.8, and USFK Reg 180

700-19. FKAQ will determine the appropriate contractor status under the SOFA and notify the 181 contracting officer of that determination. 182

(d) Subject to the above determination, the contractor, including its employees and lawful 183 dependents, may be accorded such privileges and exemptions under conditions and limitations 184 as specified in the SOFA and USFK Reg 700-19. These privileges and exemptions may be 185 furnished during the performance period of the contract, subject to their availability and 186 continued SOFA status. Logistics support privileges are provided on an as-available basis to 187 properly authorized individuals. Some logistics support may be issued as Government 188

Furnished Property or transferred on a reimbursable basis. 189

(e) The contractor warrants and shall ensure that collectively, and individually, its officials and 190 employees performing under this contract will not perform any contract, service, or other 191 business activity in the ROK, except under U.S. Government contracts and that performance is 192

IAW the SOFA. 193

(f) The contractor’s direct employment of any Korean-National labor for performance of this 194 contract shall be governed by ROK labor law and USFK regulation(s) pertaining to the direct 195 employment and personnel administration of Korean National personnel. 196

(g) The authorities of the ROK have the right to exercise jurisdiction over invited contractors 197 and technical representatives, including contractor officials, employees and their dependents, 198 for offenses committed in the ROK and punishable by the laws of the ROK. In recognition of the 199 role of such persons in the defense of the ROK, they will be subject to the provisions of Article 200

XXII, SOFA, related Agreed Minutes and Understandings. In those cases in which the authorities 201 of the ROK decide not to exercise jurisdiction, they shall notify the U.S. military authorities as 202 soon as possible. Upon such notification, the military authorities will have the right to exercise 203 jurisdiction as is conferred by the laws of the U.S. 204

(h) Invited contractors and technical representatives agree to cooperate fully with the USFK 205

Sponsoring Agency (SA) and Responsible Officer (RO) on all matters pertaining to logistics 206 support and theater training requirements. Contractors will provide the assigned SA prompt 207 and accurate reports of changes in employee status as required by USFK Reg 700-19. 208

(i) Theater Specific Training. Training Requirements for IC/TR personnel shall be conducted in 209 accordance with USFK Reg 350-2 Theater Specific Required Training for all Arriving Personnel 210 and Units Assigned to, Rotating to, or in Temporary Duty Status to USFK. IC/TR personnel shall 211 comply with requirements of USFK Reg 350-2. 212

(j) Except for contractor air crews flying Air Mobility Command missions, all U.S. contractors 213 performing work on USAF classified contracts will report to the nearest Security Forces 214

Information Security Section for the geographical area where the contract is to be performed to 215 receive information concerning local security requirements. 216

(k) Invited Contractor and Technical Representative status may be withdrawn by USFK/FKAQ 217 upon: 218

(1) Completion or termination of the contract. 219

(2) Determination that the contractor or its employees are engaged in business activities 220 in the ROK other than those pertaining to U.S. armed forces. 221

(3) Determination that the contractor or its employees are engaged in practices in 222 contravention to Korean law or USFK regulations. 223

(l) It is agreed that the withdrawal of invited contractor or technical representative status, or 224 the withdrawal of, or failure to provide any of the privileges associated therewith by the U.S. 225 and USFK, shall not constitute grounds for excusable delay by the contractor in the 226 performance of the contract and will not justify or excuse the contractor defaulting in the 227 performance of this contract. Furthermore, it is agreed that withdrawal of SOFA status for 228 reasons outlined in USFK Reg 700-19, Section II, paragraph 6 shall not serve as a basis for the 229 contractor filing any claims against the U.S. or USFK. Under no circumstance shall the 230 withdrawal of SOFA Status or privileges be considered or construed as a breach of contract by 231 the U.S. Government. 232

(m) Support. 233

(1) Unless the terms and conditions of this contract place the responsibility with another 234 party, the COMUSK will develop a security plan to provide protection, through military 235 means, of Contractor personnel engaged in the theater of operations when sufficient or 236 legitimate civilian authority does not exist. 237

(2) (i) All Contractor personnel engaged in the theater of operations are authorized 238 resuscitative care, stabilization, hospitalization at level III military treatment 239 facilities, and assistance with patient movement in emergencies where loss of 240 life, limb, or eyesight could occur. Hospitalization will be limited to stabilization 241 and short-term medical treatment with an emphasis on return to duty or 242 placement in the patient movement system. 243

(ii) When the Government provides medical or emergency dental treatment or 244 transportation of Contractor personnel to a selected civilian facility, the 245

Contractor shall ensure that the Government is reimbursed for any costs 246 associated with such treatment or transportation. 247

(iii) Medical or dental care beyond this standard is not authorized unless 248 specified elsewhere in this contract. 249

(3) Unless specified elsewhere in this contract, the Contractor is responsible for all other 250 support required for its personnel engaged in the theater of operations under this 251 contract. 252

(n) Compliance with laws and regulations. The Contractor shall comply with, and shall ensure 253 that its personnel supporting U.S Armed Forces in the Republic of Korea as specified in 254 paragraph (b)(1) of this clause are familiar with and comply with, all applicable— 255

(1) United States, host country, and third country national laws; 256

(2) Treaties and international agreements; 257

(3) United States regulations, directives, instructions, policies, and procedures; and 258

(4) Orders, directives, and instructions issued by the COMUSK relating to force 259 protection, security, health, safety, or relations and interaction with local nationals. 260

Included in this list are force protection advisories, health advisories, area (i.e., “off-261 limits”), prostitution and human trafficking and curfew restrictions. 262

(o) Vehicle or equipment licenses. IAW USFK Regulation 190-1, Contractor personnel shall 263 possess the required licenses to operate all vehicles or equipment necessary to perform the 264 contract in the theater of operations. All contractor employees/dependents must have either a 265

Korean driver’s license or a valid international driver’s license to legally drive on Korean roads, 266 and must have a USFK driver’s license to legally drive on USFK installations. Contractor 267 employees/dependents will first obtain a Korean driver’s license or a valid international driver’s 268 license then obtain a USFK driver’s license. 269

(p) Evacuation. 270

(1) If the COMUSK orders a non-mandatory or mandatory evacuation of some or all 271 personnel, the Government will provide assistance, to the extent available, to United 272

States and third country national contractor personnel. 273

(2) Non-combatant Evacuation Operations (NEO). 274

(i) The contractor shall designate a representative to provide contractor 275 personnel and dependents information to the servicing NEO warden as required 276 by direction of the Responsible Officer. 277

(ii) If contract period of performance in the Republic of Korea is greater than six 278 months, non-emergency essential contractor personnel and all IC/TR dependents 279 shall participate in at least one USFK sponsored NEO exercise per year. 280

(q) Next of kin notification and personnel recovery. 281

(1)The Contractor shall be responsible for notification of the employee-designated next 282 of kin in the event an employee dies, requires evacuation due to an injury, or is missing, 283 captured, or abducted. 284

(2) In the case of missing, captured, or abducted contractor personnel, the Government 285 will assist in personnel recovery actions in accordance with DOD Directive 2310.2, 286

Personnel Recovery. 287

(3) IC/TR personnel shall accomplish Personnel Recovery/Survival, Evasion, Resistance 288 and Escape (PR/SERE) training in accordance with USFK Reg 525-40, Personnel Recovery 289

Procedures and USFK Reg 350-2 Theater Specific Required Training for all Arriving 290

Personnel and Units Assigned to, Rotating to, or in Temporary Duty Status to USFK. 291

(r) Mortuary affairs. Mortuary affairs for contractor personnel who die while providing support 292 in the theater of operations to U.S. Armed Forces will be handled in accordance with DoD 293

Directive 1300.22, Mortuary Affairs Policy and Army Regulation 638-2, Care and Disposition of 294

Remains and Disposition of Personal Effects. 295

(s) USFK Responsible Officer (RO). The USFK appointed RO will ensure all IC/TR personnel 296 complete all applicable training as outlined in this clause. 297

8.3 United States Forces Korea (USFK) Wartime Clause 298

(The following USFK Wartime Clause applies ONLY when traveling within the jurisdiction of the 299

USFK. When performing overseas for efforts in other jurisdictions, the MDA Wartime Clause 300 applies.) 301

CONTINUANCE OF PERFORMANCE DURING ANY STATE OF EMERGENCY IN THE REPUBLIC OF 302

KOREA (ROK) as required by USFK REG 700-19, 28 August 2012. 303

Invited Contractor (IC) and Technical Representative (TR) status shall be governed by the U.S.-304

ROK Status of Forces Agreement (SOFA) as implemented by United States Forces Korea (USFK) 305

Reg 700-19, which can be found under the “publications” tab on the US Forces Korea 306 homepage http://www.usfk.mil. 307

(a) Definitions. As used in this clause— 308

“U.S. – ROK Status of Forces Agreement” (SOFA) means the Mutual Defense Treaty between 309 the Republic of Korea and the U.S. of America, Regarding Facilities and Areas and the Status of 310

U.S. Armed Forces in the Republic of Korea, as amended. 311 http://www.usfk.mil/

“Combatant Commander” means the commander of a unified or specified combatant 312 command established in accordance with 10 U.S.C. 161. In Korea, the Combatant Commander 313 is the Commander, United States Pacific Command. 314

“United States Forces Korea” (USFK) means the subordinate unified command through which 315

US forces would be sent to the Combined Forces Command fighting components. 316

COMUSK means the commander of all U.S. forces present in Korea. In the Republic of Korea, 317

COMUSK also serves as Commander, Combined Forces Command (CDR CFC) and Commander, 318

United Nations Command (CDR UNC). 319

“USFK, Assistant Chief of Staff, Acquisition Management” (USFK/FKAQ) means the principal 320 staff office to USFK for all acquisition matters and administrator of the U.S.-ROK SOFA as 321 applied to US and Third Country contractors under the Invited Contractor (IC) and Technical 322

Representative (TR) Program (USFK Reg 700-19). 323

“Responsible Officer” (RO) means A senior DOD employee (such as a military E5 and above or 324 civilian GS-7 and above), appointed by the USFK Sponsoring Agency (SA), who is directly 325 responsible for determining and administering appropriate logistics support for IC/TRs during 326 contract performance in the ROK. 327

“Theater of operations” means an area defined by the combatant commander for the conduct 328 or support of specified operations. 329

“Uniform Code of Military Justice” means 10 U.S.C. Chapter 47 330

(b) General. 331

(1) This clause applies when contractor personnel deploy with or otherwise provide 332 support in the theater of operations (specifically, the Korean Theater of Operations) to 333

U.S. military forces deployed/located outside the United States in— 334

(i) Contingency operations; 335

(ii) Humanitarian or peacekeeping operations; or 336

(iii) Other military operations or exercises designated by the Combatant 337

Commander. 338

(2) Contract performance in support of U.S. military forces may require work in 339 dangerous or austere conditions. The Contractor accepts the risks associated with 340 required contract performance in such operations. The contractor will require all its 341 employees to acknowledge in writing that they understand the danger, stress, physical 342 hardships and field living conditions that are possible if the employee deploys in support 343 of military operations. 344

(3) Contractor personnel are not combatants and shall not undertake any role that 345 would jeopardize their status. Contractor personnel shall not use force or otherwise 346 directly participate in acts likely to cause actual harm to enemy armed forces. 347

(c) Support. 348

(1) Unless the terms and conditions of this contract place the responsibility with another 349 party, the COMUSK will develop a security plan to provide protection, through military 350 means, of Contractor personnel engaged in the theater of operations when sufficient or 351 legitimate civilian authority does not exist. 352

(2) (i) All Contractor personnel engaged in the theater of operations are authorized 353 resuscitative care, stabilization, hospitalization at level III military treatment 354 facilities, and assistance with patient movement in emergencies where loss of 355 life, limb, or eyesight could occur. Hospitalization will be limited to stabilization 356 and short-term medical treatment with an emphasis on return to duty or 357 placement in the patient movement system. 358

(ii) When the Government provides medical treatment or transportation of 359

Contractor personnel to a selected civilian facility, the Contractor shall ensure 360 that the Government is reimbursed for any costs associated with such treatment 361 or transportation. 362

(iii) Medical or dental care beyond this standard is not authorized unless 363 specified elsewhere in this contract. 364

(3) Unless specified elsewhere in this contract, the Contractor is responsible for all other 365 support required for its personnel engaged in the theater of operations under this 366 contract. 367

(d) Compliance with laws and regulations. The Contractor shall comply with, and shall ensure 368 that its personnel supporting U.S Armed Forces in the Republic of Korea as specified in 369 paragraph (b)(1) of this clause are familiar with and comply with, all applicable— 370

(1) United States, host country, and third country national laws; 371

(i) The Military Extraterritorial Jurisdiction Act may apply to contractor personnel 372 if contractor personnel commit crimes outside the United States. 373

(ii) Under the War Crimes Act, United States citizens (including contractor 374 personnel) who commit war crimes may be subject to federal criminal 375 jurisdiction. 376

(iii) When Congress formally declares war, contractor personnel authorized to 377 accompany the force may be subject to the Uniform Code of Military Justice. 378

(2) Treaties and international agreements; 379

(3) United States regulations, directives, instructions, policies, and procedures; and 380

(4) Orders, directives, and instructions issued by the COMUSK relating to force 381 protection, security, health, safety, or relations and interaction with local nationals. 382

Included in this list are force protection advisories, health advisories, area (i.e., “off-383 limits”), prostitution and human trafficking and curfew restrictions. 384

(e) Pre-deployment/departure requirements. The Contractor shall ensure that the following 385 requirements are met prior to deploying/locating personnel in support of U.S. military forces in 386 the Republic of Korea. Specific requirements for each category may be specified in the 387 statement of work or elsewhere in the contract. 388

(1) All required security and background checks are complete and acceptable. 389

(2) All contractor personnel meet the minimum medical screening requirements and 390 have received all required immunizations as specified in the contract. In the Republic of 391

Korea, all contractor employees subject to this clause shall comply with the same DoD 392 immunization requirements applicable to Emergency Essential DoD civilians— 393

INCLUDING ANTHRAX IMMUNIZATION. The Government will provide, at no cost to the 394

Contractor, any Korean theater-specific immunizations and/or medications not available 395 to the general public. 396

(3) Contractor personnel have all necessary passports, visas, and other documents 397 required to enter and exit a theater of operations and have a Geneva Conventions 398 identification card from the deployment center or CONUS personnel office—if, 399 applicable. 400

(4) Country and theater clearance is obtained for contractor personnel. Clearance 401 requirements are in DoD Directive 4500.54, Official Temporary Duty Abroad, DoD 402

4500.54-G, DoD Foreign Clearance Guide, and USFK Reg 1-40, United States Forces Korea 403

Travel Clearance Guide. Contractor personnel are considered non-DoD personnel 404 traveling under DoD sponsorship. 405

(f) Processing and departure points. Deployed contractor personnel shall— 406

(1) Under contingency conditions or under other conditions as specified by the 407

Contracting Officer, process through the deployment center designated in the contract, 408 prior to deploying. The deployment center will conduct deployment processing to 409 ensure visibility and accountability of contractor personnel and to ensure that all 410 deployment requirements are met; 411

(2) Use the point of departure and transportation mode directed by the Contracting 412

Officer; and 413

(3) If processing through a deployment center, process through a Joint Reception Center 414

(JRC) upon arrival at the deployed location. The JRC will validate personnel 415 accountability, ensure that specific theater of operations entrance requirements are 416 met, and brief contractor personnel on theater-specific policies and procedures. 417

(g) Personnel data list. 418

(1) The Contractor shall establish and maintain with the designated Government official 419 a current list of all contractor personnel that deploy with or otherwise provide support 420 in the theater of operations to U.S. military forces as specified in paragraph (b)(1) of this 421 clause. The Synchronized Pre-deployment and Operational Tracker (SPOT) is the 422 designated automated system to use for this effort. This accountability requirement is 423 separate and distinct from the personnel accountability requirement listed in the U.S–424

ROK SOFA’s Invited Contractor/Technical Representative Program (as promulgated in 425

USFK Regulation 700-19). 426

(2) The Contractor shall ensure that all employees on the list have a current DD Form 93, 427

Record of Emergency Data Card, on file with both the Contractor and the designated 428

Government official. 429

(h) Contractor personnel. 430

(1) The Contracting Officer may direct the Contractor, at its own expense, to remove 431 and replace any contractor personnel who jeopardize or interfere with mission 432 accomplishment or who fail to comply with or violate applicable requirements of this 433 clause. Contractors shall replace designated personnel within 72 hours, or at the 434

Contracting Officer’s direction. Such action may be taken at the Government’s 435 discretion without prejudice to its rights under any other provision of this contract, 436 including the Termination for Default clause. 437

(2) The Contractor shall have a plan on file showing how the Contractor would replace 438 employees who are unavailable for deployment or who need to be replaced during 439 deployment. The Contractor shall keep this plan current and shall provide a copy to the 440

Contracting Officer and USFK Sponsoring Agency (see USFK Reg 700-19) upon request. 441

The plan shall— 442

(i) Identify all personnel who are subject to U.S. or Republic of Korea military 443 mobilization; 444

(ii) Identify any exemptions thereto; 445

(iii) Detail how the position would be filled if the individual were mobilized; and 446

(iv) Identify all personnel who occupy a position that the Contracting Officer has 447 designated as mission essential. 448

(i) Military clothing and protective equipment. 449

(1) Contractor personnel supporting a force deployed outside the United States as 450 specified in paragraph (b)(1) of this clause are prohibited from wearing military clothing 451 unless specifically authorized in writing by the COMUSK. If authorized to wear military 452 clothing, contractor personnel must wear distinctive patches, arm bands, nametags, or 453 headgear, in order to be distinguishable from military personnel, consistent with force 454 protection measures and the Geneva Conventions. 455

(2) Contractor personnel may wear military-unique organizational clothing and 456 individual equipment (OCIE) required for safety and security, such as ballistic, nuclear, 457 biological, or chemical protective clothing. 458

(3) The deployment center, the Combatant Commander, or the Sponsoring Agency shall 459 issue OCIE and shall provide training, if necessary, to ensure the safety and security of 460 contractor personnel. 461

(4) The Contractor shall ensure that all issued OCIE is returned to the point of issue, 462 unless otherwise directed by the Contracting Officer. 463

(j) Weapons. 464

(1) If the Contractor requests that its personnel performing in the theater of operations 465 be authorized to carry weapons, the request shall be made through the Contracting 466

Officer to the COMUSK. The COMUSK will determine whether to authorize in-theater 467 contractor personnel to carry weapons and what weapons will be allowed. 468

(2) The Contractor shall ensure that its personnel who are authorized to carry 469 weapons— 470

(i) Are adequately trained; 471

(ii) Are not barred from possession of a firearm by 18 U.S.C. 922; and 472

(iii) Adhere to all guidance and orders issued by the COMUSK regarding 473 possession, use, safety, and accountability of weapons and ammunition. 474

(iv) The use of deadly force by persons subject to this clause shall be made only 475 in self-defense, except: 476

(v) Persons subject to this clause who primarily provide private security are 477 authorized to use deadly force only as defined in the terms and conditions of this 478 contract in accordance with USFK regulations and policies (especially, USFK 479

Regulation 190-50). 480

(vi) Liability for the use of any weapon by persons subject to this clause is solely 481 the responsibility of the individual person and the contractor. 482

(3) Upon redeployment or revocation by the COMUSK of the Contractor’s authorization 483 to issue firearms, the Contractor shall ensure that all Government-issued weapons and 484 unexpended ammunition are returned as directed by the Contracting Officer. 485

(k) Evacuation. In the event of a non-mandatory evacuation order, unless authorized in writing 486 by the Contracting Officer, the Contractor shall maintain personnel on location sufficient to 487 meet obligations under this contract. 488

(l) Theater Specific Training. Training Requirements for IC/TR personnel shall be conducted in 489 accordance with USFK Reg 350-2 Theater Specific Required Training for all Arriving Personnel 490 and Units Assigned to, Rotating to, or in Temporary Duty Status to USFK. 491

(m) USFK Responsible Officer (RO). The USFK appointed RO will ensure all IC/TR personnel 492 complete all applicable training as outlined in this clause. 493

(n) Changes. In addition to the changes otherwise authorized by the Changes clause of this 494 contract, the Contracting Officer may, at any time, by written order identified as a change 495 order, make changes in Government-furnished facilities, equipment, material, services, or site. 496

Any change order issued in accordance with this paragraph shall be subject to the provisions of 497 the Changes clause of this contract. 498

(o) Subcontracts. The Contractor shall incorporate the substance of this clause, including this 499 paragraph, in all subcontracts that require subcontractor personnel to be available to deploy 500 with or otherwise provide support in the theater of operations to U.S. military forces 501 deployed/stationed outside the United States in— 502

(1) Contingency operations; 503

(2) Humanitarian or peacekeeping operations; or 504

(3) Other military operations or exercises designated by the Combatant Commander. 505

(p) The Contracting Officer will discern any additional GFE, GFP or logistical support necessary 506 to facilitate the performance of the enhanced requirement or necessary for the protection of 507 contractor personnel. These items will be furnished to the Contractor at the sole discretion of 508 the Contracting Officer and may be provided only on a reimbursable basis. 509

9.0 Applicable Directives/Regulations 510

Title Originator Date

(ITAR) (22 CFR 102-130) Ofc of Defense Trade Controls

10/20/2016

ITSM Software Assurance Risk Assessment Procedure/Approved Software List

MDA/IRES Quality Management

System

2/25/2019

Information Technology Infrastructure Installation Guide IC 8350.01

MDA/IC 10/14/2020

Information Assurance (IA) and Support to Computer Network Defense (CND) CJCSI6510.01F

MDA CIO 6/9/2015

Information Assurance Workforce Improvement Program - DoD 8570.01-M

MDA CIO 11/10/2015

Cybersecurity Activities Support to DoD Information Network Operation – DoD 8530.01

DoD 7/25/2017

The Department of Defense Architecture Framework (DoDAF) Version 2.0

DoD/CIO 5/28/2009

Title Originator Date

Critical Program Information (CPI) Identification and Protection Within Research, Test, and Evaluation

(RDT&E) – 5200.39

DoD/CIO 10/1/2020

Cybersecurity – 8500.01 DoD/CIO 10/7/2019

Risk Management Framework for DoD Information Technology – 8510.01

DoD 10/29/2019

Risk Management Framework for Information Systems and Organizations - NIST Special Publication 800-37

Department of Commerce

12/1/2019

Reference Architecture Description DoD 6/1/2010

IRES Supply Chain Risk management Plan – PL-IRES-11- 0160-B

MDA IRES 2/21/2020

Intelligence Community Directive – 503, Risk Management

Dept of National Intelligence

9/15/2008

Accountability and Management of Internal Use Software (IUS) – 5000.76

DoD 6/7/2019

Accountability and Management of DoD Equipment and Other Accountable Property – 5000.64

DoD 5/19/2011

Cross Domain (CD) Policy – 8540.01 DoD 8/28/2017

Cybersecurity – 8500.01 DoD 10/1/2019

MDA Information Resources Management (IRM) Strategic Plan

MDA 4/1/2005

MDA Information Systems Monitoring MDA 11/12/2004

MDA Information Systems Maintenance and Change Schedule

MDA 5/23/2013

Missile Defense Agency Incident Response Plan MDA/IC 8/2/2006

MDA CIO Selection of IT Security Products MDA/IC 10/26/2004

Disaster Recovery and Continuity of Operations (COOP) Guidance

MDA/IC 12/03/2019

Enterprise Security Information Management (ESIM) System

IC V1.0

Title…