Enclosure_1_-_SOW.pdf

Enclosure 1 – Statement of Work

HSHQDC-16-Q-00410

RESEARCH, ANALYSIS, SPECIAL STUDIES, AND

EXECUTIVE-LEVEL STRATEGIC PLANNING SUPPORT

DEPARTMENT OF HOMELAND SECURITY

NATIONAL PROTECTION AND PROGRAM DIRECTORATE

OFFICE OF INFRASTRUCTURE PROTECTION

SECTOR OUTREACH AND PROGRAMS DIVISION AND

STRATEGY, POLICY, AND BUDGET OFFICE

Statement of Work

August 22, 2016

1.1 BACKGROUND

The Nation's critical infrastructure provides the essential services that underpin American society. Proactive and coordinated efforts are necessary to strengthen and maintain secure, functioning, and resilient critical infrastructure – including assets, networks, and systems – that are vital to public confidence and the Nation's safety, prosperity, and well-being. To achieve this goal, critical infrastructure partners must collectively identify priorities, articulate clear goals, mitigate risk, measure progress, and adapt based on feedback and the changing environment. Success in this complex endeavor leverages the full spectrum of capabilities, expertise, and experience from across a robust partnership.

In February 2013, the President issued Presidential Policy Directive 21 (PPD-21), Critical Infrastructure Security and Resilience, which called for an update to the National Infrastructure Protection Plan (NIPP). The resulting 2013 NIPP was informed by significant evolution in the critical infrastructure risk, policy, and operating environments, as well as experience gained and lessons learned since the plan was last issued in 2009. The 2013 NIPP provides guidance to all levels of government and owners and operators of critical infrastructure on the national approach to critical infrastructure security and resilience, and outlines how stakeholders across the critical infrastructure community work together to manage risks associated with against terrorist attacks and other hazards such as natural disasters and accidents.

The NIPP established the Sector Partnership Model, which consists of Sector Coordinating Councils, Government Coordinating Councils, and Cross-Sector Coordinating Councils. Sector Coordinating Councils (SCCs) consist of critical infrastructure owners and operators representing each of the 16 critical infrastructure sectors. Each is self-created and self-governed by owners and operators or their representational trade associations. Lead representatives from each of these councils serve as members in a Critical Infrastructure Cross-Sector Coordinating Council. The Government Coordinating Councils (GCCs) consist of representatives from each federal agency and appropriate state, local and tribal government agency that affect the security of the critical infrastructure sector. The Sector Partnership Model also includes a State, Local and Tribal Government Coordinating Council (SLTGCC) that provides a forum for state, local and tribal homeland security directors or their equivalents to work with the Federal government and the critical infrastructure sectors on planning and implementation of the NIPP.

The NIPP also describes the President’s National Infrastructure Advisory Council (NIAC), which serves as a senior advisory committee to the President on the protection and resilience of the critical infrastructures.

The Office of Infrastructure Protection (IP) in the National Protection and Programs Directorate (NPPD) is the lead organization within the U.S. Department of Homeland Security responsible for implementing the NIPP and coordinating national programs and policies on critical infrastructure security and resilience. This office has established strong partnerships across government and the private sector. The office conducts and facilitates vulnerability and consequence assessments to help critical infrastructure owners and operators and State, local, tribal, and territorial partners understand and address risks to critical infrastructure. IP also provides information on emerging threats and hazards so that appropriate actions can be taken, and it offers tools and training to partners to help them manage the risks to their facilities and operations.

The Strategy, Policy, and Budget Office (SP&B) within IP is responsible for:

• Implementing the NIPP, which provides the overall roadmap for coordinated and collaborative risk management;

• Reporting the state of the Nation’s critical infrastructure security and resilience to external audiences;

• Providing research, analytical, and report drafting support to DHS in support of the

NIAC;

• Contributing to the development of national infrastructure security strategy and policy, and

• Leading organizational strategic planning and enterprise performance measurement activities.

The Sector Outreach and Programs Division (SOPD) within IP is responsible for:

• Strengthening the capacity of the critical infrastructure stakeholders to achieve their security and resilience mission.

• Building, aligning, and leveraging national public-private stakeholder partnerships and partnership programs to enhance critical infrastructure security and resilience.

• SOPD builds and enhances national critical infrastructure security and resilience capacity by bridging stakeholder’s requirements to risk mitigation solutions.

• Examples of SOPD mechanism and programs that provide the capacity to execute our core competencies include:

o Private Sector Clearance Program (PSCP) o Homeland Security Information Network (HSIN-CI) o Critical Infrastructure Partnership Advisory Council (CIPAC)

• SOPD operates the stakeholder council and forum engagement mechanisms for the critical infrastructure security and resilience community. This capability positions SOPD to gather formal requirements from external stakeholders; align them with internal priorities outlined by IP, the National Protection and Programs Directorate (NPPD), DHS, Congress, and the White House; and convert them into risk mitigations solutions. As the SSA representative for DHS, SOPD also executes responsibilities for 6 of the 16 critical infrastructure sectors and facilitates collaboration with the other 10. This role gives SOPD the unique ability to identify cross-sector issues, opportunities, and challenges and facilitate the collaboration and coordination across the partnerships.

1.2 SCOPE

The Contractor shall provide technical and analytic expertise in national critical infrastructure protection and resilience, public-private partnership, and information sharing policy and strategy.

1.3 OBJECTIVE

The purpose of this Statement of Work (SOW) is to acquire executive-level/CEO level planning and study support; performance management and measurement support, analysis, special studies, and research support; executive-level facilitation; and end-user design graphics and development support. The contractor shall provide technical support, senior subject matter expertise, and expert facilitation to complete strategic research and long-term studies, perform risk analysis, and align and plan specific measurement and performance efforts related to critical infrastructure security and resilience. The objective of this SOW is to meet requirements, which may be stipulated by Congress and senior government officials, requiring the Contractor to perform the following tasks:

• Provide the services of subject matter experts to perform research and analyses such as those required by Congress and senior government officials on topics to support studies related to public- private information sharing and partnerships, critical infrastructure protection and resilience.

• Provide support to the critical infrastructure sectors by developing national and regional requirement and implementation roadmaps to implement the NIPP and its supporting Sector Specific Plans (SSP).

• Develop strategic studies to support public-private partnerships, information sharing and specified critical infrastructure related issues and plans which include the design and execution of exercises, workshops and assessments of the effectiveness of potential implementation strategies and plans and surface additional or more refined programmatic requirements.

• Ensure immediate access to appropriate technical resources to support unpredictable workload on short notice.

• Provide meeting facilitation and conflict mediation services to support public-private partnerships and the information sharing environment to support collection of information to support research, analyses and studies.

1.4 APPLICABLE DOCUMENTS

1.4.1 Compliance Documents

Applicable statutes, regulations, laws, and authorities include:

• Homeland Security Act of 2002 (November 2002): Established the Department of Homeland Security (DHS) with the mission to reduce the vulnerability to and prevent terrorist attacks within the United States as well as minimize the damage and assist in the recovery from terrorist attacks. Assigned national critical infrastructure and key resources (CIKR) protection responsibilities to the Assistant Secretary for Infrastructure Protection and serves as the basis for IP’s mission and key functions. Required DHS to develop, implement, and maintain a unified national approach to CIKR protection through an unprecedented public-private partnership and necessary information sharing between government and private sector.

• Homeland Security Presidential Directive-7 (HSPD-7) (December 2003): Established a national policy for Federal departments and agencies to identify and prioritize United States CIKR and to protect them from terrorist attacks; also mandates the creation and implementation of the NIPP. HSPD-7 charges DHS with the coordination with private sector and to continue to support coordinating and information- sharing mechanisms to “identify, prioritize, and coordinate the protection of critical infrastructure and key resources”, and “to facilitate sharing of information about physical and cyber threats, vulnerabilities, incidents, protective measures, and best practices.”

• National Infrastructure Protection Plan (NIPP) (June 2009): Provides the coordinated approach to establish national priorities, goals, and requirements for CIKR protection so

Federal funding and resources are applied in the most effective manner to reduce vulnerability, deter threats, and minimize the consequences of attacks and other incidents; establishes security partnerships as the “foundation of the national protection effort.” It fully describes the Sector Partnership Model and the other partnership structures and mechanisms that this project has the responsibility for implementing and supporting. It also describes the networked approach for information sharing represented by the Critical Infrastructure Information Sharing Environment (ISE).

• Information Sharing Environment Implementation Plan (November 2006): Provides the plan for implementing the requirements of the Intelligence Reform and Terrorism Act (IRTPA); establishes that the private sector is a key stakeholder in this environment, and that private sector is defined to be “vendor, owners and operators of products and infrastructures participating in the ISE,” recognizes the role of DHS, HSPD-7, and the NIPP in supporting the ISE; and established the requirement for a plan that would implement various elements of the ISE framework for the private sector to be delivered in FY 2007.

• National Strategy for Information Sharing (October 2007): Provides the national vision for improving terrorism-related information sharing; reinforces that private sector, state, local, tribal and territorial governments are the primary stakeholders for receiving information to make decisions and take action to secure and defend the homeland. In particular, it recognized the NIPP Sector Partnership Model and the Critical Infrastructure ISE as key parts of the National Information Sharing Environment as established by the Intelligence Reform and Terrorism Prevention Act of 2004.

1.4.2 Reference Documents

The following documents may be helpful to the Contractor in performing the work described in this document:

• Intelligence Reform and Terrorism Prevention Act of 2004 (IRTPA): Required the President to establish an Information Sharing Environment (ISE) which would improve the sharing of information to protect the American people and our institutions; it established a Program Manager for the ISE to plan for, assist in the development of, and regularly report to Congress on the implementation of an effective ISE.

• 9/11 Commission Act (2007): Directed DHS to establish a voluntary private sector preparedness accreditation and certification program (PS-PREP). The purpose of this program is to widely encourage and facilitate private sector preparedness. The program does so by providing a mechanism for a private sector entity to receive a certification from an accredited third party that it is in compliance with a private sector preparedness standard adopted by DHS. Key aspects of the legislation include the emphasis on preparedness in the critical infrastructure sectors and recognition of existing activities in the sectors that contribute to their preparedness.

2.0 SPECIFIC REQUIREMENTS & TASKS

The contractor shall provide technical and analytical support services to IP. The contractor shall consider all tasks required. The successful execution and completion of the tasks outlined throughout this SOW shall require a combination of personnel, such as: Program Manager;

Facilitator, Business Analysts with expertise in national-level planning, programs, and communications; a Senior Facilitator with expertise in national critical infrastructure protection and resilience, public-private partnership, and information sharing policy and strategy, and Programmatic Planning and Metrics Initiative; Technical Writers, Research Analysts, Functional Specialists, and Graphics Specialists.

Government Oversight of Contractor Personnel: Tasks under this Statement of Work shall not be interpreted to include any inherently governmental functions, as described in FAR Subpart 7.5, or other related Acts, Executive Orders, or federal policy. At no time shall contractor personnel exercise sovereign control, such as possessing signature or approval authority. All contractor personnel action that is closely related to an inherently governmental function shall be reviewed and approved by the Contracting Officer’s Representative (COR) or Program Manager (PM). Contractor personnel shall not possess the ability to commit the government to a course of action. Contractor personnel shall be limited to developing options or implementing a course of actions that has been decided on previously by the government. In addition, the COR, PM or other Federal Employee shall have the ability to countervail any action taken by the contractor.

2.1 TASK ONE: CONTRACT MANAGEMENT

The Contractor shall provide all necessary personnel (administrative, analytical, technical writers, financial and management support) to manage the contract process by maintaining cost control, schedule and the quality of all services and products. The Contractor shall provide project organization and overall management and access to appropriate resources to support unpredictable workload on short notice as required to successfully complete the tasks listed in this SOW.

2.1.1 Progress Reports

The Contractor shall provide monthly progress report and quarterly and annual summaries to the Contracting Officer and COR via electronic mail. This report shall include a summary of all Contractor work performed and deliverables, including a breakdown of labor hours by labor category, task or project, all direct costs by line item, an assessment of technical progress, schedule status, contract burn rate, any travel conducted and any Contractor concerns or recommendations for the previous reporting period. The Contractor shall provide a monthly status report for each task no later than the 10th day following the reporting period. This monthly status report shall describe technical progress by each sub-task listed in this SOW. It shall include accomplishments for the month; problems encountered; solutions recommended;

anticipated travel; and actions for the upcoming month. The financial status section shall consist of: funds expended, hourly billing, and the cumulative totals to date for each task. The monthly and cumulative financial data shall be reconcilable the CLINs, labor, travel, and ODC.

The report shall be provided in both word and PDF versions.

2.1.2 Project Plan

The contractor shall prepare a project plan with requisite schedule and milestones for completing all tasks described in this SOW. The plan shall describe the Contractor’s technical approach, organizational resources, and management controls to be employed to meet the cost, performance, and schedule requirements for all tasks.

2.2 TASK TWO: NATIONAL INFRASTRUCTURE ADVISORY COUNCIL (NIAC) SUPPORT

In support of the Department of Homeland Security, National Protection and Programs Directorate, Office of Infrastructure Protection, this task is focused on the research, studies, and analytical support provided to DHS in support of the National Infrastructure Advisory Council (NIAC) reports and recommendations.

The NIAC was established under Section 10 of Executive Order 13231, dated October 16, 2001, as amended and continued under the authority of Executive Order 13708, dated September 30, 2015. This committee operates under the provisions of the Federal Advisory Committee Act (FACA), (Title 5, United States Code, Appendix) The NIAC advises the President, through the Secretary of Homeland Security, on the security and resilience of the Nation’s critical infrastructure sectors and their functional systems, physical assets, and cyber networks. NIAC members provide advice and make recommendations to:

a) Enhance the partnership between the public and private sectors in securing and enhancing the security and resilience of critical infrastructure and their functional systems, physical assets and cyber networks, and providing reports on this issue to the President through the Secretary of Homeland Security, as appropriate;

b) Propose and develop ways to encourage private industry to perform periodic risk assessments and implement risk reduction programs;

c) Monitor the development and operations of critical infrastructure sector coordinating councils and their information sharing mechanisms and provide recommendations to the President through the Secretary of Homeland Security on how these organizations can best foster improved cooperation among the sectors, the Department of Homeland Security (DHS), and other Federal Government entities;

d) Report to the President through the Secretary of Homeland Security who shall ensure appropriate coordination with the Assistant to the President for Homeland Security and

Counterterrorism, the Assistant to the President for Economic Policy, and the Assistant to the President for National Security Affairs; and,

e) Advise sector specific agencies with critical infrastructure responsibilities, to include issues pertaining to sector and government coordinating councils and their information sharing mechanisms.

The duties of NIAC are solely advisory in nature. The NIAC will provide advice and recommendations in writing to the President through the Secretary of Homeland Security. The NIAC may also address advice and recommendations relevant to Federal Government lead agencies that have critical infrastructure responsibilities. The Designated Federal Official (DFO) or Alternate DFO (ADFO) as appointed by the Under Secretary of National Protection and Programs Directorate (NPPD) shall approve or call NIAC meetings, set and review meeting agendas, attend all committee and subcommittee meetings, adjourn any meetings when the DFO determines adjournment to be in the public interest, and opens meetings. Further, the DFO is responsible for fulfilling the reporting requirements of section 6(b) of FACA.

2.2.1 Project Management

Project management tasks for specific studies are described as follows:

2.2.1.1 Provide expertise in developing, supporting and coordinating project timelines and milestones for CEO-equivalent or Presidential advisory councils.

2.2.1.2 Provide Senior-level or executive project management subject matter expertise to support a presidential/ CEO-equivalent council.

2.2.1.3 Provide meeting logistics support and the production of meeting reports as appropriate. Activities shall include agenda development, developing meeting summaries, facilitation/mediation of meetings, and collection of data for relevant studies/reports.

2.2.1.4 Assist IP in coordinating and the technical editing of draft information, under the supervision of the IP federal staff, in support of program, policy, and congressional inquiries.

2.2.1.5 Coordinate and consult with senior level executives across stakeholder groups, including working groups and foster working relationships.

2.2.1.6 Assist IP in coordinating draft responses, talking points, and other materials for use during working groups and other meetings.

2.2.1.7 Provide overall project coordination of contractor efforts for all studies and assist in the planning and conducting of necessary activities to engage the private sector and all levels of government in the execution of a study.

2.2.2 Research, Studies and Analytical Support

Studies, research and analytical support for NIAC specific studies are defined and tasked from the White House through DHS to the NIAC. The contractor shall:

2.2.2.1 Possess technical writing expertise to synthesize complex analytics around infrastructure security and resilience topics

2.2.2.2 Produce visuals displays and graphics clearly demonstrating information, data and knowledge clearly. Graphics and the visual display of information shall support requirements such as briefings, reports, and white papers.

2.2.2.3 Provide research and analytical support to assist IP in its role as the Designated

Federal Office in research, conducting analysis and drafting study recommendations in support of CEO level executives.

2.2.2.4 Conduct research and strategic studies focusing on study topics defined by the White

House administration through the DHS Designated Federal Officer of the NIAC.

2.2.2.5 Conduct research, analysis and studies on risk assessments and implementing risk reduction programs.

2.2.2.6 Research, conduct analysis and draft studies on complex security and resilience topics in support of Executive level leaders. For a list of previous studies, go to:

https://www.dhs.gov/niac-reports-and-recommendations

2.2.2.7 Conduct research and analysis on critical infrastructure and information sharing legislation, policy, strategy and practice.

2.2.3 Facilitation, Communication and Coordination Support

Only the DFO/ADFO may speak on behalf of the NIAC. The NIAC council may only engage other stakeholders during the course of an ongoing study and any discussions after a report has been published may only be conducted by the council as a whole and only limited to gaining feedback on the published report and may not serve to edit the report. All such engagements must be coordinated through the DFO/ADFO and approved in advance. They must be held in a public forum and they must comply with FACA. Committee meetings shall be open to the public unless a determination is made by the appropriate DHS official in accordance with DHS policy and directives that the meeting should be closed in accordance with subsection (c) of section 552b of Title 5, U.S. Code. Attendance at closed meetings shall be limited to members, https://www.dhs.gov/niac-reports-and-recommendations appropriate government officials, and NIAC support staff who hold necessary administrative and security clearances. The contractor shall:

2.2.3.1 Provide subject matter expertise in supporting FACA councils. This includes expert facilitation, project management and analytical support for CEOs or Senior-executive equivalent level leaders across government and the private sector.

2.2.3.2 Support DHS and the DFO in drafting material for outreach and communication products of publicly available reports and recommendations. Support may include researching key stakeholders, trade associations or government partners; assessing key issues relevant to participating government and industry stakeholders; and developing presentations and marketing products.

2.2.3.3 Provide meeting management support for relevant working group studies to include:

drafting topic ideas; supporting the coordination and routing of agendas; facilitating working group sessions on relevant study topics; facilitating interviews with relevant stakeholders; drafting analytic summaries and recommendations for working group reports.

Please note the contractor will not be setting up workshop/meetings on their own;

this will be initiated and directed by the government. The contractor also will not be responsible for meeting/workshop planning support.

Estimated Number and Frequency of Meetings: The analytical support will be available to support all NIAC meetings. The NIAC will meet approximately four times annually, at the call of the DFO and the NIAC Chair. Additionally, there will be working group and study group meetings as scheduled by NIAC members. This is approximately one working group meeting a week for the period of time of a study depending on the length and topic of study. NIAC may establish subcommittees for any purpose consistent with their charter1 subject to the approval of the DFO. Additional meetings may be held with the approval of the DFO.

2.2.4 Report Review, Production and NIAC Records Keeping

The records of NIAC, formally and informally established subcommittees or other subgroups of the committee, shall be handled in accordance with General Records Schedule 26, Item 2 or other approved agency records disposition schedule. These records shall be available for public inspection and copying, in accordance with the Freedom of Information Act. The analytic support team must be able to produce all required documents in a 508 compliant format pending approval from DHS staff. All documentation and record keeping must comply with FACA and products cannot be publicly shared outside of the NIAC support staff until deliberated and approved by the NIAC and then published to the President and the American Public first.

1 National Infrastructure Advisory Council Charter. https://www.dhs.gov/sites/default/files/publications/niac-charter-renewal-cmotbs-final-11-13-13.pdf https://www.dhs.gov/sites/default/files/publications/niac-charter-renewal-cmotbs-final-11-13-13.pdf https://www.dhs.gov/sites/default/files/publications/niac-charter-renewal-cmotbs-final-11-13-13.pdf

2.2.4.1 The contractor shall provide quality assurance reviews of products to ensure the quality of the products developed for the advisory council are of the highest standing

– this covers technical editing, grammar, and information graphics.

2.2.4.2 The contractor shall provide 508 compliance knowledge and expertise for the public posting of materials to DHS.Gov web sites.

2.2.4.3 Upon receiving Government approval the contractor shall develop and implement () processes to identify data requirements, management, records-keeping, and communication protocols around presidential advisory reports.

2.2.4.4 The contractor shall organize the collected data in a systematic manner to facilitate ready reference. The electronic media, on an as required basis, shall be made available to the government on CD-ROM.

2.3 TASK THREE: ADVANCED ANALYTICAL SUPPORT FOR STRATEGIC MANAGEMENT AND

PERFORMANCE MEASUREMENT OFFICE OF INFRASTRUCTURE PROTECTION

In support of the Department of Homeland Security, National Protection and Programs Directorate, Office of Infrastructure Protection, the contractor shall:

2.3.1 Conduct qualitative and quantitative analyses of performance measurement data to effectively manage and articulate the value of programmatic efforts, including trend analysis and statistical processing.

2.3.2 Define appropriate performance measures to be used by all levels of management, including executive leadership.

2.3.3 Develop impact analyses that allow leadership to communicate the value of the organization and internally manage the performance of the organization.

2.3.4 Design and conduct case studies to highlight significant programmatic accomplishments across the organization.

2.3.5 Provide subject-matter expertise to conduct in-depth evaluation of business processes and strategic drivers.

2.3.6 Develop comprehensive logic models linking programs and activities with associated outputs and outcomes, and apply those models to develop quantitative and qualitative value-based metrics.

2.3.7 Develop specialized metrics for enabling functions such as public-private partnership sustainment, which cannot be easily translated into direct outcomes or quantifiable cost-benefit indicators.

2.3.8 Develop and apply organization specific criteria to down-select performance metrics to a manageable set that supports program implementation, execution, and resource allocation.

2.3.9 Develop streamlined data collection processes and mechanisms to support internal monitoring and external reporting requirements in support of strategic management, performance measurement, and budget formulation efforts.

2.3.10 Develop interactive metrics dashboards with audience-specific outputs to maximize the usefulness of the information for each management level.

2.3.11 Conduct performance measurement verification and validation assessments to improve performance measure data quality and meet the requirements of the Government Performance and Results Act Modernization Act.

2.3.12 Design surveys and other systematic mechanisms to gather stakeholder feedback on specific programmatic efforts, and develop the corresponding sampling and analytical processes to support program implementation and improvement.

2.3.13 Develop capability maturity models to better characterize practices and processes associated with key programmatic efforts and assess their potential to achieve specific outcomes.

2.3.14 The contractor shall possess sound engineering and video technician expertise.

2.4 TASK FOUR: PARTNERSHIP AND INFORMATION SHARING STUDIES ANALYTIC SUPPORT-

SECTOR OUTREACH AND PROGRAMS DIVISION

In support of the Department of Homeland Security, National Protection and Programs Directorate, Office of Infrastructure Protection, Sector Outreach and Programs Division the contractor shall:

2.4.1 Public-Private Partnership Analytical Support

2.4.1.1 The contractor shall possess technical writing expertise and have access to and produce information graphic capabilities to provide information, data and knowledge clearly. Information graphics will support requirements such as briefings, talking points, reports, white papers, newsletters, fact sheets, handbooks and/or training guides.

2.4.1.2 The contractor shall provide research and analytical support to assist SOPD and its public/private partners in data collection and in analyzing approaches and the identification of solutions to improve coordination of homeland security efforts within the United States at large and with specific infrastructure sectors and councils in particular.

2.4.1.3 The contractor shall conduct studies and research to support joint public-private planning, deliberations, issues resolution, programmatic and coordinated development and deployment of capabilities that support the national mission of critical infrastructure protection and resilience.

2.4.1.4 The contractor shall assist in establishing baseline performance metrics and performance targets in accordance with the Programmatic Planning and Metrics Initiative (PPMI) for programs and assets, creating benchmarks, and developing objective measurements to gauge future progress of coordination and security activities when requested.

2.4.1.5 The contractor shall conduct research and strategic studies and reports on partnerships and information sharing, regionally and nationally, to support NPPD/IP and the critical infrastructure sectors for the development of NIPP-framed implementation roadmaps working with the Sector and Government Coordinating Councils, Presidential Advisory Council, cross sector councils, and any workshops or exercises needed to support the development of these studies and roadmaps. Topics for implementation roadmaps may include sector-specific or cross-sector effective infrastructure protection practices, information sharing strategies and issues, and partnership best practices. Topics for research and analysis may include information sharing mechanisms, resilience and preparedness strategies, critical infrastructure security measures and vulnerabilities and development and development programs addressing infrastructure protection priorities. Research and analysis shall incorporate current critical infrastructure and information sharing legislation, policy, strategy and practice.

2.4.1.6 The contractor shall assist with additional programs and assessments as required by the government to support the implementation of the National Infrastructure Protection Plan and the supporting Sector Specific Plans.

2.4.1.7 The contractor shall possess sound engineering and video technician expertise.

2.4.2 Outreach, Coordination, and Planning Support

2.4.2.1 The contractor shall provide overall project coordination of contractor efforts for all studies and assist in the planning and conducting of necessary activities to engage the private sector and all levels of government in the execution of a study. The contractor shall integrate studies and roadmaps with other on-going NIPP implementation activities, engage critical infrastructure sectors developing the studies, as requested, and conduct necessary follow-on activities to integrate future sector or council engagements with any study or roadmap findings.

2.4.2.2 The contractor shall assist DHS in the outreach to the owners and operators of the critical infrastructure sectors in support of requested studies or roadmaps. Such assistance may include identifying key stakeholders; conducting outreach to critical infrastructure owners/operators, trade associations or government partners and critical infrastructure sector councils, and assessing key issues relevant to participating government and industry leadership bodies in preparation and developing relevant materials for outreach to support data collection and studies.

2.4.2.3 The contractor shall assist DHS in planning and coordination, agenda development and facilitation/mediation of appropriate workshops, meetings and work shops. Outreach activities will also include developing all appropriate communication materials on content, follow up on action items, and coordinate the distribution of any final reports as requested by the government.

2.4.2.4 The contractor shall assist DHS in monitoring, tracking, and supporting key outreach events and regional activities, participation in meetings and work shops, and other high-visibility activities as determined by senior leadership; including the development of briefing materials, agendas, and talking points; supporting the coordination and routing of agendas and approval packages; supporting internal reporting processes;

consolidating feedback; and developing high-level summaries and dashboards for leadership awareness.

2.4.3 Operational Support Services

2.4.3.1 As directed by the Government, the contractor shall provide appropriate briefings, training, orientation, curriculum and course materials for instructor-lead and/or web-enabled training for facilitation and strategic planning techniques for non-governmental organizations. In some cases the contractor may be the Trainer or facilitate Train the Trainer courses. Training materials may also include briefings, talking points, and development of handbooks, or guides. This requirement may include arranging for guest speakers, renowned experts or other specialists to deliver information, training or perspectives required and approved by the Government.

2.4.3.2 The contractor shall develop and implement (upon receiving Government approval) processes to identify data requirements, management, records-keeping, and communication protocols in support of requirements consistent with this SOW. When the SOW related document is available on electronic media, the contractor shall ensure a copy of that media is also available. The contractor shall organize the collected data in a systematic manner to facilitate ready reference. The electronic media, on an as required basis, shall be made available to the government on CD- ROM. The contractor prepared data shall be marked in accordance with the government guidance in the applicable Contractor Data Requirements List (CDRL).

2.5 TASK FIVE: ACCELERATED STUDY OR WORKSHOP EXECUTION (OPTIONAL)

Accelerated study or workshop execution is defined as excess requirements that must be available with an accelerated delivery. The contractor shall provide immediate access to technical resources to fulfill requirements for studies or workshops in an accelerated time frame upon request. All work assigned to this contract requires prior approval by the

COR/ACOR.

DHS historic information of the past five-years has demonstrated that missions and priorities change as a result of lessons learned from incidents of national significance, natural disasters and the priorities realigned by Congress and the President. These changes are beyond the ability of IP to forecast, but the division can be reasonably certain that changes during the period of performance are likely to occur.

To accommodate these changes, the government is including a surge optional line item that will be funded only if necessary and via a contract modification issued by the Contracting Officer.

The surge support will be composed of the same labor categories as identified within the Time-and-Materials contract line items and the scope is limited to the tasks already defined in the SOW. Surge support is estimated as follows:

Period of Performance Surge Hours Base Year 960 Option Period 1 1920 Option Period 2 1920

3.0 CONTRACTOR PERSONNEL

3.1 QUALIFIED PERSONNEL

The Contractor shall provide qualified personnel to perform all requirements specified in the SOW. The Contractor shall provide qualified personnel with technical expertise in National critical infrastructure protection resilience policy and strategy, research, analysis and technical writing, articulating cases for action and policy/strategy in business and in critical infrastructure sector-specific terms, state/local government CI program operations and structures, facilitation and conflict mediation and private sector industry related to the 18 Critical Sectors.

3.2 CONTINUITY OF SUPPORT

The Contractor shall ensure that the contractually required level of support for this requirement is maintained at all times. The Contractor shall ensure that all contract support personnel are present and working during all hours of the workday. If for any reason the Contractor staffing levels are not maintained due to vacation, leave, appointments, etc., and replacement personnel will not be provided, the Contractor shall provide e-mail notification to the COR prior to employee absence. Otherwise, the Contractor shall provide a fully qualified replacement.

3.3 KEY PERSONNEL

Before replacing any individual designated as Key by the Government, the Contractor shall notify the Contracting Officer no less than 15 business days in advance, submit written justification for replacement, and provide the name and qualifications of any proposed substitute(s). All proposed substitutes shall possess qualifications equal to or superior to those of the Key person being replaced, unless otherwise approved by the Contracting Officer. The Contractor shall not replace Key Contractor personnel without approval from the Contracting Officer. The following Contractor personnel are designated as Key for this requirement:

• Senior Program Manager

• NIAC Project Manager

• NIAC Senior Analyst

• NIAC Senior Facilitator(s)

• Senior Facilitator(s)

Each key personnel shall not be assigned by the Contractor to more than one key position for this requirement.

3.4 SENIOR PROGRAM MANAGER (PM) (with Public Trust clearance)

The Contractor shall provide a PM who shall be responsible for all Contractor work performed under this SOW. The PM shall be a single point of contact for the Contracting Officer and the Contracting Officer’s Representative (COR). The PM shall be one of the senior level employees provided by the Contractor for this work effort and have 5 -15 years experiences as a PM or Deputy PM on a government contract. . The name and resume of the PM, and the name(s) of any alternate(s) who shall act for the Contractor in the absence of the PM, shall be provided to the Government as part of the Contractor's proposal. During any absence of the PM only one alternate shall have full authority to act for the Contractor on all matters relating to work performed under this contract. Once appointed, the Contractor shall not replace the PM until the Contracting Officer approves the change.

The PM shall also meet the specific requirements listed below:

• Shall have technical expertise in National Critical Infrastructure Protection policy and strategy as well as, State/local government critical infrastructure program operations and structures.

• Shall establish and maintain technical and financial reports that clearly demonstrate progress of projects to management.

• Shall have a workstation onsite in order to interface with Contractor employees, the COR and other Federal Employees as arranged with the COR.

• Shall meet with the contractor team and management frequently to formulate and review task plans and deliverables.

• Shall be able to read, write, speak and understand English.

Additionally,

3.5 NIAC PROJECT MANAGER (with Public Trust clearance)

• The contractor shall provide a dedicated Project Manager specifically for the NIAC efforts. Because of the senior level requirements of the executive council and the time commitment needs of the studies and reports, a dedicated project manager is needed. The Project Manager shall maintain client relationship, refine project requirements, maintain project plans, provide project financial oversight and management, and maintain project schedules. The Project Manager shall be available to the COR, DFO and ADFO via telephone between the core hours of 9:00 am and 5:00 pm EST, Monday through Friday, and shall be the point of contact responsible to address and resolve any work related issues arising from performance under this contract within 12 hours of notification.

The NIAC Project Manager shall meet the following qualifications:

• Contractor Provided Project Manager for this SOW must be a certified Project Management Professional (PMP) Program Manager with 6 years’ experience and PhD in Business, Management, Operations Research, Engineering, or related scientific or technical fields; or 10 years’ experience with a Master’s Degree in the same fields; or 15 years’ experience with a Bachelor’s degree in the same fields.

• Shall have technical expertise in National Critical Infrastructure Protection policy and strategy as well as, State/local government critical infrastructure program operations and structures.

• Shall be able to read, write, speak and understand English.

3.6 NIAC SENIOR ANALYST (with Public Trust clearance)

The Senior Analyst will: collect and analyze qualitative and quantitative data, prepare internal reports and support project oversight duties; provide strategic and operational advice to Government; assess draft policy, strategic documents, provide support to identify and facilitate actionable outcomes from the gaps and options for consideration, participate in strategic and performance planning meetings and provide reports as appropriate; ensure high quality written products and support NIAC report development, formalize trust-based strategic partnerships with critical infrastructure partners to coordinate and collaborate to address priority requirements and capability needs. The name and resume of the Senior Analyst shall be provided to the Government as part of the Contractor's proposal.

The NIAC Senior Analyst shall meet the following qualifications:

• The Senior Analyst should have a Master’s Degree or higher in computer science, operations, engineering, business or a technical field with four years of progressive experience.

• The Senior Analyst shall be able to read, write, speak and understand English. The Senior Analyst shall be proficient in in Microsoft Word, Excel, PowerPoint and any other DHS- related suite of IT tools necessary to ensure quality products

3.7 NIAC SENIOR FACILITATOR(S) (with Public Trust clearance)

The contractor shall provide a Facilitators are expected to design, organize and facilitate executive-level roundtables and workshops to develop organizational and business strategies;

this includes, including the planning & design of the meeting, the agenda, the recording of meetings, the analysis of data and the final report. May lead group, provide meeting leadership and problem solving techniques. The Facilitator will be responsible for setting the parameters, the intention and guiding the conversation. The Facilitator will be to develop appropriate guiding questions based upon the study topic and member guidance to create and cultivate new possibilities that stimulate new thinking. The name and resume of the Senior Facilitator shall be provided to the Government as part of the Contractor's proposal.

The Facilitator(s) shall meet the following qualifications:

• The facilitator(s) shall have a minimum of 12 years’ experience and a Master’s Degree in Business, Engineering, Operations Research, or related scientific or technical fields.

• The Senior Analyst shall be able to read, write, speak and understand English.

• The Senior Analyst shall be proficient in in Microsoft Word, Excel, PowerPoint and any other DHS- related suite of IT tools necessary to ensure quality products.

3.8 SENIOR FACILITATOR(S) (Advanced Analytic Support) (with Public Trust clearance)

The contractor shall provide Facilitators that have expertise in designing, organizing and facilitating roundtables and workshops that address National Infrastructure Protection Security and Resilience framework. The Facilitator will be responsible for setting the parameters, the intention and guiding conversation. The Facilitator shall develop appropriate guiding questions based upon the study topic and member guidance to create and cultivate new possibilities that stimulate new thinking. The name and resume of the Senior Analyst shall be provided to the Government as part of the Contractor's proposal.

• The facilitator shall have a minimum of 3 years’ experience in the development of metrics and strategies for measuring DHS stakeholder outreach.

• The Senior Facilitator shall be able to read, write, speak and understand English.

• The Senior Facilitator shall be proficient in in Microsoft Word, Excel, PowerPoint and any other DHS- related suite of IT tools necessary to ensure quality products.

3.8 EMPLOYEE IDENTIFICATION

3.8.1 Contractor employees visiting Government facilities shall wear an identification badge that, at a minimum, displays the Contractor name, the employee’s photo, name, clearance-level and badge expiration date. Visiting Contractor employees shall comply with all Government escort rules and requirements. All Contractor employees shall identify themselves as Contractors when their status is not readily apparent and display all identification and visitor badges in plain view above the waist at all times.

3.8.2 Contractor employees working on-site at Government facilities shall wear a

Government issued identification badge. All Contractor employees shall identify themselves as Contractors when their status is not readily apparent (in meetings, when answering Government telephones, in e-mail messages, etc.) and display the Government issued badge in plain view above the waist at all times.

3.9 EMPLOYEE CONDUCT

Contractor’s employees shall comply with all applicable Government regulations, policies and procedures (e.g., fire, safety, sanitation, environmental protection, security, “off limits” areas, wearing of parts of DHS uniforms, and possession of weapons) when visiting or working at Government facilities. The Contractor shall ensure Contractor employees present a professional appearance at all times and that their conduct shall not reflect discredit on the United States or the Department of Homeland Security. The Project Manager shall ensure Contractor employees understand and abide by Department of Homeland Security established rules, regulations and policies concerning safety and security.

3.10 REMOVING EMPLOYEES FOR MISCONDUCT OR SECURITY REASONS

The Government may, at its sole discretion (via the Contracting Officer) (CO)), direct the Contractor to remove any Contractor employee from DHS facilities for misconduct or security reasons. Removal does not relieve the Contractor of the responsibility to continue providing the services required under the contract.

4.0 OTHER APPLICABLE CONDITIONS

4.1 SECURITY

Contractor access to unclassified, but Security Sensitive Information may be required under this SOW. Contractor employees shall safeguard this information against unauthorized disclosure or dissemination.

4.2 PERIOD OF PERFORMANCE

The period of performance for this contract is one (1) base period of twelve (12) months from the date of award with two (2) twelve-month option periods.

4.3 PLACE OF PERFORMANCE

The primary place of performance will be the Contractor’s facilities. Frequent local travel between the Contractor’s office facilities and DHS facilities in the Washington, DC metropolitan area is expected. In addition, travel to data centers, Continuity of Operations Plan sites and DHS leased facilities in the Washington, DC, Capital Region is anticipated.

4.4 TRAVEL

Cont…