20191203 Draft JECC C5S PWS.docx

FOR OFFICIAL USE ONLY – SOURCE SELECTION INFORMATION – SEE FAR 3.104

PERFORMANCE WORK STATEMENT FOR

UNITED STATES TRANSPORTATION COMMAND (USTRANSCOM) JOINT ENABLING CAPABILITIES COMMAND (JECC) COMMAND, CONTROL, COMMUNICATIONS, CYBER, COLLABORATION SUPPORT (C5S)

13 December 2020 i

PERFORMANCE WORK STATEMENT (PWS)

1. DESCRIPTION OF SERVICES

1.1. Background

The United States Transportation Command (USTRANSCOM) located at Scott Air Force Base (AFB), IL, is one of nine Unified Combatant Commands (UCC). USTRANSCOM provides command and control (C2) for the synchronized transportation, distribution, and sustainment of personnel and assets, making possible the projection and maintenance of national power wherever needed with speed and agility, high efficiency, and a high level of trust and accuracy.

The Joint Enabling Capabilities Command provides mission-tailored, joint capability packages to Combatant Commanders in order to facilitate rapid establishment of Joint Force Headquarters, fulfill Global Response Force execution and bridge joint operational requirements. The JECC delivers unmatched joint operational command and control enablers to Joint Force Commanders conducting emergent full spectrum operations. JECC Command, Control, Communications, and Cyber (C4) Systems (C4S) Directorate (J6) provides essential Command, Control, Communications, and Collaboration Support (C5S) services to the JECC Commander in performance of the command’s mission to provide mission-tailored, joint capability packages to meet national security objectives.

The JECC C5 network environment interfaces with numerous on-site and remote commercial, DOD, military service specific, and other common-user networks. Together, these network environments culminate into one of four distinct operating environments--Secret Internet Protocol Router Network (SIPRNET), Non-secure Internet Protocol Router Network (NIPRNET), Department of Defense Intelligence Information System (DODIIS)/Joint Worldwide Intelligence Communications System (JWICS), and the commercial internet. A myriad of applications make use of the JECC C5 infrastructures by providing access and services to the JECC user community.

JECC’s network environments operate in and surrounded by network defense infrastructures. The JECC network environments, supported by USTC TCJ6 and multiple external service providers, are comprised of several operating systems on clients and servers, both physical and virtual: supported operating systems, software, applications are listed in Appendix F: Operating Systems/Software/Applications Supported and Protocols in Use are listed in Appendix G: Protocols in Use. The diversity of the applications riding on the JECC environments (C2 systems, information management systems, mail/message systems, and security systems) compound the integration of new system requirements. The information security environment on the segments of the JECC network environments are a unique integration of products demanding a high degree of technical capability.

The Joint Enabling Capabilities Command (JECC) headquarters supports two subordinate joint commands: Joint Communications Support Element (JCSE) and Joint Planning Support Element (JPSE).. The JECC HQ and JPSE are co-located at Naval Station Norfolk, Norfolk, VA. The JCSE is located at MacDill Air Force Base, Tampa, FL.

HTC711-16-F-D042

Attachment 1

1.2. Scope

The scope of the contract effort is to provide a broad range of Command, Control, Communications, Cyber, and Collaboration Support (C5S) capabilities to support the JECC missions. Information Technology (IT) technical skills will be required to support the JECC C5 environment, which interface with numerous on-site and remote commercial, DoD, service, and common-user networks (i.e., Secret Internet Protocol Router Network (SIPRNET), Non-secure Internet Protocol Router Network (NIPRNET), and Department of Defense Intelligence Information System (DODIIS)/Joint Worldwide Intelligence Communications System (JWICS)). Additional support will be required to support a myriad of applications that make use of the JECC C5 infrastructure by providing access and services to the JECC user community.

Additionally, the contractor shall provide a range of IT services to include cyber defense, network operations and maintenance, IT Asset Management (ITAM), Deployment Equipment, Life Cycle Support, Disposal of IT Hardware and Software, Degaussing of IT Hardware and Software, Critical Infrastructure Protection Incident Handling and Reporting, Cyber Security, User Account/Permission Management, SIPRNet Hardware Token Support, Security Exemptions / Waiver Management, Integrated Electronic Security Systems (IESS) Sustainment, Communications Security (COMSEC) and Electronic Key Management Systems (EKMS) Support Services, Deployment Support, IT planning, system integration, technical testing and evaluation, analysis and guidance, software management, information management, records management, systems administration, purchase of hardware and software, hardware repair and enhancements, software configuration, end user devices support, architecture and infrastructure management, system management, audio visual and video teleconferencing, Contingency of Operations (COOP) sustainment, and all deliverables related to these services.

The contractor shall utilize best practices from the Information Technology Infrastructure Library (ITIL) and the Project Management Institute (PMI) to influence service delivery to provide value to JECC users and their mission. The contractor shall be responsible for coordinating, managing, assigning resources, processes, and activities with regard to the successful delivery of that entire process or service as defined in the contract.

This contract shall use ITIL and PMI best practices to perform the following:

· Identify and focus on the highest value activities

· Service multiple customers with varying requirements using only limited resources

· Define, measure and report relevant metrics to help with fact-based decision-making

· Improve efficiency by automating standard tasks and applying lean principles to tasks and projects

· Unite teams and processes by understanding interdependencies and how they impact one another

· Influence the organizational culture to support continual improvement activities

1.3. Specific Tasks

1.3.1. Task 1: Contract Level and Contract Management

This task consists of the functional activities relating to the administration and management of this effort. The contractor shall provide on-site program management of contractor personnel performing tasks in this PWS. The contractor shall identify a Program Manager (PM). The contractor shall designate a principal point of contact for technical issues. The contractor shall prepare documents such as briefings, point papers, and meeting minutes related to status of the performance of this PWS. The contractor shall provide support in the specific areas outlined below in this PWS.

The contractor shall provide all deliverables, referenced documents, and contractor-developed and Government approved plans, schedules, and milestones. The contractor shall meet Government requirements and milestones. The contractor shall notify the government, in writing, within 24 hours of the missed deadline.

The Program Manager is the authorized point of contact with the Government Contracting Officer’s Representative (COR). Responsibilities include, but are not limited to, interfacing with Government management personnel, staffing of all tasks, formulating and enforcing work standards, assigning schedules, reviewing work discrepancies, and communicating policies, purposes, and goals of the organization to subordinates.

All decisions regarding Government requirements or Government actions shall be made by Government personnel. The contractor’s representative shall submit evaluations, recommendations, etc., to the COR and/or Contracting Officer (CO) for action.

1.3.1.1 Task 1 Subtask 1: Contract Management Plan

The contractor shall submit a Contract Management Plan within fifteen (15) business days of contract award. The Government will review the plan and provide comments to the contractor within five (5) business days from receipt of the updated Contract Management Plan. The contractor shall have five (5) business days from receipt of the Government’s comments to submit the final plan. The contractor shall update the plan each option year within fifteen (15) business days after the option year being exercised.

1.3.1.2 Task 1 Subtask 2: Monthly Status Report

The contractor shall provide a Monthly Status Report (MSR) no later than the 15th of the month following the reporting period. The MSR shall list the accomplishments of the reporting period for each active task/project area. The MSR shall outline a brief synopsis of the efforts completed, deliverables provided, conferences, and trips conducted and attended during the reporting period. The report shall also provide an overall evaluation of the contract to date, listing per task any issues, problem areas, and items that require Government action. In conjunction with the contract end date, a final MSR shall be submitted no later than the last business day of the final period of performance.

1.3.1.3 Task 1 Subtask 3: In-Process Review

The contractor shall conduct quarterly In-Process Reviews (IPRs) as scheduled by the Government. The IPR shall summarize status, progress, recommendations, and concerns in the development of any tasks or documentation described within this PWS. Initial quarterly IPR presentation material provided five (5) business days prior to IPR meeting. Final presentation materials shall be prepared and provided to the COR two (2) business days prior to the IPR.

1.3.1.4 Task 1 Subtask 4: Trip Reports

Within five (5) business days of completion of any travel, the contractor shall submit a trip report to include the following details: purpose, location, trip duration, travelers, travel costs, individuals contacted during trip, synopsis of discussions, decisions made, future actions identified, and issues or concerns arising during the trip. Invoices (along with associated receipts) shall support all travel reimbursement requests.

1.3.1.5 Task 1 Subtask 5: Meeting / Conference Minutes

The contractor shall attend meetings or conferences held at JECC or other locations as identified by the Government, and provide meeting/conference minutes that detail the results as well as the impact of the meetings/conferences within three (3) Business Days day after completion of the meeting/conference. Meetings/Conferences will generally take place during the normal duty hours.

1.3.1.6 Task 1 Subtask 6: Employment Status Report

The contractor shall provide an employee status report containing names and labor categories of personnel supporting each major task. The contractor shall provide the report within twenty (20) business days of the contract start date and update the report within five (5) business days of any changes in personnel. The Contractor shall make every reasonable attempt to fill any vacancy of a position described in the Technical and Management Work Plan in a time period no longer than a single billing cycle.

1.3.1.7 Task 1 Subtask 7: Non-Disclosure Agreement (NDA) for Contractor Employees Due to the sensitive nature of the data and information contractor personnel have access to, the contractor shall provide signed Nondisclosure and Conflict of Interest Agreements (NDAs) to ensure contractor personnel do not compromise sensitive or proprietary information. The contractor shall provide a signed NDA for all personnel assigned this contract. The contractor shall not grant their personnel access to JECC information technology before the signed NDA is accepted by the COR. The Government will retain these documents. See Appendix 3, Nondisclosure and Conflict of Interest Agreements. The contractor shall also be required to sign a non-disclosure agreement in accordance with DFARS 227.7103-7 if access to technical data or computer software delivered to the Government with restrictions as described in DFARS 227- 7103-7. Before obtaining access to another contractor’s proprietary information, in accordance with FAR 9.505-4, the contractor must agree with the other company to protect the information, complete necessary agreements, and furnish such agreements to the Contracting Officer.

1.3.1.8 Task 1 Subtask 8: Transition-In Plan

For the first 30 calendar days, the incoming contractor will be provided transitional training, i.e. will work side-by-side with or shadow the outgoing contractor on the local processes and procedures for performance of day-to-day duties, specifically deliverables. This effort is not functional in nature, but is to familiarize the incoming contractor with the USTRANSCOM work environment as it relates to the requirements of the PWS. The overall goal of the transition period is to ensure uninterrupted support to the Joint Enabling Capabilities Command (JECC) and seamless transfer of responsibilities to the incoming contractor team(s). Management of the overlap between contracts is a Government function, and guidance will be issued providing direction and clarification of each contractor's responsibilities within the scope of their respective contracts.

This is the minimum essential task for the incoming contractor; nothing within this task limits the responsibility of the contractor to fully execute the contract from the date scheduled for full performance beginning 30 days after contract start.

1.3.1.9 Task 1 Subtask 9: Transition-Out Plan

The contractor shall develop a phased transition plan, to be executed if the follow-on contract is awarded to another prime contractor(s). The plan's level of detail must be sufficient for each of the parties to understand and execute; the parties are the Government, the incumbent contractor, and the contractor(s) awarded the follow-on contract. The overall goal of the transition plan is to ensure uninterrupted support to the Joint Enabling Capabilities Command (JECC) and seamless transfer of responsibilities to the incoming contractor team(s). Management of the overlap between contracts is a Government function, and guidance will be issued providing direction and clarification of each contractor's responsibilities within the scope of their respective contract. The contractor will ensure Task Continuity Folders (Task 1-9) are updated and available for review thirty (30) calendar days prior to period of performance expiration.

The transition plan should address the tasks in PWS. The transition plan shall consist of two parts: transition-in and transition-out. The transition-in commences upon commencement of performance by a follow-on contractor and concludes when the incoming contractor team(s) is ready to assume responsibility for tasks and deliverables. Contract close-out requirements shall be executed by the outgoing contractor during the transition-out.

The incumbent contractor will develop a transition out plan that includes: “1) in-brief for Government and incoming contractor team management; 2) orientation for new contractor personnel; 3) training to incoming contractor personnel on standing JECC procedures and use of specific information system applications; 4) transfer of Government property; 5) implementation of subcontractor arrangements; 6) exchange of program-related corporate knowledge; 7) establishment of memoranda of agreements and nondisclosure agreements as required; 8) execution of operational IT services (Tier II Customer Support, Information Assurance, Account Management, Video-Teleconferences, Information Systems, and Communications Support including Communications Security and Telecommunications support); 9) administrative and logistic requirements (e.g. personnel in-processing, applying for Common Access Card and government system accounts, etc).

1.3.1.10 Task 1 Subtask 10: Contractor Manpower Report

The contractor shall report all contractor and subcontractor labor hours required for performance of services provided under this contract for JECC via a secure data collection site.

The contractor is required to complete all required data fields using the following Web address http://www.ecmra.mil/.

Reporting inputs will be for the labor executed during the period of performance by each Government fiscal year (FY), which runs October 1 through September 30; all data shall be reported no later than October 31 of each calendar year, beginning with 2020.

The eCMRA site associated with this contract is Department of the Air Force CMRA (https://afcmra.hqda.pentagon.mil/) The Command of the Requiring Activity is JT Enabling CAP. The Unit Identification Code (UIC) for this requirement is FF16V0 The Federal Service Code for this contract is D399.

1.3.1.11 Task 1 Subtask 11: Incident Management

The Contractor shall primarily use and track customer requests for maintenance using the USTRANSCOM trouble ticketing system. Contractor shall use the government provided incident handling trouble ticket systems for logging all assistance, technical issues, resolution tracking, and reporting service delivery problems. Incident response times and escalation requirements are found in paragraph 1.5.

Contractor shall use other government provided incident handling trouble ticketing systems designated by the service provider(s). All trouble tickets, incidents, and/or service delivery actions shall be logged in the servicing service providers' trouble ticketing system.

A consolidated monthly report of metrics shall be delivered to the government based on incident response and escalations found in paragraph 1.5. The report shall be delivered no later than the fifteenth (15) calendar day of each month as part of the Monthly Status Report (MSR)..

The contractor shall provide a consolidated monthly summary of the number (by task) of new incidents; number of closed tickets; number of open tickets; average time to resolve; issues not resolved as required by priority; and trend analysis to issues that may be indicative of a systemic issue in the environment. The report shall be delivered no later than the fifteenth (15) calendar day of each month as part of the Monthly Status Report (MSR).

1.3.1.12 Task 1 Subtask 12: Mission-Essential Contractor Services Plan The CO has identified all or a portion of the services performed under this contract as “Emergency-Essential” as defined and described in DoD Instruction (DODI) 1100.22, “Policy and Procedures for Determining Workforce Mix.” Hereafter, the personnel identified by the contractor to perform these services shall be referred to as “Mission Essential Contractor Personnel.”

Table 1.3.1.12 Mission-Essential Services Table

1.3.3.2 Cyber Security

1.3.3.3 User Account/Permission Management

1.3.3.4 SIPRNet Hardware Token Support

1.3.3.6 Integrated Electronic Security Systems (IESS) Sustainment

1.3.3.7 Communications Security (COMSEC) and Electronic Key Management Systems (EKMS) Support Services

1.3.3.8 Deployment COMSEC Support

1.3.4.2 Video Teleconference (VTC) Support Services

1.3.4.5 Facilities Video Security Systems

1.3.5.1 Public Switched Telephone Network Building Voice Telecommunications (Legacy)

1.3.5.2 Wireless Voice/Data Telecommunications

1.3.5.3 Voice over Internet Protocol (VOIP) Telecommunications

Contractor shall provide a plan for providing Mission-Essential Contractor Services. The plan shall include provisions for providing split operational support of tasks during exercises and contingencies. Not all Mission Essential Services (Tasks) are required for all locations during split operations. Contractor’s plan shall specify required mission essential services and plan to support each site per the government’s approval. The initial plan is due thirty (30) calendar days after contract start date and thirty (30) business days after personnel or contract modifications/changes.

Covered Defense Information is identified for all of Task 3. Additionally, Operationally Critical Support is designated in Task 6, subtask 4; Task 7, subtasks 1, 4, 5, and 6; and Task 9, subtasks 3 and 4.

Split operational support includes support to operations in X132, Norfolk Naval Base, Norfolk, government designated Contingency of Operations (COOP) locations, and government designate “Safe Haven” locations.

1.3.1.13 Task 1 Subtask 13: Managers' Internal Control Program Contractor shall provide baseline input to Managers' Internal Control Program (MICP) data calls on a monthly basis. Contractor shall collect, collate, and report MICP Assessable metrics and reportable details using government furnished templates. The report shall be delivered no later than the eighth (8th) calendar day of each calendar month.

1.3.1.14 Task 1 Subtask 14: Configuration Management

Configuration Management CM is the discipline of identifying all components and their relationships in a continually evolving system, taking into account relevant system interfaces, for the purpose of maintaining integrity, traceability, and control over change throughout the lifecycle. It is a disciplined process of technical and administrative direction for the identification and documentation of a system's functional and physical design requirements; the management of subsequent changes; and the verification of successful requirement implementation.

Current JECC architectures are comprised of separate disparate client server legacy, virtual and cloud environments. Asset and configuration management is defined differently for each of these environments. The Contractor shall provide asset management and CM services to maintain technical and administrative control of the functional and physical characteristics of technology assets and provide continuous visibility into the types and numbers of assets throughout the enterprise. The Contractor shall identify and define the IT configuration items (CIs) in the system and control the change of these items throughout their lifecycle as well as report status of a CI during its life cycle. The Contractor shall support and /or conduct periodic change boards or other CM-related meetings as required by the Government. The Contractor shall manage the status accounting process, facilitate status review and change boards, document review board results and follow up on action items from the CM-related meetings as required by the Government.

The contractor shall establish and support configuration control and CM as a systems engineering process to establish and maintain consistency of the JECCs C5 systems performance, functional and physical attributes with its requirements, design and operational. The contractor shall submit an initial Configuration Management Plan sixty (60) calendar days after contract award. Final shall be submitted five (5) business days from receipt of government comments. Once the Configuration Management Plan is approved by the government, the contractor will submit quarterly configuration management reports based on criteria agreed on in the Configuration Management Plan.

1.3.1.15 Task 1 Subtask 15: Daily Operational Status

Contractor shall provide a daily status update for capabilities and services experiencing high number of incidents; unusual operational or end-user activities affecting normal daily operations; migrations, transitions, service outages, and/or scheduled service interruptions; unscheduled service disruptions; and flag level support activities. The update shall be provided on/before 0830ET each business day Provide status update for capabilities and services:

a. experiencing high number of incidents

b. unusual operational or end-user activities affecting normal daily operations

c. currently migrating, transitioning

d. experiencing service outages and/or scheduled service interruptions

e. experiencing unscheduled service disruptions

f. requiring flag level support

g. key projects, tasks and initiatives

h. key network operations actions

i. key cyber security actions

j. significant events The contractor shall post the daily operational status to the designated collaborative portal environment accessible for viewing by all authorized users on/before 0830ET each business day.

1.3.2 Task 2: ITAM Support Services

This task consists of the functional activities relating to the administration and management of Property Administrator, inventory management, lifecycle management and disposal of hardware and software IT assets. The contractor shall provide ITAM services including technical oversight of the JECC’s Subordinate Elements. The contractor shall be responsible for ensuring services are delivered effectively and efficiently, to include fulfilling user requests, resolving service failures, fixing problems, as well as carrying out routine operational tasks. The contractor shall designate a principal point of contact for ITAM issues.

The contractor shall prepare documents such as briefings, point papers, and meeting minutes related to status of the performance of this task. The contractor shall maintain ITAM Support continuity folders.

1.3.2.1 Task 2 Subtask 1: Inventory Control Monitor

The contractor shall assume the duty of JECC Inventory Control Monitor for Hardware (H/W) and Software (S/W) assets under JECC HQ control. The Inventory Control Monitor is to account for all Information Technology Asset Management (ITAM) assets in accordance with United States Transportation Command Instruction (USTCI) 33-16, USTCI23-2, DODI 5000.64, AFMAN 17-1203, and local JECC accountability requirements.

The contractor shall provide overall management and control of JECC hardware and software assets. To include managing and distributing ITAM assets, and being responsible to work with Service Asset and Configuration Management in defining Configuration Items (CIs) for ITAM assets.

The contractor shall:

· IAW USTCI 33-16, USTCI23-2, DODI 5000.64 and AFMAN 17-1203A, ensure the command’s ITAM inventory is accurately reflected in the Government specified accountable IT hardware and software assets database system.

· Serve as the Inventory Control Monitor for all ITAM hardware assets transiting or stored in the Norfolk warehouse.

The contractor shall provide, or ensure availability of, the monthly warehouse equipment- inventory report, to include projected end-of-life and warranty expiration, NLT than eights (8) calendar days of the following month.

The contractor shall:

· Maintain a current listing of all Property Administrators (PAs), Custodians and alternates and ensure updates are completed within three (3) business days when PAs or Custodians change.

· Provide Property Administrators (PAs)/Custodians training necessary to accomplish their duties.

· Ensure all Property Administrators (PAs) conduct an initial and annual physical inventories of all JECC accountable ITAM hardware assets and provide a report of any discrepancies identified within five (5) business days of completion of the inventory. The contractor shall provide initial inventory information to the government no later than 30 calendar days after performance start.

· The contractor shall provide inventory information to the government based on prevailing ITAM policies, instructions, and when directed.

· Work with customers and investigating officials when a Report of Survey is required.

· Manage staging and ITAM asset storage area in conjunction with JECC J4.

· Provide inventory control for JECC ADPE hardware assets and, in coordination with JECC J4, act as the command’s focal point for receiving, distributing, and disposing of all JECC ITAM assets.

· Properly dispose of excess or end-of-life information technology (IT) hardware assets through Defense Logistics Agency (DLA) Disposition Services (formerly known as Defense Reutilization and Marketing Office (DRMO)) or per JECC guidance.

· Provide knowledge articles (e.g., procedures for shipping, disposal, and requesting assets from warehouse) when necessary to effectively share IT Service Management information to aid and assist the provisioning of IT services.

· The contractor will be on-call after duty hours with a two (2) hour on-site response time to provide spares and/or parts.

· Computer hardware and warehousing equipment (e.g., workbenches, shelving, pallet jack) are available for the contractor’s non-exclusive use.

· Storage space will be provided by the government in building X132 for government owned equipment.

· Work with IT Financial Management, Procurement and Event Management teams to establish inventory reorder thresholds and quantities and inform the Government if established equipment inventory thresholds have been reached

· Work with customers and investigating officials when a Report of Survey is required.

1.3.2.2 Task 2 Subtask 2: Deployment Equipment Support

Support and maintain standardized inventory of deployment ITAM related equipment IAW established JECC requirements and JECC readiness and deployment instructions.

Setup, configure, track, store, package, ship, reconstitute, and restock deployment equipment.

Submit issued/received documents and reports using tools/products provided by the servicing agency. Report low and/or depleted levels of deployment equipment in the Daily Operational Status Report.

Update the Traveler’s Guide when changes occur in JECC J6 associated processes, procedures, or technologies within three (3) business days for JECC Portal-based version and provide change pages to JECC J3 for hard-copy version (usually published semi-annually).

1.3.2.3 Task 2 Subtask 3: IT Asset Management (ITAM)

The contractor shall establish and support IT Asset Management as a Configuration Management process to establish and maintain consistency of the JECCs C5 systems performance, functional and physical attributes with its requirements, design and operational. The contractor shall submit an IT Asset Management Plan sixty (60) calendar days after contract award. This strategy may be combined with the Configuration Management Plan deliverable described in paragraph 1.3.1.14 Task 1 Subtask 14: Configuration Management. Once the IT Asset Management Plan is approved by the government, the contractor will submit quarterly IT Asset Management reports based on criteria agreed on in the approved strategy.

At a minimum, the contractor shall report: Locations and current software load of ITAM assets in use, discrepancies and fix action for items not within configuration parameters, maintenance performed, suggested five-year replacement/upgrade schedule, and other factors that may affect end-of-life date for all equipment and software.

1.3.2.4 Task 2 Subtask 4: ITAM Life Cycle Management Support

The contractor shall develop and support a Life Cycle Management Plan for JECC C5 systems. The contractor shall submit an ITAM Life Cycle Management Plan sixty (60) calendar days after contract award. This strategy may be combined with the Configuration Management Plan deliverable in described in paragraph 1.3.1.14 Task 1 Subtask 14: Configuration Management. Once the Life Cycle Management Plan is approved by the government, the contractor shall submit quarterly lifecycle reports to the government based on the Life Cycle Management Plan.

At a minimum, the contractor shall report: in-service dates, maintenance performed, warranty information, suggested five-year life cycle replacement schedule, and other factors that may affect end-of-life date for all equipment.

1.3.2.5 Task 2 Subtask 5: Degaussing of ITAM

Prepare inoperable or lifecycle depleted ITAM equipment for turn-in. The contractor shall remove magnetic media, degauss media IAW degaussing device manufacturer directions, and wipe media IAW DOD Instruction 5000.64 and USTC Instruction 33-16. Activities may include tracking degaussing/wiping activities in a log; and transferring to Inventory Control Team for disposition. The contractor shall provide the degaussing function for JECC users and provide assistance to non-collocated JECC organizations when requested and as available.

1.3.3 Task 3: Cyber and Physical Security Support Services

This task consists of the functional activities relating to the administration and management of Cyber and Physical Security Systems. The contractor shall provide on-site services including management of subordinate cyber security and information assurance programs. The contractor shall be responsible for ensuring services are delivered effectively and efficiently, to include fulfilling user requests, resolving service failures, fixing problems, as well as carrying out routine operational tasks. The contractor shall designate a principal point of contact for cyber security and information assurance issues. The contractor shall prepare documents such as briefings, point papers, and meeting minutes related to status of the performance of this task. Covered Defense Information identified for all of Task 3. The contractor shall maintain Cyber and Physical Security Support Services continuity folders.

1.3.3.1 Task 3 Subtask 1: Cyber Security Incident Handling and Reporting Serves as the service owner/manager for incident handling and reporting requirements for Cyber Security related events and incidents.

Within 4 hours of notification of an incident, complete Incident Management Checklist (Initial) incident reporting document and submit initial documents to USTC Cyber Operations Center and JECC/J6.

Within 8 business hours of submission of the initial report and documents, complete Incident Management Checklist (final) incident reporting document and submit final documents to USTC Cyber Operations Center and JECC/J6.

1.3.3.2 Task 3 Subtask 2: Cyber Security

Serves as the service owner/manager for Cyber Security services to maintain and coordinate system compliance with the DOD, USTRANSCOM, Air Force, and JECC policies and instructions.

Per service provider(s) Cyber Security programs, submit Cyber Security related documents and reports using tools/products provided by the servicing agency.

Coordinate with service providers on security and information assurance topics; respond to and assist in development of certification and accreditation packages; and develop, prepare, and make recommendations on policy requirements to include evaluating new requirements to ensure continual certification and accreditation compliance.

Perform Local Registration Authorities (LRA) Information System Security Officer (ISSO) duties. On a monthly basis, perform required LRA ISSO audit functions and report issues to, as required by the SIPRNet LRA program, to the designated JECC J6 point of contact.

Update the Traveler’s Guide when changes occur in C5 JECC J6 associated processes, procedures, or technologies within three (3) business days for JECC Portal-based version and provide change pages to JECC J3 for hard-copy version (usually published semi-annually).Perform duties as the JECC Information Systems Security Officer.

1.3.3.3 Task 3 Subtask 3: User Account/Permission Management

Serves as the service owner/manager for the User Account and Permissions Management program to ensure all user account and permission requests on service provider environments are processed (includes, but not limited to, network domains, web portals, SharePoint, network applications, and network devices.)

Creates, modifies, tracks, and deletes accounts/permissions in accordance with the service providers’ security policies within seventy-two (72) hours of the original request.

Submit documents and reports using tools/products provided by the servicing agency. Notify via email user(s) with accounts expiring in the next thirty (30) calendar days.

Notify via email user(s) with mandatory annual security awareness, training, and education certificates expiring in the next thirty (30) calendar days.

Develop and update "How-To" guides for end-users to properly request and complete the process of acquiring, changing, and deleting end-user accounts.

Update the Traveler’s Guide when changes occur in C5 JECC J6 associated processes, procedures, or technologies within three (3) business days for JECC Portal-based version and provide change pages to JECC J3 for hard-copy version (usually published semi-annually).

1.3.3.4 Task 3 Subtask 4: SIPRNet Hardware Token Support

Serves as the service owner/manager for the SIPRNet Token Management program to ensure all authorized users have valid and active SIPRNet Tokens as required. Submit documents and reports using tools/products provided by the servicing agencies.

Perform SIPRNet Public Key Infrastructure (PKI) Local Registration Authority (LRA) duties. Public Key Infrastructure (PKI) Tokens are created, modified, tracked, and deleted in accordance with the service providers’ security policies within seventy-two (72) hours of the original request. Reset, update, and/or revoke PKI tokens to users within one (1) business day of request.

1.3.3.5 Task 3 Subtask 5: Security Exemptions / Waiver Management Conducts a security exemption/waiver program to ensure all requests are submitted, tracked, and removed as appropriate. Submit Security Exemptions and Security Waiver requests to service providers using service provider format(s) within three (3) business days of initial request.

Remove Security Exemptions and Security Waiver requests to service providers using service provider format(s) within three (3) business days of initial request.

Contractor shall track status of all requests and approvals and provide a monthly listing of the status.

1.3.3.6 Task 3 Subtask 6: Integrated Electronic Security Systems (IESS) Sustainment Assume maintenance responsibility for all IESS equipment and software. Perform Preventive (scheduled) Maintenance. Perform Corrective (Remedial) Maintenance to ensure restoral within eight (8) hours. Perform Emergency Maintenance to ensure a restoral of IESS services within four (4) hours. Track and schedule lifecycle replacement or upgrades of devices. Perform minor configuration changes as required.

Deliver and update IESS Sustainment Plan Ten (10) business days after contract start. Submit listing of components required to stock related IESS components based on current architecture. Develop and maintain a monthly listing of components required to keep an on hand supply of stock related IESS components to ensure an operational availability based on current architecture. On the 15th business day of each month, deliver a listing of components used for the previous month and current stock level of all related IESS components. May be included in MSR.

Report operational status changes in the Daily Operational Status Report.

1.3.3.7 Task 3 Subtask 7: Facilities Video Security Systems

Serves as service owner/manager responsible for installation, periodic break/fix maintenance, troubleshooting, preventative maintenance and removal of security cameras, recording devices and storage systems.

Provides installation and maintenance of facilities video security systems including video recorders, cabling, and infrastructure support structure.

Report maintenance outages in the Daily Operational Status Report.

1.3.3.8 Task 3 Subtask 8: Communications Security (COMSEC) and Electronic Key Management Systems (EKMS) Support Services Serves as the service owner/manager to provide technical and operational support for all Communications Security (COMSEC) and Electronic Key Management Systems (EKMS). Perform assigned EKMS / COMSEC duties. This Subtask requires a minimum of four persons designated and trained to meet Two Person Integrity (TPI) requirements.

Complete all service provider tasks and documents necessary to assume COMSEC and EKMS support services responsibilities. Maintain EKMS / COMSEC proficiencies through required government training courses.

Ensure the equipment and procedures support for JECC COMSEC deployment requirements.

Ensure the JECC COMSEC program is compliant with the service provider(s) policies and procedures.

Complete and submit required EKMS and COMSEC documents.

1.3.3.9 Task 3 Subtask 9: COMSEC Deployment Support

Supports the deploying forces with COMSEC as required. Ensure the JECC has coordinated COMSEC equipment and material to support JECC requirements.

1.3.4 Task 4: Audio-Visual Support Services

This task consists of managing functional activities relating to the administration and management of Audio-Visual Systems. The contractor shall provide on-site and local area services. The contractor shall be responsible for ensuring services are delivered effectively and efficiently, to include fulfilling user requests, resolving service failures, fixing problems, as well as carrying out routine operational tasks. The contractor shall designate a principal point of contact for audio-visual issues. The contractor shall prepare documents such as briefings, point papers, and meeting minutes related to status of the performance of this task. The contractor shall maintain Audio-Visual continuity folders.

1.3.4.1 Task 4 Subtask 1: Audio-Visual Support

Manage, setup, schedule, breakdown, and reset physical meeting spaces to include conference rooms and other designated meeting spaces within the immediate local traveling area.

Actively monitors all flag level meetings without interruption of monitoring.

Publish conference room daily reservation schedule at doorway of each conference room no later than 0800 during normal business days.

Send acknowledgements to requestors of Audio-Visual support services within 1 day of initial requests and 1 day prior to conference room use.

Report maintenance outages in the Daily Operational Status Report.

1.3.4.2 Task 4 Subtask 2: VTC Support Services

Serves as the local JECC service owner/manager responsible for operations and maintenance of three distinct VTC environments.

Setup, assist in the scheduling, and breakdown Video-Teleconferences Send acknowledgements to requestors of support services within 1 day of initial requests and 1 day prior to conference.

Report maintenance outages in the Daily Operational Status Report. Actively monitors all flag level meetings without interruption of monitoring.

1.3.4.3 Task 4 Subtask 3: AV / VTC Maintenance

Perform periodic maintenance, troubleshooting, preventative maintenance of all AV / VTC equipment.

Serve as local point of contact when coordinating AV/VTC updates and modifications whether JECC initiated or USTRANSCOM J6 initiated.

Report maintenance outages in the Daily Operational Status Report.

1.3.4.4 Task 4 Subtask 4: Public Address and Portable Sound Systems Perform installation, periodic maintenance, troubleshooting, preventative maintenance, and removal of Public Address and portable lecterns equipment.

Delivers equipment and provides training to end-users of portable lectern(s) and sound system(s).

Provides installation and maintenance of facilities fixed sound systems (Giant Voice) including speakers for services not covered by base level contract support.

1.3.5 Task 5: Voice Telecommunications Support Services

This task consists of the functional activities relating to the administration and management of Voice Telecommunications Systems. The contractor shall provide primarily on-site services. The contractor shall be responsible for ensuring services are delivered effectively and efficiently, to include fulfilling user requests, resolving service failures, fixing problems, as well as carrying out routine operational tasks. The contractor shall designate a principal point of contact for voice telecommunications issues. The contractor shall prepare documents such as briefings, point papers, and meeting minutes related to status of the performance of this task. The contractor shall maintain Voice Telecommunications continuity folders.

1.3.5.1 Task 5 Subtask 1: Public Switched Telephone Network Building Voice Telecommunications (Legacy) Serves as the service owner/manager responsible for the legacy building telephone system (assigning numbers, submitting TSRs, punching down lines not covered by base level support).

Perform Telephone Control Officer duties as required by telephone service provider directives, policies, and/or procedures. Coordinates scheduled outages with service providers and customers. Submit telephone service requests (TSR) and trouble tickets within two (2) business days of an initial request for support. Submit documents and forms required by the service provider in performance of Requesting Official (Telephone Control Officer) duties within two (2) business days of initial request for support.

Report maintenance outages in the Daily Operational Status Report.

1.3.5.2 Task 5 Subtask 2: Wireless Voice/Data Telecommunications Serves as the service owner/manager responsible for wireless voice and data devices (acquiring, provisioning, managing, maintaining, Tier 1 and 2 level servicing, assigning, receiving, and wiping devices). Perform Requesting Official duties as required by service provider directives, policies, and/or procedures. Submit telephone service requests (TSR) or other related document(s) within two (2) business days of an initial request for support to external service providers.

Perform Tier 1 and 2 wireless voice/data support. Issues wireless devices to authorized garrison and deploying personnel.

Ensures bench stock has a minimum number of devices available to ensure contractor can issue wireless devices as required by deploying personnel.

Report low and/or depleted levels of deployment equipment in the Daily Operational Status Report.

Report maintenance outages in the Daily Operational Status Report

1.3.5.3 Task 5 Subtask 3: Personal Satellite Communications

Serves as the service owner/manager responsible for personal satellite communications system (acquiring, provisioning, Tier 1 level servicing, assigning, receiving, and wiping devices as appropriate). Perform duties as required by service provider directives, policies, and/or procedures. Submit service requests or other related document(s) as Requesting Official (Telephone Control Officer) within two (2) business days of an initial request for support to external service providers.

Perform Tier 1 and 2 support.

Issue personal satellite communications devices to deploying personnel.

Ensures bench stock has a minimum number of devices available to ensure contractor can issue personal satellite communications as required by deploying personnel.

Report low and/or depleted levels of deployment equipment in the Daily Operational Status Report.

Report maintenance outages in the Daily Operational Status Report.

1.3.5.4 Task 5 Subtask 3: Secure and Unclassified Voice over Internet Protocol (VoIP) Telecommunications Serves as the service owner/manager responsible for all Voice over Internet Protocol (VoIP) telephone systems (acquiring, provisioning, user level servicing, assigning, receiving, and installing devices). Perform Telephone Control Officer duties as required by telephone service provider directives, policies, and/or procedures. Submit telephone service requests (TSR) or other related document(s) within four (4) business days of an initial request for support to external service providers. Coordinates scheduled outages with service providers and customers.

Issues VoIP devices within two (2) business days of initial trouble ticket.

Ensure bench stock available to support equipment swap-out due to faulty devices, new installations, and operational requirements in garrison and deployed.

Report low and/or depleted levels of VoIP equipment in the Daily Operational Status Report.

Report maintenance outages in the Daily Operational Status Report.

1.3.6 Task 6: Data Telecommunications Support Services

This task consists of the functional activities relating to the administration and management of Data Telecommunications Systems. The contractor shall provide on-site services. The contractor shall be responsible for ensuring services are delivered effectively and efficiently, to include fulfilling user requests, resolving service failures, fixing problems, as well as carrying out routine operational tasks. The contractor shall designate a principal point of contact for data telecommunications issues. The contractor shall prepare documents such as briefings, point papers, and meeting minutes related to status of the performance of this task. The contractor shall maintain Data Telecommunications continuity folders. Operationally Critical Support is designated in Task 6, subtask 4.

1.3.6.1 Task 6 Subtask 1: Network Devices

Works closely with network service providers to install, configure, and manage network-enabled devices and associated software. Installs, configures, updates, manages, and removes network devices as coordinated with service providers. Coordinates scheduled outages with service providers and customers.

Performs COMSEC/EKMS program duties for Network Infrastructure Support Services in coordination with COMSEC custodian. Complete all service provider tasks and documents necessary to request and perform COMSEC and EKMS support services responsibilities.

Troubleshoots network devices in coordination with service providers. Provides initial troubleshooting to determine what network device may be faltering.

Complete scheduled service outage requests forms and submit to the service provider(s) a minimum of three (3) business days prior when possible.

Report maintenance outages in the Daily Operational Status Report.

1.3.6.2 Task 6 Subtask 2: Cabling Infrastructure

Serves as the service owner/manager responsible for configuration and change management to include installation, modification and removal of cabling infrastructure regardless of media type. Installs, repairs, and removes data, broadcast, and voice cables regardless of media types (twisted pair, fiber, coaxial). Ensures all cables meet standard security and color coding requirements.