Draft_PWS-RFI.pdf

AE-ITT PROGRAM

PERFORMANCE WORK

STATEMENT

VS. 4

27 October 2017

PERFORMANCE WORK STATEMENT (PWS)

Army Europe Information Technology Training Program USAREUR G6

Part 1 General

Information

1. Introduction: This is a non-personnel services contract to provide U.S. Army Europe -Information

Technology Training (AE-ITT) Program with instructor led Cybersecurity (CS) and Information

Technology Training and certification services.

2. Background: In 1999, the US Army Europe (USAREUR) established the AE-ITT Training program to provide cost-effective, theater-wide Cyber-Security (CS) Training and Information Technology (IT))

Training Program under the Title 10 responsibilities for USAREUR in their Army Service Component

Command (ASCC) role to be the executive agency for US Code Title 10 basic services relating to theater communication infrastructure (Network, Telephone, Satellite) and the safeguarding of these services.

Additionally in 2016, the USAREUR G6 was designated as the Designated Approving Authority (DAA) to assume responsibility for operating systems at an acceptable level of risk for the European Theater. The AE-

ITT Program facilitates the ability of the DAA to assume acceptable risk for operating systems by improving the technical capability of the workforce. The AE-ITT was primarily designed to be used by

USAREUR and all Department of Defense (DoD) commands/units that are geographically dispersed across the USAREUR Area of Responsibility (AOR). This included but was not limited to the following significant

Commands: U.S. European Command (USEUCOM), U.S. Africa Command (USAFRICOM), Special

Operations Command – Europe (SOCEUR), Network Command (NETCOM), Installation Management

Command (IMCOM), United States Air Force-Europe (USAFE), US Navy Europe (NAVEUR), Marine

Forces Europe (MARFOREUR), North Atlantic Treaty Organizations (NATO) and other individual

Commands, activities and tenant organizations that have a presence in the USAREUR AOR. With regards to

AFRICOM, this includes those activities that are located in the AFRICOM AOR. The AE-ITT uses contractor personnel with appropriate subject matter expertise and certification to provide hands on training.

The training solutions enable the U.S. military to develop and maintain a skilled, competent and certified

Cyber Security professional workforce. A key component of the program is to provide training in the

USAREUR AOR to reduce travel costs. The AE-ITT Program is a force enabler for personnel to learn new skills, improve existing capabilities, enhance personal and professional development and provide access to the necessary courses and certification tests which allow personnel to meet Department of the Army (DA) and Department of Defense (DoD) mandated training and certification requirements. The AE-ITT program consists of two training areas:

A. Information Technology Training Program (ITTP): Includes commercially available, DoD-specific and Career Program (CP) 34 career developmental training courses.

B. Cybersecurity Training Program (CSTP): Includes commercially available courses and industry standard certifications that map to the Army’s Cybersecurity requirements under Cyberspace Workforce Management DoDD 8140.01 and applicable Army

Regulations.

2.1 Responsibilities: The Contractor shall perform all work and assume responsibility for planning, programming, administering, managing, and executing all functions necessary to provide the services specified in this PWS. The Contractor shall conduct work in accordance with this PWS and all applicable

United States (U.S.), German, and local laws, regulations, standards, provisions, and directives to include applicable publications. The Contractor is responsible for providing an enterprise CyberSecurity and

Information Technology (CS/IT) training capability for the CS workforce within the Theater. The Contractor must factor in the following requirements:

● All instructors must be certified in the course matter being taught.

● Training services must offer a wide-variety of CS/IT Workforce training requirement to facilitate competency and compliance of the workforce.

● Training offered over the life of the contract must evolve along with industry to incorporate technology and certification changes quickly ensure to ensure training relevancy.

● Training services must be dynamic to accommodate the Government transformational footprint in

Theater to include changes in mission, assigned or co-located forces (military and civilian) and extended mission partnerships.

● Training services must be targeted to the military community, soldiers experience and knowledge are not at the industry standard level, new methodologies may be required to ensure commercial certification is achieved.

2.1.1 Administrative Responsibility: The Contractor shall perform all related administrative actions required to provide services or perform work such as material requisitioning, quality control (QC), facility management, financial control, meetings, and correspondence. The Contractor shall also maintain accurate and complete records, files, and libraries of documents to include all U.S. German, and local regulations, standards, provisions, codes, laws, technical manuals, and manufacturers’ instructions and recommendations that are necessary and related to the functions being performed. The Contractor shall compile historical data, prepare required reports, and submit information as specified by the Deliverable

List presented in this PWS.

Objectives:

2.2 Functional Areas: The services in the Performance Work Statement fall under the following functional areas:

2.2.1 Training Services,

2.2.2 Testing Services,

2.2.3 Certification Voucher Services,

2.2.4 Learning Management (LMS) Operations and Maintenance Support,

2.2.5 Custom Program of Instruction (POI)/Courseware Development;

2.2.6 Program Management/Administration and Course Voucher Services.

2.3 Period of Performance: The period of performance shall be for one (1) Base Year of 12 months and four (4) 12-month option years. The Period of Performance reads as follows:

BaseYear

Option Year I

Option Year II

Option Year III

Option Year IV

2.4 Management and Administration:

2.4.1 Phase In /Phase out Period: To minimize any decreases in productivity and to prevent possible negative impacts on additional services, The Contractor shall have personnel on board, during the 30 day phase in/ phase out periods. During the phase in period, The Contractor shall become familiar with performance requirements in order to commence full performance of services 30 days after the date of award.

2.4.2 Contractor Management: The Contractor shall perform continual management of the functional areas contained in this PWS and shall provide a certified Program Manager physically present on-site during normal duty hours. The Program Manager shall conduct overall management coordination and shall be the central point of contact (POC) with the Government for performance of all work under the PWS. At the Post Award conference, The Contractor shall submit to the COR, in writing, the name, title, office, home and mobile telephone number of the Program Manager. A Contractor employee shall be designated to act for the Program

Manager when work is being performed outside of duty hours, or during the Program Manager’s absence.

Both the Program Manager and the Contractor employee filling in for the Program Manager, shall have full authority to act for the Contractor on all Contract matters relating to daily operation of this Contract.

2.4.3 Contractor Responsiveness: The Program Manager or designated alternate shall be available for telephone communication or site attendance, with the COR, as required by the COR, 07:00-1800Hrs, M-F. A personal answering service is permitted at other than normal Contract workdays and work hours for receipt of

COR emergency response work requirements, provided that the Program Manager or designee responds to all calls within a time not to exceed two hours after notification of the call by the answering machine and/or service. The

Program Manager and any individuals designated to act in that capacity shall have full authority to contractually bind The Contractor for prompt action on matters pertaining to execution of the PWS.

2.4.4 Meetings, Conferences, and Briefings: The Contractor shall attend, participate in, and furnish input to scheduled and unscheduled meetings, conferences, and briefings that relate to the functions and services herein as required by the Government to provide effective communication and impart necessary information.

The Program Manager or designated representative shall attend meetings as requested by the Government.

Meeting attendees shall at times include Contractor managerial, supervisory, and other personnel knowledgeable of the subject matter. Meetings may start or end outside of regular duty hours.

2.4.5 Hours of Operation: The Contractor is responsible for conducting business, between the hours of

07:30 to 17:30 Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. For other than firm fixed price contracts, The Contractor will not be reimbursed when the Government facility is closed for the above reasons. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, The Contractor shall keep in mind that the stability and continuity of the workforce are essential.

2.4.6 Recognized Holidays: The Contractor is not required to perform services on holidays. New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day

Memorial Day Thanksgiving Day

Independence Day Christmas Day

2.4.7 Training Holidays: USAREUR has historically granted military personnel Training Holidays as compensation for time that they spent in field training. These are typically combined with regular holiday leave schedules (for example, Christmas half days or day on day off schedules). Training Holidays may affect access to military operated facilities. If scheduled work or access to facilities is required, coordination with occupants will be necessary or the work in affected facilities shall be rescheduled after the training holiday. However, announced training holidays or exodus of military personnel may provide The Contractor with an opportunity for unrestricted access to facilities and areas. The Contractor shall take full advantage of such opportunities by planning maintenance or actions that are better accomplished when such areas are vacant.

2.4.8 Quality Control (QC): The Contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract. The Quality Control Plan will be delivered to the Government with the

Contractor proposal. After acceptance of the quality control plan the Contractor shall receive the contracting officer’s acceptance in writing of any proposed change to his QCP. Further information contained in paragraph 5.5.5.

2.4.9 Quality Assurance: The government shall evaluate The Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the

Government must do to ensure that The Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

2.4.10 Place of Performance: The work to be performed under this contract will primarily be performed at the following locations: Germany: Wackernheim, Wiesbaden, Kaiserslautern, Stuttgart, Vilseck, and

Vicenza, Italy. These locations correspond to the location of the fixed classrooms and the locations where the Government currently has office space allocated. AE-ITT conducts training at a number of “as directed” locations that are determined based on customer requirements. See Technical Exhibit 7.4, for a comprehensive list of all course classroom locations, both existing classrooms and currently used Mobile

Training Team (MTT) locations. This list of classrooms is dynamic and locations will be deleted and added by the Government to accommodate the AE-ITT training mission as required.

2.4.11 Type of Contract: The Government will award a Hybrid Firm Fixed Price/T&M contract non TESA.

2.4.12 Security Program: Contractor personnel performing work are not required to have a security clearance under this contract; However, all Contractor personnel are required to have a completed background investigation with favorable results in accordance with DoDM 1000.13, DoD 8570.01M, DoD

5200.2-R and AR 25-2. The contractor shall obtain access to both the Joint Personnel Adjudication System

(JPAS) and the Local National Screening Program (LSNP). The background investigations will be requested by the contractor before starting work on the contract, will be validated through the USAREUR G6/MCC

Security Office immediately after contract award, and must be maintained throughout the life of the contract.

The type of background investigation is dependent upon the assigned functions and/or tasks as identified in the table below:

Function/Task Background Investigation

Program Manager National Agency Check with Inquiries (NACi) or equivalent Local National Screening Program (LNSP).

Security Management NACi or equivalent (LNSP)

System Administration National Agency Check with Local Agency Check and Credit (NACLC)

LMS O&M Web/Database Administration/Developmen t

NACLC

Instructor Police Good Conduct Certificate (PGCC)

Site Coordinator NACi or equivalent (LNSP)

Training Program Helpdesk NACi or equivalent (LNSP)

Testing Services NACi or equivalent (LNSP)

POI/Courseware Developer NACi or equivalent (LNSP)

Mobile Training NACi or equivalent (LNSP)

All NACi/LNSP positions located in Germany can only be filled with a local national that has lived in Germany for at least 12 consecutive months.

1.6.12.1 Security Information Handling. The Contractor shall ensure that For Official Use Only (FOUO) data is controlled, protected, and safeguarded in accordance with AR 380-5 and current Army and DOD policy. FOUO information shall be accessed and stored in government spaces only. The contractor shall agree that any data furnished by the government to the contractor shall be used only for performance under this PWS, and all copies of such data shall be returned to the government upon completion of this effort.

1.6.12.2 Physical Security: The Contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use. When not physically present or at the close of each work period, government facilities, equipment, and materials shall be secured and Standard Form (SF 701) must be completed.

1.6.12.3 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to The Contractor by the

Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer Representative. In the event keys, other than master keys, are lost or duplicated, The Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due The Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due The Contractor. The

Contractor shall prohibit the use of Government issued keys/key cards by any persons other than The

Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer Representative. The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in The Contractor’s Quality Control Plan.

1.6.13 Special Qualifications: Contractor personnel performing work under this contract must have the required background investigation IAW the assigned duties and responsibilities as listed para 1.6.12. In addition all Contractors must be eligible to procure a Common Access Card (CAC) or Alternate Smart

Card Logon Token (ASCL) to perform duties and access the Government’s unclassified network. The table below outlines the IAT, IT privilege level and basic certifications required.

Function/Task IAT

Certificatio n (DoDD

8140.01)

AR 25-2 Table 4.1

Other certifications and requirements

Program Manager IAM III IT-III Baseline Certification:

CISM or CISSP or GSLC

Security Management None None System Administration IAT level II IT-II Baseline Certification:

CompTIA Security+, CCNA Security, SSCP or GSEC commercial certification (or higher, such as CISSP, etc.).

Computing Environment Certification: Microsoft or CISCO certification

LMS O&M Web/Database

Administration/Developmen t

IAT level II IT-II Baseline Certification:

CompTIA Security+, CCNA Security, SSCP or GSEC commercial certification (or higher, such as CISSP, etc.).

Computing Environment Certification: Must have one or more of the following, JavaScript, C++, Windows

Communication Foundation (WCF), Web Services, XML, XSL, XPath, SOAP, CSS, HTML, ASP.NET, Microsoft

SQL Server, SQL / T SQL, Microsoft Team Foundation

Server (TFS), Microsoft IIS, ++Microsoft Visual Source

Safe (VSS), or the .NET Framework.

Instructor None None Required certification to teach assigned course. The certification must be up to date with current exam version.

Instructors will have 90 days to certify in a new courseware version from the released date. i.e.: CompTIA, ISACA, PMI, ISC2, CISCO, Microsoft, etc. the instructor will have

90 days from the release date to become certified.

Site Coordinator None None Training Program Helpdesk None None Testing Services None None Pearson VUE certification

POI/Courseware Developer None None Mobile Training None None

1.6.13.1 Installation Access Control System (IACS) - U.S. Army Installations participate in a standardized entry protocol known as the IACS. This program requires a standardized background check, an identification badge and entry procedures for all Contractors requiring routine access to the site location. Utilization of this system streamlines access for authorized Contractor employees by eliminating the need to obtain day passes.

See clause CCE 225-4001 Installation Clearance Requirements (March 2005). The Contractor shall provide all necessary and accurate information to obtain and maintain enrollment in the IACS. The Contractor shall ensure personnel enrolled in IACS remain enrolled during the entire period of performance during which that

Contractor/employee is needed.

1.6.13.2 Anti-Terrorism (AT) Level 1 Training - All contractor employees, including subcontractor employees, requiring access to Army installations, facilities, or controlled access areas shall have AT Level I awareness training completed within 30 calendar day after contract start date, or within 30 calendar days of new employees' commencing performance. All contractor and subcontractor employees will complete this training annually. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR or contracting officer within 30 calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at http://jko.jten.mil/courses/atl1/launch.html

Pursuant to Department of Defense Instruction Number 2000.16, "DoD Antiterrorism (AT) Standards," dated

October 2, 2006, each contractor employee requiring access to a Federally-controlled installation, facility and/or Federally-controlled information system(s) shall complete Level I AT Awareness Training on an annual basis and receive a certificate of completion. The training is accessible from any computer and is available at https://atlevel1.dtic.mil/at/. The contractor is responsible for ensuring that all applicable employees have completed antiterrorism awareness training and shall certify that their workforce has completed the training through the submission of completion certificate(s) to the Contracting Officer and the

Contracting Officer's Representative (if appointed) within five working days after contract award or prior to access to a Federally-controlled installation or information system.

In the event that the automated system at http://jko.jten.mil/courses/atl1/launch.htmlis is not available (e.g., server problems), Level I AT Awareness Training can be provided by a qualified instructor. However, if the training is not complete online, the Level I AT Awareness Instructor qualification must be coordinated with the Installation Antiterrorism Officer (or Installation Security equivalent) and the resultant name(s) of approved instructors shall be provided the contracting officer or designee along with all associated cost or schedule impacts to the contract. Antiterrorism performance (Level I AT Awareness Training attendance and compliance) may be documented as a performance metric under the resultant contract, and be part of past performance information in support of future source selections

1.6.13.3 AT Awareness Training for Overseas Travel - Contractors required to travel overseas while performing requirements of this contract will comply with the DoD Foreign Clearance Guide at https://www.fcg.pentagon.mil/fcg.cfm and the Department of State Travel Warnings at travel.state.gov.

1.6.13.4 iWatch Training - The contractor and all associated subcontractors working within an

Army-controlled installation, facility, or area, will brief all employees on the local iWatch program (training standards provided by the requiring activity Antiterrorism Officer). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training will be completed within 30 calendar days of contract award and within 30 calendar days of new employees' commencing performance, with the results reported to the COR no later than 60 days after contract award.

1.6.13.5 Army Training Certification Tracking System (ATCTS) - All contractor employees with access to government information system must be registered in the Army Training Certification Tracking System

(ATCTS) at commencement of services and must successfully complete the Cyber Awareness Challenge

Training prior to access to the information system and then annually thereafter. Additionally personnel must annually sign an acceptable use policy (AUP). The training is available online at https://cs.signal.army.mil/

1.6.13.6 Operational Security (OPSEC) – The Contractor shall comply with the USAREUR G6 OPSEC plan and standard operating procedures (SOP).

1.6.13.6.1 The Contractor shall comply with all applicable Department of Defense (DOD) security regulations and procedures during the performance of this contract. The Contractor shall not disclose and must safeguard sensitive information, computer systems and data, Privacy Act data, and Government personnel work products that are obtained or generated in the performance of this contract.

1.6.13.6.2 Neither the Contractor nor any of its contract service providers shall disclose or cause to disseminate any information concerning operations of military activities. Such action(s) could result in violation of the contract and possible legal actions.

http://jko.jten.mil/courses/atl1/launch.html http://jko.jten.mil/courses/atl1/launch.htmlis http://www.fcg.pentagon.mil/fcg.cfm https://cs.signal.army.mil/

1.6.13.6.3 Per AR 530-1, Operations Security, new contractor employees must complete Level I

OPSEC training within 30 calendar days of reporting for duty. All contractor employees must complete annual OPSEC awareness training. Training will be provided by the requiring activity. Training available through JKL LMS

1.6.14 Cyber Security (CS)/Information Technology (IT) Training - Contractors conducting IA functions on national security systems must meet Committee on National Security Systems training requirements.

1.6.14.1 All contractor employees and associated subcontractor employees must complete the DoD Cyber

Awareness Challenge Training before issuance of network access and annually thereafter. All contractor employees working CS/IT functions must comply with DoD and Army training requirements in DoDD 8140-

.01 and AR 25-2 at start of employment. The training is available online at https://cs.signal.army.mil/DoDIAA/default.asp

1.6.15 All DoD Contractor employees whose duties are in the Information Technology and

Telecommunications (ITT) and Cybersecurity (CS) areas will be assigned a position sensitivity of IT-I or IT-

II. Personnel designated as an IT-1 must obtain and maintain a Single Scope Background Investigation

(SSBI). Personnel designated as an IT-II must obtain and maintain a National Agency Check with Local

Agency and Credit Check (NACLC). Each FSO will forward the requests for background investigations to the Office of Personnel Management (OPM) within 3 working days of receipt of all required paperwork. If contract becomes classified the Garrison Security Office must be notified. All Contractor personnel requiring elevated network privileges (e.g. administrator, super user, etc.) must comply with training and certification requirements set forth in DoD 8570.01- M, December 19, 2005 Information Assurance Workforce

Improvement Program Incorporating Change 1, May 15, 2008. All personnel requiring network access must sign an acceptable use policy (AUP) and accomplish user training prior to being granted a network account.

1.6.15.1 All contractor employees and associated subcontractor employees' supporting CS/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD

8570.01-M must be completed upon contract award.

1.6.16 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with

Federal Acquisition Regulation Subpart 42.5. The contracting officer, Contracting Officers Representative

(COR), and other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings the contracting officer will apprise the Contractor of how the government views The Contractor's performance and the Contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.6.17 Contracting Officer Representative (COR): The (COR) will be identified by separate letter. The

COR monitors all technical aspects of the contract and assists in contract administration The COR is authorized to perform the following functions: assure that The Contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance: maintain written and oral communications with The Contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to The Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.18 Key Personnel: The follow personnel are considered key personnel by the government: Program

Manager, Security Manager , LMS O&M Web/Database Administrator/Developer and System

Administrator. The Contractor shall provide a Program Manager who shall be responsible for the https://cs.signal.army.mil/DoDIAA/default.asp performance of the work. The name of this person and an alternate who shall act for The Contractor when the manager is absent shall be designated in writing to the contracting officer. The Program Manager or alternate shall have full authority to act for The Contractor on all contract matters relating to daily operation of this contract. Qualifications for all key personnel are listed below:

1.6.18.1 Program Manager and Alternate.

1.6.18.1.1 The Program Manager and Alternate shall be IAM-III certified and have three years’ experience overseeing the delivery of services for a complex program with performance/oversight at multiple sites, geographically dispersed.

1.6.18.2 System Administration

1.6.18.2.1 The System Administrator must have one year previous experience in a customer service related environment. The system administrator must meet the qualification listed in para 1.6.15 and have one year previous experience in a customer service related environment

1.6.18.3 LMS O&M Web/Database Administrator/Developer

1.6.18.3.1 The LMS O&M Web/Database Administrator/Developer must meet the qualification listed in para

1.6.15 and have three years’ experience with .NET Web programming and database development. In addition, the contractor have a two years’ experience with the following operating systems/protocols:

Microsoft Server 2012/2016, Windows 2010 or latest version of the operation and administration, and

Network Administration.

1.6.19 Identification of Contractor Employees: All contract personnel attending meetings, answering

Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Contractor personnel shall wear a contractor ID badge (Name/Picture/Army Europe-

Information Technology Training Contractor) when performing work under this contract to include attending government meetings and conferences. Signature block must be standardize and identifying themselves as

AE-ITT Contractor.

1.6.20 Contractor Travel: Contractor will be required to travel within USAREUR AOR footprint to attend workshops, attend and represent the AE-ITT program in conference, provide instruction and briefings; and assess new locations where training may be conducted. The Contractor will be required to travel to off-site

Mobile Training Team (MTT) training locations. Contractor will be authorized travel expenses consistent with the substantive provisions of the Joint Travel Regulation (JTR) and the limitation of funds specified in this contract. All travel requires advance Government approval/authorization and notification to the COR.

1.6.21 Other Direct Costs: The Government will reimburse the Contractor for any training costs associated with conducting Government approved MTT training at an offsite location (other than

Government provided). Reimbursement includes but not limited for the training facility, material/equipment shipping and any travel costs associated with travel outside of the local commuting area. The Government will also reimburse the contractor for any Government approved Course Vouchers as outlined in para 5.4.7.

1.6.22 Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights. The government has the rights to inspect and approve /disapprove any courseware or materials offered through this program.

1.6.23 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational

Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the Contracting

Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI.

The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the

Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may effect other remedies as he or she deems necessary, including prohibiting The Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.24 Safety: N/A

1.6.24.1 Safety Plan and Program: N/A

1.6.25 Environmental Compliance: N/A

1.6.25.1 Environmental Compliance Plan and Program: N/A

1.6.26 Authorized to Accompany the Force - Contractors will comply with DFARS Clause 252.225-7040.

1.6.27 Performance in a Foreign Country - Contractors will comply with DFARS Clause 252.225-

7043. U.S. entity contractors will affiliate with the Department of State Overseas Security Advisory

Council (OSAC) at https://www.osac.gov/Pages/Home.aspx. All U.S. and nonlocal national employees will comply with the travel requirements in the DoD Foreign Clearance Guide.

http://www.osac.gov/Pages/Home.aspx

PART 2

DEFINITIONS &

ACRONYMS

3. Definitions And Acronyms:

3.1 Definitions:

Contractor - A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

Contracting Officer - A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

Contracting Officer's Representative (COR) - An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to The Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

Defective Service - A service output that does not meet the standard of performance associated with the

Performance Work Statement.

Deliverable - Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

Key Personnel - Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

Physical Security - Actions that prevent the loss or damage of Government property.

Quality Assurance - The government procedures to verify that services being performed by The Contractor are performed according to acceptable standards.

Quality Assurance Surveillance Plan (QASP) - An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

Quality Control - All necessary measures taken by The Contractor to assure that the quality of an end product or service shall meet contract requirements.

Subcontractor - One that enters into a contract with a prime contractor.

Work Day - The number of hours per day The Contractor provides services in accordance with the contract.

Work Week - Monday through Friday, unless specified otherwise.

3.2 Acronyms:

nd TSSB 2nd Theater Strategic Signal Brigade

AARs After Action Reviews

ACOR Alternate Contracting Officer's Representative

AE-ITT Army Europe -Information Technology Training

AFARS Army Federal Acquisition Regulation Supplement

AIS Automation Information Systems

AMC Army Material Command

AO Authorizing Official

AOR Area of Responsibility

AR Army Regulations

AR Army Regulation

ATCTS Army Training and Certification Tracking System

BBP Best Business Practice

CAC Common Access Card

CAP Certified Authorization Professional

CASP CompTIA Advanced Security Practitioner

CCE Contracting Center of Excellence

CCNA Cisco Certified Network Associate

CE Computing Environment

CEH Certified Ethical Hacker

CEST Central European Summer Time

CFR Code of Federal Regulations

CIO Chief Information Officer

CISA Certified Information Systems Auditor

CISM Certified Information Security Manager

CISSP Certified Information Systems Security Professional

CND-SP Computer Network Defense – Service Provider

CONUS Continental United States (excludes Alaska and Hawaii)

COR Contracting Officer Representative

COTR Contracting Officer's Technical Representative

COTS Commercial-Off-the-Shelf

CP 34 Career Program 34

CS Cybersecurity

CSD Courseware Development Timeline

CSIH Computer Security Incident Handler

CSSLP Certified Secure Software Lifecycle Professional

CSTP Cybersecurity Training Program

DA Department of the Army

DAA The term has been replaced by "AO" Authorizing official

DBA Database Administrator

DBMS Database Management System

DD250 Department of Defense Form 250 (Receiving Report)

DD254 Department of Defense Contract Security Requirement List

DFARS Defense Federal Acquisition Regulation Supplement

DIACAP is replaced by "RMF" Risk Management Framework

DISA Defense Information Systems Agency

DLA Defense Logistics Agency

DMDC Defense Manpower Data Center

DoD Department of Defense

DOD Department of Defense

DODD Department of Defense Directive

DODDS Department of Defense Dependent Schools

DoDIN Department of Defense Information Network eMASS Enterprise Mission Assurance Service Site

EUCOM European Command

FAR Federal Acquisition Regulation

FAR Federal Acquisition Regulation

FM Field Manuals

FN Foreign National

G6 Communications Staff Section

GAPM Government Appointed Program Manager

GCFA GIAC Certified Forensic Analyst

GCIA GIAC Certified Forensic Analyst

GCIH GIAC Certified Incident handler

GPO Group Policy Object

GSEC GIAC Security Essentials Certification

GSLC GIAC Cyber Security leadership Certification

HIPAA Health Insurance Portability and Accountability Act of 1996

HQ Headquarter

IA BBP Information Assurance Training Best Business Practices

CSF Cyber Security Fundamentals Training

ISSM Information Systems Security Manager

CSNM Cyber Security Network Manager

ISSM Information system security manager

IASAE Information Assurances System Architect Engineer

IAT Information Assurance Technician

IAW In Accordance With

IAWF Information Assurance Workforce

ID Identification

IMCOM Installation Command

IMO Information Management Officer

INSCOM Intelligence and Security Command

ISACA Information Systems Audit and Control Association

ISC2 International Information systems Security Certification Consortium

ISSM Information Systems Security Managers

ITIL Information Technology Infrastructure Library

ITTP Information Technology Training Program

JPAS Joint Personnel Adjudication System

JTR Joint Travel Regulation

KO Contracting Officer

LMS Learning Management System

MARFOREUR Marines Forces Europe

MCITP Microsoft Certified Information Technology Professional

MIS Management Information System

MOC Microsoft Official Certification

MTT Mobile Training Teams

NA Network Administrator

NACI National Agency Check with Inquiries

NACLC National Agency Check with Local Agency Check and

Credit NATO North Atlantic Treaty Organization

NAVEUR U.S. Navy in Europe

OCI Organizational Conflict of Interests

OCONUS Outside Continental United States (includes Alaska and

Hawaii) ODC Other Direct Costs

PIPO Phase In/Phase Out

PM Program Manager

PMI Program Management Institute

PMP Program Management Professional

POC Point of Contact

POI Program of Instruction

PRS Performance Requirements Summary

PWS Performance Work Statement

QA Quality Assurance

QAP Quality Assurance Program

QASP Quality Assurance Surveillance Plan

QC Quality Control

QCP Quality Control Program

RAID Redundant Array of Independent Disks

RFQ Request for Quote

RMF Risk Management Framework

SA System Administrator

SACEUR Supreme Allied Commander Europe

SIPRNET Sensitive Internet Protocol Router

Network

SMEs Subject Matter Experts

SOCEUR Special Operations Command

SOP Standard Operating Procedures

SPAWAR Space and Naval Warfare Systems Command

SQL Structured Query Language

SQL Structured Query Language

SSBI Single Scope Background Investigation

SSCP Systems Security Certified Practitioner

TCO Telephone Control Officer

TE Technical Exhibit

TESA Technical Expert Status Accreditation

TRADOC U.S. Army Training and Doctrine Command

USAFE U.S. Air Forces in Europe

USAFRICOM U.S. Africa Command

USEUCOM U.S. European Command

UTC Universal Time Coordinated

VCC Visitor Control Custodian

VTC Virtual Training Capability

VUE Virtual University Enterprise

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND

SERVICES

4. Government Furnished Items and Services

Services: The Government will provide internet connectivity, network access, either through the NIPR network or a commercial network, and DSN phone connections to all permanent training locations and administrative spaces.

4.1 Upon background validation, the Government will provide IACS base access sponsorship and Trusted

Associate Sponsorship System (TASS) for issuance of a CAC/ID card to access Government systems, as required.

4.2 Facilities: The government shall provide office space, telephone service, workstations, computers, system access, and storage space at the place of performance. The government’s property shall be used only in performance of this task, unless otherwise provided in this contract and unless otherwise approved by the contracting officer, government program manager. The government shall provide contractors adequate working space and furnishings similar to that provided for government employees at all AE-ITT centers and schools. This includes computers, network services, phones and other data collection equipment/software as determined necessary by the government

4.3 Utilities: Not Applicable.

4.4 Equipment: The Government will provide all office automation equipment (e.g. workstation, phone, and printer), classroom training equipment (e.g. computers, printer, routers, projectors, VTC cameras, screens, etc.) necessary to conduct training in the permanent training sites. Mobile Training Kits/equipment (laptop transport cases, laptops, printers, and wired router) necessary to provide training in on-demand/ad hoc training locations. When connectivity is required and not provided by the government, the contractor will provide network connectivity and bill under Other Direct Cost.

4.5 Materials: The Government will provide the office supplies required to provide training.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

5. Contractor Furnished Items And Responsibilities:

5.1 General: The Contractor shall furnish all supplies, equipment, facilities and services required to perform work under this contract that are not listed under Section 3 of this PWS. The Contractor is responsible for all coursework, courseware printing, distribution/shipping of training material, instructor costs and travel to identified training locations (excluding MTT on-demand training locations).

5.2 Secret Facility Clearance: Not Applicable.

5.3 Materials: The Contractor shall furnish all courseware-training materials, textbooks and associated vouchers to ensure certification of trained workforce. The Contractor is responsible for the delivery of all courseware to support the training through this contract.

5.4 Equipment: The Contractor shall provide any equipment required to support the Contractor-provided testing identified in para 5.4.2.

PART 5

SPECIFIC

TASKS

Basic Services: The Contractor shall provide services in support of the USAREUR Information

Technology Training (AE-ITT) Program. The AE-ITT program is an enterprise CS/IT training capability that is flexible in nature and designed to assist the Government in meeting the numerous and diverse

CS/IT training and certification requirements of the CS workforce throughout Theater.

5.1.1 Information Technology Training Program (ITTP): The Contractor shall provide commercially available training courses for relevant vendor training Knowledge Management Training; Information

Technology Infrastructure Library (ITIL) training, Program Management training and Career Program

Management 34 (CP-34). The Contractor shall provide commercially available instructor services to conduct technical training on DoD- Specific curriculum furnished by the Government. Content provided under the ITTP ranges from commercial off- the-shelf courseware to the delivery of technical instruction using custom developed curriculum on topics covering DoD-specific IT functional roles. Training content includes but is not limited to the following courses:

a) Office and SharePoint Integration; Microsoft Applications

b) Enterprise Program Management

c) ITIL

d) Career Program – 34 (CP-34) Specific Courses

1) SharePoint Server

2) Program Management & Program risk Management

3) Advanced IT Program Management

All ITTP Training shall consist of Technical Training days using Government furnished classroom(s) and equipment or in a commercial setting classroom. Note:

a) The Government will furnish the courseware for DoD-Specific Training.

b) The Contractor shall provide all commercial-off-the-shelf (COTS) course materials

(hardcopy), instructor slides, exercises, and classroom setup guides.

c) The Contractor shall be responsible for printing and distributing the materials.

d) The Contractor shall collect and dispose all obsolete materials

5.1.1.1 ITTP COTS Training (Contractor furnished courseware)

Courses include but not limited to: Sharepoint End User and Power

User

Class Hours: 08:00-17:00hrs Eight teaching hours per day. Trainer required to arrive 30 minutes prior to class and remain 30 minutes following class

Contractor prepares and distributes all courseware materials for up to 16 students with a minimum of 12 students.

5.1.1.2 ITTP COTS Training (Contractor furnished courseware)

Courses include but not limited to: ITIL, PMP, PMI AGILE, CAPM, VMWARE Career Program – 34 (CP-34) Specific Courses

Class Hours: 08:00-17:00hrs Eight teaching hours per day. Trainer required to arrive 30

Contractor prepares and distributes all courseware materials for up to 16 students with a minimum of 12 students.

5.1.2 Cybersecurity Training Program (CSTP): The Contractor shall provide training that meet industry standard certifications that map to the DoD’s Cybersecurity requirements under DoDD

8140.01 and applicable DoD and Army Regulations. The Contractor shall provide commercially available program of instruction for relevant COTs training: Knowledge Management training;

Program Management training and CP-34. The Contractor shall provide commercially available instructor services to conduct technical training on DoD-Specific curriculum furnished by the

Government. Training provided under the CSTP ranges from commercial off-the-shelf courseware to the delivery of technical instruction using custom developed curriculum on topics covering

DoD-specific IT functional roles. Training content includes but is not limited to the following types of courses:

a) Government/Army Specific Training:

1. Information Management Officer (IMO), Telecommunication Control Officer (TCO), Organizational Unit (OU) Administrator, Risk Management Framework (RMF), Enterprise

Mission Assurance Service Site (eMASS), Cybersecurity…