L12 DISC PCRSS Task Order PWS_11092020.docx
DOCX document 139 KB Posted
- Solicitation number
- HQ0855-21-R-0004
- Issued by
-
DOD Missile Defense Agency
About this file
This document announces the draft request for proposal for the Directorate for Test Resources Instrumentation Support Contract, solicitation number HQ0855-21-R-0004. The Missile Defense Agency seeks proposals for specialized support services including program management, mission support operations, operations and sustainment activities, and test execution for research, development, test and evaluation of missile defense systems. A single indefinite delivery/indefinite quantity cost-type contract with cost plus award fee, cost plus incentive fee, firm fixed price, and cost reimbursable contract line items is anticipated for a base period of five years and five one-year option periods. The North American Industry Classification System code is 541715 for research and development in physical, engineering, and life sciences excluding nanotechnology and biotechnology. The acquisition has a 100% small business set-aside and will use source selection procedures in FAR Part 15. Industry input is requested by January 25, 2021 and the final RFP is planned for March 8, 2021 with proposals due May 10, 2021 and contract award by January 2022.
View the file
Other files
Show all 30
On GovTribe
Work with this file
- Download the original file
- Contacts named in this file
- Similar government files
- Ask GovTribe AI about this file
Text version
Test Resources Directorate Instrumentation Support Contract
Pacific Collector Range Safety System (PCRSS)
Performance Work Statement
PCRSS Year 1 Task Order PoP XX XXX XXXX through XX XXX XXXX
November 9, 2020 DRAFT v3
HQ0855-21-R-0004
TABLE OF CONTENTS
| 1.0 | SCOPE | 1 |
| 1.1 | Background | 1 |
| 1.2 | Reserved | 1 |
| 2.0 | APPLICABLE DOCUMENTATION | 1 |
| 3.0 | REQUIREMENTS | 2 |
| 3.1 | GENERAL | 2 |
| 3.2 | PROGRAM MANAGEMENT | 2 |
| 3.2.1 | Management | 2 |
| 3.2.2 | Contract Management | 4 |
| 3.2.3 | Cost Reporting | 5 |
| 3.2.4 | Small Business | 6 |
| 3.2.5 | Government Property | 7 |
| 3.2.6 | Security and Classified Data | 8 |
| 3.2.7 | Cybersecurity | 9 |
| 3.2.8 | Software | 13 |
| 3.2.9 | Quality Assurance | 14 |
| 3.2.10 | Environment, Safety, and Occupational Health | 14 |
| 3.2.11 | Transition | 15 |
| 3.3 | MISSION AND TEST EXECUTION REQUIREMENTS | 15 |
| 3.3.1 | General | 15 |
| 3.3.2 | Reserved | 17 |
| 3.3.3 | Pacific Collector Range Safety System | 17 |
| 3.3.4 | Reserved | 18 |
| 3.4 | OPERATIONS AND SUSTAINMENT (O&S) REQUIREMENTS | 18 |
| 3.4.1 | General | 18 |
| 3.4.2 | Reserved | 21 |
| 3.4.3 | Pacific Collector Range Safety System | 21 |
| 3.4.4 | Reserved | 21 |
| 4.0 | DELIVERABLES | 21 |
| 5.0 | TRAVEL | 22 |
HQ0855-21-R-0004
i
1.0 SCOPE
This Test Resources Directorate (DTR) Instrumentation Support Contract (DISC) Pacific Collector Range Safety System (PCRSS) Performance Work Statement (PWS) covers specialized support services provided for the Missile Defense Agency (MDA). This supports Research, Development, Test & Evaluation (RDT&E) of Missile Defense System flight tests and other related Department of Defense (DoD) activities.
PCRSS support requirements include three primary areas: 1) PCRSS Mission and Test Execution, 2) PCRSS Operation and Sustainment (O&S), and 3) PCRSS Program Management. The overarching goal of this PWS is to provide PCRSS support in accordance with schedules and locations for missiles system tests in all phases of flight.
1.1 Background
The MDA developed the PCRSS to support its BMDS flight tests over the broad ocean area (BOA). The Pacific Collector Range Safety System (PCRSS) is installed onboard MV PACIFIC COLLECTOR (PC).
This requirement is for support of flight test instrumentation systems and equipment participating in high visibility and complex BMDS flight tests. MDA may require deployment and employment of flight test instrumentation equipment and services mission support in the BOA, DoD test ranges near the Pacific or Atlantic Oceans, and other remote sites and locations worldwide.
In support of MDA Flight Test Execution, PCRSS is scheduled to support five (5), thirty-day deployments per year. PCRSS also provide analysis, planning, operation, data collection and recording, post-mission calibrations, and mission data packages.
| 1.2 | Reserved |
| 2.0 | APPLICABLE DOCUMENTATION |
The following documents apply to the work under this contract, and will be provided by the Government. The Contracting Officer’s Representative (COR) may provide additional documentation over the course of the contract.
a) Security Classification Guides
b) Integrated Master Test Plan (IMTP) v21.1
c) MDA Instruction 4250.02 – Ballistic Missile Defense System Cost Estimates
d) DoD Instruction 5000.04-M-1, CSDR Manual
e) Department of Defense (DoD) Instruction 5000.64, Accountability and Management of DoD Equipment and Other Accountable Property
f) DoD Instruction 8500.01, Cybersecurity (dated March 14, 2014)
g) DoD Directive 8140, Cyberspace Workforce Management
h) DoD 8570.01-M, Information Assurance Workforce Improvement Program
i) MDA Software Assurance Overlay, MDA Policy Memorandum NO. 16 (dated September 22, 2020)
j) National Consensus Standard for Configuration Management (ANSI/EIA-649)
k) Military Handbook Configuration Management guide (MIL-HDBK-61A)
| 3.0 | REQUIREMENTS |
| 3.1 | GENERAL |
The period of performance for this effort is eighteen months and will last from xx xxx xxxx through xx xxx xxxx.
MDA requires test support, operation and sustainment of the capabilities provided by the MDA-owned systems XTR, PCRSS, TSS, and MD3S to include related cybersecurity functions. The services required in each DISC area, as well as the required personnel skill mix, may vary mission-by-mission or year-by-year.
3.1.1 Reserved
3.1.2 The contractor shall provide personnel, resources and project management to perform timely, efficient, high-quality MDA mission execution. Contractor action or inaction must not cause tests or training events to be delayed or missed.
3.1.3 Reserved
3.1.4 Reserved
3.1.5 The contractor shall provide range instrumentation teams to execute missions IAW test schedules and requirements. The contractor shall provide temporary surge personnel on a mission-by-mission basis.
| 3.2 | PROGRAM MANAGEMENT |
| 3.2.1 | Management |
| 3.2.1.1 | The contractor shall be directly responsible and accountable for the program management, mission support operations, operations and sustainment activities, program security, general requirements, and special provisions of the PCRSS Program. The contractor shall provide management and programmatic support to direct, assist and facilitate the PCRSS program and test support activities and services. The contractor shall be responsive to changes in program direction, including new, revised or terminated efforts. |
3.2.1.2 The contractor shall perform a wide variety of tasks and support the mission and functions of the PCRSS program as described in this PWS. The contractor’s efforts shall be under the direction of the Government Program Manager (PM). The contractor’s management team shall provide the overall management of program, personnel, planning, quality control, direction, coordination, and reviews to assure PWS compliant contract performance.
3.2.1.3 The contractor shall ensure that technical capability is available to provide responses to specific tasks. The contractor shall provide and sustain a trained workforce capable of providing the services specified in the PCRSS Task Orders. Ensuring completion of all MDA required training, continuing education, certification courses, and other similar events shall be the responsibility of the contractor. The contractor shall manage task priorities, short-notice suspenses and operational constraints to meet schedule requirements on all Task Orders.
3.2.1.4 The contractor shall utilize corporate best practices, program processes and procedures, standard operating procedures, and other directives.
3.2.1.5 The contractor shall improve performance, consolidate PCRSS assets where practical, deliver training material, and develop and provide PCRSS operator and Missile Flight Safety Officer (MFSO) asset training.
3.2.1.6 The contractor shall manage program, cost, schedule, performance, risks, subcontracts, vendors, and data to deliver and sustain an effective, suitable and affordable PCRSS.
3.2.1.7 The contractor shall understand the interdependencies between the test planning process and the MDA IMTP to align DISC Program processes, procedures and products.
3.2.1.8 The contractor shall plan, host, and conduct Program Management Reviews (PMRs) on a quarterly basis unless deferred by the government, participate in working groups and technical interchange meetings, and conduct planning with the Government and sub-contractors for strategic planning and support for other program activities.
3.2.1.9 The contractor shall support the PCRSS Program by publicizing and participating in various exhibits, symposiums, and conferences accessible to the MDA Community up to two times per year.
3.2.1.10 The contractor shall develop, update, improve, and sustain standard PCRSS, PCRSS Test Bed, and PC Weather (PCWX) Program operating procedures and work instructions.
3.2.1.11 The contractor shall provide an integrated and cross-trained personnel solution across the PCRSS Program, as practical. The contractor shall conduct cross training for similar job activities across other DISC Task Orders respective to education and experience levels of the workforce.
3.2.1.12 The contractor shall provide and execute a procurement system that leverages efficiencies across the contract in the area of material purchases and management. These procurement activities include hardware, software, maintenance agreements, consumables, and other equipment as required per Task Order requirements.
3.2.1.13 The contractor shall implement, document and execute shipping and receiving processes/procedures for PCRSS Program operations and mission support activities.
| 3.2.2 | Contract Management |
| 3.2.2.1 | The contractor shall provide deliverables, either stated in a given Task Order or required as a standard item pursuant to this contract, IAW DD Form 1423, Contract Data Requirements List (CDRL). |
3.2.2.2 The contractor shall develop and deliver a Task Order Management Plan (TOMP) (CDRL A001) that shall define the management system to plan and execute the PCRSS Task Order. The contractor shall delineate the plans for the Task Order, to include a breakout of Direct Productive Labor Hours (DPLHs), travel, materials, a milestone schedule, and a schedule for the planned expenditure of funds.
3.2.2.3 The contractor shall report all contractor labor hours (including subcontractor labor hours) required for performance of services provided via a secure data collection site. While inputs may be reported at any time during the FY, all data shall be reported no later than October 31 of each calendar year.
3.2.2.4 The contractor shall obtain authorization from the COR prior to the start of long distance travel. Approval shall be in the form of a Government-signed Travel Request stating the intended location, mode of travel, dates and supporting reason. Upon approval of the travel request, the contractor is authorized to vary the dates of the itinerary by two weeks, with notice to the COR.
3.2.2.5 The Contractor shall deliver and update a Data Accession List (DAL) (CDRL A002). The DAL shall identify all contractor and major subcontractor internal data which has been generated by the contractor in compliance with the work effort described in the PCRSS T/O.
3.2.2.6 The contractor shall deliver an Organizational Conflict of Interest (OCI) Management Plan (CDRL A003) describing:
a) The procedures the Contractor will utilize to identify and evaluate its contracts as well as those of its subcontractors for the existence of conflicts of interest.
b) A description of the approach (engagements, subcontract policies, provisions, penalties, etc. as appropriate) the Contractor will utilize to ensure its subcontractors proactively identify and report conflicts.
c) The procedures the Contractor will utilize to avoid, mitigate or terminate conflicts of interest.
d) The procedures for reporting actual or potential conflicts of interest to the Contracting Officer.
e) A description of the organizational unit and personnel responsible for implementing the Contractor’s OCI Management approach to include responsibility for overall management, oversight, and enforcement.
f) The procedures for protecting agency information that could lead to an unfair competitive advantage if disclosed, collecting disclosure agreements covering all individuals, subcontractors, and other entities with access to agency-sensitive information, and physical safeguards, if necessary.
g) The requirements and procedures for OCI training and education of employees.
h) The enforcement mechanisms or approaches used by the Contractor to ensure compliance with company OCI policy.
| 3.2.3 | Cost Reporting |
| 3.2.3.1 | The contractor shall systematically collect and report actual contract costs segregated by non-recurring and recurring, functional category, and by unit and/or lot as designated by the Cost and Software Data Reporting (CSDR) Plan DD2794 to provide DoD cost analysts with needed data to estimate future costs (CDRL A004, CDRL A005). |
The contractor will identify any subcontractor at any tier with a subcontract that exceeds $20 million, by providing comments identifying the subcontractors, or, if the subcontractors have not been selected, the subcontracted effort in this category and provide to the Government. The Contractor shall require and flow down the requirement for CSDR reporting from subcontractors at any tier with a subcontract that exceeds $50 million or any subcontracts valued between $20 million and $49 million that are designated by the Government as being high risk, high value, or high technical interest. If, for subcontracts that exceed $50 million, the Contractor changes subcontractors or makes new subcontract awards, the Contractor shall notify the Government.
A conference will be held finalizing the contractor’s standard cost and software data reporting process to satisfy the guidelines contained in the DoD 5000.04-M-1, CSDR Manual, and the requirements in the Government-approved CSDR plan for the contract, DD Form 2794.
3.2.3.2 The contractor shall accept or propose changes to expand the Government-provided preliminary WBS as provided in the CSDR Plan DD2794 to represent how the contractor plans to accomplish the entire contract scope of work consistent with the contractor’s internal organizations and processes.
3.2.3.3 The Contractor shall support the Common Cost Methodology Working Group (CWG) as described in MDA Instruction 4250.02 – Ballistic Missile Defense System Cost Estimates. The Contractor (and major subcontractors) shall attend quarterly CWG meetings, perform cost estimating analysis in accordance with the MDA Cost Estimating and Analysis Handbook, and provide data to support the CWG. This support includes the provision of historical cost data on relevant programs, current executing/accounting data, and Parametric and Cost Estimating Relationships, including estimate results in base year and then year with point estimate and confidence level; the name, content, scope, and corresponding WBS element number as indicated on the CSDR plan; ground rules and assumptions including quantities, schedule, production rates, state of technology, program base year, inflation rates, hardware configuration, software configuration, and baselines used; methodology including applied learning and rate curve with first unit cost, slopes, type of curve (unit or cumulative average), analogies, basis of analogies, factors applied, basis for factors applied, rationale for manpower levels used in man-hour buildups; source information used to determine all methodology parameters; estimate calculations including formulas used to derive the estimate and identification of key parameters; the phasing methodology used to determine the allocation of costs across fiscal years; the means and standard deviation of the point estimate with an explanation of methodology/tools applied and source of risk parameters; a cost track identifying and explaining changes from prior estimates, including the deltas and reasons for change. The data provided must be consistent with cost report data. The Contractor shall be responsible for researching and explaining any discrepancies between common cost methodology and contractor cost data reports. The Contractor shall flow the above requirements to subcontractors. The Contractor shall ensure proper technical and cost expertise is available for focused analysis sessions as directed by the CWG chair. The CWG chair will be designated by the Government Program Office.
3.2.3.4 The contractor shall establish and maintain a management system for controlling cost, schedule, and performance. The contractor shall track and report at the Accounting Classification Reference Number (ACRN) and Sub-CLIN level. As coordinated with the COR, each DISC O&S task shall be accounted for separately (including the specific accounting number tied to each task). Funding provided for each DISC test support task shall be documented and maintained as a separate ACRN for each test in CDRL A006, Contract Funds Status Report (CFSR) and CDRL A007, Funds and Manpower Expenditure Report (FMER). In the event separate ACRNs are not provided, the contractor shall track and report individual test event cost in a manner acceptable to the COR.
3.2.3.5 The contractor shall provide a Monthly Status Report (CDRL A008) to report events and accomplishments of the previous month’s efforts, including a listing of travel taken during the reporting period and the results of that travel.
3.2.3.6 The contractor shall prepare, maintain and submit comprehensive reports detailing DISC Task Order activities by Government fiscal year funding CDRLs A006, A007).
3.2.4 Small Business
In order to gather data and assess the Contractor’s small business utilization compliance with FAR 52.219-8 (Utilization of Small Business Concerns) and DoD Class Deviation 2020-O0008, Revision 1 - Limitations on Subcontracting for Small Business, the Contractor shall submit a report in accordance with Table 3.2.4-1 in this paragraph. If applicable, the Table included in the report shall identify the similarly situated entity (SSE) category(s) of small business concerns, and dollars and percentages of subcontracting to SSEs. “Similarly situated entity” means a first-tier Subcontractor, including an independent Contractor, that has the same small business program status as that which qualified the prime contractor for the award and that is considered small for the NAICS code the prime contractor assigned to the subcontract the Subcontractor will perform. The report shall be submitted annually, by October 30 of each year for the life of the contract; and a final report shall be submitted 30 days prior to the end of the contract year. The Contractor shall submit the reports using the table format below (CDRL A009).
Table 3.2.4-1 – Example Table – Small Business Utilization Dollars and Percentages Total Funded Contract Dollars: $000,000
| Category |
| Contractor Name |
| Product/Service to Be Performed |
| Period of Performance |
| Actual SB Percent of Total Funded Contract Dollars |
| Actual SB Participation Dollars |
SB Prime
Small Business
HUB Zone Small Business
Veteran Owned Small Business
Service-Disabled Veteran-Owned Small Business
Small Disadvantaged Business
Women-Owned Small Business
| Similarly situated entity subcontracting |
| % |
| Total $ |
| Percent of the amount paid by the Government for contract performance to subcontractors that are not similarly situated entities. |
| % |
| Total $ |
Note: Any work that a similarly situated entity further subcontracts will count toward the prime contractor’s 50 percent subcontract amount that cannot be exceeded.
| 3.2.5 | Government Property |
| 3.2.5.1 | The contractor shall manage Government Property (i.e., both Government Furnished Property (GFP) and Contractor Acquired Property (CAP) in accordance with FAR 52.245-1 and its associated FAR and DFARS clauses. GFP and CAP inventory levels will be reported in accordance with CDRL A010 "Government Property Inventory Report." The data fields required for this reporting are listed in Data Item Description (DID) DI-MGMT-80441C, "Government Property Inventory Report," which can be found on the DLA ASSIST database. All applicable data elements are required to include National Stock Numbers (NSN). Prior to the acquisition or fabrication of items of Contractor Acquired Property (CAP) that are not pre-approved on a Basis for Estimate (BOE) or Bill of Materials (BOM), the contractor shall obtain Contracting Officer's written authorization for all items of any value. |
3.2.5.2 The contractor shall perform a physical inventory of all Government Property (i.e., GFP and CAP), regardless of unit acquisition cost, annually (at a minimum). When directed by the Contracting Officer, the contractor shall submit a Material Inspection and Receiving Report as required by DFARS 252.232-7003 for the delivery of CAP by using the Wide Area Workflow (WAWF) module in the Procurement Integrated Enterprise Environment (PIEE) e-Business Suite.
3.2.5.2.1 The contractor shall utilize a documentation and property management database to monitor and track changes to documentation and MDA property. A documentation and property management database residing on a government server is available for use by the contractor.
3.2.5.3 The contractor shall provide a unique item identifier (UII) for all delivered items, to include CAP IAW DFARS 252.211-7003.
3.2.5.4 The contractor shall repair or replace items of Government Property that have not been deemed as excess to the contract when the repair or replacement costs does not exceed $500.00. The Contracting Officer's written authorization is required prior to the repair or replacement of Government Property items when the repair or replacement costs exceeds $500.00. If a Government Property Administrator is assigned to the contract, his or her approval/recommendation is required prior to the request being sent to the Contracting Officer. The contractor shall support the repair or replacement costs exceeding $500.00 with quotes from a minimum of three (3) sources.
3.2.5.5 Proceeds from the disposal of scrap shall be credited to overhead. All other proceeds received from the disposal of Government Property shall be applied as a credit against the next contract billing.
3.2.5.6 In preparation for the prompt completion of contract closeout actions, the contractor shall perform a final inventory at the end of the period of performance (CDRL A010). The contractor shall coordinate the final inventory with MDA to ensure that a Government representative is present. This final inventory requires the physical count of all Government Property (both GFP and CAP) at all locations (to include subcontractor locations) and subsequent reconciliation against the contractor's and subcontractor's Property Management System records. Once all Government Property close-out actions are complete, the Contractor shall submit a written certification stating that all Government Property closeout actions have been completed and that no Government Property remains accountable against this contract. This certification includes all subcontractor locations.
| 3.2.6 | Security and Classified Data |
| 3.2.6.1 | The contractor shall comply with the Contract Security Classification Specification (DD-254), applicable DOD security requirements, and all mission/system specific security requirements provided by the COR. |
3.2.6.2 Contractors with Government-furnished computer equipment or other computers connected to the Government computer networks shall comply with DoD Instruction 8500.01 series and applicable future Government network requirements.
3.2.6.3 The contractor shall support the development, operation and accreditation of all facilities in which the DISC Program has oversight responsibility. This includes development of documentation required to demonstrate compliance with administrative security requirements to support MDA Test operations.
3.2.6.4 Off-site operation and sustainment in a contractor provided facility may be required if it is determined that the use of approved classified storage/space could be a benefit to the government. Contractor shall maintain a “TOP SECRET" facility clearance, with approved safeguarding at the “SECRET” level.
3.2.6.5 The contractor shall continuously demonstrate to MDA that it is properly staffed and capable of handling, processing, and protecting sensitive classified information and information systems IAW with DoD and MDA security requirements. All employees shall be citizens of the U.S. or lawful permanent residents. All XTR operators shall be required to obtain and maintain TOP SECRET security clearance. The number of personnel that require TOP SECRET security clearances to support PCRSS, MEDDS, and other DISC operations shall be maintained at the minimum level adequate to execute contract requirements.
3.2.6.6 The contractor shall maintain all required sensitive and classified information required to support and execute program and mission support operations.
| 3.2.7 | Cybersecurity |
| 3.2.7.1 | The contractor shall prepare, deliver, and maintain all documentation necessary to obtain and sustain authorization for DTR systems IAW DoDI 8500.1. The contractor shall ensure that DTR systems under their purview comply with all security configuration guides with exceptions documented and approved by the proper authority. In addition, all supporting documentation must be vetted by the asset manager and the DTR Cybersecurity team. |
3.2.7.2 The contractor shall ensure that personnel who have access to PCRSS systems comply with DoDD 8140 and DOD 8570.01-M to maintain a certified cybersecurity workforce for the DISC Program. The training required to obtain/maintain the required certifications shall be the responsibility of the contractor. The training shall provide the employees with the information needed to keep abreast of the latest cybersecurity best practices and available technologies.
3.2.7.3 The contractor shall perform site surveys and identify infrastructure and cybersecurity equipment deficiencies to enable MDA to remediate any issues that arise. Also, the contractor shall support all technical cybersecurity and physical security assessments.
3.2.7.4 The contractor shall prepare and maintain an Enterprise Mission Assurance Support Service (eMASS) instance for the system with all required artifacts to ensure acceptance by the Authorizing Official (AO). Artifacts include providing vulnerability scans, a complete listing of Ports, Protocols, and Services (PPS) employed by each enclave, evidence of MDA required periodic cybersecurity exercises and reviews, and standard operating procedures (SOPs) for each system. RMF artifacts to be submitted monthly (CDRL A011) and annually (CDRL A012).
3.2.7.5 The contractor shall report all security incidents to MDA DTR ISSM Team and/or Local Security Manager as appropriate based on incident response policies and procedures. The contractor shall respond to and implement all Cybersecurity Tasking Orders (CTO) issued by the MDA Computer Emergency Response Team (CERT).
3.2.7.6 Safeguarding Covered Defense Information and Cyber Incident Reporting:
1. The Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.204-7012, “Safeguarding Covered Defense Information and Cyber Incident Reporting” (hereafter referred to as “DFARS 7012”) requires the contractor to provide adequate security on covered contractor information systems.
a. “Covered defense information” means unclassified controlled technical information or other information (as described in the Controlled Unclassified Information (CUI) Registry at http://www.archives.gov/cui/registry/category-list.html) that requires safeguarding or dissemination controls pursuant to and consistent with law, regulations, and Government wide policies, and is—
i. Marked or otherwise identified in the contract, task order, or delivery order and provided to the contractor by or on behalf of DoD in support of the performance of the contract; or
ii. Collected, developed, received, transmitted, used, or stored by or on behalf of the contractor in support of the performance of the contract.
b. Hereafter, Covered Defense Information (CDI), CUI, Technical Data, or Operationally Critical Support information is referred to as CUI.
c. Within five (5) business days after contract award the successful offeror shall meet with MDA to specifically identify programmatic information that will be categorized as CUI. The Government intends that CUI will be identified and categorized NLT 30 days after award.
d. The Contracting Officer will determine final resolution of unresolved differences in the categorization of Covered Defense Information (CDI), CUI, Technical Data, Operationally Critical Support Information or other programmatic information.
2. Distribution and Accountability of CUI: The Contractor shall implement practices to restrict the unnecessary sharing and/or flow of CUI down the entire supply chain based on need-to-know; to include, but not limited to, minimizing the information provided on contracts/purchase orders for procurement of logistics and transportation services, systems, or critical components.
3. The Contractor shall develop and deliver via encrypted email or secure file transfer site at XXXXX@mail.com or https://XXXXX.mil an Information Management and Control Plan (IMCP) to its direct customer (i.e. the Government or the Contractor’s next-level up contractor). The IMCP is limited to five (5) pages (CDRL A013) that shall:
a. Identify practices the contractor implements to restrict the unnecessary sharing and/or flow of CUI down the entire supply chain based on need-to-know, to include, but not limited to, minimizing the information provided on contracts/purchase orders for procurement of logistics and transportation services, systems, or critical components (see #2).
b. Address procedures for reporting a cyber-incident as defined in DFARS 7012.
c. Document the process by which the contractor System Security Plans (SSPs) and Plan of Action and Milestones (POAMs) are developed and maintained to protect CUI within the contractor’s/subcontractor’s unclassified information technology systems.
d. Include a high-level summary of the Contractor’s SSP and POAM for their applicable network as Appendix A, SSP & POAM Summary, to the IMCP, to include each of the 14 NIST 800-171 control families (not at the individual control level). The SSP and POAM summary (Appendix A) are exempt from the five (5) page limitation of the IMCP.
e. Representation from the Contractor that Paragraph 4 has been completed.
4. IMCP Supplier Compliance Supplement (Appendix B): If the Contractor has suppliers that receive or generate CUI in performance of the contract, the Contractor shall document and maintain on file an IMCP Supplier Compliance Supplement (“Appendix B”). An Example IMCP Appendix B Template is provided in Table 3.2.7.6-1. The Supplement shall contain the following:
a. List the Contractor’s direct customer (i.e. the Government or the Contractor’s next-level up contractor), contract number, address and contract point of contact information.
b. List the Contractor’s first-tier suppliers that receive or generate CUI in performance of the contract. Company Name, DUNS, Address, Contract Number. If CUI is not passed to or generated by any next-tier supplier, follow instructions 1-6 in paragraph 4.i and state NA in the “Supplier Name” field of the Supplier Compliance Supplement (Appendix B). Other fields (instructions 7-11) of the Supplier Compliance Supplement (Appendix B) should remain blank.
c. Confirm Contractor has identified and flowed only CUI which is needed for their first-tier suppliers
d. Confirm the 7012 clause is flowed to their first-tier suppliers
e. Prime Contractor shall include the IMCP Supplier Compliance Supplement (Appendix B) with delivery of IMCP CDRL to its direct customer (i.e. the Government).
f. Non-Prime Contractors (within the extended supply chain) shall securely deliver the IMCP Supplier Compliance Supplement (Appendix B) via encrypted email or secure file transfer site at XXXXX@mail.com or https://XXXXX.mil directly to the Government within X business days after their subcontract is awarded. The prime contractor shall confirm with MDA when their 1st Tier Subcontracts are awarded.
g. All IMCP Supplier Compliance Supplements shall be updated semiannually at a minimum but no more than four (4) times per year.
h. Subcontractor information delivered under paragraph 4.e or 4.f shall be marked as “Company Name – Proprietary” and shall be protected accordingly.
i. Template Instructions:
1. Submitted by: Prime or Non-Prime contractor submitting the IMCP Compliance Supplement
2. Subcontracted by: State the Company Name, the submitting Non-Prime is supporting under this Government contract. If the Prime contractor to the Government state “Prime Contractor” in this field
3. Purpose: Identify Non-Prime contractors/Suppliers who collect, develop, receive, transmit, use or store CUI
4. Date: Date of submission
5. Government Contract Number: List the Government Contract number you are supporting
6. Supplier Name: List suppliers that collect, develop, receive, transmit, use or store CUI in support of this contract.
7. DUNS: Dun & Bradstreet number
8. Supplier Point of Contact: Name, email and phone number from each supplier.
9. Does the Subcontract contain DFARS 252.204-7012: Yes or no.
10. Has the supplier completed the Self-Assessment IAW NIST 800-171r: Yes or no.
11. Does the supplier have a System Security Plan and Plan of Action and Milestones IAW NIST 800-171r: Yes or no.
5. Flow Down to next-tier suppliers: The successful offeror (PRIME) shall flow down their accepted IMCP procedures and requirements, including the IMCP Supplement (Appendix B), to their next tier suppliers and require flow down iteratively to any next tier supplier.
6. The Government reserves the right to request, review and/or inspect the contractor/subcontractor IMCP (including appendices) to verify implementation of the Information Management and Control Plan and DFARS 7012. Further, the Government reserves the right to use the IMCPs to iteratively navigate through the tiered supply chain. A contractor will only have visibility to their next-tier supplier(s) IMCP’s – sections 3a-e. Government reserves the right to request delivery of the SSP and POAM from the prime contractors and applicable Non-Prime or subcontractors included in the supply chain. Delivered data provided as part of the IMCP will be handled and classified by the Government as source selection sensitive information and stored accordingly.
Table 3.2.7-1 – Example Table – IMCP Supplier Compliance Supplement
| Submitted By: |
| Knight Industries |
| Subcontracted By: |
| Dynamic Safety Systems |
| Purpose: |
| Suppliers with CUI |
| Date: |
| 6/6/2018 |
| Government Contract Number |
| Supplier Name |
| DUNS |
| Supplier POC |
(email and phone)
| Subcontract contains DFARS 252.204-7012 |
| NIST 800-171r1 Self-Assessment complete |
| SSP & POAM Complete |
| ABC Corp |
| 12345678 |
| lisa.smith@abc.com 202-123-4567 |
| Y |
| Y |
| Y |
| ArCCOM |
| 78945612 |
| jed.jones@arccom.net 234-567-8911 |
| Y |
| Y |
| Y |
| Vartan Inc. |
| 45612378 |
| tom.a.smith@vareng.com 753-519-4566 |
| Y |
| Y |
| Y |
| Daniel Armoring |
| 15975312 |
| alan.rogers@darmor.com 225-465-1788 |
| Y |
| Y |
| N |
| 3.2.8 | Software |
| 3.2.8.1 | The contractor shall design, develop, integrate, implement, and sustain software in support of DISC program areas of responsibilities. This includes integration of commercial off-the-shelf (COTS) and Government off-the-shelf (GOTS). The contractor shall report status of the DISC software development efforts in the Monthly Status Report (CDRL A008). |
3.2.8.1.1 The Common Display Software (CDS) is provided as Government-Furnished Equipment (GFE) to the PCRSS, PCRSS Test Bed, and MDA/DTRI. CDS was developed and is operated and maintained by Naval Air Warfare Center Weapons Division (NAWCWD). CDS is the property of NAWCWD Pt. Mugu. The contractor shall work with MDA and NAWCWD to obtain and install current and future versions of the CDS.
3.2.8.2 The contractor shall support the PCRSS, PCRSS Test Bed, and PC Weather program objectives by improving and sustaining software products for mission planning, mission operations, data collection, data distribution, data transfer, data compression, telemetry, visualization, and telemetry algorithm development, truth and metrics. These products and toolsets include, but are not limited to, PCRSS, PCRSS Test Bed, and PC Weather program government owned software, tools, and databases, data management software, test analysis software, situational awareness and real-time data transfer software, test resource planning and conflict/resolution software, and telemetry analysis software.
3.2.8.3 The contractor shall maintain in a useable format current and revised versions of government provided and developed software to include software tools used to support the PCRSS, PCRSS Test Bed, and PC Weather program. All supporting technical data and computer software documentation shall be delivered to the Government.
3.2.8.4 Reserved
3.2.8.5 Reserved
3.2.8.6 Reserved
3.2.8.7 The contractor shall document the tools, techniques, and results of Non Developmental Item (NDI) software (e.g. Commercial/Government/and Open Source) supply chain vulnerability assessments, static source code assessments, dynamic scans and penetration testing assessments, and manual review and testing of cybersecurity functions in a Software Assurance Evaluation Report (SAER) (CDRL A016).
3.2.8.8 Reserved
3.2.8.9 Reserved
3.2.8.10 No limited rights or restricted rights technical data, operating systems, and/or computer software, or proprietary commercial software shall be delivered during the performance of the contract, unless the contractor requests in writing and receives in writing from the Contracting Officer an authorization to incorporate limited rights and/or restricted rights information, and/or proprietary commercial software in operations of the DISC program and/or in deliverables under the contract.
| 3.2.9 | Quality Assurance |
| 3.2.9.1 | The contractor shall develop, implement, and maintain a quality management system in accordance with ISO 9001 or SAE AS9100, to ensure quality products and services. |
3.2.9.2 The contractor shall identify and develop a system of metrics to track those processes that are critical to PCRSS, PCRSS Test Bed, and PC Weather Program operations. These processes include customer satisfaction, system and program performance, maintenance activities, and problem resolution statistics. Metrics reports shall be generated and submitted monthly as part of the monthly status report (CDRL A008).
3.2.9.3 The contractor shall support quarterly Quality Assurance Surveillance Plan (QASP) meetings and provide a self-assessment.
3.2.10 Environment, Safety, and Occupational Health
The contractor shall integrate applicable federal, state, and local ESH laws and regulations, Executive Orders, treaties, and policies into all phases of program execution. Applicable facilities, processes, and operations (including those of subcontractors) shall be compliant to ensure a safe work environment in accordance with FAR 23, “Environment, Energy and Water Efficiency, Renewable, Energy Technologies, Occupation Safety, and Drug-Free Workplace.”
3.2.11 Transition
The contractor shall have all personnel needed to support PCRSS, PCRSS Test Bed, and the PC Weather System at the start of the contract.
| 3.3 | MISSION AND TEST EXECUTION REQUIREMENTS |
| 3.3.1 | General |
The objective of this effort is to acquire DTR Instrumentation Mission and Test engineering support for described systems and capabilities for which MDA/DTR has responsibility. The mission and test support is defined as the activity necessary to develop requirements, plan, manage, procure, integrate, checkout, test, train, support test execution, and provide post test data products.
Mission-specific requirements will be provided to the contractor in Government provided documentation such as Universal Documentation Systems (UDS), Data Management Plans, Count-Down Checklists, Test Support Plans, Launch Constraint Documents, Security Classification Guides and OPSEC documents, Asset Deployment Schedules, and Mission Execution calendars.
PCRSS is scheduled to support five, thirty-day deployments per year. Mission and Test Execution also includes providing analysis, planning, operation, data collection and recording, post-mission calibrations, and mission data packages.
3.3.1.1 The contractor shall perform mission planning support to meet mission test requirements, which generally includes day-to-day mission coordination, implementation, documentation of mission requirements, analysis, creation of deployment plans, mission countdown checklists, concept of operations, and provision planning.
3.3.1.2 The contractor shall coordinate, facilitate, and prepare, in UDS and other formats, responses to MDA mission planning requirements. The contractor shall attend and participate in mission reviews to include UDS documentation reviews, Instrumentation and Communication Working Groups, Test Resource Readiness Review, and other meetings, teleconferences, and video telecommunication conferences. The contractor shall prepare presentations, as well as take, assemble, and distribute minutes.
3.3.1.3 The contractor shall schedule and coordinate MDA mission testing requirements that require the deployment of PCRSS, PC Weather System, or the PCRSS Test Bed assets to any potential test location.
| 3.3.1.4 | The contractor shall access various MDA-hosted electronic websites and portals via Government authorized access for download of technical documentation pertaining to the tests being scheduled and coordinated. The contractor shall assemble and distribute documentation accordingly in specified format such as MS Word, PowerPoint, PDF, MS Visio, etc. |
| 3.3.1.5 | The contractor shall procure range instrumentation systems and associated equipment, which generally includes: antennas, receivers, recorders, timing units, networking gear, routers, test equipment, portable shelters, instrumentation vans, and replacement items as a result of system or component failure or repair, maintenance, and spares provisioning such that the instrumentation systems are returned to operational status and ready for missions. The contractor shall make arrangements for procurement, acceptance, delivery, installation, and post-installation testing. The contractor shall provide a purchase request and any back-up documentation prior to any procurement action. |
3.3.1.6 The contractor shall procure consumable items supporting range instrumentation systems, which generally includes removable hard drives, data recording tapes and other recording media, film, calibration spheres and balloons, helium, cables, hardware, connectors, fasteners, lubricants, solvents, etc. The contractor shall make arrangements for procurement, acceptance, delivery, installation, and testing as required to meet mission support requirements. The contractor shall provide a purchase request and any back-up documentation prior to any procurement action.
3.3.1.7 The contractor shall provide transport and movement of instrumentation components, spares, and associated equipment worldwide. Transportation methods may include ground, air, rail, barge, FEDEX, UPS, and USPS to meet mission requirements. This shall include appropriate packaging, crating, forklift, and crane support as required for safe transport of the equipment. The contractor shall also provide for temporary storage facilities at field or remote sites for instrumentation components or support equipment to meet mission requirements.
3.3.1.8 Reserved
3.3.1.9 Reserved
3.3.1.10 The contractor shall provide the required data products (pre-mission and mission) to the Missile Defense Data Center (MDDC) IAW the MDA Integrated Data Management Plan (IDMP).
3.3.1.11 Reserved
3.3.1.12 Reserved
3.3.1.13 The contractor shall configure all DTR systems in their purview in accordance with published Security Technical Implementation Guides (STIGs), Security Requirements Guides (SRGs), and other security best practices found from vendors, industry, and other reputable sources.
3.3.1.14 The contractor shall perform all required vulnerability scans, system updates, and upgrades as documented in each system’s security plan, policy documents, in accordance with the system’s standard operating procedures, and DoD and MDA guidance.
3.3.1.15 The contractor shall ensure a current Authorization to Operate (ATO) is in place for each system for all missions. For each mission, the contractor shall identify any interconnections, new requirements, or other changes to the system baseline to support a test event and document the exception accordingly for proper approval for test execution.
| 3.3.2 | Reserved | |
| 3.3.3 | Pacific Collector Range Safety System | |
| 3.3.3.1 | The contractor shall provide engineering, test, troubleshooting, repair, and operation of PCRSS, PC Weather System (PCWX), and PCRSS Test Bed to meet mission-specific requirements provided by the Government for a variety of MDA missions. |
3.3.3.2 Before each MDA mission, the contractor shall perform on-site system preparation and activation, to include, testing, troubleshooting, and repair or replacement to ensure PCRSS and the PC Weather System is mission-ready. If system repair is required, the contractor shall identify corrective actions needed and upon approval shall purchase, install, and re-test replacement parts. The contractor shall coordinate all safety repair actions with the COR prior to making any changes.
3.3.3.3 The contractor shall perform on-site operation of PCRSS, PC Weather System, and PCRSS Test Bed to perform all tasks and functions associated with range safety during MDA missions. The contractor shall provide range safety system architecture, analysis, design, and operation information to sustain and operate PCRSS, PC Weather System, and the PCRSS Test Bed.
3.3.3.4 The contractor shall perform range safety system engineering to configure or re-configure the fixed or mobile system as required to fulfill MDA Mission Requirements.
3.3.3.5 The contractor shall provide field services for PCRSS and the PC Weather System. The contractor shall provide additional personnel for mission-specific operators capable of operating PCRSS and the PC Weather System for MDA missions. Operation of PCRSS and the PC Weather System generally includes system operation (pre- and post-mission calibration, signal acquisition, tracking, and, if required, issuance of destruct commands of required test items), data collection and recording, and system interface with other MDA mission and range instrumentation systems.
3.3.3.5.1 The contractor shall establish and provide an extensive “reach back” capability within its organization and subcontractors to ensure the availability of the required skill mix for each mission.
3.3.3.5.2 The contractor shall provide weather analysis and forecasting from the PC Weather System data during a mission while the ship is at sea. This includes but limited to launching weather balloons with radiosondes while at sea.
3.3.3.5.3 The contractor shall secure the PCRSS and PC Weather System via MDA Physical security and Cybersecurity regulations and policies after every mission before the contractor team leaves the ship to return home.
3.3.3.5.4 The contractor shall secure the PCRSS Test Bed via MDA Physical security and Cybersecurity regulations and policies.
| 3.3.4 | Reserved | |
| 3.4 | OPERATIONS AND SUSTAINMENT (O&S) REQUIREMENTS |
The objective of this effort is to acquire systems engineering and test resource engineering support that will span the entire life cycle of the described systems or capabilities for which MDA/DTR has responsibility. Operations and sustainment support is defined as the activity necessary to define concepts, define requirements, plan, manage, develop, procure, sustain, modify, improve, test, train, field, and retire systems and system computer resources in a time frame necessary to meet MDA needs.
| 3.4.1 | General | |
| 3.4.1.1 | The contractor shall develop, implement, execute, and manage technical Operation and Sustainment activities for the contract. |
3.4.1.2 The contractor shall operate and sustain PCRSS activities during government business hours and when required, extended hours beyond government business hours up to and including 24/7 operations, to include weekends and government and contractor holidays in support of scheduled MDA test events.
3.4.1.3 The contractor shall provide operations and sustainment of DISC systems. The contractor shall maintain DISC systems to ensure an operational status for MDA missions. Maintenance includes, but not limited to, O&S support plans and recommendations, performing regularly scheduled inspections, operation, testing, and diagnosis, repair or replacement of parts or units. The contractor shall provide a maintenance plan, maintenance results, and perform maintenance of these instrumentation systems at their current in-field deployed locations when sustainment/repair is required.
3.4.1.3.1 The contractor shall work with MDA and the respective government range to ensure the PCRSS Range Safety Certification stays current and valid as the system goes through its operational life until PCRSS is decommissioned and properly disposed of.
3.4.1.3.2 The contractor shall ensure the PCRSS, PCRSS Test Bed, and the PC Weather system will provide information required to safely operate and maintain the system while under contract. The types of documentation includes but is not limited to Operation Manuals for COTS items, System O&S Manuals, Safety Procedures, Security Procedures, Configuration Diagrams, Configuration Management Documentation, and RMF Documentation.
3.4.1.3.3 The contractor shall secure the PCRSS and PC Weather System via MDA Physical security and Cybersecurity regulations and policies after every visit before the contractor team leaves the ship to return home.
3.4.1.3.4 The contractor shall secure the PCRSS Test Bed via MDA Physical security and Cybersecurity regulations and policies.
3.4.1.4 The contractor shall provide timely repair of repairable items within a specified DISC system. The contractor shall ensure the repair completion is such that the instrumentation system is calibrated and returned to an operational status. The contractor shall be responsible for troubleshooting, diagnosis, repair calibration or installation, and post-installation testing and documented results of both the repairable and the complete instrumentation system or subsystem. The contractor shall notify the COR of issues related to parts or technology obsolescence.
3.4.1.5 The contractor shall perform engineering and re-engineering of instrumentation systems as a result of parts or technology obsolescence, new requirements, and new technologies. The contractor is encouraged to suggest new solutions to the Government regarding parts obsolescence. The contractor shall re-design or upgrade hardware, software, firmware, wiring, and interfaces, at any or all of the component, unit, or system levels. In addition, the contractor shall provide associated technical drawings and documentation. The contractor shall integrate and test the affected systems for requirements compliance. The government shall provide requirements compliance documentation to the contactor.
3.4.1.6 The contractor shall analyze and report on the performance and quality of PCRSS, PCRSS Test Bed, and…
This is the start of the file's text. The full file is on GovTribe.
File details come from the government source that posted it. Updated .