Amendment_1_Answers_to_Vendor_Questions.docx

M6700119Q1241

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

SUPPLIES OR SERVICES AND PRICES

Global Changes

CLIN 0001 -- CLIN 2001

The CLIN extended description has changed from:

Contractor shall provide Cybersecurity engineering support to assist the ICS/OT ISSM with the review and integration of Camp Lejeune's Wastewater/Water Treatment Plant and High Voltage SCADA Systems into the Marine Corps Compliance and Authorization Support Tool (MCCAST) package for the purpose of maintaining an Authority to Operate (ATO) in accordance with the Performance Statement of Work.

To:

Contractor shall provide Cybersecurity engineering support to assist the ICS/OT ISSM with the review and integration of Camp Lejeune's Wastewater/Water Treatment Plant and High Voltage SCADA Systems into the Marine Corps Compliance and Authorization Support Tool (MCCAST) package for the purpose of maintaining an Authority to Operate (ATO) in accordance with the Performance Statement of Work.

The following have been added by full text:

QUESTIONS & RESPONSES

Q1. I do not see page limits listed. Will you supply this information?

A1. There is no page limit.

Q2. Who is the incumbent?

A2. There is no incumbent. This is a new requirement.

Q3. What is the incumbent's period of performance?

A3. There is no incumbent. This is a new requirement.

Q4. What is the incumbent contract $ value?

A4. There is no incumbent. This is a new requirement.

Q5. How are these services currently being performed? Under contract? In-house?

A5. There is no incumbent. This is a new requirement.

Q6. Are there any font restrictions for the content?

A6. No. We strongly recommend that the Technical Volume should be specific and complete. In the Technical Volume, address your proposed approach to meeting the minimum performance or capability requirements of each technical Subfactor. Marketing presentations are not wanted and will not be evaluated. Hard and compelling evidence of capabilities is required to receive credit for evaluation factors. Provide as specifically as possible, the actual methodology you would use for accomplishing and satisfying the requirements. Your responses will be evaluated against 52.212-2, Evaluation Factors.

Q7. We assume each evaluated factor should be in a separate file. Is that correct?

A7. Yes, see A10 below.

Q8. We assume the Government desires the content in MS Office and/or Adobe Portable Document Format (pdf). Is that correct?

A8. Yes

Q9. We assume the Government desires direct labor hours and fully burdened rates data for each CLIN and a total for each CLIN in an Excel workbook. Is that correct?

A9. Please follow the instructions in 52.212-2 for submission and the CLIN structure for pricing. The Government will contact you if more information needed.

Q10. The solicitation provides no guidance on the structure of the proposal which would normally be contained in the Section L or ITO. Can the government provide instructions on what volumes are required, the structure and content requirements of each volume, and page count limitations for the technical volume?

A10. You should have three volumes. Technical, Past Performance and Pricing. Refer to 52.212-2 EVALUATION--COMMERCIAL ITEMS on page 17. We strongly recommend that the Technical Volume should be specific and complete. In the Technical Volume, address your proposed approach to meeting the minimum performance or capability requirements of each technical Subfactor. Marketing presentations are not wanted and will not be evaluated. Hard and compelling evidence of capabilities is required to receive credit for evaluation factors. Provide as specifically as possible, the actual methodology you would use for accomplishing and satisfying the requirements. Your responses will be evaluated against 52.212-2, Evaluation Factors.

Q11. Can you please tell us if any security clearance is required for this opportunity? If yes, what type of security clearance is required?

A11. All contractor personnel must have for a minimum elgibity for a Secret clearance. Refer to para 6.3 of PWS.

Q12. Section 15.0 Performance Requirements, Maintaining Required Staffing Levels. What are the minimum required staffing levels? PWS Section 8 does not define a quantity.

A12. Refer to PWS 6.4.1 Key Billets and 6.4.2 Non-Key Billets. Vendors are required to determine staffing level in accordance with Performance Work Statement and submit their recommended staffing plan in accordance with Technical Sub Factor B (Refer to Basis of Award in RFQ).

We believe that the contractors are and should be the experts and know what they have on their staffs to fill the billets (number of personal and Billets to fill) set forth in the PWS. The information we can provide is with respect to the number of facilities that will be covered under this contract. We currently have 700 (plus) building control systems that will be integrated and communicating, 150 to 200 virtualized servers hosted at a data center, an ICS/OT Test Bed (covering water/wastewater/high voltage/ and building control systems), 167 Lift Stations, 57 Well Stations, 2 Booster Stations, 14 Pools, 17 elevated water tanks, 4 Water Treatment Plants (WTP), 1 Wastewater Treatment Plant (WWTP), 5 Electrical Sub Stations, and 2 Delivery points.

The following has been added to the PWS

6.4 Level of Effort. For purposes of estimation, the anticipated level of effort associated with this contract will require six (6) full time support personnel as follows:

Four (4) Non-Key Billets

Q13. Are secret clearances required for all staff? If required for only some, please identify the positions requiring and not-requiring a clearance.

A13. In accordance with Paragraph 6.3 of the PWS Secret clearance elgibility is required for all positions.

“A Secret Security Eligibility is required for this position. The individual contractor must be able to have a favorable adjudicated T3 background investigation. The contractor is responsible to ensure the personnel furnish documentation reflecting favorable adjudication of background investigations for all personnel supporting the Industrial Control System (ICS). The ICS resides on the Marine Corps MRAN and work performed on this system requires occasional access to workstations located in the MITSC area located in Building 24. The MITSC area has restricted access and the work performed on the ICS in this area by the contractor is designated Low Risk Non-Critical Sensitive. This designation requires a national security background investigation designated as T3. Final DD254 will be included separately via email.”

Also See A19.

Q14. Can staff be "in process" for obtaining their security clearance while performing on the contract?

A14. See above A13 and A19.

Q15. Are resumes only required for the 2 "key billets" identified in Section 6.4.1?

A15. No. Resumes are required for all positions/personnel.

Q16. Section 6.4.2 identifies "the other team members". Since there is no historical or future workload in the solicitation, there is no way to estimate the required manning levels (i.e., FTEs/yr) necessary to perform. How many FTEs, in addition to the 2 "key billets" would the Government consider the minimum acceptable staffing level?

A16. Vendors are required to determine staffing level in accordance with Performance Work Statement and submit their recommended staffing plan in accordance with Technical Sub Factor B (Refer to Basis of Award in RFQ). We believe that the contractors are and should be the experts and know what they have on their staffs to fill the billets (number of personal and Billets to fill) set forth in the PWS. The information we can provide is with respect to the number of facilities that will be covered under this contract. We currently have 700 (plus) building control systems that will be integrated and communicating, 150 to 200 virtualized servers hosted at a data center, an ICS/OT Test Bed (covering water/wastewater/high voltage/ and building control systems), 167 Lift Stations, 57 Well Stations, 2 Booster Stations, 14 Pools, 17 elevated water tanks, 4 Water Treatment Plants (WTP), 1 Wastewater Treatment Plant (WWTP), 5 Electrical Sub Stations, and 2 Delivery points.

The following has been added to the PWS

6.4 Level of Effort. For purposes of estimation, the anticipated level of effort associated with this contract will require six (6) full time support personnel as follows:

Four Non-Key Billets

Q17. Is there any travel associated with this contract? If so, please describe.

A17. Please refer to Para 6.6 of PWS. Travel is not authorized.

Q18. Are any formal certifications required for any of the staff? If so, please describe.

A18. Please refer to Para 6.4.1. and 6.4.2 of the PWS.

Q19. "All of the positions state: Active or eligible for SECRET clearance. “Please define "eligible".

A19. To clarify, "eligibility" is a term that is used to describe what clearance level they currently have, not if they are qualified. If someone has a SECRET clearance eligibility determination, meaning the DOD CAF has already adjudicated him favorably for a SECRET clearance.

Quoter shall must have candidates that already has Interim SECRET eligibility as not having a clearance would create an operational impact (would have to sanitize every time the employee came through G-6 spaces that safeguard classified).

Q20. Does this mean we can start people who do not have a clearance just as long as we think they may be able to get a Secret clearance eventually?

A20. No. See A13 and A19

Q21 . “A Secret Security Eligibility is required for this position. The individual contractor must be able to have a favorable adjudicated T3 background investigation. The contractor is responsible to ensure the personnel furnish documentation reflecting favorable adjudication of background investigations for all personnel supporting the Industrial Control System (ICS). The ICS resides on the Marine Corps MRAN and work performed on this system requires occasional access to workstations located in the MITSC area located in Building 24. The MITSC area has restricted access and the work performed on the ICS in this area by the contractor is designated Low Risk Non-Critical Sensitive. This designation requires a national security background investigation designated as T3. Final DD254 will be included separately via email.”

Does this mean we as a company has to have a tier 3 FCL or just the employee must have the clearance?

A21. Please refer to DD254 included in RFQ package for the required FLC.

Q22. The solicitation provides no guidance on the structure of the proposal which would normally be contained in the Section L or ITO. Can the government provide instructions on what volumes are required, the structure and content requirements of each volume, and page count limitations for the technical volume?

A22. Three volumes. Technical, Past Performance and Price. Please follow the instructions on page 17, 52.212-2 EVALUATION--COMMERCIAL ITEMS and provide adequate information as requested for evaluation. We do not have format and page count restrictions however we strongly recommend that the Technical Volume should be specific and complete. In the Technical Volume, address your proposed approach to meeting the minimum performance or capability requirements of each technical Subfactor. Marketing presentations are not wanted and will not be evaluated. Hard and compelling evidence of capabilities is required to receive credit for evaluation factors. Provide as specifically as possible, the actual methodology you would use for accomplishing and satisfying the requirements. Your responses will be evaluated against 52.212-2, Evaluation Factors.

Q23. I am reaching out in regard to the Cyber Security Support Services Opportunity with USMC. I noticed the solicitation notice has been released on FBO. However, I am curious as to why a response due date has not been established? Would you please respond with clarification at your earliest convenience?

A23. Please refer to SF-1449 (RFQ) Block 8. The information in FBO has been updated

Q24. Page 18 of 50. The Government will not consider nor evaluate past performance that concluded more than three years from the original solicitation release date. Relevant contracts include IT Services of similar size and scope to the requirements listed in the Statement of Work (SOW). Only the following entities will be used in the past performance evaluation: (a) the prime contractor; and (b) entities that perform at least 30% of the proposed total price for the contract, also referred to as principal subcontractors and other principal entities.

Will the government require past performance references from the Prime Contractor or will past performances references strictly from Subcontractors be allowed?

A24. Past Performances as prime or principal subcontractors will used for evaluation as described in RFQ.

Q25. On page 36/50, 52.212-5 Contract Terms and Conditions Required to Implement Statutes or Executive Orders –Commercial Items (May 2019), the Government has checked the applicability of FAR 52.219-14 (Deviation 2018-O0018), Limitations on Subcontracting (JAN 2017)(15 U.S.C. 657f). This FAR citation on Limitations on Subcontracting does not reflect the updated final rule adopted by the Small Business Administration on June 30, 2016, which is codified at 15 U.S.C. 657s, allowing partial or full set-aside contracts to be evaluated based on the percentage of the overall award amount that a prime contractor spends on its subcontractors. More significantly, the new rule excludes from the limitations on subcontracting calculation, the percentage of the award amount that the prime contractor spends on subcontractors that are similarly situated entities.

Will the Government apply the new language for Limitations on Subcontracting set forth at 15 U.S.C. 657s?

A25. Deviation 2018-O0018 which deals with Micro-purchase Threshold, Simplified Acq Threshold, & Emergency Procurement Authority.

Subcontracting the relevant Deviation is 2019-O0003 "Limitations on Subcontracting for Small Business". It is included in the RFQ.

Q26. On page 5/50, Due to the continuous nature of this requirement, the government requires the contractor to maintain the proposed workforce at 100% manning. As such, the contractor is expected to develop a manning plan to fill any planned or unplanned vacancies on an expedited basis.

On Page 17/50 Evaluation Factors: (1) Technical Capability to include Management Approach, Hiring, Staffing Plan with Resumes, and ability to provide personnel on the first day of the period of performance.

Will the Government provide historical LOE of Non-Key Billets so offerors have insight as to number of personnel required to transition and be fully staffed day 1.

A26. Vendors are required to determine staffing level in accordance with Performance Work Statement and submit their recommended staffing plan in accordance with Technical Sub Factor B (Refer to Basis of Award in RFQ). We believe that the contractors are and should be the experts and know what they have on their staffs to fill the billets (number of personal and Billets to fill) set forth in the PWS. The information we can provide is with respect to the number of facilities that will be covered under this contract. We currently have 700 (plus) building control systems that will be integrated and communicating, 150 to 200 virtualized servers hosted at a data center, an ICS/OT Test Bed (covering water/wastewater/high voltage/ and building control systems), 167 Lift Stations, 57 Well Stations, 2 Booster Stations, 14 Pools, 17 elevated water tanks, 4 Water Treatment Plants (WTP), 1 Wastewater Treatment Plant (WWTP), 5 Electrical Sub Stations, and 2 Delivery points.

The following has been added to the PWS

6.4 Level of Effort. For purposes of estimation, the anticipated level of effort associated with this contract will require six (6) full time support personnel as follows:

Four Non-Key Billets

Q27. Upon reviewing the RFP for M6700119Q1241 would you be able to answer the following question?

Since this is being procured under the Simplified Acquisition Process, which I believe the most you can buy through SAP is $250,000. Is it your intent that the total base + 2 contract ceiling would be $250,000 or will it be $250K per year?

A27. This procurement is being conducted in accordance with FAR 13.5.

Q28. How many PPQs will be required from prime and sub-contractor individually?

A28. Minimum of one relevant contract.

Q29. Reference: RFQ, SF 1449, Block 27, pg. 1 incorporates FAR 52.212-1. FAR 52.212-1 -- Instructions to Offerors -- Commercial Items. (DEVIATION 2018-O0018) (b) (8) requires a completed copy of the representations and certifications at FAR 52.212-3 (see FAR 52.212-3(b) for those representations and certifications that the offeror shall complete electronically);

Question: Request that quoters who have completed the Representations and Certifications in the System for Award Management (SAM) do not need to submit a separate copy. Instead, they shall include a statement stating their representations and certifications are up to date in SAM.

A29. Yes.

Q30. Reference: RFQ, SF 1449, Block 28, pg. 1 states – Contractor is required to sign this document and return 2 copies to the issuing office. 52.212-2 EVALUATION--COMMERCIAL ITEMS (OCT 2014), pg. 17, fifth paragraph, states - Vendor may send quotes, via e-mail, to Tracy.Fulks@usmc.mil

Are we correct to understand that with email submission only one copy of a signed SF 1449 and one copy of proposal volumes is required?

A30. Yes

Q31. Reference: RFQ, SF 1449 - CONTINUATION SHEET, Item No. 0001, 1001, and 2001, pgs. 3 & 4 have content in the tables that states - Camp Lejeune's Request clarification of this text

A31. It is “Camp Lejeune’s” The RFQ has been corrected.

Q32. Reference: 52.212-2 EVALUATION--COMMERCIAL ITEMS (OCT 2014), pg. 17, ninth paragraph states - Evaluation Factors: (1) Technical Capability to include Management Approach, Hiring, Staffing Plan with Resumes, and ability to provide personnel on the first day of the period of performance. 2.0 PERIOD OF PERFORMANCE, pg. 5 states the period of performance start date is 1 September 2019.

Request the Government provide the anticipated contract award date so quoters can conduct hiring and transition planning. Also request that there be a minimum of 15 working days between contract award and start date to allow for onboarding of new hires.

A32. You need to indicate your own terms and conditions in order to begin performing on 01 Sepetember 2019 in your proposal.

Q33. Reference: 52.212-2 EVALUATION--COMMERCIAL ITEMS (OCT 2014), pg. 17 does not provide any page limitations Request the Government consider the following page limitations to enable quoters to completely and effectively respond to RFQ requirements:

Cover Letter (includes SF 1449 and Representations and Certifications) – N/A Volume 1 Technical Capability - 35 pages Volume 2 Past Performance - 10 pages Volume 3 Price - N/A

A33.There is no page limitations, RFQ will remain the same.

Q34. 52.212-2 EVALUATION--COMMERCIAL ITEMS (OCT 2014), pg. 17 does not provide any page limitations.

Request the Government consider that following be omitted from page limitations to enable quoters to completely and effectively response to RFQ requirements:

Cover pages, tables of content, and other front matter Resumes (individual resumes shall not exceed three (3) pages, letters of commitment, copies of certifications/licenses and shall be provided as Appendix.

Supplemental Information such as foldouts, charts, figures, and tables; resumes, certifications/licenses, and letters of commitment and shall be provided as Appendix.

A34. No changes, RFQ will remain the same.

Q35. Reference: 52.212-2 EVALUATION--COMMERCIAL ITEMS (OCT 2014), pg. 17 does not provide any page limitations.

Request the Government consider including the following format requirements to enable quoters to completely and effectively response to RFQ requirements:

8.5 x 11 inch paper Single-spaced typed lines 1 inch margins on all sides No smaller than 12-point font, Times New Roman •No smaller than 10-point font, Times New Roman for tables, call-out boxes, focus boxes, and theme statement boxes.

No smaller than 8-point font, Arial or Times New Roman for graphics and drawings and graphic action captions Font size does not apply to headers and footers but must be reasonable and easily readable.

Graphs and drawings must be clear and legible No hyperlinks are permitted Photographs are permitted when used in a graphic Electronic documents shall be submitted using Microsoft Office 97 through 2016 or Adobe PDF.

Each volume of the quote shall be clearly marked as to the volume number, the solicitation number, and the Contractor’s name.

Pages shall be numbered consecutively within each volume

A35. No changes, RFQ will remain the same.

Q36. Reference: 52.212-2 EVALUATION--COMMERCIAL ITEMS (OCT 2014), pg. 17, fifth paragraph states - The technical quote is to be submitted with vendor’s identifying information ONLY on the cover page of the technical quote. Failure to follow this instruction may result in rejection of the quote.

Question: Does this mean quoters shall not include company name or logo in the headers or footers of the volume? Request the Government clarify this instruction.

A36. Yes, that’s correct.

Q37. 52.212-2 EVALUATION--COMMERCIAL ITEMS (OCT 2014), pg. 17, fifth paragraph states - The technical quote is to be submitted with vendor’s identifying information ONLY on the cover page of the technical quote. Failure to follow this instruction may result in rejection of the quote.

Does this mean quoters are not able to refer to themselves by company name anywhere in the body of the proposal, e.g., Company Name has a DCAA approved accounting system or the company name in employee resumes. Request the Government clarify this instruction.

A37. No company Name or Logo in entire technical proposal.

Q38. Reference: 52.212-2 EVALUATION--COMMERCIAL ITEMS (OCT 2014), pg. 18, Sub factor B states - Address all functional areas, detailing clear lines of authority and roles and responsibilities of the program manager, other key personnel. The Program Manager is not listed as key billet in Section 6.4.1.

Are we correct to understand the program manager is not key personnel and that this sentence should read - Address all functional areas, detailing clear lines of authority and roles and responsibilities of the program manager and the two identified key personnel?

A38. Staffing designation, titles and planning are vendor’s responsibility.

Q39. Reference: 52.212-2 EVALUATION--COMMERCIAL ITEMS (OCT 2014), pg. 18, Sub factor B states - Address all functional areas, detailing clear lines of authority and roles and responsibilities of the program manager, other key personnel. The term functional areas is not defined in the RFQ.

Request the Government provide a definition of functional areas.

A39. Divisions, departments involved in performing these services.

Q40 . Reference: 52.212-2 EVALUATION--COMMERCIAL ITEMS (OCT 2014), pg. 18, Sub factor B states - Describe how you will lead, manage, and maintain visibility, quality, and control over all functional areas and levels. The term functional areas and levels are not defined in the RFQ.

Request the Government provide a definition of functional areas and levels.

A40. It means your organizational structure (lines of communication) to perform these services.

Q41. While the PWS contains good information on the kind of support needed and the training, certification, and experience requirements of personnel, it does not contain information on the workload. Can the government specify, for each item in PWS Sections 4 and 5, a quantitative value that will give bidders the "how much" answer to go with the "what kind" info already provided? This will allow us to correctly calculate staffing requirements for the overall requirements. If quantitative data is not available or not known, the government could just indicate how many personnel of each of the labor categories shown in the PWS it desires.

A41. Vendors are required to determine staffing level in accordance with Performance Work Statement and submit their recommended staffing plan in accordance with Technical Sub Factor B (Refer to Basis of Award in RFQ). We believe that the contractors are and should be the experts and know what they have on their staffs to fill the billets (number of personal and Billets to fill) set forth in the PWS. The information we can provide is with respect to the number of facilities that will be covered under this contract. We currently have 700 (plus) building control systems that will be integrated and communicating, 150 to 200 virtualized servers hosted at a data center, an ICS/OT Test Bed (covering water/wastewater/high voltage/ and building control systems), 167 Lift Stations, 57 Well Stations, 2 Booster Stations, 14 Pools, 17 elevated water tanks, 4 Water Treatment Plants (WTP), 1 Wastewater Treatment Plant (WWTP), 5 Electrical Sub Stations, and 2 Delivery points.

The following has been added to the PWS

6.4 Level of Effort. For purposes of estimation, the anticipated level of effort associated with this contract will require six (6) full time support personnel as follows:

Four Non-Key Billets

Q42 The CLINS provide some language not found in the PWS that seems to limit the supporting work to wastewater treatment and high voltage systems. These limits do not appear in the PWS. There are no sizing parameters included in the RFP that would enable contractors to complete a reasonable basis of effort for a firm fixed price effort. Could the government please provide effort sizing information to enable accurate completion of basis of estimate such as the number of:

Q42a SCADA and SCADA-like systems (JACE, NxE, etc.) that require type accreditation packages and the number that need ATO support.

A42a We have Water SCADA, Wastewater SCADA, and High voltage SCADA that will require ATO support.

Q42b Number of systems that require inspection

A42b We have over 900 systems that will require inspection.

Q42c Amount of reverse engineering required for field controllers A42c Unknown at this time.

Q42d Number of expected ICS events A42d Unknown at this time.

Q42e Number of building commissionings, re-comissionings A42e Contractor will need to plan for over 100 buildings/facilities.

Q42f Amount of support required by Camp Lejeune Public Works Operations, Design Branch, and RIOCC A42f When needed.

Q42g How many meetings are expected in addition not the monthly meetings A42g Contractor needs to plan for at least one or two meetings weekly.

Q42h How many patches and updates per performance period" A42h We estimate the number of patches or upgrades per month will be around 200 to 300.

The following have been modified:

PERFORMANCE WORK STATEMENT

PUBLIC WORKS DIVISION

INDUSTRIAL CONTROLS SYSTEMS (ICS) SUPPORT SERVICES

1.0 INTRODUCTION

The G-F Dept., Public Works Division (PWD), has a requirement for non-personal support services to assist the PWD Industrial Controls Systems (ICS) program in the operation, management, cybersecurity, optimization, and maintaining accreditation of the ICS including the information technology (IT) assets required for these tasks.

2.0 PERIOD OF PERFORMANCE

The period of performance is a base year, 01 September 2019-31 August 2020 plus two 12-month option periods.

3.0 PLACE OF PERFORMANCE

Marine Corps Base Camp Lejeune, NC, other government satellite activities, and contractor facilities

4.0 CONTRACTOR RESPONSIBILITIES

The Contractor shall manage the total work effort associated with ICS cybersecurity and management support services and all other functions required for satisfactory and timely completion of these services. The Contractor shall provide personnel with the necessary technical and management expertise, training, and certifications to ensure the performance of the work in accordance with this statement of work. The contractor shall also provide Cybersecurity engineering support to assist the ICS/OT ISSM with the review and integration of Camp Lejeune's Wastewater/Water Treatment Plant and High Voltage SCADA Systems into the Marine Corps Compliance and Authorization Support Tool (MCCAST) Package for the purpose of maintaining an Authority to Operate (ATO).

Due to the continuous nature of this requirement, the government requires the contractor to maintain the proposed workforce at 100% manning. As such, the contractor is expected to develop a manning plan to fill any planned or unplanned vacancies on an expedited basis. Any vacancies that occur in the contractor’s proposed manning should be filled within 30 calendar days. Any manning vacancies that remain unfilled after 30 days will have an invoice offset calculated using the total proposed daily cost (including profit and overhead) for the position left vacant (based on a 30 day month) times the number of vacant days in the billing cycle plus an additional 10% of the cost calculated.

The contractor shall provide properly equipped personnel to complete the requirements below.

4.1 Provide Cybersecurity and USMC Assessment and Authorization (A&A) expertise including:

· Provide MCCAST 2.0 support in the creation and management of the “Type” accreditation package for Industrial Control Systems/Operational Technology (ICS/OT) in the USMC.

· Provide technical assistance with the Risk Management Framework (RMF) for DoD Information Technology (IT) and the MCCAST 2.0 for maintaining Authorization to Operate (ATO) for ICS. Information available at Http://www.dtic.mil/whs/directives/corres/pdf/851001_2014.pdf .

· Provide expertise with all facets of the Certification and Accreditation / Assessment & Authorization (C&A/A&A) process to include supporting the Designating Approval Authority/Authorizing Official (DAA/AO), Certifying Authority (CA), and guiding customers thorough the A&A process.

· Provide expertise in the USMC A&A process to include MCCAST 2.0, RMF, Defense-in-Depth Functional Implementation Architecture (DFIA), and CNSSI 1253.

· Develop and update policies required for the PWD ICS/OT accreditation package.

· Develop and maintain all required procedures for the cybersecurity of all hardware and software required for accreditation and continued operations.

4.2 Inspect and verify functionality and performance of building controls installations including:

· Verify all details of the installation to meet project requirements, Direct Digital Control (DDC) specifications and manufacturer’s recommendations and requirements. Communicate deficiencies and corrective actions to all necessary parties.

· Provide the ability to program and reverse engineer field controllers of most major control’s manufacturers at multiple software/firmware revisions.

· Provide support for JACE and NxE Supervisory controllers including the ability to program both types at multiple software/firmware revisions.

· Provide personnel with knowledge of electrical and mechanical trades and code requirements.

· Provide personnel with a thorough understanding of the federal government 23-09-23.13 DDC Specifications, an ability to interpret and explain all sections of the specification, knowledgeable of installation and operation requirements, and understanding of when to recommend modifications to the specifications.

· Assist in troubleshooting and investigation of ICS-related events, equipment issues, or system performance issues.

· Assist in commissioning and re-commissioning of existing and new facilities.

· Directly support Camp Lejeune Public Works Operations, Design Branch, ROICC office and NAVFAC as required.

· Provide personnel with the ability to write repair scopes, sequence of operations, and requirements for repair of building controls systems and who can assist with managing projects, coordination of the trades, and all that is involved in executing the work.

· Provide personnel with knowledge of building controls performance verification testing, commissioning procedures, performance indexing and analytics used to verify and ensure specifications and requirements are met.

· Attend and prepare necessary materials for PWD’s Monthly Energy Meetings and other periodic ICS related meetings as required.

4.3 Provide expertise in CLNC secure networking architecture and design including:

· Provide expertise in the installation and set-up of multiple Nutanix Hyper-Converged Technology Platforms for the USMC.

· Maintain the master ICS Network Data spreadsheet, which includes BBMD addressing, network IP assignments, and BACnet instance numbers.

· Support the configuration management of the accreditation package including the Change Control Board (CCB).

4.4 Maintain the ICS/OT test bed including:

· Verify the integrity of all new patches and updates and test them in the testbed prior to updating the operational equipment.

· Maintain the Nutanix Hyperconverged Virtualized environment.

4.5 Support Data Center operations including:

· Host Based Security System (HBSS) and Common Access Card (CAC) integration of the servers

· Provide configuration/patch management of all PWD ICS/OT and IT Microsoft Windows components

· Manage administration and security of SQL server

· Process automation with PowerShell

5.0 DELIVERABLES

5.1. Develop and deliver a bi-monthly ICS Status Report. The ICS Status Report shall include details on the work performed during the period of performance such as: number of buildings integrated into ICS, status of on-going integration efforts, commissioning and re-commissioning efforts, load shedding efforts, ICS software and technological news, necessary training, and other pertinent information.

5.2. Provide reports and alarms automatically generated through the ICS and monthly reports of identified issues/corrections through the commissioning and re-commissioning process to PWD Operations and Design staff. The support personnel shall assist in the development of work request and project documentation and assist in the identification of ICS/HVAC maintenance priorities from these reports.

5.3. Steward and provide their expertise/ assistance with system integration during the design process, prior to Beneficial Occupancy Date (BOD), and during the BOD process.

5.4. Test and inspect the building DDC/ HVAC system for proper interoperability of data sharing, alarm and event management, trending, scheduling, and device naming into the ICS system. Provide the government a list of discrepancies for corrective action required by installing contractor prior to BOD.

6.0 PERSONNEL QUALIFICATIONS AND CERTIFICATIONS FOR CONTRACTOR SUPPORT PERSONNEL:

6.1 The contractor shall be capable of communicating (oral and written) fluently in English.

6.2 Contractor employees that operate motor vehicles shall maintain a valid state driver’s license with all class and commodity endorsements required by Public Law 99-570 and state law for the type of vehicle operated.

6.3 A Secret Security Eligibility is required for this position. The individual contractor must be able to have a favorable adjudicated T3 background investigation. The contractor is responsible to ensure the personnel furnish documentation reflecting favorable adjudication of background investigations for all personnel supporting the Industrial Control System (ICS). The ICS resides on the Marine Corps MRAN and work performed on this system requires occasional access to workstations located in the MITSC area located in Building 24. The MITSC area has restricted access and the work performed on the ICS in this area by the contractor is designated Low Risk Non-Critical Sensitive. This designation requires a national security background investigation designated as T3. Final DD254 will be included separately via email.

6.4 Level of Effort. For purposes of estimation, the anticipated level of effort associated with this contract will require six (6) full time support personnel as follows:

Four Non-Key Billets

6.4.1 Personnel minimum education/experience/credentials/qualifications

6.4.2 Key Billets:

ICS/OT Inspector/Integrator

· Experience installing Metasys on servers and building graphics/trends/alarms/scheduling.

· Experience in ICS control systems -Metasys, Niagara AX platform, Alerton, Honeywell, Trend, KMC, and American Automatrix and Loytec.

· Experience in BACnet/MSTP, BACnet over IP, N2 and LON.

· Experience in preforming software security updates, system patches, software patches, and version upgrades on Metasys, Niagara, Itron, and Honeywell software products.

· Experience installing software and maintaining Itron Fixed-Network meter data collection systems.

Cybersecurity Architect

· Master’s Degree or 15 years C&A/A&A experience.

· Certified USMC Validator.

· Expert in the USMC A&A process (USMC/DoN/DoD Cybersecurity RMF/A&A experience) to include MCCAST 2.0, RMF, DFIA, and CNSSI 1253.

· CNSS 4011, 4012, 4015, 4016A (Required). IAM Level 3 (CISSP Desired),

· Experience creating/managing POAMs.

· Experience with DISA STIGs.

· Experience interpreting/implementing standards and policies in accordance with NIST 800-53/DoDI 8510.01

· Experience with vulnerability/risk analysis.

· Experience conducting compliance assessments/validations as well as conceptualizing and implementing security systems and architectures.

· Professional Certifications (Required):

· CompTIA Security+ or

· CompTIA CASP or

· Certified Information System Security Professional (CISSP)

· ICS CERT Training (Desired):

· Introduction to Control Systems Cybersecurity (101)

· Intermediate Cybersecurity for Industrial Control Systems (201)

· Intermediate Cybersecurity for Industrial Control Systems (202) - ICS Cybersecurity (301)

6.4.3 Non-Key Billets. Collectively, the other team (non-key billets) members will meet the following requirements:

· Experience in the use of SQL and Microsoft Sever software (current versions).

· Experienced in the use and administration of Nutanix Hyperconverged virtualized environments.

· Experience in Marine Corps Certification and Accreditation Support Tool (MCCAST V2).

· Electronic and electrical background experience is a plus.

· Knowledgeable of electrical and mechanical trades and code requirements.

· Knowledge of TCP/IP, information security/authorization profiles, or security administration of Unix or Windows network/systems

· Experience with HBSS

· ICS CERT Cybersecurity Training

0. The contractor shall act and dress professionally at all times. Professional dress is defined as clothing that is neat, clean, and in good repair. Clothing that exposes cleavage, midriff or undergarments is not professional dress.

0. Contract services require travel throughout Camp Lejeune and Marine Corps Air Station, New River, NC and their satellite activities located within 50 miles of the Camp Lejeune main gate. Travel between the different locations is considered inherent to the support services detailed in the PWS and will not be reimbursed.

0. The Contractor shall be responsible for obtaining all necessary licenses and certifications and for complying with all applicable Federal, State, and local laws. The Contractor shall maintain updated copies of any applicable licenses and certifications for all employees and make them available to the Government upon request.

0. Environmental, Safety, and Occupational Health (ESOH)

0. The Contractor shall formulate and maintain a written safety and health plan and make it available to the Government upon request. The written plan shall include the details of the Contractor’s responsibilities, method of program implementation, and how hazards and deficiencies shall be identified and corrected. It shall detail contractor personnel responsibilities for: protection of Government property and safety of others, personnel responsibilities for reporting all mishaps, and establish procedures for reporting to correcting unsafe conditions, hazards, or practices.

0. The Contractor shall notify the Contracting Officer Representative immediately after the occurrence of all accidents and incidents resulting in either personal injury, loss of life, impact to the environment or property damage to a government facility or equipment. The contractor shall submit a completed copy of and supplemental information within four (4) working days of the accident or incidents.

0. The Contractor shall comply with all federal, state, and local environmental laws.

0. The Contractor shall participate in emergency and recall notification and personnel accountability exercises. The Contractor shall establish emergency notification and recall and personnel accountability procedures in accordance with DoDI 3001.02, Personnel Accountability in Conjunction with Natural or Manmade Disasters, and test those procedures twice a year when directed.

0. The Homeland Security Presidential Directive 12 (HSPD-12) dated 27 August 2004 has established criteria for contractors who require a Common Access Card (CAC) for either physical access to a U.S. Government controlled installation or access to government information technology (IT) systems. The Government requires Personnel Security Investigations (PSI) to establish that applicants or incumbents either employed by the Government or working for the Government under contract are suitable for the job and/or are eligible for a public trust position.

7.0 Non-personal Service Statement. Contractor employees performing services under this order will be controlled, directed, and supervised at all times by management personnel of the contractor. Contractor management will ensure that employees properly comply with the performance work standards outlined in the statement of work. Contractor employees will perform their duties independent of, and without the supervision of, any Government official or other Defense Contractor. The purchases, duties, and responsibilities set forth in the purchase order may not be interpreted or implemented in any manner that results in any contractor employee creating or modifying Federal policy, obligating the appropriated funds of the United States Government, overseeing the work of Federal employees, providing direct personal services to any Federal employee, or otherwise violating the prohibitions set forth in Parts 7.5 and 37.1 of the Federal Acquisition Regulation (FAR). The Government will control access to the facility and will perform the inspection and acceptance of the completed work

8.0 The Contractor agrees to assign to the contract personnel as required by the RFQ, to fulfill the requirements of the contract. No substitution of personnel shall be made except in accordance with the information specified herein. The Contractor agrees that during the performance period no personnel substitutions will be permitted without approval of the CLNC PWD Technical Representatives (Director, Maintenance Operations, Public Works, G-F, MCI EAST-MCB, Camp Lejeune, NC) unless such substitutions are necessitated by an individual's sudden illness, death or termination of employment. In any of these events, the Contractor shall promptly notify the Contracting Officer’s Representative (COR) and provide the information required by the following paragraphs.

If the personnel, for whatever reason, become unavailable for work under the contract for a continuous period exceeding 14 working days the Contractor shall propose a substitution of such personnel. All proposed substitutions shall be submitted, in writing, to the COR within 15 days of identification of the need for a substitute. Each request shall provide a detailed explanation of the circumstances necessitating the proposed substitution, a complete resume for the proposed substitute and any other information required by the Contracting Officer to approve or disapprove the proposed substitution. All proposed substitutes shall have qualifications that are equal to or higher than the qualifications of the person being replaced.

The COR shall evaluate the requests for substitution and promptly notify the Contractor, in writing, of whether the request is approved or disapproved. If the COR determines that suitable and timely replacement of personnel who have been reassigned, terminated or have otherwise become unavailable to perform under this purchase order is not reasonably forthcoming or that the resultant reduction of productive effort would impair the successful completion of the contract, the contract may be terminated by the Contracting Officer for cause or for the convenience of the Government, as appropriate. Alternatively, at the Contracting Officer's discretion, if the Contracting Officer finds the Contractor to be at fault for the condition, he may equitably adjust (downward) the contract price to compensate the Government for any delay, loss or damage as a result of the Contractor's action.

9.0 CONTRACTOR’S UNAUTHORIZED WORK PERFORMANCE

The contractor shall not perform work that deviates from contract requirements and specifications. If the contractor deviates from contract requirements and specifications without approval of the CONTRACTING OFFICER, such deviation shall be at the risk of the contractor and any cost related thereto shall be borne by the contractor.

10.0 LIABILITY, AUTOMOBILE AND WORKMAN’S COMPENSATION INSURANCE

The contractor shall comply with provisions and requirements as contained herein:

10.1 Required Insurance (IAW FAR 28.306 (b) The contractor shall maintain insurance in the minimum amount specified below and as required by FAR 52.228-5, Insurance – Work on a Government Installation”, at its own expense, procure and thereafter maintain the following kinds of insurance with respect to performance under this contract.

1. Workmen’s Compensation and Employers Liability Insurance as required by law except that if this contract is to be performed in a state which does not require or permit private insurance, then compliance with the statutory or administrative requirements in any such state will be satisfactory. The required Workmen’s Compensation insurance shall extend to cover Employer’s liability for accidental bodily injury or death and for occupational disease with a minimum liability limit of $100,000.

1. General Liability Insurance. Bodily injury liability insurance, in the minimum limits of $100,000 per person and $500,000 per occurrence shall be required on the comprehensive form of the policy.

1. Automobile Liability Insurance. This insurance shall be required on the comprehensive form of the policy and shall provide injury liability and property damage liability covering the operation of all automobiles used in the connection with the performance of the contract. At least the minimum limits of $200,000 per person and $500,000 per occurrence for bodily injury and $20,000 per occurrence for property damage shall be required.

11.0 CERTIFICATE OF INSURANCE REQUIRED

In accordance with the clause entitled “Insurance-Work on a Government Installation” (FAR 52.228-5), the contractor shall furnish to the Contracting Officer, a certificate or written statement of insurance prior to commencement of work under the contract. The contract number shall be cited on the certificate

12.0 GOVERNMENT RESPONSIBILITIES

The Government activity will provide adequate working space, all equipment as required (e.g., desk, chair, computer, printer, copier, telephone, etc.). utilities, janitorial services, and expendable operating supplies for the duration of this purchase order. The contractor shall maintain the assigned office space and work areas in a neat and orderly manner. Contractor shall not remove any government-furnished equipment or supplies from the Government compound without the express written permission. The Government will provide the contractor with all the information needed for performance including desired formats and samples.

13.0 GOVERNMENT HOURS OF OPERATION

The Government hours of performance are 0730-1600, Monday through Friday. The contractor employees’ hours of performance shall be determined by the contractor.

The Federal holiday observed by the base during this contract’s period of performance is Labor Day, Columbus Day, Veteran’s Day, Thanksgiving Day, Christmas Day, New Year’s Day, Birthday of Martin Luther King, Jr., George Washington’s Birthday, Memorial Day, and Independence Day.

The contractor is responsible for maintaining the acceptable quality level of performance as required by the PRS during vacation periods for support personnel. The determination of how to do that is the Contractor’s responsibility.

If coordination of support services is required the Government point of contact will be with the Contracting Officer’s Representative or the Deputy, Maintenance Operations Officer.

14.0. QUALITY ASSURANCE SURVEILLANCE PLAN. The government shall monitor Contractor(s) performance in accordance with the Quality Assurance Plan (QASP).

14.1 A Quality Assurance Surveillance Plan (QASP) has been developed and will be applied in the administration of the EMCS support service contract to ensure Performance Work Statement (PWS) services meet the Government’s technical requirements for quality and completeness at the cost and within the timeframes established by the contract.

14.2 This plan outlines procedures and guidelines that will be used to monitor the Contractor’s compliance with submitting deliverables and ensure all work is in accordance with the contract requirements. The Contractor is the owner of the quality control process and is responsible for developing, implementing, and modifying procedures that will produce the desired outcomes and result in performance of work within the required standards.