M6740020Q0079-0003 .pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83)

Prescribed by GSA

FAR (48 CFR) 53.243

The purpose of this amendment as follow s;

- Update Performance Work Statement (PWS)

3.2 Training Requirements

- Additional Questions and Answ ers

POC:

Minako Yara, e-mail: minako.yara.ja@usmc.mil

Harold E. Teague, e-mail: harold.teague@usmc.mil

Marine Corps Installations Pacif ic

Marine Corps Base Camp Butler

1. CONTRACT ID CODE PAGE OF PAGES

1 10

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 10-Sep-2020

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X M6740020Q0079

X 9B. DATED (SEE ITEM 11)

14-Aug-2020

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE

RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

10-Sep-2020

CODE

MCIPAC REGIONAL CONTRACTING OFFICE

MCB CAMP S.D. BUTLER

OKINAWA 904-0100

M67400 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

M6740020Q0079

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

The following have been modified:

PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS)

For

III MEF Cyberspace Training

1.0 General

1.1 Introduction and Background. Marine Corps Training and Education Command (TECOM) does not currently offer a cyberspace training solution beyond entry-level, and there is no local training solution or cyberspace ranges available to develop and sustain the complex technical skillsets required for the 17XX Occupational Field, including: Cyberspace Officer (1702 and 1705), Cyberspace Chief (1799), Defensive Cyberspace Operator (1721), Offensive Cyberspace Operator (1711), Defensive Cyberspace Weapons Officer (1720), Offensive Cyberspace

Weapons Officer (1710). This will remain an enduring requirement until TECOM is able to field an alternative training solution to 3rd Marine Expeditionary Force (III MEF) for 2000-level (2000-level training is defined as Individual Training Skills Progression MOJT, Advanced Level Schools (Core Plus Skills) training and above. The government seeks to establish a Firm Fixed Price Requirements Contract with a five year ordering period for an estimated 200 training course over the life of the contract. .

1.2 Scope of Work and Objective. This contract applies to all III MEF 17XXs, as well as 023Xs who support cyberspace operations. III MEF has a requirement to conduct cyberspace operations. Though the exact quantity of training is unknown, III MEF Cyberspace Forces require advanced, commercially available cyberspace training.

1.3 Ordering Period. 21 Sep 2020 through 20 Sep 2025

1.3.1 Federal Holidays. The contractor shall not be required to provide services on federal holidays unless the holiday is particularly specified otherwise in this PWS.

* When a federal holiday falls on Sunday, the following Monday will be observed as a holiday by the U.S.

government. When a federal holiday falls on a Saturday, the preceding Friday will be observed as a holiday

In addition to these federal holidays, if the President of the United States issues an executive order

Federal Holiday Occurrence

New Year’s Day 1 January*

Martin Luther King Jr.’s Birthday 3rd Monday of January

President’s Day 3rd Monday of February

Memorial Day last Monday of May

Independence Day 4 July*

Labor Day 1st Monday of September

Columbus Day 2nd Monday of October

Veterans Day 11 November*

Thanksgiving Day 4th Thursday of November

Christmas Day 25 December* closing the federal government, that date shall also be considered a recognized federal holiday (Reference

Executive Order 11582 of February 11, 1971, and 5 U.S.C. 5546 and 6103(b) and other similar statues insofar as they relate to the pay and leave of employees of the United States).

1.0 Place of Performance. N/A. Contractor shall provide an online platform to conduct training

2.0 Technical Requirements (Description of Work / Tasks): This contract effort is intended to provide Marines within III MEF that conduct cyberspace operations a training venue capable of developing, certifying, and sustaining complex technical skillsets necessary to maintain currency in a rapidly evolving digital ecosystem.

3.1 Course Requirements:

The Contractor shall provide online, self-paced, on-demand courses in order to maximize flexibility and deconfliction with operational requirements.

The Contractor shall include courses with realistic, scenario based training and practical application which assesses the student’s ability to demonstrate proficiency in a virtual computer range environment. The required courses are listed in section 3.2 and Exhibits A-E.

The Contractor shall provide required course material, including but not limited to printed books, virtual range access, access to software repositories and virtual machines necessary to demonstrate knowledge, skills, and abilities covered by the program of instruction.

The Contractor shall provide an on-line secure account which the Government may use to register course participants. The Government shall provide funding for specified courses with each order. Government personnel authorized to register participants for courses will be identified at the Task Order (TO) level. The Contractor shall not accept registration requests from individuals not expressly authorized.

The registered courses shall be within the period, quantities, and amount authorized by TOs.

The on-line secure account must only allow authorized representatives to access courses that are approved on TO’s. The contractor shall not allow authorized representatives to register courses that exceed the limitation of the TOs unless the Regional Contracting Office issues a contract modification to increase the limitation or a new

TO.

The Contractor shall inform the Defensive Cyberspace Operations Internal Defensive Measures (DCO- IDM) Company Training Representative of any changes or updates to the available curricula requirements specified below under section 3.2.

3.2 Training Requirements: The Government requires training courses which offer beginner, intermediate and advanced curriculum in the subject areas listed below. The Government understands specific topics may not be broad enough to include basic, intermediate, and advanced courses. The vendor shall provide courses that meet the

Government’s training requirement.:

Incident Response

Endpoint security essentials

Endpoint forensics

Windows and Linux Operating System essentials

Network security essentials

Network forensics

Malware analysis

Vulnerability analysis

Cyber threat intelligence

Industrial Control System Defense

Security Information and Event Manager (SIEM)

Security Leadership Essentials

Acronyms.

7th Comm Bn 7th Communication Battalion

NICE National Initiative on Cyber Education

DCO-IDM Defensive Cyber Operations Internal Defensive Measures

4.1 Meetings and Status Reports. The Contractor shall provide a written monthly status report on the progress of course registrants and inform the Training Department of Courses Requested, Completed, and Examination Status.

Reports are due no later than the 5th of each month.

5.0 Applicable Documents / Governing References. In addition requirements of regulations and policies applicable to this contract/order by virtue of clauses contained herein, the contractor shall, in the performance of this contract/order, also comply with all references applicable to the specific tasks of this Performance Work Statement, as listed below, including any amendments or subsequent issuance

Reference Location

NAVMC 3500.124 (current edition):

Cyberspace T-R Manual www.usmc.mil

DoDD 8140.01 (Change 1 7/31/2017):

Cyberspace Workforce Management www.dod.mil

DoD 8570.01-M (Change 4 11/10/2015):

Information Assurance Workforce

Improvement Program www.dod.mil

ECSM 024 Marine Corps Cyberspace

Information Technology/Cybersecurity

Workforce Qualification Program: Cyber

IT/CSWF QP

www.usmc.miml

SECNAV M-5239.2 DON Cyberspace IT and Cybersecurity Workforce Management and Qualification www.navy.mil

6.0 Government Furnished Facilities, Equipment, Services and/or Information. There will be no requirement for GFE for this PWS.

7.0 Special Instructions and Administrative Information

7.1. Non-Personal Services. This is a non-personal services, performance-based contract. The contractor bears responsibility to manage its employees and guard against any actions that could be characterized as personal services as defined in FAR 37.104, or which convey the perception that personal services are being delivered. No provisions are implied nor provided in this contract for any benefits such as medical care, retirement, or worker’s compensation, other than those incorporated through enumerated clauses.

7.2. Identification of Contractor Personnel and Equipment. In accordance with DFARS 211.106, contractor personnel performing non-personal services on DoD installations or other government facilities shall ensure that they are readily identifiable as contractor employees (including subcontractors and consultants). All contractor employees shall comply with the following at all times:

7.2.1. Telephone Identification. Identify themselves as contractor personnel at the onset of every telephone call made from a Government telephone or any other phone if the call is made in support of Government-related requirements and activities.

7.2.2. Recorded Messages. Identify themselves as contractor personnel in all recorded messages including those, which are heard by callers attempting to contact contractor employees via answering machines or voicemail.

7.2.3. Meetings, Conferences and Events. Identify themselves as contractor personnel at the onset of every meeting, conference or any other gathering attended in support of any Government related requirements or activities.

7.2.4. Correspondence. Identify themselves as contractor personnel on any correspondence, documents, or reports accomplished or sent in support of any service provision to the Government, including, but not limited to, correspondence sent via the U.S. Mail, facsimile, or electronic mail (email) inclusive of out-of-office replies

7.3. Subcontract Management. The contractor shall be responsible for any subcontract management necessary to integrate work performed on this requirement and shall be responsible and accountable for subcontractor performance on this requirement. The prime contractor will manage work distribution to ensure there are no

Organizational Conflict of Interest (OCI) considerations. Contractors may add subcontractors to their team after notification to the Procuring Contracting Officer (PCO) or Contracting Officer Representative (COR). Cross teaming may or may not be permitted.

7.4. Mission Essential Personnel / Tasks. Unless specified otherwise in this Performance Work Statement, contractors supporting this contract/order are not considered “Mission Essential” personnel (as defined in DFARS

237.76) who would be required during crisis or emergency operations.

7.5. Hazardous Materials and Safety. The Contractor and its subcontractors shall comply with all applicable laws, including Public Law 91-596 (Occupational Safety and Health Administration (OSHA)) and DOD Directive

4715.1E, Environmental, Safety, and Occupational Health (ESOH)). Contractor personnel performing services on a

DOD installation shall participate in local Voluntary Protection Programs (VPP). Information on the VPP is available at http://www.osha.gov/dcsp/vpp/index.html

7.6. Privacy Act. Pursuant to FAR clause 52.224-3, as incorporated, DoD requires agency-specific Privacy Act training as prescribed in DODM 5400.11-R. DODM 5400.11-R also prescribes required actions regarding information and privacy, which are applicable to the contractor and its personnel performing under this contract/order. The regulation may subject the contractor and/or contractor's personnel to criminal liability under

Title 18, Section 793 and 7908 of the United States Code.

7.7. Classified information. Any classified work products shall be handled in accordance with DoD Instruction

5220.22-M. The contractor’s procedures for protecting against unauthorized disclosure of information will not require DoD employees or members of the Armed Forces to relinquish control of their work product, whether classified or not, to the contractor. The contractor may also have access to, and be required to safeguard, For Official

Use Only (FOUO), sensitive, confidential, and/or classified information and material.

7.10. Quality Control and Quality Assurance. In accordance with FAR part 46, and the respective enumerated clauses incorporated in this contract/order, the contactor is reminded that the government may conduct Quality

Assurance actions, inspect the Contractor’s Quality Control Plan and records, and take remedial actions as necessary, at any time through the duration of this contract/order.

SECTION II

PERFORMANCE REQUIREMENT SUMMARY (PRS)

Performance

Objective

PWS

Section

Performance

Standard

Acceptable

Quality Level

Surveillance

Method Incentive http://www.osha.gov/dcsp/vpp/index.html

On-line, self-paced, on-demand course platform.

3.1

Provide an online secure platform to register and conduct training authorized in individual Task Orders

No more than 5 reported problems with registering or conducting courses per quarter.

100% inspection

CPARS report

(positive or negative)

ATTACHMENT 2 QUESTION & ANSWER

Solicitation # M67400-20-Q-0079

Cyberspace Operations Training

Questions and Answers

Q&A# Page # Line #

Exhibit / Paragraph# Questions

Q1

5 All PWS 1.1

... estimated 200 course (sic) over the life of the contract. Is that 40 courses or classes/students? Since each training class is quoted per student, is there an estimated minimum number of classes/students? e.g. estimating the cost of books, virtual lab accesses, and the time of having an instructor, or Subject Matter Expert, available for student assistance.

A1

The following is an estimated number of minimum courses per year, based on one student per course:

Year 1: 38 Year 2: 46 Year 3: 53 Year 4: 67 Year 5: 102 The number of each individual course purchased will mission depended, based on individual need(s) of each unit. No instructor required; requirement is for online, on-demand (i.e.

self-paced) courses.

Q2 10 All PWS 1.0

Does the USMC have a mandatory or preferred On-Line Platform

A2 No

Q3

10 All PWS 2.0

Since all training courses are to be delivered “On-line, On Demand”, what Student/Instructor (SME) interaction is contemplated? Is the offeror expected to have up to 12 SMEs available for Student Assistance during each 12 month period of performance?

A3

Troubleshooting and course content support required; should be responsive within 1-2 business days. Students should have access to a SME for whatever course they are enrolled in, in order to provide clarification and troubleshoot issues, as required, however all courses should stand alone (i.e. no live instructor required) using videos, virtual labs, reading material, etc.

Q4

11 All PWS 3.1 Bullet

#3

Please define “Printed books”. With 12 courses to be available at any time, on demand, are the books to be electronic versions? How are the quantity and shipping destination and delivery dates to be determined?

A4

Printed books are as-required, based on the course; if the course does not utilize printed material, books are not required.

If printed books are required for the course, they should be shipped priority mail to an FPO AP address that will be provided upon award.

Q5

11 All PWS 3.2

Instruction at Basic, Intermediate, or A for each course implies “keying” or separating curricula for student’s selection. Is offeror to provide each course in a continuum with student grading to be in three brackets? Or Are 3 different levels of training required for each of the twelve training courses?

A5

The Government requires a course solution that offers beginner, intermediate and advanced curriculum. The Government understands specific topics may not be broad enough to include basic, intermediate, and advanced courses.

Prospective vendor shall provide course content that meets the Government's requirement.

Q6

12 All PWS 6.0

Please clarify “no requirement for GFE”. Are all cost, internet access, necessary IT, and Lab exercise support at the student level to be provided by the Government? Hos is the minimum requirements/capacities such as Internet Speed, Local Memory, PCU speed, UFD ports to be specified?

A6

Internet access, necessary IT, are the responsibility of the student registered for the course and will be provided by the Government; Lab support must be offered by the contract awardee.

Q7

5 N/A Evaluation

Will there be Multiple Awards

A7 In accordance with the addendum to 52.212-2 of the solicitation, the Government intends to award a Single Award

Q8

N/A SF 1449

(Clarification) On SAM.gov, the Government Classification is listed as, “Original Set Aside: Local Area Set-Aside (FAR 26.2),” yet there is no mention of this acquisition being a set-aside anywhere in the solicitation. Will the Government please confirm that this acquisition is Unrestricted, per the SF 1449?

A8 Unrestricted

Q9

A001 – E012

Exhibits

Will the Government please provide any historical information as to the number of students/classes annually, per class?

A9 This is a new requirement and historical information is not available. See answer to Question 1 for more information.

Q10 30 A001 – E012

Exhibits

The Government states, “an estimated 200 training course [sic] over the life of the contract.” If no historical student count exists, would the Government please provide a ‘best guess’ estimate on the anticipated number of classes, per course?

A10

Anticipated number of classes per course are based on the individual needs of each Marine within the unit and available funding; contract must be flexible enough to cater to Marines of all skill levels. See Question 1 above.

Q11 31-

A001 – E012

Exhibits

As part of the Training requirements, is there a need for Certification Exam included in the pricing (GIAC)? Are there any certification requirements?

A11 No certification requirements

Q12

6 - 8

0001AA

0001AE

N/A

The CLIN structure seems to indicate pricing with a unit of LOT but pricing is to be submitted in exhibit A-E as unit of EA. Is the contractor to assume that the award will be for the LOT (sum total of each of the exhibits; extended sum of item and quantity reflected in exhibits) or will the awards be task order driven awards of items, quantities and submitted pricing for each?

A12 Award will be task order driven.

Q13

All

PWS 7.7

Classified

Information

The training will be via OnDemand /Online. Is this relevant to contract and How would this apply?

A13 Training will be online, self-paced. No live instructor.

Q14

N/A N/A N/A

Is the government specifically asking for training courses from the SANS Institute in this RFP or is IIIMEF open to courses from other vendors? Is there any preference given for Small Business or SDVOB?

A14

This is not a sole source or brand name solicitation nor is there any preference for Small Business. The vendor is required to provide training courses that meet the requirement per the

PWS.

Q15 N/A N/A N/A

If there is an incumbent contractor currently performing these services, if similar services have been performed in the past, or if this is a new requirement.

If this is a follow-on requirement, could you please provide the previous contract or task order number?

A15 There is no incumbent contractor and this is a new requirement.

Q16

N/A N/A N/A

There is no mention of the total number of minimum or maximum students per course or will all students have access to all the online courses and content ?

A16 Number of students per course depends on unit/individual requirements

Q17

N/A N/A N/A

How many courses are planned per year ?

A17 At minimum:

Year 1: 38 Year 2: 46 Year 3: 53

Year 4: 67 Year 5: 102

Q18

N/A N/A N/A

Is there a need for any on site instructors or any need for a 24x7 help desk for the platform or the cyber range ?

A18 Troubleshooting and course content support required; should be responsive within 1-2 business days

Q19

5 N/A

Addendum to 52.212-2

Evaluation -- Commercial Items (Oct

2014)/ Paragraph d)

Even though we have past government purchases of our product, CPARS are not available for our past product sales.

What would the government accept in lieu of CPARS?

A19 Government intends to evaluate past performance as prescribed in Addendum to 52.212-2 Evaluation -- Commercial Items (Oct 2014)/ Paragraph d)

Q20

CLIN

AA

N/A

Is the government expecting all courses to be available on 20 September 2020 or is there a desire to tailor the courses to the specific USMC 17XX Occupational Fields and beginner through advanced levels?

A20 All courses should be available once contract is awarded. This contract is not intended to develop course material. It is intended to leverage existing training courses.

Q21

CLIN

AA-AE

PWS 1.1/

Exhibit A-E

Does 3rd Marine Expeditionary Force require two levels one for (III MEF) for 2000-level (2000-level training is defined as Individual Training Skills Progression MOJT and one for Advanced Level Schools (Core Plus Skills) training for each course? For example, does the contractor need to provide an Individual Training Skills and Advanced Level Schools for A001 Incident Response?

A21

Government requests training based on general subject areas of the 12 subject areas for 12 required courses. Vendor offered training should cover those topics, and have various levels of difficulty from beginner to advanced in order to meet Individual Training Skills progression (2000-level)

Q22 10 All PWS 1.1

How many courses does the government expect to conduct in the first year?

A22 See A17

Q23 10 All PWS 3.1

Do the courses need to be imported into an existing Learning Management System (LMS)?

A23 No

Q24 10 N/A

CLIN 0001 AA-

AE

The Contractor shall provide required course material, including but not limited to printed books, virtual range access, access to software repositories and virtual machines necessary to demonstrate knowledge, skills, and abilities covered by the program of instruction.

Is the government interested in an LMS and Cyber Range being bid with the course content? If so, will the government provide an update pricing module for the LMS and Range?

A24 No

Q25 10 All

PWS 1.0/ Place of Performance

The government request on-line training, but would the government be interested in an on-premise solution that would reduce latency and provide more capability?

A25 No

Q26

CLIN

AA-AE

PWS 3.2/

Exhibit A-E

“Courses offered shall train participants of beginner, intermediate, and advanced skill levels in the following subject areas”. Does the government want three separate courses for A001 Incident Response? If so will the pricing be modified to accommodate?

A26

Government requests training based on general subject areas of the 12 subject areas for 12 required courses. Vendor offered training should cover those topics, and have various levels of difficulty from beginner to advance in order to meet Individual Training Skills progression (2000-level)

(End of Summary of Changes)