N00039-18-R-0009 - Attachment (1) - CANES Training VE Base SOW - Rev 03 - 04-04-18.pdf

STATEMENT OF WORK

FOR

CONSOLIDATED AFLOAT NETWORKS AND ENTERPRISE

SERVICES (CANES)

TRAINING VIRTUAL ENVIRONMENT

Rev 03

4 April 2018

Department of the Navy (DoN) Program Executive Office (PEO)

For Command, Control, Communications, Computers and Intelligence (C4I)

Program Management, Warfare Tactical Networks (PMW 160)

4301 Pacific Highway San Diego, CA 92110-3127

Distribution Statement A: Approved for public release; distribution is unlimited

(14 FEBRUARY 2018).

1 Introduction 2 Background 3 scope 4 Applicable Documents 5 Requirements (OPN)

5.1 Post Award Conference (PAC) (OPN)

5.2 Program Management (OPN)

5.2.1 Progress, Status and Management Reporting

5.2.2 Meeting and Integrated Product Team (IPT) Support

5.2.3 Configuration Management

5.2.4 DoN Enterprise Licensing Agreement/DoD Enterprise Software Initiative Program

5.3 Training Requirements (OPN & OMN)

5.3.1 Training Requirements Planning

5.3.2 Virtual Hosting Environment and Interfaces

5.3.3 Curriculum Delivery and Maintenance

5.3.4 Virtual Environment (VE) Training Technologies

5.3.5 VE Sustainment and Transition Plan

5.3.6 Train-the-Trainer (T3) and Follow-on Training

5.3.7 Training Transition Activities

5.4 Cybersecurity / Information Assurance Requirements

5.4.1 Equipment/Material Procurement

6 GOVERNMENT FURNISHED INFORMATION

7 OTHER DIRECT COSTS/travel (Cost Only) 8 Enterprise-Wide Contract Management Application (ECMRA)

9 SECURITY

10 CONTRACTING PERFORMANCE APPRAISAL REPORTING SYSTEM

11 data DELIVERABLES

1 INTRODUCTION

The Tactical Networks Program Office (PMW 160) of the Program Executive Office (PEO) Command, Control, Communications, Computers, Intelligence (C4I) is responsible for the acquisition, integration, delivery, and support of network infrastructure and basic network information distribution services in support of force-wide tactical information and combat support systems. This procurement is for the support services to complete training virtual environment capabilities for Consolidated Afloat Networks and Enterprise Services (CANES).

2 BACKGROUND

CANES is a Commercial-Off-The-Shelf (COTS) systems integration effort that utilizes state-of-the-industry networking hardware and core services software. CANES provides complete infrastructure, inclusive of Hardware (HW), SW, processing, storage, and end user devices, for Unclassified, Coalition, Secret and Sensitive Compartmented Information (SCI) network services (email, web, chat, collaboration) to a wide variety of Navy surface combatants, submarines, Maritime Operations Centers, and Aircraft. In addition, hosted and connected applications and systems require the CANES infrastructure to operate in the tactical environment. CANES is currently implementing a 2-year software and 4-year hardware rolling baseline approach to network upgrades and logistics that mitigates obsolescence issues and provides a stable configuration roadmap. Additionally the PMW-160 DevOps environment will enable smaller and more rapid changes in addition to the larger baseline changes. CANES training must keep pace with all HW/ SW changes that impact user interface.

The primary goals of the CANES program are to: 1) Provide a secure afloat network required for Naval and Joint Operations; 2) Consolidate and reduce the number of afloat networks through the use of Common Computing Environment (CCE) and mature cross domain technologies;

3) Reduce the infrastructure footprint and associated Logistics, Sustainment, and Training costs;

4) Increase reliability, security, interoperability and application hosting to meet current and projected Warfighter requirements; and 5) Enable federation between the tactical and Net- Centric Enterprise Services (NCES) environments.

CANES current hardware-based training solution has many challenges including classroom location, student throughput, and the ability to teach multiple baselines concurrently. The Fleet is currently limited to training in either San Diego, CA or Norfolk, VA based on Technical Training Equipment (TTE) availability and cost. Another limitation of utilizing the current strategy is not having the capability to train more than one version of CANES software simultaneously. For example, the current CANES course trains CANES Hardware 1 (HW1) / Software 1 (SW1), but in the near future CANES program will field updates to both the HW and SW and the current TTE and training will not support these updates without significant revision.

Additionally, the continuous requirement to meet Information Assurance (IA) requirements requires the Program Office to update training for all fielded versions.

3 SCOPE

The purpose of this Statement of Work (SOW) is to set forth CANES Training Virtual Environment (VE) requirements on behalf of the Program Executive Office for Command, Control, Communications, Computer, and Intelligence (PEO C4I), Program Manager, Warfare (PMW 160) Tactical Networks. The contractor shall deliver a VE capable of providing virtually hosted training for the Navy Enlisted Classification (NEC) 2792 CANES Administrator course.

The VE shall provide a virtualized and remotely accessible environment that fully replicates the functionality of CANES, utilizing CANES SW to provide real-world, hands-on training and scenarios. The VE shall be centrally located and integrated with a learning management system (LMS) which allows for rapid curriculum updates and configuration changes, while meeting applicable Navy instructions and cyber-security requirements. The contractor shall also ensure ease of fleet training record keeping (e.g. synchronization Fleet Training and Planning Management System (FLTMPS) to document and track progress and ultimately training completion within the VE. The contractor shall also update and field all training materials and training. This will include conducting Training Front-End Analysis (FEA), Job, Duty, Task Analysis (JDTA); curriculum updates and delivery; and training delivery. The Contractor will also be required to conduct train-the-trainer and course pilot events to meet Chief of Naval Operations Instruction (OPNAVINST) 1500.76 series requirements. This Statement of work is designed around CANES training requirements, but may encompass hosted and connected applications as development and fielding progresses and training requirements evolve.

Requirements will be addressed in individual Task Orders.

4 APPLICABLE DOCUMENTS

The contractor shall ensure all work accomplished on task utilizes the best commercial practices and current acceptable industry standards. The applicable references and standards invoked will vary within individual tasks and will be specifically directed by individual Task Order. In accordance with Defense Acquisition Policy changes, maximum utilization of non-government standards will be made wherever practical. Where backward compatibility with existing systems is required, selected interoperability standards will be invoked. Documents referenced herein are listed in Table 1.

Date Title & Version Reference Name / Location

P-751-1-9-97 – Navy Training Requirements Documentation Manual (NTRDM) https://doni.documentservices.

dla.mil/allinstructions.aspx

August 2016 OPNAVINST 1500.76C – Navy Training System Requirements, Acquisition and Management, https://doni.documentservices.

dla.mil/allinstructions.aspx

DoD Directive 8140.01 – Cyberspace Workforce Management http://www.esd.whs.mil/DD/D oD-Issuances/

DoD 8140.01-M http://www.esd.whs.mil/DD/D oD-Issuances/

Jan 1987 DoD 5200.2-R – DoD Regulation – Personnel Security Program http://www.esd.whs.mil/DD/D oD-Issuances/

Feb 2012 DoDM 5200.01 – DoD Manual – Information Security Program Manual http://www.esd.whs.mil/DD/D oD-Issuances/

20 Jun 12 DoDD 5205.02E – DoD Directive – Operations Security (OPSEC) Program http://www.esd.whs.mil/DD/D oD-Issuances/

3 Nov 08 DoD 5205.02-M – DoD Manual – Operations Security (OPSEC) Program Manual http://www.esd.whs.mil/DD/D oD-Issuances/

14 Mar 14 DoDI 8500.01 – DoD Instruction – Cybersecurity http://www.esd.whs.mil/DD/D oD-Issuances/

Jun 2006 SECNAV M-5510.30 – Secretary of the Navy Manual DoN Personnel Security Program https://doni.documentservices.

dla.mil/allinstructions.aspx

SECNAVINST 5510.30 – DoN Regulation – Personnel Security Program https://doni.documentservices.

dla.mil/allinstructions.aspx

NAVEDTRA 130 Series manuals https://www.netc.navy.mil/ile/

October

OPNAV 11102.2 – Training System Installation and Transfer https://doni.documentservices.

dla.mil/allinstructions.aspx

NETC E2E Process SOP – NETC Course Development, Revision and Modification End-to-End (E2E) Process Standard Operating Procedures (SOP) https://www.netc.navy.mil/ile/

NETCINST 1500.10 (Series) – Authoring Instructional Material (AIM) Content Planning Module (CPM) and Learning Object Module Operator’s Manual https://www.netc.navy.mil/ile/ Folder

Aug 2007 OPNAVINST 1000.16K – Navy Total Force Manpower Policies and Procedures https://doni.documentservices.

dla.mil/allinstructions.aspx

NIST SP 800-Series – National Institute of Standards and Technology Special Publications 800 Series – Computer Security Policies, Procedures and Guidelines https://www.nist.gov/publicati ons

18 March

Department of Defense Cloud Computing Security Requirements Guide, Version 1 Release 2 dtd https://iasecontent.disa.mil/clo ud/Downloads/Cloud_Computi ng_SRG_v1r2.pdf

Military Handbook: Configuration Management MIL-

HDBK-61A

CMPro Reference Folder

11 APR

SPAWARINST 4440.12A - Management of Operating Materials and Supplies, Government Furnished Property, and Inventory

CANES Training VE RFP NSERC Site

Table 1 - Applicable Documents https://iasecontent.disa.mil/cloud/Downloads/Cloud_Computing_SRG_v1r2.pdf

5 REQUIREMENTS (OPN)

The following paragraphs outline support tasks that shall be required as part of VE effort. The contractor shall provide necessary resources, materials, and experience to support the required tasks. The contractor shall complete all required tasks while controlling, tracking, and reporting performance requirements in terms of costs, schedules, and resources.

The contractor shall provide functional and technical expertise to conduct analysis, design, and delivery of training solutions following the Naval Education and Training Command (NETC) End-to-End (E2E) process. The contractor shall be required to have received training in the Content Planning Module (CPM) and Learning Object Module (LOM) (CPM/LOM) and the Space and Naval Warfare (SPAWAR) Human Analysis Requirements Planning System (HARPS) tool to produce Navy Education and Training (NAVEDTRA) 130 Series training products. The contractor shall conduct Train-the-Trainer (T3) events and support schoolhouse Pilot (initial) training courses and follow-on courses, as required. The contractor shall use previous CANES baseline training analysis, requirements, and materials as a basis to create training solutions for future CANES baselines. The training solutions will be geared towards delivery in the CANES Training Virtual Environment, which will support training one or more CANES baselines.

The contractor shall implement a virtual environment to conduct training in multiple locations on multiple baselines simultaneously. This experience shall include but is not limited to having contingency plans for conducting training in the event of connectivity loss, to ensure that availability requirements are met.

The contractor shall provide training and technical assistance to Center for Information Warfare Training (CIWT) and government personnel in utilizing a virtual environment to conduct training in multiple locations on multiple baselines after VE delivery and prior to CIWT training acceptance. The VE shall be capable of providing a real-world representation of the CANES environment across a minimum of eight sites, a minimum of four SW variants, and with 100 users at one time - 840 within a year. The contractor shall also perform any maintenance required to support the VE solution. This experience shall include viable contingency plans for conducting training in the event of connectivity loss, to ensure that the 95% operational availability (Ao) requirements are met.

5.1 Post Award Conference (PAC) (OPN)

The contractor shall participate in a Post Award Conference (PAC) to be held in San Diego, CA, within thirty (30) calendar days after award of contract. The contractor shall provide video teleconferencing capability for the PAC as requested by the Government. The PAC shall be a one (1) day event at which the contractor shall demonstrate to the Government overall contract and TO management procedures, a review of technical and other specialty areas status, and establish schedule dates for near term critical meetings/actions. The contractor shall present management, essential “key” personnel, the Plan of Action and Milestone (POA&M) submitted with the proposal and program implementation processes. The contractor shall document and perform action item follow-up and resolution activities. (CDRLs: A001, A002 and A004)

5.2 Program Management (OPN)

The contractor shall provide program management to ensure all work conducted within this contract is planned and executed in a manner that will achieve all management, technical, logistical, cost, and schedule objectives in support of the execution of the tasks described below.

The contractor shall ensure coordination and integration of all functional areas within each task or project. The contractor shall report Small Business Goals. The contractor shall use the Contracting Officer Representative (COR) as the primary point of contact for all program activities.

The contractor shall work with the Task order Technical Point of Contact (TPOC) to schedule instructor assets and work with the Training Agent (TA) point of contact to schedule and coordinate conduct of the training events as described below in section 5.3.6. The contractor shall include the COR in the coordination efforts. If Outside the Continental United States OCONUS travel is required the contractor shall request approval for travel no less than thirty

(30) days prior to travel from the COR. (CDRL: A018)

5.2.1 Progress, Status and Management Reporting

The contractor shall provide a Progress, Status and Management Report and conduct program management reviews (PMR) as directed by individual Task Orders. The report shall contain all aspects of the contract addressing cost, schedule, and performance for all TOs. The report shall specifically identify the following items: schedule status, progress against major milestones, status of, cost/funding status, risk management, manpower, configuration management, Supply Chain Risk Management (SCRM), systems and software engineering, logistics, quality assurance, safety status, identification and status of technical issues, lower tier supplier accomplishments and issues, action item status, Cyber Security Workforce Report and TO questions. The PMRs and CPSMRs shall address all active TOs. (CDRLs: A001, A002, and A003)

5.2.2 Meeting and Integrated Product Team (IPT) Support

The contractor shall coordinate, schedule, prepare, conduct, facilitate, and participate in meetings and IPTs, as directed by individual TOs, to discuss and / or present engineering analysis, assessment, related issues and recommended resolutions. The contractor shall provide the following training management support activities and support training meetings in San Diego, CA and/or via teleconference as required. The contractor shall provide the teleconference numbers when requested by the Government. (CDRLs: A001, and A002)

5.2.3 Configuration Management

The contractor shall maintain and manage a Configuration Management (CM) Program using Military Handbook: Configuration Management MIL-HDBK-61A as guidance. The contractor’s CM efforts shall include configuration identification, configuration change control, configuration status accounting, configuration verification and audits, and configuration data management. The contractor shall maintain a CM process capable of processing configuration changes from identification through Government approval and implementation, without impact to production schedules.

5.2.4 DoN Enterprise Licensing Agreement/DoD Enterprise Software Initiative Program

Pursuant to DoN Memorandum – Mandatory use of DoN Enterprise Licensing Agreement (ELA) dtd 22 Feb 12, contractors that are authorized to use Government supply sources per FAR 51.101 shall verify if the product is attainable through DoN ELAs and if so, procure that item in accordance with appropriate ELA procedures. If an item is not attainable through the DoN ELA program, contractors shall then utilize DoD Enterprise Software Initiative (ESI) program (see DFARS 208.74) and government-wide SmartBuy program (see DoD memo dtd 22 Dec 05). The contractor shall ensure any items purchased outside these programs have the required approved waivers as applicable to the program. Software requirements will be directed by individual task orders. (CDRL: A005)

5.3 Training Requirements (OPN & OMN)

The contractor shall provide the following support for the CANES Program in accordance with the Applicable Documents listed in Table 1 under Section 4 of this document.

5.3.1 Training Requirements Planning

The contractor shall provide training requirements planning and analysis to support the CANES program as directed by individual task orders, to include but not limited to; JDTA, Business Case Analysis (BCA) FEA and Analysis of Alternatives. The FEA and BCA shall describe the migration of current formal schoolhouse training to a Virtual Environment for the System Administration Training Strategy. Existing FEA and JDTA information will be provided as Government Furnished Information (GFI) to the contractor. The contractor will review and update this information in accordance with OPNAVINST 1500.76 series requirements. JDTA and FEA updates are required with each new SW baseline. (CDRL: A006, A007, and A008)

5.3.2 Virtual Hosting Environment and Interfaces

As directed by individual task orders the contractor shall deliver a full VE solution as described below in SOW Section 5.3.4, to include the hosting environment and interfaces that will replace the existing Technical Training Equipment (TTE) currently used in San Diego, CA and Norfolk, VA. The contractor shall expand the training sites to a total of eight (8) training sites, to include both Continental United States (CONUS) and Outside CONUS (OCONUS) locations. The anticipated sites are electronic classrooms located at San Diego, CA; Virginia Beach, VA;

Yokosuka, Japan; Pearl Harbor, HI; Groton, CT; Everett, WA; Mayport, FL; and Rota, Spain.

The VE solution shall be required for existing and future software baselines, and shall be able to train all of these baselines simultaneously, geared towards each student and their ship’s specific baseline. The threshold and objective yearly throughput for this effort is eight hundred forty

(840) personnel taught in five (5) week courses at the eight (8) sites. The threshold of individuals that can be remotely accessing the VE at any given time is one hundred (100) personnel. The VE shall be accessible and fully functioning with 95% operational availability (Ao). The contractor shall provide a secondary redundant solution if a redundant localized capability that is not virtually hosted is required to meet the 95% Ao as directed by individual task orders.

The contractor shall create an LMS interface and shall deliver a product that at a minimum will interface with the CANES SW, capture each trainee’s status, and report completion to the required FLTMPS databases. As an objective, but not required, the LMS should also be able to track job sheet and task completion/success and bookmark student’s progress through the course.

As directed by individual task orders, the contractor shall deliver a Virtual Hosting Environment or other training solution Analysis of Alternatives (AoA). The AoA shall include at a minimum:

alternatives for the VE virtualization methodology and hosting environments for each methodology described. (CDRL: A009, A010, A011 and A019)

5.3.3 Curriculum Delivery and Maintenance

The contractor shall receive the existing CANES training curriculum, background analysis and documentation as GFI. The contractor shall ensure that any updates and modifications to existing training meet prevailing Instructions outlined in Table 1 – Applicable Documents, and shall be directed by individual task orders. As new software versions emerge, the contractor will be required to update curriculum and training products in accordance with the NAVEDTRA 130 Series of instructions, as well as the OPNAVINST 1500.76 series, and the CPM/LOM Tool. The first version that will require a training update is SW3, which shall be required to meet the below deliverables and timelines. All training deliverables shall require government review and approval, and as determined by the Government, external stakeholder review. The government will provide all SW versions and pre-existing training documentation as GFI as required by individual task orders. (CDRL: A001 and A012)

5.3.4 Virtual Environment (VE) Training Technologies

As directed by individual task orders, the contractor shall deliver a virtual training solution that includes a virtualized environment representative of CANES including full networking, storage, and security management capabilities required for individual trainees to experience a real world CANES representative environment that is the same as their assigned ship’s SW environment (e.g. SW1, SW 1.2, SW 2, SW 2.0.1, SW 3, etc.). The contractor shall provide a fully operational SW solution for all required job sheets and learning tasks. Simulation should be minimal with the objective being no simulation at all. The VE shall be centrally located and accessible from any Electronic Classroom referenced above in section 5.3.2. The VE shall enable rapid updates to the schoolhouse training environment, to include incorporation of any patches, SW updates, or new SW versions. The contractor shall also update training curriculum to meet each of these environment changes. The contractor shall, to the greatest extent possible, provide facilitation of training using the VE, and at a minimum provide record keeping (e.g.

synchronization with TWMS/ FLTMPS) to document student progress and course completion (e.g. NEC assignment record keeping). The VE should also be capable of knowledge and skills comprehension testing and training completion within the VE. The contractor shall provide technical training requirements analysis and support training delivery design for CANES training solutions using VE training delivery methods. The contractor shall include system administrator training functions that are instructor-led with testing objectives built-in. The contractor shall include, at a minimum, a replication of all deployed CANES configurations on the existing electronic classroom virtual machines, job sheets, and procedures to conduct system administration tasks within the VE.

5.3.5 VE Sustainment and Transition Plan

As directed by individual task orders the contractor shall deliver a VE sustainment plan that describes and provides proposed solutions for the following: student and testing data management; cyclic updates to curricula and software; training VE Help Desk information;

Information Assurance Vulnerability Alert (IAVA) patches, cyber security and IA; fleet training improvement inputs regarding sustained and future baselines or student feedback; sustainment of licensing;; Life-Cycle support and sustainment of the products; rapid updates based on CANES planned software refresh cycles; and compatibility with CANES software baselines. The VE Sustainment Plan should address the ability to transition VEs with minimum impact to government or fleet training. (CDRL A013)

5.3.6 Train-the-Trainer (T3) and Follow-on Training

As directed by individual task orders the contractor shall support T3 events and provide training Subject Matter Experts (SME) for course initial training and follow-on training courses. The contractor shall provide formal instructional training support. (CDRL: A014, A015, and A016)

Formal training support will be scheduled by the Program Office through the TPOC, TA and COR and shall include, but is not limited to, the following tasks:

a. The contractor shall conduct T3 events with each baseline delivered by the contractor and approved by the Government, which will include Instructor-Led Training (ILT) utilizing the VE

b. During T3 events, the contractor shall provide support to collect and mitigate any red-line findings and ensure they are adjudicated / incorporated into the curriculum prior to final delivery

c. The contractor shall train the curriculum delivered as outlined in Section 5.3.3 and approved by the Government

d. The contractor shall provide instructor assistance in follow-on courses. Each CANES Administrator NEC: 2792 course is five (5) weeks long, and can be conducted in CONUS and OCONUS locations

e. The contractor shall work with the task order TPOC to schedule instructor assets and work with the Training Agent (TA) point of contact to schedule and coordinate conduct of the T3 event(s). If travel is required, the contractor shall request approval from the

COR

f. The contractor shall utilize technical documentation provided as GFI, to include Interactive Electronic Technical Manuals (IETMs), Planned Maintenance System cards (PMS), and other required reference materials

g. The contractor shall distribute course surveys and turn in Course Completion Reports (CCR) for each training event as directed by individual task orders.

5.3.7 Training Transition Activities

The contractor shall support all Training Support Agent (TSA) to Training Agent (TA) transition activities in accordance with OPNAVINST 1500.76 series, including the development of the Training Transfer Agreement (TTA) for the CANES Course(s). (CDRL:

A017)

5.4 Cybersecurity / Information Assurance Requirements

Cybersecurity (formally known as Information Assurance (IA)) includes tasks by which the contractor shall protect and defend information and information systems by ensuring their availability, integrity, authentication, confidentiality and non-repudiation. This includes providing for restoration of information systems by incorporating protection, detection and reaction capabilities. (A003)

1. In accordance with DFAR clause 252.239-7001, DoDD 8140.01, SECNAVINST 5239.3C, and SECNAV M5239.2, contractor personnel performing cybersecurity functions shall meet all cybersecurity training, certification and tracking requirements as cited in DoDD 8140.01 prior to accessing DoD information systems

2. The contractor shall be responsible for tracking and reporting cybersecurity personnel, also known as Cyber Security Workforce (CSWF) as directed by individual task order

3. The contractor shall ensure that all products recommended and/or procured that impact cybersecurity or Information Assurance (IA) shall be selected from the NIAP Validated Products List. The products chosen shall be based on the appropriate Evaluated Assurance Level (EAL) for the network involved, and utilized in accordance with latest Defense Information Systems Agency (DISA) policy at time of order. This information shall be tracked and available for government review as needed

4. The Contractor shall ensure that personnel accessing information systems have the proper and current information assurance certification to perform information assurance functions in accordance with DoD 8570.01-M, Information Assurance Workforce Improvement Program. The Contractor shall meet the applicable information assurance certification requirements, including-

a. DoD-approved information assurance workforce certifications appropriate for each category and level as listed in the current version of DoD 8570.01-M; and

b. Appropriate operating system certification for information assurance technical positions as required by DoD 8570.01-M.

5. Upon request by the Government, the Contractor shall provide documentation supporting the information assurance certification status of personnel performing information assurance functions

6. Contractor personnel who do not have proper and current certifications shall be denied access to DoD information systems for the purpose of performing information assurance functions. The contractor shall create and maintain a contractor roster listing the contractor personnel and their certifications

7. Contractor personnel supporting this contract who are performing IA functions that are designated as IA Workforce positions in accordance with DoD 8570.01-M shall be trained and certified in accordance with DFARS Clause 252.239-7001 Information

Assurance Contractor Training and Certification. The contractor shall follow SECNAVINST 5239.3A of 20 Dec 2004 & DoD 8500.2 of 6 Feb 2003 when performing IA tasks orders

5.4.1 Equipment/Material Procurement

As directed by individual Task Order the contractor shall procure items in accordance with SPAWARINST 4440.12A. The contractor shall ensure acquisition selection factors include price, availability, reliability, and supportability within current supply system. The contractor shall keep source selection records and make it available for government review as needed. The contractor shall provide all support data and cost estimates necessary to justify a fair and reasonable price per item procured. The contractor shall have an adequate accounting system to track all items and the delivery status per task order and per item. After receipt, the contractor shall have an adequate property management system to track the item location per task order per item. Unless otherwise noted, all items procured by the contractor shall be utilized or staged at the contractor’s facility, transported by the contractor to the installation, integrated or consumed in a system, or returned to the government at the completion of the contract/TO.

Contractor shall recommend commercial software products, hardware, and related services that conform to applicable product validation, identification, and tracking requirements from approved sources in accordance with the latest DoN and DoD policies.

(a) Product Validation – The contractor shall certify that it purchases supplies from authorized resellers and/or distributers. Unless otherwise specified, the contractor shall warrant that the products are new, in their original box. The contractor shall obtain all manufacturer products submitted in task/delivery order offers from authentic manufacturers or through legal distribution channels only, in accordance with all applicable laws and policies at the time of purchase. The contractor shall provide the Government with a copy of the End User license agreement, and shall warrant that all manufacturer software is licensed originally to Government as the original licensee authorized to use the manufacturer software. The contractor shall track the licensing information and have it available for government review as needed.

(b) Cybersecurity/Computer Security Requirements – The contractor shall ensure that all products recommended and/or procured that impact cybersecurity or Information Assurance (IA) shall be selected from the NIAP Validated Products List. The contractor shall ensure the products chosen are based on the appropriate Evaluated Assurance Level (EAL) for the network involved, and utilized in accordance with latest Defense Information Systems Agency (DISA) policy at time of order. The contractor shall store all product information and have it available for government review as needed.

(c) Item Unique Identification (IUID) – In accordance with DFARS clause 252.211- 7003/7007 and SECNAVINST 4440.34, the contractor shall ensure that an item manufactured, integrated, or purchased with a unit cost equal to or exceeding $5,000 (or less if item is serially managed or if government specifies items on individual task/delivery orders) is labeled with an item unique identification number or Unique Item Identifier (UII). (CDRLs: A0)

6 GOVERNMENT FURNISHED INFORMATION

GFI will be identified, as required, at the Task Order level.

7 OTHER DIRECT COSTS/TRAVEL (COST ONLY)

Other Direct Costs/Travel may be required and will be specified on each individual TO.

8 ENTERPRISE-WIDE CONTRACT MANAGEMENT APPLICATION (ECMRA)

The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract via a secure data collection site. Contracted services excluded from reporting are based on Product Service Codes (PSCs).

The excluded PSCs are:

(1) W, Lease/Rental of Equipment;

(2) X, Lease/Rental of Facilities;

(3) Y, Construction of Structures and Facilities;

(4) D, Automatic Data Processing and Telecommunications, IT and Telecom- Telecommunications Transmission (D304) and Internet (D322) ONLY;

(5) S, Utilities ONLY;

(6) V, Freight and Shipping ONLY.

The contractor is required to completely fill in all required data fields using the following web address: https://ecmra.mil/Default.aspx.

Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk at:

https://ecmra.mil/Default.aspx.

For the purposes of CMRA reporting, the Federal Supply Code/Product Service Code applicable to the contract is R425.

9 SECURITY

The nature of this task requires access up to SECRET information as designated within the DD

254. The work performed by the contractor will include access up to Secret data, information and spaces. The contractor will be required to attend meetings classified up to the Secret level. All work shall be performed in accordance with DoD and Navy Operations Security (OPSEC) requirements and in accordance with the OPSEC attachment to the DD254.

Some Engineering Services will require contractor access to Secret data, information, and spaces at Government facilities. Some installation tasks will require contractor access to Secret data, information, and spaces at the installation site.

10 CONTRACTING PERFORMANCE APPRAISAL REPORTING SYSTEM

Past performance information will be collected and maintained under this contract using the Department of Defense Contractor Performance Appraisal Reporting System (CPARS). CPARS is a web-enabled application that collects and manages the contractor’s performance information on a given contract during a specific period of time. Additional information is available at http://www.cpars.navy.mil/.

After contract award, the contractor will be given access authorization by the respective SPAWAR Focal Point, to review and comment on any element of the proposed rating before that rating becomes final. Within 60 days after contract award, the contractor shall provide in writing (or via e-mail) to the contracting officer the name, title, e-mail address and telephone number of the company individual or individuals who will have the responsibility of reviewing and approving any Contractor Performance Appraisal Report (CPAR) developed under the contract.

If, during the life of this contract these company individual(s) are replaced by the contractor, the name, title, e-mail address and telephone number of the substitute individuals will be provided to the contracting officer within 60 days of the replacement.

11 DATA DELIVERABLES

The Contractor shall provide SOW deliverables in accordance with the associated CDRL. All deliverables, transmittal documents, and media shall clearly identify the contract number and deliverable number. All deliverables in which Government-approved Contractor format is specified shall be submitted to the Contracting Officer’s Representative (COR) for format approval. Submissions for the purpose of format approval shall occur sufficiently in advance so as to allow the COR time to review and approve format without impact to timely delivery of CDRL items in accordance with this SOW and CDRLs.

CDRL Title DID

A001 Presentation Material DI-ADMN-81373 A002 Report, Record of Meeting / Minutes DI-ADMN-81505 A003 Contractor’s Progress, Status, and Management Report DI-MGMT-80227 A004 Plan of Action and Milestones - Integrated Master Schedule DI-MGMT-81650 A005 Technical Report – Study/Services -

License Keys and Warranty Information Report DI-MISC-80508 A006 Technical Report – Study/Services -

Job, Duty Task Analysis DI-MISC-80508 A007 Technical Report – Study/Services -

Front End Analysis DI-MISC-80508 A008 Technical Report – Study/Services -

Business Case Analysis DI-MISC-80508 A009 Technical Report – Study/Services -

Virtual Environment Hosting Solution Information DI-MISC-80508 A010 Technical Report – Study/Services -

Virtual Environment Solution and Configuration DI-MISC-80508 A011 Technical Report – Study/Services - DI-MISC-80508 http://www.cpars.navy.mil/

CDRL Title DID

VE Set-Up and Maintenance Guide A012 Technical Report – Study/Services –

Complete Curriculum Package DI-MISC-80508 A013 Technical Report – Study/Services –

Virtual Environment Sustainment Plan DI-MISC-80508 A014 Technical Report – Study/Services –

T3 and Training Events Daily Status Reports (DSR) DI-MISC-80508 A015 Technical Report – Study/Services –

Follow-On Course Training Events Daily Status Report (DSR) DI-MISC-80508 A016 Technical Report – Study/Services –

Course Completion Reports DI-MISC-80508 A017 Technical Report – Study/Services –

Training Transfer Agreements DI-MISC-80508 A018 Travel Trip Report DI-MISC-81943 A019 Technical Report – Study/Services –

Analysis of Alternatives DI-MISC-80508