0611-01_(124-H11)-Espy_BPA-SOW_POC's_removed.docx

TEAMSENTINEL SYSTEMS, EQUIPMENT

SPARE PARTS AND SUPPORT

STATEMENT OF WORK (SOW)

1.0 INTRODUCTION

Naval Surface Warfare Center, Dahlgren Division, (NSWCDD) H11 has a requirement for systems, equipment, software and hardware preventive maintenance, and training for the TEAMSentinel project. The Contractor shall provide this support in accordance with its commercial practices at the Government’s laboratories CONUS, OCONUS at deployment sites, and at the Contractor’s facilities. Requirements will be identified in individual Blanket Purchase Agreement (BPA) calls, which will not exceed $250K.

2.0 APPLICABLE DOCUMENTS

Original Equipment Manufacturer (OEM) Specifications

3.0 REQUIREMENTS

The Contractor shall provide the following support as identified in individual BPA calls.

3.1 International Traffic In Arms Requirements

The Contractor shall comply with all U.S. laws, rules, regulations, including those governing export (including but not limited to the Arms Export Control Act of 1976 and the International Traffic in Arms Regulations (ITAR), 22 CFR 120-130). In accordance with the aforementioned legal requirements, the Contractor, prior to exporting, may be required to seek export approval through the United States Department of State. The Contractor may be required to interact with foreign nationals and foreign partners in support of this requirement, at the direction of the Technical Points of Contact (TPOC). Any requested 2nd and 3rd party interactions shall be detailed in the individual calls, and the Contractor shall have to obtain an Agency exemption letter via submitting a request to the Contracting Officer in writing or other appropriate export license for each instance of anticipated contact. The Contractor actions may include, but not be limited to the following:

· provide training to 2nd and 3rd party foreign partners;

· provide guidance, instruction, or other person-to-person direct conversation, to assist with the operation and best use of their products, at the direct request of the US government to 2nd and 3rd party foreign partners in support of individual calls;

· provide technical information or engage in discussions regarding equipment and software issues to 2nd and 3rd party foreign partners.

3.1 Systems, Equipment and Spare Parts

The Contractor shall provide TEAMSentinel systems, equipment and spare parts. The Contractor shall make available the Commercial-Off-the-Shelf (COTS) systems, equipment and spares necessary to support optimum mission performance.

3.2 Maintenance

The Contractor shall provide TEAMSentinel software and hardware maintenance, as required, in conjunction with on-site technical personnel. The Contractor shall identify and correct hardware and/or software failures, performance failures, and implementation failures that affect day-to-day operations. The Contractor shall make modifications to vendor licensed TEAMSentinel systems in the possession of the Government to adapt the configurations of the TEAMSentinel systems and their processing environments. The Contractor shall utilize in warranty repairs as much as possible for any maintenance.

3.3 Repairs

The Contractor shall provide TEAMSentinel software and hardware repairs, as required, in conjunction with on-site technical personnel. In the event that failed items or components are covered under an existing warranty, the Contractor shall coordinate corrective action with the TPOC in the best interests of the government and/or in accordance with the existing warranty agreement.

3.4 Training

The Contractor shall provide TEAMSentinel operator (user) training, covering the operation of the TEAMSentinel server systems and Client workstations, as well as system administration training for both hardware and software maintenance to the on-site technical personnel. This training shall be conducted at the Government’s facilities, at deployed locations or the Contractor's facility. The Contractor shall provide training hardware/software and training materials (if required) to facilitate training. The Contractor shall coordinate with the technical point of contact (TPOC) to determine the intended scope and audience for all training and secure the necessary export license agreement in order to execute training in accordance with the applicable ITAR requirements.

4.0 TRAVEL

The Contractor will be required to travel in performance of this contract. The number of trips and types of personnel traveling shall be limited to the minimum required to accomplish work requirements and shall be coordinated with the TPOC. All travel shall be conducted in accordance with the FAR 31.205-46, “Travel Costs” and the Federal Travel Regulations (FTR). Travel requirements will be identified in each individual call, since performance locations will change. Many platform performance locations are classified.

5.2 The Contractor shall require access to Non-SCI intelligence in order to update and format documentation in support of branches and program offices. Access to SCI (SI/TK/HCS/GG) is required in order to access and reside in SCIF spaces. Access to NATO is required to obtain a SIPRnet account. For Official Use Only (FOUO) and Personally Identifiable Information (PII) generated and/or provided under this contract shall be safeguarded and marked as specified in DoD 5400.7-R Chapters 3 and 4.

5.3 Facility Clearance: The Contractor shall possess and maintain a TOP SECRET facility clearance as verified within the Industrial Security Facility Database.

5.4 Physical Security: No safeguarding of classified material is authorized at the Contractor facility. Safeguarding will only be required at the actual performance site which will be identified in individual calls and the site listed in Block 13 on the DD254. Actual performance site’s security regulations and guidelines will apply.

5.5 Electronic Spillages (ES) are unacceptable and pose a risk to national security. An electronic spillage is defined as classified data placed on an information system (IS), media or hardcopy document possessing insufficient security controls to protect the data at the required classification level, thus posing a risk to national security (e.g., sensitive compartmented information (SCI) onto collateral, Secret onto Unclassified, etc). The Contractor’s performance as it relates to ES will be evaluated by the Government. ES reflects on the overall security posture of NSWCDD and a lack of attention to detail with regard to the handling of classified information of IS security discipline and will be reflected in the Contractor's performance rating. In the event that a Contractor is determined to be responsible for an ES, all direct and indirect costs incurred by the Government for ES remediation will be charged to the Contractor.

5.6 NSWCDD Security will continue to be responsible for the corrective action plan in accordance with the security guidance reflected on the DOD Contract Security Classification Specification - DD254. NSWCDD Security will identify the Contractor facility and contract number associated with all electronic spillages during the investigation that involve Contractor support. NSWCDD Security will notify the Contracts Division with the Contractor facility name and contract number, incident specifics and associated costs for clean-up. The Contracting Officer will be responsible to work with the Contractor Facility to capture the costs incurred during the spillage clean up. The Contractor is also responsible for taking Information Security Awareness training annually, via their Facility Security Officer (FSO), as part of the mandatory training requirements. If a spillage occurs additional training will be required to prevent recurrence.

5.7 Non-government and/or personally owned portable electronic devices (PEDs) are prohibited in all NSWCDD buildings with the exception of personally owned cell phones which are authorized for use in spaces up to and including Controlled Access Areas. The Contractor shall ensure the onsite personnel remain compliant with this PED policy. NSWCDD instruction defines PEDs as the following: any electronic device designed to be easily transported, with the capability to store, record, receive or transmit text, images, video, or audio data in any format via any transmission medium. PED’s include, but are not limited to, pagers, laptops, radios, compact discs and cassette players/recorders. In addition, this includes removable storage media such as flash memory, memory sticks, multimedia cards and secure digital cards, micro-drive modules, ZIP drives, ZIP disks, CD-RWs, DVD-RWs, MP3 players, iPADs, digital picture frames, electronic book readers, kindle, nook, cameras, external hard dish drives, and floppy diskettes.

5.7.1 Personal Wearable Fitness Devices (PWFDs) marketed primarily as fitness or sleep devices are allowed in all Navy spaces where collateral non-Sensitive Compartmented Information (SCI), classified information is processed, stored, or discussed up to and including secret. User must ensure PWFD is compliant with all requirements in NAVADMIN 216/15, Cyber Hygiene Authorization to use Personal Wearable Fitness Devices (e.g., FitBit, Jawbone UP, etc.) in Navy Spaces, dated 14 September 2015 and register PWFD in the NSWCDD Fitness Device Tracker. PEDS are not authorized in all of H10 spaces in order to meet additional security requirements. The Contractor shall verify with the government customer prior to entering any H10 spaces with PEDs.

5.7.1 PED’s belonging to an external organization shall not be connected to NSWCDD networks or infrastructure without prior approval from the NSWCDD Information Assurance and Compliance Branch. This approval will be granted using the TARIS form and action tracker process.

5.7.2 Personally owned hardware or software shall not be connected or introduced to any NSWCDD hardware, network or information system infrastructure.

6.0 Operations Security (OPSEC)

All Contractors (including Subcontractors) shall supplement their current security practices by requiring any personnel involved in executing this agreement to complete Government-sponsored and administered Operations Security (OPSEC) training. In addition, all Contractors should be aware of the Critical Information List (CIL) for the department they are supporting as well as the OPSEC plan for NSWCDD. The TPOC shall contact their Department Training Coordinator to schedule key employees to attend the Government-sponsored OPSEC training. The Contractor must immediately notify the Government upon the discovery of any nonconformance with the OPSEC Plan.

7.0 Privacy Program Training

Privacy training is mandatory for all NSWCDD personnel (military, civilian, and Contractor) and must be completed annually. The Total Workforce Management System (TWMS) is the official database for workforce training and is the preferred tool for taking and recording privacy act training. All NSWCDD personnel are responsible for ensuring individual annual privacy training requirements are met.

8.0 Visits by Foreign Nationals and Foreign Representatives

8.1 Contract performance may require that the Contractor host, at an off-base location, foreign nationals and/or foreign representatives. A foreign national is a person who is a citizen of a foreign nation, and who is not a citizen of the United States. A foreign representative is a person who represents a foreign interest in dealings with the U.S. Government, either directly or through dealings with a U.S. Government Contractor. A foreign representative may be a United States citizen. No classified visits shall be conducted at the Contractor’s facilities.

8.1.1 A Contractor-hosted visit of a foreign national or foreign representative may be either an “official” visit or an “unofficial” visit. An official visit is a visit where the foreign national or foreign representative is representing a foreign government in an official capacity. An unofficial visit is a visit where the foreign national or foreign representative is not representing a foreign government.

8.1.2 A visit by a foreign national or a foreign representative may be either “DoD Sponsored” or “Non-DoD Sponsored”. A DoD Sponsored visit is a visit that is coordinated by a DoD entity. A Non-DoD Sponsored visit is a visit that does not involve DoD coordination (A visit by either a foreign national or a foreign representative pursuant to performance by the Contractor under this contract is not considered to be, by itself, a sponsored visit).

8.1.3 The Contractor hosting a visit by either a foreign national or a foreign representative is responsible for adherence to Department of Defense and Department of the Navy directives, instructions, regulations, and manuals that govern foreign disclosure. “Foreign Disclosure” is defined as the disclosure of Classified Military Information (CMI) and Controlled Unclassified Information (CUI) to foreign nationals and/or foreign representatives. Disclosure of such information may be accomplished orally, visually, in writing, or by any other medium.

8.1.4 Classified Military Information (CMI). This is information that is originated by or for the Department of Defense, or a Military Department, or an entity under its jurisdiction and control, and which requires protection in the interest of national security. Such information is designated as TOP SECRET, SECRET, or CONFIDENTIAL.

8.1.5 Controlled Unclassified Information (CUI). This is information that although unclassified is subject to access or distribution limitations in accordance with statute or regulation. Included is information exempt from mandatory release to the public under the Freedom of Information Act, or information that is subject to export control.

8.1.6 NSWCDD Foreign National Visitor and Foreign Disclosure Application process. The NSWCDD has established a foreign national visitor approval and foreign disclosure process. Whenever, pursuant to the terms of this contract, a visit to a Contractor facility or Contractor workspace by a foreign national or foreign representative is anticipated, and one or more NSWCDD employees will be in attendance at this visit/meeting for the purpose of potential discussions, above the public release level, resulting in disclosure of either CMI or CUI, a completed “NSWCDD Foreign National Visitor and Foreign Disclosure Application” e-form must be supplied to the Contractor’s Facility Security Officer (FSO). The accountable NSWCDD personnel attending the meeting must ensure that the NSWCDD disclosure process has been complied with and an approved copy of the “NSWCDD Foreign National Visitor and Foreign Disclosure Application” generated e-form has been provided to the TPOC and the Contractor’s FSO. The Contractor’s FSO should ensure that approved copies of the e-form are maintained at their facility as a record of compliance with requirements set forth in the National Industrial Security Program Operating Manual (NISPOM) as well as the requirements set forth above.

C.17 NON-DISCLOSURE AGREEMENTS (NDAs)

9.0 TECHNICAL POINTS OF CONTACT

NDAs may be utilized to allow for access to company sensitive/proprietary data. For tasks requiring NDAs, the Contractor shall obtain appropriate agreements for all of their employees that are associated with the task requiring such an agreement. Contractor personnel may be required, from time to time, to sign non-disclosure statements as applicable to specific tasking.

The COR will notify the Contractor of the number and type of personnel that will need to sign the Non-Disclosure agreements. The signed Non-Disclosure Agreements shall be executed prior to accessing data or providing support for information that must be safeguarded and returned to the COR for endorsement and retention. Copies of all executed NDAs shall be provided to the COR.

B) Carlos Lama

(540) 653-3306 carlos.lama@navy.mil