SOW_BIDDING 020-24_Redacted.pdf

UNCLASSIFIED

BIDDING 020-24

MAINTENANCE AND SUPPORT

SERVICE STATEMENT OF WORK (SOW)

1.0 BACKGROUND

The Naval Surface Warfare Center, Dahlgren Division (NSWCDD), require twenty four months Maintenance and

Support for the GPS Simulator system.

2.0 APPLICABLE DOCUMENTS

No documents are required for this effort.

3.0 REQUIREMENTS

3.1 The contractor shall provide any generally released software and firmware upgrades through the duration of coverage.

3.2 The contractor shall provide on-demand technical assistance during normal business hours via telephone, fax and email through the duration of coverage.

3.3 The contractor shall provide remote service request response within one business day to diagnose the fault remotely and if not resolved remotely, the contractor will raise a service request. This coverage will be through the duration of the period of performance.

3.4 The contractor shall provide repairs, replacement of parts, cleaning, or adjustments as appropriate to remedy the fault either onsite or at contractor facilities at no additional cost.

3.5 The contractor shall provide replacement parts if determined

Dahlgren personnel can install without assistance of the contractor, and detailed instructions for shipping back the faulty parts replaced.

3.6 The contractor shall provide advice and suggestions on best practices in using the software, provide software fixes, including new documentation where required, and proposal of alternative work-around should software maintenance services be required due to software fault.

3.7 The contractor shall provide password controlled access to the dedicated service and support website.

3.8 The contractor shall provide 12 months from delivery of the system, warranties on replacement components against defects in materials and workmanship.

4.0 PERIOD OF PERFORMANCE

The contractor shall provide full coverage outlined for a duration of twenty-four (24) months after Receipt of Award.

5.0 GOVERNMENT-FURNISHED PROPERTY/MATERIAL/INFORMATION

(GFP/GFM/GFI)

There is not Government-Furnished GFP, GFM or GFI for this effort.

6.0 SECURITY

6.1 DD254 Requirements

6.1.1 The Department of Defense Contract Security Classification

Specification (DD Form 254) provides the security classification requirements for this order. The Contractor shall obtain facility and personnel security clearances at the SECRET level required by the National Industrial Security System prior to starting to work on tasks requiring clearances. Access to classified spaces and material and generation of classified material shall be in accordance with the attached DD Form 254. The contractor shall maintain the capability to store information up to and including SECRET.

Contractor must comply with guidelines specified on the DD254. An interim SECRET (S) clearance is acceptable at time of award so long as a current clearance, respectively, is obtained within 180 calendar days subsequent to award unless further extended by prior written authorization by the Contracting Officer. The Contractor shall submit completed clearance packages within ten (10) calendar days or identification of any increased security requirements.

6.1.2 Execution of this effort under the SOW requires the Contractor to have access to classified information, systems, system data and products, and detailed analyses of systems. While working on classified tasks, the Contractor shall safeguard all classified materials in accordance with applicable Government and industrial security regulations. The Contractor is responsible for taking

Information Security Awareness training annually, via their Facility

Security Officer (FSO), as part of the mandatory training requirements.

6.1.3 The contractor shall require access to Communications Security

(COMSEC), which includes accountable or non-accountable COMSEC information and CCI in order to provide support to the SimSAAS software associated with the GPS simulation unit. (DD Form 254 Block

10a)

6.1.4 Controlled Unclassified Information (CUI) (formerly For

Official Use Only (FOUO) and Personally Identifiable Information

(PII)) generated and/or provided under this contract shall be safeguarded and marked as specified in DODI 5200.48, Controlled

Unclassified Information (CUI), March 6, 2020. (DD Form 254 Block

10j and 11l)

6.1.5 The Contractor shall be required to receive and generate classified material in support of updating, troubleshooting and possible repair to the GPS Simulation equipment. (DD Form 254 Block

11c)

6.1.6 The Contractor shall be required to fabricate, modify, or store classified hardware in support of SimSupport services. (DD

Form 254 Block 11d)

6.1.7 The contractor shall require a COMSEC account in order to provide support to the SimSAAS software associated with the GPS simulation unit.(DD Form 254 Block 11h)

6.1.8 The Contractor shall be required to have authorization to utilize Defense Courier Services. (DD Form 254 Block 11k)

6.2 Electronic Spillages

Electronic spillages (ES) are unacceptable and pose a risk to national security. An electronic spillage is defined as classified data placed on an information system (IS), media or hardcopy document possessing insufficient security controls to protect the data at the required classification level, thus posing a risk to national security (e.g., sensitive compartmented information (SCI) onto collateral, Secret onto Unclassified, etc.). The Contractor's performance as it relates to ES will be evaluated by the Government.

ES reflects on the overall security posture of the Government and a lack of attention to detail with regard to the handling of classified information of IS security discipline and will be reflected in the Contractor's performance rating. In the event that a Contractor is determined to be responsible for an ES, all direct and indirect costs incurred by the Government for ES remediation will be charged to the Contractor.

NSWCDD Command Security will continue to be responsible for the corrective action plan in accordance with the security guidance reflected on the DOD Contract Security Classification Specification

- DD254. Command Security will identify the Contractor facility and

Contract number associated with all electronic spillages during the investigation that involve Contractor support. Command Security will notify the Contracts Division with the Contractor facility name and

Contract number, incident specifics and associated costs for cleanup. The Contracting Officer will be responsible to work with the Contractor Facility to capture the costs incurred during the spillage clean up. The Contractor is also responsible for taking

Information Security Awareness training annually, via their Facility

Security Officer (FSO), as part of the mandatory training requirements. If a spillage occurs, additional training will be required to prevent recurrence.

6.3 Portable Electronic Devices (PEDs)

Non-government and/or personally owned portable electronic devices

(PEDs) are prohibited in all NSWCDD buildings with the exception of personally owned cell phones, which are authorized for use in spaces up to and including Restricted Access Areas. All personnel need to be aware of PED’s policy and being permitted in a building by asking authorized personnel or reviewing the entrance area signs and instructions. The Contractor/personnel visiting shall ensure the onsite personnel remain compliant with this PED policy. NSWCDD instruction defines PEDs as the following: any electronic device designed to be easily transported, with the capability to store, record, receive or transmit text, images, video, or audio data in any format via any transmission medium. PED’s include, but are not limited to, pagers, laptops, radios, compact discs and cassette players/recorders. In addition, this includes removable storage media such as flash memory, memory sticks, multimedia cards and secure digital cards, micro-drive modules, ZIP drives, ZIP disks, CD-RWs, DVD-RWs, MP3 players, iPADs, digital picture frames, electronic book readers, kindle, nook, cameras, external hard dish drives, and floppy diskettes.

Personal Wearable Fitness Devices (PWFDs) marketed primarily as fitness or sleep devices are allowed in all Navy spaces, if they are compliant with NAVADMIN 216/15, where collateral non-Sensitive

Compartmented Information (SCI), classified information is processed, stored, or discussed up to and including secret. The

User must ensure the PWFD is compliant with all requirements in

NAVADMIN 216/15, Cyber Hygiene Authorization to use Personal

Wearable Fitness Devices (e.g., FitBit, Jawbone UP, etc.) in Navy

Spaces, dated 14 September 2015 and register PWFD in the NSWCDD

Fitness Device Tracker.

Personnel requiring the use of Medical Portable Electronic Devices

(MPEDs) must submit Form NSWCDD 5239/4 for SCIF authorization to the

Special Security Officer (SSO). For Special Access Program Facility

(SAPF) authorizations, follow the guidance provided by the

Government Special Access Program Security Officer (GSSO).

Authorizations for use in SAPFs that are co-utilized within NSWCDD

SCIFs require coordination between both the GSSO and SSO. For authorizations to use MPED in Collateral Classified spaces, submit form to the Special Programs Branch, Code 1053.

PED’s belonging to an external organization shall not be connected to NSWCDD networks or infrastructure without prior approval from the

NSWCDD Information Assurance and Compliance Branch. This approval will be granted using the TARIS form and action tracker process.

Personally owned hardware or software shall not be connected or introduced to any NSWCDD hardware, network or information system infrastructure.”

Navy-issued peripheral:

Government procured headsets with or without microphones must be wired, use either a 3.5 millimeter (mm) audio jack or universal serial bus (USB) port, cannot contain active-noise cancelling functionality and may be used on systems and may be used on systems of classification up to and including collateral Top Secret. The headsets are considered unclassified when unplugged, and must be unplugged when not in use within classified spaces or when classified discussions are taking place in unclassified spaces.

Government procured Bluetooth earbuds and headsets that do not require a USB dongle or any other physical connection to enable wireless connectivity are allowed for use on government issued tablets, phones, and personal devices in telework environments or unclassified general office space where no classified discussion are occurring.

Web cameras may only be used on systems at the classification level of the space. For example, in a collateral SECRET open storage area an external web camera may be connected to the SECRET workstation only. No camera pass is required for these devices.

Government provided printers and/or scanners are authorized in a telework environment. Users must ensure that any paper or media containing controlled unclassified information (CUI) or unclassified information not authorized for public release is safeguarded by locking in a drawer, cabinet or room. CUI and unclassified information not approved for public release must be returned to the worksite for destruction.

Government issued peripherals may be used on personal devices.

While connected to any Navy network, whether on site or while in a telework environment, the use of headsets with microphones and web cameras are restricted to official government duties.

6.4 Operations Security (OPSEC)

Contractor personnel shall follow OPSEC concepts and principles in the conduct of this requirement to protect critical information, personnel, facilities, equipment, and operations from compromise.

All Contractors (including Subcontractors) shall supplement their current security practices by requiring any personnel involved in executing this contract to complete Government-sponsored and administered Operations Security (OPSEC) training. In addition, all

Contractors should be aware of the Critical Information and

Indicators List (CIIL) for the organization they are supporting as well as the OPSEC plan for NSWCDD. These OPSEC requirements will be in effect throughout the life of the procurement from award through the conclusion of services at the end of the period of performance

(PoP) or other procurement termination. The Contractor must immediately notify the Government upon the discovery of any nonconformance with the OPSEC Plan.

7.0 TRAVEL

There is no anticipated travel associated to this work statement.

8.0 TECHNICAL POINT OF CONTACT