Initial_Task_Order.docx.rtf

Initial Task Order #1

1.0 OBJECTIVE

The objective of this effort is to provide continued Information Technology, Information Assurance (IT /IA) and consulting services in support of The Research, Development, Test and Evaluation (RDT&E) Infrastructure Division

2.0 SCOPE

The scope of this effort provides technical and management support services for the RDT&E Infrastructure Division. Requirements include support for:

Support for the Division’s Service Management Office/Business office to include administrative duties, ITPR submissions, NMCI POC functions, travel & visit requests, document management and meeting facilitation.

RDT&E Executive Management support and consulting to include consulting services.

The geographic scope of this effort includes all NAVAIR activities, including the Naval Air Depots (Jacksonville, Cherry Point, and North Island), NAWCAD (Patuxent River and Lakehurst), NAWCWD (China Lake and Point Mugu), NAWCTSD, and Naval Air Weapons Station (NAWS), China Lake. Also included are attached activities such as Air Test and Evaluation Squadron Nine and any activity or location which directly supports the program mission of NAVAIR and subordinate activities. For the purposes of this document, "customer" is defined as anyone opening a work order or acquiring RDT&E support services under this contract.

3.0 REQUIREMENTS

The Contractor shall provide qualified personnel, material, facilities, equipment, software, and other services necessary to support the Navy in the execution of this PBSOW. The Contractor shall provide monthly status reports in accordance with the Contract Data Requirements List (CDRL), Item A001.

The Contractor shall team with Government personnel to develop cross-functional/-discipline teams based on Integrated Product Team (IPT) concepts. Additionally, the Contractor shall ensure that their personnel understand and follow statutory and regulatory restrictions and standards of conduct when close working relationships, such as IPTs, are required. All Contractor team members shall have the knowledge and expertise to participate in problem-solving and decision-making (except for Government functions normally referred to as inherently Governmental such as the act of governing, i.e., the discretionary exercise of Government authority, and monetary transactions and entitlements), and the implementation of team decisions.

The Contractor shall remain knowledgeable in the Department of Navy and NAVAIR FAM processes. The Contractor shall remain current in their functional areas of expertise and evolving technologies for RDT&E functional areas.

The Contractor may also be required to attend Government sponsored training. The Contractor may be required to provide training to or for Government personnel at the Contractor’s facility or other agreed upon locations.

3.1 Functional Area Manager (FAM) Support

The Functional Area Manager (FAM) team is responsible for overall portfolio management of the Navy’s RDT&E labs, regardless of what functional area the application resides.

Portfolio management includes the oversight of the development, management, reduction, and consolidation of IT applications and databases with the authority to direct migration, consolidation, and/or retirement.

The FAM team represents both the Navy and NAVAIR in each of these functional areas as the Echelon I and Echelon II FAM.

SECNAVINST 5000.36A, dated 19 Dec 2005, describes the IT Portfolio Management roles and responsibilities of Functional Area Managers (FAMs), Functional Data Managers (FDMs) and Functional Namespace Coordinators (FNCs) that support the FAM process.

The contractor shall:

Register NAVAIR & Navy RDT&E software applications and databases in the DON Applications and Database Management System (DADMS)

Recommend disposition of registered software applications and databases in DADMS to the appropriate Navy level Echelon I FAM Map RDT&E Lab software applications and databases to the T&E taxonomy in DADMS Conduct Business Case Analyses of NAVAIR & Navy RDT&E applications in DADMS and provide technical reports in accordance with CDRL A003 As required, serve as a FAM representative to DON CIO working groups as a subject matter expert supporting the development IT Portfolio Management policy, processes, procedures and documentation Assist database owners and developers with the registration of databases, metadata, and the development of functional area data architectures

3.2 Service Management Office (SMO) and Strategic Planning Support

Contractor shall provide support for the Services Management Office (SMO) within 5.4.1.2 handling administrative tasking as assigned to include, but not limited to: documenting management, configuration management, action item tracking & reporting, division level communique’s, RDT&E User Group meeting facilitation, Annual Lab customer Service Agreements, oversight employee check-in/check-out, facility key custodian, visit requests through BASICS, travel request and processing, and security clearance validation.

Additionally, the SMO also provides the resources necessary to assist with the numerous IT procurements to include development and submission of IT Approval request thru NAVAIR CIO, ensuring DADMS compliance, creation, routing and tracking of procurement documents whether it’s purchased via Material CLIN one of our contracts, or through a government purchase card.

Additional tasking includes:

Update, review and track Information Assurance (IA) vulnerabilities in the Vulnerability Management System as mandated by DoD.

Oversee and execute the notification of computer system availability, news, alerts and time sensitive information as it relates to RDT&E network and its infrastructure.

Track & document all Firewall Configuration changes and ensure all approved rules are submitted to the Firewall administrator to be implemented.

Download Security Technical Implementation Guides (STIG) updates from DISA and update corresponding 5.4.1 spreadsheets created to track STIG findings and mitigations.

SMO also includes the resource serving as the 5.4.1 NMCI POC, and requests new NMCI accounts, NMCI seats, tracks orders, helps coordinate tech-refresh, disables accounts, and submitting Move/Add/Change (MAC) requests.

SMO support includes management and support of our process improvement initiative which includes documenting and managing our evolving processes, ensuring they are updated accordingly. Tasking will include configuration management and Subject Matter Expert (SME) in the Footprints software tool (or equivalent/similar) which will provide our division insight into processes and areas for improvement.

The Contractor shall support the divisions Service Management and Strategic Planning initiatives to maintain and improve management and delivery of RDT&E services and network infrastructure. This entails strategic and business planning change management and integration of business functions to include critical processes such as Request Management, Incident Management, Problem Management, Service Level Management, Service Asset and Configuration Management and Change Management. The contractor shall participate in implementing best practice solutions that enable the success of a transformation framework that is designed to facilitate and improve operational efficiency, standardize operations, reduce costs, improve service levels, improve customer satisfaction, and improve decision making. Contractor personnel providing support to this area must have familiarity with emerging concepts and methodologies. They may be required to serve as technical experts, as well as interact with other technical experts. Tasks may include:

Perform a variety of studies, analyses, research and evaluations.

Identify, conceptualize, evaluate, document, and recommend opportunities for process, program and project improvements.

Provide documentation of current conditions, recommendations for improvements, resulting capability deficiencies, etc. (e.g. technology roadmaps, process models).

Develop implementation strategy and plans.

Design, architect and implement solutions to support RDT&E Service Management.

Support implementation of ITSM tool and lead process integration activities, providing functional and technical insight to the ITSM tool users.

Research, plan, coordinate and recommend future ITSM application solutions for conceptual design requirements.

Aid in translating business requirements into technical requirements and help to implement new functionality. Develop recommendations, enhancements and support in implementation of improvements based on various stages of the ITIL lifecycle.

Develop, implement and maintain Strategic Plans, Project Management Plan and Project Plans for RDT&E Infrastructure Division teams.

Keep abreast of industry developments and trends to aid in ensuring alignment with industry best practices.

3.3 RDT&E Laboratory Information Assurance Support Team (RLIST)

The RDT&E Laboratory Information Assurance Support Team (RLIST) provides support various RDT&E Labs across NAVAIR as required. The RLIST team standardizes, streamlines, and assists lab managers with IA and IT compliance requirements. RLIST serves as a single point of contact to obtain information and guidance to help ensure RDT&E approved labs are certified and accredited, operate securely, and are compliant with the appropriate IA controls. The team goal is to minimize the impact of IA mandates for RDT&E labs and maximize their ability to meet mission requirements, enabling the labs to fully concentrate on Fleet-driven support operational needs.

Contractor shall provide assistance and technical expertise to the RLIST government lead to ensure compliance with various IA mandates while supporting the Certification and Accreditation (C&A) process.

The contractor shall:

Ensure Single Scope Background Investigation (Secret) clearances are obtained for the personnel appointed as Information Assurance Workforce

Ensure required employees are compliant with latest version of DoD 8570.01-M “Information Assurance Training, Certification, and Workforce Management,” ensuring all required individuals are IAT Level II certified.

Assist with and/or generate the Customer Requirements Brief (CRB) Questionnaire for presentation to NAVAIR/NAWCAD 7.2.6. Attend the CRB with Customer to understand the Information Assurance (IA) Plan defined at the CRB and address any issues identified during the CRB Develop appropriate Certification and Accreditation (C&A) documents, as identified in the CRB, to include, but not limited to: Non-Global Information Grid (GIG) Stand-alone C&A Package(s), Non-GIG Closed Loop C&A Package(s), DoD Information Assurance Certification and Accreditation Process (DIACAP) package(s), and Plan of Actions & Milestones (POA&M) Perform vulnerability scans on all applicable systems Perform analysis of all scans to determine state of compliance with Defense Information Security Agency (DISA) Security Technical Information Guide (STIG), Information Assurance Vulnerability Alert (IAVA) compliance and vulnerabilities (Risk assessment). Document and provide recommendations to ensure compliance with all applicable policies and directives.

Perform system hardening as required to ensure systems are configured to operate at an acceptable level of risk Perform post hardening scans for review and verification of system risk posture Document overall IA efforts, and provide post hardened system risk posture data for review by NAWCAD 7.2.6 Provide embedded System Administration support as required by customers

3.4 RDT&E Executive/RDT&E Lab Consulting/Business Support

Contractor shall be required to provide various high-level consulting to and on behalf of the Navy RDT&E Executive. This will include tasking & support in the areas of:

Participate in numerous meetings to discuss the Naval Enterprise Architecture Repository (NEAR). Topics range from requirements, progress, user interface concepts and design, knowledge transfer, timeline, communications plan, etc.

Attend NEAR Reviews to view latest development efforts.

Create conceptual webpage mockups for the NEAR user interface.

Update and submit the NEAR bi-weekly to the DASN (RDT&E).

Participate in multiple meetings to discuss design and functionality of the Tailored Mission Architecture Wizard component of the NEAR.

Create briefing packages as needed for the socialization of the NEAR.

Locate and export various common elements lists to be utilized within the NEAR reference library.

Record tasking from meetings and ensure timely completion.

Review and test NEAR communications website and NEAR application for any broken links and/or bugs.

3.5 RDT&E Virtual SYSCOM Support

The Contractor shall assist the 5.4.1 Division and 5.4 Department by interpreting, advising and developing strategies to support DoN initiatives for providing RDT&E services and network infrastructure. This work requires both technical and strategic planning facilitation of data collection and requirements interpretation for the NAVAIR RDT&E laboratory infrastructure and capabilities. The contractor shall advise senior department and division personnel on courses of action related to the above topics that are in conformance with DoN directives yet do not hinder accomplishing IBST Department and Infrastructure Division missions. Contractor personnel providing support to this area must have familiarity with DON RDT&E policies and their application across a diverse set of NAVAIR RDT&E capabilities. They may be required to serve as technical experts, as well as interact with other technical experts. Tasks may include:

Perform a variety of studies, analyses, plans, strategies, research and evaluations relating to the NAVAIR RDT&E environment.

Identify, conceptualize, evaluate, document, and recommend options for compliance with emerging DoN directives governing RDT&E facilities and services

Provide documentation of current conditions, requirements, capabilities existing in the NAVAIR RDT&E lab portfolio.

Design, architect and implement solutions to support IBST and Infrastructure Division requirements.

Research, plan, coordinate and recommend future opportunities to enhance capabilities for NAVAIR RDT&E laboratory services. .

Aid in translating DoN policy objectives into executable technical solutions to the NAVAIR RDT&E lab environment

Remain apprised of emerging trends in DoD and DoN RDT&E lab community and facilitate alignment with the NAVAIR RDT&E environment.

Deliverables/Reporting A001 – Monthly Status Report A002 – Monthly Financial Tracking Report A003 – Reports and Documentation A004 – OPSEC Plan A005 – Incurred Cost and Progress Reporting for Services Period of Performance The period of performance for this effort is the date of award through 12 months.

Place of Performance Work is to be performed at nearly all NAVAIR activities, including the Naval Air Depots (Jacksonville, Cherry Point, and North Island), NAWCAD (Patuxent River and Lakehurst), NAWCWD (China Lake and Point Mugu), NAWCTSD, and Naval Air Weapons Station (NAWS), China Lake. Also included are attached activities such as Air Test and Evaluation Squadron Nine and any activity or location which directly supports the program mission of NAVAIR and subordinate activities Security This task will include handling data to the SECRET classification level, designated personnel will be required to have Secret with SSBI.

Travel The Government will reimburse the contractor for allowable travel costs incurred by the contractor in performance of the order in accordance with FAR Subpart 31.2 and FAR 52.232-22. Travel will be coordinated and approved by the COR prior to travel. During this 12 month POP, it is anticipated that there will be several trips to and from other NAVAIR sites or locations hosting necessary meetings or with other agencies.

Initial Task Order Labor Estimate

Labor Categories Hours Computer Systems Analyst I Computer Systems Analyst II Computer Systems Analyst III System Analyst Management Analyst I Management Analyst II Information Assurance Analyst System Admin, Senior System Admin, Junior Computer Scientist, Sr System Analyst, Sr

TOTAL

53760