N00421-15-R-0003_Draft.doc

Section B - Supplies or Services and Prices

Labor

CPFF

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.3, 3.4, 3.5, NWCF, excluding ODC's.

FOB: Destination

PURCHASE REQUEST NUMBER: 1300438968

ESTIMATED COST

FIXED FEE

TOTAL EST COST + FEE

Lot

Labor

FFP

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.3, 3.4, 3.5, NWCF, excluding ODC's.

NET AMT

Labor

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, MRTFB, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Lot

Labor

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, MRTFB, excluding ODC's.

NET AMT

Labor

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.4, RDT&E, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Lot

Labor

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.4, RDT&E, excluding ODC's.

NET AMT

Travel

COST

Other Direct Costs in support of CLINs 0001, 0002, 0003, NWCF,Travel.

ESTIMATED COST

Travel

Other Direct Costs in support of CLINs 0001, 0002, 0003, MRTFB, Travel.

ESTIMATED COST

Travel

Other Direct Costs in support of CLINs 0001, 0002, 0003, RDT&E, Travel.

ESTIMATED COST

Material

Other Direct Costs in support of CLINs 0001, 0002, 0003, NWCF, Material.

ESTIMATED COST

Material

Other Direct Costs in support of CLINs 0001, 0002, 0003, MRTFB, Material.

ESTIMATED COST

Material

Other Direct Costs in support of CLINs 0001, 0002, 0003, RDT&E, Material.

ESTIMATED COST

NMCI

Other Direct Costs in support of CLINs 0001, 0002, 0003, NWCF, NMCI.

ESTIMATED COST

NMCI

Other Direct Costs in support of CLINs 0001, 0002, 0003, MRTFB, NMCI.

ESTIMATED COST

NMCI

Other Direct Costs in support of CLINs 0001, 0002, 0003, RDT&E, NMCI.

ESTIMATED COST

Lot

Data Deliverables

NOT SEPARATELY PRICED. Data Deliverables In support of CLIN 0001, 0002, 0003, in accordance with Exhibit A, DD 1423, Contract Data Requirement List.

ESTIMATED COST

Labor, First Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, NWCF, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Lot

Labor, First Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.3, 3.4, 3.5, NWCF, excluding ODC's.

NET AMT

Labor, First Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, RDT&E, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Lot

Labor, First Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, MRTFB, excluding ODC's.

NET AMT

Labor, First Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, MRTFB, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Lot

Labor, First Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, MRTFB, excluding ODC's.

NET AMT

Travel, First Option Year

ESTIMATED COST

Travel, First Option Year

ESTIMATED COST

Travel, First Option Year

ESTIMATED COST

Material, First Option Year

ESTIMATED COST

Material, First Option Year

Other Direct Costs in support of CLINs 0001, 0002, 0003, MRTFB, Material

ESTIMATED COST

Material, First Option Year

ESTIMATED COST

NMCI, First Option Year

ESTIMATED COST

NMCI, First Option Year

ESTIMATED COST

NMCI, First Option Year

ESTIMATED COST

Data Deliverables, First Option Year

NOT SEPARATELY PRICED. Data Deliverables In support of CLIN 0001, 0002, 0003, in accordance with Exhibit A, DD 1423, Contract Data Requirement List.

ESTIMATED COST

Labor, Second Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, NWCF, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Lot

Labor, Second Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, NWCF, excluding ODC's.

NET AMT

Labor, Second Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, MRTFB, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Lot

Labor, Second Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, MRTFB, excluding ODC's.

NET AMT

Labor, Second Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, RDT&E, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Lot

Labor, Second Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, RDT&E, excluding ODC's.

NET AMT

Travel, Second Option Year

ESTIMATED COST

Travel, Second Option Year

ESTIMATED COST

Travel, Second Option Year

ESTIMATED COST

Material, Second Option Year

ESTIMATED COST

Material, Second Option Year

ESTIMATED COST

Material, Second Option Year

ESTIMATED COST

NMCI, Second Option Year

ESTIMATED COST

NMCI, Second Option Year

ESTIMATED COST

NMCI, Second Option Year

ESTIMATED COST

Lot

Data Deliverables, Second Option Year

NOT SEPARATELY PRICED. Data Deliverables In support of CLIN 0001, 0002, 0003, in accordance with Exhibit A, DD 1423, Contract Data Requirement List.

ESTIMATED COST

Labor, Third Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, NWCF, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Lot

Labor, Third Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, NWCF, excluding ODC's.

NET AMT

Labor, Third Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, MRTFB, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Lot

Labor, Third Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, MRTFB, excluding ODC's.

NET AMT

Labor, Third Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, RDT&E, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Labor, Third Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, RDT&E, excluding ODC's.

NET AMT

Travel, Third Option Year

ESTIMATED COST

Travel, Third Option Year

ESTIMATED COST

Travel, Third Option Year

ESTIMATED COST

Material, Third Option Year

ESTIMATED COST

Material, Third Option Year

ESTIMATED COST

Material, Third Option Year

ESTIMATED COST

NMCI, Third Option Year

ESTIMATED COST

NMCI, Third Option Year

ESTIMATED COST

NMCI, Third Option Year

ESTIMATED COST

Lot

Data Deliverables, Third Option Year

NOT SEPARATELY PRICED. Data Deliverables In support of CLIN 0001, 0002, 0003, in accordance with Exhibit A, DD 1423, Contract Data Requirement List.

ESTIMATED COST

Labor, Fourth Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, NWCF, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Lot

Labor, Fourth Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, NWCF, excluding ODC's.

NET AMT

Labor, Fourth Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, MRTFB, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Labor, Fourth Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, MRTFB, excluding ODC's.

NET AMT

Labor, Fourth Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, RDT&E, excluding ODC's.

FIXED FEE

TOTAL EST COST + FEE

Labor, Fourth Option Year

The Functional Area Manager (FAM) Support IAW Section C Statement of Work 3.1, 3.2, 3.3, 3.4, 3.5, RDT&E, excluding ODC's.

NET AMT

Travel, Fourth Option Year

ESTIMATED COST

Travel, Fourth Option Year

ESTIMATED COST

Travel, Fourth Option Year

ESTIMATED COST

Material, Fourth Option Year

ESTIMATED COST

Material, Fourth Option Year

ESTIMATED COST

Material, Fourth Option Year

ESTIMATED COST

NMCI, Fourth Option Year

ESTIMATED COST

NMCI, Fourth Option Year

ESTIMATED COST

NMCI, Fourth Option Year

ESTIMATED COST

Lot

Data Deliverables, Fourth Option Year

NOT SEPARATELY PRICED. Data Deliverables In support of CLIN 0001, 0002, 0003, in accordance with Exhibit A, DD 1423, Contract Data Requirement List.

ESTIMATED COST

CLAUSES INCORPORATED BY FULL TEXT

5252.211-9503

LEVEL OF EFFORT (COST REIMBURSEMENT) (NAVAIR)(DEC 2012)

(a) The level of effort estimated to be ordered during the term of this contract is 105,600 man-hours of direct labor including authorized subcontract labor, if any. The contractor shall not, under any circumstances, exceed one hundred (100%) percent of the total level of effort specified in this basic contract. The estimated composition of the total man-hours of direct labor by classification is as follows:

Labor Category Man-hours Total Man-hours

See Section L-2 2.0 Labor Categories and Labor Hours

(b) FAR Clause 52.232-20, "Limitation of Cost" applies to fully funded orders and FAR Clause 52.232-22, "Limitation of Funds" applies to incrementally funded orders. Nothing in this clause amends the rights or responsibilities of the parties hereto under either of those two clauses. In addition, the notifications required by this clause are separate and distinct from any specified in either FAR Clause 52.232-20 or FAR Clause 52.232-22.

(c) In the event that less than one hundred (100%) percent of the established level of effort of the contract/order is actually expended by the end of the performance period, the Government shall have the option of:

(1) Requiring the Contractor to continue performance, subject to the provisions of the FAR Clause 52.232-20 or 52.232-22, as applicable, until the effort expended equals 100% of the established Level of Effort; or

(2) Effecting a reduction in the fixed fee by the percentage by which the total expended man-hours is less than one hundred (100%) percent of the established Level of Effort.

(d) Completion Form Task Orders.

(1) A level of effort shall be established for each completion form task order. This estimated level of effort is established for the purpose of determining the amount of fixed fee payable on the task order and tracking the ceiling amount of the contract, it is not to be construed as a performance requirement. In the event the task(s) cannot be completed within the estimated cost, the Government will require more effort without increase in fee, if the Government elects to continue, provided the Government increases the estimated cost.

(2) Within thirty days after completion of the work under each completion form task order, the Contractor shall submit the following information directly, in writing, to the contracting officer, with copies to the COR and the Defense Contract Audit Agency office to which vouchers are submitted:

(i) The Contractor's estimate of the total allowable cost incurred under the task order; and

(ii) In the case of a cost under run, the amount by which the estimated cost of the task order may be reduced to recover excess funds.

(e) Term Form Task Orders.

(1) The Contractor shall notify the Procuring Contracting Officer immediately in writing whenever it has reason to believe that:

(i) The level of effort the Contractor expects to incur under any term form order in the next 60 days, when added to the level of effort previously expended in the performance of that order, will exceed seventy-five (75%) percent of the level of effort established for that order; or

(ii) The level of effort required to perform a particular term form order will be greater than the level of effort established for that order.

As part of the notification, the Contractor shall provide the Contracting Officer a revised estimate of the level of effort required to perform the order. As part of the notification, the Contractor also shall submit any proposal for adjustment to the estimated cost and fixed fee that it deems would be equitable if the Government were to increase the level of effort as proposed by the Contractor. In performing term form task orders, the Contractor may use any combination of hours of the labor categories listed in the task order.

(2) In performing term form task orders, the contractor may use any combination of hours of the labor categories listed in the task order.

(3) Within thirty days after completion of the work under each term form task order, the Contractor shall submit the following information directly, in writing, to the ordering officer, with copies to the COR and the Defense Contract Audit Agency office to which vouchers are submitted:

(i) The total number of man-hours of direct labor, including subcontract labor, expended and a breakdown of this total showing the number of man-hours expended in each direct labor classification listed in the task order schedule, including the identification of the key employees utilized;

(ii) The Contractor's estimate of the total allowable cost incurred under the task order; and

(iii) In the case of a cost under run, the amount by which the estimated cost of the task order may be reduced to recover excess funds.

(4) In the event that less than one hundred (100%) percent of the established level of effort of a term order (or if said level of effort has been previously revised upward, of the fee bearing portion of the additional hours by which the level of effort was last increased) is actually expended by the completion date of the contract, the Government shall have the option of:

(i) Requiring the Contractor to continue performance, subject to the provisions of the "Limitation of Cost" or the "Limitation of Funds" clause, as applicable, until the effort expended equals one hundred (100%) percent of the established Level of Effort (or of the fee-bearing portion of the last upward revision); or

(ii) Effecting a reduction in the fixed fee by the percentage by which the total expended man-hours is less than one hundred (100%) percent of the established Level of Effort (or the fee bearing portion of the last upward revision).

(5) In the event that the expended level of effort of a term order exceeds the established level of effort by ten (10%) percent or less, but does not exceed the estimated cost of the order; the contractor shall be entitled to cost reimbursement for actual hours expended, not to exceed the ceiling cost. The contractor shall not be paid fixed fee, however, on level of effort in excess of one hundred (100%) percent without complying with subsection (e)(1) above. This understanding does not supersede or change subsection (e)(1) above, whereby the contractor and Government may agree on a change to the task order level of effort with an equitable adjustment for both cost and fee.

Section C - Descriptions and Specifications

STATEMENT OF WORK

Research, Development, Test and Evaluation (RDT&E) Lab Information Technology (IT) Support/Navy RDT&E Executive

Performance-Based Statement of Work

1.0

INTRODUCTION

The Research, Development, Test and Evaluation (RDT&E) Infrastructure Division is responsible for the Naval Air Systems Command (NAVAIR) RDT&E network infrastructure. Additionally, this division provides the support and serves as the Navy Functional Area Management (FAM)/ IT Portfolio Manager for the Navy’s RDT&E labs. The RDT&E Infrastructure division also provides information assurance support via the RDT&E Lab Information Assurance Support Team (RLIST) to our RDT&E labs, providing assistance and technical expertise to ensure compliance with various IA mandates and supporting the Certification and Accreditation (C&A) process. This division also provides various other IT and consulting type functions in support of the Navy’s RDT&E Labs in support of the RDT&E Executive which is a NAVAIR 5.4 function, including supporting the Service Management Office (SMO) within 5.4.1.2.

The goal of the RDT&E Infrastructure Division is to provide NAVAIR and its government and commercial partners and customer communities of interest with enterprise solutions and services to meet their Information Technology requirements, as well as providing consulting resources to help ensure the Navy’s RDT&E labs stay in compliance with the large number of IA/security mandates.

The division’s support is national in scope, including RDT&E support for more than one hundred fifty (150) laboratories and facilities at Patuxent River, MD; China Lake, CA; St. Inigoes, MD; Point Mugu, CA; Jacksonville, FL; Lakehurst, NJ; Orlando, FL; Cherry Point, NC; and San Diego, CA. Also Additional NAVAIR locations/annexes as required.

2.0

SCOPE

This Performance-Based Statement of Work (PBSOW) defines the requirements for providing technical and management support services for the RDT&E Infrastructure Division. Requirements include support for:

· Navy level & NAVAIR RDT&E FAM. This covers oversight, management and day to day Operations & Maintenance (O&M) of the largest of the Navy’s software portfolios.

· Information Assurance support via the RLIST Team to our RDT&E labs, providing assistance and technical expertise to ensure compliance with various IA mandates and supporting the Certification and Accreditation (C&A) process.

· Support for the Division’s Service Management Office/Business office to include administrative duties, ITPR submissions, NMCI POC functions, travel & visit requests, document management and meeting facilitation.

· RDT&E Executive Management support and consulting

The geographic scope of this effort includes all NAVAIR activities, including the Naval Air Depots (Jacksonville, Cherry Point, and North Island), NAWCAD (Patuxent River and Lakehurst), NAWCWD (China Lake and Point Mugu), NAWCTSD, and Naval Air Weapons Station (NAWS), China Lake. Also included are attached activities such as Air Test and Evaluation Squadron Nine and any activity or location which directly supports the program mission of NAVAIR and subordinate activities. For the purposes of this document, "customer" is defined as anyone opening a work order or acquiring RDT&E support services under this contract.

2.1 Inherently Governmental Functions

No item in this Performance-Based Statement of Work (PBSOW) shall be interpreted to have the contractor performing services that are inherently governmental services or personal services as defined in FAR 2.101. If any provision of the PBSOW conflicts with this term, this prohibition shall take precedence.

3.0

REQUIREMENTS

The Contractor shall provide qualified personnel, material, facilities, equipment, software, and other services necessary to support the Navy in the execution of this PBSOW. The Contractor shall provide monthly status reports in accordance with the Contract Data Requirements List (CDRL), Item A001.

The Contractor shall team with Government personnel to develop cross-functional/-discipline teams based on Integrated Product Team (IPT) concepts. Additionally, the Contractor shall ensure that their personnel understand and follow statutory and regulatory restrictions and standards of conduct when close working relationships, such as IPTs, are required. All Contractor team members shall have the knowledge and expertise to participate in problem-solving and decision-making (except for Government functions normally referred to as inherently Governmental such as the act of governing, i.e., the discretionary exercise of Government authority, and monetary transactions and entitlements), and the implementation of team decisions.

The Contractor shall remain knowledgeable in the Department of Navy and NAVAIR FAM processes. The Contractor shall remain current in their functional areas of expertise and evolving technologies for RDT&E functional areas.

The Contractor may also be required to attend Government sponsored training. The Contractor may be required to provide training to or for Government personnel at the Contractor’s facility or other agreed upon locations.

The contractor shall produce and update documentation/presentation materials, in accordance with CDRL A002, such as PowerPoint presentations, brochures, documents for display booths and other briefing materials to support Division objectives and business development.

The contractor shall accomplish work as specified in this PBSOW. Performance of this work shall be measured in accordance with the Quality Assurance Surveillance Plan.

Functional areas to be supported under this contract are described in the sections below.

Project objectives, requirements, and funding will be defined with the issue of Task Orders (TO). A TO will be issued for each large project supported under this contract.

Task Order Funding and expenditures for specific requirements or projects within a TO shall be tracked separately, as required by the project and defined in the TO.

The appropriation/funding type(s) that will be used to fund each TO will be defined at TO initiation by the government. When more than one appropriation type is used on a TO, the separable use of each appropriation type will be identified by the government.

The Functional performance requirements (Section 4.0) required to complete each task order will be identified at TO initiation and will including the estimated hours for each functional requirement.

X

X

3.1 Functional Area Manager (FAM) Support (Item 0002 and Options 1002, 2002, 3002, 4002)

The Functional Area Manager (FAM) team is responsible for overall portfolio management of the Navy’s RDT&E labs, regardless of what functional are the application resides.

Portfolio management includes the oversight of the development, management, reduction, and consolidation of IT applications and databases with the authority to direct migration, consolidation, and/or retirement.

The FAM team represents both the Navy and NAVAIR in each of these functional areas as the Echelon I and Echelon II FAM.

SECNAVINST 5000.36A, dated 19 Dec 2005, describes the IT Portfolio Management roles and responsibilities of Functional Area Managers (FAMs), Functional Data Managers (FDMs) and Functional Namespace Coordinators (FNCs) that support the FAM process.

The contractor shall:

a. Register NAVAIR & Navy RDT&E software applications and databases in the DON Applications and Database Management System (DADMS)

b. Recommend disposition of registered software applications and databases in DADMS to the appropriate Navy level Echelon I FAM

c. Map RDT&E Lab software applications and databases to the T&E taxonomy in DADMS

d. Conduct Business Case Analyses of NAVAIR & Navy RDT&E applications in DADMS and provide technical reports in accordance with CDRL A003

e. As required, serve as a FAM representative to DON CIO working groups as a subject matter expert supporting the development IT Portfolio Management policy, processes, procedures and documentation

f. Assist database owners and developers with the registration of databases, metadata, and the development of functional area data architectures

3.2 Service Management Office (SMO) and Strategic Planning Support (Item 0002 and Options 1002, 2002, 3002, 4002)

Contractor shall provide support for the Services Management Office (SMO) within 5.4.1.2 handling administrative tasking as assigned to include, but not limited to: documenting management, configuration management, action item tracking & reporting, division level communique’s, RDT&E User Group meeting facilitation, Annual Lab customer Service Agreements, oversight employee check-in/check-out, facility key custodian, visit requests through BASICS, travel request and processing, and security clearance validation.

Additionally, the SMO also provides the resources necessary to assist with the numerous IT procurements to include development and submission of IT Approval request thru NAVAIR CIO, ensuring DADMS compliance, creation, routing and tracking of procurement documents whether it’s purchased via Material CLIN one of our contracts, or through a government purchase card.

Additional tasking includes:

· Update, review and track Information Assurance (IA) vulnerabilities in the Vulnerability Management System as mandated by DoD.

· Oversee and execute the notification of computer system availability, news, alerts and time sensitive information as it relates to RDT&E network and its infrastructure.

· Track & document all Firewall Configuration changes and ensure all approved rules are submitted to the Firewall administrator to be implemented.

· Download Security Technical Implementation Guides (STIG) updates from DISA and update corresponding 5.4.1 spreadsheets created to track STIG findings and mitigations.

SMO also includes the resource serving as the 5.4.1 NMCI POC, and requests new NMCI accounts, NMCI seats, tracks orders, helps coordinate tech-refresh, disables accounts, and submitting Move/Add/Change (MAC) requests.

SMO support includes management and support of our process improvement initiative which includes documenting and managing our evolving processes, ensuring they are updated accordingly. Tasking may include configuration management and Subject Matter Expert (SME) in the Footprints software tool (or equivalent/similar) which will provide our division insight into processes and areas for improvement.

The Contractor shall support the divisions Service Management and Strategic Planning initiatives to maintain and improve management and delivery of RDT&E services and network infrastructure. This entails strategic and business planning change management and integration of business functions to include critical processes such as Request Management, Incident Management, Problem Management, Service Level Management, Service Asset and Configuration Management and Change Management. The contractor shall participate in implementing best practice solutions that enable the success of a transformation framework that is designed to facilitate and improve operational efficiency, standardize operations, reduce costs, improve service levels, improve customer satisfaction, and improve decision making. Contractor personnel providing support to this area must have familiarity with emerging concepts and methodologies. They may be required to serve as technical experts, as well as interact with other technical experts. Tasks may include:

· Perform a variety of studies, analyses, research and evaluations.

· Identify, conceptualize, evaluate, document, and recommend opportunities for process, program and project improvements.

· Provide documentation of current conditions, recommendations for improvements, resulting capability deficiencies, etc. (e.g. technology roadmaps, process models).

· Develop implementation strategy and plans.

· Design, architect and implement solutions to support RDT&E Service Management.

· Support implementation of ITSM tool and lead process integration activities, providing functional and technical insight to the ITSM tool users.

· Research, plan, coordinate and recommend future ITSM application solutions for conceptual design requirements.

· Aid in translating business requirements into technical requirements and help to implement new functionality. Develop recommendations, enhancements and support in implementation of improvements based on various stages of the ITIL lifecycle.

· Develop, implement and maintain Strategic Plans, Project Management Plan and Project Plans for RDT&E Infrastructure Division teams.

· Keep abreast of industry developments and trends to aid in ensuring alignment with industry best practices.

3.3 RDT&E Laboratory Information Assurance Support Team (RLIST) (Item 0001; 0002 and Options 1001, 2001, 3001, 4001; 1002, 2002, 3002, 4002)

The RDT&E Laboratory Information Assurance Support Team (RLIST) provides support various RDT&E Labs across NAVAIR as required. The RLIST team standardizes, streamlines, and assists lab managers with IA and IT compliance requirements. RLIST serves as a single point of contact to obtain information and guidance to help ensure RDT&E approved labs are certified and accredited, operate securely, and are compliant with the appropriate IA controls. The team goal is to minimize the impact of IA mandates for RDT&E labs and maximize their ability to meet mission requirements, enabling the labs to fully concentrate on Fleet-driven support operational needs.

Contractor shall provide assistance and technical expertise to the RLIST government lead to ensure compliance with various IA mandates while supporting the Certification and Accreditation (C&A) process.

The contractor shall:

a. Ensure Single Scope Background Investigation (Secret) clearances are obtained for the personnel appointed as Information Assurance Workforce

b. Ensure required employees are compliant with latest version of DoD 8570.01-M “Information Assurance Training, Certification, and Workforce Management,” ensuring all required individuals are IAT Level II certified.

c. Assist with and/or generate the Customer Requirements Brief (CRB) Questionnaire for presentation to NAVAIR/NAWCAD 7.2.6. Attend the CRB with Customer to understand the Information Assurance (IA) Plan defined at the CRB and address any issues identified during the CRB

d. Develop appropriate Certification and Accreditation (C&A) documents, as identified in the CRB, to include, but not limited to: Non-Global Information Grid (GIG) Stand-alone C&A Package(s), Non-GIG Closed Loop C&A Package(s), DoD Information Assurance Certification and Accreditation Process (DIACAP) package(s), and Plan of Actions & Milestones (POA&M)

e. Perform vulnerability scans on all applicable systems

f. Perform analysis of all scans to determine state of compliance with Defense Information Security Agency (DISA) Security Technical Information Guide (STIG), Information Assurance Vulnerability Alert (IAVA) compliance and vulnerabilities (Risk assessment). Document and provide recommendations to ensure compliance with all applicable policies and directives.

g. Perform system hardening as required to ensure systems are configured to operate at an acceptable level of risk

h. Perform post hardening scans for review and verification of system risk posture

i. Document overall IA efforts, and provide post hardened system risk posture data for review by NAWCAD 7.2.6

j. Provide embedded System Administration support as required by customers

3.4 RDT&E Executive/RDT&E Lab Consulting/Business Support (Item 0001; 0002 ; 0003 and Options 1001, 2001, 3001, 4001; 1002, 2002, 3002, 4002 ; 1003, 2003, 3003, 4003)

Contractor shall be required to provide various high-level consulting to and on behalf of the Navy RDT&E Executive. This may include tasking & support in the areas of:

a. Virtual System Command (VSYSCOM) data calls & reporting

b. Technical/analytical/administrative/consulting support for the Naval Infrastructure Capabilities Assessment (NICAP) initiative, which is sponsored by the RDT&E Executive/AIR 5.4

c. Consult, support and facilitate high-level Navy or NAVAIR RDT&E strategy meetings

d. Acquire and track data associated to RDT&E labs to include requirements, investment opportunities and portfolio overviews.

e. Develop and brief high-level dashboard reports

f. Design and develop communication strategies and materials to include development of visual aids, graphics, and provide photography services in support of communication of RDT&E capabilities.

g. Support the ASN T&E Executive for the development and execution of the ASN M&S Strategic Roadmap. Contractor will be key in an area called "M&S Education and Training, responsible for leading the Naval M&S Community for Education and Training which involves gathering Naval M&S Educational requirements, prioritization of those requirements, and development/maintenance of the M&S curriculum and M&S Certificate Programs.

h. Program support for Naval Enterprise Architecture Repository (NEAR). Support for NEAR may include:

1. Participate in numerous meetings to discuss the Naval Enterprise Architecture Repository (NEAR). Topics range from requirements, progress, user interface concepts and design, knowledge transfer, timeline, communications plan, etc.

2. Attend NEAR Reviews to view latest development efforts.

3. Create conceptual webpage mockups for the NEAR user interface.

4. Update and submit the NEAR bi-weekly to the DASN (RDT&E).

5. Participate in multiple meetings to discuss design and functionality of the Tailored Mission Architecture Wizard component of the NEAR.

6. Create briefing packages as needed for the socialization of the NEAR.

7. Locate and export various common elements lists to be utilized within the NEAR reference library.

8. Create various DoDAF v2.0 artifacts as needed.

9. Setup and attend meetings with various groups to socialize the NEAR, gather requirements, and request/discuss information that could be useful in the design/functionality of the NEAR.

10. Review policies, white papers, and training material as needed.

11. Record tasking from meetings and ensure timely completion.

12. Review and test NEAR communications website and NEAR application for any broken links and/or bugs.

3.5 RDT&E Virtual SYSCOM Support (Item 0001; 0002 and Options 1001, 2001, 3001, 4001; 1002, 2002, 3002, 4002) The Contractor shall assist the 5.4.1 Division and 5.4 Department by interpreting, advising and developing strategies to support DoN initiatives for providing RDT&E services and network infrastructure. This work requires both technical and strategic planning facilitation of data collection and requirements interpretation for the NAVAIR RDT&E laboratory infrastructure and capabilities. The contractor shall advise senior department and division personnel on courses of action related to the above topics that are in conformance with DoN directives yet do not hinder accomplishing IBST Department and Infrastructure Division missions. Contractor personnel providing support to this area must have familiarity with DON RDT&E policies and their application across a diverse set of NAVAIR RDT&E capabilities. They may be required to serve as technical experts, as well as interact with other technical experts. Tasks may include:

· Perform a variety of studies, analyses, plans, strategies, research and evaluations relating to the NAVAIR RDT&E environment.

· Identify, conceptualize, evaluate, document, and recommend options for compliance with emerging DoN directives governing RDT&E facilities and services

· Provide documentation of current conditions, requirements, capabilities existing in the NAVAIR RDT&E lab portfolio.

· Design, architect and implement solutions to support IBST and Infrastructure Division requirements.

· Research, plan, coordinate and recommend future opportunities to enhance capabilities for NAVAIR RDT&E laboratory services. .

· Aid in translating DoN policy objectives into executable technical solutions to the NAVAIR RDT&E lab environment

· Remain apprised of emerging trends in DoD and DoN RDT&E lab community and facilitate alignment with the NAVAIR RDT&E environment.

4.0

CONTRACTOR’S PROGRESS, STATUS AND MANAGEMENT REPORT

Contractor’s Progress, Status and Management reports shall be submitted monthly in two parts –Part A – Technical Progress Report (CDRL A001) and Part B – Financial Progress Report (CDRL A002)

5.0 INFORMATION TECHNOLOGY POLICIES

5.1 Information Assurance.

All Information Assurance (IA) shall be in compliance with the following listed instructions to include those referenced within the below listing:

a. ASD (NII) Directive-Type Memorandum (DTM) 08-027 – “Security of Unclassified DoD Information on Non-DoD Information Systems,” 31 July 2009

b. (Chairman of the Joint Chiefs of Staff Instruction) CJCSI 3170.01G (series), “Joint Capabilities Integration and Development System,” 1 March 2009

c. CJCSI 6211.02C (series) – “Defense Information System Network (DISN): Policy and Responsibilities,” 9 July 2008

d. CJCSI 6212.01E (series) – “Interoperability and Supportability of Information Technology and National Security Systems,” 15 December 2008

e. CJCSI 6250.01C (series) – “Satellite Communications,” 30 April 2007

f. CJCSI 6510.01E, “Information Assurance (IA) and Computer Network Defense (CND),” 15 August 2007

g. (Chairman of the Joint Chiefs of Staff Manual) CJCSM 6510.01A – “Information Assurance (IA) and Computer Network Defense (CND) Volume I (Incident Handling Program),” 24 June 2009

h. [Chief of Naval Operations/Headquarters, United States Marine Corps] CNO N614/HQMC C4 – “Navy-Marine Corps Unclassified Trusted Network Protection (UTN-Protect) Policy, Version 1.0,” 31 October 2002

i. Defense Acquisition Guidebook – Chapter 7 “Acquiring Information Technology, Including National Security Systems,”; Section 7.5 “Information Assurance (IA)”

j. DoD 5220.22-M, “National Industrial Security Program Operating Manual,” 28 February 2006 (NISPOM)

k. DoD 8570.01-M, “Information Assurance Workforce Improvement Program,” 19 December 2005 (Incorporating Change 2, 25 February 2010)

l. DoDD Number 5000.01 “The Defense Acquisition System,” 12 May 2003, Certified Current as of 20 November 2007

m. DoDD 8000.01 “Management of the Department of Defense Information Enterprise,” 10 February 2009

n. DoDD 8100.02, “Use of Commercial Wireless Devices, Services, and Technologies in the Department of Defense (DoD) Global Information Grid (GIG),” 14 April 2004, Certified Current as of 23 April 2007

o. DoDD 8115.01 “Information Technology Portfolio Management,” 10 October 2005

p. DoDD 8500.01E (series), “Information Assurance (IA),” 24 October 2002, Certified Current as of 23 April 2007

q. DoDD 8570.01 “Information Assurance Training, Certification, and Workforce Management,” 15 August 2004, Certified Current as of 23 April 2007

r. DoDI 5000.02, “Operation of the Defense Acquisition System,” 8 December 2008

s. DoDI 4630.8, “Procedures for Interoperability and Supportability of Information Technology (IT) and National Security Systems (NSS),” 30 June 2004

t. DoDI 8115.02 “Information Technology Portfolio Management Implementation,” 30 October 2006

u. DoDI 8500.2, “Information Assurance Implementation,” 6 February 2003

v. DoDI 8510.01, “DoD Information Assurance Certification and Accreditation Process (DIACAP),” 28 November 2007

w. DoDI 8520.2, “Public Key Infrastructure (PKI) and Public Key (PK) Enabling,” 1 April 2004

x. DoDI 8551.1, “Ports, Protocols, and Services Management (PPSM),” 13 August 2004

y. DoDI 8580.1, “Information Assurance in the Defense Acquisition System,” 9 July 2004

z. DoDI 8581.01, “Information Assurance (IA) Policy for Space Systems Used by the Department of Defense,” 8 June 2010

aa. DON CIO Memo 02-10, “Department of the Navy Chief Information Officer Memorandum 02-10 Information Assurance Policy Update for Platform Information Technology,” 26 April 2010

ab. DON ltr 5239 NAVAIR 726/2322, “NAVAIR Data at Rest Policy,” 18 February 2009

ac. Federal Information Processing Standards Publications (FIPS PUB) [http://www.itl.nist.gov/fipspubs/by-num.htm]

ad. (National Security Telecommunications and Information Systems Security Policy) NSTISSP No. 11, “Revised Fact Sheet National Information Assurance Acquisition Policy,” July 2003

ae. (Office of the Chief of Naval Operations) OPNAV INST 5239.1C, “Navy Information Assurance (IA) Program,” 20 August 2008

af. SECNAVINST 5000.2D, “Implementation and Operation of the Defense Acquisition System and the Joint Capabilities Integration and Development System,” 16 October 2008

ag. SECNAV M-5239.1, “Department of the Navy Information Assurance Program; Information Assurance Manual,” November 2005

ah. SECNAVINST 5230.15, “Information Management/Information Technology Policy for Fielding of Commercial Off the Shelf Software,” 10 April 2009

ai. SECNAVINST 5239.3B, “Department of the Navy Information Assurance Policy,” 17 June 2009

aj. SECNAV Instruction 5000.36A, “Department of the Navy Information Technology Applications and Data Management,” 19 December 2005

ak. SECNAVINST 5239.19, “Department of the Navy Computer Network Incident Response and Reporting Requirements,” 18 March 2008

al. SECNAV INST 5510.36 Information and Personnel Security Program Regulation

am. The National Security Act of 1947

an. Title 40/Clinger-Cohen Act

ao. RDT&E Infrastructure Division Standard Operating Procedures

ap. RDT&E Infrastructure Division Security Accreditation Documents

5.1.1 System Software / Application Compliance.

All Information Technology Systems or software/application development, modification or support shall be performed in accordance with Defense Business Transformation guidance (formerly Business Management Modernization Program (BMMP)), DON/NAVAIR Functional Area Manager (FAM) Policies and Guidance, Network and Server Registration, and Web Enablement mandates.

5.1.2 Web Sites, Web Enablement and Application / System Development, Modification, and Maintenance Support Services.

All Information Technology systems, software, and website development, modification or support shall be performed in accordance with all applicable Federal, DoD, DON, and NAVAIR policy, guidance, standards, and strategies, and should be integrated with MyNAVAIR (NAVAIR Corporate Portal) whenever possible. Any NAVAIR Web sites/servers hosted/located in contractor facilities, or outside NAVAIR enclave, will transition to NAVAIR architecture and infrastructure in accordance with Legacy Shutdown guidance. Policies include, but are not limited to:

a. OMB Guide for Managing U.S. Government Websites http://www.firstgov.gov/webcontent/

b. OMB Policies for Federal Public Websites, OMB M-05-04 http://www.firstgov.gov/webcontent/policies_and_implementation.shtml

c. Section 508 Standards, http://www.section508.gov/

d. DOD Web Policy and Guidelines, http://www.defenselink.mil/webmasters/

e. Navy Information Operations Command (NIOC) Norfolk Web Risk Assessment Team Website, https://www.niocnorfolk.navy.mil/operations/wra/wra.shtml

f. SECNAV 5720.47B DON Policy for Content of Publicly Accessible Web Sites (NIOC Norfolk routinely monitors publicly accessible Navy websites for policy compliance; Site has a downloadable "Website Self-Assessment Checklist" for Webmasters), http://www.chinfo.navy.mil/navpalib/internet/secnav5720-47b.pdf

g. NAVAIR CIO Website (NAVAIR specific policy and guidelines), https://cio.navair.navy.mil/

5.1.3 Software Development/Server Procurement.

Any tools developed that will be hosted by the Navy Marine Corps Intranet (NMCI) or run on NMCI workstations will be certified for NMCI and comply with NMCI policy. Additionally, any servers supporting this effort will be transitioned to meet the requirements of the current NAVAIR Server Consolidation effort.

5.2 Enterprise Architecture.

5.2.1 Contractor Networks and Connections.

Contractor-owned and operated networks are prohibited on any Naval Air Systems Command (NAVAIR) facility or site in support of this contract. All IT systems and networks operated by contractors on behalf of NAVAIR, or in support of NAVAIR contracts, regardless of the level of data processed, will be operated in accordance with all current DoD, IA, and Command policies and procedures.

5.2.2 DoD Networks.

Contractor-owned equipment shall be permitted connections to NAVAIR/DoD networks in order to carry out the performance of this contract. All Contractor-owned hardware and/or software shall meet the following specific criteria before being connected to any DoD or NAVAIR network in support of this contract. Requirements include:

a. Network Vulnerability Scanning. Every system that connects to a DoD network (either physically or logically) shall be audited prior to connection. NAVAIR (AIR-5.4.1) personnel shall be responsible for conducting the audit using only NAVAIR Developmental Designated Accreditation Authority (DDAA) authorized auditing tools and shall provide for firewall/port scans, device discovery scan, vulnerability assessment, and other requirements as identified by NAVAIR DDAA. The contractor shall be responsible for the remediation of any equipment that fails these audits prior to the connection the system to the networks.

b. Extent of Vulnerability Scanning. To prevent scanning of "corporate" assets, all such networks, equipment and connections shall be physically segregated from any government/contractor "corporate" networks that are not in direct support of DoD contracts.

c. Operating Procedures. The contractor must comply with AIR-5.4.1/AIR-7.2 approved Standard Operating Procedures for connecting contractor owned devices to Navy networks.

d. Circuit Provisioning. Any circuit or connection between NAVAIR and/or DoD site and the contractor site shall be provisioned by the Defense Information Systems Agency (DISA).

e. Servicing Systems from a Remote Contractor Site. Remote Access Service connections that allow off-station operation and/or administration of contractor owned systems, located at any NAVAIR facility or site, shall not be permitted.

f. Memorandum of Agreement. An Information Assurance Memorandum of Agreement (MOA) between the contractor owning the equipment and AIR-7.2.6 shall be developed and signed before the equipment can be connected to NAVAIR networks. Failure to comply with the signed MOA shall be grounds for disconnection from the network.

5.2.3. Disclosure of existing networks, circuits or connections.

Any and all networks, circuits or connections between the contractor and any NAVAIR site shall be identified. Failure to comply and subsequent discovery of an unregistered network, circuit or connection shall be grounds for immediate disconnection.

5.2.4. IT Approval.

The contractor shall not purchase any Information Technology (IT) equipment on behalf of NAVAIR in support of this contract without a NAVAIR Command…