N00421-16-R-0049_DRAFT_Solicitation.docx

N00421-16-R-0049

Section A - Solicitation/Contract Form

GOVERNMENT POINT OF CONTACT

Alyssa Todaro

(301) 757-6260 Alyssa.Todaro@navy.mil

Section B - Supplies or Services and Prices

Labor in Support of the SOW

CPFF

FOB: Destination

ESTIMATED COST

FIXED FEE

TOTAL EST COST + FEE

Labor - Working Capital Funds (NWCF)

Not separately priced (NSP) from CLIN 0101.

ESTIMATED COST

FIXED FEE

TOTAL EST COST + FEE

Labor - Operations & Maintenance (O&M)

ESTIMATED COST

FIXED FEE

TOTAL EST COST + FEE

Labor - Procurement (Proc.)

ESTIMATED COST

FIXED FEE

TOTAL EST COST + FEE

Labor - RDT&E

ESTIMATED COST

FIXED FEE

TOTAL EST COST + FEE

ODC in support of CLIN 0101 Labor

COST

ESTIMATED COST

ODC in support of CLIN 0102 NWCF Labor

Not separately priced (NSP) from CLIN 0201.

ESTIMATED COST

ODC in support of CLIN 0103 O&M Labor

ESTIMATED COST

ODC in support of CLIN 0104 Proc. Labor

ESTIMATED COST

ODC in support of CLIN 0105 RDT&E Labor

ESTIMATED COST

Data in support of Labor and ODC CLINs

Data in support of CLINs 0101, 0102, 0103, 0104, 0105, 0201, 0202, 0203, 0204, and 0205. Not separately priced (NSP) Technical Data IAW SOW in Section C.

ESTIMATED COST

B-1 ESTIMATED RATES

B-1 ESTIMATED AND NEGOTIATED LABOR RATES

This language is designed for use in conjunction with H-2 Issuance of Orders Using Streamlined Procedures NAVAIR 5252.216-9540 (Variation) (Oct 2016). For purposes of estimating and establishing a labor cost ceiling for each delivery order, the following composite rates will be used. These rates are estimates, and invoicing will be based on actual costs incurred. Ceiling for ODCs will be priced in accordance with the Government Estimate. Orders crossing multiple years will be estimated by the Government using the composite rates for each year in proportion to the period of performance of the order. Orders estimated with periods of performance corresponding to an extension utilizing FAR 52.217-8, Option to Extend Services (Nov 1999), will be priced utilizing the composite rates found in the column with subheading “Beyond Ordering Period.”

Rates established for categories denoted as Service Contract Act (SCA) categories will be cross referenced with the corresponding Wage Determinations, Attachment 8. If the applicable wage determination rate is higher than the established rate, then the wage determination rate will be utilized for estimating purposes and the composite rate will be updated to reflect the wage determination rate. All updates to the composite rates will be made via a bilateral modification.

Labor Category (* = Key)

(** = SCA)

Composite Fully Burdened Rates

Management Analyst III*

Manager*

Program Manager, Senior*

Systems Engineer, Journey Level*

Acquisition Specialist

Acquisition Specialist, Junior

Computer Programmer I**

Computer Programmer II**

Engineer, Journey Level

Engineer, Senior (Electrical)

Engineer, Senior (Mechanical)

Financial Analyst, Junior

Graphic Artist**

Logistics Analyst, Junior

Management Analyst I

Management Analyst III

Network Engineer

Program Analyst, Junior

Project Analyst

Secretary**

Systems Analyst, Senior

Systems Engineer, Journey Level

Technical Writer II**

Technical Writer III**

Travel Clerk III**

Word Processor II**

Word Processor III**

CLAUSES INCORPORATED BY FULL TEXT

Section C - Descriptions and Specifications

STATEMENT OF WORK

Items 0101, 0102, 0103, 0104, and 0105-- The contractor shall provide services in accordance with the Section C Statement of Work. Contract services shall be performed in accordance with the Statement of Work as detailed in individual task orders. The task order Statements of Work will detail tasks that fall within the scope of the basic contract.

Items 0201, 0201, 0203, 0204, and 0205– The contractor shall provide ODCs in accordance with the Section C Statement of Work, NAVAIR Clause 5252.232-9509, and Clause H-1 Restriction On The Direct Charging Of Material NAVAIR 5252.242-9514 (Variation) (Jul 2016).

Item 0301– The data to be furnished hereunder shall be in accordance with Exhibit A, DD Form 1423, Contract Data Requirements List (CDRL), and the Section C Statement of Work.

STATEMENT OF WORK

SHIP & AIR INTEGRATED WARFARE (SAIW) MANAGEMENT SUPPORT

1.0 BACKGROUND

The Naval Air Warfare Center, Aircraft Division (NAWCAD), St. Inigoes mission involves the design, development, integration, testing, evaluation, certification, maintenance, and logistics support of Naval electronic and communications equipment, subsystems and systems. The Ship & Air Integrated Warfare (SAIW) Division (AD 4.11.3) supports numerous Department of Defense (DoD) and other Federal agencies by performing various system engineering, design, development, integration, training, test and evaluation, installation, fielding, certification, maintenance, life cycle, software development, and logistics support of command & control (C2) and communications systems. SAIW’s mission is to provide the technical support that is essential to meet the requirements for development, engineering and procurement support of mission systems for shipboard, airborne and ground-based & surface platforms. The purpose of this contract is to provide the technical, professional, and management support services essential to fulfill SAIW’s mission needs as dictated by the Navy, DoD and other Federal agency requirements.

1.1 Scope

The contractor shall provide technical, professional, and management support services to the SAIW Division in support of the DoD, Joint Service, and Federal Agencies programs. These support services shall include but are not limited to: contract management, technical, systems engineering, project management, organizational management, administrative, and hardware acquisition support. The projects supported include, but are not limited to: surface ship radio communication systems (large and small), both new construction and upgrades; aircraft based communications systems (large and small); automatic identification systems; unmanned vehicle communication and control systems; information assurance actions; and technical development package creation. The systems shall be based on shipboard, shore based (fixed, transportable, manpack, mobile), aircraft/airborne, and hand held platforms. Possible agencies, organizations, and programs for which expertise and support services may be required include but are not limited to:

Naval Air Systems Command United States Special Operations Command and its Component Commands Space and Naval Warfare Systems Command Program Executive Office, Command, Control, Communications, Computers, Intelligence Naval Sea Systems Command Program Executive Office, Integrated Warfare Systems Naval Surface Warfare Center, Carderock Naval Surface Warfare Center, Dahlgren Program Executive Office, Carriers Program Executive Office, Ships Foreign Military Sales United States Coast Guard Department of Homeland Security National Guard Bureau Air and Army National Guard and Reserve Units

2.0 APPLICABLE DOCUMENTS The Government will provide all necessary reference documents not generally available to the Contractor as required. Throughout the life of the contract, if any instruction or document is replaced or superseded, the replacement or superseding instruction or document shall be applicable to the requirements defined in this SOW.

3.0 TECHNICAL REQUIREMENTS

3.1 PROJECT MANAGEMENT SUPPORT (CLINs 0101/ 0102, 0103, 0104, 0105). The contractor shall provide project management support services to the SAIW Division. Such services include but are not limited to:

3.1.1 Provide support to project management processes throughout the project life-cycle including initiation, planning, executing, monitoring controlling, and closeout. Support the development and maintenance of project planning documentation including but not limited to the following document types: Work Breakdown Structures (WBS), Plan of Action and Milestones (POA&Ms), Initial Capabilities Document (ICD), Capability Development Document (CDD), Program Management Plan (PMP), Project Quality Assurance strategy, Staffing Profile and Responsible, Accountable, Consulted, and Informed (RACI) Matrix, Communications Management Plan, Risk Management Plan, Quality Assurance Plan, Project Monitoring and Controlling Plan, Project Performance Reports (PPRs), Services/Contractor Management Plan, Contract Status Reports (CSRs), In-Progress Reviews (IPRs), Requirements Management Plan, Configuration Management Plan, Change Management Plan, System Engineering Management Plan (SEMP), Top-level Architecture Specification, System Design Documentation (SDD), Software Design Document (SwDD), Software Development Plan (SDP), Version Description Document (VDD), Software Version Description (SVD), Hardware Design Document (HDD), Interface Design Document (IDD), Interface Control Drawing/Design (ICD), Integrated Master Schedule (IMS), detailed project schedules, project cost estimates, Procurement Plan, Logistics Support Plan, Acquisition Program Baseline, Emergency Management Plans, technical reviews, testing documents, delivery documentation, close out reports. (CDRL A004)

3.1.2 Conduct ongoing surveillance and analyses on the execution of SAIW’s projects to determine the health of the projects through monitoring and controlling activities including, but not limited to, reviewing plans and status reports generated by the projects. Plans will include, but not limited to, WBS/POA&M/schedules, requirements management, change management, risk management, spend plans and estimates at completion (EACs). Status reports will include, but not be limited to, monthly Project Performance Reports (PPRs), In-Process Reviews (IPRs), internal audits, Project Notebook reviews, Project Calculator Outputs assessments, accomplishment reports, Earned Value Management System (EVMS) reports, project briefings, customer/sponsor feedback, and meeting minutes. Analyses should include identifying project cost, schedule, and scope risks. (CDRL A002)

3.1.3 Provide support to the development of project review documentation including but not limited to Program Management Reviews, IPRs, System Requirement Reviews (SRRs), Preliminary Design Reviews, Critical Design Reviews (CDRs), and Test Readiness Reviews (TTRs). Documentation, maintained and controlled in the Division’s SharePoint repository, will be used by the Government to determine the maturity level of the project at specific points in the life-cycle of the project; as identified by industry standards (i.e. Project Management Institute’s Project Management Body of Knowledge Guide, International Organization for Standardization (ISO), NAVAIR Systems Engineering Technical Review (SETR) Process, etc.) with which the SAIW Division has aligned its standardized policies and procedures. The contractor shall assist in the development of project review documentation using the SAIW Product Realization Standard Operating Procedure (SOP). (CDRL A004)

3.1.4 Provide support to design and production reviews and informal meetings with participating activities to facilitate timely and effective project management. Prepare documentation such as agendas, presentations, charts, illustrations, meeting minutes, and action item assignments. Ensure review and meeting artifacts are maintained and controlled in the Division’s SharePoint repository in the Project’s Notebook (i.e. action items recorded and tracked to completion in the project’s action item list). (CDRL A002)

3.1.5 Prepare SAIW project summary brief/reports for conferences and meetings hosted or attended by Division members. These briefs and reports will be used to illustrate the current status of the project to the Government leadership (NAVAIR 4.11, NAWCAD 4.11.3, etc.) as well as sponsors or customers (both current and potential). (CDRL A004)

3.1.6 Attend meetings with SAIW Project Leads and provide project and financial management expertise. (CDRL A002)

3.1.7 Provide inputs or recommendations to the Government on the technical (requirements, design, integration, installation, etc.) or non-technical (resources, environmental, procurements, schedule, etc.) project risks. Provide support to the project’s Risk Management Plan through identification, analysis, mitigation planning, and monitor and controlling risks to closure. Support the team in qualifying risks (consequences and likelihood) as well as support the reporting of open risks through inclusion of a current project risk cube in monthly PPRs. (CDRL A004)

3.1.8 Analyze the fiscal status of Division projects utilizing information provided by the projects. Report results of the analyses in monthly PPRs. Research and provide possible explanations of significant deviations between the actual and planned total funding profiles. Where variances exist, conduct further analysis to determine cause of the variance. The analysis of the fiscal status, and any additional further analysis for projects with variances, should also determine long-term effects if the variance trend is allowed to continue. (CDRL A004)

3.1.9 Support requirements management for SAIW projects including requirements definition, refinement, tracking, management, and verification. Support tracking and management of project deliverables. Support project change control management. (CDRL A004)

3.1.10 Assist in developing, reviewing, and interpreting tasking statements, Performance Work Statements (PWS’s), Memorandum of Agreements (MOAs), and Memorandum of Understandings (MOUs) for division projects. (CDRL A004)

3.1.11 Assist to quantify the scope and nature of the support required to meet specific operational mission requirements efficiently and effectively. (CDRL A004)

3.2 ORGANIZATIONAL MANAGEMENT SUPPORT (CLINs 0101/0102). The contractor shall provide organizational management support services to the SAIW Division. Such services include but are not limited to:

3.2.1 Assess key government programs related to the SAIW Division’s business areas to determine long-term DoD acquisition requirements, funding status, and technical and resources requirements to assist with the development and execution of the SAIW Division’s 5-year tactical plan. The contractor shall interface with Government program and technical personnel to acquire or gather key information required to develop strategic plans. (CDRL A004)

3.2.2 Provide information relating to staffing (government and contractor) and facility needs to include, but not limited to, current manpower levels, future manpower needs, current facilities usage, future facilities needs, and Information Technology (IT) needs. Maintain floor plans of all division buildings and develop the documentation required to support military construction or minor construction initiatives, etc. (CDRL A004)

3.2.3 Provide support to the development and execution of the overall Division operations budget. Support the preparation of funding data for review, prepare obligation phasing plans, prepare funding documents, and follow funding documents from origination to expenditure. Recommend improvements to the budget execution process. (CDRL A004)

3.2.4 Assist in the management, development, and execution the Division’s Program Management Office (PMO). Support development and maintenance of all Standard Operating Procedures and processes and ensure those processes are in line with the Division ISO 9001 certification. Maintain and administer the Division’s project calculator and cost estimating tool used to categorize a project’s size determining the types of documentation required for the projects. Perform ISO audits and In-Progress Reviews (IPRs) to maintain Division readiness for Division ISO 9001 certification. (CDRL A004)

3.2.5 Conduct analyses of performance metrics established by SAIW directives and provided by division projects and initiatives, and provide overall review and assessment. The review shall include, but not be limited to, performance trends, inventory control, maintenance turnaround time, and customer satisfaction. (CDRL A004)

3.2.6 Provide assistance with developing and implementing marketing programs. This may include, but is not limited to, developing a marketing plan to attract new business, soliciting and analyzing sponsor/end-user satisfaction surveys, conducting marketing skills training, and participating in conferences. (CDRL A004)

3.2.7 Receive, process, monitor, and execute incoming and outgoing funding, appropriation type, Comptroller acceptance, Navy Enterprise Resource Planning (N-ERP) and Project Tracking System (PTS) Web set-up, spend plans, expenditure and reconciliation tracking, and final billing. (CDRL A004)

3.2.8 Provide support to the development of WBS elements and network activities and creation of Purchase Requisitions and obligations of funds in PTS Web and/or N-ERP. (CDRL A004)

3.2.9 Provide responses to Division data calls. (CDRL A004)

3.3 ADMINSTRATIVE SUPPORT (CLINs 0101/ 0102). The contractor shall provide administrative support services to the SAIW Division. Such services include but are not limited to:

3.3.1 Provide reception personnel to key Division buildings. Route telephone calls, track division visitors, and ensure that mandatory Government training records are maintained. (A001)

3.3.2 Develop minutes for meetings at the Division, branch, and project levels as needed. (CDRL A002)

3.3.3 Provide support to Division travel requirements. Track/route Division government personnel travel arrangements, order requests and receipts, submit and track travel reimbursement claims utilizing the Defense Travel System. (A001)

3.3.4 Provide specialized training in support of, but not limited to, project management, acquisition, cost management, business rules/processes, software applications, contractor applications, NAVAIR applications and other topics deemed appropriate. (CDRL A002)

3.3.5 Provide graphics and documentation support. This support includes the development and review of briefings, technical reports and drawings, system manuals, proposals, display materials, brochures, web development, framing of photos, and electronic publishing. Knowledge of the most current version of the following software programs (at time of contract award) is required: Corel Draw, PhotoShop, Word, Power Point, Access, Excel, Adobe Premiere, Macro Media Director, and AutoCAD. (CDRL A002)

3.3.6 Provide on-site IT support. Coordinate Division-wide compliance with information technology initiatives such as the Navy Marine Corps Intranet, connectivity to the Research Development Test and Evaluation local area network. (A001)

3.3.7 Provide business application support for the Division as needed. Application support to include system identification, development, design, and training. (A001)

3.3.8 Interface with Government security systems in support of the Division as needed. This support includes, but it not limited to preparing outgoing visit request and inputting incoming visit requests into the BASICS II system. Additional systems include, but are not limited to Joint Personnel Adjudication System (JPAS). (A001)

3.3.9 Process both classified and unclassified correspondence and naval messages. Route the correspondence to the appropriate personnel. (A001)

3.3.10 Manage Division Government-issued cellular telephone and pager service through coordination with the Patuxent River Naval Air Station (NAS), Base Telephone Office including set-up and termination of cellular accounts; purchase of cellular phones and accessories; coordinating monthly verification and validation report of cellular activity. (A001)

3.3.11 Manage and coordinate Division and contractor office moves, including telephone lines, computer connections, etc. (A001)

3.3.12 Support the dissemination of Division communications. Maintain the Division Community of Interest (COI) information system, and the Division SharePoint site. Provide support as needed to Division staff meetings, Division all-hands meetings, branch meetings, etc. (A002)

3.4 CONTRACT MANAGEMENT SUPPORT (CLINs 0101/ 0102). The contractor shall provide contract management support services to the SAIW Division. Such services including but are not limited to:

3.4.1 Review deliverables from all SAIW contracts (both hard and electronic) for accuracy, and process for routing to the appropriate personnel for review and approval using the Total Records and Information Management (TRIM) Context Document Management System and/or SharePoint (NSERC). (CDRL A004)

3.4.2 Review and validate contract expenditure data from all SAIW contracts, to include weekly expenditure reports and periodic invoices. Maintain contract data within the division PTS database. Provide financial management and analysis for budget projections, and funding appropriation analysis. (CDRL A004)

3.4.3 Provide support by reviewing and analyzing contract-related data. Utilize the Contract Status Report (CSR) to generate feedback to the Contracting Officer’s Representative (COR) on the overall health of each SAIW contract. (CDRL A004)

3.4.4 Analyze contract financial reports and vouchers, track contract expenditures, and reconcile contract close-out reports. (CDRL A004)

3.4.5 Assist activity in developing service contract packages to track the status of contract actions, and prepare funding requests for contract actions, as required, in support of division specific and branch specific service contract actions. (CDRL A004)

3.4.6 Provide up to date information on current contract policies and how they relate to contract solicitation package development. (CDRL A004)

3.4.7 Provide and forecast both ceiling needs and availability based on existing and projected project needs. (CDRL A004)

3.5 HARDWARE ACQUISITION SUPPORT (CLINs 0101/0102). The contractor shall provide administrative support services to the SAIW Division. Such services include but are not limited to:

3.5.1 Prepare and draft documentation per prescribed DoD, Command and Contracting Activity formats and standards for procurement of hardware (large and small purchase). (CDRL A004)

3.5.2 Maintain a current list of required hardware items that are to be procured and provide support in the preparation of procurement documentation, including any documents required to complete a Purchase Request (PR). The summation of these lists shall take the form of either Master Equipment Lists (MEL), Master Parts Lists (MPL), or Master Metalwork Lists (MML) and should reflect the project’s material requirements. (CDRL A004)

3.5.3 Provide monitoring and tracking of material/equipment during activities in the acquisition process (from procurement planning, receipt, and bar coding of material/equipment, to delivery of the final product to the Government) both within N-ERP and SAIW tracking tools. The contractor shall interface with Government technical personnel and with vendors regarding procurement and delivery of equipment and materials required to support the Division’s programs. (CDRL A004)

3.6 TECHNICAL SUPPORT (CLINs 0101/ 0102, 0103, 0104, 0105). The contractor shall provide technical support services to the SAIW Division. Such services include but are not limited to:

3.6.1 Provide Information Assurance (IA) technical support to help ensure the program appropriately plans for and implements IA requirements throughout project life-cycles. Assist in development of IA documentation including appropriate system security authorization agreements, a Clinger-Cohen compliant IA strategy, IA implementation plans and other IA acquisition documents required by projects. (CDRL A005)

3.6.2 Monitor and track the status of various technical documents required for the integration and delivery of the Unmanned Carrier-Launched Surveillance and Strike (UCLASS) capability to Aircraft Carriers, and any emerging ship classes. Elements of this task include but are not limited to scheduled delivery of integration and interface documents by the winning UCLASS source, document review and approval, levels, and ship’s integration progress. (CDRL A005)

3.6.3 Assess the operational effectiveness of proposed future ship designs. Investigate and recommend responses to the Government to shipbuilders’ technical questions associated with NAVAIR systems. (CDRL A005)

3.6.4 Provide technical recommendations for the appropriate Shipboard System specifications for the developmental UCLASS Hardware. (CDRL A005)

3.6.5 Perform technical project support analysis of specified communications systems/subsystems and assess the principle factors impacting the supportability of the system throughout the entire product life-cycle. (CDRL A005)

3.6.6 Perform technical and management services to support the fielding and sustainment of managed systems. Contribute to the maintenance and update of program related acquisition, production, and life-cycle documents. (CDRL A005)

3.6.7 Provide engineering and technical support for the development of CVN 21 Warfare Systems in support of the next class of aircraft carriers. Support includes design evaluation, interoperability studies, shipyard documentation reviews, facilitation of the efforts of support contractors and government personnel, presentation of findings, status and recommendations in support of the project lead. (CDRL A005)

3.6.8 Provide engineering and technical support to the development of the Presidential Helicopter Replacement Program (VH-92A). Support includes technical and engineering services to mature the Mission Communication System (MCS) Program Life-Cycle Sustainment Strategy as program procurement and integration decisions are finalized, tailoring/authoring MCS Program acquisition logistics documentation to reflect program decisions, and conducting logistics supportability analyses. (CDRL A005)

3.6.9 Provide technical support to Customs and Border Protection (CBP), Office of Information and Technology’s (OIT), Enterprise Networks and Technology Support (ENTS), and Wireless Technology Programs (WTP) Tactical Communications (TACCOM) projects in support of the Wireless Systems Program Office (WSPO) Facilities Radio Communications projects. Such technical support includes but is not limited to upgrading and expanding current configurations, building and modernization of towers, telecom sites, and infrastructure, CBP surveillance coverage, CBP communication systems. (CDRL A005)

3.6.10 Provide engineering, technical, life-cycle and In-Service Engineering Activity (ISEA) support of the Tomahawk Command & Control System. This system provides afloat and ashore systems mission planning and monitoring of Tomahawk cruise missiles. (CDRL A005)

3.6.11 Provide technical support to the development of the Digital Camera Receiving Station (DCRS), which provides Fast Tactical Imagery (FTI) and Video Interface Group (VIG) functionality to the fleet user with full imagery capture and manipulation abilities. This system provides an essential tool to maintain pilot awareness and sharing of Intelligence, Surveillance and Reconnaissance (ISR) data between the pilot and internal personnel. (CDRL A005)

3.6.12 Provide technical support to the development of the Carrier Ready Room (CRR) upgrades. This support includes installation, procurement, integration, and management services to the program office. (CDRL A005)

3.7 SYSTEMS ENGINEERING SUPPORT (CLINs 0101/ 0102, 0103, 0104, 0105). The contractor shall provide systems engineering support services to the SAIW Division. Such services include but are not limited to:

3.7.1 Conduct systems engineering analysis for use in developing and/or upgrading existing communications and information systems and for the identification of new capability developments and program identification. These assessments shall be reviewed, by the Government, as background information in the selection of replacement systems and/or augmentation/upgrade of existing field systems to meet mission and operational requirements. (CDRL A005)

3.7.2 Explore emerging and next generation technologies that can replace existing platform and C4I technologies to meet new/existing requirements. Types of efforts would include defining system design requirements, performing market surveys, integration planning and analysis of systems components. (CDRL A005)

3.7.3 Provide inputs to verification and/or definition of systems design requirements to support the development of systems that are economically producible, operationally suitable, and field supportable. (CDRL A005)

3.7.4 Provide support to specialized studies and evaluations, which will be used to provide assessment of current communications and information systems architecture and make recommendations for new technology. (CDRL A005)

3.7.5 Plan continual system engineering throughout the design, development, procurement, fabrication, interface, integration, and implementation of systems. (CDRL A005)

3.7.6 Assist with conducting engineering reviews (design, test, etc.) as appropriate for key Division programs. (CDRL A005)

3.7.7 Attend and support scheduled and ad-hoc information interchange meetings (technical, interface, integration, test planning, etc.) to support the engineering efforts of SAIW projects. (CDRL A002)

3.7.8 Assist in developing Division Systems Engineering Standards in line with NAVAIR’s systems engineering processes. (CDRL A005)

4.0 PROGRESS REPORTS

4.1 Monthly Status Reports. The contractor shall submit a monthly status report to be delivered electronically to NAWCAD Patuxent River, at the St. Inigoes site, by the 10th of the month following the first full month of the contract. (CDRL A001)

4.2 Financial Progress Reports. The contractor shall submit financial progress reports. The purpose of this report is to provide SAIW with the current financial status of the contract at the Contract Line Item Number (CLIN) and task level. When applicable, this report shall include prior year(s) expenditures. (CDRL A003)

4.3 Segregation of Costs and Invoice Reporting. To support invoice reviews, the Contractor shall report costs in accordance with CDRL A008.

5.0 QUALITY MANAGEMENT

The contractor shall develop, document, maintain and implement a quality management system to ensure conformance with contractual requirements and the specific quality and performance requirements of specific tasks to be issued under this solicitation. The quality management system should meet the requirements of the American National Standards Institute/American Society for Quality ANSI/ASQ ISO 9001:2008, or and equivalent governing body. Regardless of the standard that’s applied, the contractor’s quality approach should be clearly defined and recognize the need to focus on customer satisfaction, defect prevention over inspection, management responsibility and continuous improvement. A copy of the contractor’s Quality Assurance Plan, as approved by the contractor’s management and that demonstrates conformance to the selected quality standard, shall be submitted. The contractor’s Quality Assurance Plan shall address all areas of work to be performed under each task order to include applicable hardware and software systems engineering, integration and installation, configuration management, logistics and documentation. (CDRL A011)

6.0 CLOSE-OUT REPORTS

6.1 Task Order Close-out Report. After the completion of each task order, the contractor shall submit a task close-out report. (CDRL A006)

7.0 INFORMATION TECHNOLOGY (IT)

The Contractor shall not purchase any IT equipment on behalf of NAVAIR in support of this Contract, which reports to PBIS-IT, without a Naval Air Systems Command (NAVAIR) Command Information Officer (CIO) approved NAV-IDAS ITPR.

All IT procured on behalf of this contract shall meet all DoD/DON and NAVAIR IA polices. Failure to follow these policies will result in denied access to NMCI, One Net, Integrated Shipboard Network System (ISNS) and other DON, DoD and Joint Networks. These IA policies are standard across the Department and ensure IA compatibility and interoperability.

IT systems and or networks operated by contractors pursuant to a NAVAIR contract, regardless of the level of data processed, shall be operated in accordance with the NISPOM.

Contractor-owned equipment shall be permitted connections to NAVAIR/DoD networks in order to carry out the performance of this contract. All Contractor-owned hardware and/or software shall meet DoDI 8500.2 Cybersecurity Controls, is subject to validation scanning and must be approved by the NAVAIR site IA Manager prior to connection.

The following specific criteria must be met before the contractor may be connected to any DoD or NAVAIR network in support of this contract. Requirements include:

a. Network Vulnerability Scanning. NAVAIR Deputy CIO for Information Assurance maintains authorized auditing tools and shall provide for firewall/port scans, device discovery scan, vulnerability assessment, and other requirements as required to ensure secure interoperability with DoD Contracts. The contractor shall be responsible for the remediation of any equipment that fails these audits prior to the connection the system to the networks; Results of approvals shall be documented via Memorandum of Agreement with the Facility Security officer and the Defense Security Service Representative for that contractor;

b. Extent of Validation Scanning. To prevent scanning of corporate assets, all such networks, equipment and connections shall be physically segregated from any government/contractor corporate networks that are not in direct support of DoD contracts;

c. Circuit Provisioning. Any circuit or connection between NAVAIR and/or DoD site and the contractor site shall be provisioned via the Defense information Security Agency and comply with CJCSI 6211.02C (series), Defense Information System Network (DISN): Policy and Responsibilities, 9 July 2008;

d. Servicing Systems from a Remote Contractor Site. Remote Access Service connections that allow off-station operation and/or administration of contractor owned systems, located at any NAVAIR facility or site, shall not be permitted, with the exception of those systems connecting to the Command via the Outreach Services identified in Section 7, Enterprise Architecture;

e. Memorandum of Agreement and Inter-connection Agreements. An Information Assurance Memorandum of Agreement (MOA) between the contractor owning the equipment and AIR-7.2.6 shall be developed and signed before the equipment can be connected to NAVAIR networks. Failure to comply with the signed MOA shall be grounds for disconnection from the network.

7.1 Clinger-Cohen Act

In 1996, Congress enacted the Clinger-Cohen Act (CCA) requiring agencies to use a disciplined capital planning and investment control process to acquire, use, maintain and dispose of information technology. In accordance with the following Department of Defense Directive (DoDD), Department of Defense Instruction (DoDI), Office of the Secretary of Defense (OSD) memo, and Secretary of the Navy Instruction (SECNAVINST), CCA compliance is required for all programs that contain IT, including National Security Systems (NSS). NSS are defined in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-59. Six factors are used to identify NSS, one of which is IT in weapons and weapons system programs. The law provides authority to the agency’s Chief Information Officer (CIO) to manage IT resources effectively and ensure cybersecurity and interoperability. The authority to grant compliance with CCA as a statutory milestone program document resides at either first echelon or second echelon. The level of the Acquisition Category (ACAT) or designation as an Abbreviate Acquisition Program (AAP) determines which echelon has this authority. ACAT III and below acquisition programs CCA compliance assertion confirmation approval authority is delegated to the second echelon Command Information Officers. ACAT I and ACAT II acquisition programs CCA compliance assertion confirmation approval resides at DON CIO (First echelon). Approval of interoperability standards compliance for all acquisition programs resides at DON CIO. Approval of the Cybersecurity Strategy (formerly Acquisition Information Assurance Strategy) is a component of CCA compliance however it is approved separately. Approval authority is divided among the DoD, and DON CIOs as well as the second echelon Command Information Officers. See Table 1 for allocation of approval authorities.

X

X

X

X

X

X

X

III

X

IV

X

AAP

X

Table 1: Allocation of Cybersecurity Strategy Approval Authorities

Cybersecurity Strategy approval process begins after the Program Manager signs the Cybersecurity Strategy and puts it forward to the Command Information Officer. The final approved Cybersecurity Strategy is an appendix to the Program Protection Plan (PPP) as well as an element of CCA compliance (Interim DoDI 50000.02, Tables 2 and 9).

a. Interim DoD Instruction 5000.02, “Operation of the Defense Acquisition System”, November 25, 2013

b. OSD Memo, Clinger-Cohen Act Compliance Policy, Mar 8 2002

c. SECNAVINST 5000.2E, Implementation and Operation of the Defense Acquisition

7.2 System Software / Application Compliance

All Information Technology Systems or software/application development, modification or support shall be performed in accordance with Defense Business Transformation guidance (formerly Business Management Modernization Program (BMMP)), Department of the Navy (DON)/Naval Air Systems Command (NAVAIR) Functional Area Manager (FAM) Policies and Guidance, Network and Server Registration, and Web Enablement mandates.

7.3 Web Sites, Web Enablement and Application / System Development, Modification, and Maintenance Support Services

All Information Technology systems, software, and website development, modification or support shall be performed in accordance with all applicable Federal, DoD, DON, and NAVAIR policy, guidance, standards, and strategies, and should be integrated within the NAVAIR Enterprise portal and collaboration environment whenever possible. Any Web sites/servers hosted/located in contractor facilities, or outside NAVAIR enclave, will transition to NAVAIR architecture and infrastructure in accordance with Legacy Shutdown guidance. Policies include, but are not limited to:

a. Office of Management and Budget Management of Federal Information Resources, OMB CIRCULAR NO. A-130 Revised.

b. OMB Policies for Federal Agency Public Websites, OMB M-05-04 http://www.whitehouse.gov/sites/default/files/omb/memoranda/fy2005/m05-04.pdf

c. Section 508 Amendment to the Rehabilitation Act of 1973 http://www.section508.gov/

d. Department of Defense Web Policies and Guidelines http://www.defense.gov/webmasters

e. Navy Information Operations Command (NIOC) Norfolk Web Risk Assessment Team Website http:www.public.navy.mil/fcc-c10f/nionorfolk/Pages/AboutWRA.aspx

f. DON Policy for Content of Publicly Accessible World Wide Web Sites SECNAVINST 5720.47B www.navy.mil/navydata/internet/secnav5720-47b.pdf

g. NAVAIR CIO Website (NAVAIR specific policy and guidelines) To request this policy contact the NAVAIR CIO office – 7.2.2 Applications Integration team – Web Manager: Shane Malamphy at 301- 342-1825

h. Defense Information Systems Agency (DISA) Hosting of All Navy Websites (NAVADMIN 061/08) http://www.public.navy.mil/bupersnpc/ reference/messages/Documents/NAVADMINS/NAV2008/NAV08061.txt

i. Consolidation of Navy Web Sites - Reduction of IM/IT Footprint NAVADMIN 145/07 http://www.public.navy.mil/bupersnpc/ reference/messages/Documents/NAVADMINS/NAV2007/NAV07145.txt

j. DON Web Presence Policy: The Registration, Compliance of, and Investment in, All Unclassified Web Sites and Uniform Resource Locators http://www.doncio.navy.mil/ContentView.aspx?ID=577

k. Policy and Procedures for Web Risk Assessment (WRA) of Publicly Accessible Navy Sites (ALCOM 129/09) http://www.public.navy.mil/fcc‐c10f/niocnorfolk/Documents/NTD‐08‐ 09.txt

7.4 Software Development / Server Procurement

Any tools developed that will be hosted by the Navy Marine Corps Intranet (NMCI) or run on NMCI workstations will be certified for NMCI and comply with NMCI policy. Additionally, any servers supporting this effort will be transitioned to meet the requirements of the current NAVAIR Server Consolidation effort.

7.5 Cyber Security

NAVAIR’s Cybersecurity Program is a unified approach to protect unclassified, sensitive or classified information, and is established to consolidate and focus efforts in securing that information, including its associated systems and resources. Cybersecurity is required operationally throughout the DON. The DON CIO is responsible for IT within the Navy, as mandated by the Clinger-Cohen Act, and is the lead for departmental compliance with the Federal Information Security Management Act of 2002.

All Cybersecurity shall be in compliance with the following listed instructions:

a. ASD (NII) Directive-Type Memorandum (DTM) 08-027 – Security of Unclassified DoD Information on Non-DoD Information Systems, 31 July 2009

b. Chairman of the Joint Chiefs of Staff Instruction CJCSI 3170.01H (series), Joint Capabilities Integration and Development System, 10 January 2012

c. CJCSI 6211.02D Defense Information System Network (DISN): Policy and Responsibilities, 24 Jan 2012

d. CJCSI 6212.01F Net Ready Key Performance Parameter (NR KPP), 21 March 2012

e. CJCSI 6251.01D Narrowband Satellite Communications Requirements, 30 Nov 2012

f. CJCSI 6510.01F, Information Assurance (IA) and Support to Computer Network Defense (CND), 09 Feb 2011, certified current 10 Oct 2013

g. Chairman of the Joint Chiefs of Staff Manual CJCSM 6510.01B – Incident Handling Program 10 July 2012

h. Chief of Naval Operations/Headquarters, United States Marine Corps CNO N614/HQMC C4 – Navy-Marine Corps Unclassified Trusted Network Protection (UTNProtect) Policy, Version 1.0, 31 October 2002

i. Defense Acquisition Guidebook – Chapter 7, Acquiring Information Technology, Including National Security Systems, Section 7.5 Information Assurance (IA)

j. DoD 5220.22-M, National Industrial Security Program Operating Manual, February 28, 2006 (NISPOM)

k. DoD 8570.01-M, Information Assurance Workforce Improvement Program, 19 Dec 2005 (Incorporating Change 3, 24 Jan 2012)

l. DoDD 8000.01 Management of the Department of Defense Information Enterprise, 10 February 2009

m. DoDD 8100.02, Use of Commercial Wireless Devices, Services, and Technologies in the Department of Defense (DoD) Global Information Grid (GIG), 14 April 2004, Certified Current as of 23 April 2007

n. DoDD 8570.01 Information Assurance Training, Certification, and Workforce Management, 15 August 2004, Certified Current as of 23 April 2007

o. DoDI 4630.8, Procedures for Interoperability and Supportability of Information Technology (IT) and National Security Systems (NSS), 30 June 2004

p. DoDI 8500.1, Cybersecurity, 14 March 2014

q. DoDI 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT), 12 March 2014

r. DoDI 8520.2, Public Key Infrastructure (PKI) and Public Key (PK) Enabling, 01 April 2004

s. DoDI 8551.1, Ports, Protocols, and Services Management (PPSM), 13 August 2004

t. DoDI 8580.1, Information Assurance in the Defense Acquisition System, 9 July 2004

u. DoDI 8581.01, Information Assurance (IA) Policy for Space Systems Used by the Department of Defense, 8 June 2010

v. DON CIO Memo 02-10, Department of the Navy Chief Information Officer Memorandum 02-10 Information Assurance Policy Update for Platform Information Technology, 26 April 2010

w. DON letter 5239 NAVAIR 726/2322 of 18 Feb 09, NAVAIR Data at Rest Policy

x. Federal Information Processing Standards Publications (FIPS PUB) http://www.nist.gov/itl/fips.cfm

y. National Security Telecommunications and Information Systems Security Policy NSTISSP No. 11, Revised Fact Sheet National Information Assurance Acquisition Policy, July 2003.

aa. Office of the Chief of Naval Operations OPNAV INST 5239.1C, Navy Information Assurance (IA) Program, 20 Aug 08

bb. SECNAV M-5239.1, Department of the Navy Information Assurance Program; Information Assurance Manual, November 2005

cc. SECNAVINST 5230.15, Information Management/Information Technology Policy for Fielding of Commercial Off the Shelf Software, 10 April 2009

dd. SECNAVINST 5239.3B, Department of the Navy Information Assurance Policy, 17 June 2009

ee. SECNAVINST 5239.19, Department of the Navy Computer Network Incident Response and Reporting Requirements, 18 March 2008

ff. The National Security Act of 1947

gg. Title 40/Clinger-Cohen Act

hh. Title 44/ Federal Information Security Management Act

7.6 Enterprise Architecture:

a. Contractor Networks and Connections. Contractor-owned and operated networks are prohibited on any Naval Air Systems Command (NAVAIR) facility or site in support of this contract. The contractor may access non-government, external IP space via the NAVAIR-provided Virtual Private Network (VPN) Outreach service or NAVAIR CIO approved Internet Protocol (IP) service.

b. Architecture Compliance. The contractor shall ensure all IT solutions, including database solutions, comply with the appropriate NAE Enterprise Architecture, and are verified by the NAVAIR Enterprise Architect (AIR-7.2.3) prior to build out.

c. Disclosure of pre-existing networks, circuits or connections. Any and all networks, circuits or connections between the contractor and any NAVAIR site related to previous contracts shall be identified in the MOA. Failure to comply and subsequent discovery of an unregistered network, circuit or connection shall be grounds for immediate disconnection.

8.0 INFORMATION SECURITY

The Contractor shall implement and maintain security procedures and controls to prevent unauthorized disclosure of controlled unclassified and classified information and to control distribution of controlled unclassified and classified information in accordance with the National Industrial Security Program Operating Manual (NISPOM), NAVAIRWARCENACDIVINST 5510.1A, and DoDM 5200.01, Information Security Manual. The DoD Contract Security Classification Specification, DD Form 254, Attachment 2, defines program specific security requirements. All controlled unclassified information shall be appropriately identified and marked as For Official Use Only in accordance with DoDM 5200.01, Information Security Program: Controlled Unclassified Information (CUI) Volume 4 (enclosure 3) and DoD 5400.7-R (Freedom of Information Act Regulation) (Chapter 3).