N0042119R0101_Amend_01.docx

N0042119R0101

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION A - SOLICITATION/CONTRACT FORM

The following have been added by full text:

AMENDMENTS

Amendment 1 Changes and Questions & Answers to the Request for Proposal (RFP) include:

(The revised information has been highlighted within this modification to easily note what has been changed.)

· Section C, Statement of Work, Paragraph 3.1.9.5: Removed the reference of paragraph (e) (1) and replaced with paragraph (e).

· Section J, Attachment P(4), Revised the Cost Summary Spreadsheet Tab as follows:

· Removed: “Maximum Pass Through Allowed by SeaPort-e IDIQ Contract”

· Removed: “Maximum Fixed Fee Allowed by SeaPort-e IDIQ Contract”

· Removed the statement “When analyzing pass through costs, the Government will consider prime offeror fee on subcontractor price as an element of pass through as explained in the Section H Savings Clause of the MACs. In Section B, however, prime offeror fee on subcontractor price is a fee element rather than a cost element. Prime offeror fee on subcontractor price should be included in the fee column (rather than the cost column) of Section B.”

Q1: What is the specific process to receive the copy of the Assess Only Standard Work Package (SWP) that is called out in Sample Task 3?

A1: In reference to Section L-1, Part B, Volume 2.0, Paragraph 2.1, Sample Task 3, the potential offeror shall request the SWP by submitting the CAGE code to the Contract Specialist designated in Section L-1, Part A. The Contract Specialist will then verify that the provided CAGE Code is an Authorized Department of Defense (DoD) Provider via https://sam.gov. Once the CAGE code is verified, the Contract Specialist will provide via an encrypted e-mail through Defense Information Systems Agency (DISA) Department of Defense (DOD) Secure Access File Exchange (SAFE) at https://safe.apps.mil/ as Government Furnished Information (GFI).

Q2: Would the Government consider a Multiple Award Contract (MAC) of 2 to 3 awardees, Hybrid contracts with Firm Fixed Price CLINs for core known work and Cost CLINs for unknown and innovation insertions?

A2: The contract strategy will remain as is. The contract strategy is for a Single Award Indefinite Delivery, Indefinite Quantity (IDIQ) Cost Plus Fixed Price (CPFF) contract.

The following have been modified:

POINTS OF CONTACT

EMAIL ADDRESS:

tess.goshorn@navy.mil

EMAIL ADDRESS:

merissa.abell@navy.mil

CONTRACTING OFFICER REPRESENTATIVE:

TBD at Award

Both completion and term task orders will be issued under this single award Indefinite Delivery Indefinite Quantity (IDIQ) contract.

SECTION C - DESCRIPTIONS AND SPECIFICATIONS

STATEMENT OF WORK

1. Background and Scope:

The NAVAIR Digital Group leads the digital transformation of NAVAIR and works to accelerate and scale digital/analytic technologies and capabilities across the NAVAIR Enterprise as a means to increase speed in the delivery and sustainment of warfighting capability. The Digital Group delivers and executes command-wide strategies that align activities and provides the workforce with agile self-service infrastructure, data accessibility, visualization and analytic tools, and digital/IT services to rapidly research, create, deploy, integrate, and maintain, applications, enterprise solutions, and other digital capabilities. NAVAIR’s digital transformation will require leveraging advanced digital tools to implement fundamentally different business models across all business, technology development, workforce, and mission operation domains. NAVAIR is committed to a digital culture that empowers the workforce to accelerate, innovate, collaborate, develop, and deliver capabilities to meet mission outcomes.

The contractor shall provide various types of support including: digital transformation planning and execution; enterprise alignment; technology exploration, acceleration, and integration; digital/IT consultation; business intelligence; application portfolio management; system integration; Enterprise Architecture (EA) design and management; web management; Navy Marine Corps Intranet (NMCI)/Next Generation Enterprise Network (NGEN) program management; IT Operations; cybersecurity; Information Assurance (IA); cloud services; maintenance functions; network security; Automated Data Processing (ADP) support services; digital modeling and virtual environment support; talent management; change management; data analytics and integration; business process management and improvement; as well as general IT/digital support. Services may also be required in support of numerous current and planned initiatives (i.e., Cybersecurity related events, Cloud initiatives, emerging and disruptive technologies, IT consolidations initiatives) and infrastructure improvements.

As the NAVAIR Digital Group works collaboratively across the NAVAIR Enterprise and the Department of Defense (DoD) to align efforts and accelerate advances in digital technology, the contractor may be required to provide support across the NAVAIR Enterprise, the Program Executive Offices (PEOs), the supported Commands (including all echelons levels), and other DoD Services, sites, and activities as required.

2. Applicable documents:

The Government will provide the Contractor copies of, or access to, all required directives, publications, and documents, as available. A comprehensive list of Navy regulatory documents can be found at the DON Chief Information Officer (CIO) IT Policy and Guidance website, http://www.doncio.navy.mil/. Throughout the life of this contract, if any policy, instruction, or regulation is replaced or superseded, the replacement or superseding version shall apply. The Contractor is responsible for researching and complying with any additional regulations applicable to the specific task area. Applicable documents are listed below, but are not limited to:

2.1 DoD Specifications / Standards / other Government Documents

· Section 508 Amendment to the Rehabilitation Act of 1973 http//www.section508.gov/

· NASPAXRIVINST 12610.7G Employee Reporting Procedures During Emergency Situations, 02 June 2014

· SECNAVINST 5239.3B DON Information Assurance Policy, 17 JUN 2009

· SECNAV M-5239.1, DON Information Assurance Manual

· System Authorization Access Request -Navy (SAAR-N) form (OPNAV 5239/14 (Rev 9/2011)

· SECNAVINST 5211.5E DON Privacy Act Program, 10 Oct 2008

· SECNAVINST 5510.30B DON Personnel Security Program Instruction, 06 OCT 2006

· DOD-D-5220.22 National Industrial Security Program (NISPOM), 18 MAY 2016

· DoD 8570.01-M, Information Assurance Workforce Improvement Program, 19 Dec 2005 (Incorporating Change 3, 24 Jan 2012)

· DoDD 8570.01 Information Assurance Training, Certification, and Workforce Management, 15 August 2004, Certified Current as of 23 April 2007

· DON letter 5239 NAVAIR 726/2322 of 18 Feb 09, NAVAIR Data at Rest Policy

· DoD 5220.22-M, National Industrial Security Program Operating Manual, (NISPOM) 28 Feb 2006

· SECNAV M-5510.36 Information Security Program, 30 Jun 2006

· DoDM 5200.01 (DoD Information Security Program: Controlled Unclassified Information (CUI)) Vol. 4; 9 Sept 2018 and (enclosure 3 pages 11-18) 24 Feb 2012

· DoDM 5400.7, Freedom of Information Act (FOIA) Program 25 Jan 2017

· DoDD 5230.24 Distribution Statements on Technical Documents, Change 3, Effective 15 Oct 2018

· SECNAV M-5510.30 Personnel Security Program Jun 2006

· OPNAVINST 3440.17A Navy Installation Emergency Management Program, 1 Aug 2014

3. Requirements

3.1 General Requirements

3.1.1 Compatibility - The Contractor shall maintain the capability to prepare documents and software packages compatible with the Government IT environment through the security classification of Top Secret. The current operating environment required for this contract includes:

Microsoft Windows 10 Microsoft Project 2010 Microsoft Office Professional Plus 2010 Adobe Acrobat XI (reader) Internet access

The Contractor shall maintain the ability to interface with and transfer data to and from the requiring office software applications and their upgraded versions. The Contractor shall maintain state-of the-art anti-virus software and ensure that all media are virus free when delivered. The Contractor shall be capable of Internet and LAN communications with the NAVAIR Digital Group. Contractor personnel shall be capable of maintaining real-time communications, both voice and data transfer capabilities, with the NAVAIR Digital Group during working hours whether at Contractor work site or on travel.

3.1.2 Work Location and Facilities

3.1.2.1 Work location: Approximately 30 percent of work will be performed at Government site and 70 percent of work will be performed at Contractor site. The Contractor shall support the NAVAIR enterprise-wide environment within the Continental United States (CONUS), which is comprised of facilities at Patuxent River, Maryland, Patuxent River remote facilities (St. Inigoes, Solomon’s Island Naval Center, Washington Liaison Office in Arlington VA, and leased spaces within the 30 mile range); China Lake, California; San Diego/North Island, California; Point Mugu, California; Jacksonville, Florida; Cherry Point, North Carolina; Lakehurst, New Jersey; and Orlando, Florida. Work in support of this SOW shall be primarily performed at the Contractor’s facility or at Patuxent River, MD; however, the place of performance is not limited to the above locations due to the evolving, integrated and capability-focused enterprise requirements throughout NAVAIR and the DoD. Specific work locations will be included in individual task orders. Contractors performing on-site support will be provided access to workspaces, telephones, printers, facsimile machines, copy machines, shredders, computers, and network access including web servers and applicable databases or other applications necessary to carry out assigned tasks.

3.1.2.2 Meeting support: In support of the tasking outlined in this SOW, the Contractor shall have the capability to host and conduct meetings at the classification levels up to unclassified with the capacity to support a minimum of 30 persons and have contractor furnished telephone and VTC capability as well as sufficient equipment to conduct meetings with presentations including compatible software as required in Paragraph 3.1.1). This support shall be provided at a local facility within a 15 mile radius of Patuxent River, MD location.

3.1.3 Contractor reporting. The Contractor shall provide the following Contract Data Requirements List (CDRL) deliverables as specified in individual task orders.

3.1.3.1 Monthly Progress and Financial Status Report: The Contractor shall provide a progress and financial status report in accordance with CDRL A001. Throughout contract performance, the Contractor shall maintain an updated and current staffing plan and obtain approval from the Government, prior to incurring additional costs and/or adding personnel to the contract. The report shall include work accomplished since submittal of the last report, both monthly and cumulative man-hour labor costs expended by person and labor category as well as material and travel costs.

a) Cost Plus Fixed Fee (CPFF) CLINS: The Contractor shall provide information by CLINs/SLINs/Appropriations to include, cost details (i.e. Employee Name, Labor Category, Rate, Current and Cumulative Hours & Costs etc.), financial status of cost CLINs (i.e., funding applied, expenses incurred during current reporting period, total expenses to date, amount remaining, etc.) and forecast of funds depletion by CLIN type based on known requirements.

b) Cost Reimbursable CLINs: The Contractor shall provide information, by CLIN/Sub-CLIN/Appropriation, to include, travel details (i.e., Traveler’s Name(s), Dates of Travel, Destination, & Purpose for travel); ODC expense details (Item/Name, Description, Unit Cost, Number of Units, & Extended Costs for ODC’s, etc.); financial status of cost-related CLINs (i.e., funding applied, expenses incurred during current reporting period, total expenses to date, amount remaining, etc.) and forecast of funds depletion by CLIN type based on known requirements.

c) GFP/GFE/CAP Reporting: The Contractor shall maintain a documented property accountability system and procedures whereby all Government Furnished Property/Equipment (GFP/E) and Contractor Acquired Property (CAP) are tracked by documenting all pertinent information about property, including item nomenclature, serial number, and location. Upon termination of the Contract, all GFP/GFE/CAP shall revert to the Government.

All other CDRL details will be included in each CDRL Form DD1423.

3.1.3.2 Other Reporting. The Contractor may be required to provide additional reporting, documentation, products, and schedules, in accordance with deliverable requirements (CDRLs) incorporated in individual task orders. Other reporting requirements may include, but are not limited to: specific technical reports, documentation, multimedia products, training courses and materials, data, evaluations and analysis, digital information, etc.

3.1.4 Work Schedule to include Compressed Work Schedule (CWS), overtime, holidays, and installation closure.

3.1.4.1 Work schedule: The Contractor shall provide the required services and staffing coverage during normal working hours. Normal working hours are usually 8.5 hours (including a 30-minute lunch break), from 0600 to 1800 each Monday through Friday (except on the legal holidays specified in paragraph 3.1.4.1.2).

3.1.4.1.1 Compressed Work Schedule (CWS): CWS is an alternative work schedule to the traditional five 8.5 hour workdays (which includes a 30-minute lunch) worked per week. Under a CWS schedule, an employee completes the following schedule within a two-week period of time: eight weekdays are worked at 9.5 hours each (which includes a 30-minute lunch), one weekday is alternately worked as 8.5 hours (which includes a 30-minute lunch) and one weekday is not worked by the employee. The result is 80 hours worked every two weeks, with 44 work hours one week and 36 work hours the other.

The Contractor may allow its employees to work a CWS schedule provided the requirements of this SOW are met. If the Contractor chooses to allow its employees to work a CWS schedule in support of this contract, any additional costs associated with the implementation of the CWS schedule vice the standard schedule are unallowable costs under this contract and will not be reimbursed by the Government. Additionally, the CWS schedule shall not prevent Contractor employees from providing necessary staffing and services coverage as required by the Government to the ACOR/COR.

3.1.4.1.2 Holidays: The Government observes the following holidays:

New Year’s Day, January 1 Martin Luther King’s Birthday, the third Monday in January President’s Birthday, the third Monday in February Memorial Day, the last Monday in May Independence Day, July 4 Labor Day, the first Monday in September Columbus Day, the second Monday in October Veteran’s Day, November 11 Thanksgiving Day, the fourth Thursday in November Christmas Day, December 25

With the exception of the events in section 3.1.4.1.3 below, the Contractor is permitted to observe the above Holidays in accordance with its corporate policy.

3.1.4.1.3 Installation closure: When Federal facilities are closed by the Government, or when Federal employees are officially excused from work due to a holiday or a special event, severe weather, a security threat, or any other Government facility related problem that prevents Federal personnel from working at the Government facility, contractor personnel assigned to work at that facility in support of such Federal employees shall follow their parent company’s policies

While generally contractor personnel may not perform work on-site at a Government facility without oversight from Federal personnel, in very limited circumstances, work being performed by contractor personnel may be deemed mission essential and performance of such mission essential work may be authorized to continue at the Government facility despite the facility being otherwise closed for normal operations. The circumstances permitting work being performed by contractor personnel to be deemed mission essential are extremely limited and generally only apply to performance of efforts related to public health, safety, or matters related to national security. The cognizant Contracting Officer must concur with any determination that work being performed by contractor personnel is mission essential.

3.1.4.1.4 Overtime: Overtime cannot be charged directly to the contract unless first approved in writing by the Contracting Officer.

3.1.5 Other Direct Costs (ODCs): ODCs are based on a per annum amount. The COR/ACOR approval shall be obtained prior to the purchase of any material or travel expenses.

3.1.5.1 Travel: Travel will be allowable only when it is essential to the performance of the tasks detailed in Section 3.3. Reimbursement for travel performed shall be in accordance with the Department of Defense Joint Travel Regulation (http://www.defensetravel.dod.mil/site/travelreg.cfm). The COR shall approve all travel performed in support of this contract prior to the commencement of the travel. COR approval for local travel expenses is required. Travel may include general and administrative expenses, but shall not include profit. Temporary travel to other locations in support of program tasking is required. If required, temporary travel locations include Cherry Point, NC; Jacksonville, FL; Orlando, FL; San Diego, CA; China Lake, CA; Pt. Mugu, CA; Atsugi, Japan. This list is not all inclusive as locations may change over the life of the contract.

3.1.5.2 Material: The Contractor may be required to purchase material in support of performance under individual Task Orders on an as required basis. Required material may include but is not limited to: various tools, software products, licenses, training delivery and course materials, advanced computers, tablets, iPads, and various digital/information technology equipment, hardware, materials, and products etc. In accordance with NAVAIR Clause 5252.242-9515, the Contractor shall obtain advance written approval for all material purchases. All materials not depleted during the performance of this contract shall become Government property upon completion of this contract. The Contractor shall transfer all materials not depleted to the COR by way of Material Inspection and Receiving Report (DD Form 250). Material costs may include general and administrative expenses but shall not include profit/fee.

The costs of general purpose business expenses required for the conduct of the Contractor’s normal business operations are not an allowable direct cost in the performance of this contract. General purpose business expenses include, but are not limited to, the cost for items such as telephones and telephone charges, reproduction machines, word processing equipment, personal computers and other office equipment and office supplies.

3.1.6 Subcontractors: Provisions stated herein shall be clearly and effectively communicated to all subcontractors providing support under this contract. Provisions of this SOW shall flow down to subcontractors providing support under this contract, as applicable.

3.1.7 Management of Contractor Personnel: The Government will neither supervise contractor employees nor control the method by which the Contractor performs the required tasks. Under no circumstances will the Government assign tasks to, or prepare work schedules for, individual contractor employees. The Contractor shall manage its employees and guard against any actions that are of the nature of personal services, or give the perception of personal services

3.1.8 Transition Out Strategy:

The Contractor’s overall transition out strategy shall be built around maintaining the mission of the program with minimal impact, not only in terms of timeliness of performance but also to ensure that critical data and knowledge transfer occurs. Upon termination or expiration of the contract, the Contractor shall ensure an orderly transition of responsibilities, while minimizing impact to the operation. The Contractor shall submit a Transition Out Plan CDRL A003, to include the minimum elements listed below:

- Work Turnover. The Contractor shall provide a plan of action to effectively transfer tasked work that is in process at the expiration or termination of the contract to the successor company. Establish and maintain effective communication with the incoming contractor or Government personnel for the period of transition via weekly status meetings.

- Quality Assurance. The Contractor shall provide a plan of action to ensure continuation of quality review processes during the transition period to the successor company.

- Risk Mitigation Strategies. The Contractor shall provide a plan of action to mitigate contract performance risks (quality and schedule) encountered during the transition period.

- Data/Information Transfer. The Contractor shall provide a plan of action for the efficient inventory and transfer of program data to the successor company.

3.1.9 Program Unique Requirements:

3.1.9.1 Compliance and Collaboration

The Contractor shall perform all digital/IT services in accordance with the latest applicable guidance and policies. Contractor support activities shall also comply with Command initiatives such as Navy ERP and AIRSpeed and shall be performed in accordance with Federal, DOD, DON, and NAVAIR statutory and regulatory requirements, such as Application Portfolio Management, Defense Business Transformation Guidance, Navy Enterprise Application Developer’s Guide, Clinger Cohen Act (CCA), Federal Information Security Management Act (FISMA), and Web Enablement. Any tools that will be hosted by NMCI or run on NMCI workstations must be certified for NMCI and comply with NMCI policy.

As there are multiple digital/IT projects, initiatives, and activities ongoing throughout the NAVAIR Enterprise and the DoD, the Contractor shall work in close cooperation, collaboratively, and in an integrated manner with other support contractors as required, to maximize organizational alignment and technology acceleration.

3.1.9.2 Rapid Response to Evolving Technologies

It is anticipated that the majority of support under this contract will be required for digital / information technology innovation including complex, emerging, and rapidly evolving technology acceleration and modernization needs. The Contractor may be required to respond rapidly, to meet surge requirements, across a wide portfolio of emerging and disruptive technology areas (e.g. block chain, internet of things, artificial intelligence /machine learning, robotics process automation, container technologies, edge computing, quantum computing, Progressive Web Apps (SOW), 5G, LiFi technologies, etc.). As digital technology rapidly evolves and emerges, the Contractor may be required to support digital technology areas not specifically listed herein.

3.1.9.3 Quality Control:

The Contractor shall maintain an effective quality control program to ensure services are performed in accordance with the SOW and the Contract Surveillance Plan (CSP). The Contractor shall implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Government shall evaluate the Contractor’s performance under this contract in accordance with the CSP which is included as an attachment to the contract in Section J.

3.1.9.4 Task Order Requirements:

Specific requirements will be outlined in individual task orders and may be provided in the form of a Statement of Objectives (SOO), Performance Work Statement (PWS), or Statement of Work (SOW), as appropriate. Further, individual task orders may include Completion or Term type CPFF CLINS as appropriate.

3.1.9.5 Non-Disclosure Agreements (NDAs) and Organizational Conflicts Of Interest (COIs):

In the performance of the contract, the Contractor may have access to non-public information. The Contractor shall provide signed non-disclosure agreements for those employee, as requested by the COR, no later than five (5) business days after task order award.

Consistent with the terms and conditions of paragraph (e) of NAVAIR 5252.209-9510 Organizational Conflicts of Interest (Services), with respect to proprietary data of third parties, and DFARS 252.227-7025, Limitations on the Use Or Disclosure of Government-Furnished Information Marked with Restrictive Legends, with respect to technical data, the Contractor shall not use, modify, reproduce, release, perform, display, and disclose any non-public information provided to or obtained by the Contractor in the course of performing this contract for other than Government purposes, and shall not do so for any commercial or personal purpose.

In the event that the Contractor knows of or identifies that it has a commercial interest in the subject matter of any proposed or on-going agreement with respect to which contract services are to be performed, the Contractor shall consider such interest a potential conflict of interest under NAVAIR 5252.209-9510(g) and promptly disclose it to the Contracting Officer Representative and Contracting Officer.

3.2 Security

3.2.1 Citizenship Requirements: Only U.S. citizens may perform under this contract. If the Contractor cannot find qualified U.S. citizens to perform the work, the Contractor shall submit a citizenship waiver request with justification to the Government Security Office. The waiver request should include:

a. The individual's name, date and place of birth, position title, and current citizenship.

b. A statement that a qualified U.S. citizen cannot be hired in sufficient time to meet the contractual requirements.

c. A statement of the unusual expertise possessed by the applicant.

d. A statement that access will be limited to a specific government contract (specify contract number).

e. A statement that the Contractor has obtained an export license for the information required to perform the contract.

3.2.2 Investigative Requirements:

Unclassified: All Contractor personnel must be eligible to perform Non-Critical Sensitive work as defined by SECNAV M-5510.30. All Contractor personnel are required to have a favorably adjudicated Tier-3 investigation from the Office of Personnel Management. The Contractor shall submit a request for personnel security investigation to the Government Security Office. The Government Security Office shall initiate the Contractor's Electronic Questionnaire for Investigations Processing (eQIP), shall do a preliminary screening of the Contractor's eQIP for suitability and derogatory information. The Contractor employee shall provide all requested information pursuant to the Privacy Act of 1974. The Government Security Office may deny the Contractor access to Government facilities and information and may prohibit the Contractor from performance of sensitive duties for failure to provide requested information or when derogatory or adverse information is present on the Contractor's eQIP, in such cases, the Contractor employee may not perform on the Contract.

The Contractor shall implement and maintain security procedures and controls to prevent unauthorized disclosure of controlled unclassified information and to control distribution of controlled unclassified information in accordance with DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM), and SECNAV M-5510.36. All Contractor facilities shall provide an appropriate means of storage for controlled unclassified information and materials. All controlled unclassified information shall be appropriately identified and marked as For Official Use Only in accordance with DoDM 5200.01, Information Security Program: Controlled Unclassified Information (CUI) Volume 4 (enclosure 3).

Controlled Unclassified Information including For Official Use Only and Covered Defense Information (meeting the definition of 48 CFR 252.204–7012(a)) generated and/or provided under this contract shall be marked and safeguarded as specified in DoDM 5200.01 (DoD Information Security Program: Controlled Unclassified Information (CUI)) Vol. 4 (enclosure 3 pages 11-18) available at http: //www.dtic.mil/whs/directives/corres/pdf/520001_vol4.pdf. Any product containing Covered Defense Information shall be assigned a distribution statement (distribution statements B through F) using the criteria set forth in DoDI 5230.24 (Distribution Statements on Technical Documents); and have this statement displayed per DoDI 5230.24, Enclosure 3.

All controlled unclassified technical information shall be appropriately identified and marked with the following distribution statement(s):

Distribution Statement D: Distribution authorized to the Department of Defense and U.S. DoD contractors only (Critical Technology) (dated - _______). Other requests shall be referred to: Commander, Naval Air Systems Command, Attn: (Program/User Agency mailing address).

Classified: All Contractor personnel shall maintain security clearance eligibility commensurate with the level of classification of the work performed as annotated in the Contract's DD-254, Contract Security Classification Specification Form.

Contractor personnel shall require access to classified information in performance of this contract up to and including Top Secret, with a safeguarding level of Secret. The Contractor is responsible for ensuring that all personnel receive the requisite investigation and are favorably adjudicated in accordance with DoDM 5220.22, National Industrial Security Program Operating Manual. Contractor employees who fail to meet security clearance requirements may not access classified information or perform sensitive duties. In such cases, the Contractor employee may not perform on the contract.

The Contractor shall comply with security requirements specified in the DD-254 attached to this contract. Information or data that the Contractor accesses shall be handled at the appropriate classification level. Unclassified information shall be handled in accordance with the appropriate designation (Controlled Unclassified Information; For Official Use Only; Covered Defense Information). Distribution is authorized to the Requiring Office's Organization and supported Activity only. Other requests for deliverables under this contract shall be referred to the TPOC/COR of this contract for approval.

3.2.3 Common Access Card (CAC)/Public Key Infrastructure (PKI), System Authorization Access Request (SAAR-N).

3.2.3.1 SAAR-N: All contractor personnel requiring access to Government Information Technology (IT) systems shall have an approved System Authorization Access Request (SAAR-N) Form OPNAV 5239/14 (Rev Sep 2011) on file, and complete required Annual Information Awareness Training. New employees must submit their SAAR forms within thirty (30) days of their first day of work. Instructions for processing the SAAR-N forms are available at: http://www.cnrc.navy.mil/publications/Forms/OPNAV_5239_14_SAAR_N.pdf.

SAAR-N forms shall be submitted to the Contracting Officer’s Representative (COR), Government Technical Point of Contact (TPOC), or to the assigned government Trusted Associate Sponsorship System (TASS) Trusted Associate.

3.2.3.2 Command Access Cards (CAC)/Local Badges: Contractor CACs and facility specific identification badges will be issued by the Government to on-site contractor personnel and shall be visible at all times while personnel are at the Government site. The Contractor shall furnish all requested information required to facilitate issuance of identification badges and shall conform to local installation policies and guidance as appropriate. All CACs and identification badges issued to Contractor employees shall be returned to the Government Security Department at the Government site in accordance with local installation policies and guidance as appropriate following completion of the contract, relocation or termination of an employee, or upon request from the Contracting Officer’s Representative. The Government will provide the Contractor access to Government facilities, as required, for performance of tasks under this contract.

3.2.2.3 DD-254: The contractor shall comply with security requirements specified in the DD-254 attached to this contract. DD-254 guidelines may be updated in performance of the contract, as required. Information or data that the Contractor accesses shall be handled at the appropriate classification level, unclassified information shall be handled as “For Official Use Only”. Distribution is authorized to the Requiring Office’s Organization and supported Activity only. Other requests for deliverables under this contract shall be referred to the TPOC/COR/ACOR of this contract for approval.

3.2.4 Information Security. If the work is performed at the Contractor's facility, the Contractor shall implement and maintain security procedures and controls to prevent unauthorized disclosure of classified information and controlled unclassified information (CUI) and to control distribution of CUI in accordance with DoD 5220.22-M (NISPOM), and SECNAV M-5510.36. If the work is performed at the Government's facility, the Contractor shall comply with the applicable Facilities Instructions/Guidance, the latest applicable Program Protection Plan(s) and applicable Security Classification Guide(s).

3.2.4.1 Marking: All information generated by the Contractor shall be properly marked. For Official Use Only information generated and/or provided under this contract shall be marked in accordance with DoDM 5200.01. Technical information shall also be marked with appropriate Distribution Statements and Export Control warnings in accordance with DoDD 5230.24 and program Security Classification Guidance.

3.2.4.2 Public Release: Any controlled unclassified information pertaining to this contract shall not be released for public dissemination, including posting to any social media sites such as Facebook or Twitter, unless it has been approved for public release by appropriate U.S. government authority. Proposed public releases shall be submitted for approval prior to release through NAVAIR HDQTRS, Public Affairs Office, 47123 Buse Road, RADM William A. Moffett Building, Patuxent River, MD 20670-1547; navairpao@navy.mil; 301-757-1487.

3.2.4.3 Loss, Compromise and/or Electronic Spillage of Classified or Controlled Unclassified Information: All instances of loss, compromise and electronic spillage of classified or controlled unclassified information shall be reported to the COR, TPOC, and Government Security Office within 24 hours of the incident occurring.

3.2.4.4 Classified Spillages. Classified data spills occur when classified data is introduced either onto an unclassified information system or to an information system with a lower level of classification, or to a system not accredited to process data of that restrictive category. The number of classified spillages on Defense Department information systems continues to rise, resulting in significant costs to NAVAIR, particularly in light of the current resource-constrained environment. The Navy’s IT Service Provider (NMCI) has been charging the government per contaminated workstation to contain and clean an electronic classified spillage. The Contractor will be responsible for all costs associated with containment, clean up, and remediation of any classified spillage that is the result of the unauthorized disclosure of classified information by any Contractor employee.

3.2.5 Operations Security (OPSEC): The Contractor shall develop, implement, and maintain an OPSEC program to protect controlled unclassified and classified activities, information, equipment, and material used or developed by the Contractor and any subcontractor during performance of the contract. The Contractor shall be responsible for the subcontractor implementation of the OPSEC requirements. This program may include Information Assurance and Communications Security (COMSEC). The OPSEC program shall be in accordance with National Security Decision Directive (NSDD) 298, and at a minimum shall include:

1) Assignment of responsibility for OPSEC direction and implementation.

2) Issuance of procedures and planning guidance for the use of OPSEC techniques to identify vulnerabilities and apply applicable countermeasures.

3) Establishment of OPSEC education and awareness training.

4) Provisions for management, annual review, and evaluation of OPSEC programs.

5) Flow down of OPSEC requirements to subcontractors when applicable.

While performing aboard NAVAIR or NAVAIR sites, the contractor shall comply with facility OPSEC program instructions and contribute to organization-level OPSEC efforts. Include OPSEC as part of its ongoing security awareness program and take all required Agency training. Be responsive to the Supporting OPSEC Manager on a non-interference basis. Protect sensitive unclassified information and activities, which could compromise classified information or operations, or degrade the planning and execution of operations performed by the RO and contractor in support of the mission.

3.2.6 Anti-Terrorism Force Protection and Emergency Management: The work performed on this contract is not Emergency Essential in accordance with OPNAVINST 3440.17A and Government Emergency Management, Antiterrorism and/or Continuity of Operations Plans. Contractor personnel shall comply with all Government Emergency Management, Antiterrorism and/or Continuity of Operations Plans and directives. Contractor personnel shall not report for work at Government facilities upon declaration of Force Protection Condition CHARLIE or in any event or emergency where Government officials direct curtailment of operations to “Mission Essential Only”. All Contractor personnel assigned to a government facility shall complete annual Antiterrorism (Level One) and Active Shooter training.

3.2.7 Program Unique Requirements:

3.2.7.1 Policy Adherence. DOD and DON IA Program outlined in Secretary of the Navy Instruction (SECNAVINST) 5239.3A, ‘DON Information Assurance Policy’ and SECNAV M-5239.1, ‘DON Information Assurance Manual,’ apply to efforts under this contract. Contractor personnel providing services under this contract shall comply with all Federal, DOD, DON, and NAVAIR IA policies. In addition, the contractor shall comply with SECNAVINST 5510.30B and SECNAV M-5510.30 to assure that the proper security investigation is conducted for those contractor personnel performing services under this contract.

3.2.7.2 Information Technology Security. DON ADP Security Program outlined in SECNAVINST 5239.3A, ‘DON Information Assurance Policy’ and SECNAV M-5239.1, ‘DON Information Assurance Manual,’ applies to efforts under this contract. Contractor personnel providing services under this contract shall comply with all Federal, DOD, and DON IA statutory and regulatory requirements. The Contractor shall comply with SECNAVINST 5510.30B and SECNAV M-5510.30 to assure that the proper investigation (SSBI) is conducted for those contractor personnel who require IT Level 1 access. The Contractor shall coordinate with the COR/ACOR and TPOC to identify applicable positions.

3.2.7.3 Cybersecurity Workforce - DOD Directive 8570.01-M Information Assurance Workforce Improvement Program. DOD Directive 8570.01-M provides guidance for the identification and categorization of positions and certification of personnel conducting Information Assurance (IA) functions within the DOD Workforce supporting the DOD Global Information Grid (GIG) per DOD Instruction 8500.2 (Reference (b)). The DOD IA Workforce includes but is not limited to all individuals performing any of the IA functions described in Directive 8570-01-M. All Contractor personnel supporting this contract must comply with DOD Directive 8570.01-M, where applicable, and any training required to comply with this directive is at the expense of the Contractor, and can be found in the Labor Category Qualifications. The COR in conjunction with TPOC/ATPOC will assign the appropriate certification category based on the duties and responsibilities being performed, relative to the current published DOD 8570 Manual. Upon subsequent release of DODI 8140.01, the contractor shall adhere to updated guidance on cybersecurity workforce qualifications.

Exceptions to this requirement shall require approval from Site Information Systems Security Manager (ISSM) or Command ISSM shall not exceed 6-month duration to become compliant with the requirements of this contract. All Contractor personnel providing services under this contract shall comply with all NAVAIR and DON IA policies and guidance where applicable and any training or certification required to comply with this directive is at the expense of the Contractor.

3.3 Performance Requirements (NWCF, RDT&E O&M, Procurement, FMS, Section 852)

The contractor shall provide all personnel, supervision and other non-personal services necessary to perform the tasks defined in individual task orders.

3.3.1 The Contractor shall provide technical, analytical, and managerial support for NAVAIR’s general objectives in the following major functional areas:

3.3.1.1 Digital / Information Technology Management – Activities related to management support of Digital/IT related policy development, strategic planning, architecture and infrastructure, IA, information resource management, procurement actions and capital planning and investment control process to procure, use, and manage IT.

3.3.1.2 Systems Development and Engineering – Activities pertaining to software development support for existing, planned, and future NAVAIR/Navy IT systems and digital/virtual environments. Typical duties include capturing user and business owner requirements; coordinating with appropriate departmental personnel regarding EA; identifying functional, security, and performance requirements; developing logical and physical database models; performing coding, testing, quality assurance, design, and program documentation; implementation; and maintaining interoperability between future and existing hardware and software applications.

3.3.1.3 Operations Support – Activities related to planning and implementing telecommunications and IT infrastructures; network administration which includes network access and security; server management; emergency preparedness planning; IT disaster recovery planning and execution; IT inventory control; audio, video, and web conferencing; application system administration; user support; workstation management; IT/digital training and education; wireless voice, video and data services.

3.3.1.4 Cybersecurity – Activities related to the secure transmission and storage of electronic information, drafting cybersecurity policy and procedures, user awareness training, and risk management. Further cybersecurity activities pertain to recommending and supporting the use of electronic security hardware and software tools and mechanisms including, but not limited to, encryption devices, access control, user identification and authentication, and malicious content detection.

3.3.1.5 Digital Activities, Technology Development, Modernization, and Acceleration – Activities related to the planning, development, testing, deployment, acceleration, operation, integration, and scaling of various current, evolving, and emerging digital capabilities, technologies, tools, and processes. Includes talent management, change management (culture), and communications.

3.3.1.6 Data Analytics and Integration – Activities related to researching, developing, testing, evaluating, implementing, and integrating analytic methods, artificial intelligence (AI), machine learning (ML), and automated decision-making technologies, processes, and applications.

3.3.2 Detailed Tasks.

3.3.2.1 Program Management. The Contractor shall provide the collateral duties of the planning, coordination, technical direction and surveillance of the activities necessary to ensure disciplined performance of work and timely and efficient application of resources for the accomplishment of all services contract work issued under the SOW. This key function shall maintain communication with each supported organization and coordinate with the COR/ACOR in conjunction with TPOC/ATPOC immediately of any problems that would prevent meeting established objectives.

3.3.2.2 General/Technical Support. The Contractor shall provide general / technical support to include:

a) Support the creation and management of documentation (internal and external briefings, flowcharts, white papers, and reports) using appropriate applications (i.e., SharePoint, Fusion, MS Office Suite, Visio, etc.).

b) Compile and support the preparation of briefings and reports in hard copy for special and / or recurring reports.

c) Research and analyze data related to the IT/IM products and services.

d) Provide troubleshooting assistance for VTC, Department of the Navy Application and Database Management System (DADMS), DOD Information Technology Portfolio Repository-Department of the Navy (DITPR-DON) and the Navy Information Technical Approval System (NAVITAS).

e) Maintain an accurate training report for all assigned employees and notify TPOC/ATPOC designee when training requirements are not being met.

f) Respond to data calls by established deadlines.

g) Prepare metric reports as requested.

h) Maintain the Community of Interest (COI) and SharePoint/Fusion repositories.

i) Identify, conceptualize, evaluate, document and recommend opportunities for process, project and program improvements.

j) Create/maintain/update Standard Operating Procedures (SOPs), desk guides and other business operation processes.

k) Provide analysis and develop metrics related to Enterprise, Security, Research Development Test & Evaluation (RDT&E) and Service Oriented Architectures (SOA).

l) Maintain EA authoritative data source validation.

m) Validate EA Authoritative Source data as requested.

n) Prepare EA Configuration Control Board packages and coordinate a list of approved changes to the EA design for review and approval by the Government that includes the EA business rules and data.

o) Produce Integrated Definitions Function Modeling Method (IDEF0) extracts for use in the EA analysis process.

p) Use the DON “tasker” system to track all taskers that require NAVAIR CIO Office response. Responsibilities include reviewing tasker, determining the appropriate DCIO area responsible for responding and working with the appropriate DCIO to ensure response by the assigned due date.

q) Manage the customer feedback initiative for the DCIO for Application Integration. This includes collecting metrics from all NAVAIR sites regarding feedback, following up on any feedback received, and compiling metrics.

r) Provide SharePoint, Fusion, and other collaboration tools support to include setup and management of sites, research and implementation of capabilities to improve efficiencies, administration of sites and web parts, creation and management of lists, task trackers, basic workflows, etc.

s) Coordinate calendars; prepare travel orders, desk guides, etc.

t) Prepare weekly status reports (focus charts) and summarize the progress of all current initiatives.

u) Coordinate meetings and provide briefing material when requested.

v) Provide administrative assistance prior, during, and post briefings/meetings.

w) Set up Video Teleconferencing bridges and support the collection of required actions and follow-up decisions.

3.3.2.3 Strategy, Guidance, and Plans and Policy Support. The Contractor shall provide strategy, guidance, and plans and policy support to include:

a) Review IT Procurement Request(s) (ITPRs) formally known as IT Approval Requests to ensure they are in compliance with current Federal, DOD, DON statutory and regulatory requirements. Policy compliance shall apply to Plans and Policy, Applications Integration, EA, Operations and IA compliance.

b) Review, monitor and report metrics in support of the National Help Desk.

c) Provide draft documentation support for the translation of Government-approved strategies and vision into enterprise plans, policies and resource documents.

d) Provide support for the development and management of comprehensive planning processes.

e) Research business operations trends and prepare resulting analytical reports and summaries.

f) Assist customers with entering IT procurement requests into NAV-ITAS.

g) Create draft documentation in support of the NAV-IDAS effort.

h) Track and manage individual NAV-IDAS requests and ensure that all issues are processed in a timely manner.

i) Review, prepare and process Government-approved Open Software Distribution (OSD) certification packages for programs.

j) Assist customers with registering systems in DITPR DON. This includes: providing guidance for Government consideration regarding if the system needs to be entered as well as assisting customers in completing the record in compliance with Federal, DOD and DON statutory and regulatory requirements.

k) Assist customers with following the proper process when deactivating systems in DITPR DON, documenting the reason in DITPR DON and ensuring that the proper processes are followed.

l) Respond to data calls and comment on policy related to DITPR DON.

m) Draft documentation, communication, and assist with developing training material for DITPR DON and maintain the CIO COI to ensure it is updated with the most recent policies and processes.

n) Review Echelon II DITPR DON records. This includes providing assistance with questions and working through the necessary compliance areas,…