N6134019R1203_DRAFT_ACTS_IDIQ_SOW.docx

ACTS SOW

DD MMM, 2018

Appendix B

STATEMENT OF WORK

FOR

ADVANCED COMPUTER-BASED TRAINING SYSTEM (ACTS)

Indefinite Delivery/Indefinite Quantity (IDIQ)

DEPARTMENT OF THE NAVY

NAVAL AIR WARFARE CENTER

TRAINING SYSTEMS DIVISION

12211 SCIENCE DRIVE

ORLANDO, FL 32826-3275

APPROVED BY: DATE:

David Thomas Lead Project Manager, 1.6.3.2

APPROVED BY: DATE:

Mark Reemsnyder, Lead Project Engineer, 4.6.8.4

DISTRIBUTION STATEMENT C - Distribution authorized to U.S. Government agencies and their contractors. Other requests for this document shall be referred to COMMANDING OFFICER, NAVAL AIR WARFARE CENTER, TRAINING SYSTEMS DIVISION, 12211 Science Drive, Orlando, FL 32826-3224

Multipurpose Reconfigurable Training System 3D, MRTS 3D, and the MRTS 3D logo are registered trademarks of the U.S. Navy.

Virtual Interactive Shipboard Instructional Tour, and VISIT 3D are trademarks of the U.S. Navy.

Table of Contents

Table of Contents

Section Title Page vii vi

APPENDICES

Table of Contents

B Table B List of CDRLs

Advanced Computer-Based Training System ACTS Source Selection Statement of Work

1. SCOPE

This statement of work (SOW) defines the effort required to provide Naval Air Warfare Center, Training Systems Division (NAWCTSD), with development, production and sustainment of an Advanced Computer-Based Training System (ACTS) Indefinite Delivery/Indefinite Quantity (IDIQ) contract to support the Multipurpose Reconfigurable Training System 3D® (MRTS 3D®) program, the Virtual Interactive Shipboard Instructional Tour 3D™ (VISIT 3D™) program, and other future training solutions. The contract awardee shall act as the Contracted Systems Integrator (CSI) for both programs as well as future training programs. The ACTS IDIQ contract includes task orders for the design, development, production, test and evaluation, delivery, modification, and life cycle support of training systems for NAWCTSD customers. The MRTS 3D effort consists primarily of end item deliverables including: media, test and evaluation products, technical documentation, life cycle support products, workstation simulation products, and MRTS 3D software products consisting of re-used and expanded code, libraries, and data. The VISIT 3D virtual tour product line consists of end item deliverables including: media, test and evaluation products, technical documentation, and VISIT 3D software products utilizing Government Furnished Information (GFI), including the VISIT 3D software development kit (SDK), libraries, authoring tools, and data. Delivery orders (DOs) will be issued to upgrade existing training solutions as well as develop and field new training solutions that simulate various military tactical systems. The DOs may scale to systems of systems and large scale simulations.

As the CSI, the ACTS awardee shall be responsible for managing a growing database of MRTS 3D, VISIT 3D, and other applications and ensure their timely delivery to training sites in support of the Navy’s Sailor 2025 and Ready-Relevant-Learning objectives. In this request for proposal (RFP), MRTS 3D, VISIT 3D, and other applications shall be collectively referred to as applications. Individual DOs may include hardware procurement and integration of hardware with MRTS 3D software, life cycle support products, and data collection and analysis activities to directly support product development. Operation and maintenance of the fielded trainers is not a requirement under this SOW and is being provided via other contract vehicles, such as contractor maintenance services (CMS). VISIT 3D SDK maintenance and updates are not requirements under this SOW and are being performed via a different contract vehicle. Current MRTS 3D products simulate tactical systems found on submarines, ships, aircraft, and aviation support equipment of the U.S. Navy, along with weapons platforms from various other services. DOs of this contract may include products for the U.S. and foreign armed services and any other customer of NAWCTSD.

1.1 Background

The MRTS 3D uses primarily Commercial Off the Shelf (COTS) hardware and Windows operating systems to simulate various Naval tactical systems for training purposes. MRTS 3D training solutions consist of MRTS 3D Classrooms and MRTS 3D Laboratories (see the MRTS 3D Classroom and MRTS 3D Laboratory System/Software Requirements Specification for more information). MRTS 3D Classrooms create a desktop environment with dual monitors; a multi-touchscreen for MRTS 3D simulation interaction, the other for viewing training material that supports the simulation. In contrast, MRTS 3D Laboratories use large multi-touchscreens that can be moved around to create laboratory configurations that mimic station layouts of tactical systems. MRTS 3D simulation computers are linked together in a stand-alone Local Area Network (LAN) that runs government-owned simulation software, while the training network is designed to be either standalone or connected to the Navy’s unclassified Training Network (TRANETU). All MRTS 3D software applications are to be built in accordance with (IAW) the MRTS 3D Instructor Operating System (IOS) Middleware and SDK (MSDK). The MRTS 3D MSDK currently uses the Unity gaming engine for the client side graphics and C# as the primary language. Maintenance of the MRTS 3D MSDK will be a primary task under this IDIQ.

VISIT 3D is a familiarization training application providing assisted and unassisted exploration of a simulated environment. Trainees interact in a 3D rendered environment with items of interest to access descriptive or instructional media including: interactive courseware, workstation simulations, reference documents, quizzes, and common media files. Users navigate the 3D space using a COTS video game controller with stick, directional pad, and button interactions programmed to mimic industry standard control schemes. Once the VISIT 3D Developers Guide, VISIT 3D SDK and VISIT 3D authoring tools are available as GFI, all VISIT 3D products shall be developed IAW them. VISIT 3D products also share a common graphics library with MRTS 3D. VISIT 3D products are designed to operate both on MRTS 3D-compatable hardware and other COTS computer equipment.

Acquisition Model

This contract includes several basic roles:

Tasks Roles

Model Library

Application Marketplace Validate other contractors’ adherence to SDK’s & related standards

Figure 1. Roles and Tasks for the ACTS IDIQ The Government envisions an evolving “End State” that includes an CSI supporting a MRTS 3D MSDK, overseeing development of individual applications while also integrating applications that are developed by other contractors. Section 3.1 of this SOW provides a detailed description of the roles and tasks shown in Figure 1.

Under this ACTS single award IDIQ, the offeror can be tasked with all roles and tasks shown in Figure 1. Once the MRTS 3D MSDK is mature enough for other contractors to develop additional software applications, an ACTS Multiple Award Contract (MAC) will be awarded separately from this contract to increase production capacity to meet the Navy’s training needs. The awardee of the single award ACTS IDIQ contract would continue the CSI roles listed in Figure 1. All ACTS SDKs would be freely available to all developers in the MAC, establishing a common development structure to improve the development efficiency and standardize on a common product that could run on common hardware.

In the CSI role, the ACTS IDIQ Awardee shall receive applications from the MAC contractors and integrate and test them for specifications and standards conformance, and upon approval, make them available for distribution over a cloud based “application marketplace" type solution. Note that for this task, the offeror shall use the MRTS 3D MSDK, which will be maintained by the offeror, and the VISIT 3D SDK, will be maintained by a separate contract vehicle.

As the need for hardware procurement and delivery increases, a later separate ACTS Hardware Provider IDIQ contract may be issued for training system hardware procurement, delivery and installation. Under the CSI role, the ACTS IDIQ awardee would continue to be the standards holder for hardware and associated documentation under the “Hardware Support” task as shown in Figure 1.

More information on the MRTS 3D MSDK and the various submodules and inherent and future capabilities is available in the MRTS 3D MSDK Whitepaper (see section 2.1 for specific reference).

MRTS 3D Status

The MRTS 3D Program is currently supporting several aviation, surface and submarine training platforms, including the MQ-4C Triton unmanned aerial vehicle (UAV) and the Ford Class Electromagnetic Aircraft Launch System (EMALS) and several variants of submarine weapons and diesel generator systems. A list of all MRTS 3D fielded and under development applications is in Table 1.

MRTS 3D 688i WLC

MRTS 3D VIRGINIA Block (BLK) I/II Torpedo Room

MRTS 3D VIRGINIA BLK III Torpedo Room

MRTS 3D Fairbanks Morse (FM) EDG (Field in FY19)

Table 1: Current MRTS 3D Applications

MRTS 3D applications are distributed and hosted at numerous sites throughout the Navy. Table 2 contains a list of all the current Navy training sites supported by the MRTS 3D program. The MRTS 3D program will no longer be fielding specific training devices. See the MRTS 3D Classroom and MRTS 3D Laboratory S/SRS for more information.

MRTS 3D Laboratory

MRTS 3D Laboratory (Field in FY19)

Method of Tasking The government will issue requirements under the basic IDIQ Contract through individual DOs. Each DO SOW will contain the requirements for specific tasks relating to training system products. DOs may be issued at any time during contract performance, and will be related to scope tasks outlined in the basic SOW. Additionally, the Government will include a set of data item requirements for the DO in the form of CDRL items.

Definitions The following definitions apply to this SOW.

Engineering Production Model (EPM) An EPM is a standalone system built to match the requirements of a fielded MRTS 3D Classroom, MRTS 3D Laboratory, or other future training device. The MRTS 3D Integration Laboratory has a small scale EPM supporting MRTS 3D Classroom and MRTS 3D Laboratory procurement and acceptance testing. At the government’s discretion, the EPM may be used for testing purposes during the course of the execution of the terms of this delivery order.

Government Integration Laboratories The government integration labs are used by the government to accept products developed as the result of a delivery order. Currently, MRTS 3D and VISIT 3D assets are located at government facilities within or close vicinity of Naval Support Activity (NSA) Orlando, Florida. The labs currently have one MRTS 3D training device, but lab sizes and locations may change during the course of the contract. At the government’s discretion, contractor access to the integration labs may be granted to test on the EPMs as well as perform the core sustainment functions. The integration labs typically consist of:

a. EPMs for integration, testing and accepting of training applications

b. Servers for configuration management of the software and data repositories

c. Storage space for accountable inventories

d. Associated spares

Enhanced User Enhanced User or Privileged User: An Authorized User (military, civilian or contractor) who requires detailed knowledge of Cyber IT and/or cybersecurity to support work in the development, maintenance, or operation of DON systems, including weapons, tactical, electronic and electrical services, navigation, and engineering. Enhanced Users possess advanced Cyber IT/CS knowledge and abilities centered on particular professional areas.

APPLICABLE DOCUMENTS

The following documents of the issue listed form a part of this SOW to the extent specified herein. In the event of a conflict between documents referenced herein and the contents of this SOW, the contents of this SOW take precedence. Nothing in this SOW, however, supersedes applicable laws and regulations, unless a specific exemption has been obtained.

Government Documents

The following specifications, standards, and handbooks of the exact revision listed below form a part of this specification to the extent specified herein.

(Copies of these documents are available online at http://quicksearch.dla.mil/ or from the Standardization Document Order Desk, 700 Robbins Avenue, Building 4D, Philadelphia, PA 19111-5094.)

OTHER PUBLICATIONS:

(The above regulations are available at http://www.pmddtc.state.gov/regulations_laws/itar_official.html

(OSHA standards are downloadable from http://www.osha.gov)

Defense Federal Acquisition Regulations Supplement (DFARS)

DFARS 252.204-7008

DFARS 252.211-7003

Compliance with Safeguarding Covered Defense Information Controls Item Identification and Valuation (Aug 2008)

DFARS 252.239-7001

DFARS 252.239-7010

Information Assurance Contractor Training and Certification (Jan 2008) Cloud Computing Services

(DFARS is available at: http://www.acq.osd.mil/dpap/dars/index.html)

(Copies of the above handbooks are available at http://assistdocs.com/search/search_basic.cfm or from the Standardization Document Order Desk, 700 Robbins Ave., Bldg 4D, Philadelphia, PA 19111-5094.)

DoD Cybersecurity, Risk Management Framework for DoD IT and Department of the Navy (DoN) Instructions, Manuals, Policy Memos, and Guidance Documents

DODD 8140.01

DODI 8500.01

Cyberspace Workforce Management, dated 11 AUG 2015 Cybersecurity, dated 14 MAR 2014

DODI 8510.01

CNSS 1253

Risk Management Framework for DoD IT, dated 12 MAR 2014 Committee on National Security Systems (CNSS) Instruction No. 1253, Security Categorization and Control Selection for National Security Systems, dated 27 MAR 2014

SECNAV M-5239.2

RMFPG V1.0

NAVAIR TSDG V1.0

Department of the Navy Cyberspace Information Technology and Cybersecurity Workforce Management and Qualification, dated June 2016

Navy Authorizing Official and Security Control Assessor Risk Management Framework Process Guide

Naval Air Systems Command Training Systems Domain Guide (TSDG), V1.0, dated OCT 2016

The above Cybersecurity documents are available at http://nawctsd.navair.navy.mil/Resources/Library/IA/Index.cfm. The NISPOM is available at http://www.dtic.mil/whs/directives/corres/pub1.html

Systems Engineering Technical Reviews, dated 17 April 2009

(NAVAIR Instructions are downloadable from https://homepages.navair.navy.mil/directives/index.cfm

(U.S Code is downloadable from http://uscode.house.gov/search/criteria.shtml

The above document is downloadable from http://www.opm.gov/investigate/resources/final_crdentialing_standards.pdf

NAWCTSD Documentation:

MRTS 3D Instructor Operator Station (IOS) Middleware and Software Development Kit (MSDK)

IOS/MSDK Specification may be under contract concurrently and if so, leverage in the procurement effort. Documentation set includes:

1. MRTS 3D MSDK Software Design Description (SDD) with Application Programing Interface (API) definitions for the modules are available.

2. MRTS 3D Style Guide Specification

3. Modeling Standards Guide

MRTS 3D Middleware and System Development Kit (MSDK) White Paper

MRTS 3D Middleware and System Development Kit (MSDK) White Paper

VISIT 3D Software Development Kit (SDK)

VISIT 3D Software Development Kit, once produced.

Product Documentation:

21E17 Systems Interface Manual (SIM)

688i Software Design Document (SDD)

688i Software Version Description (SVD)

688VLS Software Design Document (SDD)

688VLS Software Version Description (SVD)

VIRGINIA BLK III Software Design Document (SDD)

VIRGINIA BLK III Software Version Description (SVD)

Requirements Traceability Verification Matrix (in Microsoft Team Foundation Server (TFS) format)

Acceptance Test Procedures (ATP)

Requirements Traceability Verification Matrix (in Microsoft Team Foundation Server (TFS) format)

Acceptance Test Procedures (ATP)

Requirements Traceability Verification Matrix (in Microsoft Team Foundation Server (TFS) format)

Future Products

Acceptance Test Procedures (ATP)

Requirements Traceability Verification Matrix (in Microsoft Team Foundation Server (TFS) format)

Non-Government Documents

INDUSTRY STANDARDS

(Copies of the above documents are available from www.ansi.org or Global Engineering Documents, 15 Inverness Way, East Englewood, CO 80112.)

(Copies of the above document are available from www.ansi.org or Global Engineering Documents, 15 Inverness Way, East Englewood, CO 80112.)

(Copies of this document are available from www.ieee.org or IEEE Service Center, 445 Hoes Lane, Piscataway, NJ 08854-1331.)

(Copies of this document are available from http://www.ansi.org)

REQUIREMENTS

General The requirements defined herein form the basis for all work and products delivered to the Government as a part of the contract. This SOW defines the scope of the projects which apply to the contract. The Contractor shall organize, coordinate, and control all program activities under contract to ensure compliance with the contract requirements and delivery of the required products and incidental services. The Government shall retain unlimited rights to all works, as defined at DFARS clause 252.227-7020, created, generated, or produced and required to be delivered under this contract.

Contractor’s Role as a Developer, Contracted Systems Integrator and Hardware Provider

The contractor’s roles are Developer, Contracted Systems Integrator and Hardware Provider. Each role shall focus on one or more of the following three tasks: modeling, software development and hardware support. The deliver order will specify the role(s) required to be performed under the terms of the DO. Sections 3.1.2 through 3.1.4 of this document apply to all roles.

Developer

Within the Developer role, the contractor shall perform the following tasks as required on each delivery order:

1) Modeling

a. Create new or modify existing models upon Delivery Order request IAW Modeling Standards Guide. The developer may be required to develop models from the following sources:

i. Developing models from CAD data

ii. Developing models from Point Cloud Data

iii. Developing models from Lidar data

iv. Developing models from photo reference

b. Submit models for quality and compatibility testing

2) Software Development

a. Create new or modify existing applications upon Delivery Order request, IAW MRTS 3D MSDK or VISIT 3D SDK as appropriate per DO

b. Submit applications for quality and compatibility testing

c. Deliver, install and test software applications

Contracted Systems Integrator (CSI)

The offeror will perform tasks as a Contracted Systems Integrator, performing configuration management and integration of the family of products under the ACTS umbrella. The contractor shall propose new ideas for future models, software applications and hardware improvements. Within the CSI role the contractor shall perform the following tasks as required on each delivery order:

1) Modeling Standards and Repository

a. Create a model library that NAWCTSD and other developers’ can:

i. Receive models from other contractors and validate IAW Modeling Standard Guide

ii. Utilize a searchable and sortable function that catalogs the following information:

1. File Name / component name

2. Platform (e.g. Ford CVN, AEGIS DDG, VA SSN)

3. Platform space (ex. Frame number, space name)

4. System name (ex. AEGIS Radar, EMALS, “generic mechanical” for valves, “generic test equipment” for oscilloscopes and multi-meters)

5. Model format

6. Resolution and Level of Detail (LOD)

7. Model version with change description

8. Results of compatibility testing

9. Check in/out status for each model

b. Maintain models IAW Modeling Standard Guide

c. Draft, modify and maintain Modeling Standard Guide

d. Perform configuration management of above items

2) Software Development Standards and Repository

a. Receive software applications from other contractors and validate IAW MRTS 3D MSDK or the VISIT 3D SDK as appropriate

b. Maintain applications IAW MRTS 3D MSDK or the VISIT 3D SDK as appropriate

c. Draft, modify and maintain software development guides and Human Machine Interface (HMI) standards

d. Develop and maintain software architecture, networking and Instructor Operator Station (IOS)

e. Continue to develop and maintain MRTS 3D MSDK

f. Distribute and provide technical support with help desk for the MRTS 3D MSDK, MRTS 3D applications, and VISIT 3D applications

g. Provide support to maintain the Authority to Operate (ATO) for all MRTS 3D Classrooms and MRTS 3D Laboratories

h. Maintain host operating systems IAW Cybersecurity standards and ATOs.

i. Utilize a common software repository such as Microsoft Team Foundation Server (TFS) that catalogs and stores

i. Source code

ii. Model data

iii. Documentation

iv. Application check in/out status

v. Application version with change description

vi. Results of compatibility testing

j. Maintain Application Market that captures:

i. Application configuration and documentation

ii. Application version with change description

k. Prepare and install software packages

l. Establish test methods and maintain a test environment for wide area distribution and wide area simulations to support distributed learning

m. Develop a process to maintain the library so that new assets can be added, and existing assets can be checked out / in by the Government and other contractors.

i. To account for growth beyond unclassified programs, the process shall account for retention of classified SECRET and unclassified assets, including those with For Official Use Only (FOUO), no foreign nationals (NOFORN), and Naval Nuclear Propulsion Information (NNPI) handling restrictions. Note: It is possible during the life of the contract that delivery orders may receive GFI above the level of SECRET, and that the offeror may be directed to produce deliverables that are above the SECRET level.

ii. The process shall have a method to distribute a table of contents for each library to the Government and authorized contractors.

iii. Develop a process to examine incoming assets to validate compliance with the MRTS 3D MSDK and / or Modeling Style Guide and generate a report to the Government IAW CDRL A00F, Test Inspection Report. The contractor shall propose the report format for acceptance by the Government.

n. Perform configuration management of above items.

3) Hardware Standards and Repository

a. Draft, modify and maintain Hardware Standards

b. Define standard hardware installation kit inventories

c. Maintain, utilize and store Government Furnished Equipment (GFE)

d. Maintain documentation such as the Systems Interface Manual for all sites

Hardware Provider

Within the Hardware Provider role, the contractor shall perform the following tasks as required on each delivery order:

1) Hardware Support

a. Procure hardware kits to include spares

b. Install and remove hardware kits on site

c. Provide hardware technical support to users

d. Draft or update documentation such as the MRTS 3D Systems Interface Manual

Program Planning The purpose of the program planning process is to produce and communicate effective and workable program plans. The contractor shall prepare and submit the System Engineering Management Plan (SEMP) IAW CDRL A002. The contractor shall prepare and submit the Software Development Plan (SDP) IAW CDRL A001.

Program Decision Management The purpose of the decision management process is to select the most beneficial course of program action where alternatives exist. The contractor shall define, document, manage, and apply a program decision management process IAW IEEE Std 12207-2008, section 6.3.3.

Development of a Contract Work Breakdown Structure (CWBS) When required by the DO, the requirements of this paragraph shall apply. The contractor shall develop, document, maintain, and apply a CWBS and CWBS dictionary that define the work structures required to perform the work required by the DO. The contractor shall use the CWBS as the framework for planning, budgeting, and reporting of cost, schedule, and performance. The contractor shall use MIL-HDBK-881A for guidance in CWBS and CWBS dictionary definition. The contractor shall extend the CWBS to lower levels that represent the plan to accomplish the entire DO work scope consistent with internal organizations and processes. The contractor shall update the CWBS and CWBS dictionary as changes occur or additional system definition is accomplished. The contractor shall prepare the CWBS IAW CDRL B004.

Work Planning and Scheduling When required by the DO, the requirements of this paragraph shall apply. The contractor shall develop, document, manage, and apply an Integrated Master Schedule (IMS) that presents the contractor’s and subcontractor’s plans and schedules to meet the requirements of the DO. The contractor shall develop and document a tiered scheduling system based on the CWBS elements showing the program milestones and prerequisite events, conferences, reviews, data submittals, and deliveries. The contractor shall construct the IMS to ensure that the program milestones are met and to ensure that deliveries meet the requirements of the DO. Contractor schedule information delivered to the Government or presented at program reviews shall originate from the IMS. The contractor shall perform analyses of the IMS tasks, compare the IMS tasks to the schedule baseline, report potential or existing problem areas, and recommend corrective actions to eliminate or reduce schedule impact. The contractor shall revise the IMS, where necessary, to reflect DO changes. The contractor shall use the IMS as a day-to-day execution tool and to periodically assess progress in meeting program requirements. The contractor shall prepare the IMS IAW CDRL B005.

Integrated Product Teams (IPTs) When required by the DO, the requirements of this paragraph shall apply. The contractor shall define, document, implement, and maintain an IPT structure for the duration of the DO. The purpose of an IPT is to bring together the functions that have a stake in the performance of a product or process and concurrently make integrated decisions affecting that product or process. IPT membership will consist of multi-functional stakeholders working together with a product-oriented focus. Each IPT will be empowered to make critical life cycle decisions regarding each product or process within their purview. IPTs will be applied at various levels ranging from the overall structure of an organization to informal groups functioning across existing units. With Government input, the contractor shall define and document the composition, structure, roles, and responsibilities of each IPT. Each IPT will maintain a list of membership. Each IPT will consist of Government and contractor personnel and have a Government chair. Each IPT will publish an agenda before each meeting. Each IPT will record and maintain meeting minutes.

Risk Management The purpose of the risk management process is to continuously identify, analyze, treat, and monitor the risks to the program. When required by the DO, the requirements of this paragraph shall apply. The contractor shall conduct risk management to systematically control the uncertainty in the project’s ability to meet cost, schedule, and performance requirements. The contractor may use NAVAIRINST 5000.21(series) for guidance in the contractor’s approved Risk Management Plan (RMP) (CDRLA004). The contractor shall participate in the Government Risk Working Group established for this program. The contractor shall report risk information, data, and analysis in the Contractor’s Progress, Status, and Management Report (CPSMR) cited above.

Quality Management The purpose of the quality management process is to assure that the products meet contractor quality objectives and Government requirements. When required by the DO, the requirements of this paragraph shall apply. The contractor shall address methods to control the quality of the DO product(s) in the SDP and SEMP. The contractor may use ANSI/ASQ Q9000-2005 and ANSI/ASQ Q9004-2009 for guidance.

Control of GFE/GFI The contractor shall perform the following tasks to control all GFE provided to support the DO as part of the quality management process:

a. Examine upon receipt, consistent with practicality, to detect damage

b. Provide storage that precludes deterioration

c. Examine prior to installation, consistent with practicality, to detect damage

d. Identify and protect from improper use or disposition

e. Verify and audit quantity periodically GFE/GFI Issued Equipment listed in Appendix A, Table A-V, is available for use by the contractor in the execution of delivery orders. The contractor shall protect GFE IAW FAR 52.245-1. The contractor shall return the GFE at the end of the delivery order or as directed by the government. The returned GFE is subject to government inspection, and the contractor shall be responsible for costs associated with repairs due to negligent use or failing to follow FAR 52.245-1.

Configuration Management (CM) The purpose of the CM process is to establish and maintain the integrity of identified Configuration Items (CIs) over their lifecycle. When required by the DO, the requirements of this paragraph shall apply. The contractor shall define, document, manage, and apply a CM process IAW IEEE Std 12207-2008, section 6.3.5 and 7.2.2; and ANSI/EIA-649-B 2011 in the contractor’s approved Configuration Master Plan (CMP), prepared IAW with CDRL A003. The contractor shall place Government-Furnished Software (GFS), NDI, and Commercial Item software, and each item’s associated documentation under CM upon receipt. The contractor shall place Commercial Item software items under CM as “disk image” files of the physical media. The Government will maintain a separate CM repository in the MRTS 3D integration labs. This repository is not accessible outside the integration labs, and is also used by Government team members to store Government developed MRTS 3D software and documentation and to track repository status. The contractor shall address the integration labs in the CMP and ensure that the integration labs are updated each time a testing event occurs and that all changes in software/documentation, under a DO are also captured in the integration lab repositories.

Change Management When required by the DO, the requirements of this paragraph shall apply. The contractor shall define, document, manage, and apply a process to accomplish change management. The contractor shall use Engineering Change Proposals (ECPs) and Request for Deviations (RFDs) to request changes to an approved baseline. The contractor shall prepare the Engineering Change Proposal (ECP) and Request for Deviation (RFD) IAW CDRLs A00L and A00M, respectively.

Configuration Status Accounting When required by the DO, the requirements of this paragraph shall apply. The contractor shall define, document, manage, and apply a process to accomplish configuration status accounting. The contractor shall identify and document all items incorporated into or deleted from the training device during development and modification. The contractor shall prepare the Technical Directive (TD) (Training Equipment Change Directive (TECD)) IAW CDRL A00K.

Use of Contractor’s Inspection Equipment When specified by the DO, the contractor shall make measuring and testing devices available for use by the Government when required to determine conformance with contract requirements. The contractor shall provide the personnel needed to operate such devices and to verify calibration, accuracy, and condition.

0. Contractor’s Progress, Status, and Management Report (CPSMR) The contractor shall prepare the Contractor’s Progress, Status, and Management Report in accordance with (IAW) the Contract Data Requirements List (CDRL B001) for all open delivery orders. For administrative efficiency, the contractor may consolidate CPSMRs into a single report with subsections describing status of individual delivery orders.

Security (Classified and Limited Distribution Programs) The security requirements specified herein shall apply to the contractor and subcontractors. The contractor shall comply with applicable on-site security regulations related to government installation and facility access.

Classified Processing and Access to Classified Systems The contractor shall safeguard classified information and meet the security requirements identified in the DD Form 254. The contractor shall enforce these safeguards throughout the life of the contract including the transport and delivery phases.

Operations Security (OPSEC) The contractor shall develop, implement, and maintain an OPSEC program to protect controlled unclassified and classified activities, information, equipment, and material used or developed by the contractor and any subcontractor during performance of the contract. Guidelines for applying the Risk Management Framework to federal information systems to include conducting the activities of security categorization, security control selection and implementation, security control assessment, information system authorization, and security control monitoring are provided in NIST SP 800-37. This program may include Cybersecurity and Communications Security (COMSEC). The OPSEC program shall be in accordance with National Security Decision Directive (NSDD) 298. If the contractor does not have an established OPSEC Plan that addresses the protection of classified information, critical information, sensitive, proprietary, or controlled unclassified information, the Government will provide a template for the Contractor’s internal development of an OPSEC Plan. Additional OPSEC program planning guidance can be found in DI-MGMT-80934C, OPERATIONS SECURITY (OPSEC) PLAN and NAVAIR OPERATIONS SECURITY (OPSEC) REQUIREMENTS (attachment). The OPSEC program, at a minimum, shall include:

a) Assignment of responsibility for OPSEC direction and implementation

b) Issuance of procedures and planning guidance for the use of OPSEC techniques to identify vulnerabilities and apply applicable countermeasures

c) Establishment of OPSEC education and awareness training to include Basic OPSEC training, produced by the Interagency OPSEC Support Staff (IOSS), which can be found at https://www.iad.gov/ioss/department/opsec-fundamentals-course-opse1300-opse1301-opse1300e-10045.cfm (OPSE1301 OPSEC Fundamentals)

d) Provisions for management, annual review, and evaluation of OPSEC programs

e) Flow down of OPSEC requirements to subcontractors when applicable

Access to DoD Installations, Government Information, and Information Technology (IT) Systems – Personnel Security Background Checks and DBIDS

a) The Common Access Card (CAC) shall be the principal identity credential for supporting interoperable access to DoD installations and access to U.S. Government information systems IAW FAR 52.204-9. The Defense Biometric Identification System (DBIDS) shall be used for contractors and vendors who do not have a CAC, but only requires access to a base/installation Navy command. The Contractor shall first coordinate with the appropriate NAWCTSD Contracting Officer Representative /Technical Point of Contact or government sponsor to request an application to be process through the NAWCTSD Security Office Trusted Agents for issuance of the CAC or via the Trusted Associate Sponsorship System. The base Visitor Control Center representative will process request for installation access using the DBIDS. More information for obtaining the CAC can be found at http://www.cac.mil/common-access-card/getting-your-cac/for-contractors/ and for DBIDS at https://www.cnic.navy.mil/om/dbids.html

b) Contractor personnel whom do not have a security clearance, but require a CAC in performance of their sensitive duties (including access to controlled unclassified information, but not access classified information), shall coordinate with the NAWCTSD Security Office to complete a National Agency Check with Local Agency Checks including Credit Check (NACLC/TIER- 3) background investigation, which includes submission of fingerprints and the Standard Form SF-86 (Questionnaire for National Security Positions). The contractor shall submit the Standard Form 86 to the NAWCTSD Security Office for processing. There shall be no additional NACLC/TIER-3 submissions for contractors holding a valid national security clearance. The Government may issue the credential upon favorable return of the Federal Bureau of Investigations (FBI) fingerprint check, pending final favorable completion of the NACLC/TIER-3.

c) Access to restricted areas, controlled unclassified information or Government Information Technology by contractor personnel shall be limited to those individuals who have been determined trustworthy as a result of the favorable completion of a NACLC/TIER-3 or who are under the escort of appropriately cleared personnel. Where escorting such persons is not feasible, a NACLC/TIER 3 shall be conducted and favorably reviewed by the appropriate DoD component, agency, or activity prior to permitting such access.

d) The contractor shall comply with the Cybersecurity and personnel security requirements for accessing U.S. Government IT systems specified in the contract.