Attachment_1_Base SOW 170020_Amendment 02.docx

SOW 170020

06 Feb 2019

SURFACE NAVY TRAINING ANALYSIS AND CURRICULUM MODERNIZATION INDEFINITE DELIVERY INDEFINITE QUANTITY CONTRACT

DRAFT STATEMENT OF WORK

NAVAL AIR WARFARE CENTER

Training System Division (NAWCTSD) 12211 Science Dr. Research Parkway Orlando, FL 32826-3275

Approved by:

PMS 339: ____________________________ Date: ___________

TSD 4.6.3.2: ____________________________ Date: ___________

PDS 1.0: ____________________________ Date: ___________

DISTRIBUTION STATEMENT D - Distribution authorized to U.S. Government Agencies and their U.S. DoD Contractors Only (Administrative or Operational Use) (19 SEP 2018). Other requests for this document shall be referred to the Commanding Officer, Naval Air Warfare Center Training Systems Division (NAWCTSD), 12211 Science Drive, Orlando, FL 32826.

DESTRUCTION NOTICE - For unclassified, limited distribution documents, destroy by a method that prevents disclosure of contents or reconstruction of the document.

THIS PAGE INTENTIONALLY LEFT BLANK

RECORD OF CHANGES

Table of Contents

SOW 170020

28 OCTOBER 2019

SOW 170020

28 OCTOBER 2019

For Official Use Only – Distribution Statement D ii iii

STATEMENT OF WORK

IN SUPPORT OF

NAVSEA PMS 339, SURFACE TRAINING SYSTEMS

1.0 SCOPE

This Statement of Work (SOW) defines the basic requirements to be performed under the Surface Program Directorate (PMS 339) Indefinite Delivery/Indefinite Quantity (ID/IQ) Single Award Contract (SAC). The basic requirements to be performed under this ID/IQ contract are categorized under four functional task areas generally defined in paragraphs 1.2.1-1.2.4. The task areas are further defined in section 3.2. An acronym list and associated SOW terms and definitions are provided in Appendix A and B respectively. Specific requirement will be defined in the SOW associated to each specific Delivery Order (DO).

Background Naval Sea Systems Command (NAVSEA) Surface Training Systems Program Manager PMS 339, as part of the Surface Training Advanced Virtual Environment (STAVE) Program umbrella, has tasked NAWCTSD to establish a Surface Training Systems ID/IQ contract designed to support training requirement development, and create and modernize surface mission area curricula delivered as Instructor Led Training (ILT) and/or Interactive Multimedia Instruction (IMI) for:

a. Combat Systems

b. Hull, Mechanical & Electrical (HM&E)

c. Firefighting and Damage Control (DC)

d. Deck, Navigation, Seamanship & Shiphandling

e. Amphibious Warfare training Delivery Orders - Method of tasking Government requirements issued under the basic ID/IQ contract will be met through individual DOs. A DO SOW will provide product descriptions, detailed requirements, and the delivery instructions. Individual DOs will be issued based on the SOW as described below. The Government will also provide appropriate Contract Data Requirements List (CDRL) items (DD Forms 1423) and other required DO documentation to the contractor.

Task Area 1 – Training Requirements Analysis and Design The goal of the Training Requirements Analysis task area is to acquire the capability to efficiently plan, analyze, and design training content. Products developed during the analysis phases will provide defendable content development and revision decisions for Fleet Training requirements. Each analysis project will be defined in the individual DO SOW.

The analysis model options under this task area are as follows:

a. The OPNAV (OPNAVINST 1500.76C; series) approach is required to support acquisition programs to identify a life-cycle support and initial start-up cost.

b. The Naval Education and Training Command (NETC) approach (NAVEDTRA 136,137,138; series) is more focused on identifying training gaps and media requirements.

Task Area 2 – Curriculum Development Requirements under this area will include curriculum development of training materials based on approved curriculum analysis efforts; including analysis products derived from OPNAV or NETC approved curriculum analysis models. Specific training products will be specified in individual DOs and will include one or more of the following training content delivery types: Instructor-led Training (ILT), ILT with embedded Computer Assisted Instruction (CAI), Interactive Multimedia Instruction (IMI) or a combination of ILT and IMI.

Note: FLASH Components (e,g, .SWF, .FLA, .FLV, etc.) shall not be used for content development IAW NETCINST 1500.22.

Task Area 3 – Curriculum Maintenance Requirements under this area will include maintenance of training materials due to surveillance actions and/or internal and external triggers, to include Technical Training Audit Program (TTAP) to revise, update, or develop curriculum as new. Training products will be specified in individual DOs and will include one or more of the following training content delivery types: ILT, ILT with CAI, IMI, or a combination of ILT and IMI. The Contractor shall deliver training products in Content Planning Module/ Learning Object Module (CPM/LOM). If legacy courseware includes Flash files, the Contractor shall replace Flash files with HTML 5 or Adobe Animate, as required by the DO. Contractor developed training products shall not contain Flash, *.fla, and *.flv files, but source code for Contractor developed training products can contain *.fla and *.flv files.

Task Area 4 – Legacy Curriculum Format Conversion Requirements under this area will include migration and repurposing of Legacy AIM I/AIM II curricula and available AIM Artifacts (to include AIM Export Files) into NAVEDTRA 136-137 (series) compliant form, or the most current Navy Enterprise content development environment format.

Types of Training Products The products and services to be performed under this contract will support a wide range of training requirements to include management and course materials. Management materials define training requirements and provide an overall plan for the accomplishment of these requirements. Course materials include all materials required for the presentation of information and the development of skills. Specific products will be defined in the DO SOW.

Approval Authority Overall coordination for this project is the responsibility of Naval Air Warfare Center, Training Systems Division (NAWCTSD). Stakeholders will be an integral part of the review, acceptance, and rejection process to ensure quality proficiency based training materials are produced, delivered, and installed in accordance with (IAW) defined requirements.

a. The Technical Point of Contact (TPOC) is the technical lead supporting the Procuring Contracting Officer (PCO) and the Program Manager (PM). Designated Government Subject Matter Experts (SMEs) will assist the TPOC with the review and administration of this contract. Recommendations for final acceptance or rejection of all technical deliverables and tasks performed by the contractor are the responsibility of the TPOC.

b. The PM will interface with the team to cooperatively make all cost, schedule, performance, and risk decisions.

c. The PCO is the administrative point of contact at NAWCTSD for all official correspondence and information concerning this contract. The PCO is the only person authorized to approve changes in any of the requirements of this contract. Final acceptability or unacceptability of all deliverables and tasks performed by the contractor is the responsibility of the PCO.

Government Review and Acceptance Process Government review and acceptance procedures for products will be as described herein. The formal review and acceptance process (outlined below) will be finalized during the Post Award Conference (PAC). The Government will develop the workflow process to define the levels of reviewers and their roles and responsibilities.

a. The PCO will inform the contractor of the disposition of the acceptable and unacceptable products via the transmission of the final executed Data Item Transmittal/Acceptance/Rejection Sheets (DITS). DITS are reviewed and accepted or rejected by the Government for each CDRL item (e.g., Integrated Management Plan (IMP), Job Task Analysis (JTA), Script/Storyboards (SSB), Implementation Plan,).

Government Approved Applications and Management Tools The contractor shall only procure and use applications and tools that are Department of the Navy (DON) Application and Database Management System (DADMS) approved IAW SECNAVINST 5000.36A.

Government Furnished Information (GFI) The Government will provide the contractor access to the GFI necessary for task completion. The following is a list of the type of GFI that may be provided depending on the specific of effort.

Existing Legacy Content When required, the Government will provide the contractor access to the following:

a. Electronic versions of, or links to, all reference material and web sites.

b. Existing ILT and/or IMI lessons that are designated for refresh of existing course curriculum.

c. Ancillary materials related to legacy ILT and/or IMI lessons that are designated for update or revision of existing course curriculum. Document examples may include but are not limited to: Instructor Guides, Student Guides, Lab sheets, and Homework sheets.

Existing Integrated Learning Environment (ILE) Content When required, the Government will provide the contractor with access to applicable related information and materials contained within the ILE.

Existing Front-End Analysis (FEA) Products/Reports When required the Government will provide:

a. Existing analysis products may include Instructional Media Design Package (IMDP), Instructional Performance Requirements Document (IPRD), Training Situation Analysis (TSA), and Training Situation Requirements Analysis (TSRA).

b. Existing AIM I, AIM II, Learning Object Model (LOM), or Content Planning Module (CPM) Artifacts (e.g., Training Course Control Documents (TCCDs), Course Training Task Lists (CTTLs)).

Government Furnished Software (GFS) and Tools For a given DO, all available applicable GFS designs and documentation, not bound by specific vendor proprietary restrictions, will be made available to the contractor for the execution of this contract. Additionally, any GFS or designs provided to the contractor for this effort are for the strict performance of this effort and are bound by all third party and re-sale restrictions covered under Defense Federal Acquisition Regulation Supplement (DFARS) 252.227-7018. The Government will provide the contractor with access to the following software tools as needed for the performance of those tasks required by this SOW. Those tools may include:

a. For courseware analysis, design, development and maintenance tasks: CPM/ LOM.

b. Corporate enterprise Training Activity Resource Systems (CeTARS) – The Navy's Corporate Training Database and the sole source of official Navy Training statistics for all formal training. CeTARS is used to support DoDI 1322.26 to aid in verifying that proposed new content does not already exist.

c. For applicable IMI Courseware development/maintenance tasks: Government Content Acceptance Testing (GCAT) server access shall be provided.

Government Furnished Equipment (GFE) and Facilities The Government will not furnish any equipment, facilities, hardware, personnel, or materials for contractor use during this effort other than the GFS tools listed above. The Contractor shall provide the necessary hardware, software, personnel, materials, and facilities to perform the tasks specified by this SOW not otherwise furnished by the Government.

APPLICABLE DOCUMENTS

The following documents form a part of this SOW to the extent specified herein. In the event of a conflict between the SOW and the references cited herein, the SOW takes precedence. Nothing in this SOW, however, supersedes applicable laws and regulations, unless a specific exemption has been obtained. The most current Guidance, Policy, Standards, Specifications, Instructions, and Style Guides shall apply. Additional documents may be defined in each individual DO.

Department of Defense (DOD) Specification and Handbooks

DODM 5200.01, Volume 2

DoD Information Security Program: Marking of Information Incorporating Change 3, Effective May 14, 2019

Incorporating Change 2, July 28, 2017

· Copies of DoD Directives and Instructions can be obtained from the DoD Issuances Website (http://www.dtic.mil/whs/directives/).

· DoD Implementation Plan for ADL can be obtained from http://prhome.defense.gov/Portals/52/Documents/RFM/Readiness/docs/adl_implementplan.pdf.

· Copies of the DoD Specifications and Handbooks can be obtained online from the DoD Single Stock Point or from the Acquisition Streamlining and Standardization Information System (ASSIST) website (http://quicksearch.dla.mil/.)

AIM CPM/LOM Manuals

Copies of the AIM documentation can be obtained from http://aim.carleycorp.com/

Department of the Navy (DON) Instructions, Manuals, and Guidance

E-Learning Delivery, 27 September 2018

Copies of the NMCI Core Build Standard can be obtained from https://www.homeport.navy.mil/home/

· Copies of the CON DIACAP Handbook can be obtained from http://www.doncio.navy.mil/PolicyView.aspx?ID=73

· Copies of the DoN documents can be obtained online from the Navy’s Integrate Learning Environment website (http://www.netc.navy.mil/ile/).

· Copies of the SECNAV documents can be obtained from http://doni.daps.dla.mil/allinstructions.aspx.

Industry Standards

27 November 2017 https://www.imsglobal.org/question/index.html

· Copies of the industry standard documents can be found by visiting the web addresses indicated.

· Copies of the following Industry Standards can be obtained from the American National Standards Institute (ANSI)/American Society for Quality Control (ASQC) (http://www.ansi.org).

Other Documents

· Copies of the CJCSI document can be obtained from https://standards.globalspec.com/std/1668631/CJCSI%206510.01F.

· Copies of the Presidential document can be obtained from the Federal Register at http://edocket.access.gpo.gov/2008/pdf/08-1348.pdf

· Copies of the SCORM documents can be obtained from http://www.adlnet.org/scorm/scorm-2004-4th.html.

· Copies of the Joint ADL Co-Lab document can be obtained from http://www.adlnet.org/.

REQUIREMENTS

The contractor shall organize, coordinate, and control all necessary internal program activities to ensure compliance with contract requirements and timely delivery of products specified herein. The contractor shall provide the necessary personnel, supervision, management, materials, services, testing, technical, logistics, and clerical support necessary to perform the tasks specified/described herein.

General Requirements All development shall be conducted in contractor spaces. The requirements defined herein form the basis for all work to be performed for the Government during the contract period. The Contractor shall follow the most current development processes and courseware specifications at the time of DO award and shall display and function effectively within the constraints of the Navy Marine Corp Internet (NMCI). The contractor shall develop all courseware using Commercial Item software, avoiding any proprietary systems or software. The courseware shall be developed to play on any computer that uses Microsoft Windows. The courseware shall be designed and developed in conformance with SCORM 2004 4th Edition, Version 1.1 (or most current version available at DO award). The Contractor shall develop all courseware using NETC DADMS approved software.

Contract Data Requirements List (CDRL) The contractor shall produce, develop, manage, and deliver acceptable contractually required data identified in this SOW. The contractor shall implement data management procedures and policies to provide control and configuration management of all contractually-required data. All CDRL items shall be submitted with DIT sheets (NAWCTSD form 4330/60). The following requirements shall apply:

a. The contractor shall ensure that all data items to be delivered to the Government meet the quantity and quality requirements of the CDRL.

b. The contractor shall establish data management procedures and policies to provide control and configuration management of all contractually required data. To ensure subcontractors meet the contract data requirements set forth in the CDRL, the prime contractor shall maintain control of all data developed by subcontractors.

c. The contractor shall establish and maintain data libraries consisting of technical manuals, parent system technical description, and software documentation for the data developed for academic training systems and other data pertaining to training systems.

Online Management System (OMS) The contractor shall establish and implement an OMS. The OMS shall be available throughout the duration of this contract and shall contain both an embedded hierarchical review system and a CDRL status tracking system. The system shall, at a minimum, 1) allow government reviewers to input comments specific to developed courseware, 2) provide data storage and management of information collected during design, development, implementation, evaluation, testing, and deployment of all materials during the period of performance (POP), and 3) provide status of the contract effort.

Program Management The contractor shall organize, coordinate, and control the program activities to ensure compliance with the contract requirements and the timely delivery of the required products. The contractor shall provide the necessary program management functions to include planning, controlling, leading, managing, resourcing, scheduling, and clerical support for the efforts described in this SOW.

Integrated Master Schedule (IMS) The contractor shall develop an Integrated Master Schedule (IMS) providing a milestone schedule and outlining the key activities and accomplishments for each DO under this contract. The contractor shall prepare the IMS IAW CDRL B005 Integrated Master Schedule.

Program Progress, Tracking, and Reporting The contractor shall track, measure, monitor, assess, summarize, and report the work progress, schedule performance information, and costs incurred (if applicable) under the contract to the Government. The contractor shall prepare the Contractor’s Progress, Status, and Management Report IAW CDRL B004.

Integrated Product Teams (IPTs) The Government will define, document, implement, and maintain an IPT structure for the duration of the ID/IQ contract. IPT membership may consist of multi-functional stakeholders working together with a product-oriented focus. The IPT shall identify and resolve potential problem areas related to task analysis, media selection, learning objectives (LOs), instructional strategies, assessment strategies, and the design, development, implementation, and evaluation of all instructional curriculum and courseware including adjunctive materials and supporting documents. The IPT will consist of Government and contractor personnel and scheduled meetings will be conducted via Video Tele-conferencing resources.

Subcontractor Management and Reporting The contractor shall manage all subcontracts. The contractor shall ensure the timely award of subcontracts, the integration of the subcontractor's plans into appropriate schedules, and the monitoring of the subcontractor's staffing plans, to include the execution of those staffing plans to the required levels with the necessary skills to perform the required tasks as defined in this SOW. The contractor shall ensure that the subcontractor’s efforts, to include technical, quality, configuration management, and risk processes are accomplished per contract requirements. The contractor shall integrate the subcontractor’s IMSs in the contractor’s IMS.

Travel As required in an individual DO, the contractor shall perform travel when required to meet the contract performance requirements. Potential travel sites include, but are not limited to: San Diego, CA; Orlando, FL; Mayport, FL; Norfolk, VA; Newport, Rhode Island (RI); Great Lakes, IL; Yokosuka, Japan; Fort Leonard Wood, MO; Bangor, WA; and Coronado, CA.

Other Direct Costs (ODCs) The contractor may be required in performance of individual DOs to purchase materials, equipment or services as ODCs.

Conferences, Meetings, and Reviews The contractor shall conduct, attend, and participate in conferences (e.g., PAC), meetings (e.g., Content Design Meeting [CDM]), reviews (e.g., In-Progress Reviews [IPRs] and Technical Reviews), and scheduled trips (e.g., Data-Gathering and Government Acceptance Testing (GAT)/Final Inspection Trips) at either Government or contractor facilities. The specific locations and duration of the conferences, meetings, and reviews shall be as specified in the DOs. Dates shall be by mutual agreement. Conferences, meetings, and reviews shall be co-chaired by a Government and a contractor representative. Subcontractors shall be required to attend conferences, meetings, and reviews when required to address key elements of the program. The contractor shall make available facilities for Government only meetings during all conferences, meetings, and reviews. The contractor shall prepare presentation, drawings, and other data, as required, to aid in the conduct of the conferences, meetings, and reviews. The contractor shall be prepared to explain the reasoning, assumption, and methodologies in arriving at particular conclusions, recommendations, or alternatives in the accomplishment of the tasks required by the contract. The contractor shall prepare the Conference Agenda and Conference Minutes for each conference, meeting, review, and scheduled trip IAW CDRLs B002 Conference Agenda and B003 Conference Minutes. Requested changes to the scheduled meeting shall be submitted via e-mail to and approved by the Government PM. Except where noted herein, conferences and reviews shall be considered fulfilled when all of the following items are completed:

a. A proposed conference agenda has been submitted by the contractor and accepted by the Government.

b. A conference, meeting, or review has been conducted, and the agenda items have been presented to the Government.

c. All action items requiring contractor response have been resolved.

d. Proposed conference minutes has been submitted by the contractor and accepted by the Government.

Post Award Conference The purpose of the conference shall be to introduce the leads, communicate the roles and responsibilities of all team members, establish the framework of the contractor and Government interaction during the performance period of the contract, further elaborate the Government’s vision for the training solution and the contractor’s plans and approaches for its development, present the planned production and review approaches, clarify the design approach, address questions regarding the Style Guides and templates, propose additional presentation standards clarifications, provide representative samples, assessments, games, scenarios, finalize the screen interfaces, standards, and conventions based on the Government inputs, discuss the operating procedures, methodologies, and the planned schedule (milestones and deliverables), review the IMS, and clarify intent and receipt of GFI. Primary attendees shall be contractor and Government working level personnel responsible for the preparation, delivery, review, and acceptance of the end item technical documentation and training deliverables. The PAC shall be scheduled within 30 days after contract award. The PAC shall be conducted at Surface Training Systems (PMS-339), 1333 Isaac Ave S.E. Humphreys Building, Washing Navy Yard, D.C. 20376-0001.

Content Design Meeting (CDM) The contractor shall participate in CDMs for the efforts required in the individual DO. The number of CDMs will depend upon the scope of the DO effort. The CDMs shall be held at Government or contractor facilities; however, Teleconferences, Video Teleconferences (VTC), or Defense Collaboration Services (DCS) shall be used where suitable for time efficiency and cost saving. The purpose of the CDMs shall be to finalize design and technical requirements, discuss content and associated instructional strategies, define Performance Tracking Control Features, communicate roles and responsibilities of team members, present the plan for management, development, production, implementation, evaluation, testing, and deployment of the instructional courseware, and fine-tune the technical approach for the effort. The contractor shall communicate this information in the final submittal of the IMP and IMS. Based on decisions and discussions from this meeting, the contractor shall incorporate revisions to the IMS. When all meeting minutes and updates are accepted by the Government, instructional design conventions shall be considered "frozen" and content production can be authorized.

In-Process-Reviews (IPRs) IPRs will be held as needed, at a date and single location specified by the Government. The Government reserves the right to cancel or reschedule any IPR. The contractor’s progress, management, technical support, integrated logistics support, administrative, assurance of compliance with contract requirements, program status, problem identification and resolutions shall be agenda items. Scheduled versus actual performance shall be addressed. The contractor shall prepare presentation materials providing an overview of all agenda items. IPRs will not be used to review deliverables. The duration of each IPR will be determined by the Government depending on the issues to be covered. Only the PCO has the authority to modify the contract with any changes resulting from an IPR.

Additional Meetings The contractor shall participate in any additional meetings that may be required for the performance of this contract. The specific location, date and duration of the conference or meeting shall be determined by mutual agreement. Teleconferences, Video Teleconferences (VTC), or Defense Collaboration Services (DCS) shall be used where suitable for time efficiency and cost saving.

Risk Management The contractor shall conduct risk management to systematically control the uncertainty in the project’s ability to meet cost, schedule, and performance requirements. The contractor shall provide the Government visibility into the contractor’s tools, assessment, mitigation, and control techniques. The, the contractor shall define, document, manage, and apply a risk management process. The contractor shall report risk information, data, and analysis to the PM by using a Contractor’s Progress, Status, and Management Report (CPSMR). IAW CDRL B004, Monthly Progress Reports.

Configuration Management (CM) The contractor shall define, document, manage, and apply a CM process. The contractor shall place Government Furnished Software (GFS) and Commercial Item software, and each item’s associated documentation under CM upon receipt. The contractor shall place Commercial Item software items under CM as “disk image” files of the physical media.

Security This program will consist of both classified and unclassified work. Tailored program security requirements will be specified in an individual DO. When required, the Government will issue a DD Form 254 (DoD Contract Security Classification Specification) for the overall program. The contractor shall:

a. Apply the program security requirements listed in this section and supporting sub-sections and in the DD Form 254 to the contractor and subcontractors throughout the life of the program.

b. Comply with applicable on-site security regulations related to Government installation and facility access.

c. Prepare the Operations Security (OPSEC) Plan IAW CDRL B001.

The contractor shall comply with applicable on-site security regulations related to government installation and facility access.

Classified Processing and Access to Classified Systems The contractor shall safeguard classified information and meet the security requirements identified in the DD Form 254. The contractor shall enforce these safeguards throughout the life of the contract including the transport and delivery phases.

Operations Security (OPSEC) The contractor shall develop, implement, and maintain an OPSEC program to protect controlled unclassified and classified activities, information, equipment, and material used or developed by the contractor and any subcontractor during performance of the contract. Guidelines for applying the Risk Management Framework to federal information systems to include conducting the activities of security categorization, security control selection and implementation, security control assessment, information system authorization, and security control monitoring are provided in NIST SP 800-37. This program may include Cybersecurity and Communications Security (COMSEC). The OPSEC program shall be in accordance with National Security Decision Directive (NSDD) 298. If the contractor does not have an established OPSEC Plan that addresses the protection of classified information, critical information, sensitive, proprietary, or controlled unclassified information, the Government will provide a template for the Contractor’s internal development of an OPSEC Plan. Additional OPSEC program planning guidance can be found in DI-MGMT-80934C, OPERATIONS SECURITY (OPSEC) PLAN and NAVAIR OPERATIONS SECURITY (OPSEC) REQUIREMENTS (attachment). The OPSEC program, at a minimum, shall include:

a. Assignment of responsibility for OPSEC direction and implementation

b. Issuance of procedures and planning guidance for the use of OPSEC techniques to identify vulnerabilities and apply applicable countermeasures

c. Establishment of OPSEC education and awareness training to include Basic OPSEC training, produced by the Interagency OPSEC Support Staff (IOSS), which can be found at https://www.iad.gov/ioss/department/opsec-fundamentals-course-opse1300-opse1301-opse1300e-10045.cfm (OPSE1301 OPSEC Fundamentals)

d. Provisions for management, annual review, and evaluation of OPSEC programs

e. Flow down of OPSEC requirements to subcontractors when applicable

The contractor shall prepare the OPSEC Plan IAW CDRL B001 Operations Security (OPSEC) Plan.

Unclassified Contractor-Owned Network Security - Safeguarding of Unclassified Controlled Technical Information The safeguarding of Controlled Unclassified Technical Information applies to prime contractors and their subcontractors (if applicable) for information resident on or transiting through contractor unclassified information systems. The contractor shall provide security to safeguard unclassified controlled technical information on their unclassified information systems from unauthorized access and disclosure. The contractor shall take means (defense-in-depth measures) necessary to protect the confidentiality, integrity, and availability of Government controlled unclassified information.

(1) The contractor shall manage and maintain contractor-owned unclassified IT network assets used to process U.S. Government controlled unclassified information (sensitive information) IAW DFAR 252.204-7012,

a. The security requirements in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, “Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations,” http://dx.doi.org/10.6028/NIST.SP.800-171 that is in effect at the time the solicitation is issued or as authorized by the Contracting Officer, as soon as practical. The Contractor shall notify the DoD CIO, via email at osd.dibcsia@mail.mil, within 30 days of contract award, of any security requirements specified by NIST SP 800-171 not implemented at the time of contract award; or

b. Alternative but equally effective security measures used to compensate for the inability to satisfy a particular requirement and achieve equivalent protection accepted in writing by an authorized representative of the DoD CIO; and

(2) Apply other information systems security measures when the Contractor reasonably determines that information systems security measures, in addition to those identified in paragraph (b)(1) of DFAR 252.204-7012, may be required to provide adequate security in a dynamic environment based on an assessed risk or vulnerability Cyber Incident and Compromise Reporting The contractor shall report to DoD certain cyber incidents that affect unclassified controlled technical information resident on or transiting contractor unclassified information systems set forth IAW DFAR 252.204-7012. The contractor shall also provide the report to the NAWCTSD Contracting Officer, NAWCTSD Security Manager, and the NAWCTSD Information Systems Security Manager (ISSM).

Access to DoD Installations, Government Information, and Information Technology (IT) Systems - Personnel Security Background Checks and DBIDS

a. The Common Access Card (CAC) shall be the principal identity credential for supporting interoperable access to DoD installations and access to U.S. Government information systems IAW FAR 52.204-9. The Defense Biometric Identification System (DBIDS) shall be used for contractors and vendors who do not have a CAC, but only requires access to a base/installation Navy command. The Contractor shall first coordinate with the appropriate NAWCTSD /Technical Point of Contact or government sponsor to request an application to be processed through the NAWCTSD Security Office Trusted Agents for issuance of the CAC or via the Trusted Associate Sponsorship System. The base Visitor Control Center representative will process request for installation access using the DBIDS. More information for obtaining the CAC can be found at http://www.cac.mil/common-access-card/getting-your-cac/for-contractors/ and for DBIDS at https://www.cnic.navy.mil/om/dbids.html

b. Contractor personnel whom do not have a security clearance, but require a CAC in performance of their sensitive duties (including access to controlled unclassified information, but not access classified information), shall coordinate with the NAWCTSD Security Office to complete a National Agency Check with Local Agency Checks including Credit Check (NACLC/TIER- 3) background investigation, which includes submission of fingerprints and the Standard Form SF-86 (Questionnaire for National Security Positions). The contractor shall submit the Standard Form 86 to the NAWCTSD Security Office for processing. There shall be no additional NACLC/TIER-3 submissions for contractors holding a valid national security clearance. The Government may issue the credential upon favorable return of the Federal Bureau of Investigations (FBI) fingerprint check, pending final favorable completion of the NACLC/TIER-3.

c. Access to restricted areas, controlled unclassified information or Government Information Technology by contractor personnel shall be limited to those individuals who have been determined trustworthy as a result of the favorable completion of a NACLC/TIER-3 or who are under the escort of appropriately cleared personnel. Where escorting such persons is not feasible, a NACLC/TIER 3 shall be conducted and favorably reviewed by the appropriate DoD component, agency, or activity prior to permitting such access.

d. The contractor shall comply with the Cybersecurity and personnel security requirements for accessing U.S. Government IT systems specified in the contract. The contractor shall review and become familiar with the credentialing standards presented in OPM Memorandum for Issuing Personal Identity Verification cards to use as an aid in their employee selection process. The NAWCTSD Security Office will apply the credentialing standards and execute the credentialing process for individual contractors.

Personnel Security – Background Checks Contractor personnel shall undergo the company internal vetting process prior to gaining access to U.S. Government controlled unclassified information. To comply with immigration law, the contractor shall use the Employment Eligibility Verification Program (E-Verify) IAW FAR 52.222-54.

International Traffic and Arms Regulation The contractor shall ensure that foreign persons, as defined under section 120.16 of the International Traffic and Arms Regulation (ITAR) (22 CFR, Parts 120 – 130), are not given access to U.S. Government controlled unclassified information, sensitive information, defense articles, defense services, or technical data, as defined in the ITAR, Part 120, without proper issuance of an export license from the U.S. Government authority.

Personnel Security – Reporting of Adverse or Derogatory Information related to Contractors The Contractor shall report to the NAWCTSD Security Office adverse or derogatory information pertaining to on-site CSS personnel (when applicable) or contractor personnel in direct support of this contract. Information reported to the Government Contracting Agency shall be integrated and reported in Contractor Performance Assessment Reporting System (CPARS) on contractor performance of PERsonnel SECurity (PERSEC) related aspects of contractor performance. Adverse or derogatory information includes, but is not limited to the following:

a. Adverse or derogatory information reporting of contractor personnel. Example: Domestic Violence arrest, or other violent or sexual crime arrest or self-report.

b. When contractor personnel receive a revocation of an Interim or denial for the issuance of a CAC until final adjudication.

c. When a denial or suspension of clearance occurs for a contractor employee.

d. When contractor employee receives a final denial of eligibility for a security clearance.

Government-Issued Personal Identification Credentials The contractor and subcontractor(s) (when applicable) shall account for all forms of U.S Government-provided identification credentials (CAC or U.S. Government-issued identification badges) issued to the contractor (or their employees in connection with performance) under the contract. The contractor shall return such identification credentials to the issuing agency at the earliest of any of the circumstances listed below, unless otherwise determined by the U.S. Government. The contracting officer may delay final payment under the contract if the contractor or subcontractor fails to comply with these requirements. CAC shall be returned:

a. When no longer needed for contract performance.

b. Upon completion of the contractor employee’s employment.

c. Upon contract completion or termination.

Contractor “Out-processing” Policy The contractor and subcontractor(s) (when applicable) shall have in place (established and enforced) an “out-processing” policy for employees that leave the company, including suspension of account access, return of all PCs, laptops, smartphones, and other electronic devices (Government-furnished IT equipment and contractor-issued IT equipment) that contain U.S. Government Controlled Unclassified Information. The contractor shall also ensure that out-processed employees receive debriefings on the need to maintain confidentiality of U.S. Government Controlled Unclassified Information.

Transmission of Controlled Unclassified Information (CUI) via e-mail The Contractor shall use approved encryption to safeguard the electronic transmission of all Controlled Unclassified Information. The Contractor shall ensure that when transmitting CUI over non-secure e-mail (e.g. not connected to the Navy Marine Corps Intranet through Broadband Unclassified Remote Access System / Virtual Private network), those transmissions are encrypted using Department of Defense Public Key Infrastructure (PKI), or an approved DoD External Certificate Authority, in accordance with Public Key Infrastructure & Public Key Enabling, DoDI 8520.02, 24 May 2011.

Transmission of Controlled Unclassified Information (CUI) via S.A.F.E.

Safe Access File Exchange (SAFE). SAFE is designed to provide an alternative way to send encrypted files other than email. Information regarding the use of SAFE can be found at https://safe.apps.mil. The contractor shall ensure the following:

Detailed Requirements The design and development of the courseware and all associated products shall follow the specific technical requirements identified in this section. Performance specifications referenced in MIL-PRF-29612B will be used as guidance to establish training data requirements for individual DOs. For Instructional Systems Development the contractor shall use guidance in MIL HDBK-29612-1A through MIL- HDBK- 29612-5 in conjunction with OPNAV and NETC supplement guidance referenced in Section 2.0 for the performance of DOs issued under this contract. Detailed requirements will be identified in individual DOs that identify specific tasking and deliverables needed to meet the performance requirements of Navy instructional programs.

Task Area 1: Training Requirements Analysis and Design The contractor shall conduct analysis to define the training requirements and translate those requirements into a solid instructional design capable of supporting job performance. The nature and scope of each DO will determine the processes and sub-processes associated with the analysis and design approach and will be specified in the DO.

Types of Training Products Analysis and Design Documents may include some or all of the following documents: Training Situation Document (TSD), Courseware Gap Analysis, Job Task Analysis (JTA), Job, Duty, Task Analysis (JDTA), Instructional Performance Requirements Documents (IPRD), Instructional Media Requirements Documents (IMRD), Instructional Media Design Package (IMDP), Training Program Structure Document (TPSD), Course Conduct Information Package (CCIP), Training Conduct Support Document (TCSD), Training Evaluation Document (TED), Test Package (TP), Instructional Media Package, Training Transition Plan (TTP), Business Case Analysis (BCA), Training Project Plan (TPP), and Evaluation Assessment Plan (EAP).

Training Situation Document (TSD) The contractor shall develop a TSD IAW CDRL F001 Training Situation Document. Requirements will be specified in the individual DO. IAW OPNAVINST 1500.76C, the TSD consists of a Training Situation Analysis (TSA) that is part of a Training Systems Requirements Analysis (TSRA). The TSD will be used to verify the efficiency of a training system to meet existing training needs and to survey training programs and technologies for applicability to new training needs. The contractor shall utilize any recently delivered FEA documents and other GFI as the basis for identifying legacy lessons requiring modifications and any new lessons requiring development. The TSD will be developed and delivered IAW CDRL F001 Training Situation Document.

Business Case Analysis (BCA) The contractor shall develop a BCA. The BCA is the structured methodology to facilitate the decision making process and shall detail the cost and risk associated with each training option identified during the FEA. The BCA provides a structured, consistent methodology that presents all the benefits and costs, both quantitative and qualitative, of each planned action over time. The result of the BCA is used to support the Sponsor decision to proceed with proposed actions. The contractor shall perform the Business Case Analysis IAW CDRL F002 BCA. The Government approved BCA will serve as input to the TPP.

Data-Gathering The contractor shall conduct data-gathering trips when required in the individual DO. The location and number of trips shall be identified in the individual DO. Prior to commencement of a Data-gathering trip, the contractor shall notify the government, via e-mail to the TPOC a minimum of 30 working days prior, the planned dates for the requested data-gathering trip. The dates of any data-gathering trips must be approved by the TPOC.