N62470-17-R-4014_Request_For_Proposal_(RFP).pdf

CODE

(Hour)

PAGE(S)

until 02:00 PM local time 24 May 2018

X

A X B X C

D

EX

X G F 58 - 72

73 - 85 X H 86 - 89 kathleen.delashmitt@navy.mil

RATING PAGE OF PAGES

7. ISSUED BY

(Date)

IMPORTANT - Award will be made on this Form, or on Standard Form 26, or by other authorized official written notice.

Previous Edition is Unusable 33-134 STANDARD FORM 33 (REV. 9-97)

Prescribed by GSA FAR (48 CFR) 53.214(c)

1 89

(If other than Item 7)

15A. NAME 16. NAME AND TITLE OF PERSON AUTHORIZED TO

AND

ADDRESS

SIGN OFFER (Type or print)

OF

OFFEROR

AMENDMENT NO. DATE

15B. TELEPHONE NO (Include area code) 17. SIGNATURE15C. CHECK IF REMITTANCE ADDRESS

IS DIFFERENT FROM ABOVE - ENTER

SUCH ADDRESS IN SCHEDULE.

18. OFFER DATE

1. THIS CONTRACT IS A RATED ORDER

UNDER DPAS (15 CFR 700)

2. CONTRACT NO.

N62470 8. ADDRESS OFFER TO

See Item 7

9. Sealed offers in original and 3 copies for furnishing the supplies or services in the Schedule will be received at the place specified in Item 8, or if handcarried, in the depository located in

CAUTION - LATE Submissions, Modifications, and Withdrawals: See Section L, Provision No. 52.214-7 or 52.215-1. All offers are subject to all terms and

Norfolk, Virginia conditions contained in this solicitation.

10. FOR INFORMATION

CALL:

A. NAME (NO COLLECT CALLS)

KATHLEEN A. DELASHMITT 757-322-4431

11. TABLE OF CONTENTS

SOLICITATION/ CONTRACT FORM

SUPPLIES OR SERVICES AND PRICES/ COSTS

1 - 2

X I CONTRACT CLAUSES

DESCRIPTION/ SPECS./ WORK STATEMENT X

PACKAGING AND MARKING

4 - 13 J LIST OF ATTACHMENTS

INSPECTION AND ACCEPTANCE

DELIVERIES OR PERFORMANCE

14 - 16 17 - 18

X K

REPRESENTATIONS, CERTIFICATIONS AND

OTHER STATEMENTS OF OFFERORS

CONTRACT ADMINISTRATION DATA 19 - 20 X

SPECIAL CONTRACT REQUIREMENTS

OFFER (Must be fully completed by offeror) 21 X M

L INSTRS., CONDS., AND NOTICES TO OFFERORS

EVALUATION FACTORS FOR AWARD

NOTE: Item 12 does not apply if the solicitation includes the provisions at 52.214-16, Minimum Bid Acceptance Period.

is inserted by the offeror) from the date for receipt of offers specified above, to furnish any or all items upon which prices are offered at the price set opposite each item, delivered at the designated point(s), within the time specified in the schedule.

13. DISCOUNT FOR PROMPT PAYMENT

(See Section I, Clause No. 52.232-8)

14. ACKNOWLEDGMENT OF AMENDMENTS

(The offeror acknowledges receipt of amendments

AMENDMENT NO. DATE

to the SOLICITATION for offerors and related documents numbered and dated):

FACILITY

12. In compliance with the above, the undersigned agrees, if this offer is accepted within calendar days (60 calendar days unless a different period

SOLICITATION, OFFER AND AWARD

X

(X) SEC. DESCRIPTION (X) SEC. DESCRIPTION PAGE(S)

PART I - THE SCHEDULE

26. NAME OF CONTRACTING OFFICER (Type or print) 27. UNITED STATES OF AMERICA 28. AWARD DATE

EMAIL:TEL: (Signature of Contracting Officer)

CODE CODE

B. TELEPHONE (Include area code) C. E-MAIL ADDRESS

AWARD (To be completed by Government)

19. ACCEPTED AS TO ITEMS NUMBERED 20. AMOUNT 21. ACCOUNTING AND APPROPRIATION

22. AUTHORITY FOR USING OTHER THAN FULL AND OPEN COMPETITION:

10 U.S.C. 2304(c)( ) 41 U.S.C. 253(c)( ) (4 copies unless otherwise specified)

23. SUBMIT INVOICES TO ADDRESS SHOWN IN ITEM

24. ADMINISTERED BY (If other than Item 7) CODE 25. PAYMENT WILL BE MADE BY CODE

PART IV - REPRESENTATIONS AND INSTRUCTIONS

PART III - LIST OF DOCUMENTS, EXHIBITS AND OTHER ATTACHMENTS

22 - 55

PART II - CONTRACT CLAUSES

COMMANDER NAVFAC ATLANTIC

6506 HAMPTON BLVD

NORFOLK VA 23508-1278

FAX:

TEL:

FAX:

TEL:

NOTE: In sealed bid solicitations "offer" and "offeror" mean "bid" and "bidder".

SOLICITATION

56 - 57

6. REQUISITION/PURCHASE NO.5. DATE ISSUED

18 Apr 2018

4. TYPE OF SOLICITATION

SEALED BID (IFB)

NEGOTIATED (RFP)

[ X ]

3. SOLICITATION NO.

N6247017R4014

Section A - Solicitation/Contract Form

SECTION A

NAVAL FACILITIES ENGINEERING COMMAND (NAVFAC), ATLANTIC

6506 HAMPTON BLVD

NORFOLK, VIRGINIA 23508-1278

SOLICITATION: N62470-17-R-4014: PROFESSIONAL SERVICES FOR MISSION ASSURANCE

ASSESSMENTS OF INSTALLATION/FACILITIES INFRASTRUCTURE AND FACILITY-RELATED

CONTROL SYSTEMS (FRCS) FOR THE DEPARTMENT OF THE NAVY (DON)

NOTICE: PROPOSALS ARE DUE BY 2:00 P.M. (EDT) ON May 24, 2018.

Proposal is to be submitted to office listed below:

Naval Facilities Engineering Command (NAVFAC), Atlantic Attn: Kathleen Delashmitt and Erin Quimby, Code ACQ22 6506 Hampton Blvd, Mail Room Norfolk, Virginia 23508-1278

A.1 CONTRACT TITLE

Professional Services for Mission Assurance Assessments of Installation/Facilities Infrastructure and Facility- Related Control Systems (FRCS) for the Department of the Navy (DON).

A.2 TYPE OF CONTRACT

Single award Firm Fixed Price Indefinite Delivery Indefinite Quantity (IDIQ) contract.

A.3 COMPETITION REQUIREMENTS/SET-ASIDE

This procurement is unrestricted.

A.4 NAICS CODE

The NAICS code assigned to this procurement is 541690, Other Scientific and Technical Consulting Services, having a size standard of $15 Million. Refer to Section K, Representations, Certifications and Other Statements of Offerors.

A.5 REQUEST FOR PROPOSAL (RFP) FILES

It is the sole responsibility of the Offeror to obtain the RFP files, along with any amendments, from either Navy Electronic Commerce Online (NECO) website (www.neco.gov) or Federal Business Opportunities (www.fbo.gov).

Unprotected, editable, and electronic file copies of the RFP documents, including Word, Excel, and/or Adobe files will not be provided. Please plan accordingly.

Section B - Supplies or Services and Prices

SECTION B

B.1 MAXIMUM NOT TO EXCEED (NTE) AND MINIMUM GUARANTEE

The maximum or NTE value of the contract, base period and all option years, is $95,000,000. Orders shall not be made that exceed the maximum NTE value.

The minimum guarantee amount for this contract is $10,000.00. Concurrently with the award of the basic contract, the Government intends to issue a task order to obligate the contract minimum guarantee for this contract in the amount of $10,000.00. Minimum guarantees do not apply to the option periods. The total maximum value of orders placed against the contract, inclusive of any options exercised is, $95,000,000.00.

B.2 CONTRACT TERM

This contract contains provisions for one (1) Base Period of up to 12 months with four (4) Option Periods (12 months each), not-to-exceed a total of 60 months. The Government has the option to extend the term of the contract in accordance with Section I, Contract Clauses, FAR 52.217-9 OPTION TO EXTEND THE TERM OF THE

CONTRACT (MAR 2000).

B.3 FULLY BURDENED LABOR PRICE ADJUSTMENTS IN OPTION PERIODS

In the event the Government elects to exercise an option period, the contract price or labor rate proposed and accepted at time of award will be the contract price. No price adjustments will be made.

ITEM NO SUPPLIES/SERVICES MAX

QUANTITY

UNIT UNIT PRICE MAX AMOUNT

0001 95,000,000 Each Mission Assurance Professional Services

FFP

The Contractor shall provide professional services to perform Mission Assurance Assessments of both Navy and USMC Installations/facilities, including Facility- Related Control Systems (FRCS) as stated in Section C.

FOB: Destination

MAX

NET AMT

Section C - Descriptions and Specifications

SECTION C

1. Introduction

This effort is to obtain a Contractor to provide professional services related to supporting the Department of the Navy (DON) Assessment Programs. Work will be performed within DON’s Area of Responsibility (AOR) with a concentration of work within the Continental United States, the Pacific, Far East, Europe, Africa, and South Western Asia. The Contractor will evaluate installations and facilities, including the existing utility systems and Facility- Related Control Systems (FRCS). The Contractor will access risk, develop risk mitigation plans and reports, and perform follow-up reviews, training, or documentation efforts in support of the DON.

1.1. Mission

The Navy and Marine Corps Mission Assurance Assessment (MAA) Program requires highly specialized technical, analytical, and investigative support services to develop and conduct comprehensive assessments of an Installation and/or Facility utility infrastructure and operational utility technology, which includes FRCS as it relates to the warfighter’s risk.

These assessments create visibility for Commanders at all levels and provide the ability to understand where there are risks to a warfighter’s missions and the supporting mission-critical facility/infrastructure, utility system, and

FRCS.

The MAA implements a comprehensive all-threats/all-hazards approach to managing risk to DON missions to more effectively protect the forces in fiscally austere times through efficient resource allocation and prioritization of investments. Procuring, managing, and securing facility systems and FRCS, supporting energy/utility FRCS and communications, and water resources is a primary function of DON installations/facilities in providing the operational support necessary to ensure mission readiness.

1.2. Background

The Navy (OPNAV N46) and the United States Marine Corps (USMC) requires the capability to conduct MAAs (or other similar assessments) of Installations, Facilities, utility systems, and FRCS. The Contractor will evaluate the existing infrastructure (facilities, airfields, ports/piers, utility systems, and FRCS). This contract will primarily be used to meet the intent of Department of Defense Directive (DoDD) 3020.40, Mission Assurance [http://www.dtic.mil/whs/directives].

Both the Navy and the Marine Corps operate in a hostile and uncertain environment shaped by a complex array of manmade and naturally occurring threats and hazards. Among them, our forces face a growing number of potential adversaries with the ability to asymmetrically cripple vital force projection, warfighting, and sustainment capabilities by targeting critical military and civilian resources that support global operations. Additional challenges include catastrophic natural disasters and technological failures capable of producing high-impact second and third order effects that can disrupt its missions. The DON assessment process is both a process and an integrative framework that analyzes current conditions and requirements to ensure the protection, continued function, and resilience of utility systems and FRCS capabilities and assets (including personnel, equipment, facilities, networks, operational technologies, infrastructure, and supply chains) critical to the performance of DoD Mission Essential Functions (MEFs) in any operating environment or condition.

The Risk Assessment process involves the collection and evaluation of data concerning the criticality of assets based on mission impacts, probable threats and hazards, and degrees of vulnerability to determine the overall risk posture of the asset. It is a systematic, rational, and defendable process for identifying, quantifying, and prioritizing risks.

While some risk will always be present, Risk Management seeks to achieve an acceptable level of risk in the execution of critical missions and functions.

The utility and energy infrastructure are necessary to operate Installations and Facilities. In alignment with Title 10 USC, Section 2688, the term “utility system” means generation and supply of electric power; treatment or supply of water; collection or treatment of wastewater; generation or supply of steam, hot water, and chilled water; supply of natural gas; and transmission of telecommunications. This also includes equipment, fixtures, structures, and other improvements utilized in connection with a system; real property, easements, and rights of way associated with utility systems. These infrastructure and utilities represent a significant expense. Constrained budgets will continue to tighten, providing greater incentive to conserve energy and stabilize cost. Prudent energy management practices are critical to ensure that adequate energy is available to support the operating forces at a minimum cost and with the least environmental impact. Conserving energy and investing in energy management measures makes good business sense and will allow future financial resources to be directed towards modernization of installations and investment in improved operational capabilities.

Currently, both the Navy and the USMC rely on commercial electric grids and fuel distribution systems to provide power for the majority of its installation energy requirements. This reality presents a potential risk to our installations’ ability to maintain critical missions, functions, and assets in the event of a catastrophic disaster, whether natural or man-made.

FRCS is a sub-set of Control Systems (CS), and primarily includes those systems that are used to operate and manage utilities or associated with the operation of an Installation (including the associated facilities). Examples of FRCS include, but are not limited to; Energy Management Control Systems (EMCS), Utility Control Systems (UCS) or Supervisory Control and Data Acquisition (SCADA), Building Control Systems (BCS), Fire Suppression Systems, Installation Access Control Systems, and Traffic Camera Systems. A complete list of FRCS types can be found in Section J. Refer to UFC 4-010-06, Cybersecurity of Facility-Related Control Systems.

All work shall be performed in accordance with individual task order performance work statements (PWS).

Resulting deliverables/reports on any task orders associated with this contract may require development on SIPRnet.

Government provided spaces, equipment, and network access will be provided to support activities requiring SIPRnet usage. The individual task order PWS will identify this requirement.

The work to be performed under this contract requires that Contractor personnel possess a DoD SECRET security clearance and a minimum of seven (7) Contractor personnel possessing a DoD TOP SECRET clearance. This work will require access to classified material up to and including the TOP SECRET level. Many of the final Assessment reports may be compiled at a SECRET level, as determined for each task order. If required, a DD254 will be issued to the individual task order. The Contractor shall possess and maintain a TOP SECRET facility clearance from the Defense Security Service (DSS). All permanent storage of classified information will be on cleared government facilities.

Future work may necessitate DoD TOP SECRET SCI clearance(s). Should such clearance(s) be required at a future date, a DD254 will be issued to the individual task order as stated above.

Refer to Section J – References and Technical Documents.

1.3. Scope

The primary tasks anticipated under this contract include support for the DON’s Mission Assurance and Facility- Related Control System Programs. The specific services to be provided include, but are not limited to:

1. Technical, professional, fieldwork, and administrative support required to perform Mission Analysis and site visits.

2. Technical, professional, fieldwork, and administrative support required to perform assessments and reporting in the following fields: Antiterrorism/Risk Management, Physical Security, Law Enforcement, DoD Communications, FRCS, Cybersecurity, Critical Infrastructure Program Analysis, Mission Analysis, Supporting Infrastructure, Critical Asset Security, and Program Support.

3. Technical, professional, fieldwork, and administrative support required to perform Utility Security Assessments (USA), Utilities Strategic Planning, Energy Security Analysis, Privatization Studies, and associated reporting in the following fields for facilities and utility systems: Engineering (Electrical, Mechanical and Civil), Cybersecurity, Telecommunications (both wired and wireless), FRCS, Mission Dependency Index (MDI) database management, and Program Support Analysis.

4. Provide technical, analytical, and investigative work to support Critical Infrastructure Protection (CIP)

a. Conduct detailed analyses to identify Task Critical Assets (TCA) and supporting infrastructure for assigned missions

b. Incorporation of data into Navy and USMC official systems such as Critical Asset

Management System (CAMS), Defense Readiness Reporting System (DRRS), and Mission Assurance Assessment Standalone Tool (MAAST), and MDI application.

c. Enter mission chains and Baseline Elements of Information (BEI) into the Navy or USMC

CAMS.

5. Development and analysis of hazard and threat assessments to missions and Installations.

6. Training to support the management of data entry into CAMS

7. Updating the current DON assessment guides and Corrective Action Plan (CAP) reviews.

8. Coordination of IPTs and Working Groups to address key findings and bring stakeholders together.

9. FRCS Inventory (device level) and Risk Management Framework (RMF) Package development

10. Development and implementation of Action Plans to mitigate identified risks with FRCS

2. General Requirements

This section describes the general requirements for this effort. The following sub-sections provide details of various considerations on this effort.

2.1. Non-Personal Services

The Government shall neither supervise Contractor employees nor control the method by which the Contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual Contractor employees. It shall be the responsibility of the Contractor to manage its employees and to guard against any actions that are of the nature of personal services, or give the perception of personal services. If the Contractor believes that any actions constitute, or are perceived to constitute personal services, it shall be the Contractor's responsibility to notify the Contracting Officer (KO) immediately.

2.2. Business Relations

The Contractor shall successfully integrate and coordinate all activity needed to execute the requirement. The Contractor shall manage the timeliness, completeness, and quality of problem identification. The Contractor shall provide corrective action plans, proposal submittals, timely identification of issues, and effective management of subcontractors. The Contractor shall seek to ensure customer satisfaction and professional and ethical behavior of all Contractor personnel.

2.3. Contract Administration and Management

The following subsections specify requirements for contract, management, and personnel administration.

2.3.1. Contract Management

The Contractor shall establish clear organizational lines of authority and responsibility to ensure effective management of the resources assigned to the requirement. The Contractor must maintain continuity between individual task orders occurring at various locations and the Contractor's corporate offices.

2.3.2. Contract Administration

The Contractor shall establish processes and assign appropriate resources to effectively administer the requirement.

The Contractor shall respond to Government requests for contractual actions in a timely fashion. The Contractor shall have a single point of contact between the Government and Contractor personnel assigned to support task orders. The Contractor shall assign work effort and maintain proper and accurate time keeping records of personnel assigned to work on the requirement.

2.3.3. Certificate of Insurance

Within 15 calendar days after award, the Contractor shall submit a Certificate of Insurance per Section F as evidence of the existence of the following insurance coverage in amounts not less than the amounts specified in accordance with the FAR 52.228-5, INSURANCE – WORK ON A GOVERNMENT INSTALLATION (JAN 1997 ). This insurance must be maintained during the performance period and, if exercised, all option periods.

2.4. Subcontract Management

The Contractor shall be responsible for any subcontract management necessary to integrate work performed on this requirement and shall be responsible and accountable for subcontractor performance on this requirement. The prime contractor will manage work distribution to ensure there are no Organizational Conflict of Interest (OCI) considerations. Contractors may add subcontractors to their team after written approval of the Contracting Officer (KO) or Contracting Officer’s Representative (COR). However, subcontractors must possess the same level of expertise.

2.5. Specific Personnel Requirements

The Contractor shall furnish sufficient technical, supervisory, and administrative personnel at all times to ensure timely execution of the work for each project (task order). The Project Manager shall be responsible for maintaining a fully-staffed and equipped work force and for providing liaison between the contract personnel, the Contracting Officer, and the COR. All work shall be accomplished according to schedule and within the budget approved by the KO. It shall be the Project Manager's responsibility to ensure adequate internal controls and review procedures which shall eliminate conflicts, errors, and omissions, as well as ensuring the technical accuracy and timeliness of all work required under each task order.

Agencies, institutions, corporations, associations, or individuals will be considered qualified when they meet the criteria given below. If, during the performance of this contract, the Contractor must utilize personnel other than those identified in the technical proposal, such substitution shall not be made without written approval of the KO.

For all positions for which qualifications are outlined below, the KO shall have the right to request documentation sufficient to verify compliance with the qualification requirements at any time during the course of the contract.

Program Manager (Key Personnel) – This position shall be held by a principal officer or senior manager of the Contractor with authority to represent the interest of the Contractor in all matters relating to the contract or to specific task orders. The Program Manager shall have a TOP SECRET clearance. An Interim TOP SECRET personnel security clearance is acceptable as long as the clearance investigation is in progress. The Program Manager shall be responsible for the liaison between contract personnel and the contracting officer or COR, and for maintaining a fully-staffed and equipped work force. The Program Manager shall have a minimum of a Bachelor’s degree and shall have at least 10 years of full-time professional experience in management, mission assurance inspections, and/or risk mitigation of military installations/missions, or closely related work, and shall have a minimum of 3 years of experience as a project principal or project director. The Program Manager must be certified as a Project Management Professional (PMP) or Master Project Manager (MPM). The Program Manager must be committed to devoting sufficient time to each task order.

Project Manager (PM) (Key Personnel) – This position shall be held by staff with a minimum of a Bachelor’s degree and shall have at least 10 years of full-time professional experience with at least 2 years of experience in a PM capacity with a focus on mission assurance inspections and/or risk mitigation of military installations/missions, or closely related work. The PM shall have a TOP SECRET clearance. An Interim TOP SECRET personnel security clearance is acceptable as long as the clearance investigation is in progress. PMs coordinate the efforts of the other personnel (including subcontractors) to ensure timeliness, quality deliverables, adherence to project scope, etc.

Additionally, the PM will be the main points of contact for all required results and/or progress on projects. The PM must possess professional experience and rapport with colleagues that will enable them to assemble a credible team of experts to ensure deliverables are completed on time. The prime contractor will ensure a primary PM is assigned to any task orders with responsibility for overseeing and managing all associated deliverables.

Senior Technical Specialist (Mission and Risk, M&R) (Key Personnel) – This position shall be held by a subject matter expert with a Bachelor’s degree and at least 7-10 years of experience in the field. Experience includes risk identification, qualitative, and/or quantitative risk analyses and response planning services for security projects and programs. The Senior Technical Specialist (M&R) applies analytical skills to assist in defining, analyzing, validating and documenting complex operating environments, states of technology and current processes.

Additionally, the Senior Technical Specialist can perform more complex tasks with minimal supervision. The Senior Technical Specialist performs supervisory duties. This position requires a TOP SECRET personnel security clearance.

Technical Specialist (Mission and Risk, M&R) – This position requires at least 5 years of experience in the field.

Experience includes risk identification, qualitative, and/or quantitative risk analyses and response planning services for security projects and programs. The Technical Specialist (M&R) applies analytical skills to assist in defining, analyzing, validating and documenting complex operating environments, states of technology and current processes.

This position requires a TOP SECRET personnel security clearance.

Senior Technical Specialist (Facility-Related Control Systems, FRCS) (Key Personnel) – This position shall be held by a subject matter expert with a Bachelor’s degree and at least 7-10 years of experience in the field. Experience includes the installation, operation, and utilization of enterprise Facility-Related Control Systems (FRCS). The Senior Technical Specialist (FRCS) has experience in addressing cybersecurity concerns of FRCS and with the Risk Management Framework (RMF). The Senior Technical Specialist can perform more complex tasks with minimal supervision. The Senior Technical Specialist performs supervisory duties. It is desired for this position to be a licensed, Professional Engineer (PE) in Control Systems Engineering. This position requires a TOP SECRET personnel security clearance.

Technical Specialist (Facility-Related Control Systems, FRCS) – This position requires at least 5 years of experience in the field. Experience includes the installation, operation, and utilization of enterprise Facility-Related Control Systems (FRCS). The Technical Specialist (FRCS) has experience in addressing cybersecurity concerns of FRCS and with the Risk Management Framework (RMF). This position requires a minimum of a SECRET personnel security clearance.

Senior Technical Specialist (Critical Infrastructure Protection, CIP) (Key Personnel) – This position shall be held by a subject matter expert with a Bachelor’s degree and at least 7-10 years of experience in the field. Experience includes all aspects of critical infrastructure protection programs or projects in the areas of homeland security, domestic preparedness, emergency operations, emergency and crisis management, counter terrorism, physical security and vulnerability assessments. The Senior Technical Specialist (CIP) ensures compliance with government and company security policies and procedures. The Senior Technical Specialist (CIP) directs trains and/or supervises facilities, systems, law enforcement, or security personnel in support of critical infrastructure protection activities. The Senior Technical Specialist can perform more complex tasks with minimal supervision. The Senior Technical Specialist performs supervisory duties. Certification in DoD-related functions is preferred. This position requires a TOP SECRET personnel security clearance.

Technical Specialist (Critical Infrastructure Protection, CIP) – This position requires at least 5 years of experience in the field. Experience includes all aspects of critical infrastructure protection programs or projects in the areas of homeland security, domestic preparedness, emergency operations, emergency and crisis management, counter terrorism, physical security and vulnerability assessments. The Technical Specialist (CIP) ensures compliance with government and company security policies and procedures and is knowledgeable in facilities, systems, law enforcement, or security personnel in support of critical infrastructure protection activities. Certification in DoD-related functions is preferred. This position requires a TOP SECRET personnel security clearance.

Senior Technical Specialist (Cybersecurity) – This position shall be held by a subject matter expert with a Bachelor’s degree in either Computer programming, computer science, information science, or computer engineering and at least 10 years of experience in the field. Experience includes providing independent assessment overview of the implementation of the policy and procedures associated with the enterprise system software, security on operating systems and network devices, and the analysis of security vulnerabilities identifying recommendations for the remedy of the particular environment. The Senior Technical Specialist (Cybersecurity) provides support to one or several areas such as: analysis of mission requirements, secure architecture design, organizational and vulnerability assessments, intelligence and threat analysis; system security/network analysis, firewall implementation/configuration, physical security analysis of facilities, emergency preparedness, security assessment/risk analysis, security design of local area networks and wide area networks, security analysis of network operating systems and applications, continuity of operations, planning, disaster recovery, identity, credential, and access management (ICAM), and computer security policies development and implementation. The Senior Technical Specialist can perform more complex tasks with no supervision required. The Senior Technical Specialist may supervise junior personnel. Certification in CompTIA CSA+ or equivalent is required. This position requires a minimum of a SECRET personnel security clearance.

Technical Specialist (Cybersecurity) – This position requires a Bachelor’s degree in either Computer programming, computer science, information science, or computer engineering and at least 5 years of experience in the field.

Experience includes providing independent assessment overview of the implementation of the policy and procedures associated with the enterprise system software, security on operating systems and network devices, and the analysis of security vulnerabilities identifying recommendations for the remedy of the particular environment. The Technical Specialist (Cybersecurity) provides support to one or several areas such as: analysis of mission requirements, secure architecture design, organizational and vulnerability assessments, intelligence and threat analysis; system security/network analysis, firewall implementation/configuration, physical security analysis of facilities, emergency preparedness, security assessment/risk analysis, security design of local area networks and wide area networks, security analysis of network operating systems and applications, continuity of operations, planning, disaster recovery, identity, credential, and access management (ICAM), and computer security policies development and implementation. Certification in CompTIA Security+ or equivalent to ISO 17024 and approved by DODD 8570.01- M for CE designation is required. Certification in CompTIA CSA+ or equivalent is desired. This position requires a minimum of a SECRET personnel security clearance.

Senior Technical Specialist (Communication) – This position shall be held by a subject matter expert with a Bachelor’s degree in either Business Administration, Project Management, Computer Science, Telecommunications, or a related field and at least 7 years of related experience with Telcom (CBX/PBX) microcode programming experience, or an equivalent combination of education and experience. The Senior Technical Specialist (Communication) provides task unique, functional expertise necessary to interpret requirements, ensure responsiveness, and achieve successful performance. The Senior Technical Specialist (Communication) possesses and demonstrates unique technical knowledge. Areas of expertise may include the following: Infrastructure, utilities, electrical systems, mission assurance/analysis. The Senior Technical Specialist (Communication) performs analysis, evaluation, and implementation tasking. The Senior Technical Specialist can perform more complex tasks with no supervision required. The Senior Technical Specialist may supervise junior personnel. Certification as a Technician (TECH) from Building Industry Consulting Services International (BICSI) or equivalent is required.

This position requires a minimum of a SECRET personnel security clearance.

Technical Specialist (Communication) – This position requires an Associate’s Degree in Business Administration, Project Management, Computer Science, Telecommunications or a related field and at least 2 years of related experience with Telcom (CBX/PBX) microcode programming experience, or an equivalent combination of education and experience. The Technical Specialist (Communication) provides task unique, functional expertise necessary to interpret requirements, ensure responsiveness, and achieve successful performance. The Technical Specialist possesses and demonstrates unique technical knowledge. Areas of expertise may include the following:

Infrastructure, utilities, electrical systems, mission assurance/analysis. The Technical Specialist performs analysis, evaluation, and implementation tasking. Certification as an Installer 1 (INST 1) from Building Industry Consulting Services International (BICSI) or equivalent is required. This position requires a minimum of a SECRET personnel security clearance.

Technical Specialist (Program Analyst) – This position requires a Bachelor’s degree and at least 2-5 years of experience in the field. Experience includes knowledge and experience relevant in management consulting, facilitation, survey, analysis, and related activities. The Program Analyst applies intermediate knowledge of the subject matter to analyze and solve problems in areas including but not limited to finance, accounting, information technology, human resources, contracting and procurement, research and analysis, or other program support fields.

The Program Analyst assists in leading and participates in teams that process business requirements including but not limited to, analysis, evaluation, and implementation of systems or processes. The Program Analyst plans, designs, and conducts studies including risk analyses, contingency planning, and feasibility studies. The Program Analyst creates program work products such as presentations, plans, and spreadsheets. The Program Analyst can perform more complex tasks under supervision. This position requires a minimum of a SECRET personnel security clearance.

Technical Specialist (Emergency Management) – This position requires a Bachelor’s degree and at least 3 years of experience in the field. Experience includes projects/assignments involving emergency management program issues. The Technical Specialist (Emergency Management) assesses, inspects, and evaluates materials/procedures for compliance with established laws, and regulations. The Technical Specialist (Emergency Management) compiles, reconciles, and correlates data from a variety of sources with different reporting requirements and formats.

The Technical Specialist (Emergency Management) collects and analyzes data to produce recommendations regarding efficiency and effectiveness. The Technical Specialist (Emergency Management) provides recommendations and technical guidance to stakeholders on emergency preparedness, continuity, contingency, and security policy issues. Certification as a Certified Emergency Manager (CEM) by IAEM is required. This position requires a minimum of a SECRET personnel security clearance.

Senior Technical Specialist (Air and Port Security Operations, APSO) – This position shall be held by a subject matter expert with at least 7-10 years of experience in the field. Experience includes physical security project planning, design, development, implementation, and monitoring services. The Senior Technical Specialist (APSO) reviews the application of physical security standards to functional control designs and security programs and makes recommendations. The Senior Technical Specialist (APSO) coordinates and cooperates with other agencies, private firms, and individuals on physical security policy, standards, and program execution. The Senior Technical Specialist (APSO) is responsible for developing, coordinating and conducting physical security and crime prevention programs; which may include operations security and industrial security programs, security surveys/inspections, and emergency planning in support of the installation. The Senior Technical Specialist can perform more complex tasks with minimal supervision. This position requires a minimum of a SECRET personnel security clearance.

Senior Engineer (Civil, Mechanical, and Electrical) – This position shall be held by a subject matter expert with a Bachelor’s degree from an ABET accredited curriculum and at least 10 years of experience in facilities and/or utility systems. The Senior Engineer provides task unique, functional expertise necessary to interpret requirements, ensure responsiveness, and achieve successful performance. The Senior Engineer possesses and demonstrates unique technical knowledge. The Senior Engineer leads and may manage project teams for analysis, evaluation, and implementation of tasks. This position requires a licensed, Professional Engineer (PE). The Senior Engineer must be a U.S. citizen and may require a minimum of a SECRET personnel security clearance if used to support Mission Assurance assessments.

Engineer (Civil, Mechanical, and Electrical) – This position requires a Bachelor’s degree from an ABET accredited curriculum and at least 5 years of experience in facilities and/or utility systems. The Engineer provides task unique, functional expertise necessary to interpret requirements, ensure responsiveness, and achieve successful performance.

The Engineer possesses and demonstrates unique technical knowledge. The Engineer works in project teams for analysis, evaluation, and implementation of tasks. Certification as an Engineer-in-Training (EIT) is required, but a Professional Engineering (PE) license is preferred. The Engineer must be a U.S. citizen and may require a minimum of a SECRET personnel security clearance if used to support Mission Assurance assessments.

Senior Planner – This position shall be held by a subject matter expert with a Master's degree in urban or regional planning, environmental planning, urban design, or geography and at least 5 years of experience in the field including, but not limited to, preparation of master plans, supporting maintenance or enhancement of existing installation master plans, development of master plan appendices, and investment plans. Further experience can be substituted for the Master’s degree. This position requires certification by the American Institute of Certified

Planners (AICP), or equivalent. The Senior Planner must be a U.S. citizen and may require a minimum of a SECRET personnel security clearance if used to support Mission Assurance assessments.

Planner – This position requires a Bachelor's degree in urban or regional planning, environmental planning, urban design, or geography and at least 2-3 years of experience in the field including, but not limited to, preparation of master plans, supporting maintenance or enhancement of existing installation master plans, development of master plan appendices, and investment plans. The Planner must be a U.S. citizen and may require a minimum of a SECRET personnel security clearance if used to support Mission Assurance assessments.

Senior GIS Specialist – This position shall be held by a subject matter expert with a Bachelor's or Master’s in geography, computer science, surveying engineering, forestry or earth science and at least 5-6 years of experience in the field including, but not limited to, defining data parameters for specific geospatial projects/assignments, using advanced analytical techniques necessary to solve complex geospatial and GIS issues, and digitizing geographic information by translating raw land-based data into code. The Senior GIS Specialist can research, study, and prepare maps and other spatial data in digital or graphic form. The Senior GIS Specialist can perform more complex tasks with minimal supervision. The Senior GIS Specialist performs supervisory duties. This position must be a Certified GIS Professional (GISP). The Senior GIS Specialist must be a U.S. citizen and may require a minimum of a SECRET personnel security clearance if used to support Mission Assurance assessments.

GIS Specialist – This position requires a Bachelor's in geography, computer science, surveying engineering, forestry or earth science and at least 2-3 years of experience in the field including, but not limited to, defining data parameters for specific geospatial projects/assignments, using advanced analytical techniques necessary to solve complex geospatial and GIS issues, and digitizing geographic information by translating raw land-based data into code. The GIS Specialist can research, study, and prepare maps and other spatial data in digital or graphic form.

The GIS Specialist must be a U.S. citizen and may require a minimum of a SECRET personnel security clearance if used to support Mission Assurance assessments.

Quality Assurance (QA) Specialist – This position shall be held by a professional with at least 2-5 years of experience in providing quality control and assurance for deliverables including, but not limited to, technical reports, condition assessments, cost estimates, master plans, and schematic drawings. This position works under the supervision of a senior QA specialist. A Certified Quality Inspector (CQI) is preferred.

Technical Writer/Editor – This position requires an individual well versed in technical writing and editing skills with at least 3 years of experience as a technical writer/editor. The Technical Writer/Editor prepares documentation for publication (both internal & customer facing use); including process documents, technical articles, guides, reports & some limited graphics. The Technical Writer/Editor can analyze, interpret and simplify technical, operational & readiness documentation currently in use. The Technical Writer/Editor ensures all documentation complies with standard format, quality and accuracy standards. The Technical Writer/Editor manages and regularly communicates on project timelines & expectations across multiple stakeholders. The Technical Writer/Editor assists with content management to ensure content stays relevant.

Administrative Assistant – This position requires an individual with at least 2 years of experience supporting the production and development of deliverables. This position must be filled by someone with word processing, copying, and packaging skills.

2.6. Location and Hours of Work

Accomplishment of subsequent task orders/deliverables may require work at various Government facilities world-wide. Normal workdays are Monday through Friday except US Federal Holidays. Work may include evening and weekend work to accommodate installation schedules or other special requirements.

2.7. Travel

Performance under this contract will require travel by Contractor personnel. The Government will negotiate a firm, fixed price with the Contractor on each individual task order for all allowable, allocable, and reasonable travel costs incurred by the Contractor in performance of the task order in accordance with FAR Subpart 31.2 and the rules and definitions set forth for relocation, temporary duty and local travel in the Joint Travel Regulations (JTR), but shall not to exceed the amounts authorized under the JTR. If travel is required, the Contractor is responsible for coordinating all requirements and arrangements for personnel.

3. Special Requirements

This section describes the special requirements for this effort. The following sub-sections provide details of various considerations on this effort.

3.1. Safety

Contractor Compliance: The Contractor and its subcontractors shall comply with Public Law 91-596 (Occupational Safety and Health Act (OSHA)) and the Environmental, Safety, and Occupational Health (ESOH) (DODD 4715.1E) and pertinent sections of the U.S. Army Corps of Engineers (USACE) Safety and Health Requirements Manual EM 385-1-1. These requirements shall be incorporated into the Contractor’s safety and health program. The Department of Defense (DoD) participates in the OSHA Voluntary Protection Program (VPP). Contractor personnel performing services on a DoD installation shall participate in the local VPP activities where applicable. Information on VPP is available at http://www.osha.gov/dcsp/vpp/index.html. The Contractor shall develop and implement an overarching Accident Prevention Plan (APP). The APP shall follow the format and include all elements addressed in Appendix A of EM 385-1-1. The Contractor shall submit an APP for acceptance per Section F. The Contractor shall not commence work until the APP has been accepted and no activity shall be stated on site until the applicable Activity Hazard Analyses (AHAs) (if applicable and on a per task order basis) have been accepted. Once accepted, the APP and attachments will be enforced as part of the contract.

Mishap Notification and Investigation: The Contractor and its subcontractors (if applicable) shall promptly notify and provide an investigation report following USACE EM 385-1-1 criteria to record pertinent facts regarding mishaps involving Contractor employees, government property damage or injury to Government personnel that occur on Navy property which is associated with contract execution and to cooperate in any resulting DoD safety investigation. The Contractor shall notify (via telephone) the appropriate KO, the COR, and/or other applicable members within four (4) hours of all mishaps or incidents. The Government person notified by the Contractor will in-turn notify the Safety office. Contractor notifications made after duty hours shall be reported to the appropriate installation Command Post. If requested by the appropriate KO, the COR, and/or the appropriate program manager, the Contractor shall immediately secure the mishap scene/damaged property and impound pertinent maintenance and training records until released by the investigating safety office. If the Government also investigates the mishap, the Contractor and the subcontractors shall cooperate fully and assist the Government personnel until the investigation is completed.

3.2. Government Furnished Materials

None. Furnished materials may be provided with individual task orders.

3.3. Quality

This section describes the Quality Control components for this effort. The following sub-sections provide details of various considerations on this effort.

3.3.1. Quality Control

The Contractor shall develop an overarching Contract Quality Control Plan (QCP) and submit it to the COR for review/approval within 15 calendar days from date of contract award. As necessary, Task/Delivery Order QCPs shall be developed to ensure the Contractor maintains an effective quality control program to ensure services are performed in accordance with the IDIQ contract and individual task order PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s QCP is the means by which he assures himself that his work complies with the requirement of the contract.

The finalized QCP will be submitted to the Government within 15 days of the award of this IDIQ. The Contracting Officer may notify the Contractor of required modifications to the plan during the period of performance. The Contractor then shall coordinate suggested modifications and obtain acceptance of the plan by the KO. Any modifications to the program during the period of performance shall be provided to the KO for review no later than 10 working days prior to effective date of the change. The QCP shall be subject to the Governments review and approval. The Government may find the QCP “unacceptable” whenever the Contractor’s procedures do not accomplish quality control objective(s). The Contractor shall revise the QCP within 10 working days from receipt of notice that QCP is found “unacceptable.”

3.3.2. Quality Assurance Surveillance Plan (QASP)

The Government shall monitor the Contractor’s performance on individual task orders under this IDIQ in accordance with the Governments QASP.

4. Deliverables

Refer to Section F for a list of deliverables concerning the IDIQ contract. The Contractor shall also provide deliverables as described in each individual task order. Deliverables shall be specified by the government. The format and delivery schedule for deliverables shall be specified in the individual task orders.

Section E - Inspection and Acceptance

SECTION E

Quality Assurance Surveillance Plan (QASP)

For: NAVFAC Atlantic, Norfolk, VA Contract Number: N62470-17-R-4014 Contract Description: Professional Services for Mission Assurance Assessments of Installation/Facilities Infrastructure and Facility-Related Control Systems (FRCS) for the Department of the Navy (DON) Contractor’s Name:

1. PURPOSE

This Quality Assurance Surveillance Plan is a government-developed document used to determine if the Contractor’s performance meets the performance standards contained in the contract. The QASP establishes procedures on how this assessment/inspection process will be conducted. It provides the detailed process for a continuous oversight process:

• What will be monitored

• How monitoring will take place

• Who will conduct the monitoring

• How monitoring efforts and results will be documented

This QASP does not detail how the Contractor accomplishes the work. Rather, the QASP is created with the premise that the Contractor is responsible for management and quality control…