N66001-17-R-0494.pdf

CODE

(Hour)

PAGE(S)

until 04:00 PM local time 19 Oct 2017

X

A

X B

X C X D

EX

X

G

F 76 - 89

90 - 106

X H 107 - 112 tiffany .c.boatwright@navy .mil

RATING PAGE OF PAGES

7. ISSUED BY

(Date)

IMPORTANT - Award will be made on this Form, or on Standard Form 26, or by other authorized official written notice.

Previous Edition is Unusable 33-134 STANDARD FORM 33 (REV. 9-97)

Prescribed by GSA

FAR (48 CFR) 53.214(c)

1 112

(If other than Item 7) N66001

15A. NAME 16. NAME AND TITLE OF PERSON AUTHORIZED TO

AND

ADDRESS

SIGN OFFER (Type or print)

OF

OFFEROR

AMENDMENT NO. DATE

15B. TELEPHONE NO (Include area code) 17. SIGNATURE15C. CHECK IF REMITTANCE ADDRESS

IS DIFFERENT FROM ABOVE - ENTER

SUCH ADDRESS IN SCHEDULE.

18. OFFER DATE

1. THIS CONTRACT IS A RATED ORDER

UNDER DPAS (15 CFR 700)

2. CONTRACT NO.

N66001 8. ADDRESS OFFER TO

9. Sealed offers in original and 5 copies for furnishing the supplies or services in the Schedule will be received at the place specified in Item 8, or if handcarried, in the depository located in

CAUTION - LATE Submissions, Modifications, and Withdrawals: See Section L, Provision No. 52.214-7 or 52.215-1. All offers are subject to all terms and

Section L conditions contained in this solicitation.

10. FOR INFORMATION

CALL:

A. NAME (NO COLLECT CALLS)

TIFFANY C. BOATWRIGHT 619-553-4454

11. TABLE OF CONTENTS

SOLICITATION/ CONTRACT FORM

SUPPLIES OR SERVICES AND PRICES/ COSTS

2 - 7

X I CONTRACT CLAUSES

DESCRIPTION/ SPECS./ WORK STATEMENT X

PACKAGING AND MARKING

8 - 24

J LIST OF ATTACHMENTS

INSPECTION AND ACCEPTANCE

DELIVERIES OR PERFORMANCE

X K

REPRESENTATIONS, CERTIFICATIONS AND

OTHER STATEMENTS OF OFFERORS

CONTRACT ADMINISTRATION DATA 28 - 33 X

SPECIAL CONTRACT REQUIREMENTS

OFFER (Must be fully completed by offeror) 34 - 45 X M

L INSTRS., CONDS., AND NOTICES TO OFFERORS

EVALUATION FACTORS FOR AWARD

NOTE: Item 12 does not apply if the solicitation includes the provisions at 52.214-16, Minimum Bid Acceptance Period.

is inserted by the offeror) from the date for receipt of offers specified above, to furnish any or all items upon which prices are offered at the price set opposite each item, delivered at the designated point(s), within the time specified in the schedule.

13. DISCOUNT FOR PROMPT PAYMENT

(See Section I, Clause No. 52.232-8)

14. ACKNOWLEDGMENT OF AMENDMENTS

(The offeror acknowledges receipt of amendments

AMENDMENT NO. DATE

to the SOLICITATION for offerors and related documents numbered and dated):

FACILITY

12. In compliance with the above, the undersigned agrees, if this offer is accepted within calendar days (60 calendar days unless a different period

SOLICITATION, OFFER AND AWARD

X

(X) SEC. DESCRIPTION (X) SEC. DESCRIPTION PAGE(S)

PART I - THE SCHEDULE

26. NAME OF CONTRACTING OFFICER (Type or print) 27. UNITED STATES OF AMERICA 28. AWARD DATE

EMAIL:TEL: (Signature of Contracting Officer)

CODE CODE

B. TELEPHONE (Include area code) C. E-MAIL ADDRESS

AWARD (To be completed by Government)

19. ACCEPTED AS TO ITEMS NUMBERED 20. AMOUNT 21. ACCOUNTING AND APPROPRIATION

22. AUTHORITY FOR USING OTHER THAN FULL AND OPEN COMPETITION:

10 U.S.C. 2304(c)( ) 41 U.S.C. 253(c)( ) (4 copies unless otherwise specified)

23. SUBMIT INVOICES TO ADDRESS SHOWN IN ITEM

24. ADMINISTERED BY (If other than Item 7) CODE 25. PAYMENT WILL BE MADE BY CODE

PART IV - REPRESENTATIO NS AND INSTRUCTIO NS

PART III - LIST O F DO CUMENTS, EXHIBITS AND O THER ATTACHMENTS

46 - 74

PART II - CO NTRACT CLAUSES

SPAWAR SYSTEMS CENTER PACIFIC

TIFFANY C. BOATWRIGHT, CODE 22560

TIFFANY.C.BOATWRIGHT@NAVY.MIL

53560 HULL STREET

SAN DIEGO CA 92152-5001

SEE SECTION L

ELECTRONIC SUBMISSION

HTTPS://E-COMMERCE.SSCNO.NMCI.NAVY.MIL/

CA 619-553-4454

FAX:

TEL:

FAX:

TEL:

NOTE: In sealed bid solicitations "offer" and "offeror" mean "bid" and "bidder".

SOLICITATION

6. REQUISITION/PURCHASE NO.

1300594537

5. DATE ISSUED

18 Sep 2017

4. TYPE OF SOLICITATION

SEALED BID (IFB)

NEGOTIATED (RFP)

[ X ]

3. SOLICITATION NO.

N6600117R0494

Section B - Supplies or Services and Prices

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1 Lot Engineering Services

CPFF

Base period of two years. Provide services in accordance with the Statement of

Work (see Section C) as specified in individual task orders.

FOB: Destination

PURCHASE REQUEST NUMBER: 1300594537

ESTIMATED COST

FIXED FEE

TOTAL EST COST + FEE

0002 1 Lot Other Direct Costs

COST

Base period of two years. ODC including but not limited to travel, material, and equipment.

NOTE: The requirements in DFARS 252.211-7003, Item Identification and

Valuation, are applicable for this line item. The contractor shall provide DoD unique identification or a DoD recognized unique identification equivalent.

Data- Base Period- Not Separately Priced

Hardware/Prototype-Base Period- NSP

1001 1 Lot OPTION Engineering Services

CPFF

Option period of three years. Provide services in accordance with the Statement of Work (see Section C) as specified in individual task orders.

FIXED FEE

TOTAL EST COST + FEE

1002 1 Lot Other Direct Costs

COST

Option period of three years. ODC including but not limited to travel, material, and equipment.

NOTE: The requirements in DFARS 252.211-7003, Item Identification and

Valuation, are applicable for this line item. The contractor shall provide DoD unique identification or a DoD recognized unique identification equivalent.

OPTION

OPTION Data-Option Period-Not Separately Priced

OPTION Hardware/Prototype-Option Period- NSP

CLAUSES INCORPORATED BY FULL TEXT

B-TXT-01 PAYMENT OF FIXED FEE (COMPLETION TYPE) (JUN 2017)

***This clause shall be used in completion task orders.***

FIXED FEE: *. The Government shall make payment to the Contractor when requested as work progresses, but no more frequently than biweekly, on account of the fixed fee, equal to ** percent of the amounts invoiced by the

Contractor under the “Allowable Cost and Payment” clause hereof for the related period, subject to the withholding provisions of paragraph (b) of the “Fixed Fee” clause. In the event of discontinuance of the work in accordance with clause of this contract entitled “Limitation of *** the fixed fee shall be redetermined by mutual agreement equitably to reflect the diminution of the work performed; the amount by which such fixed fee is less than, or exceeds payments previously made on account of fee, shall be paid, or repaid by, the Contractor, as the case may be.

* To be completed upon award of the contract

** To be determined at the Task Order level. The allowable fee percentage will be negotiated at the Task

Order level, and shall not exceed the percentage proposed at the basic contract level

*** To be determined at the Task Order level.

(End of clause)

B-TXT-04 LEVEL OF EFFORT--FEE ADJUSTMENT FORMULA (JUN 2017)

***This clause shall be used in term/level-of-effort task orders.***

(a) Subject to the provisions of the “Limitation of Cost” or “Limitation of Funds” clause (whichever is applicable to this contract), it is hereby understood and agreed that the fixed fee is based upon the Contractor providing the below listed number of staff-hours of direct labor, hereinafter referred to as X, at the estimated cost and during the term of this contract specified elsewhere herein:

[Contracting officer insert number of estimated direct labor staff hours]

CLIN Total Staff-hours of Direct Labor (X)

The Contractor agrees to provide the total level of effort specified above in performance of work described in

Sections “B” and “C” of this contract. The total staff-hours of direct labor shall include subcontractor direct labor hours for those subcontractors identified in the Contractor’s proposal as having hours included in the proposed level of effort.

(b) Of the total staff-hours of direct labor set forth above, it is estimated that [Contracting officer insert number of estimated direct staff hours identified as competitive (uncompensated overtime) hours] staff-hours are competitive time (uncompensated overtime). Competitive time (uncompensated overtime) is defined as hours provided by personnel in excess of 40 hours per week without additional compensation for such excess work. All other effort is defined as compensated effort. If no amount is indicated in the first sentence of this paragraph, competitive time

(uncompensated overtime) effort performed by the contractor shall not be counted in fulfillment of the level of effort obligations under this contract.

(c) Effort performed in fulfilling the total level of effort obligations specified above shall only include effort performed in direct support of this contract and shall not include time and effort expended on such things as local travel from an employee’s residence to their usual work location, uncompensated effort while on travel status, truncated lunch periods, or other time and effort which does not have a specific and direct contribution to the tasks described in Section B.

(d) It is understood and agreed that various conditions may exist prior to or upon expiration of the term of the contract, with regard to the expenditure of labor staff-hours and/or costs thereunder which may require adjustment to the aggregate fixed fee. The following actions shall be dictated by the existence of said conditions:

(1) If the Contractor has provided not more than 105 % of X or not less than 95 % of X, within the estimated cost, and at the term of the contract, then the fee shall remain as set forth in Section B.

(2) If the Contractor has provided X-staff-hours, within the term, and has not exceeded the estimated cost then the Contracting Officer may require the Contractor to continue performance until the expiration of the term, or until the expenditure of the estimated cost of the contract except that, in the case of any items or tasks funded with O&MN funds, performance shall not extend beyond 30 September. In no event shall the Contractor be required to provide more than 105 % of X within the term and estimated cost of this contract. The fee shall remain as set forth in Section B.

(3) If the Contractor expends the estimated cost of the contract, during the term of the contract and has provided less than X staff-hours, the Government may require the Contractor to continue performance, by providing cost growth funding, without adjusting the fixed fee, until such time as the Contractor has provided X staff-hours.

(4) If the Contracting Officer does not elect to exercise the Government’s rights as set forth in paragraph

(d)(2) and (d)(3) above, and the Contractor has not expended more than 95 % of X staff-hours, the fixed fee shall be equitably adjusted downward to reflect the diminution of work.

(5) Nothing herein contained shall, in any way, abrogate the Contractor’s responsibilities, and/or the

Government’s rights within the terms of the contract provision entitled “Limitation of Cost” or “Limitation of

Funds” as they shall apply throughout the term of the contract, based upon the total amount of funding allotted to the contract during its specified term.

(e) Within 45 days after completion of the work under each separately identified period of performance hereunder, the Contractor shall submit the following information in writing to the Contracting Officer with copies to the cognizant Contract Administration Office and DCAA office to which vouchers are submitted:

(1) The total number of staff-hours of direct labor expended during the applicable period.

(2) A breakdown of this total showing the number of staff-hours expended in each direct labor classification and associated direct and indirect costs.

(3) A breakdown of other costs incurred.

(4) The Contractor’s estimate of the total allowable cost incurred under the contract for the period.

In the case of a cost under-run, the Contractor shall submit the following information in addition to that required above:

(5) The amount by which the estimated cost of this contract may be reduced to recover excess funds and the total amount of staff-hours not expended, if any.

(6) A calculation of the appropriate fee reduction in accordance with this clause.

All submissions required by this paragraph shall include subcontractor information, if any.

(f) SPECIAL INSTRUCTION TO THE PAYING OFFICE REGARDING WITHHELD FEE

Fees withheld pursuant to the provisions of this contract, such as the withholding provided by the “Allowable Cost and Payment” and “Fixed Fee” clauses, shall not be paid until the contract has been modified to reduce the fixed fee in accordance with paragraph (d) above, except that no such action is required if the total level of effort provided falls within the limits established in paragraph (d) above.

B-TXT-08 MINIMUM AND MAXIMUM QUANTITIES (JUN 2017)

As referred to in paragraph (b) of the “Indefinite Quantity” clause of this contract, the contract minimum quantity is a total of $ 100,000 worth of orders, to be shared equally among all awardees. The maximum quantity is the total estimated amount of the contract. The maximum quantity is not to be exceeded without prior approval of the

Procuring Contracting Officer.

The combined/overall ceiling for all awardees under this Multiple Award Contract is $TBD; however, no MAC awardee can exceed the value of its contract maximum quantity.

B-TXT-10 ALLOTMENT OF FUNDS (JUN 2017)

*** This clause shall be used in incrementally funded task orders.***

(a) This contract is incrementally funded with respect to both cost and fee.

(b) The amounts presently available and allotted to this contract for payment of fee, as provided in the Section I clause of this contract entitled “Fixed Fee”, are as follows:

[Contracting officer under “Items” insert the item numbers for which incremental funding is provided and under

“Allotted to Fixed Fee” insert the amount of incremental funding allocated to fixed fee]

ITEM(S) ALLOTTED TO FIXED FEE

(c) The amounts presently available and allotted to this contract for payment of cost, subject to the Section I

“Limitation of Funds” clause, the items covered thereby and the period of performance which it is estimated the allotted amount will cover are as follows:

[Contracting officer under “Items” insert the item numbers for which incremental funding is provided, under

“Allotment of Cost” insert the amount of incremental funding allocated to total estimated cost, and under “Period of Performance” insert date by which funding expended]

ITEM(S) ALLOTTED TO COST PERIOD OF PERFORMANCE

(d) The parties contemplate that the Government will allot additional amounts to this contract from time to time by unilateral contract modification, and any such modification shall state separately the amounts allotted for cost and for fee, the items covered thereby, and the period of performance the amounts are expected to cover.

Section C - Descriptions and Specifications

STATEMENT OF WORK

STATEMENT OF WORK

12 September 2017

Development, Technical, Management, and Engineering Services for Intelligence, Surveillance, and Reconnaissance

Systems

1.0 INTRODUCTION

1.1 Scope

The scope of this Statement of Work (SOW) includes program and configuration management, logistics, technical services, systems engineering, algorithm development, hardware and software development, material analysis, data processing, testing, repair, installation, deployment, recovery, and analysis in support of Intelligence, Surveillance, and Reconnaissance (ISR) activities. These ISR activities may include support related to chemical, nuclear, biological, and radiological (CNBR) elements, unmanned ground systems for United States Marine Corps (USMC) applications, as well as Explosive Ordnance Disposal (EOD). Systems included in ISR may be autonomous or non-autonomous. In addition, the scope of this SOW includes program and configuration management, environmental support, technical services, systems engineering, algorithm development, hardware and software development, material analysis, data processing, testing, repair, installation, deployment, recovery, and analysis of any autonomous and non-autonomous systems or air system that could be used in ISR operations. Many ISR systems require cybersecurity in their operation. The scope of this SOW covers cybersecurity as it relates to ISR systems.

1.1 Background

The Space and Naval Warfare Systems Center, Pacific (SSC Pacific), has the requirement to provide Research, Development, Test and Evaluation (RDT&E) services and technical engineering services in support of several on-going projects which relate to the development, improvement, implementation and continued effectiveness of systems necessary for ISR thrust areas. In support of surveillance, SSC Pacific provides a full range of engineering and technical support for surveillance systems and support systems. This includes:

a) Research, Studies, and Analysis;

b) System/subsystem Fabrication and Integration, and Production

c) System/subsystem Test, Evaluation and Demonstration

d) System/subsystem Studies and Analysis;

e) System /subsystem Documentation and Program Management.

f) System/subsystem Installation, Training and Repair

g) System/subsystem Acquisition

In order to fulfill the surveillance mission, SSC Pacific periodically requires additional engineering and technical expertise to satisfy the requirement. Separate task orders are required in these instances to achieve the flexible, responsive demands of surveillance system support.

1.2 Applicable Documents

The documents listed below may be invoked, for guidance only, on individual task orders.

a. Cyberspace Policy Review, May 2009

b. U. S. Cyber Operations Policy, Presidential Policy Directive-20 (PDD-20, 2010)

c. Improving Critical Infrastructure Cybersecurity (Executive Order), 12 Feb 2013

d. International Strategy for Cyberspace, May 2011

e. Comprehensive National Cybersecurity Initiative, 2008

f. The National Security Strategy, February 2015

g. Department of Defense Strategy for Operations in Cyberspace, May 2011

h. Director of Central Intelligence Directive 7/3 Information Operations and Intelligence Community

Related Activities (U)

i. DODD O-8530.1 (CND)

j. DODI O-8530.2 (CND)

k. DoD Directive O-3600.3, Technical Assurance Standard for Computer Network Attack (CNA)

Capabilities, 13 May 2005

l. DoD Instruction O-3600.03, Technical Assurance Standard for Computer Network Attack (CNA)

Capabilities, 22 Apr 2010

m. CJCSM 6510.01(Series) Cyber Incident Handling Program, 10 Jul 12

n. Joint Doctrine for Cyberspace Operations, Joint Pub 3-12, 5 Feb 2013

o. Joint Doctrine for Information Operations, Joint Pub 3-13, 27 Nov 2012

p. Naval Warfare Publication 3-12, Cyberspace Operations

q. Naval Warfare Publication 3-13, Navy Information Operations

r. Naval Warfare Pub 3-63 CNO Vol 1 and 2

s. NTTP 3.13.x series on Navy IO

t. SECNAVINST 5239.19 (Series), DON Incident Response/Reporting

u. SECNAVINST 5000.2 (Series), Implementation and Operation of the Defense Acquisition System and the Joint Capabilities Integration and Development System

v. NAVSEA Instruction 3900.8A, Human Systems Integration (HSI) Policy in Acquisition and

Modernization, 20 May 2005

w. Joint Force Component Commander-Network Warfare (JFCC-NW) Document, Computer Network

Attack Technical Assurance, 2009

x. JFCC-NW Document, Technical Assurance Evaluation Standards for Evaluated Level of Assurance I, II, III, and IV, 2009

y. National Institute of Standards and Technology (NIST) Publications

z. SSC Pacific Organizational Set of Standard Processes (OSSP)

aa. OPNAVINST F3300.53C (Series),Navy Antiterrorism Program

bb. DOD 5220.22-M (Series), National Industrial Security Program Operating Manual (NISPOM)

cc. National Security Decision Directive 298 (Series), National Operations Security Program (NSDD) 298

dd. DOD 5205.02 (Series), DOD Operations Security (OPSEC) Program

ee. OPNAVINST 3432.1 (Series), DON Operations Security

ff. SPAWARINST 3432.1 (Series), Operations Security Policy

gg. U.S. Cyber Operations Security Classification Guidance 1.0, 18 Jul 2013

hh. DOD M-5200.01 Volumes 1 through 4,Information Security Program Manual, 24 February 2012

ii. DoDI 5200.02, DoD Personnel Security Program (PSP), 9 September 2014

jj. DoD 5220.22-M, DoD Manual – National Industrial Security Program Operating Manual (NISPOM), 28

February 2006, Change 2 May 18, 2016

kk. DoDI 5220.22, DoD Instruction – National Industrial Security Program, 18 March 2011

ll. DoDI 6205.4, Immunization of Other Than U.S. Forces (OTUSF) for Biological Warfare Defense, 14

April 2000

mm. DoDI 8500.01, Cybersecurity, 14 March 2014

nn. DoDI 8510.01, Risk Management Framework (RMF) for DoD Information Technology (IT), 12 March

oo. DoD 8570.01-M, Information Assurance Workforce Improvement Program, 19 December 2005 with

Change 3 dated 24 January 2012

pp. DoDD 8140.01, Cyberspace Workforce Management, 11 August 2015

qq. SECNAV M-5239.2, DON Information Assurance Workforce Management Manual, May 2009

rr. SECNAV M-5510.30, DON Regulation – Personnel Security Program, 6 October 2006

ss. SECNAV M-5510.36, DON Regulation – Information Security Program, 6 October 2006

tt. SECNAVINST 4440.34, Secretary of the Navy Instruction – Implementation of Item Unique

Identification within the DoN, 22 December 2009

uu. SECNAVINST 5239.20A, DON Cybersecurity Policy, 2 May 2016

vv. SECNAVINST 5239.3C, DON Cybersecurity Policy, 2 May 2016

ww. SECNAVINST 5510.30, DON Regulation – Personnel Security Program, 6 October 2006

xx. DON CIO Memorandum, Acceptable Use of Department of the Navy Information Technology (IT), 12

February 2016

yy. SPAWARINST 4440.12, Management of Operating Materials and Supplies (OM&S), Government

Furnished Property (GFP), Contractor Acquired Property (CAP), Property, Plant and Equipment (PP&E), and Inventory

zz. SPAWARINST 5721.1B, SPAWAR Section 508 Implementation Policy, 17 November 2009 aaa. COMUSFLTFORCOM/COMPACFLTINST 6320.3A, Commander US Fleet Forces

Command/Commander US Pacific Fleet Instruction, Medical Screening For US Govt Civilian Employees, Contractor Personnel, and Guests prior to embarking Fleet Units, 7 May 2013 bbb. Navy Telecommunications Directive (NTD 10-11), System Authorization Access Request (SAAR) -

Navy ccc. MIL-STD-38784, Standard Practice for Manuals, Technical: General Style and Format Requirements ddd. MIL-HDBK-454, A General Guidelines for Electronic Equipment eee. MIL-STD-961Defense And Program-Unique Specifications Format And Content fff. MIL-DTL-31000Technical Data Packages ggg. ASN, RD&A Memorandum, DON Policy on Digital Product/Technical Data dated 23 October 2004 hhh SPAWAR(CIO) Policy Memo SPAWAR Implementation of Server/Application Hosting Review and dated 3 Feb 2011 Approval Process (SAHRAP) iii.DoD Instruction (DoDI) 8520.2, Public Key Infrastructure (PKI) and Public Key (PK) Enabling dated 24 May 2011 jjj DoDI 8500.1,Cybersecuritydated 14 March 2014 kkk ASN, RD&A Software Process,SPII Guidance for use of Software Process Improvement

Improvement Initiative (SPII) Contract Language, Memorandum dated 13 July 2007

2.0 TECHNICAL REQUIREMENTS

The following paragraphs define the requirements that may be required, as specified on individual task orders. The contractor(s) will be required to provide cleared staff at the TS/SCI level or Secret level, depending upon the classification level of the working environment. The contractor may be required to be on site of the end user and customer’s SCIF spaces for meetings, conferences, and performing testing, evaluation, installation, and training. The individual task orders will include the security requirements.

2.1 Research, Studies, and Analysis

The contractor shall perform both basic and applied research, studies, and analysis in the area of ISR. Anticipated research and analysis support shall be required in the areas of current and future ISR system capabilities, requirements, deployments, and integration; ISR advanced concepts and technologies; system and subsystem platform configuration; application of applied physics; embedded and interface operations and control software code; development of automated algorithms; analysis of electrical designs; and analysis of mechanical concepts.

Additionally, the contractor shall support the necessary research and analysis to validate concepts of operations

(CONOPS) and technical approaches to be considered for further development of ISR systems by SSC Pacific.

2.2 Specification, Design, and Development

The contractor shall specify, design and develop ISR systems. Contractor support shall include as a minimum:

specification, design and development of prototypes; processes and procedures development; current and future ISR capabilities and technologies design; advanced concept design, system integration design. Specification, design, and development efforts shall be performed using current and next generation concepts, procedures, materials, models, simulations, software development tools, software utilities, and hardware (processors, graphics, display systems, and networks). Contractor specification, design, and development technical support may include system configuration and layout, component selection, algorithm development, software code, hardware system and subsystem design, and electronic printed circuit board (PCB) design. Systems design shall be reviewed and approved by SSC Pacific personnel prior to fabrication.

2.3 Fabrication, Integration, Assembly, and Installation

The contractor shall provide material acquisition and labor to fabricate, integrate, assemble, and install ISR systems.

The contractor shall perform site surveys.

2.4 Test and Evaluation, Demonstration, Deployment, Operation, Recovery, and Repair

The contractor shall be responsible for test and evaluation (T&E), demonstration, deployment, operation, recovery, and repair. As appropriate, the contractor may be required to work with other contractors, government and non-government organizations and/or agencies in the conduct of these tests and/or demonstrations. T&E and demonstration may take place in a lab environment on shore, in the field, or aboard U.S. Navy or contractor vessels at sea.

Support shall include but is not limited to: Performing Site Surveys; Test Plans and Procedures; Safety Plans and

Procedures; Test Analysis and Reports; Test Direction; Presentation of Test and/or Demonstration results;

Environmental Regulation Support including Marine Mammal Mitigation; and boat and diver support.

2.5 Systems Engineering

The contractor shall perform Systems engineering (SE). System Engineering is defined as a methodical and disciplined approach for the specification, design, development, realization, technical management, operations, and retirement of a system. The practice of systems engineering (SE) is composed of 16 processes: eight technical processes (Stakeholder Requirements Definition, Requirements Analysis, Architecture Design, Transition, Validation, Verification, Integration, and Implementation); and eight technical management processes (Decision

Analysis, Technical Planning, Technical Assessment, Requirements Management, Risk Management, Configuration

Management, Technical Data Management, Interface Management)

2.6 Documentation, Configuration Management, Logistics, and Program Management

The contractor shall prepare documentation and presentation material related to ISR. Such documentation and material may include but is not limited to: program plans, program management plans, program schedules, requirements, specifications, agendas, meeting minutes, design review documents, Concepts of Operation

(CONOPS), Engineering Change Proposals (ECPs), Requests for Variation (RFVs), and budgets. The contractor shall participate and provide technical expertise in meetings related to ISR. The contractor shall review and provide input and recommendations to ISR documents. The contractor shall perform configuration management. The contractor shall perform Logistics functions related to ISR.

2.7 Maintenance and Sustainment

The contractor shall provide maintenance and sustainment support of ISR systems. Technical support may include but is not limited to: on-site maintenance and repair, repair and/or operation of ISR systems; Trouble Desk support;

develop maintenance/repair manuals.

2.8 Training

The contractor shall develop and create training documents for ISR systems. Documents may include but are not limited to: Training plans and materials, maintenance manuals; technical manuals, operator manuals, CONOPS manuals, Operating Guidelines, and Operating Procedures manuals. The contractor shall design and develop as well as conduct training courses for ISR systems.

2.9 Environmental Support

The contractor shall provide subject matter expertise with respect to environmental rules, regulations, and policy with respect to the testing and operation of ISR systems and subsystems. The contractor shall provide subject matter expertise with respect to marine mammal mitigation in the testing and operation of ISR systems. The contractor shall participate in meetings related to the environmental rules, regulations, and policy with respect to testing and operating ISR systems. The contractor shall develop and create documentation required to comply with governmental rules, regulations, and policies with respect to the testing and operation of ISR systems and subsystems.

2.10 Cybersecurity

The contractor shall provide cybersecurity support for ISR systems and subsystems, including both technical and administrative support. The contractor shall provide subject matter expertise with respect to cybersecurity in the testing and operation of ISR systems. The contractor shall participate in meetings related to cybersecurity rules, regulations, laws, and policy with respect to developing, testing and operating ISR systems. The contractor shall develop and create documentation required to comply with governmental cybersecurity rules, regulations, laws, and policies with respect to the testing and operation of ISR systems and subsystems.

3.0 SOFTWARE ENGINEERING APPROACH

The contractor shall define a software development approach appropriate for the computer software effort to be performed under this contract. This approach shall be documented in a Software Development Plan (SDP) (see most current version of DID No. DI-IPSC-81427 for required format and content). Once defined, the contractor shall follow this SDP for all computer software to be developed or maintained under this contract.

The SDP shall define the offeror’s proposed life cycle model and the processes used as a part of that model. In this context, the term “life cycle model” is as defined in the most current IEEE/EIA Std. The SDP shall describe the overall life cycle and shall include primary, supporting, and organizational processes based on the work content of this contract. In accordance with the framework defined in the most current IEEE/EIA Std., the SDP shall define the processes, the activities to be performed as a part of the processes, the tasks which support the activities, and the techniques and tools to be used to perform the tasks. Because IEEE/EIA Std. does not prescribe how to accomplish the task, the offeror must provide this detailed information so the Government can assess whether the offeror’s approach is viable.

The SDP shall contain the information defined by the most current IEEE/EIA Std. and the Plans or Procedures in

Table 1 of the most current standard. In all cases, the level of detail shall be sufficient to define all software development processes, activities, and tasks to be conducted. Information provided must include, as a minimum, specific standard, methods, tools, action, strategies, and responsibilities associated with development and qualification.

The contractor’s software engineering approach shall afford opportunities for input and oversight by the

Government.

4.0 REPORTS, DATA AND DELIVERABLES

Technical data and computer software deliverables shall be provided in accordance with the Contract Data

Requirements List, DD Form 1423, as specified in individual delivery/task orders. All deliverables are subject to

SSC Pacific review and approval before final acceptance.

The contractor shall provide prototype deliverables as specified in individual task orders.

All classified deliverables shall be protected and handled in accordance with the contract DD Form 254, Contract

Security Classification Specification.

5.0 CYBERSECURITY COMPLIANCE

Cybersecurity (which replaced the term Information Assurance (IA)) is defined as prevention of damage to, protection of, and restoration of computers, electronic communications systems, electronic communications services, wire communication, and electronic communication, including information contained therein, to ensure its availability, integrity, authentication, confidentiality, and nonrepudiation. Contractor personnel shall perform tasks to ensure Navy applications, systems, and networks satisfy Federal/DoD/DON/Navy cybersecurity requirements.

5.1 Cyber IT and Cybersecurity Personnel

(a) The Cyberspace workforce elements addressed include contractors performing functions in designated Cyber IT positions and Cybersecurity positions. In accordance with DFARS Subpart 239.71, DoDD 8140.01, SECNAVINST

5239.20A, and SECNAV M-5239.2, contractor personnel performing cybersecurity functions shall meet all cybersecurity training, certification, and tracking requirements as cited in DoD 8570.01-M prior to accessing DoD information systems. Proposed contractor Cyber IT and cybersecurity personnel shall be appropriately qualified prior to the start of the contract performance period or before assignment to the contract during the course of the performance period.

(b) The contractor shall be responsible for identifying, tracking and reporting cybersecurity personnel, also known as Cybersecurity Workforce (CSWF) and Cyber IT workforce personnel. Reporting requirements will be specified at the task order level. Although the minimum frequency of reporting is monthly, the task order can require additional updates at any time.

(c ) Contractors that access Navy IT shall also follow guidelines and provisions documented in Navy

Telecommunications Directive (NTD 10-11) and are required to complete a System Authorization Access Request

(SAAR) – Navy form.

When a contractor requires logical access to a government IT system or resource (directly or indirectly), the required

CAC will have a Public Key Infrastructure (PKI). A hardware solution and software (e.g., ActiveGold) is required to securely read the card via a personal computer. Pursuant to DoDM 1000.13-M-V1, CAC PKI certificates will be associated with an official government issued e-mail address (e.g. .mil, .gov, .edu). Prior to receipt of a CAC with

PKI, contractor personnel shall complete the mandatory Cybersecurity Awareness training and submit a signed

System Authorization Access Request Navy (SAAR-N) form to the contract’s specified COR. Note: In order for personnel to maintain a CAC with PKI, each contractor employee shall complete annual cybersecurity training. The following guidance for training and form submittal is provided; however, contractors shall seek latest guidance from their appointed company Security Officer and the SSC Pacific Information Assurance Management (IAM) office:

1. For annual DoD Cybersecurity/IA Awareness training, contractors shall use this site:

https://twms.nmci.navy.mil/ or http://iatraining.disa.mil/. For those contractors requiring initial training and do not have a CAC, contact the SSC Pacific IAM office at phone number (619) 221-5639 or e-mail questions to roc@spawar.navy.mil. for additional instructions. Training can be taken at the IAM office or online at http://iase.disa.mil/index2.html.

2. For SAAR-N form, the contractor shall use OPNAV 5239/14 (Rev 9/2011). Contractors can obtain a form from the SSC Pacific IAM office at or from the website: https://navalforms.documentservices.dla.mil/. Digitally signed forms will be routed to the IAM office via encrypted e-mail to roc@spawar.navy.mil.

(d) Contractor personnel with privileged access will be required to acknowledge special responsibilities with a

Privileged Access Agreement (PAA) IAW SECNAVINST 5239.20A.

5.2 Design, Integration, Configuration or Installation Of Hardware and Software

The contractor shall ensure any equipment/system installed or integrated into Navy platform will meet the cybersecurity requirements as specified under DoDI 8500.01. The contractor shall ensure that any design change, integration change, configuration change, or installation of hardware and software is in accordance with established

DoD/DON/Navy cyber directives and does not violate the terms and conditions of the accreditation/authorization issued by the appropriate Accreditation/Authorization official. Contractors that access Navy IT are also required to follow the provisions contained in DON CIO Memorandum: Acceptable Use of Department of the Navy

Information Technology (IT) dtd 12 Feb 16. Use of blacklisted software is specifically prohibited and only software that is registered in DON Application and Database Management System (DADMS) and is Functional Area

Manager (FAM) approved can be used as documented in para 4.2.2. Procurement and installation of software governed by DON Enterprise License Agreements (ELAs) – Microsoft, Oracle, Cisco, Axway, Symantec, ActivIdentity, VMware, Red Hat, NetApp, and EMC shall be in accordance with DON CIO Policy and DON ELAs awarded.

5.3 Cybersecurity Workforce (CSWF) Report

DoD 8570.01-M and DFAR’s PGI 239.7102-3 have promulgated that contractor personnel shall have documented current cybersecurity certification status within their contract. The contractor shall develop, maintain, and submit a

CSWF Report as applicable at the task order level. IAW clause DFARS 252.239-7001, if cybersecurity support is provided, the contractor shall provide a Cybersecurity Workforce (CSWF) list that identifies those individuals who are IA trained and certified. Utilizing the format provided at the task order level, the prime contractor shall be responsible for collecting, integrating, and reporting all subcontractor personnel. Additional reporting details and distribution instructions will be specified at the task order level. Contractor shall verify with the COR or other government representative the proper labor category cybersecurity designation and certification requirements.

6.0 INFORMATION TECHNOLOGY (IT) SERVICES REQUIREMENTS

According to the FAR, Information Technology (IT) is defined as any equipment or interconnected system(s) or subsystem(s) of equipment, that is used in the automatic acquisition, storage, analysis, evaluation, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data of information by the agency. IT includes computers, ancillary equipment, peripherals, input, output, and storage devices necessary for security and surveillance. Electronic and Information technology (EIT) is IT that is used in the creation, conversion, or duplication of data or information. EIT includes: telecommunication products, such as telephones;

information kiosks; transaction machines; World Wide Web sites; multimedia (including videotapes); and office equipment, such as copiers and fax machines.

6.1 Information Technology (IT) General Requirements

When applicable, the contractor shall be responsible for the following:

• Ensure that no production systems are operational on any RDT&E network.

• Follow DoDI 8510.01 of 12 Mar 2014 when deploying, integrating, and implementing IT capabilities.

• Migrate all Navy Ashore production systems to the NMCI environment where available.

• Work with government personnel to ensure compliance with all current Navy IT & cybersecurity policies, including those pertaining to Cyber Asset Reduction and Security (CARS).

• Follow SECNAVINST 5239.3B of 17 June 2009 & DoDI 8510.01 of 12 Mar 2014 prior to integration and implementation of IT solutions or systems.

• Register any contractor-owned or contractor-maintained IT systems utilized on contract in the Department of Defense IT Portfolio Registry (DITPR)-DON.

• Only perform work specified within the limitations of the contract/task order.

6.2 Acquisition of Commercial Software Products, Hardware, and Related Services

Contractors recommending or purchasing commercial software products, hardware, and related services supporting

Navy programs and projects shall ensure they recommend or procure items from approved sources in accordance with the latest DoN and DoD policies.

6.2.1 DON Enterprise Licensing Agreement/DOD Enterprise Software Initiative Program

Pursuant to DoN Memorandum – Mandatory use of DoN Enterprise Licensing Agreement (ELA) dtd 22 Feb 12, contractors that are authorized to use Government supply sources per FAR 51.101 shall verify if the product is attainable through DoN ELAs and if so, procure that item in accordance with appropriate ELA procedures. If an item is not attainable through the DoN ELA program, contractors shall then utilize DoD Enterprise Software

Initiative (ESI) program (see DFARS 208.74) and government-wide SmartBuy program (see DoD memo dtd 22 Dec

05). The contractor shall ensure any items purchased outside these programs have the required approved waivers as applicable to the program. Software requirements will be specified at the task order level.

6.2.2 DON Application And Database Management System (DADMS)

The contractor shall ensure that no Functional Area Manager (FAM) disapproved applications are integrated, installed or operational on Navy networks. The contractor shall ensure that all databases that use database management systems (DBMS) designed, implemented, and/or hosted on servers and/or mainframes supporting Navy applications and systems be registered in DoN Application and Database Management System (DADMS) and are

FAM approved. All integrated, installed, or operational applications hosted on Navy networks must also be registered in DADMS and approved by the FAM. No operational systems or applications will be integrated, installed, or operational on the RDT&E network.

6.3 Section 508 Compliance

The contractor shall ensure that all software recommended, procured, and/or developed is compliant with Section

508 of the Rehabilitation Act of 1973, 26 CFR Part 1194 and pursuant to SPAWARINST 5721.1B of 17 Nov 2009.

In accordance with FAR 39.204, this requirement does not apply to contractor acquired software that is incidental to the task, software procured/developed to support a program or system designated as a National Security System

(NSS) or if the product is located in spaces frequented only by service personnel for maintenance, repair or occasional monitoring of equipment.

6.4. Software Development/Modernization and Hosting

The contractor shall ensure all programs utilizing this contract for software development/ modernization

(DEV/MOD), including the development of IT tools to automate SSC Pacific business processes are compliant with

DON Information Management/Information Technology (DON IM/IT) Investment Review Process Guidance requirements. Contractors shall neither host nor develop IT tools to automate SSC Pacific business processes unless specifically tasked within the task order or contract. The contractor shall ensure IT tools developed to automate SSC

Pacific business processes will be delivered with full documentation and source code, as specified at the task order level, to allow non-proprietary operation and maintenance by any source. The contractor shall ensure all programs are submitted with proof of completed DEV/MOD certification approval from the appropriate authority in accordance with DON policy prior to task order award.

6.5 IT Position Categories

Pursuant to DoDI 8500.01, DoD 8570.01-M, SECNAVINST 5510.30, SECNAV M-5239.2, and applicable to unclassified DoD information systems, a designator is assigned to certain individuals that indicates the level of IT access required to execute the responsibilities of the position based on the potential for an individual assigned to the position to adversely impact DoD missions or functions. As defined in DoD 5200.2-R, SECNAVINST 5510.30 and

SECNAV M-5510.30, three basic DoN IT levels/Position categories exist:

Tier 5/5R: IT- I (Privileged access)

Tier 3/3R: IT-II (Limited Privileged, sensitive information)

Tier 1/1R: IT-III (Non-Privileged, no sensitive information)

Note: The term IT Position is synonymous with the older term Automated Data Processing (ADP) Position (as used in DoD 5200.2-R, Appendix 10).

Investigative requirements for each category vary, depending on the role and whether the individual is a U.S.

civilian contractor or a foreign national. The Contractor PM shall assist the Government Project Manager or COR in determining the appropriate IT Position Category assignment for all contractor personnel.

All required Single-Scope Background Investigation (SSBI) or Tier 5, SSBI Periodic Reinvestigation (SSBI-PR), and National Agency Check with Law and Credit (NACLC) adjudication will be performed Pursuant to DoDI

8500.01 and SECNAVINST 5510.30. Requests for investigation of contractor personnel for fitness determinations or IT eligibility without classified access are submitted by SPAWAR/SSC Atlantic/SSC Pacific Security Office, processed by the OPM, and adjudicated by DOD CAF. IT Position Categories are determined based on the following criteria:

Tier 5/5R: IT-I Level (Privileged) - Positions in which the incumbent is responsible for the planning, direction, and implementation of a computer security program; major responsibility for the direction, planning and design of a computer system, including the hardware and software; or, can access a system during the operation or maintenance in such a way, and with a relatively high risk for causing grave damage, or realize a significant personal gain.

Personnel whose duties meet the criteria for IT-I Position designation require a favorably adjudication of Single

Scope Background Investigation (SSBI) or SSBI-PR or Tier 5/5R. The SSBI or SSBI-PR or Tier 5/5R is updated a minimum of every 5 years. Assignment to designated IT-I positions requires U.S. citizenship unless a waiver request is approved by CNO.

Tier 3/3R: IT-II Level (Limited Privileged) - Positions in which the incumbent is responsible for the-direction, planning, design, operation, or maintenance of a computer system, and whose work is technically reviewed by a higher authority at the IT-II Position level to insure the integrity of the system. Personnel whose duties meet the criteria for an IT-II Position require a favorably adjudication of a Position of Trust National Agency Check with

Law and Credit (PT/NACLC) or Tier 3/3R. Assignment to designated IT-II positions requires U.S. citizenship unless a waiver request is approved by CNO.

Tier 1/1R: IT-III Level (Non-privileged) - All other positions involved in computer activities. Incumbent in this position has non-privileged access to one or more DoD information systems/applications or database to which they are authorized access. Personnel whose duties meet the criteria for an IT-III Position designation require a favorably adjudication of a Position of Trust National Agency Check with Written Inquiries (PT/NACI) or Tier 1/1R.

7.0 SECURITY

The work performed by the Contractor will include access to unclassified and up to Top Secret/incidental Sensitive

Compartmented Information (SCI) data, information, and spaces. The contractor will be required to provide individuals with security clearances at the appropriate classification levels, as specified in individual task orders.

The Contractor will be required to attend meetings classified up to Top Secret/SCI. The Contractor will require access to Communications Security (COMSEC), and Secure Internet Protocol Router Network (SIPRNet)/Joint

Worldwide Intelligence Communications System (JWICS). The contractor shall be North Atlantic Treaty

Organization (NATO) briefed and complete the derivative classification training prior to being granted access to

SIPRNet/JWICS; training is provided by the facility security officer.

Contractor personnel assigned to this effort who require access to SCI data and spaces must possess a current SSBI with ICD 704 eligibility (which replaced DCID 6/4 eligibility).

Anti-Terrorism/force Protection (AT/FP) briefings are required for all personnel (military, DOD civilian, and contractor) prior to commencement of foreign travel. Contractor employees must receive the AT/FP briefing annually. The briefing is available at Joint Knowledge Online (JKO): https://jkodirect.jten.mil (prefix): JS; course number: US007; title: Level 1 Anti-terrorism awareness training, if experiencing problems accessing this website contact ssc_fortrav@navy.mil. note: per OPNAVINST F3300.53C contractor employees must receive the AT/FP briefing annually.

As required by National Industrial Security Program Operating Manual (NISPOM) Chapter 1, Section 3, contractors are required to report certain events that have an impact on: 1) the status of the facility clearance (FCL);

2) the status of an employee's personnel clearance (PCL); 3) the proper safeguarding of classified information; 4) or an indication that classified information has been lost or compromised. Contractors working under SSC Pacific contracts will ensure information pertaining to assigned contractor personnel are reported to the Contracting Officer

Representative (COR)/Technical Point of Contact (TPOC), the Contracting Specialist, and the Security's COR in addition to notifying appropriate agencies such as Cognizant Security Agency (CSA), Cognizant Security Office

(CSO), or Department Of Defense Central Adjudication Facility (DODCAF) when that information relates to the denial, suspension, or revocation of a security clearance of any assigned personnel; any adverse information on an assigned employee's continued suitability for continued access to classified access; any instance of loss or compromise, or suspected loss or compromise, of classified information; actual, probable or possible espionage, https://jkodirect.jten.mil/ mailto:ssc_fortrav@navy.mil sabotage, or subversive information; or any other circumstances of a security nature that would affect the contractor's operation while working under SSC Pacific contracts.

Pursuant to DoDM 5200.01, the…