N66601-19-R-0129 RFP.pdf

CODE

(Hour)

PAGE(S)

until 12:00 AM local time 08 May 2019

X

A

X B

X C

D

EX

X

G

F 83 - 96

97 - 111

X H 112 - 116 amanda.foster@navy .mil

RATING PAGE OF PAGES

7. ISSUED BY

(Date)

IMPORTANT - Award will be made on this Form, or on Standard Form 26, or by other authorized official written notice.

Previous Edition is Unusable 33-134 STANDARD FORM 33 (REV. 9-97)

Prescribed by GSA

FAR (48 CFR) 53.214(c)

1 116

(If other than Item 7)

15A. NAME 16. NAME AND TITLE OF PERSON AUTHORIZED TO

AND

ADDRESS

SIGN OFFER (Type or print)

OF

OFFEROR

AMENDMENT NO. DATE

15B. TELEPHONE NO (Include area code) 17. SIGNATURE15C. CHECK IF REMITTANCE ADDRESS

IS DIFFERENT FROM ABOVE - ENTER

SUCH ADDRESS IN SCHEDULE.

18. OFFER DATE

1. THIS CONTRACT IS A RATED ORDER

UNDER DPAS (15 CFR 700)

2. CONTRACT NO.

N66001 8. ADDRESS OFFER TO

See Item 7

9. Sealed offers in original and 1 copies for furnishing the supplies or services in the Schedule will be received at the place specified in Item 8, or if handcarried, in the depository located in

CAUTION - LATE Submissions, Modifications, and Withdrawals: See Section L, Provision No. 52.214-7 or 52.215-1. All offers are subject to all terms and

Section L conditions contained in this solicitation.

10. FOR INFORMATION

CALL:

A. NAME (NO COLLECT CALLS)

AMANDA L. FOSTER 619-553-4456

11. TABLE OF CONTENTS

SOLICITATION/ CONTRACT FORM

SUPPLIES OR SERVICES AND PRICES/ COSTS

2 - 10

X I CONTRACT CLAUSES

DESCRIPTION/ SPECS./ WORK STATEMENT X

PACKAGING AND MARKING

11 - 31 J LIST OF ATTACHMENTS

INSPECTION AND ACCEPTANCE

DELIVERIES OR PERFORMANCE

33 - 34 X K

REPRESENTATIONS, CERTIFICATIONS AND

OTHER STATEMENTS OF OFFERORS

CONTRACT ADMINISTRATION DATA 35 - 40 X

SPECIAL CONTRACT REQUIREMENTS

OFFER (Must be fully completed by offeror) 41 - 53 X M

L INSTRS., CONDS., AND NOTICES TO OFFERORS

EVALUATION FACTORS FOR AWARD

NOTE: Item 12 does not apply if the solicitation includes the provisions at 52.214-16, Minimum Bid Acceptance Period.

is inserted by the offeror) from the date for receipt of offers specified above, to furnish any or all items upon which prices are offered at the price set opposite each item, delivered at the designated point(s), within the time specified in the schedule.

13. DISCOUNT FOR PROMPT PAYMENT

(See Section I, Clause No. 52.232-8)

14. ACKNOWLEDGMENT OF AMENDMENTS

(The offeror acknowledges receipt of amendments

AMENDMENT NO. DATE

to the SOLICITATION for offerors and related documents numbered and dated):

FACILITY

12. In compliance with the above, the undersigned agrees, if this offer is accepted within calendar days (60 calendar days unless a different period

SOLICITATION, OFFER AND AWARD

X

(X) SEC. DESCRIPTION (X) SEC. DESCRIPTION PAGE(S)

PART I - THE SCHEDULE

26. NAME OF CONTRACTING OFFICER (Type or print) 27. UNITED STATES OF AMERICA 28. AWARD DATE

EMAIL:TEL: (Signature of Contracting Officer)

CODE CODE

B. TELEPHONE (Include area code) C. E-MAIL ADDRESS

AWARD (To be completed by Government)

19. ACCEPTED AS TO ITEMS NUMBERED 20. AMOUNT 21. ACCOUNTING AND APPROPRIATION

22. AUTHORITY FOR USING OTHER THAN FULL AND OPEN COMPETITION:

10 U.S.C. 2304(c)( ) 41 U.S.C. 253(c)( ) (4 copies unless otherwise specified)

23. SUBMIT INVOICES TO ADDRESS SHOWN IN ITEM

24. ADMINISTERED BY (If other than Item 7) CODE 25. PAYMENT WILL BE MADE BY CODE

PART IV - REPRESENTATIO NS AND INSTRUCTIO NS

PART III - LIST O F DO CUMENTS, EXHIBITS AND O THER ATTACHMENTS

54 - 81

PART II - CO NTRACT CLAUSES

NAVAL INFORMATION WARFARE CENTER PACIFIC

AMANDA L. MILLER, CODE 22410

AMANDA.MILLER@NAVY.MIL

53560 HULL STREET

SAN DIEGO CA 92152-5001

619-553-4456

FAX:

TEL:

FAX:

TEL:

NOTE: In sealed bid solicitations "offer" and "offeror" mean "bid" and "bidder".

SOLICITATION

6. REQUISITION/PURCHASE NO.5. DATE ISSUED

05 Apr 2019

4. TYPE OF SOLICITATION

SEALED BID (IFB)

NEGOTIATED (RFP)

[ X ]

3. SOLICITATION NO.

N6600119R0129

Section B - Supplies or Services and Prices

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1 Lot

ENGINEERING SUPPORT SERVICES

CPFF

Base Period (1 year). Provide services in accordance with the Statement of

Work (SOW), in Section C, and as specified in individual task orders.

FOB: Destination

ESTIMATED COST

FIXED FEE

TOTAL EST COST + FEE

0002 1 Lot

OTHER DIRECT COSTS (ODC)

COST

Base period (1 year). ODCs including but not limited to travel and materials.

0003 1 Lot

CONTRACT DATA REQUIREMENTS LIST (CDRL)

COST

Not Separately Priced. Base period (1 year).

0004 1 Lot

OPTION ENGINEERING SUPPORT SERVICES

CPFF

Option Period 1 (1 year). Provide services in accordance with the Statement of

0005 1 Lot

OPTION OTHER DIRECT COSTS (ODC)

COST

Option Period 1 (1 year). ODCs including but not limited to travel and materials.

0006 1 Lot

OPTION CONTRACT DATA REQUIREMENTS LIST (CDRL)

COST

Option Period 1- Not Separately Priced

0007 1 Lot

OPTION ENGINEERING SUPPORT SERVICES

CPFF

Option Period 2 (1 year). Provide services in accordance with the Statement of

0008 1 Lot

OPTION OTHER DIRECT COSTS (ODC)

Option Period 2 (1 year). ODCs including but not limited to travel and materials.

0009 1 Lot

OPTION CONTRACT DATA REQUIREMENTS LIST (CDRL)

COST

Option Period 2- Not Separately Priced

0010 1 Lot

OPTION ENGINEERING SUPPORT SERVICES

CPFF

Option Period 3 (1 year). Provide services in accordance with the Statement of

0011 1 Lot

OPTION OTHER DIRECT COSTS (ODC)

COST

Option Period 3 (1 year). ODCs including but not limited to travel and materials.

0012 1 Lot

OPTION CONTRACT DATA REQUIREMENTS LIST (CDRL)

COST

Option Period 3- Not Separately Priced

0013 1 Lot

OPTION ENGINEERING SUPPORT SERVICES

CPFF

Option Period 4 (1 year). Provide services in accordance with the Statement of

0014 1 Lot

OPTION OTHER DIRECT COSTS (ODC)

Option Period 4 (1 year). ODCs including but not limited to travel and materials.

0015 1 Lot

OPTION CONTRACT DATA REQUIREMENTS LIST (CDRL)

COST

Option Period 4- Not Separately Priced

0016 1 Lot OPTION Option to Extend Services- 52.217-8

CPFF

ENGINEERING SUPPORT SERVICES

IAW with FAR 52.217-8- The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months.

0017 1 Lot OPTION Option to Extend Services- 52.217-8

COST

OTHER DIRECT COSTS (ODC)

IAW with FAR 52.217-8- The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months.

0018 1 Lot

OPTION CONTRACT DATA REQUIREMENTS LIST (CDRL)

Not Separately Priced

IAW with FAR 52.217-8- The option provision may be exercised more than once, but the total extension of performance hereunder shall not exceed 6 months. Not

Separately Priced.

CLAUSES INCORPORATED BY FULL TEXT

B-TXT-01 PAYMENT OF FIXED FEE (COMPLETION TYPE) (JUN 2017)

***This clause shall be used in completion type task orders.***

FIXED FEE: $*. The Government shall make payment to the Contractor when requested as work progresses, but no more frequently than biweekly, on account of the fixed fee, equal to ** percent of the amounts invoiced by the

Contractor under the “Allowable Cost and Payment” clause hereof for the related period, subject to the withholding provisions of paragraph (b) of the “Fixed Fee” clause. In the event of discontinuance of the work in accordance with clause of this contract entitled “Limitation of *** the fixed fee shall be redetermined by mutual agreement equitably to reflect the diminution of the work performed; the amount by which such fixed fee is less than, or exceeds payments previously made on account of fee, shall be paid, or repaid by, the Contractor, as the case may be.

* To be completed upon award of the contract.

** To be determined at the Task Order level. The allowable fee percentage will be negotiated at the Task

Order level, and shall not exceed the percentage proposed at the basic contract level.

*** To be determined at the Task Order level.

(End of clause)

B-TXT-04 LEVEL OF EFFORT--FEE ADJUSTMENT FORMULA (JUN 2017)

(a) Subject to the provisions of the “Limitation of Cost” or “Limitation of Funds” clause (whichever is applicable to this contract), it is hereby understood and agreed that the fixed fee is based upon the Contractor providing the below listed number of staff-hours of direct labor, hereinafter referred to as X, at the estimated cost and during the term of this contract specified elsewhere herein:

CLIN Total Staff-hours of Direct Labor (X)

0001 TBD at task order level

0004 TBD at task order level

0007 TBD at task order level

0010 TBD at task order level

0013 TBD at task order level

The Contractor agrees to provide the total level of effort specified above in performance of work described in

Sections “B” and “C” of this contract. The total staff-hours of direct labor shall include subcontractor direct labor hours for those subcontractors identified in the Contractor’s proposal as having hours included in the proposed level of effort.

(b) Of the total staff-hours of direct labor set forth above, it is estimated that 154,440 staff-hours are competitive time (uncompensated overtime). Competitive time (uncompensated overtime) is defined as hours provided by personnel in excess of 40 hours per week without additional compensation for such excess work. All other effort is defined as compensated effort. If no amount is indicated in the first sentence of this paragraph, competitive time

(uncompensated overtime) effort performed by the contractor shall not be counted in fulfillment of the level of effort obligations under this contract.

(c) Effort performed in fulfilling the total level of effort obligations specified above shall only include effort performed in direct support of this contract and shall not include time and effort expended on such things as local travel from an employee’s residence to their usual work location, uncompensated effort while on travel status, truncated lunch periods, or other time and effort which does not have a specific and direct contribution to the tasks described in Section B.

(d) It is understood and agreed that various conditions may exist prior to or upon expiration of the term of the contract, with regard to the expenditure of labor staff-hours and/or costs thereunder which may require adjustment to the aggregate fixed fee. The following actions shall be dictated by the existence of said conditions:

(1) If the Contractor has provided not more than 105% of X or not less than 95% of X, within the estimated cost, and at the term of the contract, then the fee shall remain as set forth in Section B.

(2) If the Contractor has provided X-staff-hours, within the term, and has not exceeded the estimated cost then the Contracting Officer may require the Contractor to continue performance until the expiration of the term, or until the expenditure of the estimated cost of the contract except that, in the case of any items or tasks funded with O&MN funds, performance shall not extend beyond 30 September. In no event shall the Contractor be required to provide more than 105 % of X within the term and estimated cost of this contract. The fee shall remain as set forth in Section B.

(3) If the Contractor expends the estimated cost of the contract, during the term of the contract and has provided less than X staff-hours, the Government may require the Contractor to continue performance, by providing cost growth funding, without adjusting the fixed fee, until such time as the Contractor has provided X staff-hours.

(4) If the Contracting Officer does not elect to exercise the Government’s rights as set forth in paragraph

(d)(2) and (d)(3) above, and the Contractor has not expended more than 95 % of X staff-hours, the fixed fee shall be equitably adjusted downward to reflect the diminution of work.

(5) Nothing herein contained shall, in any way, abrogate the Contractor’s responsibilities, and/or the

Government’s rights within the terms of the contract provision entitled “Limitation of Cost” or “Limitation of

Funds” as they shall apply throughout the term of the contract, based upon the total amount of funding allotted to the contract during its specified term.

(e) Within 45 days after completion of the work under each separately identified period of performance hereunder, the Contractor shall submit the following information in writing to the Contracting Officer with copies to the cognizant Contract Administration Office and DCAA office to which vouchers are submitted:

(1) The total number of staff-hours of direct labor expended during the applicable period.

(2) A breakdown of this total showing the number of staff-hours expended in each direct labor classification and associated direct and indirect costs.

(3) A breakdown of other costs incurred.

(4) The Contractor’s estimate of the total allowable cost incurred under the contract for the period.

In the case of a cost under-run, the Contractor shall submit the following information in addition to that required above:

(5) The amount by which the estimated cost of this contract may be reduced to recover excess funds and the total amount of staff-hours not expended, if any.

(6) A calculation of the appropriate fee reduction in accordance with this clause.

All submissions required by this paragraph shall include subcontractor information, if any.

(f) SPECIAL INSTRUCTION TO THE PAYING OFFICE REGARDING WITHHELD FEE

Fees withheld pursuant to the provisions of this contract, such as the withholding provided by the “Allowable Cost and Payment” and “Fixed Fee” clauses, shall not be paid until the contract has been modified to reduce the fixed fee in accordance with paragraph (d) above, except that no such action is required if the total level of effort provided falls within the limits established in paragraph (d) above.

B-TXT-10 ALLOTMENT OF FUNDS (JUN 2017)

***This clause will be used in incrementally funded task order.***

(a) This contract is incrementally funded with respect to both cost and fee.

(b) The amounts presently available and allotted to this contract for payment of fee, as provided in the Section I clause of this contract entitled “Fixed Fee”, are as follows:

[Contracting officer under “Items” insert the item numbers for which incremental funding is provided and under

“Allotted to Fixed Fee” insert the amount of incremental funding allocated to fixed fee]

ITEM(S) ALLOTTED TO FIXED FEE

TBD $ TBD

(c) The amounts presently available and allotted to this contract for payment of cost, subject to the Section I

“Limitation of Funds” clause, the items covered thereby and the period of performance which it is estimated the allotted amount will cover are as follows:

[Contracting officer under “Items” insert the item numbers for which incremental funding is provided, under

“Allotment of Cost” insert the amount of incremental funding allocated to total estimated cost, and under “Period of Performance” insert date by which funding expended]

ITEM(S) ALLOTTED TO COST PERIOD OF PERFORMANCE

TBD TBD TBD

(d) The parties contemplate that the Government will allot additional amounts to this contract from time to time by unilateral contract modification, and any such modification shall state separately the amounts allotted for cost and for fee, the items covered thereby, and the period of performance the amounts are expected to cover.

Section C - Descriptions and Specifications

STATEMENT OF WORK

Statement of Work (SOW)

41270 Integrated Voice Networks Contract

1.0 SCOPE

This Statement of Work provides for technical support for the Integrated Voice Networks Branch (Code 41270) and the Integrated Voice Communications System (IVCS) Life Cycle Support Facility (LCSF) in performance of the In-

Service Engineering Activity (ISEA) duties, and other voice communications duties and assignments. The Branch’s scope of responsibility covers all phases of the life cycle for the communication systems and equipment assigned to the Naval Information Warfare Center Pacific (NIWC Pacific) Code 41270 by the program sponsor, NAVSEA 05 which includes intra and inter-unit communications by wired and wireless means. Due to the wide scope of responsibility, the technical support under this Statement of Work (SOW) shall vary significantly. Required technical support includes design, redesign, upgrade, and maintenance of electronic equipment and systems and their associated computer programs on board Navy ships and shore Government sites. A significant portion of the support includes the in-service maintenance and upgrade of the Integrated Voice Communications System (IVCS). Required engineering and technical support also includes the maintenance, and upgrade of software and databases.

This support will be for use by Code 41270, the Integrated Voice Networks Branch, for the systems listed below.

IVCS – Integrated Voice Communications System to include AN/STC-2(V), MarCom, AN/STC-3(V) and variants

Ship Service Telephone Systems (SSTS) – Integrated Voice Communications Network (IVCN), Integrated Voice Network (IVN), Avaya Definity 75, and Avaya Server based systems

Voice IC – Sound Powered and Announcing

Shipboard Wireless Systems to include AN/SRC-53(V), AN/SRC-55(V), AN/SRC-59(V), Personal Communications System (PCS), and IVN Wireless

2.0 APPLICABLE DOCUMENTS

The contractor is required to comply with NAVSEA Technical Specification 9090-310 (current version series), Alterations to Ships Accomplished by Alteration Installation Teams and the documents referenced therein.

Documents, which are applicable to a specific task, shall be designated in the task order. Documents to be used shall be the issue in effect at the date of award for each task order. In the event of a conflict between the text of this SOW and references cited herein, the text of this SOW shall take precedence. Nothing in the document however, shall supersede applicable laws and regulations, unless a specific exemption has been obtained.

2.1 MILITARY SPECIFICATIONS:

MIL-D-23140 (Series), Drawings, Installation Control, for Electronic Equipment

MIL-DTL-15024 (Series), Plate, Tags and Bands for Identification of Equipment, General Specification for

MIL-P-24534 (Series), Planned Maintenance System: Development of Maintenance Requirement

Cards, Maintenance Index Pages and Associated Documentation

MIL-PRF-29612 (Series), Training Data Products

2.2 MILITARY STANDARDS:

MIL-STD-130 (Series), Identification Marking of U.S. Military Property

MIL-STD-461 (Series), Requirements for the Control of Electromagnetic Interference

Emission and Susceptibility

MIL-STD-810 (Series), Environmental Engineering Considerations and Laboratory Tests

MIL-STD-882 (Series), Standard Practice for System Safety

MIL-STD-1686 (Series), Electrostatic Discharge Control Program for Protection of Electrical and Electronic Parts, Assemblies, and Equipment

2.3 MILITARY HANDBOOKS:

MIL-HDBK-237 (Series), Guidance for Controlling Electromagnetic Environmental Effects on

Platforms, Systems and Equipment

MIL-HDBK-419 (Series), Grounding and Shielding for Electronic Equipment and Facilities Basic

Theory

MIL-HDBK-454 (Series), General Guidelines for Electronic Equipment

MIL-HDBK-831 (Series), Preparation of Test Reports

2.4 OTHER DOCUMENTS:

Advanced Maintenance Control System (AMCS) System User Manual

EE-630-AC-OPI-0010 Operating and Servicing Instructions for COTS Dot Matrix Printer and Enclosure Assembly used with the AN/STC-2

EE105-AR-MMO-010 Vol. 1: General Information, Safety Precautions, Conditions Of Readiness, Operation, Functional Description, Scheduled Maintenance MarCom

EE105-AR-MMO-020 Vol. 2: MarCom Fault Isolation, Removal/Replacement

And Alignment Procedures, Parts List, Installation

EE105-AR-MMO-030, Vol. 3: MarCom Terminals, General Information

EE105-AR-MMO-040, Vol. 4: MarCom Accessories, General Information

Document No. K00010495, MarCom System Administration Terminal (SAT)

User Manual

AMERICAN SOCIETY OF MECHANICAL ENGINEERS (ASME)

ASME Y14.100 (Series), Engineering Drawing Practices

AMERICAN SOCIETY FOR TESTING AND MATERIALS (ASTM)

ASTM D 3951 (Series), Packaging, Commercial

ELECTRONIC INDUSTRIES ASSOCIATION (EIA)

EIA 310-D (Series), Racks, Panels, and Associated Equipment

INSTITUTE OF ELECTRICAL AND ELECTRONIC ENGINEERS (IEEE)

IEEE 100 Standard Dictionary of Electrical and Electronic Terms

IEEE 200 (Series), Reference Designations for Electrical and Electronic Parts and Equipment ANSI Y32.16, DOD adopted)

IEEE 260.1 IEEE (Series), Standard Letter Symbols for Units of Measurement (SI Units, Customary Inch-Pound Units, and Certain Other Units)

IEEE 315 (Series), Graphic Symbols for Electrical and Electronics Diagrams (Including

Reference Designation Class Designation Letters) (ANSI Y32.2)

National Electrical Code (NEC) (Series)

FEDERAL REGULATIONS

CFR 29 Code (Series) of Federal Regulations Title 29, Part 1910.1200 and Subpart Z Occupational Safety and

Health Standards

CFR 47 Code (Series) of Federal Regulations, Title 47

2.5 OTHER NAVY DOCUMENTS

SE105-AQ-MMO-010/STC-2(V), Technical Manual for Integrated Voice Communication System, Chapter

1(General Information), Chapter 4 (Scheduled Maintenance), Chapter 6 (Corrective Maintenance)

SE105-AQ-MMO-020/STC-2(V), Technical Manual for Integrated Voice Communications System Chapter 2

(Operation)

SE105-AQ-MMO-030/STC-2(V), Technical Manual for Integrated Voice Communications System

Chapter 3 (Functional Description)

SE105-AQ-MMO-041/STC-2(V), Technical Manual for Integrated Voice Communications System

Chapter 5 (Troubleshooting)

SE105-AQ-MMO-042/STC-2(V), Technical Manual for Integrated Voice Communications System, Logic Diagrams

SE105-AQ-MMO-050/STC-2(V), Technical Manual for Integrated Voice Communications System, Parts List

NAVSEA 61Z1-286-I-308 System Operator Manual for AN/STC-2(V)

SE105-AQ-MMO-060/STC-2(V), Technical Manual for Integrated Voice Communications System

Section I. Dial Terminal Maintenance Information

Section II. Jackbox Terminal Maintenance Information

Section III. Accessories Maintenance Information

NAVSEA Technical Specification 9090-310E (Series)

NAG 69D (Series) Information Systems Security Policy and Procedures for Fortezza Card CAW

SPAWAR EE000-BA-GYD-010 (Series) System Safety Checklist

SPAWAR Shore Plan System Descriptions and Equipment Lists, Version 1.1 (Series)

SPAWAR Notice 5300 (Series) Shore Installation Process Handbook (current version)

NAVAL SEA SYSTEMS COMMAND

NAVSEA 0967-LP-000-0110 (current version series) Electronic Installation and Maintenance Book: Installation

Standards

SD-2 (Series) Buying NDI

SD-5 (Series) Locating Off-The-Shelf Items

2.6 ADDITIONAL DOCUMENTS- CYBERSECURITY

Document Number Title

DoDI 5200.02

DoD Personnel Security Program (PSP) Reissues DoD Directive (DoDD) 5200.02 DoDM 5200.01 Volumes 1 through 4 DoD Manual – Information Security Program Manual dtd 24 Feb

DoDD 5205.02E DoD Directive – Operations Security (OPSEC) Program dtd 20 Jun 12 DoD 5205.02-M DoD Manual – Operations Security (OPSEC) Program Manual dtd 3 Nov 08 DoD 5220.22-M DoD Manual – National Industrial Security Program Operating Manual (NISPOM) dtd

28 Feb 06

DoDI 5220.22 DoD Instruction – National Industrial Security Program dtd 18 Mar 11 DoDI 6205.4 Department of Defense Instruction, Immunization of Other Than U.S. Forces (OTUSF) for Biological Warfare Defense dtd 14 Apr 00

DoDI 8500.01 DoD Instruction – Cybersecurity dtd 14 Mar 14

DoDI 8510.01

DoD Instruction – Risk Management Framework (RMF) for DoD Information

Technology (IT) dtd 12 Mar 14

DoD 8570.01-M

Information Assurance Workforce Improvement Program dtd 19 Dec 05 with Change 3 dtd 24 Jan 12

DoDD 8140.01 Cyberspace Workforce Management dtd 11 Aug 15

SECNAV M-5239.2 DON Cyberspace Information Technology and Cybersecurity Workforce Management and Qualification Manual dtd Jun 16

SECNAV M-5510.30 Secretary of the Navy Manual – DoN Personnel Security Program dtd Jun 2006

SECNAV M-5510.36 Secretary of the Navy Manual – DoN Information Security Program dtd Jun 2006

SECNAVINST 4440.34 Secretary of the Navy Instruction – Implementation of Item Unique Identification within the DoN, dtd 22 Dec 09

SECNAVINST 5239.19 Incident Response, dtd Mar 08

SECNAVINST

5239.20A

DON Cyberspace IT and Cybersecurity dtd 10 Feb 16

SECNAVINST 5239.3C DON Cybersecurity Policy, dtd 2 May 16

SECNAVINST 5510.30 DON Regulation – Personnel Security Program dtd 6 Oct 06

DON CIO

Memorandum Acceptable Use of Department of the Navy Information Technology (IT) dtd

12 Feb 16 SPAWARINST 3432.1 SPAWAR Instruction – Operations Security (OPSEC) Policy dtd 2 Feb 05

SPAWARINST 4440.12 Management of Operating Materials and Supplies (OM&S), Government Furnished

Property (GFP), Contractor Acquired Property (CAP), Property, Plant and Equipment

(PP&E), and Inventory

SPAWARINST

5721.1B

SPAWAR Section 508 Implementation Policy, 17 Nov 09

COMUSFLTFORCOM/

COMPACFLTINST

6320.3A

Commander US Fleet Forces Command/Commander US Pacific Fleet Instruction, Medical Screening For US Govt Civilian Employees, Contractor Personnel, and Guests prior to embarking Fleet Units, of 7 May 13

Navy

Telecommunications

Directive (NTD 10-11)

System Authorization Access Request (SAAR) - Navy

3.0 REQUIREMENTS

The following paragraphs identify requirements that are to be accomplished under this contract when specified by task orders (TO). The specific tasks to be accomplished and the schedule for accomplishment are not known at this time. Specific tasks and their schedules for delivery or completion shall be provided in individual task orders. These requirements are limited to the systems stated in SOW paragraph 1.0, and as assigned to Code 41270 by the program sponsor, NAVSEA 05.

3.1 Perform repair and maintenance of hardware and software systems to include the tasks delineated below.

3.1.1 Modification of program source code

3.1.2 Program updates by individual ship, based on analysis of Ship Change Documents (SCD), ShipAlts, and approved Engineering Change Proposals (ECP)

3.1.3 Program updates for individual ships, based on ship’s needs and requests

3.1.4 Program updates based on software trouble reports (STRS)

3.1.5 Program improvements based on In-Service-Engineering-Activity (ISEA) software redesign, maintenance support, in-service engineering, and life-cycle system analysis

3.1.6 Analysis of failure reports to identify pattern failures, potential software problems, documentation shortcomings, etc.

3.1.7 Program updates to the Advanced Maintenance Control System (AMCS) on the AN/STC-2(V) based on requests for improvement and maintenance

3.1.8 Modification of computer diagnostic programs in support of the maintenance of equipment and systems

3.1.9 Development of configuration databases and the generation of computer program updates that support planned ship configurations based on information from planning activities.

3.1.10 Review of engineering and technical documents such as technical manuals specifications, drawings, and reports for completeness, accuracy, and adequacy

3.1.11 Development and production of phone books based on ship’s configuration data and updates

3.1.12 Program designs, redesigns, and modifications.

3.1.13 In-depth software technical support for the computer programs and configuration databases. This support includes designing and developing prototype applications, collecting database information from Fleet and planning activities, ongoing maintenance, refinement, enhancement, and expansion of utility programs, configuration databases and their applications as required for life cycle support of communications systems.

Document all programs generated, modified, or maintained during the course of this contract, in accordance with standards specified in the Task Orders. Perform Software Support Agent (SSA) duties to include software configuration control of all programs generated or maintained under this contract. Support and/or perform independent verification and validation of assigned software.

3.1.14 Technical support for system assessment, troubleshooting (remote and on-site), repairs, distance support (remote technical guidance and troubleshooting), Help desk Support, and groom. These services shall be available within short notice, at the ship’s current location, in port or at sea. The contractor shall provide expertise for timely and necessary repairs to resolve Casualty Reports (CASREPs) and requests for technical assistance.

3.1.15 Hardware engineering support for requirements definition, design, redesign, engineering, analysis, and on-site field engineering services for upgrade and maintenance to include: SCDs for Ship Modernization, ECPs for future field changes; circuit card upgrades to avoid obsolescence; system component, circuit card assembly, and new circuit design or redesign, to provide communications upgrades or enhancements; investigation of hardware diagnostic problems, and recommendation for changes to computer diagnostic programs; designing and building specialized test equipment, used to assist in on-line fault diagnosis, and to be included as built-in-test equipment

(BITE) in the finished design; maintenance engineering analysis, interfacing with modern telephony and network communications systems, and backplane rewiring requirements. Design and develop field change kits to implement specified field changes.

3.2 Provide hardware and software upgrade of equipment and systems. This shall include site assessments and surveys, review of technical documents, drawings, specifications, etc., development of formal System Installation

Drawing (SID) packages for Subject Matter Expert Teams (SMET), development of installation plan, with drawings, removal of existing hardware, preparation of location to receive new equipment, physical handling and mounting of system hardware, set up and termination of associated wiring. The contractor shall configure associated software, oversee, test, and inspect the upgrade of equipment/systems, prepare logistic support package, and redline drawings and documentation, such as technical manuals, operation manuals, System Operational Verification or Acceptance

Test (SOVT), and OPNAV 4790CK Change Configuration documents.

3.3 Provide training support to include the development and revision of training curriculum. Conduct on the

Job Training for the operation and maintenance of voice equipment. Prepare for and conduct technical demonstrations, briefings. Brief personnel on new techniques, methods, equipment, and software changes.

3.4 Provide Integrated Logistics Support and configuration management to include procurement, warehousing, and inventory control.

3.5 Provide program management support. The contractor shall assist in the generation of technical and financial status, response to data calls, preparation for program reviews, generation of viewgraphs, and tracking of outstanding actions. The contractor shall also assist in generating marketing material.

3.6 Provide Information Assurance (IA) and Cybersecurity support. The contractor shall evaluate, develop and implement cyber vulnerability detection and assessment, cyber computer incident response, computer incident response handling including malware, vulnerability analysis and cyber related infrastructure interdependencies. The contractor shall generate Risk Management Framework (RMF) packages to include mitigations of vulnerabilities as a result of ACAS/Nessus scans and Security

Technical Implementation Guides (STIGs).

4.0 DELIVERABLES

Data deliverable shall have been reviewed IAW “DON Policy on Digital Product/Technical

Data, ASNRDA memo of 23 OCT 2004” and “Software Process Improvement Initiative

Contract Language, ASNRDA memo of 17 NOV 2006” and as specified in the CDRL, DD1423 for the individual Task Orders.

5.0 PERFORMANCE AND TRAVEL

5.1 PLACE OF PERFORMANCE

It is estimated that eighty percent (80%) of the work shall be performed at the IVCS Life Cycle Support Facility

(LCSF) located at Naval Base San Diego CA; five percent (5%) of the work shall be performed at the contractor’s facilities; and fifteen percent (15%) shall be performed at temporary work sites or ports located in the continental

U.S. or foreign countries. No travel costs will be incurred for work done in San Diego, CA. Additional or specific work locations will be specified on individual task orders.

5.2 TRAVEL

The contractor shall be required to travel worldwide for the performance of task orders. Travel is authorized as required to/from places of performance specified in each Task Order.

Contractor personnel are reminded of their obligation to safeguard the vital relationship our Nation has with Foreign

Countries. This includes personal conduct while performing under the contract and on one’s personal time because, at all times, you are viewed by our partners as a representative of the United States, our Navy, and NIWC.

Therefore, professional, courteous, and culturally aware conduct is necessary at all times. Inappropriate conduct, and especially intoxication and criminal behaviors, will not be tolerated. An all too common nexus for personnel misconduct while on travel is irresponsible consumption of alcohol. Intoxication increases your vulnerability to crime, injury, arrest, terrorism and espionage.

While traveling on official business, representing and performing in support of NIWC’s mission, all personnel, including military, civilian and contractors, are expected to act in a professional and responsible manner. In order to promote effective relationships with business partners and allied nations, it is incumbent on contractor personnel to follow local laws and employ courteous and culturally aware behavior. Inappropriate conduct may jeopardize important relationships for the United States Navy, SPAWAR, Naval Information Warfare Center (NIWC) Pacific and Naval Information Warfare Center (NIWC) Atlantic, and will not be tolerated.

The Contractor shall be familiar with and comply with the requirements, terms and conditions of the Status of

Forces Agreement between the United States and [Country].

If foreign travel is required, all outgoing Country/Theater clearance message requests shall be submitted to the Commanding Officer, Attn: Foreign Travel Team, Naval Information Warfare Center Pacific, 4201

Pacific Highway, Old Town Complex 2, Room 1656, San Diego, CA 92110 for action. A Request for

Foreign Travel form shall be submitted for each traveler, in advance of the travel, to initiate the release of a clearance message at least 30 days in advance of departure. Each Traveler must also submit a Personal

Protection Plan and have a Level 1 Antiterrorism/Force Protection briefing within one year of departure and a country specific briefing within 90 days of departure. Anti-Terrorism/Force Protection (AT/FP) briefings are required for all personnel (Military, DOD Civilian, and contractor) per OPNAVINST

F3300.53C. Contractor employees must receive the AT/FP briefing annually. The briefing is available at

Joint Knowledge Online (JKO): https://jkodirect.jten.mil (prefix): JS; course number: US007; title: Level https://jkodirect.jten.mil/

1 Anti-terrorism awareness training, if experiencing problems accessing this website contact ssc_fortrav@navy.mil. Forward a copy of the training certificate to the previous email address or fax to

(619) 553-6863. Sere 100.2 Level A code of conduct training is also required prior to Oconus travel for all personnel. Sere 100.2 Level A training can be accessed at http://jko.jfcom.mil (recommended), https://jkodirect.jten.mil/atlas2/faces/page/login/login.seam, recommend course: prefix: J3T: course #: A-

US1329, for civilian, military, and contractors. Personnel utilizing the JKO site must have a CAC. Other specialized training for specific locations may also be required contact the NIWC Pacific foreign travel team.

Finally, EUCOM has mandated that all personnel going on official travel to the EUCOM AOR must now register with the Smart Traveler Enrollment Program (STEP). When you sign up, you will automatically receive the most current information the State Department compiles about your destination country. You will also receive updates, including Travel Warnings and Travel Alerts. Sign up is one-time only, after you have established your STEP account, you can easily add official or personal travel to anywhere in the world, not just EUCOM.

http://travel.state.gov/content/passports/en/go/step.html.

6.0 GOVERNMENT FURNISHED MATERIAL/EQUIPMENT

6.1 All Government furnished resources will be identified on individual task orders.

6.2 If any material is to be moved to the contractor’s facility, or control of any government owned material is to be transferred to the contractor, it will be noted in individual task orders.

7.0 CYBERSECURITY COMPLIANCE

7.1 Cybersecurity (which replaced the term Information Assurance (IA)) is defined as prevention of damage to, protection of, and restoration of computers, electronic communications systems, electronic communications services, wire communication, and electronic communication, including information contained therein, to ensure its availability, integrity, authentication, confidentiality, and nonrepudiation. Contractor personnel shall perform tasks to ensure Navy applications, systems, and networks satisfy Federal/DoD/DON/Navy cybersecurity requirements.

7.2 Cyber IT and Cybersecurity Personnel

(i) The Cyberspace workforce elements addressed include contractors performing functions in designated Cyber IT positions and Cybersecurity positions. In accordance with DFARS Subpart 239.71, DoDD 8140.01, SECNAVINST

5239.20A, and SECNAV M-5239.2, contractor personnel performing cybersecurity functions shall meet all cybersecurity training, certification, and tracking requirements as cited in DoD 8570.01-M prior to accessing DoD information systems. Proposed contractor Cyber IT and cybersecurity personnel shall be appropriately qualified prior to the start of the contract performance period or before assignment to the contract during the course of the performance period.

(ii) The contractor shall be responsible for identifying, tracking and reporting cybersecurity personnel, also known as Cybersecurity Workforce (CSWF) and Cyber IT workforce personnel. CSWF Report requirements are explained in a following paragraph. Although the minimum frequency of reporting is monthly, the task order can require additional updates at any time.

(iii) Contractors that access Navy IT shall also follow guidelines and provisions documented in Navy

Telecommunications Directive (NTD 10-11) and are required to complete a System Authorization Access Request

(SAAR) – Navy form as documented below.

When a contractor requires logical access to a government IT system or resource (directly or indirectly), the required

CAC will have a Public Key Infrastructure (PKI). A hardware solution and software (e.g., ActiveGold) is required to securely read the card via a personal computer. Pursuant to DoDM 1000.13-M-V1, CAC PKI certificates will be mailto:ssc_fortrav@navy.mil http://jko.jfcom.mil/ http://travel.state.gov/content/passports/en/go/step.html associated with an official government issued e-mail address (e.g. .mil, .gov, .edu). Prior to receipt of a CAC with

PKI, contractor personnel shall complete the mandatory Cybersecurity Awareness training and submit a signed

System Authorization Access Request Navy (SAAR-N) form to the contract’s specified COR. Note: In order for personnel to maintain a CAC with PKI, each contractor employee shall complete annual cybersecurity training. The following guidance for training and form submittal is provided; however, contractors shall seek latest guidance from their appointed company Security Officer and the SPAWAR/NIWC Atlantic/NIWC Pacific Information Assurance

Management (IAM) office:

For annual DoD Cybersecurity/IA Awareness training, contractors shall use this site:

https://twms.nmci.navy.mil/. For those contractors requiring initial training and do not have a

CAC, contact the SPAWAR/NIWC Atlantic/NIWX Pacific IAM office at phone number

(843)218-6152 or e-mail questions to ssc_lant_iam_office.fcm@navy.mil for additional instructions. Training can be taken at the IAM office or online at http://iase.disa.mil/index2.html.

For SAAR-N form, the contractor shall use OPNAV 5239/14 (Rev 9/2011). Contractors can obtain a form from the SPAWAR/NIWC Atlantic/NIWC Pacific IAM office at or from the website: https://navalforms.documentservices.dla.mil/. Digitally signed forms will be routed to the IAM office via encrypted e-mail to ssclant_it_secmtg@navy.mil.

(iv) Contractor personnel with privileged access will be required to acknowledge special responsibilities with a

Privileged Access Agreement (PAA) IAW SECNAVINST 5239.20A.

7.3 Design, Integration, Configuration or Installation of Hardware and Software

The contractor shall ensure any equipment/system installed or integrated into Navy platform will meet the cybersecurity requirements as specified under DoDI 8500.01. The contractor shall ensure that any design change, integration change, configuration change, or installation of hardware and software is in accordance with established

DoD/DON/Navy cyber directives and does not violate the terms and conditions of the accreditation/authorization issued by the appropriate Accreditation/Authorization official. Contractors that access Navy IT are also required to follow the provisions contained in DON CIO Memorandum: Acceptable Use of Department of the Navy

Information Technology (IT) dtd 12 Feb 16. Use of blacklisted software is specifically prohibited and only software that is registered in DON Application and Database Management System (DADMS) and is Functional Area

Manager (FAM) approved can be used as documented in para 4.2.2. Procurement and installation of software governed by DON Enterprise License Agreements (ELAs) – Microsoft, Oracle, Cisco, Axway, Symantec, ActivIdentity, VMware, Red Hat, NetApp, and EMC shall be in accordance with DON CIO Policy and DON ELAs awarded.

7.4 Cybersecurity Workforce (CSWF) Report

The following Cybersecurity Workforce (CSWF) Report is required for all service contracts utilizing Cybersecurity

(i.e., Information Assurance) personnel supporting the DoD Global Information Grid (GIG) per DoD Instruction

8500.01. DoD 8570.01-M and DFAR’s PGI 239.7102-3 have promulgated that contractor personnel shall have documented current cybersecurity certification status within their contract. The contractor shall develop, maintain, and submit a CSWF Report monthly or as applicable at the task order level (Note: If initiated at the TO level, report not necessary at contract level). IAW clause DFARS 252.239-7001, if cybersecurity support is provided, the contractor shall provide a Cybersecurity Workforce (CSWF) list that identifies those individuals who are IA trained and certified. Utilizing the format provided in CSWF CDRL Attachment 1, the prime contractor shall be responsible for collecting, integrating, and reporting all subcontractor personnel. See applicable DD Form 1423 for additional reporting details and distribution instructions. Contractor shall verify with the COR or other government representative the proper labor category cybersecurity designation and certification requirements.

7.5 Information Technology (IT) Services Requirements

The paragraph only applies to IT contracts. Information Technology (IT) is defined as any equipment or interconnected system(s) or subsystem(s) of equipment, that is used in the automatic acquisition, storage, analysis, https://twms.nmci.navy.mil/ mailto:ssc_lant_iam_office.fcm@navy.mil http://iase.disa.mil/index2.html https://navalforms.documentservices.dla.mil/ mailto:ssclant_it_secmtg@navy.mil evaluation, manipulation, management, movement, control, display, switching, interchange, transmission, or reception of data of information by the agency. IT includes computers, ancillary equipment, peripherals, input, output, and storage devices necessary for security and surveillance. Electronic and Information technology (EIT) is

IT that is used in the creation, conversion, or duplication of data or information. EIT includes: telecommunication products, such as telephones; information kiosks; transaction machines; World Wide Web sites; multimedia

(including videotapes); and office equipment, such as copiers and fax machines.

7.5.1 IT General Requirements

When applicable, the contractor shall be responsible for the following:

Ensure that no production systems are operational on any RDT&E network.

Follow DoDI 8510.01 of 12 Mar 2014 when deploying, integrating, and implementing IT capabilities.

Migrate all Navy Ashore production systems to the NMCI environment where available.

Work with government personnel to ensure compliance with all current Navy IT & cybersecurity policies, including those pertaining to Cyber Asset Reduction and Security

(CARS).

Follow SECNAVINST 5239.3B of 17 June 2009 & DoDI 8510.01 of 12 Mar 2014 prior to integration and implementation of IT solutions or systems.

Register any contractor-owned or contractor-maintained IT systems utilized on contract in the

Department of Defense IT Portfolio Registry (DITPR)-DON.

Only perform work specified within the limitations of the contract/task order.

7.5.2 Acquisition of Commercial Software Products, Hardware, and Related Services

This paragraph applies only to the purchasing/hosting of commercial software. Contractors recommending or purchasing commercial software products, hardware, and related services supporting Navy programs and projects shall ensure they recommend or procure items from approved sources in accordance with the latest

DoN and DoD policies.

(i) DoN Enterprise Licensing Agreement/DoD Enterprise Software Initiative Program

Pursuant to DoN Memorandum – Mandatory use of DoN Enterprise Licensing Agreement (ELA) dtd

22 Feb 12, contractors that are authorized to use Government supply sources per FAR 51.101 shall verify if the product is attainable through DoN ELAs and if so, procure that item in accordance with appropriate ELA procedures. If an item is not attainable through the DoN ELA program, contractors shall then utilize DoD Enterprise Software Initiative (ESI) program (see DFARS 208.74) and government-wide SmartBuy program (see DoD memo dtd 22 Dec 05). The contractor shall ensure any items purchased outside these programs have the required approved waivers as applicable to the program. Software requirements will be specified at the TO/contract level.

(ii) DoN Application and Database Management System (DADMS)

The contractor shall ensure that no Functional Area Manager (FAM) disapproved applications are integrated, installed or operational on Navy networks. The contractor shall ensure that all databases that use database management systems (DBMS) designed, implemented, and/or hosted on servers and/or mainframes supporting Navy applications and systems be registered in DoN Application and

Database Management System (DADMS) and are FAM approved. All integrated, installed, or operational applications hosted on Navy networks must also be registered in DADMS and approved by the FAM. No operational systems or applications will be integrated, installed, or operational on the

RDT&E network.

7.5.3 Section 508 Compliance

This paragraph only applies to IT contracts. The contractor shall ensure that all software recommended, procured, and/or developed is compliant with Section 508 of the Rehabilitation Act of 1973, 26 CFR Part

1194 and pursuant to SPAWARINST 5721.1B of 17 Nov 2009. In accordance with FAR 39.204, this requirement does not apply to contractor acquired software that is incidental to the task, software procured/developed to support a program or system designated as a National Security System (NSS) or if the product is located in spaces frequented only by service personnel for maintenance, repair or occasional monitoring of equipment.

7.5.4 Software Development/Modernization and Hosting

This paragraph only applies to software development and modernization. The contractor shall ensure all programs utilizing this contract for software development/ modernization (DEV/MOD); including the development of IT tools to automate SPAWAR/NIWC Atlantic/NIWC Pacific business processes are compliant with DON Information Management/Information Technology (DON IM/IT) Investment Review

Process Guidance requirements. Contractors shall neither host nor develop IT tools to automate

SPAWAR/NIWC Atlantic/NIWC Pacific business processes unless specifically tasked within the task order or contract. The contractor shall ensure IT tools developed to automate SPAWAR/NIWC Atlantic/NIWC

Pacific business processes will be delivered with full documentation to allow non-proprietary operation and maintenance by any source. The contractor shall ensure all programs are submitted with proof of completed DEV/MOD certification approval from the appropriate authority in accordance with DON policy prior to contract/TO award. (DITPR-DON Update) *Note must be listed on Investment Review

Board (IRB) approved list.

7.6 Information Security

Pursuant to DoDM 5200.01, the contractor shall provide adequate security for all unclassified DoD information passing through non-DoD information system including all subcontractor information systems utilized on contract.

The contractor shall disseminate unclassified DoD information within the scope of assigned duties and with a clear expectation that confidentiality is preserved. Examples of such information include the following: non-public information provided to the contractor, information developed during the course of the contract, and privileged contract information (e.g., program schedules, contract-related tracking).

7.7 IT Position Categories

Paragraph (e) only applies when IT labor categories/positions are proposed. Pursuant to DoDI 8500.01, DoD

8570.01-M, SECNAVINST 5510.30, SECNAV M-5239.2, and applicable to unclassified DoD information systems, a designator is assigned to certain individuals that indicates the level of IT access required to execute the responsibilities of the position based on the potential for an individual assigned to the position to adversely impact

DoD missions or functions. As defined in DoD 5200.2-R, SECNAVINST 5510.30 and SECNAV M-5510.30, three basic DoN IT levels/Position categories exist:

Tier 5/5R: IT-I (Privileged access)

Tier 3/3R: IT-II (Limited Privileged, sensitive information)

Tier 1/1R: IT-III (Non-Privileged, no sensitive information)

Note: The term IT Position is synonymous with the older term Automated Data Processing (ADP) Position (as used in DoD 5200.2-R, Appendix…