Draft Performance Work Statement_(PWS)_DICE Lab Support.docx

PERFORMANCE WORK STATEMENT (PWS)

CONTRACT NO: [Basic MAC / SeaPort-NxG Contract Number TBD upon award]

TASK ORDER NO: N6600127FXXXX

DATE: 6 AUGUST 2026

PROJECT TITLE: DEVELOPMENT INTEGRATION CERTIFICATION ENVIRONMENT (DICE) LABORATORY SUSTAINMENT AND TEST SUPPORT

1.0 TASK ORDER PURPOSE

1.1 SCOPE

This is a severable, hybrid Firm-Fixed-Price (FFP) and Cost-Plus-Fixed-Fee (CPFF) / Level of Effort (LOE) task order. The purpose of this contract is to procure performance-based laboratory sustainment, physical plant operations, daily facility opening/closing operations, routine IT systems administration, cybersecurity compliance maintenance, test staging, and configuration tracking support for the Development, Integration, and Certification Environment (DICE) capability. DICE operates as an ashore enterprise service portfolio under the Tactical Systems Integration (TSI) Service Center (Code 53500) at Naval Information Warfare Center (NIWC) Pacific.

The contractor shall deliver a fully maintained, secure, operationally ready laboratory testbed environment across NIWC Pacific facilities (primarily Labs 160, 314, and 339). Contract performance is structured into two distinct operational tiers:

Core Laboratory Operations & Sustainment (FFP Monthly Recurring Service): Provides predictable day-to-day physical plant maintenance, daily facility open/close execution, copper/fiber cable plant management, routine IT systems administration, continuous ACAS vulnerability scanning, CeDAR monitoring, basic workstation imaging, configuration repository updates, and test event logistics. This core baseline is compensated on a firm-fixed monthly rate basis, subject to monthly performance verification by the Contracting Officer’s Representative (COR).

Technical & Test Event Surge Support (CPFF / LOE): Provides on-demand technical surge capacity to support unscheduled fleet emergencies, multi-deck test configurations, weekend/off-hours test conduct, or rapid testbed reconfigurations. Surge support shall only be executed upon formal written authorization and technical direction from the Contracting Officer (KO) / COR.

The contractor shall achieve performance outcomes across the following core functional areas:

Laboratory Infrastructure Sustainment, Physical Plant Operations & Cable Plant Management Facility Opening, Closing, Physical Security & Escort Operations Laboratory IT Support, Systems Administration & Routine Cybersecurity Compliance Testbed Staging, Test Validation & Event Enablement Configuration Management (CM) & Documentation Repository Tracking Technical & Test Event Surge Support (Optional CPFF / LOE) Project Management & Contract Data Reporting Security Scope: The contractor shall provide personnel holding appropriate security clearances up to TOP SECRET / Sensitive Compartmented Information (TS/SCI) as specified in the attached DD Form 254 to perform daily secure facility openings/closings, enter Sensitive Compartmented Information Facilities (SCIFs), manage secure cable plants, and support classified test enclaves.

1.2 BACKGROUND

The Tactical Systems Integration (TSI) is a Project within the Tactical Systems Integration and Interoperability Division (Code 53500) at NIWC Pacific. DICE functions as an enterprise-level ashore testing facility and service portfolio under TSI. DICE is designed to host and enable early, end-to-end integration and developmental testing of Navy Command, Control, Communications, Computers, Intelligence, Surveillance, and Reconnaissance (C4ISR) and Combat Systems in an operationally representative ashore environment prior to fleet deployment.

DICE facilitates interoperability testing, baseline validation, and test event execution for C4I systems integrating with afloat networks, including Consolidated Afloat Networks and Enterprise Services (CANES), Automated Digital Network System (ADNS), Global Command & Control System Maritime (GCCS-M), Distributed Common Ground System – Navy (DCGS-N), Naval Tactical Command Support System (NTCSS/OMAA), MQ-25 Stingray integration, and Command and Control Processor (C2P/Link-16) baselines. To support these integration efforts, DICE utilizes a resource-recovery service model providing physical lab workspaces, server racks, power distribution, and internal/external network test architectures across multiple laboratory facilities.

2.0 APPLICABLE DOCUMENTS

The contractor shall adhere to and comply with the following mandatory directives, instructions, standards, and publications in the performance of this task order:

DoDM 5200.01 (Volumes 1–3): DoD Information Security Program (Classification, Marking, Protection).

DoDI 5200.48: Controlled Unclassified Information (CUI).

DoDM 5200.02 / DoDI 5200.02: Procedures for the DoD Personnel Security Program (PSP).

DoD 5205.02-M / DoDD 5205.02E: DoD Operations Security (OPSEC) Program.

32 CFR Part 117: National Industrial Security Program Operating Manual (NISPOM Rule).

OPNAVINST 3432.1B (Series): DON Operations Security.

SECNAVINST 5510.30D: Department of Navy Personnel Security Program.

SECNAVINST 5510.36C: DON Information Security Program.

NAVWARINST 3432.1B: Operations Security (OPSEC) Policy.

NIWCPACINST 5500.1D: Security Manual (Physical Security, Opening/Closing Procedures).

DoD 8140.01 / DoDD 8570.01-M: Cyberspace Workforce Management (CSWF) Manual.

CANES HACSIM: CANES Hosted Application Connected Systems Integration Manual (current baseline).

DD Form 254: Department of Defense Contract Security Classification Specification (attached to contract).

3.0 PERFORMANCE REQUIREMENTS

The contractor shall provide all management, supervision, personnel, and technical capabilities necessary to satisfy the performance standards and outcomes defined herein.

3.1 LABORATORY INFRASTRUCTURE SUSTAINMENT, PHYSICAL PLANT & CABLE PLANT MANAGEMENT (FFP)

3.1.1 Cable Plant Performance & Installation: The contractor shall maintain full operational availability and physical integrity of structured copper (CAT-6) and optical fiber pathways across Labs 160, 314, and 339. The contractor shall pull, route, terminate, test, label, and document new cable drops within five (5) business days of work order receipt. All terminations shall comply with NIWC Pacific labeling standards and achieve zero signal degradation upon certified tester verification.

3.1.2 Server Racking & Space Management: The contractor shall assemble, modify, seismic-anchor, and maintain standard equipment cabinets, server racks (e.g., Rittal racks), chassis, and KVM consoles. The contractor shall maintain updated rack elevation drawings and optimize floor space to ensure laboratory capacity is available for incoming customer test decks without scheduling delays.

3.1.3 Power Distribution & UPS Sustainment: The contractor shall install, monitor, and sustain laboratory 115V and 220V Uninterruptible Power Supplies (UPS) and Power Distribution Units (PDUs). The contractor shall balance power loads across phases, conduct monthly battery health checks, replace failing battery cartridges within 24 hours of alert, and stage depleted batteries for hazardous waste recycling.

3.1.4 Material Control, Asset Inventory & Excessing: The contractor shall maintain 100% accountability of all laboratory hardware, test cables, diagnostic equipment, and tools within Government-designated tracking systems (WASP and OM&S). The contractor shall process, stage, and manifest decommissioned or defective equipment for DRMO excessing/disposition within ten (10) business days of decommissioning approval.

3.1.5 Facility Maintenance & Safety Inspections: The contractor shall conduct documented monthly laboratory safety checks, raised-floor structural inspections, and perimeter wall penetration surveys. The contractor shall ensure unobstructed 36-inch clearance around all electrical panels and Emergency Power Off (EPO) switches at all times.

3.1.6 Secure Facility Opening, Closing & Physical Security Procedures:

Designated, cleared, and certified contractor personnel shall execute daily physical opening and secure closing procedures for assigned NIWC Pacific secure laboratory facilities and SCIF spaces (primarily Labs 160, 314, and 339) in strict compliance with NIWCPACINST 5500.1D.

Daily Operational Hours & Arrival Schedule: Contractor personnel authorized for facility open/close shall arrive on-site no later than 0630 Monday through Friday to disarm alarms, unlock secure spaces, inspect perimeter seals, and establish initial operational readiness prior to standard core operating hours (0700). At the conclusion of the operating day, contractor personnel shall conduct a comprehensive end-of-day security sweep (verifying classified material stowed, spin-dial locks randomized, windows/hatches secured, and unescorted visitors departed), set alarms, and lock all exterior access doors no earlier than 1700.

Access Roster & Combination Management: The contractor shall maintain the facility open/close designation roster in coordination with the Government Facility Manager and Command Security. Contractor personnel shall strictly safeguard cipher combinations, spin-dial safe settings, and alarm codes. Any suspected compromise or lock malfunction shall be reported immediately to the Government Facility Manager and COR.

3.1.7 COMSEC Key Management Support: Designated contractor personnel holding active Level II COMSEC credentials shall perform cryptographic key loading, device re-keying, and physical COMSEC hardware safeguarding in compliance with Naval Communications Security directives.

3.2 LABORATORY IT SUPPORT, SYSTEMS ADMINISTRATION & ROUTINE CYBERSECURITY COMPLIANCE (FFP)

3.2.1 Daily Systems Administration & Availability: The contractor shall maintain operational availability () of laboratory core IT infrastructure, physical and virtualized servers (Windows Server, Red Hat Enterprise Linux, VMware ESXi/vSphere), and local switches supporting Labs 160, 314, and 339.

3.2.2 Routine Vulnerability Scanning & VRAM Uploads: The contractor shall execute scheduled twice-weekly ACAS/Nessus vulnerability scans across active laboratory enclaves (~480 assets across 60 hosts) and upload completed scan result files to VRAM within 24 hours of scan completion.

3.2.3 Patch Management & STIG Implementation: Under the direction of the Government Information System Security Officer (ISSO), the contractor shall test and deploy vendor patches, apply Information Assurance Vulnerability Alerts (IAVAs), and maintain DISA STIG baselines. The contractor shall maintain zero overdue critical/high IAVAs without an approved Government Plan of Action and Milestones (POAM).

3.2.4 CeDAR Monitoring & Endpoint Compliance: The contractor shall perform daily monitoring of the Central Dashboard for Assessment and Remediation (CeDAR), push weekly Trellix/antivirus definitions to unclassified and classified media scanning stations, and resolve endpoint quarantine or domain drop issues within four (4) business hours of notification.

3.2.5 Workstation Imaging & User Support: The contractor shall deploy approved RDT&E and SWAN desktop/laptop images, configure Group Policy Objects (GPOs), map network printers/displays, and provide Tier I/II helpdesk support for on-site users and visiting test teams, resolving standard user tickets within one (1) business day.

3.2.6 RMF Artifact Support: The contractor shall assist the Government ISSO by documenting routine hardware/software baseline updates, tracking POAM remediation timelines, and maintaining Port, Protocols, and Services Management (PPSM) matrices in eMASS and Vulnerator.

3.2.7 CSWF Credentialing: All contractor personnel executing cybersecurity scanning or privileged system administrator tasks shall maintain active DoD 8140.01 / DoDD 8570.01-M Cyberspace Workforce (CSWF) IAT Level II baseline credentials (e.g., CompTIA Security+ CE) and required operating environment certifications at all times.

3.3 TESTBED STAGING, TEST VALIDATION & EVENT ENABLEMENT (FFP)

3.3.1 Testbed Setup & Verification: The contractor shall configure physical network drops, patch panel cross-connects, DREN VLANs, and tactical CT switches to establish verified, isolated test topologies for scheduled customer test events (including CANES, ADNS, GCCS-M, AEGIS, MQ-25, NTCSS, and C2P/Link-16). All test setups shall be fully staged and validated at least two (2) business days prior to scheduled test commencement.

3.3.2 Test Working Group & Scheduling Participation: The contractor shall participate in recurring Test Plan Working Groups (TPWGs), Technical Exchange Meetings (TEMs), and event readiness meetings. The contractor shall coordinate laboratory space reservations, compile technical inputs for Event Readiness Review (ERR) slides, and track infrastructure action items.

3.3.3 Live Test Operational Support: During active test events, the contractor shall provide live on-site technical monitoring, troubleshoot Layer 1/2 connectivity faults, execute system power cycles, and extract real-time diagnostic logs upon request by the Government Test Director.

3.3.4 Data Transfer Agent (DTA) Operations: Authorized and appointed contractor personnel shall perform Data Transfer Agent (DTA) functions, executing secure data extractions and transfers between classified networks (SECRET/SCI) and approved removable media in strict accordance with Communication Tasking Orders.

3.3.5 Test Validation & Documentation Support: The contractor shall assist Government test directors with baseline validation checks against approved test matrices, log Test Observation Reports (TORs), and draft technical inputs for Event Management Plans (EMPs), Quick Look Reports (QLRs), and final Test Summary Reports (CDRL A003, CDRL A004, CDRL A005).

3.4 CONFIGURATION MANAGEMENT (CM) & REPOSITORY TRACKING (FFP)

3.4.1 Baseline Configuration Records: The contractor shall maintain accurate, up-to-date Configuration Management (CM) records of all laboratory physical assets, rack layouts, patch panel port mappings, and switch configurations.

3.4.2 Change Management (RFC Support): The contractor shall support the laboratory Request for Change (RFC) process by documenting proposed network changes, IP allocations, port/protocol requirements, and equipment layouts, and presenting status at DICE Configuration Control Boards (CCBs).

3.4.3 Technical Repository Maintenance: The contractor shall maintain and organize the DICE electronic document repository (e.g., CMPro, JIRA, Confluence), ensuring all facility drawings, cable run sheets, STIG checklists, SOPs, and COTS technical manuals are version-controlled and updated within five (5) business days of an approved engineering change.

3.5 TECHNICAL & TEST EVENT SURGE SUPPORT (CPFF / LOE)

3.5.1 Surge Activation & Technical Direction: When the Government requires technical effort exceeding standard core operating hours, emergency fleet casualty support, or unscheduled multi-deck test configurations, the Contracting Officer (or authorized COR within delegated limits) will issue a formal Technical Direction Letter (TDL) or Task Order Modification activating surge support under CLIN 0002.

3.5.2 Surge Task Execution: Upon surge authorization, the contractor shall provide qualified labor (e.g., Systems Administrators, Install Technicians, Test Engineers) at the pre-priced, fully burdened fixed hourly rates established in Section B. Surge labor shall be tracked, accounted for, and billed separately from the core FFP baseline.

3.6 PROJECT MANAGEMENT & CONTRACT REPORTING (FFP)

3.6.1 Programmatic Tracking: The contractor shall maintain internal management controls to ensure all PWS tasks, quality standards, and milestone delivery dates are achieved.

3.6.2 Monthly Status Reporting: The contractor shall submit the Contractor’s Monthly Status Report (CDRL A001) NLT the 10th calendar day of each month, documenting core task completion percentages, open work orders, open/close execution logs, ACAS scanning metrics, CeDAR compliance stats, WASP inventory updates, and any CPFF surge hours utilized.

3.6.3 Operational Task Schedule: The contractor shall maintain an active operational task tracker and Integrated Master Schedule (IMS), aligning upcoming customer test events with laboratory maintenance cycles.

3.7 OPTION PERIODS

The Performance Requirements for all Option Periods shall be identical to paragraphs 3.1 through 3.6.

4.0 PROPERTY REQUIREMENTS

In accordance with FAR Part 45, DFARS Part 245, and the NIWC Pacific Government Furnished Property Manual:

Government Furnished Property (GFP): GFP is not anticipated for this task order.

Government Furnished Information (GFI): GFI is not anticipated for this task order.

Government Property (Incidental): Incidental property is provided per FAR 45.000(b)(5). Contractor personnel performing on-site at NIWC Pacific facilities will utilize standard laboratory workspaces, office furniture, desktop computer systems, test fixtures, and local network connectivity incidental to the place of performance. Such property remains accountable to the Government and is not classified as GFP.

Government Furnished Facilities: Government facilities are not provided as accountable property.

Contractor Acquired Property (CAP): CAP is not anticipated for this task order.

5.0 TRAVEL

No long-distance travel is anticipated for the performance of this task order. All performance shall occur at NIWC Pacific government installations or designated contractor facilities in the local San Diego, CA area.

6.0 SECURITY REQUIREMENTS

The contractor shall strictly adhere to all security classification, personnel clearance, facility clearance, safeguarding, and handling requirements set forth in the attached Department of Defense Contract Security Classification Specification (DD Form 254).

All contractor personnel performing under this task order shall possess and maintain the required security clearances (up to TOP SECRET / SCI) and privileged access qualifications in accordance with the DD Form 254 prior to performing work on classified networks or entering designated secure spaces.

7.0 DELIVERABLES

The contractor shall deliver data items specified in the Contract Data Requirements List (CDRL), DD Form 1423, as summarized below (Not Separately Priced; cost included in FFP core sustainment):

8.0 PERFORMANCE REQUIREMENTS SUMMARY (PRS) & MONTHLY ASSESSMENT

In accordance with FAR 37.6 (Performance-Based Acquisition), the contractor’s performance will be evaluated by the COR prior to monthly invoice approval. Meeting the Acceptable Quality Levels (AQLs) listed in the table below is a mandatory prerequisite for payment of the monthly Firm-Fixed-Price (FFP) sustainment CLIN.