N68335-19-R-0086_Amendment_1.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

This amendment is to

1) Provide clarification and updates in Section C, J, L, M, Attachments P1 and P4

2) Provide extension to past performance information under Section L, Part A, Para. 4.0

3) There is no extension to the proposal submission date.

1. CONTRACT ID CODE PAGE OF PAGES

S 1 49

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 20-May-2019

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X N6833519R0086

X 9B. DATED (SEE ITEM 11)

02-May-2019

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

20-May-2019

CODE

NAVAIR LAKEHURST

NAVAL AIR WARFARE CENTER AD (LKE)

HWY 547, BLDG 562-3, ROOM 306

JOINT BASE MDL NJ 08733-5082

N68335 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

N6833519R0086

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION B - SUPPLIES OR SERVICES AND PRICES

The following have been modified:

OPTIONAL LABOR CLINS

Optional Labor CLINs within Period of Performance for LOE Labor

(a) The contract includes three optional Labor CLINs (0006 – 0008, 1006-1008, 2006-2008, and 3006-3008) associated with each period of performance for the level of services unknown at the time of the release of this RFP. Some, all, or none of the options may be exercised at the Government's discretion, to fulfill the requirements of the Government in the Statement of Work.

(b) The use of these options does not provide an extension to the length of time of the period of performance. The exercise of an optional Labor CLIN within the period of performance may be accomplished at any time during contract performance.

(c) The Government may exercise an Optional Labor CLIN within the period of performance without obligation to exercise succeeding year option(s).

(d) If the Government exercises one of the optional positions the contractor shall fill the positions within 60-calendar days of official notification from the CO, with the incumbent to report within the 60-calendar days.

SECTION C - DESCRIPTIONS AND SPECIFICATIONS

STATEMENT OF WORK

1.0 OVERVIEW:

1.1 SCOPE:

1.1.1. The F-35 Joint Program Office (F-35 JPO) requires knowledge based services in support of the Government of Japan via Foreign Military Sales case JA-D-SBC. The Japan F-35 Technology Security Support Team (TSST) is responsible for providing multi-disciplined security guidance and mentorship to include assisting the Japanese Ministry of Defense (JMOD), the Acquisition Technology & Logistics Agency (ATLA), the Air Staff Office (ASO), and Japanese Industries (hereinafter collectively referred to as the JMOD F-35 Security Program Participants) to develop and manage F-35 physical security, industrial security, personnel security, and cyber security programs. The TSST efforts shall include providing advice regarding programmatic security measures that deny unauthorized access to F-35 facilities, equipment, and resources, and protect personnel, information, and property from damage and/or loss of technology.

1.1.2. The TSST shall ensure that JMOD F-35 Security Program Participants understand and implement all required international policies and procedures as outlined in the Memorandum of Understanding (MOU) between the United States (U.S.) and the Ministry of Defense of Japan Concerning Security Measures for the Joint Strike Fighter Air System and Associated Ancillary Mission Equipment; Intelligence Community Directive (ICD) 705, Sensitive Compartmented Information Facilities; DoDM 5205.07, Special Access Program Security Manual Volumes 1-3; F-35 Project Security Instruction (PSI); and the F-35 Trek Vega (TEV) Access Management Control Plan (AMCP).

1.1.3. The Contractor shall assist the Japan F-35 Country Security Manager (CSM) to develop and manage all Japan unique security documentation (Standard Operating Procedures (SOP), Security Education and Training manuals, Operational Security (OPSEC) plans and secure facility construction plans to include a Fixed Facility Check List (FFCL)), as required. The Contractor shall develop and administer security knowledge-based training programs to strengthen and advanced the JMOD F-35 Security Program Participants’ knowledge, skill, and ability. Additionally, the Contractor shall assist the Japan F-35 CSM in developing and submitting all required documentation to the F-35 International Security Manager for review/approval prior to any facility construction, modification, or accreditation events. The Contractor shall provide Staff Assistance Visits (SAV) to all Japan F-35 locations and facilities to aid the local security managers with the management of local security requirements and documentation.

1.1.4. The Contractor shall assist JMOD F-35 Security Program Participants to ensure that all security policies and procedures are in compliance with Special Access Program (SAP), Classified Military Information (CMI), and Controlled Unclassified Information (CUI) in accordance with U.S Government security requirements. The Contractor shall ensure that all secured facilities meet the specified constructions requirements in accordance with ICD 705, DoD 5205.07 Vol 3, and DoD 5200.01 Vol 3. Support of this task requires routine in-country travel to various Contractor and JMOD facilities.

1.1.5. The Contractor shall be familiar with F-35 international security programs and be able to effectively discuss any outstanding issues or areas of concern pertaining to Japan. The Contractor shall provide the following international security assistance to JMOD F-35 Security Program Participants:

Work with each JMOD F-35 security manager to provide security guidance and mentorship and ensure all required F-35 tasks such as the proper submission of required annual inventories, self-inspections, and refresher training records to the Air Force Office of Special Investigation/Special Projects and F-35 JPO International Security Officer as outlined in the TEV AMCP are completed.

Review and assist the JMOD F-35 Security Program participants to develop and update all required security documents including the AMCP, PSI, Automated Information

System Security Plan, Standard Operating Procedures (SOPs), Security Education and Training Plans and Operational Security Plans, fixed facility checklists, and training documentation.

Assist the JMOD F-35 Security Program participants to ensure all appointed JMOD F-35 security managers are provided with the knowledge and skills necessary to build, implement, and manage security for the F-35 program.

Conduct SAVs to all F-35 facilities to assist all JMOD F-35 Security Program participants to prepare for Security Compliance Inspections as directed, to include reviewing all required security documentation; facility security and system accreditation records; annual self-inspections, equipment inventories, and initial and refresher training completed.

1.2 BACKGROUND:

The F-35 Joint Strike Fighter Program is a joint, multi-national program and is the Department of Defense's (DoD) focal point for defining affordable next generation strike aircraft weapon systems among the U.S. Air Force (USAF), U.S. Navy (USN), U.S.

Marine Corps (USMC), and U.S. allies composed of eight (8) cooperative international partners: the United Kingdom, Italy, Netherlands, Turkey, Canada, Australia, Denmark, and Norway. The program’s objective is to develop and deploy an uncompromised F-35 Air System (AS), a three (3) variant family of highly common and affordable 5th Generation strike fighter aircraft that meets the operational needs of the USAF, USN, USMC, and cooperative partner international services. The F-35 is also offered through Foreign Military Sales (FMS). The F-35 JPO security developed a Program Protection Plan (PPP), robust policies and procedures and established SAP facilities throughout the world. The F-35 JPO security team is responsible for ensuring that any new security challenges are appropriately identified and safeguarded in accordance with DoD regulations and specifications.

2.0 APPLICABLE DOCUMENTS:

The Contractor shall comply with the following regulations or publications as applicable. This list is not all-inclusive; additional U.S. Government (USG) or DoD policies may be identified as the program matures. Released documents will be properly marked indicating disclosure instructions:

Chairman of the Joint Chiefs of Staff Instruction (CJCSI) 6210.02B, Defense Information

System Network (DISN): Policy, Responsibilities, and Processes DoD Manual (DoDM) 5200.01, Information Security Program Volumes 1-4 DoDM 5200.02, Procedures for the Personnel Security Program DoD 5220.22-M, National Industrial Security Program Operating Manual (NISPOM) DoD 5205.02-M, DoD Operations Security (OPSEC) Program Manual DoD 8570.01-M, Information Assurance Workforce Improvement Program DoD Instruction (DoDI) 8580.1, Information Assurance (IA) in the Defense Acquisition

System

DoDI 8582.1, Security of Unclassified DoD Information on Non-DoD Information Systems

DoDI 8510.01, Risk Management Framework (RMF) for DoD Information Technology

(IT)

DoD Directive (DoDD) 5230.11, Disclosure of Classified Military Information to Foreign Governments and International Organizations

DoDD 2000.16, DoD Anti-Terrorism Standards DoDI 8500.1, Cyber Security DoDI 5000.2, Operation of the Defense Acquisition System DoDI 8500.2, Information Assurance Implementation DoDI 5200.39, Critical Program Information Protection with the DoD DoDM 5205.07, Management, Administration, and Oversight of DoD Special Access

Programs Executive Order (EO) 13526, National Security Classified Information EO 13556, Controlled Unclassified Information EO 12968, Access to Classified Information EO 13467, Reforming Processes Related to Suitability for Government Employment, Fitness for Contractor Employees, and Eligibility for Access to Classified National Security Information

EO 12829, National Industrial Security Program EO 13636, Improving Critical Infrastructure Cybersecurity Air Force Instruction 31-101, Air Force Integrated Defense Secretary of the Navy Instruction (SECNAVINST) 5510.30A, Department of Navy

Personnel Security Program SECNAVINST 5510.36, Department of Navy Information Security Program Joint Special Access Program Implementation Guide (JSIG)

3.0 REQUIREMENTS

3.1 GENERAL REQUIREMENTS

Information Technology: Contractor personnel shall maintain real-time voice and data transfer communications with the F-35 JPO during working hours whether at Contractor work site or on travel. See paragraph 3.5.

3.2 PLACE OF PERFORMANCE

The primary place of performance is within U.S. Government facilities at the following locations:

Hardy Barracks, Tokyo, Japan Yokota Air Force Base (AFB), Fussa, Japan

If exercised, the place of performance for the optional positions may be at Hardy Barracks or at Yokota AFB.

Contractors performing on-site support in Japan, will be provided access to U.S. Government furnished workspaces, telephones, printers, facsimile machines, copy machines, shredders, computers, and network access including web servers and applicable databases or other applications necessary to carry out assigned tasks.

The Contractor shall provide Program Management support at a Contractor Continental United States (CONUS) location.

3.3 MEETING SUPPORT

In support of the tasking outlined in this SOW, the Contractor shall have the capability to support meetings at Government facilities within Arlington, VA and in Japan at classification levels up to collateral SECRET.

3.4 CONTRACT STATUS REPORTING

This SOW includes specific contract deliverables required in Section 4.0, SERVICES TO BE PROVIDED. Details regarding these deliverables are included in Contract Data Requirements List (CDRL) DD Form 1423s.

3.5 WORK SCHEDULE

General: The Contractor shall provide the required services and staffing coverage during normal working hours for a standard 40-hour work week. Core CONUS hours are 0900- 1500 EST, Monday through Friday, except legal holidays. Contractors stationed in Japan shall adhere to local core-hours and may be required to work non-standard hours including weekends and/or holidays. Normal OCONUS work schedules shall consist of 40 hours per work week.

Holidays: The Government observes the following holidays:

New Year’s Day January 1

Martin Luther King Birthday 3rd Monday in January

Presidents Day 3rd Monday in February

Memorial Day Last Monday in May

Independence Day July 4th

Labor Day 1st Monday in September

Columbus Day Second Monday in October

Veterans Day November 11th

Thanksgiving Day Fourth Thursday in November

Christmas Day December 25th

Unless notified by the Contracting Officer’s Representative (COR)/Alternate COR (ACOR), the Contractor is permitted to observe the above holidays in accordance with its corporate policy. Contractors stationed in Japan are not permitted to observe additional Japanese holidays without taking leave.

Installation Closure: When Federal facilities are closed by the Government, or when Federal employees are officially excused from work due to a holiday or a special event, severe weather, a security threat, or any other Government facility related problem that prevents Federal personnel from working at the Government facility, Contractor personnel assigned to work at that facility in support of such Federal employees shall follow corporate policy concerning ad hoc or situational telework with proper notification to COR/ACOR.

While generally Contractor personnel may not perform work on-site at a Government facility without Federal personnel present, in very limited circumstances, work being performed by Contractor personnel may be deemed mission essential and performance of such mission essential work may be authorized to continue at the Government facility despite the facility being otherwise closed for normal operations. The circumstances permitting work being performed by Contractor personnel to be deemed mission essential are extremely limited and generally only apply to performance of efforts related to public health, safety, or matters related to national security. The cognizant contracting officer must concur with any determination that work being performed by Contractor personnel is mission essential.

3.6 TRAVEL AND MATERIAL

Travel: Travel will be allowable only when it is essential to the performance of tasks detailed in the Statement of Work (SOW). Reimbursement for travel performed shall be in accordance with NAVAIR Clause 5252.232-9509 Travel Approval and Reimbursement (TAR) Procedures. Invoiced travel costs may include general and administrative expenses, but shall not include profit. Temporary travel to other locations in support of program tasking is required. In accordance with NAVAIR Clause 5252.232-9509 Travel Approval and Reimbursement Procedures, travel within a 50-mile driving distance of the Contractor’s regular worksite is considered the Contractor’s official station and therefore not subject to reimbursement. Temporary travel locations may include CONUS and Outside Continental United States (OCONUS) locations. The Contractor shall follow the guidelines as prescribed in the Foreign Clearance Guide (https://www.fcg.pentagon.mil/fcg.cfm) for DoD-Sponsored Contractors. The Contractor shall ensure that all OCONUS travel is approved by the COR prior to submitting the respective country clearance request via the Aircraft and Personnel Automated clearance System (APACS) (https://apacs.milcloud.mil/apacs). Travel authorization requests shall be submitted for COR/ACOR approval 30 days in advance of required travel, when possible, but no less than 15 business days prior to travel unless in accommodation of last-minute Government requests. At no time will the Contractor commence travel without Government authorization.

Material: Purchase of materials shall be in accordance with NAVAIR Clause 5252.242-9515 (Variation) (JUN 2018), Restriction on the Direct Charging of Material. Invoiced material costs may include general and administrative expenses, but shall not include profit. The costs of general purpose business expenses required for the conduct of the Contractor’s normal business operations are not an allowable direct cost in the performance of this contract. General purpose business expenses include, but are not limited to, the cost for items such as telephones and telephone charges, reproduction machines, word processing equipment, personal computers and other office equipment and office supplies. All materials not depleted during the period of performance the contract shall become Government property upon completion of the contract.

3.7 MANAGEMENT OF CONTRACTOR PERSONNEL:

The Government will neither supervise Contractor employees nor control the method by which the Contractor performs the required tasks. The Contractor shall manage its employees and guard against any actions that are of the nature of personal services, or give the perception of personal services.

3.8 SUBCONTRACTORS:

Provisions stated herein shall be clearly and effectively communicated to all sub-Contractors providing support under this contract. All provisions of this SOW shall flow down to sub- Contractors providing support under this contract.

3.9 SECURITY:

Citizenship Requirements: Only US citizens may perform under this contract, unless waived.

If the Contractor cannot find qualified US citizens to perform the work, the Contractor shall submit a request to the Contacting Officer (CO) requesting approval to hire a non-U.S.

citizen. The Contractor shall not assume that the request will be approved. The request should include:

a. The individual's name, date and place of birth, position title, and current citizenship.

b. A statement that a qualified US citizen cannot be hired in sufficient time to meet the contractual requirements.

c. A statement of the unusual expertise possessed by the applicant.

d. A statement that access will be limited to a specific government contract (specify contract number).

e. A statement that the Contractor has obtained an export license for the information required to perform the contract.

Investigative Requirements: All Contractor personnel shall have a SECRET clearance at the time of award and maintain a minimum security clearance eligibility of SECRET throughout contract performance. The Contractor is responsible for ensuring that all personnel receive the requisite investigation and are favorably adjudicated in accordance with DoDM 5220.22.

Contractor employees who fail to meet security clearance requirements may not access classified information or perform sensitive duties. In such cases, the Contractor employee may not perform on the contract.

Contract Security Specification: The Contractor shall possess and maintain Facility Security Clearance commensurate with the contract DD Form 254, Contract Security Specification.

Information or data that the Contractor accesses shall be handled at the appropriate classification level. Unclassified information shall be handled in accordance with the appropriate designation (Controlled Unclassified Information; For Official Use Only;

Covered Defense Information). Distribution is authorized to the Requiring Office's Organization and supported activity only. Other requests for deliverables under this contract shall be referred to the COR/ACOR of this contract for approval.

3.10 SYSTEM AUTHORIZATION:

System Authorization Access Request (SAAR): All Contractor personnel requiring access to Government IT systems shall have an approved System Authorization Access Request (SAAR) on file, and complete required DoD Annual Information Assurance Training in accordance with NAVAIR Clause 5252.204-9505. New employees must submit their SAAR forms within thirty (30) days of their first day of work.

Common Access Cards (CAC) / Local Badges: Contractor CACs and facility specific identification badges will be issued by the Government to on-site Contractor personnel and shall be visible at all times above the waist while personnel are at the Government site. The Contractor shall furnish all requested information required to facilitate issuance of identification badges. All CACs and identification badges issued to Contractor employees shall be returned to the Government Security Department issuing the credential following completion of the contract, relocation or termination of an employee, or upon request from the COR/ACOR. The Government will provide the Contractor access to Government facilities, as required, for performance of tasks under this contract. Contractor personnel shall comply with all applicable security procedures and regulations for these facilities.

3.11 INFORMATION SECURITY:

Any work performed at the Contractor’s facility requires the Contractor to implement and maintain security procedures and controls to prevent unauthorized disclosure of classified information and CUI and to control distribution of CUI in accordance with DoDM 5200.01 Volume 4, DoD 5220.22-M and other relevant agency regulations and policies.

Marking: All information generated by the Contractor shall be properly marked. For Official Use Only information generated and/or provided under this contract shall be marked in accordance with DoDM 5200.01 Volumes 2 and 4. Technical information shall also be marked with appropriate Distribution Statements and Export Control warnings in accordance with DoDD 5230.24 and program Security Classification Guidance.

Public Release: No information pertaining to this contract shall be released for public dissemination, including posting to any social media sites such as Facebook or Twitter, unless it has been approved for public release by the appropriate US Government authority.

Loss, Compromise and/or Electronic Spillage of Classified or Controlled Unclassified Information: All instances of loss, compromise and electronic spillage of classified or controlled unclassified information shall be reported to the CO, COR, Technical Point of Contact (TPOC), and Government Security Office within 24 hours of the incident occurring.

3.12 OPERATIONAL SECURITY (OPSEC):

The Contractor shall comply with activity OPSEC program instructions, guidance and contribute to organization-level OPSEC efforts. The Contractor shall include OPSEC as part of its ongoing security awareness program and take all required activity OPSEC training. The Contractor shall protect identified critical information, controlled unclassified information and activities, which, if divulged, could further compromise classified or sensitive information or operations, or degrade the planning and execution of operations performed by the Requiring Office and Contractor in support of the mission.

While performing at F-35 JPO sites, the Contractor shall: (1) comply with facility OPSEC program instructions and contribute to organization-level OPSEC efforts; (2) include OPSEC as part of its ongoing security awareness program and take all required Agency training; (3) be responsive to the Supporting OPSEC Manager on a non-interference basis; and (4) protect sensitive unclassified information and activities, which could compromise classified information or operations, or degrade the planning and execution of operations performed by the Requiring Office and Contractor in support of the mission.

4.0 SERVICES TO BE PROVIDED

4.1 TASK 1 - PROGRAM MANAGEMENT SUPPORT

The Contractor shall provide program management support under this contract. This includes the management and oversight of all activities performed by Contractor personnel, including sub-Contractors, to ensure all SOW requirements are satisfied. The Contractor shall identify a PM by name, who shall serve as the primary interface and Point of Contact (POC) with the Government program authorities and representatives on technical program/project issues. The Contractor PM shall provide management, direction, administration, quality assurance, and leadership in support of tasks defined within this

SOW.

The Contractor shall facilitate Government and Contractor communications and all activities necessary to ensure the accomplishment of timely and effective support, performed IAW the requirements contained in this SOW. The Contractor shall use industry best-standards and proven methodologies that assure that all contract activities are identified, documented, and tracked. The contract will continuously be evaluated and monitored for timeliness and quality service by the Contractor.

The Contractor shall notify the COR, ACOR, and PCO in writing of any technical, financial, personnel, or general managerial problems encountered throughout the contract Period of Performance.

4.1.1 SUBTASK 1.1 – PROVIDE MATERIALS FOR PROJECT KICKOFF MEETING

The Contractor shall provide materials for a Project Kick-Off Meeting at the F-35 JPO, Arlington, VA, with location and date to be provided by the Government. This meeting will occur no later than 15 calendar days following contract award. The Government will create the agenda for the meeting and consolidate materials with input from the contractor. The meeting will provide an introduction between the Contractor personnel and Government personnel who will be involved with the contract. The meeting will provide the opportunity to discuss technical, management, and security issues, as well as travel authorization and reporting procedures.

The Project Kickoff Meeting deliverable shall be executed in accordance with this SOW, the CRDL, and associated clauses:

CDRL DI-ADMIN-81373/T, A001, Kick-Off Meeting Presentation Materials

The Contractor shall provide Kick-Off Meeting Minutes in accordance with this SOW, the CRDL, and associated clauses:

CDRL DI-ADMIN-81505/T, A006, Meeting Minutes

4.1.2 SUBTASK 1.2 – MANAGEMENT/ DATA REPORTS

4.1.2.1 MANAGEMENT REPORTS

The Contractor shall develop and provide the following reports in accordance with this SOW, the CDRL list, and associated clauses:

CDRL DI-MGMT-80368 A/T, A003, Monthly Status Report CDRL DI-ADMIN-81505/T, A006, Meeting Minutes CDRL DI-MGMT-80508 B/T, A007, Problem Notification Reports

4.1.2.2 FUNDS AND MAN-HOURS EXPENDITURE REPORT

The Contractor shall develop and provide a Monthly Expenditure Report (MER). The report shall include separate columns and totals for the current invoice period and the project to date. Spreadsheet submissions, in MS Excel format, are required. All cost data provided by the Contractor shall also be fully burdened including Overhead Charges, General and

Administrative charges, profit, fees. Substantiating documentation must be supplied upon request.

The Contractor shall develop and provide the MER in accordance with this SOW, the CDRL list, and associated clauses:

CDRL DI-FI-FNCL-80331 A/T, A004, Monthly Expenditure Report

C-TXT-ECMRA REQUIRED ENTERPRISE-WIDE CONTRACTOR MANPOWER

REPORTING APPLICATION (ECMRA) INFORMATION

The contractor shall report contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the task order via a secure data collection site. Contracted services, excluded from reporting are based on Product Service Codes (PSCs). The excluded PSCs are:

(1) W, Lease/Rental of Equipment;

(2) X, Lease/Rental of Facilities;

(3) Y, Construction of Structures and Facilities;

(4) D, Automatic Data Processing and Telecommunications, IT and Telecom - Telecommunications Transmission (D304) and Internet (D322) ONLY.

(5) S, Utilities ONLY;

(6) V, Freight and Shipping ONLY.

The contractor is required to completely fill in all required data fields using the following web address "https://doncmra.nmci.navy.mil".

Reporting inputs will be for the labor executed during the period of performance during each Government Fiscal Year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk, linked at "https://doncmra.nmci.navy.mil".

4.1.3 SUBTASK 1.3 – TRANSITION-OUT PLAN

A transition shall ensure minimum disruption to vital Government business. The Transition- Out Plan shall facilitate the accomplishment of a seamless transition from the awarded Contractor to the incoming Contractor/Government personnel at the expiration of the contract.

The Contractor shall develop and provide the Transition-Out Plan in accordance with this SOW, the CDRL list, and associated clauses within 60 days of request by the CO:

CDRL DI-MGMT-80790/T, A007, Transition-Out Plan

4.1.4 SUBTASK 1.4 -- PROGRAM MANAGEMENT PLAN (PMP)

The Contractor shall provide a PMP, including a start-up plan. The PMP is an evolving document that shall be updated over the course of the contract.

The Contractor shall develop and provide the PMP in accordance with this SOW, the CDRL list, and associated clauses:

CDRL DI-MGMT-80004 A/T, A002, Program Management Plan

4.1.5 SUBTASK 1.5 – PROGRAM MANAGEMENT REVIEWS (PMR)

The Contractor shall conduct formal PMRs to be held semi-annually as scheduled by the F- 35 JPO. PMRs may be held in conjunction with Security Working Groups. PMRs shall include the F-35 JPO PM, COR, other key Government personnel, as well as representatives from JMOD, ATLA, and the ASO at a location specified by the Government. The PMR will provide a forum for the U.S. and Japanese Government to interface with the Contractor team, and review progress, planning, and issues related to the contract.

The Contractor shall develop and provide the PMR Agenda and Presentation Material in accordance with this SOW, the CDRL list, and associated clauses:

CDRL DI-ADMIN-81373/T, A005, Program Management Review (PMR) Agenda and Presentation Materials

The Contractor shall develop and provide the PMR Meeting Minutes in accordance with this SOW, the CDRL list, and associated clauses:

CDRL DI-ADMIN-81505/T, A006, Meeting Minutes

4.1.6 SUBTASK 1.6 – TRIP REPORTS

The Contractor shall develop and provide Trip Reports in the following circumstances: a) all Temporary Duty (TDY) outside the greater Tokyo Metropolitan area completed by employees stationed OCONUS; b) all TDY completed by employees stationed CONUS, whether to another CONUS or OCONUS location (e.g. TDY to Japan completed by the Program Manager); c) all TDY from Japan to CONUS by employees stationed in Japan (e.g.

TDY to Arlington, VA for the purpose of attending a PMR or for training).

The Contractor shall develop and provide Trip Reports in accordance with this SOW, the CDRL list, and associated clauses:

CDRL DI-MISC-81368/T, A008, Trip Reports

4.1.7 SUBTASK 1.7 – COORDINATE ACTIVITIES FOR JAPAN DEPLOYMENT AND

REPATRIATION

The Contractor shall coordinate activities to deploy, repatriate and assist in-country support personnel associated with this effort except for inherently Governmental functions. The Contractor shall perform the following activities:

Provide data for CAC requests Provide data for Status of Forces Agreement (SOFA) Letter of Intent (LOI) Arrange for and obtain passports Arrange for travel to country Arrange for moving household goods to and from Japan Ensure personnel follow all Department of State/Center for Disease Control guidance on medical treatments or vaccinations needed prior to or during deployment Assist key personnel with securing in-country housing Arrange travel from country following conclusion of duties Submit necessary paperwork to the JPO for determination of designation of SOFA status.

Contractor employees in Japan working under the SOFA will complete and return to the Contracting Officer forms to JPO required by the Commander, U.S. Forces Japan, in which employees acknowledge their responsibilities as SOFA status members.

4.2 TASK 2: PROVIDE SECURITY SPECIALIST SUPPORT

4.2.1 GENERAL SECURITY TASKS

The Contractor shall provide Security Specialist Support; assisting in the management, leadership, and development of security programs under this contract. The Security Specialist Support shall provide multi-disciplined security guidance and mentorship to include assisting JMOD F-35 Security Program Participants. The Security Specialist Support shall establish liaisons with JMOD F-35 Security Program Participants Security Officers, provide guidance and mentorship in developing a security program to properly protect F-35 and other U.S.

technologies and classified information. The Security Specialist Support shall assist JMOD F-35 Security Program Participants to develop and write applicable security policies and procedures and implementing plans for Industrial Security, Physical Security, Information Security, Security Education and Awareness Training. This shall include prescribing security measures that deny unauthorized access to F-35 facilities, equipment, and resources, and protect personnel, information, and property from damage and/or loss of technology. The Security Specialist Support shall ensure that all JMOD F-35 Security Program Participants policies and procedures are updated, and all facilities meet required security standards. The Security Specialist Support shall coordinate all TSST security efforts with the Cyber Security Specialist and the Physical Security Specialist. Security Specialists Support are designated as Key Personnel.

4.2.2. SPECIFIC SECURITY TASKS

a. One key personnel (ref SOW 5.4) will serve as TSST lead and POC for USG and JMOD.

This includes coordination of meetings with JMOD F-35 Security Program Participants;

working with USG personnel to coordinate translation services; gathering monthly contract deliverable input from other in-country specialists and consolidating the input for the Program Manager; and assigning tasks to other TSST personnel. The Contractor shall identify one of the Security Support Specialists by name as the in-country team lead.

b. Guide JMOD F-35 Security Program Participants security personnel in the review and update of all F-35 security documents including, but not limited to, the AMCP, PSI, and SOP, ISSP or as directed by the JPO Japan International Security Manager

c. Assist JMOD F-35 Security Program Participants to develop new security documents for USG coordination and approval.

d. Provide, generate, and administer security-based mentorship/training to develop and improve JMOD F-35 Security Program Participants knowledge, skills, and abilities.

Mentorship or training shall include basic security concepts for information security, industrial security, personnel security, cyber security, Security Education Awareness Training (SEAT), and other security-related curricula as suggested by the Contractor and approved by the USG or as requested by the Government of Japan and approved by the USG. Train newly appointed JMOD F-35 Security Program Participants security managers.

The Contractor shall develop and provide Training Syllabi in accordance with this SOW, the CDRL list, and associated clauses:

CDRL DI-SESS-81521B/T, Training Program Structure Document

e. Provide each JMOD F-35 Security Program Participants security managers with the skills and knowledge necessary, including U.S. regulations identified in section 2.0, Fixed Facility Checklists, the Facility Requirements Document, the Facility Protection Document, facility SOP, ISSP, training materials, etc., to build and manage SAP facilities.

f. Perform SAVs at JMOD F-35 Security Program Participants facilities, as they are expanded, to ensure that all appointed security managers are prepared for a security compliance inspection by USG security authorities. During SAVs, the in-country lead shall:

i. Review the security policies and procedures, international SAP documentation, and accreditation paperwork to ensure it is current with pertinent U.S. regulations and the country’s AMCP.

ii. Review facility records to ensure files are current and accurate.

iii. Ensure that the CSM has completed the annual self-inspections, inventories, and refresher training.

g. Coordinate with SEAT POCs to provide training materials.

h. Assist JPO Security to update the Technology Assessment/Control Plan.

i. Assist newly appointed JMOD F-35 Security Program Participants security managers by reviewing and updating SOPs, computer security procedures, fixed facility checklists and training documentation as directed by the JPO Japan International Security Manager

j. Assist JPO by ensuring all newly appointed JMOD F-35 Security Program Participants security managers are provided with the tools necessary to build and manage SAP facilities.

k. Perform daily administrative duties in support of the F-35 Security program. This includes, but is not limited to, assisting JMOD F-35 Security Program Participants to process Program Access Requests PAR, ensuring all required documentation is submitted in a timely manner, and providing SAVs to aid JMOD F-35 Security Program Participants security managers with any concerns or issues or as directed by the JPO Japan International Security Manager.

l. Perform risk assessments to identify security threats to the F-35 program and transmit this information to the JPO Japan International Security Manager.

4.3 TASK 3: PROVIDE CYBERSECURITY SPECIALIST SUPPORT

4.3.1 GENERAL CYBERSECURITY TASKS

The Contractor shall provide Cybersecurity Specialist Support. The Cybersecurity Specialist shall provide multi-disciplined security guidance and mentorship to include assisting JMOD F- 35 Security Program Participants. The Cybersecurity Specialist shall possess demonstrated experience with U.S. federal government information assurance and cybersecurity programs, including certifying and accrediting IT systems using the RMF/JSIG. The Cybersecurity Specialist shall possess specific experience creating and maintaining various security documents, to include the Security Control Plan/Vulnerability Security Review, System Backup and Recovery Plans, and Plan of Action and Milestone Tables. The Cybersecurity Specialist will be entrusted to provide USG cybersecurity guidance to JMOD F-35 Security Program Participants.

The Cybersecurity Specialist shall coordinate efforts with the Security Specialist and the Physical Security Specialist. Cybersecurity Specialists are designated as key personnel.

4.3.2. SPECIFIC CYBERSECURITY TASKS

a. Assist JMOD F-35 Security Program Participants to plan, develop, implement, and maintain programs, policies, and procedures to protect the integrity and confidentiality of systems, networks, and data

b. Monitor the compliance of JMOD F-35 Security Program Participants with requirements for authorized F-35 information systems through on-site visits and email/telephone communication.

c. Train JMOD F-35 Security Program Participants appointed cybersecurity personnel on cybersecurity best practices, procedures, industry standards, processes, and protocols

d. Assist JMOD F-35 Security Program Participants to develop, administer, and conduct cybersecurity training.

e. Assist JMOD F-35 Security Program Participants Information Systems Security Manager (ISSM) to conduct risk assessments as required on authorized F-35 Information Systems IAW USG cybersecurity regulations and policies

f. Assist JMOD F-35 Security Program Participants to ensure IA-related components proposed for use in F-35 Information Systems comply with National Information Assurance Partnership (NIAP) or Common Criteria standards

g. Assist JMOD F-35 Security Program Participants to identify information protection needs for all Japan F-35 programs Information Systems (IS) to include the following.

i. Interpret and promulgate IS security requirements in accordance with applicable policies and requirements

ii. Review Assessment and Authorization packages at each step of the RMF/JSIG process and provide feedback addressing deficiencies prior to submittal to JPO Security Control Assessors

iii. Provide subject matter expert input regarding cybersecurity requirements to be included in statements of work and other appropriate acquisition documents

iv. Ensure that information system(s) design support the incorporation of DoD-directed information assurance vulnerability solutions, e.g., Assured Compliance Assessment Solutions

v. Review IS architectures and designs for compliance with the requisite DoD confidentiality, integrity, and availability categorization requirements

vi. Assess threats to and vulnerabilities of Japan F-35 program IS

vii. Identify, assess, and recommend cybersecurity-enabled products for use within an

IS; ensure recommended products are in compliance with the DoD evaluation and validation requirements such as NIAP and/or Common Criteria

viii. Ensure the implementation of security controls properly mitigate identified threats

ix. Assess the effectiveness of information protection measures used by the IS

x. Evaluate security architectures and designs and provide input as to the adequacy of security designs and architectures proposed or provided in response to requirements contained in acquisition documents

xi. Ensure security deficiencies identified during testing have been mitigated, corrected, or a risk acceptance has been obtained by the appropriate Authorizing Official or Designated Authorizing Official

h. Provide contract deliverable input to the TSST Lead

i. Perform administrative tasks as directed by TSST Lead and/or Program Manager

j. Assist the TSST lead with general security tasks as required

4.4 PHYSICAL SECURITY SUPPORT

4.4.1 GENERAL PHYSICAL SECURITY TASKS

The Contractor shall provide Physical Security Specialist Support under this contract. The Physical Security Specialist Support shall provide multi-disciplined security guidance and mentorship to include assisting JMOD F-35 Security Program Participants. The Physical Security Specialist Support shall establish liaisons with JMOD F-35 Security Program Participants Security Officers, provide guidance and mentorship in developing a physical and industrial security program to properly protect F-35 and other U.S. technologies and classified information. The Physical Security Specialist Support shall assist JMOD F-35 Security Program Participants to develop and write applicable security policies and procedures and implementing plans for Physical Security and Industrial Security. This shall include prescribing security measures that deny unauthorized access to F-35 facilities, equipment, and resources, and protect personnel, information, and property from damage and/or loss of technology. The Physical Security Specialist Support shall ensure that all JMOD F-35 Security Program Participants policies and procedures are updated, and all facilities meet required security standards. The Physical Security Specialist Support shall coordinate all TSST security efforts with the TSST team lead and Cyber Security Specialist. Physical Security Specialists Support are designated as Key Personnel.

4.4.2 SPECIFIC PHYSICAL SECURITY TASKS

a. Assist JMOD F-35 Security Program Participants to write security-specific SOPs for newly acquired office space to ensure that security requirements are met and to provide guidance for day-to-day operations

b. Provide guidance and assistance in drafting comprehensive Antiterrorism/Force Protection Plans and Emergency Action Plans (EAP)

c. Review draft JMOD F-35 Security Program Participants security plans pertinent to ensure physical security are met.

d. Assist USG to conduct compliance inspections of JMOD F-35 Security Program Participants facilities and procedures to ensure security standards are met.

e. Assist JMOD F-35 Security Program Participants by providing in-depth knowledge on best practices to operate, manage and maintain the integrity of SAP facilities (SAPF)

f. Collaborate with JMOD F-35 Security Program Participants facilities to execute comprehensive Antiterrorism/Force Protection Plans and EAP

g. Compose monthly reports tracking necessary metrics to maintain compliance with contract requirements

h. Perform risk assessments to determine security threats

i. Conduct site surveys as requested by the USG and/or JMOD at JMOD F-35 Security

Program Participants military and industrial facilities, and provide written recommendations on implementing physical security requirements

j. Assist JMOD F-35 Security Program Participants and make recommendations to use various security systems (e.g. CCTV surveillance, security guards, protective barriers, locks, access controls protocols, etc.) to improve the physical security program.

k. Provide contract deliverable input to the TSST Lead

l. Perform administrative tasks as directed by TSST Lead and/or Program Manager

m. Assist the TSST lead with general security tasks as required

5.0 PERSONNEL REQUIREMENTS

5.1 TRANSITION IN/ONBOARDING:

All base positions shall be filled with the incumbent reporting for duty within 45-calendar days of contract award.

If the Government exercises one of the optional positions the contractor shall fill the positions within 60-calendar days of official notification from the CO, with the incumbent to report within the 60-calendar days.

Prior to deployment to Japan, the Japan TSST Team Lead and/or Team Members to be stationed OCONUS shall report to a Government location in Arlington, VA for approximately one month to discuss standard operating procedures and US Government guidance and expectations. Exact timelines and location will be discussed at the Kick-Off Meeting.

5.2 DEFINITIONS:

The Contractor shall be responsible for employing personnel having the levels of education, professional, and technical experience noted in each labor category. Contractor personnel shall meet the minimum experience and education qualifications for the skill level to which they are proposed. Any qualifying experience shall have been obtained in the field of endeavor indicated by each of the labor category description. Qualifying experience must also have been performed during the past five years. In cases requiring experience of more than five years, at least four years of the total experience must be within the past five years.

Requirements for specific experience and types of educational degrees, including substitution allowances, are noted in individual labor category descriptions. All personnel shall be proficient with Microsoft Office applications (Word, Access, PowerPoint, and Excel).

All of the Professional services labor categories (all functional areas) specified in Part 1 of the Guide have three (3) levels of Experience and Education as follows:

JUNIOR: Not allowable under this effort.

JOURNEYMAN: A Journeyman within a labor category has 3 to 10 years of experience and a BA/BS degree. A Journeyman level person typically performs all functional duties independently.

SENIOR: A Senior level person within a labor category has over 10 years of experience and a MA/MS degree. A Senior level person typically works on high-visibility or mission critical aspects of a given program and performs all functional duties independently. A Senior level person may oversee the efforts of less senior staff and/or be responsible for the efforts of all staff assigned to a specific job.

Education as Experience: Higher education, above a labor category’s minimum, can be credited as years of experience, as long as the higher degree is within the same required field of study as the minimum degree requirement and/or directly relevant to the support for which the individual is performing under this contract. Unless otherwise indicated, experience cannot be used as a substitution for required education for key personnel.