NCIS DBD IT Support PWS - DRAFT.pdf

PART 1

GENERAL INFORMATION

1. General. This is a non-personal services contract to provide comprehensive, enterprise-wide information technology support services for Naval Criminal Investigative Service (NCIS), located at

Quantico, VA with operations in the Contiguous United States (CONUS) and Outside the Contiguous

United States (OCONUS).

1.2. Description so Services. The contractor shall provide personnel as requires to include subject matter experts necessary to provide support to maintain NCIS IT enterprise. The government will exercise supervision or control over the contract service providers performing the services identified in this

Performance Work Statement (PWS). Such contract service providers shall be accountable solely to the contractor who, in turn, is responsible to the Government.

1.3. Background. The Naval Criminal Investigative Service (NCIS) is the Department of the Navy’s

(DON) agency responsible for conducting criminal investigation and executing law enforcement (LE), counter-terrorism (CT), and counterintelligence (CI) efforts in support of the Navy and Marine Corps. It is comprised of approximately 2,500 federal employees, 700 which serve at HQ and the remaining staff serve at offices worldwide. NCIS has the primary investigative and CI jurisdiction within the DON, and exclusive investigative jurisdiction in non-combat matters involving actual, potential, or suspected criminal, terrorism, sabotage, espionage, and subversive activities against the Navy/Marine Corps.

Additionally, NCIS serves as DON’s liaison with Federal, state, local law enforcement, and intelligence agencies. NCIS provides the DON with threat status and warnings associated with terrorist, criminal, cyber, and counterintelligence activity throughout the world and is the only DON organization responsible for aggregating and analyzing the national intelligence and LE information necessary to provide these warnings. Due to worldwide changes and increased threats to the DON, NCIS must increase its overall capability to provide DON Commanders with a timely and accurate common operational picture (COP) of security threats and vulnerabilities in and around existing naval facilities. To maintain mission command, NCIS requires support for continued operations and future development of the information technology systems and capabilities necessary to support the agency’s global footprint. NCIS requires reliable, uninterrupted availability of its unclassified and classified networks, hardware, software, and specialized products and services to enable the distribution of mission-critical data and information to

191 field offices in 41 countries across the globe.

The Digital Business Directorate (DBD) supports the NCIS core mission areas to investigate and defeat criminal, terrorist, and foreign intelligence threats by planning for and providing services through appropriate use of the people, equipment, technology, and infrastructure resources of the United States

(U.S.) Navy and Marine Corps. The DBD strives to address the many critical IT challenges the agency faces, and provide optimum quality customer service to NCIS’ unique, highly-trained, and effective team of Special Agents, investigators, forensic experts, security specialists, analysts, and professional staff in a fiscally and resource-constrained environment. As a result, the DBD requires the contractor support to provide a comprehensive, enterprise-wide information technology support services solution to assist

NCIS in meeting its responsibilities under Federal legislation, Executive Orders, and related authorities.

Meeting the information technology requirements of a growing and highly dynamic organization requires efficient and effective performance of complex tasks. The DBD continuously evolves its capabilities to provide the agile support necessary to meet changing global dynamics, and adapts new capabilities to support a variety of challenging combat and expeditionary missions. NCIS must optimize current support efforts to ensure that decision-makers have direct access to critical real time information. Enhancing collaboration between our internal cyber partners, external partners, customers, and stakeholders is important. The DBD workforce must become more agile and adaptable, and operate within the scope and complexity of today’s global threat environment. As such, the contractor supporting the directorate must be willing and able to quickly adapt to unforeseen changes required to support NCIS’ constantly evolving mission requirements.

NCISHQ is located in a secure office building with controlled access. The working environment typically requires controlled access to classified information and many of the work locations are within Sensitive

Compartmented Information Facilities (SCIF) and in some cases, Special Access Program (SAP) facilities. The equipment supported by the services included in this PWS are used to support LE, CT, and

CI operations worldwide.

1.4. Scope. This PWS for Digital Business Directorate IT Support Services (DBD ITSS) describes the technical support services required by the Naval Criminal Investigative Service (NCIS) at its headquarters

(HQ) in the Russell Knox Building, Quantico, Virginia, as well as its fourteen (14) major field offices around the world and 160 global locations with highly diverse infrastructures. The contractor shall provide comprehensive, enterprise-wide information technology support services to NCIS. The support under this PWS includes project management, engineering, sharepoint support, software development and maintenance, data management, systems analysis and integration, cybersecurity, program management, daily operations, and Service Desk support. Deployment of capabilities and support of systems at NCIS locations worldwide is required.

Over the course of this contract (five-year period) the DBD will be transitioning NCIS business services and mission systems/applications from on premises operations to a DON established virtual private cloud

(VPC). This VPC will be specifically for NCIS use. The VPC will be set up on the Navy Flank speed MS

Azure based cloud. NCIS will utilize the DON Nautilus capabilities running on Flank speed across unclassified and classified domains (NIPRnet, SIPRnet and JWICS). NCIS will continue to maintain the on-premises services until the transition is complete per network domain. The contractor and government workforce must coordinate throughout this transition. It is essential that the required skill sets are in place at the right times to transition to and maintain operations in the cloud environment. The expectation is that as the cloud migration completes select cloud skilled on-premises personnel will migrate to cloud or be transitioned out. The goal is to have cloud specific skill sets at the start of the contract that increase and level off over the five-year timeframe.

Within the VPC NCIS will continue to develop mission applications along with managing accounts, providing Service Desk T1/T2 support to customers, review and manage cloud cost models for billing, track and manage assets owned by NCIS and manage network assets. NCIS currently utilizes Microsoft products on premises such as Outlook for email, SharePoint for collaboration and a few applications and

MS Office products including MS Visio. During the transition NCIS personnel will begin using Outlook in the cloud, SharePoint Online and other O365 products and capabilities including PowerApps and continue utilizing MS Teams. Mobile devices will transition to be managed by InTune in the VPC.

NCIS requires the contractor to be able to keep on premises operations steady while planning and migration is occurring to move to the cloud. The only exception is the IT Commons Services Unit support which will continue their scope of work for the MCIOs on premises at the Russell-Knox

Building.

1.5. Period of Performance. The contract period of performance shall be for 60 months consisting of a 12-mong base period and four 12-month option periods.

1.6. General Information.

1.6.1. Recognized Holidays.

The federally recognized holidays are:

New Year’s Day Labor Day

Martin Luther King Jr.’s Birthday Columbus Day

Presidents Day Veterans Day

Memorial Day Thanksgiving Day

Juneteenth National Independence Day Christmas Day

Independence Day

When a holiday falls on a non-workday, Saturday or Sunday, the holiday is typically observed on

Monday (if the holiday falls on a Sunday) or Friday (if the holiday falls on Saturday). Unless otherwise specified, the contractor shall observe the Federal holidays as established above. Access to Government spaces will not be available without prior authorization from the COR on weekends or when the facility is closed due to local or national emergencies, administrative closings, or federally observed holidays. The contractor shall provide a sufficient number of fully trained and qualified employees to meet all reporting requirements and deliverables. The contractor must at all times maintain an adequate workforce for uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed. In addition to the above reference recognized Federal Holidays, the Government observes the following days that contractor personnel will not be required to report to work:

- any other day designated by Federal Statute,

- any other day designated by Executive Order,

- Presidential Inauguration Day, (In the Washington D.C. Metropolitan Area) or

- any other day designated by Presidential Proclamation.

1.6.2. Hours of Operations:

Monday through Friday (excluding federal holidays) from 0600 through 1800 (core hours 0800 through

1500) Eastern Standard Time (EST).

1.6.3. Place of Performance.

The primary place of performance for this effort shall be:

NCIS Headquarters

Russell Knox Building (RKB)

27130 Telegraph Road

Quantico, VA 22134

1.6.4. Security Requirements. Contractor personnel performing work under this task order shall have a

Top Secret (TS) Clearance, eligible for Sensitive Compartmented Information (SCI) read-on and access prior to starting performance and must maintain the level of security required for the duration of the contract. Personnel must sign a Non- Disclosure Agreement in accordance with DFARS 227.7103-7. The contractor will be bound by its individual employee’s NDA’s. Failure of any of its employees to comply with the terms of the NDA will be considered a breach of contract and could result in a termination for default.

Appendix D “Position Descriptions and Personnel Qualifications” of this PWS identifies those personnel required to be eligible and adjudicated to Top Secret/Sensitive Compartmented Information (TS/SCI) level at start. Personnel must be eligible and adjudicated to the SCI level within six (6) months of start.

Some contractor personnel may be required to pass a Counterintelligence (CI) Polygraph (CI Poly). These positions will be identified after award. The Contractor shall submit adequate clearance packages within ten (10) calendar days of identification of increased security requirements. See DD Form 254 provided as a separate attachment to the task order.

1.6.4.1 Additional Security Requirements: This effort requires access to classified Government information at U.S. Government facilities. Physical, personnel, information, and operational security measures are part of the security specifications as outlined in the DD Form 254 and the contractor shall comply with Defense Intelligence Agency Manual (DIAM) 50-5 and other Government security regulations, manuals, and directives. The Government reserves the right to direct any contractor employee to be removed for substandard performance, directly or indirectly, whenever there is probable cause to believe that such action is warranted in the interest of national security.

1.6.4.2 Physical Security. The contractor shall coordinate clearance issues for personnel supporting this task order with NCIS SSO. The contractor is responsible for safeguarding all Government equipment, information, and property provided for contractor use. The following list of personal items is prohibited inside NCIS’ workspaces at all times (list is not all inclusive and is subject to change): cell phones/

Blackberries, portable USB memory drives, other portable USB devices, external hard drives, cameras, MP3 players, scanning devices, digital flashcards and disks, personal laptop computers, camera/USB watches, and wireless transmitters.

1.6.4.3 Common Access Card (CAC). All contractor personnel must obtain a Government-issued CAC.

At least one workweek before reporting to NCIS, the contractor’s security officer will provide a signed memorandum to the Government Trusted Agent at the supported organization with the below information. The information will be used by the Government Trusted Agent to sponsor the contractor in the Trusted Associate Sponsorship System (TASS).

1.6.4.5. DOD Directive 8140.01 (Formerly DoDD 8570) Cyberspace Workforce Management Program

Compliance: All contractor support personnel requiring access to IT systems will have the appropriate security clearance and will be granted access according to their security clearance, need-to-know, and their position or category. Additional position category and investigation guidance are available in DoD

Instruction 5200.02 (DoD Personnel Security Program).

1.6.4.5.1. Special Qualifications. Contractor personnel performing cybersecurity functions under this

PWS must meet the requirements of the DON Cyber IT/Cybersecurity Workforce (CWF) program, managed according to SECNAV M-5239.2. This includes:

• CWF Compliance: All personnel performing functions specified in SECNAV M-5239.2 must transition to the Cyber IT/CWF structure. Contractors will comply with the latest DoD and DON

CWF guidance, including SECNAV M-5239.2 Appendix 4.

• Specialty Code Alignment: Positions will be designated Cyber IT/CWF and assigned a specialty code within one of five categories: Security Provision, Operate and Maintain, Protect and Defend, Investigate, Oversee and Govern. Personnel in "Investigate" and "Protect and Defend" categories are responsible for proactive threat hunting.

• Baseline Certification: Contractor personnel must possess a baseline certification prior to reporting for duty.

• Specialty Training: Personnel are allowed six months from reporting to acquire specialty code-related training. All training costs are the sole responsibility of the contractor employee and/or contractor employer.

• Deviation/Waiver Process: Any deviation from or waiver of these qualifications requires review by the Cyber IT/CWF PM and approval by the Chief Information Security Officer (CISO) or

Deputy CISO on a case-by-case basis.

1.6.4.6. Mandatory Training. All persons requiring routine access to NCIS facilities or automated information networks, or to perform official travel on behalf of NCIS as part of this task order must complete initial Security Education and Awareness, and Level I Antiterrorism Awareness Training provided by NCIS as part of the required, initial in-processing. The DoD 5220.22-M, NISPOM, requires the contractor to provide security education and training to all cleared employees at least annually.

Refresher training shall reinforce the information provided during the initial security briefing and shall keep cleared employees informed of appropriate changes in security regulations. The contractor shall provide the COR a form of acknowledgement that their employees have received refresher training.

1.6.5. Post Award Conference/Meetings. The contractor shall attend any post-award conference convened by the contracting activity per FAR Subpart 42.5. The post-award orientation shall be held within 15 calendar days of award. The contractor shall schedule and conduct this meeting, in coordination with the

COR and KO. No later than three business days before the orientation, the contractor shall provide the

COR and KO with the briefing slides. Within three business days after the meeting, the contractor shall provide the minutes to the COR and KO. The purpose of the post-award orientation is to: 1) discuss any unique characteristics of the requirement(s); 2) identify stakeholders' roles and responsibilities; and 3) establish a common understanding of cost, schedule, and performance expectations.

Remote and in-person meetings to be determined at the government’s discretion. Advanced notice concerning this decision will be coordinated with the contractor in a timely manner. If the meetings require travel, then all allowable travel expenses will be approved as ODCs. The KO, COR/TTM, and other Government personnel, as appropriate, shall meet monthly with the contractor to review the contractor's performance. At these meetings, the Contracting Officer/COR/TTM will apprise the contractor of how the Government views the contractor's performance and the contractor will apprise the

Government of problems, if any, being experienced. The contractor shall provide meeting minutes within three business days of the initial and follow-on meetings as coordinated and scheduled with the KO and

COR. Appropriate action shall be taken to resolve outstanding issues. Contractor employees in attendance are authorized to charge labor as applicable to the task order as well as travel expenses, if required, as

ODCs.

1.6.6. Surge Support. The Government may require increased support for the defined task areas of the

PWS. Surge support is not a contractual guarantee. If the Government determines that an increased quantity of support is required for the task areas defined in the PWS, the contractor will be notified by the

KO. Surge support is defined as increased level of hours to support non-regular mission requirements.

Surge support may require movement of or additional contractor support, contractor travel or movement.

The contractor shall be prepared to provide additional contractor support or increased hours.

If surge is required, the KO will provide written notice to the contractor at least 30 calendar days in advance of the requirement and the notification will include impacted performance locations, durations, specific services required, effected labor categories, suggested number of personnel and any other surge unique information. Notification will specify if the surge requires additional contractor support or additional hours for the current labor force or both.

The contractor shall confirm the Government’s notification within 48 hours from the time of notification.

Surge support will be provided at the labor rates proposed and found fair and reasonable at time of TO award for the applicable period of performance.

1.6.6.1. Surge Proposal. The contractor shall provide the Government a proposal for surge support within

45 days from the time of notification. The contractor will ensure that the proposed solution does not delay the execution of the mission or cause mission failure. Surge support will be provided at the same labor rates proposed and found fair and reasonable at the time of task order award for the applicable base or option period. Upon validation of an internal surge requirement or receipt of the contractor’s proposal, the

KO will provide a written approval of the surge support to the contractor. A bilateral modification will be issued that updates the Technical Exhibit and incorporates the surge support efforts. Under emergency circumstances, the KO may issue modifications by e-mail to the contractor. The KO must confirm the emergency modification or order in writing within 14 calendar days. If the contractor proceeds with work without KO written approval, all costs associated with the surge support will be unallowable and therefore not reimbursed.

1.6.6.1.1. Surge Work Hours. If implemented, contractor surge work schedules will be established and monitored based on mission needs, and be documented by the contractor PM. If the contractor proceeds without approval, contractor’s invoice for surge hours worked are considered unallowable and will not be reimbursed.

1.6.7. Contractor Travel. The Contractor may be required to perform local and temporary duty (TDY) non-local travel (both CONUS and OCONUS) in the performance of this contract. The Contractor shall provide necessary information for compliance with travel policies and requirements. The Contractor will be authorized travel expenses consistent with the substantive provisions of the Joint Travel Regulation

(JTR).

The Contractor shall submit all travel requests in writing to the COR for approval at least one (1) week prior to the date that the required travel is scheduled to begin. With the approval of the COR, contractor personnel are authorized to use Government vehicles to support contract requirements in accordance with

41 CFR 101-38.301-1. Emergency (last minute) travel requirements shall also be coordinated as indicated above by telephone or email as necessary.

1.6.7.1. Local Travel: Local travel is considered travel within a 50-mile radius from the home station to perform official duties such as attending meetings, conferences, etc., and will be paid only from the duty location to the destination and return. Local travel as tasked by the Government (meetings at other

Government activities or contractor facilities, for example) will be reimbursable at the applicable Federal

Travel Regulation (FTR) rate for Privately Owned Vehicles (POV). Reimbursement will not be provided for POV travel between the contractor's corporate or regional offices and Quantico, Virginia, NCIS

Headquarters, or any Department of the Navy office within the MDW.

1.6.8. Other Direct Costs (ODC). ODCs are expenses other than the direct labor and must be directly related to a service being offered. ODCs may include, but are not limited to items such as, travel, break-fix (replacement and repair parts), materials, software, hardware, equipment, and incidentals as approved to perform the requirements. Contractor ODCs must be approved by the COR in writing before incurring costs. The Contractor shall bill purchases back to the Government as Other Direct Costs (ODCs) in a fully itemized fashion and provide original copies of all documentation.

Federal contracting laws and regulations apply to all Contractor open market purchases of hardware and software under this contract. Prices must be determined fair and reasonable from three competitive sources and are subject to Government audit. The Contractor shall maintain records documenting competitive sourcing, in strict compliance with the competition requirements set forth in the Federal

Acquisition Regulation (FAR), for all material and ODC purchases. The Contractor shall provide such documentation upon request from the Government to verify that the Contractor complied with the competition requirements set forth in the FAR.

Section 508 of the Rehabilitation Act requires Federal agencies to make their electronic and information technology accessible to people with disabilities. This applies to all Federal agencies when they develop, procure, maintain, or use electronic and information technology. All electronic and information technology (EIT) procured through this contract must meet the applicable accessibility standards specified in 36CFR1194.2, unless an agency exception to this requirement exists.

1.6.9. Transition Phase-In/Phase-Out.

1.6.9.1. Transition Phase-In. The Transition Phase-In period is 90 calendar days. The contractor shall develop a Transition-In Plan (TIP) that describes how the skilled team will assimilate NCIS operations, equipment, and technologies. The TIP shall address the technical approach for implementing the requirements for this PWS. The TIP shall be free from clerical errors, logically organized, and technically correct. The contractor shall deliver a TIP no later than five working days after task order award to the

KO and COR for review and acceptance. The contractor shall be notified to revise the TIP within five working days from receipt of notice that TIP is found unacceptable.” After submission of the TIP, the contractor will receive the KO’s decision in writing no later than five working days. The contractor shall complete transition in accordance with (IAW) its proposed transition plan. The contractor shall ensure that all positions are filled to ensure there will be minimal service disruption to vital Government business and no service degradation during and after transition.

1.6.9.1.1. Transition Phase-In Activities (In-Processing). The contractor shall include in its transition plan and perform, at a minimum, the following activities during the phase-in period:

a) submit requests for physical and network access at performance locations;

b) the Facility Security Officer (FSO) must provide to COR and TTM, the following information on all contractor personnel performing NCIS missions that are direct labor for input into the

NCIS In and Out Processing Portal.

Table 1. Transition Performance Objectives

Transition Performance Objective Performance Standard Acceptable Quality Level

Transition The transition of contractor personnel and equipment shall not exceed 90 calendar days.

Meets the standard

Level of Effort 100% level of effort for each labor category within 90 calendar days of award

95% which is fully mission capable

Continuity of Service Delivery during transition period

No impact on operations throughout the transition period as outlined in the KO approved transition plan

Standard meet 100% of the time during the transition period

1.6.9.1.2. Staffing. The contractor shall ensure adequate staffing levels, across the contract, to prevent any gaps in support during scheduled leave periods or holidays. The contractor shall provide a contingency plan to address potential staffing shortages and ensure that support is consistently available as required.

The contractor will work with the government to identify acceptable staffing arrangements and back-up measures to minimize any disruption to services.

1.6.9.2. Transition Phase-Out. The contractor shall provide a Transition–Out Plan (TOP) for this task order. The TOP shall facilitate the accomplishment of a seamless transition from the ‘departing’ incumbent to an ‘incoming’ prime contractor/Government personnel at the expiration of this task order.

The transition period shall not exceed 90 days, The contractor shall provide the Government with an outgoing transition plan. The TOP shall be submitted no later than 90 days after award, that provides for conveying all work and associated materials in their possession to the Government. The outgoing transition plan shall include the proposed date of ending the contractor’s billable contract work. The outgoing transition plan shall also include the date of terminating network access, date of submitting all related security access badges, Common Access Cards (CAC), SIPRNet Tokens; and out-processing procedures at the secure work facilities to include the government secure facility. The contractor shall be notified to revise the TOP within five working days from receipt of notice that TOP is found unacceptable.” If the deliverable is deemed unacceptable by the COR/TTM, the contractor will have five days to revise and resubmit.

1.6.10. Quality Control. The contractor shall develop and maintain an effective Quality Control Plan

(QCP) to ensure services are performed IAW this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s QCP will set forth the staffing and procedures for self-inspecting the quality, timeliness, responsiveness, customer satisfaction, and other performance requirements in the PWS. The contractor will develop and implement a performance management system with processes to assess and report their performance to the Contracting Officer’s Representative (COR). The QCP shall be delivered within ten (10) business days after award to the Contracting Officer (KO) and COR for review and acceptance. The Government may find the QCP “unacceptable” whenever the contractor’s procedures do not accomplish the objective(s). The contractor shall be notified to revise the QCP within five working days from receipt of notice that the QPP is found "unacceptable”. After acceptance of the QCP, the contractor shall receive the

KO’s acceptance in writing with any proposed change to the QCP.

1.6.11. Quality Assurance. The Government will evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP) which will be issued to the contractor after award. This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s). The government will review documentation reports produced by the contractor as specified in the QASP to assess the contractor's performance. Additionally, the quality assurance personnel will schedule quarterly and no notice spot inspections to verify compliance with the QASP.

1.6.12. Monthly Status Report (MSR). The contractor shall provide a monthly status report to the KO and

COR which identifies the work completed from the previous month, any significant circumstances which may pose a threat to the security of DoD personnel, contractor personnel, resources, LE data, classified or unclassified defense information, safety incidents, on-going activities, issues and mitigation plans, forecasted future activities and any open actions/decisions since the previous monthly status report. The

MSR shall provide number of employees on duty, and planned new hires. The MSR shall also include a

Financial Status Report that includes at a minimum funding received, funding invoiced to date including labor categories and rates charged and any ODCs, outstanding invoices, and funds remaining. This report shall be provided to the KO and COR NLT than ten (10) business days after the beginning of each month.

PART 2

ACROYNMS

ACROYNMS

ACOR Alternate Contracting Officer’s Representative

AFOSI Air Force Office of Special Investigations

AOR Area of Responsibility

ATO Authority to Operate

ATT Authority to Test

BGAN Broadband Global Area Network

C&A Certification and Authorization

CATV Community Access Television

CCNE Cisco Certified Network Engineer

CDRL Contract Data Requirements List

CI Counterintelligence

CID (Army) Criminal Investigations Division

CIO Command Information Officer

CM Configuration Management

Cm Change Management

CMMI Capability Maturity Model Integration

CND Computer Network Defense

COMSEC Communications Security

CONOP Concept of Operations

CONUS Continental United States

COOP Continuity of Operations Plan

COP Common Operating Picture

COR Contracting Officer’s Representative

COTS Commercial Off-the-Shelf

CSP Common Service Provider

CT Counter-terrorism

DCHC Defense Counterintelligence and Human Intelligence Center

DDL Data Definition Language

DIA Defense Intelligence Agency

DISA Defense Information Systems Agency

DIACAP DoD Information Assurance Certification and Accreditation Process

DITSCAP DoD Information Technology Security Certification and Accreditation

Process

DoD Department of Defense

DODAF Department of Defense Architecture Framework

DOJ Department of Justice

DON Department of the Navy

DOW Department of War

DPM Deputy Project Manager

DR Disaster Recovery

DRP Disaster Recovery Plan

DSS Defense Security Service

DSU Digital Switch Unit

DTL Deputy Task Lead

EA Enterprise Architecture

EAD Enterprise Applications Division

EIT Electronic and Information Technology

ER Entity Relationship

ETL Extract, Transform, and Load

FAR Federal Acquisition Regulations

FAQs Frequently Asked Questions

FBI Federal Bureau of Investigation

FOIA Freedom of Information Act

FYDP Future Years Defense Plan

GFE Government Furnished Equipment

GOTS Government Off-the-Shelf

GSA General Services Administration

HBSS Host-Based Security System

HQ Headquarters

IA Information Assurance

IATO Interim Authority to Operate

IAW In Accordance With

IAWF Information Assurance Workforce

IC Intelligence Community

IDS Intrusion Detection System

IOC Initial Operating Capability

IPS Intrusion Protection System

IPR Interim Progress Review

IT Information Technology

ITD Information Technology Directorate

ITDS Information Technology Directorate Services

ITPMD Information Technology Program Management Division

ITSC Information Technology Solution Center

IATT Interim Authority To Test

JWICS Joint Worldwide Intelligence Communications System

KPI Key Performance Indicator

LAN Local Area Network

LE Law Enforcement

LTTR Lead Time To Repair

MAC Move, Add, Change

MCSA Microsoft Certified Systems Administrator

MCSE Microsoft Certified Systems Engineer

MDIA Military Department Investigative Agencies

MEFs Mission Essential Functions

MS Microsoft

MSR Monthly Status Report

MTBF Mean Time Between Failures

MTTF Mean Time to Failure

MTTR Mean Time to Repair

NCIS Naval Criminal Investigative Service

NEN Navy Enterprise Network

NGEN Next Generation Enterprise Network

NIPRNet Non-Classified Internet Protocol Router Network

NMCI Navy Marine Corps Intranet

NS National Security

O&M Operations and Maintenance

OCONUS Outside Continental United States

OCRS Online Compliance Reporting System

ODCs Other Direct Costs

OGA Other Government Agency

ONE-Net OCONUS Navy Enterprise Network

PBSC Performance Based Services Contract

PII Personally Identifiable Information

PL Project Lead

PM Pogram Manager

PMI Project Management Institute

PMO Project Management Office

PMP Project Management Professional (from PMI)

PMR Program Management Review

PSTN Private Switched Telephone Network

PWS Performance Work Statement

QASP Quality Assurance Surveillance Plan

QCP Quality Control Plan

R&D Research and Development

RDT&E Research, Development, Test, and Evaluation

RFQ Request for Quote

RKB Russell Knox Building

SAP Special Access Program

SCI Sensitive Compartmented Information

SDLC Software Development Life Cycle

SECNAVINST Secretary of the Navy Instruction

SEM Security Event Management (Systems)

SIAO Senior Information Assurance Officer

SIPRNet Secure Internet Protocol Router Network

SME Subject Matter Expert

SMR Senior Management Review

SOP Standard Operating Procedure

SORN System of Record Notice

STIGs Security Technical Implementation Guidelines

SVoIP Secure Voice over Internet Protocol

TDL Technical Direction Letter

TDY Temporary Duty

TL Task Lead

TOL Task Operations Lead

TS Top Secret

VoIP Voice over Internet Protocol

VPN Virtual Private Network

VTC Video Teleconferencing

WAN Wide Area Network

WBS Work Breakdown Structure

XML Extensible Markup Language

PART 3

GOVERNMENT-FURNISHED PROPERTY, EQUIPEMENT AND SERVICES

GOVERNMENT-FURNISHED ITEMS AND SERVICES

3. Services will be performed at Government secure facilities. The Government will provide common use utilities and office equipment, desk space, telephones, computers, and other items necessary to maintain an office environment, incident ticketing and tracking systems or automated system-configuration tools.

All contacts with Government organizations and contractor personnel outside NCIS will be coordinated with the Government representative assigned to this requirement.

3.1. The contractor is responsible for proper utilization and safeguarding of all Government property provided for contractor use per FAR Part 45. At the end of each work period, all Government facilities, equipment, and materials shall be secured. Contractor employees must immediately report the loss or damage to Government facilities and equipment upon discovery of such loss and/or damage. Equipment found to be defective must also be reported promptly to allow for repair or replacement. These reports will be submitted to the designated Government custodian, representative or office, and the COR or TTM.

The contractor shall check out computer, electronic or diagnostic equipment to properly assist remote sites as required.

3.2. Government Furnished Material (GFM) provided under this task order will be consumed in or delivered as part of the NCIS tasked efforts. Completion of a DD-1149 serves as the contractual authority for the accountability, transfer, and control of GFM from the Government to the contractor. Per the applicable Government property clause, the contractor shall, upon completion of this task order, provide an inventory of all excess GFM for disposition instructions.

3.3. Government Furnished Equipment (GFE) provided under this task order will be delivered as part of the NCIS tasked efforts. Completion of a DD-1149 serves as the contractual authority for the accountability, transfer, and control of GFE from the Government to the contractor. Per the applicable

Government property clause, the contractor shall, upon completion of this task order, provide an inventory of all excess GFE for disposition instructions.

3.4. Government Furnished Services

3.4.1. Internet & E-Mail Access. The Government will provide the contractor access to electronic mail

(email) and access to the appropriate networks in support of the PWS. All email correspondence will identify individual contractors as an “Enter Supported NCIS Code or Field Office” representative by utilizing a signature block. The following standard signature block and following correspondence phrase will be utilized on all email correspondence.

E-Mail Signature Block and Correspondence Phrase

John Doe

Job Title Company Name

“Supported Organization”

COM: XXX.XXX.XXXX

DSN: XXX.XXX.XXXX

NIPR: john.doe.ctr@ncis.navy.mil

SIPR: john.doe.ctr@ncis.navy.smil.mil

JWICS: john.doe.ctr@ncis.ic.gov

“Please be advised I am a contractor for (Insert Supported Organization). My correspondence is for coordination and information gathering purposes only and in no way binds or obligates the Government contractually.

mailto:john.doe.ctr@ncis.navy.mil mailto:john.doe.ctr@ncis.navy.smil.mil mailto:john.doe.ctr@ncis.ic.gov

This E-mail is from the Naval Criminal Investigative Service and may contain information that is Law

Enforcement Sensitive {LES} or Privacy Act Sensitive to be used for official purposes only. Any misuse or unauthorized disclosure may result in both civil and criminal penalties.”

3.4.2. Telephones. The Government may provide telephones and services to include consolidated unsecured voice, dial-up switched communication service, Defense Switched Network (DSN), commercial long-distance access for Official Business use, and on-call government cellphone services.

The contractor shall comply with the provisions of all NCIS and other applicable directives.

PART 4

CONTRACTOR-FURNISHED ITEMS AND SERVICES

CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES

4.1. General. The contractor shall furnish all supplies, equipment. Facilities, and services required to perform work under this task order that are not listed under Part 3 of this PWS.

4.2. Top Secret Facility Clearance. The contractor shall possess and maintain a TS facility clearance from the Defense Counterintelligence and Security Agency (DCSA), at time of award, IAW DD 254, prior to commencement of work under this contract, and must maintain the level of security required for the life of the contract. Overarching security requirement and contractor access to classified information will be as specified in the DD Form 254, Security Classification Specification.

4.3. Equipment. The contractor is required to provide equipment, as approved, to perform the requirements. The contractor will be reimbursed on a cost only basis for any equipment is deems necessary to complete the requirements.

4.4. Contractor Responsibilities. The contractor shall not employ persons for work on this task order if such employee is considered by the KO to be a potential threat to the health, safety, security, general wellbeing, or operational mission of the installation and its population.

4.5. Appearance and Conduct. Contractor personnel shall present a neat appearance and be easily recognized as contractor employees. FAR 37-114 requires contractor personnel to attend meetings, answering phones, and working in other situations where their status is not obvious to be identified as contractor personnel to avoid creating the impression that they are Government official.

4.6. Conflict of Interest. The contractor shall not employ any person who is an employee of the U.S.

Government if employing that person would create a conflict of interest.

PART 5 SPECIFIC TASKS

5. Specific Tasks. The contractor shall provide the principal support services to: (1) IT Common

Services, (2) IT Special Projects, (3) Command Data Office, (4) Cyber Security, (5) Enterprise

Technologies, and (6) Enterprise Operations.

5.1. IT Common Services Unit (ITCSU) Support.

5.1.1 Operation and Maintenance Support. The contractor shall provide operation and maintenance support for the RKB IT infrastructure to ensure continuous mission readiness and enterprise-wide reliability. The contractor shall perform all maintenance functions in alignment with ITCSU policies to ensure secure, stable, and efficient operations. The contractor shall collaborate with manufacturers and industry partners when internal solutions are insufficient, ensuring all problems are resolved effectively.

5.1.1.1. The contractor shall report and track all customer requests, incidents, and changes using existing ticketing systems to ensure transparency, traceability, and timely resolution. The contractor shall apply all applicable Security Technical Implementation Guides (STIGs), associated checklists, and required vulnerability patches and updates to all ITCSU hardware and software. The contractor shall develop and maintain a structured after-hours maintenance schedule to allow for regular system patching and updates with minimal disruption to operations; this includes proper coordination and notification to all stakeholders, this support shall include 24/7 on-call support to promptly address any service degradation, minimize outages, and maximize uptime.

5.1.1.2. The contractor shall develop, update, and maintain appropriate supporting documentation, including SOPs, training materials, and checklists. Additionally, the contractor shall develop and maintain a detailed asset inventory system tracking all IT assets, including hardware, software, and licenses. The contractor shall develop a comprehensive lifecycle management plan to ensure timely procurement, upgrades, or replacements of software and hardware before obsolescence, maintaining security, compliance, and operational continuity. These actions will ensure that hardware and software updates are performed with minimal downtime, documentation remains current, unsupported systems are replaced proactively, and network issues are identified and resolved before they impact end users.

5.1.2. Data Center and Network Operations Support. The contractor shall provide day-to-day IT operations and maintenance support for the data center and multiple networks that provide essential capabilities and services to all RKB tenants. The contractor shall coordinate with tenant IT staff and external service providers, such as Comcast, Verizon, AT&T, DISA, FBI, and others, to ensure seamless network performance and service delivery across the ITCSU-managed infrastructure. The contractor shall maintain and support all physical and logical components of the network infrastructure from the provider handoff to the tenant demarcation point, including voice and data networking, digital signage, CCTV systems, and other critical services. The centralized network architecture, anchored by the RKB Point-of-

Presence (POP) and main aggregation layer, must be maintained to ensure high-speed, secure, and resilient connectivity between the data center, campus, VoIP systems, and all associated enclaves. The contractor shall also support virtualized applications and servers operating on a hybrid physical infrastructure, which are vital to ITCSU network operations.

5.1.3. Network Engineering and Administration. The contractor shall provide network design and implementation services that align with customer requirements while ensuring scalability, security, and reliability across the ITCSU environment. The contractor shall develop architectures that support current operational needs and allow for future growth without compromising performance or security. All designs shall adhere to Department of Defense (DoD) standards and incorporate industry best practices, including the use of secure protocols, redundancy, and fault-tolerant configurations. The contractor shall be responsible for the end-to-end implementation of the approved network design, ensuring seamless integration with existing systems, minimal disruption to operations, and full compliance with applicable

DoD policies and cybersecurity requirements.

5.1.3.1. Network Configuration and Management. The contractor shall configure and manage all network devices, including routers, switches, firewalls, and other critical network equipment, to ensure optimal performance, security, and reliability across the ITCSU infrastructure. The contractor shall apply standardized and secure configurations in alignment with current Department of Defense (DoD) standards, guidelines, and cybersecurity best practices. All configurations shall be regularly reviewed, updated, and documented to reflect system changes, address emerging threats, and maintain compliance with DoD security policies. The contractor shall ensure that the network remains resilient, supports mission requirements, and is capable of adapting to evolving operational demands.

5.1.3.2. Network Security. The contractor shall implement and maintain robust network security measures to protect the ITCSU infrastructure from unauthorized access, threats, and vulnerabilities. This includes the configuration and management of firewalls, access controls, and compliance validation tools to enforce strict security policies and safeguard sensitive data. The contractor shall ensure that all security measures align with Department of Defense (DoD) standards and requirements, regularly updating and validating controls to address emerging risks and maintain compliance. The contractor shall apply comprehensive security protocols and continuous monitoring techniques to maintain the confidentiality, integrity, and availability of network resources essential to mission success.

5.1.3.3. Network Monitoring and Troubleshooting. The contractor shall continuously monitor network performance using advanced network management tools and techniques to proactively identify and address potential issues before they impact operations. The contractor shall perform thorough troubleshooting to diagnose and resolve network problems promptly, minimizing downtime and maintaining optimal performance. The contractor shall apply industry best practices and leverage real-time data to ensure that any performance degradation or faults are addressed efficiently and effectively.

This proactive approach to monitoring and troubleshooting supports uninterrupted network availability and reliability, which are critical to meeting mission requirements.

5.1.3.4. Network Documentation. The contractor shall maintain accurate and comprehensive network documentation, including detailed network diagrams, configuration files, IP address management records, inventory of network devices and equipment, and other essential technical documents. The contractor shall regularly update to reflect any changes or modifications to the network environment, supporting effective network management and troubleshooting. The contractor shall also ensure that all documentation is clear, concise, and organized in a manner that is easily accessible to authorized personnel, facilitating efficient knowledge sharing and continuity of operations. Maintaining high-quality documentation is critical for operational transparency, compliance, and supporting ongoing maintenance and future network enhancements.

5.1.3.5. Network Optimization. The contractor shall actively optimize network performance by addressing key metrics such as throughput, latency, jitter, and overall network efficiency. The contractor shall analyze traffic patterns, identify bottlenecks, and implement improvements to enhance data flow and user experience across the ITCSU environment. The contractor shall conduct thorough testing and validation to confirm the requirement for desired changes to enhance network performance and present results to the government for consideration to approve any network optimization activities.

5.1.3.6. Wireless Administration. The contractor shall configure, manage, monitor, and troubleshoot all wireless network components, including Wi-Fi access points, controllers, and associated wireless equipment. The contractor shall maintain optimal wireless performance and availability by proactively addressing connectivity issues, interference, and capacity challenges. The contractor shall enforce stringent wireless security measures, implementing robust authentication, authorization, and encryption protocols to protect wireless communications and prevent unauthorized access. These efforts will ensure the wireless network remains secure, reliable, and fully compliant with applicable security standards and organizational policies.

5.1.4. System Administration. The contractor shall ensure that the systems administrator is responsible for designing and implementing new systems that align with operational requirements, ensuring that infrastructure supports current and future mission needs. The contractor shall perform routine maintenance and troubleshooting on existing systems to maintain optimal performance, quickly identifying and resolving issues to minimize downtime and service disruptions. The contractor shall plan and execute regular system upgrades and patching activities to keep systems current, secure, and compliant with applicable security standards, thereby protecting against vulnerabilities and enhancing overall system reliability.