PWS_Ft._Bliss_DPW_GIS_IT_IM_Contract_21_May_2019.docx

Performance Work Statement (PWS) U.S. Army Fort Bliss, TX. (FBTX) Directorate of Public Works (DPW) GIS and IT Engineering Technical Services 21 May 2019

1.0 GENERAL INFORMATION:

This is a non-personal services contract to provide support for Geospatial Information System (GIS) and Information Technology (IT) Engineering to the Directorate of Public Works (DPW) Headquarters at Fort Bliss, Texas and respond to emerging Information Management (IM)/IT/Cybersecurity requirements covered in this PWS. The Government will not exercise any supervision or control over the contract service providers performing the services herein. The service providers shall be accountable solely to the Contractor who, in turn shall be accountable to the Government and responsible for quality and timely performance and delivery of the services as required in this PWS.

1.1 Background:

The DPW is located on Fort Bliss, TX., adjacent to El Paso, TX. Fort Bliss is home to the 1st Armored Division. The DPW is the installation's primary organization responsible for maintenance of the installation infrastructure and environment. The DPW consists of seven (7) divisions; the Engineering Services Division, the Operations & Maintenance Division, the Environmental Division, the Housing Division, the Master Planning Division, the Sustainability and Energy Division and the Business Operations and Integration Division. One of DPW’s missions is to manage, operate and sustain all real property and programs. In order to successfully execute the DPW’s mission, the DPW relies heavily on the use of IM/IT. The DPW and its employees utilize a variety of engineering systems and other technically related software programs to manage and execute all projects and programs under the purview of the DPW. The Contractor shall support the execution of all projects and programs under the purview of the DPW by providing quality and timely IM/IT services for the DPW and in coordination with the appropriate U.S. Army IT/IM authorities and Subject Matter Experts (SMEs).

1.2 Objectives:

Contractor work and responsibility shall include all Contractor and their subcontractor employees planning, programming, administration, management, and execution necessary to provide the specified services in this PWS. The Contractor and their subcontractor employees shall conduct work in accordance with this contract and all applicable Federal, State, and local laws, regulations, directives, and DPW policies. The objective is to ensure DPW’s Engineering and Geospatial services are operating effectively to support the maintenance of Fort Bliss’s infrastructure and environment. This contract shall provide IM/IT expertise, program management and technical support services for DPW engineering/mapping systems, software, hardware and networks necessary to execute all projects and programs under the purview of the DPW. The Contractor shall compile historical data, prepare required reports, and submit information as specified in the Deliverables section of this contract for Government use.

1.2 Scope/Synopsis:

The Contractor and their subcontractor employees shall provide IM/IT expertise, project management and technical support services for DPW engineering/mapping systems, software, hardware and networks necessary to execute all projects and programs under the purview of the DPW. The Contractor shall work with the Contracting Officer Representative (COR) or Contracting Officer (KO) if a COR is not assigned and The Installation Geospatial Information and Services (IGI&S) Manager to establish schedules for recurring activities necessary for routine actions necessary to provide IM/IT services. Some examples of recurring activities shall be: Responding to IT help calls, server and GIS desktop maintenance and upgrades, software installation, SharePoint maintenance and upgrades, cybersecurity processes, and DoD Risk Management Framework (RMF) support between the hours of 0700 and 1700 Monday through Friday, Mountain Time Zone. The Contractor and subcontractor shall establish, operate and maintain Help Desk functions including ticketing, system and operational support and troubleshooting onsite or remotely. The Contractor and subcontractor shall support approximately 250 users with dedicated hardware, software and peripherals. The number of users could increase or decrease in short notice but it is anticipated that the number of users will not increase by any more than 10% during the life of the contract. The Contractor and subcontractor shall also support 32 servers, 280 desktops and 25 laptops with the possibility of this number changing by 10% per year. The Contractor and subcontractor shall be able to provide maintenance, updates, and error logs for multiple servers hosted by the Network Enterprise Center (NEC) for the Building Operations Center (BOC) and the Utility Monitoring and Control System (UMCS). The Contractor and subcontractor shall be able to provide the fielding of new infrastructure and information systems such as the Computer-Aided Design and Engineering (CAD/E, such as AutoCAD) and Geographic Information System (GIS, such as Esri ArcGIS) applications. All geospatial data developed for or created by Fort Bliss DPW shall and must be compliant with the Spatial Data Standard for Facilities, Infrastructure, or Environment (SDSFIE) and shall and must be accompanied by metadata compliant with the Federal Geographic Data Committee (FGDC) Content Standard for Digital Geospatial Metadata (CSDGM). The IGI&S Data Layer Proponency Matrix is a matrix with the list of standard Installation and Environment (I&E) geospatial data layers that support U.S. Army military installation management processes. Each layer is aligned to a Department of the Army (DA) functional proponent and a data steward. The data steward is responsible for ensuring the quality and availability of data acquired, developed, and/or maintained for the layer. Per this matrix, DPW is responsible for developing and maintaining 276 data layers. Current Army Regulations (AR) state that installations must be using the most current version of SDSFIE. In order to meet this task the current database needs to be assessed and updated. IGI&S and HQDA, Office of the Assistant Chief for Installation Management (OACSIM) have a requirement under AR 115-13 that states installations will submit their geospatial data to the Headquarters, U.S. Army geospatial data repository quarterly. For this to happen an updated database and applicable ArcPortal web maps are needed so that the installation will be compliant. The Contractor and subcontractor shall identify information and operational gaps as IM/IT transformation requirements emerge. The Contractor and subcontractor shall provide solutions to unforeseen IM/IT problems in order to maintain DPW’s operation. The Contractor shall stay abreast of all compliance issues and shall develop all documentation necessary to ensure all DPW systems remain operational and connected to the network.

1.3 Contractor and subcontractor Support Requirements:

To accomplish those goals the Contractor or subcontractor shall provide day-to-day support in the following areas:

1. IM/IT/IA/GIS Program Management

a. Cybersecurity

i. Cybersecurity Program Support

ii. Utility Monitoring and Control System (UMCS) Support

iii. DPW General IT Support

b. IM/IT/CS Planning, Scheduling and Execution Support

c. IM/IT/CS Project Management Support

d. Systems, Software, Database, Applications and Server Support

i. System Maintenance

ii. DPW SharePoint/Web Content Administrator

iii. Web Application Project Support

iv. Database Technical Project Support and Administration

v. DPW Enterprise Services and Server Management

2. Help Desk Support

a. DPW Data-Center Operations & Management

b. Service/Help Desk Support

c. Effective Communication

3. GIS knowledge, Analysis Support database, and management support.

i. - ArcServer/ArcSDE Database Administration

ii. - GIS Data Management/Analysis

4. General Fund Enterprise System (GFEBS) Support

1.3.1 Period of Performance: The Period of Performance (PoP) shall begin from date of award for duration of one (1) base year (12 months) and four (4) 12-month option years. The PoP is as follows:

29 SEP-2019 TO 28 SEP 2020 Base Year

Option Years:

29-SEP-2020 TO 28-SEP-2021 – Option Year 1 29-SEP-2021 TO 28-SEP-2022 – Option Year 2 29-SEP-2022 TO 28-SEP-2023 – Option Year 3 29-SEP-2023 TO 28-SEP-2024 – Option Year 4

1.3.2 Location / Place of Performance

The Contractor and subcontractor shall be able to perform this work both at the Contractor’s office location(s) and/or at the Government site, Directorate of Public Works, (located at Ft. Bliss, Texas). Work locations may vary and the Contractor and subcontractor may be asked to attend meetings, usually within the Fort Bliss area, to support the mission. Also, other potential sites for travel include DoD installations within the commuting area or training to other DoD locations. The Contractor shall obtain authorization from the COR or KO if a COR is not assigned, or the COR’s designee, to perform daily task at locations other than DPW Fort Bliss, TX and/or required locations to complete the performance of requirements identified in this PWS.

1.3.2.1 Alternate Place of Performance - The place of performance is the approved DD Form, 254 facility. The Contractor shall have a facility in close proximity (within 50 miles) to primary place of performance. The Contractor is required to make frequent (weekly) trips as required to the primary place of performance to participate in meetings and working groups if deemed necessary by the COR or KO if a COR is not assigned, the KO or the Government designated representative.

1.3.2.2 Telework Contingency Only – Telework is only allowed by the Contractor or subcontractor when approved by the COR or KO. Contractor or subcontractor employees may be required to travel to another approved activity within the local travel area, or at the Contractor's facility in cases of unforeseen conditions or contingencies (e.g., pandemic conditions, exercises). Contractor shall prepare all deliverables and other contract documentation utilizing Contractor resources. To the extent possible, the Contractor and subcontractor shall use best efforts to provide the same level of support as stated in the PWS. In the event the services are impacted, reduced, compromised, etc., the KO or the Contractor may request an equitable adjustment pursuant to the changes clause of the contract.

NOTE: If Government facilities are closed due to inclement weather or any other authorized closure, the Contractor is not authorized to bill the Government for those hours unless the Contractor and/or subcontractor can perform productive duties from an alternate worksite.

1.3.3 Hours of Operation:

The Contractor and subcontractor shall provide coverage at the specified Government site between the DPW core hours of 0700 and 1700, Mountain Time, Monday through Friday. This requirement may necessitate some shifting of some employee’s work schedules. The Contractor shall obtain authorization from the COR, or KO if a COR is not assigned or the COR’s designee, prior to any of their employees or subcontractor employees working extended hours. The exception is Federal holidays or when the Government facility is closed due to emergencies, administrative closings, or similar Government directed facility closings. The Contractor shall use Microsoft’s Outlook’s “Out of Office” e-mail notification when personnel are not at work. The Contractor shall notify the COR or KO if a COR is not assigned or the COR’s designee, when a Contractor or subcontractor employee is not in their primary duty location.

The Contractor and subcontractor shall and must at all times maintain an adequate workforce as determined by the government for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above stated reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce is essential. When the Department of Defense (DoD)/DA/DPW grants excused absence to its employees such as vacation time, sickness, etc. the Contractor agrees to continue to provide sufficient fully trained and certified personnel, not from the current workforce, who have access to the Government facility to perform critical tasks already in operation or scheduled, and shall be guided by the instructions issued by the KO or the COR. Critical tasks are any related tasks to keep DPW IT systems operating securely to allow DPW to conduct its mission. Changes in Contractor employee work schedules shall comply with the terms and conditions of the contract, to include payment provisions. After local DPW core hours, support shall be available for DPW, and Contractor or subcontractor employees may be required to adjust their work schedules to accommodate work requirements. Adjustments to Contractor work schedules shall not be considered overtime. Overtime requests shall be in written format; submitted to the Government Functional Representative for assessment; and to the KO for approval. Occasionally, and during unusual situations, hours outside the core hours of operation shall be required by the Government for special reasons. In these instances and at the direction of the COR or KO if a COR is not assigned, the Contractor shall be required to provide extended services in the form of after-hours operation. An estimated two-hundred-eight (208) hours annually may and shall be required to work hours other than normal duty hours and emergencies. This is to accommodate the updates/fixes after regular work hours in order to ensure systems are operational during the regular work hours. The Government will notify the Contractor when extended support is required from the Contractor and/or subcontractor employees. Remote and/or on-site technical support to address problems encountered after normal working hours shall be provided on a call-in basis with a two (2)-hour response time. Support can be via phone, remote-access of the system, or in-person.

If Government personnel are furloughed, the Contractor shall contact the KO or COR to receive direction, instructions and guidance to follow. It is the Government’s decision as to whether the contract price/cost will be affected as a result of the Government shutdown and/or furloughed Government employees. In the event that the Government shutdown and/or furloughed Government employee’s impacts contract price/cost, a negotiated settlement will be reached as deemed appropriate by the KO.

1.3.3.1 Federal Government Holidays:

a. All Government offices will be closed, except for minimum employees required for in-house operations, during Federal holidays. Except as otherwise specified, the Contractor shall not schedule routine work on Federal holidays. When scheduled service is required less than three (3) times per week and the schedule for that work falls on a Federal holiday, the Contractor shall accomplish the work on the workday following or preceding the holiday. The ten designated Federal holidays per year are as follows:

b. When one of the above designated legal holidays falls on a Sunday, the following Monday shall be observed as a legal holiday. When a legal holiday falls on a Saturday, the preceding Friday shall be observed as a legal holiday. This list of holidays relates to Government duty days and is not intended to supplement or otherwise alter the provisions of any wage determination regarding applicable paid holidays.

c. When the DoD grants excused absence to its Government employees, the Contractor agrees to and shall continue to provide sufficient employees to perform critical tasks already in operation or scheduled, and shall be guided by the instructions issued by the KO. Changes in Contractor employee work schedules shall comply with the terms and conditions of the contract, to include payment provisions.

1.4 Operations During Emergency Situations:

When any disruption of normal, daily operations occur, the Contractor Program Manager shall promptly open an effective means of communications with the COR or KO if a COR is not assigned and verify:

A. Key points of contact (Government and Contractor).

B. Temporary work locations (alternate office spaces, virtual offices, etc.).

C. Means of communications available under the circumstances (e.g. email, webmail, telephone, FAX, courier).

D. Essential work products expected to continue production by priority.

The Contractor Task Manager, in coordination with the COR or KO if a COR is not assigned, shall make use of the resources and tools available to continue DPW contracted functions to the maximum extent possible under emergency circumstances. Regardless of contract type, and of work location, Contractor or subcontractor employees performing work in support of authorized tasks within the scope of this contract, shall charge those hours accurately and truthfully in accordance with the terms of this contract.

1.5 Key Personnel/Employees:

The following are considered Contractor and subcontractor key personnel/employees:

1.5.1 Program Manager (PM) and Alternate Program Manager (APM):

The Contractor shall provide a PM who shall be responsible for the performance of their work. The name of this person and an APM who shall act for the Contractor when the PM is absent shall be designated in writing to the KO at contract award. The PM or APM shall have full authority to act for the Contractor on all contract matters relating to daily operation of this contract. The PM or APM shall be available by phone and e-mail 24/7/365 including Federal holidays.

1.5.2 Information Assurance Analyst:

The Contractor shall provide an Information Assurance Analyst that is able to identify, mitigate and resolve cybersecurity issues and concerns. The Information Assurance Analyst shall develop and deliver guidelines/plans/policies, perform and deliver analyses and reviews that require cybersecurity expertise in the areas of cybersecurity incident response, perform cybersecurity Remedy ticket assignment, perform tracking and response, perform and deliver vulnerability scans, perform and deliver cybersecurity assessments, perform and deliver evaluations, and other cybersecurity related activities and mandates to support DPW. The Contractor shall provide support to include the analysis of general information assurance-related technical problems and provide technical support in solving these problems for DPW network components, servers, clients, software, systems, etc. The support shall include designing, developing, and implementing solutions that meet network security requirements for DPW. The Contractor shall perform activities of the DoD RMF Process and annual security reviews for custom developed and integrated COTS solutions.

1.5.3 GIS Specialist:

The Contractor shall provide a GIS Specialist that follows AR 115-13 and any guidance from DPW Installation Geospatial and Information Services Manager (IGI&S). The Contractor shall manage spatial data in an enterprise database management system that will be accessed by ArcGIS clients through desktop and web applications. This may and shall also include management of server software and hardware when needed.

1.5.4 System/Server Administrator:

The Contractor shall provide a System/Server Administrator that maintains the DPW servers and systems and performs upgrades of software and hardware and answer questions about technical problems and recommends solutions. The System/Server Administrator shall provide written recommendations about improving the system performance and storage capabilities.

1.5.5 SharePoint Administrator:

The Contractor shall be responsible for developing and providing content on the DPW SharePoint page to be utilized as a major source for information, DPW data management and decision making. The Contractor shall provide recommendations to DPW to effectively use SharePoint, databases, and shared drives to securely store and use information. The Contractor shall provide the latest IT Best Practices on using SharePoint, databases, and file structure management. Contractor and subcontractor employees executing these responsibilities shall meet IAT-I requirements IAW DoD 8570.01-M.

1.5.6 IT Specialist

The Contractor shall provide an IT Specialist that assists in managing the network, database administration, technical support, and training. The IT Specialist shall coordinate with the Fort Bliss NEC and troubleshoot user IT issues.

1.5.7 GFEBS Specialist

The Contractor shall provide a GFEBS specialist that has specialized knowledge and expertise to accomplish critical, time-sensitive tasks. The Contractor shall assist in the overall acquisition process focused on functional requirements and business processes of GFEBS. The Contractor shall develop and improve training materials to provide GFEBS users continuous process improvement skills.

Supervision of Contractor Employees:

The Government will not exercise any supervision or control over Contractor or subcontractor employees while performing work under the contract. Such employees shall be accountable solely to the Contractor, not the Government. The Contractor, in turn, shall be accountable to the Government for Contractor or subcontractor employees.

1.6 Fort Bliss, TX. Installation’s Rules Apply to Contractor:

Rules, regulations, direction, and requirements issued by the Fort Bliss, TX. Installation Commander or their designated representative, will apply to the Contractor and their subcontractor employees. The Contractor and their subcontractor employees shall become acquainted with and comply with all Government regulations as posted, or as required by the KO at contract award.

1.7 Physical Security:

The Contractor and subcontractor shall be responsible for safeguarding all Government equipment, information and property provided for Contractor and subcontractor use IAW AR 190-13, The Army Physical Security Program. At the end of the Contractor or subcontractor work day, all Government facilities, equipment and materials shall be secured. Classified publications control requirements can be located in AR 380-5, Department of the Army Information Security Program and shall be followed during the duration of this contract. All classified publications shall be secured in a filing type cabinet with a built-in locking device with tumblers and General Services Administration (GSA) approved security container.

1.8 Training:

1.8.1 Orientation Training:

The Contractor shall conduct an orientation training class for all Contractor and subcontractor employees within five (5) working days of initial employment or re-assignment to another functional area under this contract. This training shall be relative to the respective functional areas and Contractor and Government offices which the employees will interact with. The Contractor shall maintain records of training accomplished and shall provide these training records to the Government when requested. The training shall include, but is not limited to, the following topics: General Orientation, Safety, Fire Safety, Unexploded Ordnance, Environmental Requirements, Cultural Resources Requirements, and Emergency Procedures.

a. OPSEC, Anti-Terrorism and iWATCH

1) Level 1 Training: IAW AR 525-13, Antiterrorism, all Contractor and subcontractor employees requiring access to U.S. Army installations, facilities, or controlled access areas shall complete Antiterrorism (AT) Level I awareness training within five (5) business days after contract award date or after commencement of work on this contract, whichever applies. The Contractor shall submit certificates of completion for each affected Contractor and subcontractor employee to the COR or KO if a COR is not assigned within five (5) business days after completion of training by all Contractor and subcontractor employees on a recurring annual basis, (Deliverable 116R002). AT Level I awareness training is available at the following site: http://jko.jten.mil. If access to a computer is not available, the Government’s Requiring Activities (RA) organization’s level II Anti-Terrorism Officer (ATO) will conduct AT Level I training for the Contractor employees and subcontractor employees within five (5) business days after contract start and on a recurring annual basis thereafter and maintain a copy of the attendance roster for one (1) year. Any new Contractor employee or subcontractor employee hired after contract award date will be required to receive AT Level I training within five (5) business days by the ATO. It shall also be acceptable for the new Contractor or subcontractor employee hire, in lieu of receiving AT Level I training within five (5) business days by the ATO, to take the AT Level I training on-line and provide the training certificate to the PM or APM who shall in turn provide it to the COR or KO if a COR is not assigned within three (3) calendar days after contract award date. If the RA does not have an ATO, the first ATO in their chain of command will conduct this training.

2) Security: All Contractor and subcontractors employees shall comply with applicable installation, facility and area Commander installation/facility access and local security policies and procedures as provided by Fort Bliss, TX. Directorate of Emergency Services (DES) IAW U.S. Army Directive 2014-05. The Contractor shall also provide all information required for employee background checks to meet installation, facility and area access requirements, accomplished by installation Provost Marshal Office (PMO), DES or Security Office, (Deliverable 116R003). Contractor and subcontractor employee workforce shall and must comply with all personal identity verification requirements (Federal Acquisition Regulation (FAR)) clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DoD, HQDA and/or installation, facility and area policies. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual installation, facility or area change, the Government may require changes in Contractor and/or subcontractor security procedures or processes.

3) The Contractor shall train all Contractor and subcontractor employees on the local iWATCH program using training standards as provided by the RA’s ATO. This locally developed training program will be used to inform Contractor and subcontractor employees of the types of behavior to watch for and instruct Contractor and subcontractor employees to report suspicious activity to the COR or KO if a COR is not assigned. This training shall be completed within five (5) business days of contract award date and within five (5) business days of new Contractor or subcontractor employees commencing performance on the contract with the results reported to the COR or KO if a COR is not assigned no later than five (5) business days from employee employment start date.

4) All Contractor and sub-contractor employees shall and must complete the DoD Information Assurance training before issuance of network access and annually thereafter. All Contractor and subcontractor employees working Information Assurance (IA) (synonymous with Cybersecurity) / IT functions shall be appropriately certified upon contract award IAW DoD 8570.01-M, DFARS 252.239-7001 and AR 25-2. The baseline certification as stipulated in DoD 8570.01-M shall be completed upon contract award. A KO or COR approved Computing Environment (CE) certification(s) or certificate of training(s) listed within the Army Training and Certification Tracking System (ATCTS), shall and must be completed to meet IAT requirements within six (6) months of contract award.

5) DoD Contractors shall and must be aware of Operational Security (OPSEC) and understand how OPSEC complements traditional security programs. Per AR 530-1, Operations Security, all Contractor and subcontractor employees, requiring access to U.S. Army Installations, facilities, or controlled access areas shall complete OPSEC Awareness training. The Contractor shall submit certificates of completion for each affected Contractor and subcontractor employee to the COR or the KO if a COR is not assigned within 30 calendar days of the start of the contract or within 30 calendar days of new employees commencing performance on the contract to ensure compliance with the terms and conditions of the contract and annually thereafter. Training is available at http://cdsetrain.dtic.mil/opsec or by contacting the Installation OPSEC Officer through the COR or the KO if a COR is not assigned.

6) The Contractor and subcontractors employees will be issued a Common Access Card (CAC) only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of six (6) months or more. At the discretion of the sponsoring activity, an interim CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled National Agency Check with Inquiries (NACI) at the Office of Personnel Management.

7) All Contractor and subcontractor employees shall and must be registered in the U.S. Army Training Certification Tracking System (ATCTS) and successfully complete the DoD cybersecurity awareness requirements prior to gaining access to a DoD, to include U.S. Army, information system and then annually thereafter in accordance with AR 25-2 (Army Cybersecurity).

8) The Contractor shall develop an OPSEC Standard Operating Procedures (SOP)/Plan within 90 days of contract award. The OPSEC SOP/Plan shall and must be reviewed and approved by the RA’s OPSEC Officer. The SOP/Plan shall include the Government's critical information, why it needs to be protected, where it is located, who is responsible for it and how to protect it. In addition, the Contractor shall identify an individual who will be an OPSEC Coordinator.

9) All Contractor and subcontractor employees who are not in possession of the appropriate security clearance or access privileges, will be escorted in areas where they may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas.

10) The Prime Contractor Company shall and must have a Facility Clearance (FCL) at the appropriate level (IAW the NISPOM DOD 5220.22-M and AR 380-49) prior to the start of the contract awarded period of performance. If no FCL, the supporting Government Contracting Activity will sponsor the prime contract company in obtaining the FCL.

11) The Contractor and subcontractor shall and must pre-screen candidates using the E-verify Program (http://www.uscis.gov/e-verify) website to meet the established employment eligibility requirements. The Contractor and subcontractor shall and must ensure that the candidate has two (2) valid forms of Government issued identification prior to enrollment to ensure the correct information is entered into the E-verify system. An initial list of verified/eligible candidates must be provided to the COR or KO if a COR is not assigned no later than three (3) business days after the initial contract award.

12) The Contractor and subcontractor shall comply with all Occupational Safety and Health Administration (OSHA) regulations of the United States Department of Labor.

13) The Contractor and subcontractor shall be responsible for complying with all applicable Federal Acquisition Regulations (FAR) and Defense Federal Acquisition Regulation Supplement (DFARS).

14) The contract type will be Firm Fixed Price (FFP). The Contractor and subcontractor shall be responsible for providing all the necessary labor and equipment to accomplish the requirements in this PWS with the exception of any Government Property identified in Section 11 of this contract.

1.8.2 Annual Training Updates: Contractor and subcontractor shall be required to complete an annual training (e.g., Cybersecurity Awareness, AT Level 1, OPSEC and iWATCH) updates. Annual training updates may be accomplished via video or classroom instruction, computer-based instruction, or written materials. The Government may elect to provide unique Government training to Contractor and subcontractor employees who are performing services under this contract. If the Government elects to provide such training, the Government will provide such training at no additional expense to Contractor and subcontractor employees. When directed by the KO, Contractor and subcontractor employees shall attend all such training in a paid status as part of the normal services required and billed under the contract. Such training shall require a performance commitment by Contractor and subcontractor employees and the Contractor shall reimburse the Government (by means of a reduction in an invoice) if Contractor and subcontractor employees fail to attend or achieve course training standards of the unique Government training. The amount of the reimbursement shall be the time lost in training calculated based on the total amount of training time multiplied by the employee(s) salary per hour. The length of the performance commitment by the Contractor or subcontractor employees shall be until the end of all performance under this contract.

1.9 Installation Access:

1.9.1 Contractor and Subcontractor Access.

a. Fort Bliss is a guarded secure military installation. All Contractor and subcontractor employees whether operating their privately-owned vehicles or motorcycles or Contractor or subcontractor-furnished vehicles and equipment shall and must enter the installation through one (1) of the secure access control points (ACPs).

b. Under the present FPCON, vehicle and equipment operators and passengers must possess only a valid photo identification card to access the Installation. Vehicle and equipment operators must also possess and be ready to show a valid state driver's license, current vehicle registration, and proof of state required minimum liability insurance. As determined by the installation FPCON, an elevated FPCON may require additional security screening and/or limited installation access.

1.10 General Contractor Responsibilities:

1.10.1 The Contractor shall, as an independent Contractor, and not as an agent of the Government, furnish all management, labor, tools, supplies, and materials necessary to perform the requirements contained herein unless otherwise provided by the Government. The Contractor shall obtain Government approval prior to Contractor use of Contractor provided hardware and software in the performance of this work. Documents, data files, reports, correspondence, and all other documents and writings, together with any hardware, Commercial Off-the-Shelf (COTS) software, custom- developed software, data charts, graphs, tables, illustrations, photographs, images, and other illustrative, explanatory, historical documents related thereto or independent thereof, regardless of the medium (or media) by which they were produced, preserved, stored, provided or created in connection with or for purpose(s) of work performed under this PWS and during the execution of this contract, shall become property of the Government at the end of the task order and shall be delivered to the COR or KO if a COR is not assigned promptly upon request.

1.10.2 The Contractor agrees to and shall assume responsibility for protecting the confidentiality of Government records, which is not considered public information. Each Contractor or subcontractor employee to whom information may be made available or disclosed shall be notified in writing by the Contractor that such information may be disclosed only for purposes and to the extent authorized herein. The Contractor or subcontractor shall not release any information related to this contract to the public, media or other unauthorized persons or organizations unless the Government has conducted the appropriate security review and granted written approval (e.g., posting information to a public website).

Retention and release of For Official Use Only (FOUO) information and Personally Identifiable Information (PII) is not authorized unless granted by written approval from the Government. The Contractor and subcontractor employees shall sign non-disclosure agreements during the Contractor on-boarding process.

1.10.3 The Contractor shall provide on-site management staff with full company authority to oversee the assigned resources and enable rapid resolution of day-to-day service delivery issues. The Contractor shall and must maintain continuity between the support operations at Fort Bliss, TX. DPW and the Contractor’s corporate offices. The Contractor shall develop and maintain end-to-end Standard Operating Procedures (SOPs) to identify collaborative responsibilities and support process interaction with other Government and Contractor groups. The Contractor shall present SOPs to the Government for review and approval within 15 calendar days after base contract award and subsequent option period year awards and prior to implementation. The Contractor shall provide SOP updates throughout the contract performance period as required but no less than annually. The Contractor shall follow current Government approved policies, procedures, and processes until SOPs are revised, coordinated, and approved. The Contractor shall also maintain technical documents as required.

1.10.4 The Contractor and subcontractor shall participate in authorized on-site meetings; prepare and present written and oral briefings on progress of work, prepare white papers, reports, draft meeting minutes, and responses to IT- related data calls as requested by the Government.

1.10.5 The Contractor and subcontractor shall utilize commercial best business practices such as:

1.10.5.1 The Information Technology Infrastructure Library (ITIL) version 3 (ITILv3).

1.10.5.2 Project Management Body of Knowledge (PMBOK) guide.

1.10.5.3 Rapid Improvement Events (RIE), Value Stream Analysis (VSA), or Lean Six Sigma (LSS).

1.10.5.4 Control Objectives for Information and Related Technology(COBIT).

1.10.5.5 Capability Maturity Model Integration (CMMI).

1.10.6 The Contractor shall submit a Staffing Plan with proposal and comprehensive management plan within 15 calendar days after base contract award. The plan shall include, but is not limited to, the following:

1.10.6.1 The Contractor Staffing Plan shall provide a description and chart reflecting the proposed organization and describe the logic driving the choice of organizational structure. The chart shall include the labor categories, skill levels, key personnel/employees, prime or sub and staffing counts. The Contractor Staffing Plan shall describe the Contractor’s phased staffing levels during transition and steady state operations and the rational for those levels based on the Contractor’s proposed Integrated Master Schedule (IMS) and proposed technical and management approaches. The Staffing Plan shall describe the Contractor’s staffing approach, including the methodology used to attract and retain a staff of professional personnel/employees with necessary skill sets, training, certifications and security clearances to deliver the Fort Bliss, TX. DPW and efforts to maintain a high employee satisfaction geared toward reducing turnover enhancing staff retention. The Contractor shall provide evidence of Contractor and subcontractor employees IT certifications and software application certifications. The Staffing Plan shall identify significant staffing risks and associated mitigation strategies to ensure continued capability during transitions and steady state operations. The Staffing Plan shall describe the approach to maintaining the required qualifications for all personal throughout the period of performance of the contract and to meet PWS requirements.

1.10.6.2 Plan and procedures for Quality Control Management (QCM) including methods to measure, monitor, and report on performance, costs, schedules, deliverables and method for Risk Management planning and analysis.

1.10.6.3 Plan to develop, implement, and maintain SOPs throughout the contract performance period.

1.10.6.4 Procedures for developing written project plans and organization improvements including estimation methodology for staffing and resources, and scheduling with lead-time and critical path.

1.10.6.5 Plan to implement an integrated team approach for delivery of services and method for overall management of subcontractors. The Contractor shall be responsible and accountable for subcontractor performance on this contract.

1.10.6.6 Procedure for updating the organization structure, staffing plan, and staff qualifications and certifications.

1.10.6.7 Procedures to provide SME’s for participation in various working groups and meetings (e.g., the Enterprise Change Control Board and the Project Management Working Group).

1.10.6.8 Procedures and project Level of Effort (LOE) estimating standard methodology that the Contractor shall be using for creating project estimate and schedule projection and timely project status reports for current and planned initiatives and programs.

1.10.6.9 Method and plan for Problem Escalation Management.

1.10.6.10 Method and plan for Vulnerability Management.

1.10.7 Procedure for updating the organization structure, staffing plan, and staff qualifications and certifications.

1.11 Upon Government approval, the Contractor shall implement plans and procedures, and address discrepancies through the Contractor’s QCM procedures.

1.12 Points of Contact:

TBD

1.13 Transition:

1.13.1 Transition-In

The incoming Contractor shall develop and submit their transition-in plan as part of their proposal. The incoming Contractor shall follow its transition-in plan as submitted as part of their proposal and keep the COR or KO if a COR is not assigned fully informed of their status throughout the transition period. Throughout the transition-in period, it is essential that attention be given by the incoming Contractor to minimize interruptions or delays to work in progress that would impact the mission. The incoming Contractor shall and must plan for the transfer of work control, delineating the method for processing and assigning tasks during the transition-in/transition-out periods. The incoming Contractor shall overlap key staff personnel/employees with the outgoing Contractor during transition and shall work with Government personnel/employees and the outgoing Contractor to acquire and transfer knowledge, information and documentation for all projects and tasks related to this contract. The type of information and documentation to be acquired by the incoming Contractor includes, but is not limited to, all files pertaining to projects and analysis generated during the period of performance. Throughout the transition-in period, it is essential that attention be given by the incoming Contractor to minimize interruptions or delays to work in progress that would impact the mission. The incoming Contractor shall keep the Government fully informed of their status throughout the transition-in period. The incoming Contractor shall pay close attention to CLIN PoP start dates in their proposal since there are CLINs which have early start dates with 30 days built-in as an overlap for some key and other positions. The Contractor shall quote accordingly based on the PoPs listed since all CLINSs do not have the same start dates.

1.13.2 Transition-Out

The Contractor shall develop and provide a transition-out plan to the COR or KO if a COR is not assigned no later than sixty (60) days prior to expiration of this contract. The Contractor shall maintain complete documentation that is totally assessable to the designated Government representatives via a web portal or some other portal as the Government directs. The outgoing Contractor shall overlap with the incoming Contractor during transition and shall work with Government personnel/employees and the incoming Contractor to transfer knowledge, information and documentation for all projects and tasks related to this contract. The type of information and documentation to be transferred includes, but is not limited to, all system administration and other login credentials, and all files pertaining to projects and analysis generated during the period of performance of the contract. Throughout the transition-out period, it is essential that attention be given by the outgoing Contractor to minimize interruptions or delays to work in progress that would impact the mission. The outgoing Contractor shall keep the Government fully informed of their status throughout the transition-out period.

Note: All records related to the execution of the current contract shall be returned to the Government by the outgoing Contractor as electronic copies that are readable and accessible by the Government.

1.14 The Contractor shall seek to ensure customer satisfaction through professional and ethical behavior of all Contractor and subcontractor employees.

1.15 The Contractor and subcontractor shall at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS. If a Contractor and/or subcontractor employee is on vacation, sick or otherwise absent, the Contractor and/or subcontractor shall have a fully trained, certified employee from outside the current workforce with the appropriate identity documents (CAC, etc.) to enter the Installation and workplace and access the network to replace the employee until they return to work. If the Contractor and/or subcontractor fail to have a fully trained and certified employee from outside the current workforce with the appropriate identity documents (CAC, etc.) to enter the Installation and workplace and access the network to replace the absent employee, the Contractor shall reimburse the Government and shall not invoice for the absent employee’s salary for that period of time. The reimbursement shall be the time lost by not having a fully trained and certified employee with the appropriate identity documents (CAC, etc.) to enter the Installation and workplace and access the network from outside the current workforce to replace the employee until they return to work calculated based on the total amount of work time missed multiplied by the employee(s) salary per hour. The length of the performance commitment by the Contractor and subcontractor shall be until the end of all performance under this contract. The Contractor and subcontractor shall understand stability and continuity of the workforce and the uninterrupted performance of all tasks listed in this PWS is essential.

2.0 Specific Tasks:

2.1 IM/IT/Cybersecurity Program Management

Task 1: DPW IM/IT/Cybersecurity Planning and Execution Support.

The Contractor shall ensure all DPW IM/IT/Cybersecurity related functions are tracked. A plan shall be developed and constantly updated that identifies what IM/IT/Cybersecurity is currently at DPW and what is required over the next five (5) years to efficiently and effectively support DPW. The IM/IT/Cybersecurity plan shall include a lifecycle replacement plan with cost and schedule and shall be included in the monthly Program Management Review (PMR).

The Contractor shall develop and implement a monthly PMR to provide reports to the Government on contract performance including, but not limited to, performance measures demonstrating performance to established service levels, hours expended, risks and mitigations, major accomplishments, shortfalls, and future activities.

Task 2: IM/IT/Cybersecurity Project Management Support.

The Contractor shall assist and provide oversight and support in all areas of IM/IT/Cybersecurity Project Management for major or significant IM/IT/Cybersecurity initiatives. The Contractor shall stay abreast of all compliance issues and shall develop all documentation necessary to ensure all DPW systems remain operational and connected to associated networks. The Contractor shall provide verification of previous approved plans for current compliance.

The Contractor shall work in a proactive manner coordinating with Fort Bliss Network Enterprise Center (NEC) to identify all actions required to ensure DPW systems are not blocked or quarantined from networks due to noncompliance reasons.

2.1.1 Cybersecurity

The DPW Cybersecurity Program encompasses two (2) distinct “enclaves”, the Fort Bliss Utility Monitoring and Control System (APMS: DA306543), and a collection of DPW traditional office automation systems (i.e., General IT) hosted by the Fort Bliss NEC.

DPW is responsible for all DoD RMF cybersecurity aspects of the UMCS and maintains the eMASS record for it. For the general IT systems hosted by the Fort Bliss NEC, DPW is responsible to meet Fort Bliss NEC’s requirements to maintain connectivity and be hosted as a tenant component to the Fort Bliss NEC Non-classified Internet Protocol (IP) Router Network (NIPRNet) enclave. Components will be added and removed to both systems. It is the responsibility of the Contractor to ensure the changes do not negatively impact the Cybersecurity posture of a system resulting in a network disconnection, loss of an Approval To Connect (ATC), or loss of an Authority To Operate (ATO).