Performance Work Statement (PWS) - CIWT Waterfront Sources Sought.docx

UNCLASSIFIED

FOR OFFICIAL USE ONLY

(U) PERFORMANCE WORK STATEMENT (PWS)

TITLE: (U) Waterfront Training and Technical Support for the Center for Information Warfare Training (CIWT) Information Warfare Courses in support of the Information Warfare Community.

Date: Nov 2024

1.0 (U) SCOPE

(U) This PWS establishes the contractor tasks assigned to the CIWT Information Technology department (N76) team to provide Waterfront training and Technical Support of the Information Technology (IT) courses within the CIWT domain. The period of performance (POP) will be 12 months from delivery order award plus four (4) 1-year option periods, followed by a six (6) month extension.

1.1 (U) Background

(U) The Center for Information Warfare Training (CIWT) exists to provide the Navy and joint services with Information Warfare professionals, that meet all academic and administrative requirements, to be tactically and technically proficient warfighter immediately upon graduation. CIWT’s mission is to deliver trained information warfare professionals to the Navy and joint services, enabling optimal performance of information warfare across the full spectrum of military operations.

1.2 (U) Summary Of Effort

(U) The performance-based support will involve:

During the period of performance, status reporting and financial reporting shall be closely coordinated with the Contracting Officer’s Representative (COR). Regular updates on the progress of the project will be provided to the COR, along with detailed financial reports. The goal is to ensure that the project stays on track and within budget.

1.3 (U) Security Clearance Requirements

(U) As specified in clause 5252.204-9200, classified work shall be performed under this contract. The contractor shall have at the time of Contract Award and prior to commencement of classified work, a SECRET facility security clearance (FCL). Clearance is required to access and handle classified and personal personnel material, attend program meetings, and/or work within restricted areas unescorted.

1.4 (U) Order of Precedence

(U) In the event of a conflict between documents referenced below and this PWS, the contents of this PWS take precedence. Nothing in this PWS supersedes applicable laws and regulations, unless a specific exemption has been obtained.

1.5 (U) Approval Authority

(U) Overall coordination, authority, and final approval for this project are the responsibility of the CIWT Directorate (N7). The CIWT N7 Contract Program Analyst will provide contract oversight and respond within five (5) business days to Contractor questions or requests. The Contracting Officer Representative (COR) will be the administrative point of contact for all official correspondence and information concerning this contract. Final acceptability or unacceptability of all deliverables and tasks performed by the Contractor is the responsibility of the Contracting Officer. The COR is the final approval authority for the work performed on this PWS. CIWT Project Requirements Lead (PRL)/Technical Assistant (TA), familiar with Instructional Systems Design (ISD) and the technical requirements of this PWS, shall support the COR and the CIWT PM.

2.0 (U) APPLICABLE DOCUMENTS

2.1 (U) Department of Defense/Navy Standards

OPNAVINST 1510 (series)

OPNAVINST 1500 (series)

Navy e-Learning (NeL) Content Classification and Controls Marking Supplement

NOTE: (U) Copies of the above DoD specifications and handbooks can be obtained online from the DoD Single Stock Point or from the Acquisition Streamlining and Standardization Information

System (ASSIST) web site. Electronic copies can be downloaded from the ASSIST Web Site located at http://quicksearch.dla.mil/. CIWT PRL/TA will ensure copies of all that are unavailable on ASSIST are available.

2.2 (U) Other Government Documents

Learning Object Module Operator’s Manual

Workforce Management dtd 15 Aug 04

NETC Style Guide CH3 30May2024

HSPD-12 Homeland Security Presidential Directive – Policy for a Common Identification Standard for Federal Employees and Contractors, August 27, 2004 https://www.dhs.gov/HSPD-12

NOTE: (U) The most current Guidance, Policy, Standards, Specifications, Instructions, and Style Guide shall apply.

3.0 (U) REQUIREMENTS

(U) The contractor shall provide necessary resources and knowledge to support the listed tasks. The contractor shall complete all required tasks while controlling and tracking performance and goals in terms of costs, schedules, and resources.

3.1 (U) Program Management Support

(U) The contractor shall work closely with the COR and when applicable provide support at the requiring Command. The Program Manager (PM) will provide comprehensive support for the contractual administration and staff management of the contract and coordinate technical support necessary to meet CIWT N7 operational and course related objectives. The PM shall be responsive to all CIWT requests, responding within 24 hours or as directed.

Typical PM support includes:

· Coordinate meetings, develop meeting agendas, generate meeting minutes, and track action items.

· Develop briefs as required for contractual and operational meetings.

· Attend high-level meetings as requested by CIWT COR/N7.

· Prepare cost estimates to facilitate CIWT COR/N7 decision-making on planned travel and course material expenditures.

· Track and provide budget reports to the COR.

· Provide instructors/SMEs with at least seven (7) years of experience supporting the systems and courses included under contract (listed in para 3.2) and who have formal instructor credentials and experience

· Ensure adequate staffing is maintained to complete all PWS requirements, to include instruction of all courses and technical training equipment support.

· Respond to instructor surge requests when fleet training demands require adding courses on short notice.

· Coordinate support of contract team SMEs to meet CIWT N7 technical support requests.

· Maintain CWF compliance and completion of all CIWT/Navy-required training courses.

· Submit visit requests, ensure maintenance of security clearances and support CIWT and IWTC Security Manger/ISSM requirements.

3.1.1 (U) Program Support Documentation

(U) The contractor shall draft and/or develop various program management (PM) documents (CDRL A001). At a minimum, the following documents are typical PM Deliverables that the contractor shall provide as required:

· General Program Management Reports to include Meeting Agendas, Meeting Minutes, and Trip Reports (CDRL A001)

· Course Completion Reports (CDRL A002)

· Contract Status Reports (CDRL A003)

· Invoice Support Documentation (CDRL A004)

· Contract Financial Status Reports (CDRL A005)

· Quality Assurance Plan (CDRL A006)

3.2 (U) Training Delivery

(U) The contractor shall provide qualified training specialists and SMEs with formal instructor training with at least seven (7) years relevant experience and formal military training on systems they are tasked to deliver training on. Additionally, the contractor shall provide:

· Course Curriculum, Reference Material, and Scheduling documentation will be provided by CIWT and CIWT Staff N7 support contractor.

· Training will be taught in Government-provided facilities on Government TTE at each location: IWTC Virginia Beach, IWTC San Diego, IWTC Virginia Beach Detachment Groton, IWTS Bangor, IWTS YOKO, IWTS Pearl Harbor, IWTC Kings Bay.

· The contractor shall submit CIWT Course Completion Reports (CDRL A002) 5 days after completion.

· The annual number of convenes per course and length of the course are listed in Table 1. The number of convenes listed in Table 1 will be adjusted annually to reflect fleet training requirements.

· Each course listed in Table 1 with zero (0) as the quantity of convenes requires technical support in lieu of course instruction.

· The course schedule is developed by the CIWT Staff N7 support contractor and distributed quarterly.

3.2.1 (U) Training Management Support

(U) The contractor shall provide technical training management support as required. Training Management Support will include the following tasks:

· Training Documentation

· Training Requirements Planning (TRP).

· Navy Training System Plan (NTSP)

· Data Calls and Reporting

· Training Schedules and Plan of Action and Milestones (POAMs)

· Training Meetings and Meeting Support

· Curriculum Development and Maintenance

· Training Delivery

· Reporting and Metrics

· Formal Training

· Technical Training Equipment (TTE) Installation Support and Transition

· Curriculum Development and Maintenance

· Submission of Remedy trouble tickets; includes providing history of pre-installation equipment failures, anomalies, and actions taken to restore.

3.2.2 (U) TTE Technical Support:

(U) The contractor shall provide technical support associated with the delivery of training courses listed in Table 1. The contractor will provide course unique support including, but not limited to the following:

· Performing IAVA updates

· Providing TTE maintenance; to include baselining the systems back to normal in terms of software and non-faulted circuit boards.

· Reviewing curriculum materials as SMEs on the TTE and providing Redline recommendation for updates.

· TTE Lab setup; normalizing Labs upon completion of each training session.

· Entering trouble tickets (IAW CIWT Trouble Ticket Process) as needed to report TTE issues.

· SMEs shall be on-site in a full-time capacity to execute these training support functions. (Historically, all training delivery/TTE technical support contractors have been FTE.)

Specific courses to be taught and specific TTE to be maintained include:

a. AN/USQ-144 K(V)2 - AUTOMATED DIGITAL NETWORK SYSTEM (ADNS)

b. ADVANCED NETWORK SYSTEM ADMINISTRATOR (ANSA)

c. ITN SYS ADMIN BLK 0

d. ITE/ITR BLK 0

e. NETWORK SECURITY VULNERABILITY TECHNICIAN (NSVT)

f. NAVY TACTICAL COMMAND SUPPORT SYSTEM (NTCSS) II MANAGER

g. INFORMATION SYSTEMS SECURITY MANAGER (ISSM)

h. JOURNEYMAN COMMUNICATIONS COURSE (JCC) (MRTS 3D)

i. AN/USQ-208(V) - CONSOLIDATED AFLOAT NETWORKS AND ENTERPRISE SERVICES (CANES)

SYSTEM ADMINISTRATOR/MAINTAINER:

(1) Major Ship Board Systems: AN/USQ-144K(V)2; AN/URT-23E; AN/WSC-3(V)7, 9, 11, 15; R-2368; AN/USQ-145(V); AN/URC-61(C); AN/USQ-195(V)1 BFTN; AN/USR-10B(V) GBS; ON-762/U ATIP; AN/WSC-9(V) 2 / AN/WSC-9A(V) 3 NMT; AN/USC-69(V) 2, 3 CBSP; AN/USQ-208(V); AN/URC-131D(V) HFRG; AN/ARC-210 / AN/SRC-27/58/62/64; AN/SYQ-26A(V)2,3 NAVMACS II; AN/SRC-66 (V) HFDAG; AN/SSR-1.

(2) Supporting Systems:

· Switching/Patching: SA-2112(V) 3, SB-4124, SB-3332, SB-4267, SA-2000, AN/USQ-155(V)

· Multiplexing/Modem: MD-1324, MD-1324A, CV-3510/URA-17, FCC-100(V) 9/9X, MD-1366 A/U EBEM (w/ ESEM), SLM-5650

· Couplers: OA-9123, OA-9277, AN/SRA-56/57/58, AN/URA-38, AN/SRA-49

· Cryptographic: KY-58M, KYV-5M, KIV-7M, KG-175, KGV-136, AN/PYQ-10, AN/PYQ-10A SKL, KG-250 HAIPE, KIK-11 TKL

· Audio: C-10276, TA-970/980/990, AM-3729, LS-474/U, C-10316, PICT-7300/PICT-7500

· Test Equipment: FIREBERD 6000, PSA-65C Spectrum Analyzer; TDS3000B Oscilloscope

(Instr. Days)

* In lieu of course instruction, course requires Technical Support ** TTE Support *** Location has Secret Facility

Table 1. Course details (ELIN)

ANSA

3.3 (U) CIWT TRAINING DIRECTORATE (N7) STAFF SME SUPPORT

3.3.1 (U) IT Communications Systems and Spectrum Management SME support

· The contractor shall at least ten (10) years of Communication Systems and Spectrum Management experience covering the suite of external communications systems used in the Navy’s IT Rating and included within the JCC content.

· The contractor shall have a thorough understanding of the RF Communications TTE, related curriculum content, training delivery architecture, and expertise in content development and staff-level course management.

· The contractor shall have experience with analyzing communications plans to minimize interference, designating setup and voice channels, numbering channels, and grouping voice channels into subsets. Specific channel assignment allocation to sites based on a long-term basis or short-term basis.

· The contractor shall have a thorough understanding of radio communication service allocations and technical specifications of services/technologies that can operate in AOR.

· The contractor supports CIWT’s IT training staff and strategic course initiatives across its enterprise (to include Information Professional Basic Course (IPBC), ICMC, Digital Modular Radio (DMR), High Frequency Radio Group (HFRG), IT A-school foundation/accession training and TACMOBILE (P8) communications), such as the implementation of the Multipurpose Reconfigurable Training System 3D (MRTS 3D) training delivery methodology. Working knowledge of the MRTS 3D training delivery system required.

· The contractor shall assist CIWT in managing RF communications course lifecycles to include content development, attending meetings, course reviews, monitoring course convenes, tracking and reporting on curriculum revisions, course workshops.

· The contractor shall coordinate with CIWT’s subordinate commands to achieve communications systems course modernization objectives.

· The SME will require a CeTARS account and be proficient in assessing course content, delivery, training technology, essential to effective course management in providing CIWT with status, alternatives and solutions.

· Travel not to exceed that listed in paragraph 15.1.

· This position is located onboard CIWT Corry Station, Pensacola, FL.

· This position is not a part of the DSWF/CWF Program

3.3.2 Shipboard TTE SME course management and scheduling support

· The contractor shall provide a Shipboard TTE SME with at least ten (10) years of experience supporting systems listed in para 3.2 for course management and scheduling at WFTD course locations identified in Table 1 (Course Details).

· The contractor shall support CIWT’s IT Course Training Managers using lessons learned and best practices expertise to anticipate and address current and foreseeable shipboard course curriculum, technical training equipment (TTE), and scheduling issues.

· The TTE SME shall monitor training operations and support scheduling of all the advanced technology IT systems courses listed in para 3.2 to support CIWT N7 in delivering effective training.

· The TTE SME will facilitate development of course schedules; inputs to curriculum revisions; identifying, documenting, resolving individual classroom and laboratory TTE issues.

· Coordinate issues affecting multiple sites with cross-site collaboration on curriculum and TTE issues.

· The TTE SME shall provide technical, scheduling, and course operations support to its Training Managers and training staff at the respective CIWT sites.

· The TTE SME will facilitate collaboration among CIWT N7/N4/N6 and IWTC staff and instructors to rapidly respond to instructional, facility/environmental, scheduling changes, and other issues that may affect one or more training sites.

· The TTE SME shall attend course training reviews at specified training sites and other meetings as directed by CIWT N7.

· The TTE SME will require eNTRS, CeTARS, and other training-related accounts, as necessary, in supporting CIWT N7.

· Travel not to exceed that listed in paragraph 15.1.

· This position is located onboard IWTC Virginia Beach, VA.

3.4 (U) INFORMATION TECHNOLOGY (IT) GENERAL REQUIREMENTS

3.4.1 (U) Training and Certification

(U) In accordance with DFAR clause 252.239-7001 and DoDD 8140.01, contractor personnel shall meet all information assurance (IA) training, certification, and tracking requirements as cited in DoDM 8140.03 and the revised – DoD 8140, prior to accessing DoD information systems. Personnel tracking information, which includes subcontractor personnel, shall be included in the monthly contract status report (CDRL A003). Training and certification can be obtained at the following websites:

· DoD Cyber Exchange Public (public.cyber.mil)

· DoD Cyber Exchange NIPR (cyber.mil)

· Total Workforce Management System (https://twms.nmci.navy.mil/.)

3.4.2 (U) Design Changes

(U) Any equipment/system installed or integrated into Navy platform shall meet requirements as specified under DoDI 8500.01.

3.4.3 (U) Training Specialist must have DOD CWF Certifications for the following courses. The government does not compensate for costs incurred to maintain DCWF certification.

JCC (HF/UHF, SHF, EHF) MRTS 3D

IWTC San Diego, CA

Not Applicable

4.0 (U) CONTRACT ADMINISTRATION

(U) Contract Administration is required for all contracts; it provides the government a means for contract management and monitoring. Regardless of the level of support, the ultimate objective of the contractor is ensuring the government’s requirements are met, delivered on schedule, and performed within budget.

4.1 (U) CONTRACT LIAISON

(U) The contractor shall assign a technical single point of contact, also known as the Program Manager (PM) who shall work closely with the government Contracting Officer and COR, as applicable. The contractor PM, located in the contractor’s facility, shall ultimately be responsible for ensuring that the contractor’s performance meets all government contracting requirements within schedule. PM shall have the requisite authority for full control over all company resources necessary for contract performance. Responsibilities shall also include, but not be limited to, the following: personnel management; management of government material and assets; and personnel and facility security. In support of open communication, the contractor PM shall initiate periodic meetings with the COR.

4.2 (U) CONTRACT MONITORING AND MAINTENANCE

(U) The contractor shall have processes established to provide all necessary resources and documentation during various times throughout the day. To address urgent requirements, the contractor shall have processes established during business and non-business hours/days to provide all necessary documentation and resources.

4.2.1 (U) Contract Administration Documentation

(U) Various types of contract administration documents are required throughout the life of the contract. At a minimum, the contractor shall provide the following documentation, unless otherwise specified:

4.2.2 (U) Contract Status Report (CSR) and Contract Funds Status Report (CFSR)

(U) Contract Status Reports (CDRL A003 and CDRL A005) shall be developed and submitted monthly at least 30 days after contract award on the 10th day of each month. The prime shall be responsible for collecting, integrating, and reporting all subcontractor reports. The contract status reports shall be provided to the COR via email, and as per DD1423; see DD1423 for additional reporting details.

(a) Monthly CSR – A monthly status report shall be provided to the COR and government Project Engineer, as applicable. Commencing one full month after the contract award date, CSR status reports shall be submitted no later than the 10th day of each month. The monthly status report shall, as a minimum, include the following items and data:

1. Percentage of work completed

2. Percentage of funds expended per ship/sub/shore command and system

3. Updates to the POA&M and narratives to explain any variances

4. If applicable, notification when obligated costs have exceeded 75% of the amount authorized

(b) Monthly CFSR – A monthly contract financial status report shall be provided to the COR. Commencing one full month after the contract award date, CFSR status reports shall be submitted no later than the 10th day of each month.

4.2.3 (U) WAWF Invoicing Notification and Support Documentation

(U) In accordance with contract clause 252.232-7003 and 252.232-7006, the contractor shall submit payment requests and receiving reports using Wide Area Work Flow (WAWF), which is a secure government Web-based system for electronic invoicing, receipt, and acceptance. The contractor shall provide e-mail notification to the COR when payment requests are submitted to the WAWF. As requested by the COR, the contractor shall provide a soft copy (CDRL A004) of the invoice and any supporting documentation to assist the COR in validating the invoiced amount against the products/services provided during the billing cycle.

5.0 (U) QUALITY ASSURANCE

5.1 (U) QUALITY ASSURANCE SURVEILLANCE PLAN (QASP)

(U) A deliverable that was rated unacceptable will require a meeting between the contractor and the Government to determine the approach required to fix the deliverable. The QASP rating of unacceptable will remain (based on the results of the meeting, the Government reserves the right to keep the initial deliverable rating) for that deliverable since fixes will require re-work and cause a schedule slippage. The QASP will take all deliverables and average them together for a final rating with more weight on final deliverables (i.e. training courseware carries more weight than a monthly status report). Thirty (30) days after contract award, the Contractor shall provide to the government a copy of their Quality Assurance (QA) plan (CDRL A006).

Exceptional – Performance is completed on or prior to the due date 100% of the time without further revisions being required due to the contractor’s error or omission. Contractor incurred cost performance equal to or less than the estimated cost for work performed during the period.

Very Good – Performance is completed on or prior to the due date 100% of the time. Minor revisions are required in < 5% of any of the period’s deliverables due to the contractor’s error or omission. Contractor incurred cost performance equal to or less than the estimated cost for work performed during the period.

Satisfactory – Performance is completed on or prior to the due date 100% of the time. Minor revisions are required in < 10% of any of the period’s deliverables due to the contractor’s error or omission. Contractor incurred cost performance equal to or less than the estimated cost for work performed during the period.

Marginal – Performance is completed on or prior to the due date 95-99% of the time. Minor revisions are required in < 15% of any of the period’s deliverables due to the contractor’s error or omission. Contractor is experiencing cost overruns for performance conducted during the period.

Unsatisfactory – Performance is completed on or prior to the due date less than 95% of the time. Minor revisions are required in 15% or more of any of the period’s deliverables due to the contractor’s error or omission. Contractor is experiencing cost overruns for performance conducted during the period.

5.1.1 (U) Contractor Accountability

(U) During the Post Award Conference, the contractors will be briefed on all requirements, regulations and standards for the contract. If at any time the contractor fails to meet deadlines or if deliverables are rated unacceptable then a meeting will take place between the government, contractors and program managers to resolve any issues causing rework. Materials submitted to the government that contain more than five grammatical, formatting, content, and/or classification errors per document/item will be rejected and returned to the contractor for additional QA and correction. If issues continue to arise, then a meeting will take place between the Contracting Officer Representative (COR) and Contract Officer to discuss potential cure notice.

5.2 (U) QUALITY MANAGEMENT PROCESS COMPLIANCE

5.2.1 (U) General

(U) The contractor shall have processes in place that shall coincide with the government’s quality management processes. As required, the contractor shall use best industry practices including, when applicable, ISO/IEC 15288 for System life cycle processes and ISO/IEC 12207 for Software life cycle processes. The contractor shall provide technical program and project management support that will mitigate the risks to successful program execution.

5.3 (U) QUALITY CONTROL

Unless otherwise directed, the Contractor is responsible for all quality control inspections necessary in the performance of the various tasks as assigned and identified by the respective WBS, POA&M or procedural quality system document. The Government reserves the right to perform any inspections deemed necessary to assure that the Contractor provided services, documents, and material meet the prescribed requirements and to reject any or all services, documents, and material in a category when nonconformance is established.

6.0 (U) DOCUMENTATION AND DELIVERABLES

6.1 (U) CONTRACT DATA REQUIREMENT LISTINGS (CDRLs)

(U) The following CDRL listing identifies the data item deliverables required under this contract and the applicable section of the PWS for which they are required. Section J includes the DD Form 1423s that itemize each CDRL required under the basic contract. The contractor shall establish a practical and cost-effective system for developing and tracking the required CDRLs generated under each task.

6.3 (U) INFORMATION SYSTEM

6.2 (U) ELECTRONIC FORMAT

(U) At a minimum, the Contractor shall provide deliverables electronically by email; hard copies are only required if requested by the government. To ensure information compatibility, the contractor shall guarantee all deliverables (i.e., CDRLs), data, correspondence, etc., are provided in a format approved by the receiving government representative. All data shall be provided in an editable format compatible with standard software configuration as specified below.

7.0 (U) DATA RIGHTS

(U) All data, including source files, 2D and 3D imagery, 3D models and wire-frames, video, audio, animations, design documentation, other support documentation and courseware, developed by the Contractor are the property of the Government, with unlimited rights, and are not to be used for resale by the contractor.

8.0 (U) COPYRIGHTS

(U) The contractor must ensure copyright laws are not violated in the preparation of instructional materials when such materials are obtained outside of Government sources. The contractor shall follow the provisions of SECNAVINST 5870.9 of 14 Jun 2019 and NETC Guide to Copyright Law to request the use of copyrighted material. In the event copyright protected material is used to develop courseware, the contractor shall provide paper-based and electronic copies of copyright permission to the COR or PRL. Each media object must be identified or tagged as originally produced by the contractor, originally produced by the Navy with the identified command, or other source. Photos or media obtained from the Internet must be identified by website, file name, and permission granted. If the item or material is believed to be in the public domain, then the contractor shall provide the COR with paper-based and electronic copies of the information the contractor relied upon showing that the item/material is in the public domain.

8.1 (U) SAFEGUARDS

(U) The contractor shall protect government information and shall provide compliance documentation validating they are meeting this requirement IAW DFARS Clause 252.204-7012.

Examples of safeguarding include:

(a) Do not process DoD information on public computers (e.g., those available for use by the general public in kiosks or hotel business centers) or computers that do not have access control.

(b) Encrypt all information that has been identified as controlled unclassified information (CUI) when it is stored on mobile computing devices such as laptops and personal digital assistants, or removable storage media such as portable hard drives and digital optical disks, using DoD Authorized Data-at-Rest encryption technology.

NOTE: Thumb drives are not authorized for DoD work, storage, or transfer. Use GSA Awarded DAR solutions (GSA # 10359) complying with ASD-NII/DOD-CIO Memorandum, “Encryption of Sensitive Unclassified Data-at-Rest on Mobile Computing Devices and Removable Storage.” The contractor shall ensure all solutions meet FIPS 140-2 compliance requirements.

(c) As applicable, comply with other current Federal and DoD information protection and reporting requirements for specified categories of information (e.g., medical, critical program information (CPI), personally identifiable information, export controlled).

Compliance Pursuant to DoDM 5200.01, the contractor shall include in their quality processes procedures that are compliant with information security requirements.

9.0 (U) SECURITY ORGANIZATION

9.1 (U) Security Officer

(U) The contractor shall appoint a Facility Security Officer (FSO) to support those contractor personnel requiring access to government facility/installation and/or access to information technology systems under this contract. The FSO shall be responsible for tracking the security requirements for all personnel (subcontractors included) utilized on contract. Responsibilities include entering and updating the personnel security related and mandatory training information within the Staffing Plan document, which is part of the DD Form 1423 Contract Data Requirements List, Contract Status Report (CDRL A003) – applicable Staffing Plan sheets include Security Personnel Tracking sheet, CAC Badge Tracking sheet, Mandatory Training Sheet, and Cybersecurity Workforce (CWF) personnel.

9.2 (U) PERSONNEL

(U) The contractor shall conform to the security provisions of DoD Instruction 5220.31 National Industrial Security Program, SECNAVINST 5510.30-C, DoDM 8140.03, and the Privacy Act of 1974. Prior to any labor hours being charged on contract, the Contractor shall ensure their personnel possess and can maintain security clearances at the appropriate level(s) and are certified/credentialed for the Navy Cyber Workforce, as applicable. At a minimum, the contractor shall validate that the background information provided by their employees charged under this contract is correct, and the employee shall hold a minimum of a trustworthy determination. Cost to meet these security requirements is not directly chargeable to delivery order.

(U) NOTE: If a final determination is made that an individual does not meet the minimum standard for a Position of Trust (SF 85P) (National Agency Check with Inquires (NACI) or Moderate Risk Background Investigation (MBI)), then the individual shall be permanently removed from CIWT facilities, projects, and/or programs. If an individual who has been submitted for a security clearance is "denied" for a clearance or receives an "Interim Declination" that individual shall be removed from CIWT facilities, projects, and/or programs until such time as the investigation is fully adjudicated or the individual is resubmitted and is approved. All contractor and subcontractor personnel removed from facilities, projects, and/or programs shall cease charging labor hours directly or indirectly on task and contract.

9.2.1 (U) Personnel Clearance All personnel associated with this contract shall possess a SECRET clearance as these programs/tasks include, as a minimum, contractor personnel having the appropriate clearances required for access to classified data as required. (See DD Form 254 - Department of Defense Contract Security Classification Specification.) Prior to starting work on the task, contractor personnel shall have the required clearance granted by the Department of Defense Consolidated Adjudications Facility (DoD CAF) and shall comply with IT access authorization requirements. In addition, contractor personnel shall possess the appropriate IT level of access for the respective task and position assignment as required by DoDI 8500.01, DoD Instruction for Cybersecurity. Any future revision to the respective directive and instruction shall be applied to the DO level as required. Contractor personnel shall handle and safeguard any Controlled Unclassified Information (CUI) and/or classified information in accordance with appropriate Department of Defense security regulations. Any security violation shall be reported immediately to the COR.

9.2.2 (U) Access Control of Contractor Personnel

9.2.3 (U) Physical Access to Government Facilities and Installations

(U) Contractor personnel shall physically access government facilities and installations for purposes of site visitation, supervisory and quality evaluation, work performed within government spaces (either temporary or permanent), or meeting attendance. Individuals supporting these efforts shall comply with the latest security regulations applicable to the government facility/installation.

(a) The majority of government facilities require contractor personnel to have an approved visit request on file at the facility/installation security office prior to access. The Contractor shall initiate and submit a request for visit authorization to the COR in accordance with DoD Manual 5220.22-M (NISPOM) not later than one (1) week prior to visit – timeframes may vary at each facility/installation. For visitation to all govt. locations, visit request documentation shall be forwarded directly to the on-site facility/installation security office (to be identified at delivery order level) via approval by the COR.

(b) Depending on the facility/installation regulations, contractor personnel shall present a proper form of identification(s) and vehicle proof of insurance or vehicle rental agreement.

(c) All contractor persons engaged in work while on Government property shall be subject to inspection of their vehicles at any time by the Government, and shall report any known or suspected security violations to the Security Department at that location

9.2.4 (U) Identification and Disclosure Requirements

(U) As required in DFARS 211.106, Contractors shall take all means necessary to not represent themselves as government employees. All Contractor personnel shall follow the identification and disclosure requirement as specified in clause 5252.237-9602

9.2.5 (U) Government Badge Requirements

(U) As specified in contract clause 5252.204-9202, some contract personnel shall require a government issued picture badge. While on government installations/facilities, contractors shall abide by each site’s security badge requirements. Various government installations are continually updating their security requirements to meet Homeland Security Presidential Directive (HPSD-12) identification standards. Contractors are responsible for obtaining and complying with the latest security identification requirements for their personnel as required. Contractors shall submit valid paperwork (e.g., site visit request, request for picture badge, and/or SF85P for CAC) to the applicable government security office via the contract COR. The contractor’s appointed Security Officer, which is required in clause 5252.204-9200, shall track all personnel holding local government badges at contract or DO level.

9.3 (U) Common Access Cards (CAC). Common Access Cards (CACs) are required for key personnel who will be involved in this effort. The Contractor shall complete the required access documents and coordinate through CIWT to obtain a CAC within the first 10 days after contract award. The CAC contains a client-side certificate that is necessary to perform various functions and access important information within the AIM and CPM modules. Contractor Facility Support Office (FSO) must submit for each Applicant, a Vetted; MP ICAM (Mission Partner Identity, Credential and Access Management), (Digital Signature of Individual validating background vetting), Block III on MP ICAM form to the appropriate CIWT PM / TPOC, also known as Site Government Sponsor. The PM / TPOC will submit the authorized MP ICAM to the CIWT Mission Partner Affiliation Sponsor (MPAS) for final processing of each Applicant. If Contractors require access to Department of the Navy (DON) information systems such as CPM, LOM, NEL, AIM, the Contractor will coordinate with the CIWT TPOC to receive required network accesses. The Contractor shall report early termination or resignation of a contract employee to the CIWT LTPOC and TPOC immediately via email by the Contractor PM or their direct representative. The contract CIWT TPOC will ensure the CAC is turned in to the nearest RAPIDS site for disposal and the CIWT MPAS is notified in writing to revoke the Government credential of the contract employee. Violation of this section may be considered a breach of contract by the Contractor and may result in termination of contract by the Government.

9.4 (U) Personnel Check-in and Check-out Procedures. All CIWT contractor personnel requiring or possessing a Government badge and/or CAC for facility and/or IT access shall follow the most current revision of Check-in and Check-out Procedures for Contractors applicable to the facility cited in the contract. At contract award throughout contract completion, the contractor shall provide necessary employee information and documentation for employees hired, transferred, and/or terminated in support of this contract within the required timeframe as cited in the Check-in and Check-out instructions. Contractor’s Security Officer shall ensure all contractor employees whose services are no longer required on contract return all applicable Government documents/badges to the appropriate Government representative.

9.5 (U) IT Position Categories

(U) In accordance with DoDI 8500.01, SECNAVINST 5510.30C, DoD 8140.01 and applicable to unclassified DoD information systems, a designator shall be assigned to certain individuals that indicates the level of IT access required to execute the responsibilities of the position based on the potential for an individual assigned to the position to adversely impact DoD missions or functions.

As defined in DoDM 5200.02 and SECNAVINST 5510.30C, the IT Position categories include:

IT-I (Privileged) IT-II (Limited Privileged) IT-III (Non-Privileged)

(U) Investigative requirements for each category vary, depending on the role and whether the individual is a U.S. civilian contractor or a foreign national. The Contractor PM shall assist the COR in determining the appropriate IT Position Category assignment for all contractor personnel. All required appropriate type of background investigation / Tier Level investigation), and National Agency Check (NAC) adjudication shall be performed in accordance with DoDI 8500.01 and SECNAVINST 5510.30C. IT Position Categories shall be determined based on the following criteria:

9.5.1 (U) IT-I Level (Privileged) - Positions in which the incumbent is responsible for the planning, direction, and implementation of a computer security program; major responsibility for the direction, planning and design of a computer system, including the hardware and software; or, can access a system during the operation or maintenance in such a way, and with a relatively high risk for causing grave damage, or realize a significant personal gain. Personnel whose duties meet the criteria for IT-I Position designation require a favorably adjudicated SSBI or SSBI-PR. The T5 or T5R shall be updated a minimum of every 5 years.

9.5.2 (U) IT-II Level (Limited Privileged) - Positions in which the incumbent is responsible for the-direction, planning, design, operation, or maintenance of a computer system, and whose work is technically reviewed by a higher authority at the IT-II Position level to ensure the integrity of the system. Personnel whose duties meet the criteria for an IT-II Position require a favorably adjudicated NAC.

9.5.3 (U) IT-III Level (Non-privileged) - All other positions involved in computer activities. Incumbent in this position has non-privileged access to one or more DoD information systems/applications or database to which they are authorized access. Personnel whose duties meet the criteria for an IT-III Position designation require a favorably adjudicated NAC.

9.5.4 (U) Security Training

(U) Regardless of the contract security level required, the contractor shall be responsible for verifying applicable personnel (including subcontractors) receive all required training. At a minimum, the contractor’s designated Security Officer shall track the following information: security clearance information dates possessing Common Access Cards, issued & expired dates for Security Badge, Information Assurance (IA) training, Privacy Act training, and Navy Cyber Workforce (CWF) certifications, etc. The contractor shall educate employees on the procedures for the handling and production of classified material and documents, and other security measures as described in the PWS in accordance with DoD 5220.22-M.

9.5.5 (U) Disclosure of Information

(U) Contractor employees shall not discuss or disclose any information provided to them in the performance of their duties to parties other than authorized Government and contractor personnel who have a "need to know". Any information or documentation developed by the contractor under direction of the government shall not be used for other purposes without the consent of the government.

9.6 (U) OPERATIONS SECURITY (OPSEC) REQUIREMENTS

(U) Security programs are oriented towards protection of classified information and material. Operations Security (OPSEC) is an operations function, which involves the protection of any critical information – focusing on unclassified information that may be susceptible to adversary exploitation. As directed in DoDD 5205.02E, OPSEC program implements requirements in DoD 5205.02 – OPSEC Program Manual. Note: OPSEC requirements are applicable when contract personnel have access to classified information or unclassified Critical Program Information (CPI)/sensitive information.

9.6.1 (U) Local and Internal OPSEC Requirement

(U) Contractor personnel, including subcontractors if applicable, shall adhere to the OPSEC program policies and practices and existing local site OPSEC procedures. The contractor shall development their own internal OPSEC program specific to the contract.

9.6.2 (U) OPSEC Training

(U) Contractor shall track and ensure applicable personnel receive initial and annual OPSEC awareness training. Training may be provided by the government or a contractor’s OPSEC Manager and shall, as a minimum, cover OPSEC as it relates to contract work, discuss the Critical Information applicable in the contract, and review OPSEC requirements if working at a government facility. Any training materials developed by the contractor shall be reviewed by the CIWT OPSEC Officer, who will ensure it is consistent with CIWT OPSEC policies. OPSEC training requirements are applicable for personnel during their entire term supporting CIWT contracts.

9.6.3 (U) CIWT OPSEC Program

(U) Contractor shall participate in CIWT OPSEC program briefings and working meetings as required. As required, contractor shall complete any OPSEC survey or data call within the timeframe specified.

9.6.4 (U) Classified Contracts

(U) OPSEC requirements identified under a classified contract shall have specific OPSEC requirements listed on the DD Form 254

9.7 (U) DATA HANDLING AND USER CONTROLS

9.7.1 (U) Data Handling

(U) At a minimum, the contractor shall handle all data…