PES-HI_Engineering_and_Installation_Support_BPA_PWS_Draft.pdf

Enclosure 2d, PWS

Page 1 of 21 Pages

2Jun2016/Version 13

Performance Work Statement (PWS)

Engineering and Installation Site Support

Blanket Purchase Agreement (BPA) As of 29 August 2016

Contract Number: (completed by the KO at time of contract or TO award)

Task Order Number: (completed by the KO at time of TO award or N/A)

Tracking Number: (completed by the KO when complete package is received)

Follow-on to Previous Contract and

Task Order Number:

AT&T, HC1019-06-D-2002 (JHITS - Joint Hawaii Information

Transfer System), PoP: 17 Aug 2006 - 16 Aug 2017

1. Contracting Officer’s Representative (COR).

a. Primary COR.

Name: Major Justin Yuen

Organization: Infrastructure Special Services Division (IE7)

Department of Defense Activity

Address Code (DODAAC):

HC1003

Address: DISA PAC, Pearl Harbor, HI 96860

Phone Number: (808) 472-0203

E-Mail Address: justin.g.yuen.mil@mail.mil

b. Alternate COR (ACOR).

Name: Lee Shannon

Organization: DISA Pacific (PC21)

DODAAC: HC1003

Address: DISA PAC, Pearl Harbor, HI 96860

Phone Number: (808) 472-4221

E-Mail Address: lee.a.shannon.civ@mail.mil

2. Contract Title.

Engineering and Installation (E&I) Site Support Blanket Purchase Agreement (BPA)

3. Background.

This Blanket Purchase Agreement (BPA) is one in a suite of contract vehicles that together provide Pacific

Enterprise Services - Hawaii (PES-HI) services to the customers of the Defense Information System Agency

(DISA). Specifically, this Performance Work Statement (PWS) describes requirements for Engineering and

Installation Site Support that will be procured under this new contract vehicle when the Joint Hawaii Information

Transfer Services (JHITS) contract expires in August 2017.

4. Objectives.

This BPA will provide the vehicle for DISA and DISA’s customers, including the Military Departments (MilDeps) and smaller, low-volume customers, to acquire services and equipment necessary to install, modify, upgrade and optimize current and future Service Delivery Points (SDPs)/nodes and sites.

The Government is seeking turnkey solutions whereby the Contractor will provide DISA and DISA’s customers support with cable and support installation, hardware/software installation, complete node installation, equipment upgrade/reconfiguration, card installation, circuit installation, circuit migration, site preparation, technical assistance, hardware de-installation, etc. The Contractor will ensure that commercial best practices and the latest technologies are utilized in order for the Government to realize efficiencies and meet mission requirements.

Page 2 of 21 Pages

5. Scope.

The scope of this work includes supporting the development of an engineering solution and the installation of all hardware (HW), software (SW) and materials required to establish connectivity between network elements and a customer’s premise equipment. The Contractor will be responsible for delivering a complete, active, and operational service to customers.

The support needed for any individual order may require engineering expertise, coordination with customers and other contractors supporting DISA and DISA’s customers (including engineering contractors, logistics contractors, staging contractors, transition-to-service contractors, etc.), CONUS/OCONUS travel, and procurement/handling of equipment and incidental installation materials (cables, connectors, etc.) in order for the Contractor to deliver an acceptable turnkey solution.

The types of tasks and activities that may be required under this BPA include, but are not limited to:

• Project planning and coordination

• Security planning and coordination (i.e., VAR, clearances, access procedures, etc.)

• Network and circuit transition planning and execution

• Equipment and materials/supplies ordering/receipt, including proper handling/storage

• Site preparation

• Cabling/wiring installation, inspection/testing and removal

• Cable support infrastructure installation

• Hardware/software installation, testing and/or removal

• Hardware upgrades/reconfiguration

• Card installation and replacement

• End-to-end circuit installation/activation/testing/troubleshooting

• Tagging/labeling of lines and equipment

• Reports and documentation, including “as installed” updates or changes to network diagrams (i.e., red line drawings)

• Configuration management

• Hazardous materials mitigation

This E&I Site Support BPA will be awarded as described below:

Site Support activities as described in Paragraph(s) 6.1 and 6.2 will be awarded as Firm Fixed Price (FFP).

The Government may require surge support during the base or any option period, and surge modifications will be within the scope of the contract and provide increased support for the defined task areas of this PWS. Surge support over the life of the contract will not exceed 25% of the Contractor’s total proposed cost/price for the base and all option periods, excluding any six-month extension of services pursuant to FAR 52.217-8.

6. Performance Requirements.

6.1 Task 1 – Task Order Management

6.1.1. Subtask 1 – Task Order Management

The Contractor shall provide the planning, coordination and management control necessary to accomplish all work described in the Task Order (TO). TO support generally involves installation, reconfiguration, testing or troubleshooting telecommunications and includes, but is not limited to, the planning, scheduling, coordination, travel, site/facility access, permits/approvals, vehicular traffic routing plan, aerial work, confined space entry, construction, and documentation required for successful execution. The Contractor shall be responsible for supplying the equipment/materials and qualified (or licensed, as applicable) personnel to meet all requirements in the order. Unless otherwise specified in the order, the Contractor shall comply with all technical implementation standards and performance requirements/standards referenced throughout this PWS, including all appendices.

Page 3 of 21 Pages

The Contractor shall be a licensed Local Exchange Carrier/Competitive Local Exchange Carrier registered with the state Public Utilities Commission/Public Service Commission. In all cases, the Contractor shall utilized qualified, licensed personnel (e.g., licensed electrician) to perform Site Support work.

The Contractor shall provide regular status reports to the Government-designated Point of Contact (POC), detailing the major accomplishments, ongoing activities, issues/concerns and other relevant information for the POC to have full situational awareness of the Contractor’s ongoing work. Additionally, the Contractor shall separately track, manage and report work (and associated costs) performed for individual customers for accounting purposes. These detailed cost reports are required to support cost tracking/recovery efforts by the Government. The format to be used shall be proposed by the Contractor and subject to Government approval.

Deliverables: Weekly Status Report

Detailed (Customer-level) Cost Report

6.2 Task 2 – Site Support

6.2.1. Subtask 1 – Site Support Tasking

The customer will issue an order to the Contractor for the work to be performed. The order will provide the tasking authority to the Contractor for all subsequent actions in support of the requirement, including travel.

Once the order is received, the Contractor shall contact the customer or other Government-designated POC(s) to verify the Statement of Work (SOW)/order requirements and to obtain any additional details needed to determine the level of effort (LOE) and equipment/materials required to complete the work. As needed, the Contractor shall perform a site survey, at no cost to the Government, to conduct data collection/analysis and to gather supporting documentation required for the Contractor to perform a technical analysis of the requirements and/or to develop the

Contractor’s proposed technical solution, work plan and schedule. The customer may modify or expand the

Statement of Work (SOW) after reviewing the Contractor’s technical analysis or proposed technical solution.

Upon verification and acceptance of the SOW/order, the Contractor may proceed with the site support action. If the

SOW/order is found to be inaccurate, the Contractor shall immediately inform the COR and hold the site support action in abeyance until the issue is resolved. During implementation, the Contractor shall ensure compliance with the SOW/order by obtaining confirmation periodically from the customer. Upon completion of the work, the

Contractor shall consolidate completion information for each of the sites where work was accomplished and provide this completion information to the customer or other Government-designated POC(s).

Most Site Support tasking will fall into one of the categories defined below:

a) Engineering Services - The Contractor shall provide engineering consulting services and technical plans and drawings for current technologies, including wireless technologies, as well as for emerging/future telecommunications/network technologies. Engineering related activities also include preparing SOWs, providing technical training and producing professional engineering plans/drawings (signed/sealed by a licensed professional engineer, as required).

b) Circuit/Equipment Installation or Relocation - The Contractor shall execute the actions identified in the order/to deliver a complete, active, and operational service to customers as required. After on-site implementation is complete, the Contractor shall perform all testing and, if necessary, troubleshooting required to ensure the service or system is operational and ready-for-traffic conditions through coordination with the Government-designated POC(s). On-site implementation and check-out tasks will be based on the specific implementation activity, but may include:

• Equipment/material shipment receipt and temporary storage at site

• Crew arrival

• In-briefing for site POC(s)

• Equipment/material shipment inventory

• Initial unpacking and set-up

Page 4 of 21 Pages

• Functional check-out per procedures

• Verification of cross-base fiber/cable (outside plant)

• Connections and splicing

• End-to-end system continuity and functional checks

• Prepare testing documentation, including Test and Acceptance plans

• Testing and turn-up of equipment along fiber/cable path (including amplifiers and line drivers)

• Completion of required implementation checklists

• Completion of property management documentation with site POC(s)

• Disposition of shipping materials, debris, and reusable items

• Exit briefing for site POC(s)

• Delivery of required documentation to the Government-designated POC(s)

c) Circuit/Equipment Decommissioning - The Contractor shall execute the actions identified in the order to deactivate and uninstall circuits and hardware as required. After the equipment is uninstalled, the

Contractor shall execute the equipment disposition instructions provided within the order or supplemental requirements documentation. On-site equipment decommissioning and check-out tasks will be based on the specific implementation activity, but may include:

• Crew arrival

• In-briefing for site POC(s)

• Equipment deactivation and shutdown/power-off

• Equipment and supporting hardware de-installation

• Sanitization of equipment used in classified networks, as applicable

• Disposition of hardware and equipment as directed in the order and/or by site POC(s)

• Preparation/storage of equipment for shipment back to the Logistics facility, if required

• Exit briefing for site POC(s)

• Shipping of Decommissioned Materials or IBOM, if required

• Delivery of required documentation to the Government-designated POC(s)

d) Inside Plant - The Contractor shall provide engineering proposals and pricing for engineering, installation and construction services for Inside Plant (ISP) work, which includes, but is not limited to:

• Installation of telecommunications equipment, such as fiber optic terminals, legacy channel banks and modems, Private Branch Exchanges (PBX) and Local Session Controllers (LSC), etc.

• Software upgrades for Government Furnished Equipment (GFE), such as 5ESS, Tekelec STPs, Voicemail Systems, Network Management Systems, Facility Monitoring, Remote Entry Systems, etc.

• Installation of ISP plant cable and support structures

• Electrical work (AC/DC), such as Electrical Generators, DC Battery Banks, Rectifiers, Distribution

Systems, Uninterruptable Power System (UPS), etc.

• Environmental systems, such as air conditioning units/systems

• Telecommunications room fire suppression systems

• Installation of support structures, such as raceways, risers, ladder racks, sub ducts, inner ducts, and cable sleeves

• Installation of plenum cable

e) Outside Plant - The Contractor shall provide engineering proposals and pricing for engineering, installation and construction services for Outside Plant (OSP) work, which includes, but is not limited to:

installation and/or removal of aerial and underground support structures to include utility poles, maintenance holes, conduits, pull boxes, hand holes, guying, etc.

• Provide Optical Fiber Cable Installation, both aerial and underground

• Provide Optical Fiber Cable Troubleshooting, both aerial and underground

• Provide Optical Fiber Cable Repair, both aerial and underground

• Provide Optical Fiber Cable Removal, both aerial and underground

• Provide Copper Cable Installation, both aerial and underground

• Provide Copper Cable Troubleshooting, both aerial and underground

• Provide Copper Cable Repair, both aerial and underground

• Provide Copper Cable Removal, both aerial and underground

Page 5 of 21 Pages

When requested by the Government, the Contractor shall also provide temporary OSP facilities to support urgent needs for services and shall provide all drop service feeds required to provide services at any customer location. This shall minimally include identification and tagging of each drop service feed installation. The Contractor shall be fully responsible for the general safety of drop service placement and the overall plant condition of these drop feeds.

f) Hazardous Materials - The Contractor shall propose and provide, upon approval, mitigation of any hazardous materials, the occurrence of which is anticipated or unanticipated, in the course of fulfilling the work identified in the order. The Contractor shall comply with the DoD Unified Facilities Guide

Specification - 02 81 00, Transportation and Disposal of Hazardous Materials, February 2010.

g) Special Projects - The Contractor shall provide engineering proposals and pricing for engineering, installation, and construction for unique projects, such as microwave and wireless technologies, Digital

Subscriber Line (DSL) services, Passive Optical Network/Gigabit Passive Optical Network (PON/GPON), and other current and emerging technologies.

Deliverables: Technical Management Work Plan

Test Plans/Procedures and Results

Software Release Report/Updates

Engineering Proposal/Pricing

6.2.2. Subtask 2 – Site Support Schedule Tracking and Configuration Management

The Contractor shall enter the scheduled implementation dates into the Contractor’s project tracking system when the work has been scheduled with the customer. If the schedule is changed for any reason, the tracking system shall be updated within one workday. The Contractor shall also update the tracking system within one workday for all work completed.

The Contractor shall also maintain formal configuration baselines and associated documentation for all implementation and construction activities assigned by Government-provided Contracts, Detailed Architectural

Drawings (DADs), Implementation Requests (IRs), or orders. Documentation includes, but is not limited to, “as-built” drawings, power and heating/ventilation/air conditioning (HVAC) diagrams, cable plant drawings (indicating duct bank, cable routes, size, construction dates, blueprints, and entrance details), “butterfly diagrams”, checklists, test reports, and completion reports. Activities for which the Contractor shall maintain documentation and data include:

• All SDP implementations, including remote devices

• All network element additions and deletions

• All circuit installations/modifications, including fiber characteristics, and other fiber technical data

• All Outside Plan (OSP) and Inside Plant (ISP) construction, “as-built”, and butterfly diagrams

• All minor construction for power, fire suppression, and HVAC work

The Contractor shall provide configuration drawings, data and associated documentation for implementations to the

Government. All components shall be depicted in the drawings, including patch panel locations, cable pair identifiers, installed equipment, etc. The Contractor shall submit configuration documents to the Government within thirty (30) business days after completion of each requirement. A copy of the data shall be made available upon request to the local site personnel. The Contractor shall also support configuration change management reviews as required.

Deliverables: Configuration Documentation/Data

6.2.3. Subtask 3 – Site Support Implementation Time Frames

Unless otherwise specified in the order, the Contractor shall act on Routine orders within ten (10) business days. For

Expedited orders, the schedule identified in the order shall be met, if possible. The Contractor shall perform the action during the Contractor’s normal business hours, unless otherwise negotiated with the customer. If the requested date(s) for the Expedited order cannot be met, the Contractor shall process and implement Expedited

Page 6 of 21 Pages orders ahead of Routine orders. The Government may communicate Urgent requirements via email or verbal instruction and follow-up with the order. For Urgent orders, the Contractor shall proceed to complete the work as soon as possible after receiving the order. Historically, Urgent orders occur infrequently and shall be undertaken by the Contractor as directed and worked ahead of Expedited and Routine orders.

6.2.4. Subtask 4 – Site Support Installation Bill of Materials (IBOM) Procurement

For site support implementations, the Contractor shall procure the required installation materials (modules, cables, etc.) as directed by the Government. In situations where the materials required to complete the site support action(s) have not been identified in the technical solution and, consequently, not procured, the Contractor is authorized (up to a maximum of $1,000 U.S. per implementation) to procure these minor installation items locally to complete the implementation action and shall report the occurrence to the Government-designated POC(s).

6.2.5. Subtask 5 – Site Support Implementation Coordination and Completion

The Contractor shall coordinate with order provisioners, local site POC(s) and other Government-designated POC(s) to ensure the required actions and services are delivered on time and meet all performance requirements. This includes coordinating with the Logistics vendor to ensure that proper shipping and handling of materials occurs.

Tasks include, but are not limited to:

• Analyzing the order to identify each SDP/node and to determine the equipment/materials needed to complete work at each location

• Ensuring compatibility of hardware/software and materials to be installed with Government POC(s) prior to installation

• Contacting local site POC(s) as needed to arrange site visits

• Confirming circuit path is ready for final installation

• Procuring IBOM

• Confirming IBOM is on-site prior to dispatch

• Working with the Logistics vendor to confirm cryptographic devices are on-site (as required)

• Scheduling the technical dispatch

• Coordinating the scheduling of Authorized Service Interruptions (ASIs) to ensure operational impacts are minimized. ASI Requests shall contain, at a minimum, all of the data elements found in the sample ASI

Form in Appendix B of this PWS.

The Contractor shall provide Exit briefings to site personnel on the work accomplished and an orientation briefing on new types of equipment installed at the site. Upon completion of the work, the Contractor shall consolidate and document completion information for each of the sites where work was accomplished in a Completion Report.

Completion Reports shall contain, at a minimum, all of the data elements found in the sample Completion Report in

Appendix B of this PWS. The Contractor shall also submit, as attachments to the Completion Report, updated (red line) diagrams, including revised floor layout diagrams, rack elevation diagrams, network connectivity diagrams, and other applicable documentation. The Completion Report shall be submitted within 10 business days of the completed implementation to the COR and other Government-designated POC(s). The Government will inspect the work prior to approving the Completion Report.

The Contractor shall maintain two (2) sets of full-size contract drawings marked to show deviations that have been made from the contract drawings, including, but not limited to, buried or concealed construction and utility features revealed during the course of construction. The Contractor shall record the horizontal and vertical location of buried utilities that differ from the contract drawings. The Contractor shall show the size, manufacturer's name, model number and electrical power characteristics of the equipment installed. The drawings shall be available for review by the COR and Government-designated POC(s) at all times. Within ten (10) calendar days of the beneficial occupancy date, the Contractor shall deliver the marked sets of prints to the COR and Government-designated

POC(s). Implementation completion will not be approved until master drawings and associated databases online are updated and the “as-built” drawings and prints are delivered to the COR and Government-designated POC(s).

Deliverables: Authorized Service Interruption Request

Completion Report

Page 7 of 21 Pages

6.3 Task 3 – Cyber Threat Security Plan

a) Handling of Non-Public Information

In performance of this contract, the Contractor may have access to Department of Defense (DoD) information. The

Contractor agrees (a) to use and protect such information from unauthorized disclosure IAW DoD Instruction

8582.01: Security of Unclassified DoD Information on Non-DoD Information Systems; (b) to use and disclose such information only for the purpose of performing this contract and to not use or disclose such information for any personal or commercial purpose; (c) to comply with other current Federal and DoD information protection and reporting requirements for specified categories of information (e.g., medical, proprietary, critical program information (CPI), personally identifiable information, export controlled); (d) to obtain permission of the

Government Requiring Activity before disclosing/discussing such information with a third party; (e) to return and

/or electronically purge, upon Government request, any DoD information no longer required for contractor performance; and (f) to advise the Contracting Officer and/or COR of any unauthorized release of such information.

b) Cyber Threat Security Plan

In conjunction with the Defense Federal Acquisition Regulation Supplement (DFARS) Subpart 204.73, Safeguarding Unclassified Controlled Technical Information, DFARS Clause 252.204-7012, Safeguarding unclassified controlled technical information, and DoD, DISA, NIST, and other Federal mandated regulations, instructions, procedures, and laws, the Contractor shall develop, submit, and implement upon approval a Cyber

Threat Security Plan (plan).

The Contractor shall submit the plan 30 days after contract award to the Contracting Officer and COR for acceptance. The Contracting Officer and COR have 10 business days to provide an acceptance or feedback to the

Contractor. If no written acceptance is received within the 10 business days, then the Contractor can consider the plan accepted. If the Contractor receives feedback within the 10 business days, then the Contractor has 10 business days to provide the Contracting Officer and COR an updated plan based on comments provided by the Government.

This plan shall be consistent with and further detail the approach contained in the Contractor’s proposal that resulted in the award of this contract and in compliance with the requirements stated in the clause mentioned under this task.

This plan shall describe the processes and procedures that will be followed to ensure appropriate security of IT resources that are developed, processed, or used under this contract. This plan shall contain the following:

a) Vulnerability Management: evaluate network components, security procedures, and processes for potential exploitation from attack.

b) Cyber Threat Intelligence: provide policy enforcement and end-point protection against unwarranted attacks on the network.

c) Analytics Monitoring: provide scalable analytics solution capable of combining potential risk indicators and developing leads.

d) Mitigation and Response: provide the process on how the threat will be mitigated and responded to upon discovery.

e) Lessons Learned and Action Plan: provide lessons learned and an action plan that will help all interested parties avoid repeated and similar attacks.

f) Subcontractors: explain how your subcontractors will be required to implement this requirement within their processes in support of this task.

Annually, anniversary date of acceptance of the plan, the Contractor shall submit verification to the Contracting

Officer and COR that the plan remains valid.

Deliverable: Cyber Threat Security Plan

c) Contractor Furnished Equipment

Contractor Furnished Equipment (CFE) employed for remote access to a Government network must meet or exceed equivalent Government Furnished Equipment (GFE) cyber security computing requirements. The Contractor shall ensure that all CFE (hardware and software) employed to access these environments meet the following minimum

Government cyber security requirements and provide periodic certification of compliance as a pre-requisite to being granted network access.

Page 8 of 21 Pages

(1) Use of personally owned systems is prohibited;

(2) Operating systems and applications must be configured for compliance with the applicable Security

Technical Implementation Guides (STIGs);

(3) DoD approved anti-virus and anti-spyware software must be installed and signatures must be configured to automatically update on a daily basis;

(4) DoD approved host-level firewall must be utilized and configured to permit traffic by exception only, dropping all other traffic. If the host-level firewall provides intrusion detection or prevention, the signatures or rules must be updated at the same intervals as the anti-virus software;

(5) Computers must be Information Assurance Vulnerability Management (IAVM) compliant;

(6) Computers must be scanned with the currently approved DoD scanner solution at a minimum of every 30 days. All vulnerabilities must be remediated and reported to the cognizant Information Assurance

Manager;

(7) Contractor employees must possess a current Government issued Common Access Card (CAC) and install

Government certified CAC readers; and

(8) Verification of compliance with these requirements must be provided to an appointed government representative on a monthly basis.

7. Performance Standards.

Performance measures will be used by the Government to assess whether the Contractor is performing at acceptable levels under this contract.

Performance Standard Acceptable Quality Level (AQL) Method of Surveillance

Subtask 6.2.1

Hardware Installation:

Small < 2 business days;

Medium < 5 business days;

Large < 8 business days;

X-Large < 15 business days

Pass/Fail on timeliness and acceptance by Government; Target: 95% success with (+/-5%).

Routine inspection of HW

Installation and Government discussions.

Subtask 6.2.1

Circuit Actions/Card Installation

/Reconfiguration Activity; within

1 business day

Pass/Fail on timeliness and acceptance by Government; Target: 95% success with (+/-5%).

Routine inspection of Circuit

Actions/ Card Installation/

Reconfiguration Activity and

Government discussions.

Subtask 6.2.1

Node/Hardware De-Installation:

within 5 business days

Pass/Fail on timeliness and acceptance by Government; Target: 95% success with (+/-5%).

Routine inspection of De-installation and Government discussions.

Subtask 6.2.1

Inside Plant work completed by date(s) specified in the order

Pass/Fail on timeliness and acceptance by Government; Target: 95% success with (+/-5%).

Routine inspection of

ISP work and Government discussions.

Subtask 6.2.1

Outside Plant work completed by date(s) specified in the order

Pass/Fail on timeliness and acceptance by Government; Target: 95% success with (+/-5%).

Routine inspection of

OSP work and Government discussions.

Page 9 of 21 Pages

Subtask 6.2.2

Configuration

Documentation/Data submitted within 15 business days after completion of the implementation

Pass/Fail on timeliness and acceptance by Government; Target: 95% success with (+/-5%).

Pass/Fail on accuracy and completeness;

Target: 95% success (+/-5%).

Routine inspection of configuration drawings.

Subtask 6.2.5

Authorized Service Interruption

(ASI) Request submitted a minimum of 21 days in advance

(for non-restoration actions)

Pass/Fail on timeliness and acceptance by Government; Target 95% success

Routine inspection of ASI and

Government discussions.

Subtask 6.2.5

Completion Report submitted within10 business days after completion of the implementation

Pass/Fail on timeliness and acceptance by Government; Target 95% success

Routine inspection of Completion

Report and Government discussions.

8. Incentives.

No incentives have been identified for this contract.

9. Place of Performance.

Work will be performed at various customer sites in the State of Hawaii and surrounding areas. Activities that are not performed at a field site shall be performed in a Contractor-provided facility. Travel within CONUS or OCONUS may be required to support individual customer requirements.

Alternate Place of Performance - Contingency Only. As determined by the COR, contractor employees may be required to work at an alternate place of performance (e.g., home, the Contractor's facility, or another approved activity within the local travel area) in cases of unforeseen conditions or contingencies (e.g., pandemic conditions, exercises, government closure due to inclement weather, etc.). Non-emergency/non-essential contractors should not report to a closed government facility. Contractor shall prepare all deliverables and other contract documentation utilizing contractor resources. To the extent possible, the Contractor shall use best efforts to provide the same level of support as stated in the PWS. In the event the services are impacted, reduced, compromised, etc., the Contracting

Officer or the Contractor may request an equitable adjustment pursuant to the Changes clause of the contract.

9.1. Hours of OperationThe Contractor shall align personnel service/duty hours with customer time zone(s) supported. Additionally, implementation work that requires an Authorized Service Interruption (ASI) is normally executed outside of normal business hours (e.g., evenings, nights, or weekends). The Contractor shall align service/duty hours to accommodate individual customer requirements.

10. Period of Performance.

The Period of Performance (PoP) is one base year, plus four (4), one-year option periods. As directed by the

COR, the Contractor shall continue performance in emergency or mission essential conditions. Additionally, the

Contractor may be required to account for the whereabouts of their personnel should this information be requested by the COR.

Page 10 of 21 Pages

11. Delivery Schedule.

PWS

Task #

Deliverable Title Format Due Date Distribution Frequency and Remarks

6.1.1 Weekly Status

Report

Contractor-determined format;

electronic (and paper copies upon request)

Close of business each Friday Standard

Distribution*

Weekly

6.1.1 Cost Report

(customer-level detail)

Contractor-determined format;

electronic (and paper copies upon request)

10 business days after completion date of implementation activity

Standard

Distribution*

Once at completion of each implementatio n activity

6.2.1 Technical

Management

Work Plan

Contractor-determined format;

electronic (and paper copies upon request)

Draft plan 10 business days after task order award; Final plan 5 business days after receipt of Government comments

Standard

Distribution*

Once for each implementatio n prior to work commencing

6.2.1 Test Plans

/Procedures and

Results

Contractor-determined format;

electronic (and paper copies upon request)

Test plans/procedures to be submitted with Technical

Mgmt. Work Plan; Test results to be submitted with

Weekly Status Report

Standard

Distribution*

Once for each implementatio n prior to work commencing

6.2.1 Software Release

Report/Updates

Contractor-determined format;

electronic (and paper copies upon request)

Software Release

Report/Updates to be submitted with Weekly Status

Report

Standard

Distribution*

Weekly

6.2.1 Engineering

Proposal/Pricing

Contractor-determined format;

electronic (and paper copies upon request)

10 business days after receipt of Government’s request or as otherwise negotiated with customer

Standard

Distribution*

Once for each proposal request

6.2.2 Configuration

Documentation/

Data

Government-specified format;

electronic (and paper copies upon request)

15 business days after completion date of implementation activity

Standard

Distribution*

Once at completion of each implementatio n activity

6.2.5 ASI Request Government-

specified format;

electronic (and paper copies upon request)

Minimum of 21 days in advance of requested date of action (for non-restoration actions)

Standard

Distribution*

Once prior to start of each implementatio n activity

6.2.5 Completion

Report

Government-specified format;

electronic (and paper copies upon request)

10 business days after completion date of implementation activity

Standard

Distribution*

Once at completion of each implementatio n activity

6.3 b) Cyber Threat

Security Plan

Contractor-determined format;

electronic (and paper copies upon request)

30 days after contract award;

Final plan 10 business days after receipt of Government comments

Standard

Distribution*

Once following contract award;

verification annually

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the Contracting Officer; 1 copy of the transmittal letter with the deliverable to the COR/ACOR.

Page 11 of 21 Pages

12. Security Requirements.

This section shall be considered a supplement to block 13 of the Government provided DD 254, Contract

Classification Specification. The following security requirements shall apply to efforts at a DISA location. The

Contractor shall also comply with individual customer security requirements, as specified in the individual order. In the event of a conflict between DISA and individual customer security requirements, the COR should be notified.

References:

a. DOD 5200.2-R, DOD Personnel Security Program

b. DISAI 240-110-36, Personnel Security

c. DOD 5220.22-M, National Industrial Security Program Operating Manual

d. DOD 5220.22-R, Industrial Security Regulation

e. DODM 5200.01, Vol 1-4 Information Security Program, 24 February 2012

f. DISAI 240-110-8, Information Security

g. DISA Policy Letter, Unauthorized Connections to Network Devices, 11 Sep 2013

h. DISA Form 786

12.1. Facility Security Clearance.

The work to be performed under this contract is up to the SECRET level. Therefore, the company must have a final

SECRET Facility Clearance from the Defense Security Service (DSS) Facility Clearance Branch (FCB). Procedures for obtaining a Facility Clearance (FCL) are found in the National Industrial Security Program Manual (NISPOM) and by contacting the DSS FCB at www.dss.mil/isp/fac_clear/fac_clear.html.

12.2. Personnel Security Clearance and Information Technology (IT) Level.

All contractor personnel performing on or supporting a DoD contract in any way must be U.S. citizens and be properly cleared, qualified personnel. Contractor personnel shall possess a SECRET or at a minimum interim

SECRET personnel security clearance granted by the DoD Central Adjudication Facility (CAF). Failure to obtain and maintain the level of clearance required shall result in removal from the contract. Investigations that are out of scope shall be submitted to DoD CAF prior to assignment to work under this contract.

There are two levels of personnel security requirements under this contract covering the following types of positions:

12.2.1 The following type of positions and tasks require a final SECRET IT-I (Privileged) or minimum interim

SECRET IT-I eligibility when performance starts:

o Systems Architect (Tasks 6.2, 6.3) o Network/Systems Engineer (Tasks 6.2, 6.3) o Hardware/Software Specialist (Tasks 6.2, 6.3)

12.2.2. The following types of positions and tasks require a final SECRET IT-II (Limited Privileged) or minimum interim SECRET IT-II eligibility when performance starts:

o Program/Project Manager (Tasks 6.1, 6.2, 6.3) o Business/Information Analyst (Tasks 6.2, 6.3) o Installation Technician (Tasks 6.2, 6.3) o Quality Assurance Specialist (Tasks 6.2, 6.3) o Technical Writer (Tasks 6.1, 6.2, 6.3) o Technology Subject Matter Expert (SME) (Tasks 6.1, 6.2, 6.3)

12.3. Investigation Requirements.

All personnel requiring Secret IT-I access under this contract shall undergo a favorably adjudicated Single Scope

Background Investigation (SSBI) as a minimum investigation. The SSBI will be maintained current within 5-years and requests for Special Background Periodic Reinvestigation (SBPR) will be initiated prior to the 5-year anniversary date of the previous SSBI or SBPR.

Page 12 of 21 Pages

12.3.1 All personnel requiring SECRET access under this contract shall undergo a favorably adjudicated Tier 3

Investigation formerly known as a National Agency Check, Local Agency Check and Credit Check or Access

National Agency Check and Inquiries as a minimum investigation. The Tier 3 Investigation will be maintained current within 10-years and requests for SECRET Periodic Reinvestigations will be initiated by submitting a Tier 3R investigation prior to the 10-year anniversary date of the previous Tier 3 Investigation.

12.3.2 Contract employees that do not meet the investigation requirements for Secret IT-I access may be granted such access by the DISA Personnel Security Office (DISA PSO) provided there is no disqualifying information within the adjudicative guidelines that cannot be mitigated. The DISA PSO will request the contract employee complete an Electronic Questionnaire for Investigation Processing (e-QIP).The DISA PSO will review the e-QIP and if there's no disqualifying information, the individual may be eligible for Interim Secret IT-I access. Once favorable results are returned from the Federal Bureau Investigation (FBI) name and fingerprint check, and the NAC portion of the investigation is completed favorable, DISA PSO may grant the Interim Secret IT-I provided all other conditions are met. Contract employees found ineligible for Interim Secret IT-I access will not be allowed to support a DISA contract requiring Secret IT-I access and must wait for final favorable adjudications by the appropriate adjudication facility.

12.4. Adjudication for Secret IT-I access.

Favorable adjudication of any previous SSBI, SBPR, or Phased Periodic Reinvestigation by any of the DoD CAFs or other federal adjudications facility within a five year period will be automatically accepted for final Secret IT-I access.

12.4.1 The following requirements must be met prior to granting of interim Secret IT-I authorization:

• The security manager will forward a written request for interim Secret IT-I authorization to DISA PSO for approval. The request for SSBI (e-QIP, FBI name and fingerprint check) must be submitted by DISA PSO to the Office of Personnel Management (OPM).

12.5. Visit Authorization Letters (VAL).

Visit requests shall be processed and verified through the Joint Personnel Adjudication System (JPAS) to SMO

DKABAA10 and SMO DKADAL. JPAS visits for contracts are identified as “Other” or “TAD/TDY” and will include the Contract Number and ADP/IT-Access level of the contract in the Additional Information section.

Contractors that do not have access to JPAS may submit visit authorizations by e-mail in a password protected .pdf to the COR or Government-designated POC.

Primary COR: Major Justin Yuen

Phone Number: (808) 472-0203

Email: Justin.g.yuen.mil@mail.mil

Alternate COR: Lee Shannon

Phone Number: (808) 472-4221

Email: Lee.a.shannon.civ@mail.mil

If JPAS is not available, the VAL must contain the following information on company letterhead

Company name, address, telephone number, assigned CAGE Code, facility security clearance

CAGE CODE

Contract Number

Name, SSN, date and place of birth, and citizenship of the employee intending to visit

Certification of personnel security clearance and any special access authorizations required for the visit

(type of investigation & date, adjudication date & agency, and IT access level)

Name of COR/POC

Dates or period the VAL is to be valid

Page 13 of 21 Pages

12.6. Security Contacts.

DISA Security Personnel can be contacted for security related questions as follows:

For Industrial or Personnel Security related issues contact (301) 225-1235 or via mail at:

Defense Information Systems Agency

ATTN: MP61, Industrial Security

Command Building

6910 Cooper Ave.

Fort Meade, MD 20755-7088

Defense Information Systems Agency

ATTN: MP62, Personnel Security

Command Building

6910 Cooper Ave.

Fort Meade, MD 20755-7088

12.7. Information Security and other miscellaneous requirements.

12.7.1. Contractor personnel must comply with all local security requirements including entry and exit control for personnel and property at the government facility.

12.7.2. Contractor employees will be required to comply with all Government security regulations and requirements.

Initial and periodic safety and security training and briefings will be provided by Government security personnel.

Failure to comply with Government security regulations and requirements will require the company to provide the

Government with a written remediation/corrective action plan; furthermore, failure to comply with such requirements can be cause for removal and the Contractor will not be able to provide service on this contract.

12.7.3. Contractor employees with an incident report in JPAS will not be permitted to provide service on a DISA contract.

12.7.4. The Contractor shall not divulge any information about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the

DoD facility. Identification shall be worn and displayed as required.

12.7.5. DISA retains the right to request removal of contractor personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the

Government.

12.7.6. Contractor personnel will generate or handle documents that contain For Official Use Only information at the Contractor and/or Government facility. Contractor shall have access to generate and handle classified material only at the location(s) listed in the place of performance section of this document. All contractor deliverables shall be marked in accordance with DoDM 5200.1, Vol. 3, Vol. 4, Information Security, DoD 5400.7-R, Freedom of

Information Act Program, unless otherwise directed by the Government. The Contractor shall comply with the provisions of the DoD Industrial Security Manual for handling classified material and producing deliverables. The

Contractor shall comply with DISA Instruction 630-230-19.

12.7.7. The Contractor shall afford the Government access to the Contractor’s facilities, installations, operations, documentation, databases and personnel used in performance of the contract. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability and confidentiality of data or to the function of information technology systems operated on behalf of DISA or DoD, and to preserve evidence of computer crime

(required if Cyber Threat Security Plan is incorporated).

Page 14 of 21 Pages

12.7.8 The Contractor shall comply with Government base/post/camp/station (B/P/C/S) requirements as well as policies related to the preservation of archaeological and historic sites/resources. This includes archeological studies, work stoppage due to the finding of human remains, and the mitigation of threats to native animal and plant species.

12.7.9 The Contractor shall provide a warranty for all services work (to include repairs) for a minimum of six (6) months from date of Government acceptance. All items supplied as part of the order shall be warranted IAW the manufacturer’s warranty.

13. Government Furnished Property (GFP)/Government-Furnished Equipment (GFE)/Government-

Furnished Information (GFI).

All cable, including building wire and cable support structures, as well as hardware, software and other equipment/materials, installed by the Contractor on Government installations, shall become Government property at the time of installation at no additional cost. The Contractor shall work with the GSM-O contractor to ensure all property is added to the Government’s property accountability system/inventory.

14. Other Pertinent Information or Special Considerations.

Additional items may be specified in the individual order.

a. Identification of Possible Follow-on Work. See Paragraph 5. Scope.

b. Identification of Potential Conflicts of Interest (COI). The Contractor must identify any potential organizational COIs during proposal submission. In addition, the Contractor shall self-identify if a potential conflict of interest issue arises during contract performance. An “organizational COI” exists when the nature of the work to be performed may, without some restriction on future activities, (1) result in an unfair competitive advantage to the

Contractor on other contracts or (2) impair the Contractor’s objectivity in performing the contract work.

c. Identification of Non-Disclosure Requirements. The Contractor may have access to proprietary information when performing the tasks defined in this document. The Contractor shall provide the Government with

Government approved, individually signed, non-disclosure agreements (NDAs) form for each contractor employee prior to the contractor employee accessing the proprietary information. The attached NDA form applies for work performed for DISA. The Contractor shall also comply with individual customer NDA requirements. In the event of a conflict between DISA and individual customer NDA requirements, the COR should be notified.

nondisclosure agreement contractor.docx

d. Packaging, Packing and Shipping Instructions. As specified in the individual order.

e. Inspection and Acceptance Criteria. As specified in the individual order.

f. Property Accountability. As applicable in individual orders, the Contractor shall submit the attached

Electronic Product List (see below) in addition to complying with all requirements of DFARS 252.211-7003. See

DARS 252.211-9000, Requirement to Submit an Electronic Product List for additional information.

Electronic Products

List (EPL) Template - 22 May 2015.xls

g. Supply Chain Risk Management (SCRM). Not applicable.

Page 15 of 21 Pages

15. Section 508 Accessibility Standards.

The following Section 508 Accessibility Standard(s) (Technical Standards and Functional Performance Criteria) are applicable (if box is checked) to this acquisition.

Technical Standards

1194.21 - Software Applications and Operating Systems

1194.22 - Web Based Intranet and Internet Information and Applications

1194.23 - Telecommunications Products

1194.24 - Video and Multimedia Products

1194.25 - Self-Contained, Closed Products

1194.26 - Desktop and Portable Computers

1194.41 - Information, Documentation and Support

The Technical Standards above facilitate the assurance that the maximum technical standards are provided to the

Offerors. Functional Performance Criteria is the minimally acceptable standards to ensure Section 508 compliance.

This block is checked to ensure that the minimally acceptable electronic and information technology (E&IT) products are proposed.

Functional Performance Criteria

1194.31 - Functional Performance Criteria

Page 16 of 21 Pages

APPENDIX A – Technical Implementation Standards

For individual orders, the Contractor shall seek agreement from the customer on the classification best suited for the required activity and to confirm applicable standards.

1. Implementation Guidelines

The Contractor shall perform installation/de-installation of ISP, OSP cable/equipment and fiber optic cable according to the standards identified in this PWS, the order and/or supplemental requirements documents provided by the Government. Commercial best practices shall be applied wherever possible, as long as practices do not conflict with DoD standards and are agreed to, in advance, by the customer.

1. TIA-492AAAA, Rev B, Nov 2009, Detail Specification for 62.5 um Core Diameter/125 um Cladding

Diameter Class Ia Graded Index Multimode Optical Fibers

2. TIA-492AAAB, Rev A, Nov 2009, Detail Specification for 50 um Core Diameter/125 um Cladding

Diameter Class Ia Graded Index Multimode Optical Fibers

3. TIA-492CAAA, Sep 2002, Detail Specification for Class IVa Dispersion-Unshifted Single-Mode Optical

Fibers 4. TIA-492AAAD, Sep 2009, Detail Specification for 850-nm Laser-Optimized, 50-μm Core

Diameter/125-μm Cladding Diameter Class la Graded-Index Multimode Optical Fibers Suitable for

Manufacturing OM4 Cabled Optical Fiber

4. TIA-492-CAAB, May 2005, Detail Specification for Class IVa Dispersion-Unshifted Single-Mode Optical

Fibers with Low Water Peak

5. ANSI/ICEA-S-83-596, Feb 2016, Standard for Indoor Optical Fiber Cable

6. ANSI//ICEA-S-87-640, Jan 2011, Standard for Optical Fiber Outside Plant Communications Cable

7. ANSI/ICEA-S-104-696,…