PWS__A3OB_Mission_Assurance_Assessment_Team_v1.0_DRAFT_26feb25.pdf

AF/A3

A3OB MISSION ASSURANCE ASSESSMENT TEAM (MAAT)

Performance Work Statement (PWS)

VERSION 1.0 DRAFT 26 FEB 2025

Table of Contents

1. BACKGROUND/INTRODUCTION

2. SCOPE

3. APPLICABLE POLICIES/REFERENCE DOCUMENTS

4. REQUIREMENTS

4.1 Personnel

4.2 Travel

4.3 Facilities

5. TASKS

5.1 Pre-Assessment Phase Activities

5.2 Assessment Phase Activities

5.3 Post-Assessment Phase Activities

6. TECHNICAL KNOWLEDGE REQUIREMENTS:

6.1 IT Software and Hardware

6.1.1 Table 1: Subset List of Applications and Tools

6.2 Specialized Training

6.3 Reports

7 LOGISTICS

7.1 Location

7.2 Hours of Operation

7.3 Personnel Management Plan

7.4 Contractor Facilities Operations

7.5 Funds Availability

8 SERVICE DELIVERY SUMMARY

8.1 Performance Requirements Summary

8.1.1 Table 2: Performance Requirements

8.2 Deliverables DD1423, Contract Data Requirements List

9 SECURITY

10 GOVERNMENT FURNISHED PROPERTY OR EQUIPMENT (GFP/GFE)

1. BACKGROUND/INTRODUCTION

The United States Air Force (USAF), Air Force Operations Group, Mission Assurance Division (AF/A3OB), is responsible for policy development, oversight, and management of Critical Asset Risk Management (CARM) programs and Mission Assurance (MA) Construct activities. The AF/A3OB is USAF’s executive agent authorized to identify, assess, manage, and monitor risks to task critical assets (TCAs), defense critical infrastructure (DCI) and manage USAF TCA System of Record deemed essential to strategic mission execution at USAF commands in accordance with Department of Defense Instruction (DoDI) 3020.45, Air Force Policy Directive 10-24, and Air Force Instruction 10-2402.

2. SCOPE

Mission Assurance Assessments (MAA) are accomplished by direction of AF/A3OB executing an integrated assessment methodology as outlined in DoDI 3020.45 (Mission Assurance Construct) and Chairman of the Joint Chiefs of Staff (CJCSI) 3209.01A Mission Assurance Construct Implementation. Mission Assurance Assessments are applicable to major commands (MAJCOM), field operating agencies (FOA), and direct reporting units (DRU).

The objective of MAA is to integrate the various MA-related programs and activities into a comprehensive, standardized, risk management process. The process is designed to assess risk to TCAs, systems, and essential capabilities that support strategic missions.

3. APPLICABLE POLICIES/REFERENCE DOCUMENTS

- DoDD 3020.40, Mission Assurance (MA)

- DoDI 3020.45, Mission Assurance Construct

- DoDI 2000.16, DoD Antiterrorism Standards

- DoDI 6055.17, DoD Installation Emergency Management Program

- DoDI 2000.12, DoD Antiterrorism Program

- DoDI 3020.39, Mission Assurance for DIE

- DoDI 3020.45, Mission Assurance Construct

- CJCSI 3209.01A Mission Assurance Construct Implementation

- AFM 10-24, Mission Assurance

- AFI 10-2402, Critical Asset Risk Management Program

- 2023 DOD Mission Assurance Assessment Benchmarks

- DoDM 8140.03, Cyberspace Workforce Qualification and Management Program

4. REQUIREMENTS

4.1 Personnel

The AF/A3OB requires personnel with knowledge, skills, abilities, effective written and verbal communication, and certifications and/or licenses (see DoDM 8140.03) to successfully conduct mission assurance focused risk assessments as defined in DoDI 3020.45 and CJCSI 3209.01A Mission Assurance Construct Implementation.

Contractor personnel identified to support this effort shall be familiar with the three-phases of conducting mission assurance assessments and the overall four pillars of the MA Construct.

Specifically, contractor personnel shall understand how to conduct 1) Pre-Assessment Phase activities (e.g., Mission Analysis and Pre-Site Survey (PSS) work); 2) Assessment Phase activities to include onsite vulnerability and risk assessments; and 3) Post-Assessment Phase activities (e.g., Post Analysis, Report Writing, and MAJCOM follow-up, etc.) in accordance with Annex A which defines Personnel Requirements.

The Personnel Requirements documented in Annex A comprises the establishment of the Mission Assurance Assessment Team and defines requirements for a Senior Solutions Architect, Senior Systems Engineer (Integration), and a Data Analyst.

The Contractor shall support this requirement with consistent personnel.

The Contractor shall ensure personnel are TS/SCI cleared, ready to be in-processed, and available for orientation to operate as an AF MAA assessor within 45 days of contract award.

4.2 Travel

Contractor personnel shall be able to travel with the team to CONUS (4 trips) and OCONUS (2 trips) locations IAW the annual assessment strategy (typically 6 – 8 trips).

The Contractor shall submit an estimated travel budget once a year, itemizing all estimated travel costs.

The Contractor shall obtain approval for the estimated budget from the COR on an annual basis in writing. However, if the estimate for any trip or traveler deviates more than 25% from the annual estimated cost, the Contractor shall submit a new estimated cost to the COR for approval 30 days prior to travel. All travel must be compliant with the Federal Travel Regulations (FTR), unless otherwise specified by the COR.

Within 30 days of completing the trip, the Contractor shall submit a voucher reflecting the actual costs incurred. The Contractor shall always use reasonable efforts to pursue the most economical travel arrangements and minimize the cost of travel.

The Contractor shall coordinate closely with the COR to arrange travel overseas, specifically when contractor personnel are to fall under a Status of Forces Agreement (SOFA) or other host nation agreements and/or when Synchronized Pre-deployment & Operational Tracker (SPOT) requirements are triggered. The Contractor shall comply with all requirements of the SPOT clauses included in the contract in a timely manner.

The contractor employees shall comply with all DoD mandatory travel reporting policies.

4.3 Facilities

The Contractor shall provide physical workspace for at least 15 people to support AF/A3OB activities.

The workspace shall operate at the TOP SECRET level with access to Sensitive Compartmented Information (SCI), in accordance with the DoD 5220.20-M - National Industrial Security Program Operating Manual (NISPOM) and the DoDM 5200.8 Volume 3 and satisfy all physical security requirements. The workspace shall assure that contractor personnel have access to Unclassified, Secret, and Top-Secret information systems (IS) that communicate with DoD NIPR, SIPR, and JWICS domains, and secure Voice/Video Teleconference (SVTC) capabilities.

5. TASKS

5.1 Pre-Assessment Phase Activities

Contractor personnel, working collaboratively with AF/A3OB, shall at a minimum, execute the following pre-assessment tasks on a regular and recurring basis throughout period of performance.

CONUS or OCONUS travel for 1 week for PSS activities.

- Gain Preparatory Knowledge:

o AF initiate our request coordination on assessment focus statement (AFS) and Defense Threat Reduction Agency (DTRA) processes and procedures, previous assessments, inspections, and MAA reports o Review list of all affiliated base locations, buildings, and assets

- Mission Analysis:

o Understand capability being assessed responsible organization PPBE responsibility, Organizational mission essential functions (MEFs), specific TCAs and/or DCI, and potential threats (e.g., resource based, technologies, threats to water and power, region specific environmental and/or climatic threats, etc.).

- Pre-site survey:

o Actively participate in pre-site survey meetings and discussions and perform liaison duties with installation and MAJCOM POC to coordinate on schedule of events/interviews for MAA (e.g., in/out brief, relevant personnel to engage while onsite, documents to review, physical items to inspect, logistics requirements, etc.), o Gather information about the operational environment, system components, relevant documentation and dependencies to be reviewed, o Assist installation with completing All Hazards Threat Assessment (AHTA) and dependencies o Update the AF/A3OB defined system of record, and finalize and coordinate/sign prepared TCA dependency diagram and power point slides for the MAAT in-brief, o Other duties as assigned by the MA team lead

5.2 Assessment Phase Activities

Contractor shall travel to CONUS or OCONUS MAJCOM’s for up to 2-weeks to conduct analysis using below guidance.

- Vulnerability Analysis:

o Identify potential weaknesses and vulnerabilities within systems, base mission, operations, key or enabling dependencies, supply chain, and personnel shortages or skillset deficiencies, etc. (Utilize the latest version of DoD benchmarks and USAF guidance

- Risk Assessment:

o Evaluate likelihood and severity of potential threats that could negatively affect mission execution

- Threat Analysis:

o Identify potential adversaries (internal and external) and their capabilities o Use JS or AF approved risk assessment tool to capture the data into the MAAT report and system of record

5.3 Post-Assessment Phase Activities

- Data Analysis:

o Evaluate gathered information (e.g., observables, spoken, and/or written) and assess risk to MEFs that may impede mission execution.

o Generate Report: Document MAJCOM specifics, assessment methodology, assessment team, and TCAs and/or DCIs evaluated and create comprehensive reports detailing findings, recommendations for mitigation strategies, responsible group, action items, risks that can be reduced through partnerships, and risks that can be transferred, and dates by when recommended mitigations are projected to be in place.

MAA Reports will be required within 90 days of completing the MAA.

5.4 Provide Data Platform Development, Maintenance, and Analytical Support

Contractor shall be responsible to continue to develop and maintain the Air Force Critical Asset Management System—Envision. This will include continued capability development, integration with DoD MA systems and DAF Data Fabric systems to ensure USAF MA Enterprise data system of record capabilities are maintained.

Task 5.4.1: AFCAMS-Envision Initial Assessment

• Evaluate the current state of AFCAMS-E and provide a comprehensive product roadmap and project management plan to maintain system and respond to changing requirements.

Task 5.4.2: Maintain Integration with Department of Defense (DoD) MA Systems

• Ensure AFCAMS-E maintains compatibility and interoperability with Joint Mission Assurance systems, i.e. Mission Assurance Risk Management System (MARMS)

Task 5.4.3: Provide Data Analytics via AFCAMS-E in support of MA Construct four pillars

• Support ad-hoc analytical requests from Air Force leadership.

Task 5.4.4: Sustainment and Continuous Development of AFCAMS-E

• Provide ongoing system maintenance, enhancement, and performance optimizations.

• Conduct periodic data audits to ensure accuracy and consistency of risk management data.

• Provide user training for AFCAMS-E users and develop training modules for a wider audience.

• Maintain and update AFCAMS-E system and product documentation.

• Maintain documentation, training materials, and knowledge transfer processes to support Air Force personnel.

6. TECHNICAL KNOWLEDGE REQUIREMENTS:

6.1 IT Software and Hardware

The Government requires the MAA Team and support staff to be familiar with and utilize computer systems that comprise the Mission Assurance Risk Management system (MARMS). The MARMS is the overarching system for managing and assessing mission assurance risks across the DoD, inclusive of the USAF.

The AF/A3OB will sponsor contractor personnel for access to systems that are enablers to successful contractor performance.

6.1.1 Table 1: Subset List of Applications and Tools

System/Tool Function Mission Assurance Risk Management System (MARMS)

Overarching system for managing and assessing mission assurance risks across the organization.

ENVISION Air Force Critical Asset Management System (AFCAMS-E). Envision is the database used to manage critical assets, supports comprehensive analysis, and serves as the repository for reports.

Enterprise Protection Risk Management (EPRM)

MARMS module for managing physical security risks at the enterprise level

Electronic Mission Assurance Assessment Program (eMAPP)

MARMS digital module for conducting portions of mission assurance assessments

Strategic Mission Assurance Data System (SMADS)

MARMS module that stores critical mission assurance data, inclusive of threat and asset vulnerability-based information.

Other Other Tools as Defined

6.2 Specialized Training

The Contractor shall ensure that personnel assigned to this contract complete specialized training to maintain professional expertise and certifications in their specific SME functional areas. The Contractor shall maintain and keep updated, training records, including certifications, for all personnel assigned to this contract for the duration of the contract. Contractor personnel shall also participate in specific Mission Assurance Department Training as directed by leadership (e.g., Mission Assurance Department Chief, NE-MA COR, MA Team Lead, etc.).

6.3 Reports

The contractor shall provide Monthly Status Reports detailing certifications attained, schools, conferences attended etc. to maintain required professional expertise.

The contractor shall provide Monthly Expenditure Reports.

7 LOGISTICS

7.1 Location

The Contractor shall support the Mission Assurance Division AF/A3OB at the Pentagon, Alexandria, VA location or other explicitly defined location(s).

7.2 Hours of Operation

Contractor personnel shall expect to work Monday through Friday between the hours of 0600 to 1800 as a standard with core duty hours being 0900 to 1500. Contractor personnel shall expect to work other days/hours than those noted above while on travel or during other Mission Assurance operational windows.

7.3 Personnel Management Plan

The Contractor shall remain mindful that stability and continuity of the workforce are essential to AF/A3OB’s mission success. The Contractor shall notify the CARM Contracting Officer’s Representative (COR) and/or PM within 10 days of a personnel loss or notice of resignation and replace lost personnel within 45 days. The Contractor shall establish a transition plan for its personnel to ensure a seamless transition between in-coming and out-going contractor personnel. The Contractor shall note that the Government reserves the right to review qualifications of each substitution or replacement of personnel prior to consenting to the substitution or replacement.

Contractor shall also maintain a Personnel Recruitment, Retention, Replacement, and Surge Personnel plan to ensure that it remains agile and ready to meet AF MAA mission requirements.

7.4 Contractor Facilities Operations

The contractor shall anticipate storage of classified data and information up to TS as an element of this effort. The storage facility or container will be a Government-Owned, Contractor-Operated (GOCO) facility located in the Washington D.C. National Capital Region. The Contractor Special Security Officer (CSSO) shall provide overall direction for maintaining contractor facility clearances and all clearance information for all (prime and sub-contractor) personnel. The contractor shall maintain the proper staff necessary to maintain all aspects of facility clearance requirements, to include personnel security, facility security, and information security.

7.5 Funds Availability

These validated requirements are dependent on appropriated funds. Thereby, the Contractor shall note that the LOE for this requirement may increase or decrease based on the program’s requirement(s) and funding. Full time equivalent (FTE) personnel work hours are based on the Governments estimated 1880 hours per year.

8 SERVICE DELIVERY SUMMARY

8.1 Performance Requirements Summary

Contractor service/support requirements specified herein summarize performance objectives that relate directly to AF/A3OB mission essential items. The performance threshold briefly describes the minimum acceptable levels of service for each requirement. The AF/A3OB deem these thresholds critical to mission success. Contractor service requirements, performance metrics, and remediation plans are noted below.

8.1.1 Table 2: Performance Requirements

PWS

Section

Performance Objective

Performance Threshold

Method of Surveillance

Incentive/Disincentive

5 (Tasks) Complete scheduled Mission Assurance Assessment as indicated in the IAS

100% COR oversight and administrative need to cancel, re-schedule or obtain waiver

If Contractor meets or exceeds the performance threshold, it will:

(i) contribute to a positive Schedule rating in CPARS.

(ii) increase likelihood of option exercise

5 All TCAs and dependencies were assessed IAW the

AFS

Assess 100% of TCAs and dependencies 90% of the time

Review of final report by COR

If Contractor meets or exceeds the performance threshold, it will:

(i) contribute to a positive Schedule rating in CPARS.

(ii) increase likelihood of option exercise

5.3 MAA Reports are

completed on time and submitted for final review within 90 days post MAA

MAA Reports are received and published to the

DOD/AF

System of record within 90 days of completing the MAA 90% of time

COR Oversight via final document review

If Contractor meets or exceeds the performance threshold, it will:

(i) contribute to a positive Schedule rating in CPARS.

(ii) increase likelihood of option exercise

5.3 MAA Reports are

in correct format, contain at least one COA for each vulnerability completed on Time

Complete and accurate reports 90% of the time

COR Oversight via final document review

If Contractor meets or exceeds the performance threshold, it will:

(i) contribute to a positive Schedule rating in CPARS.

5.4.1 AFCAMS-Envision

Initial Assessment

Provide Initial Assessment and provide Roadmap in the first 90 days

COR Oversight via final document review

If Contractor meets or exceeds the performance threshold, it will:

(i) contribute to a positive Schedule rating in CPARS

5.4.2 Gain and Maintain

Integration with Department of Defense (DoD) MA Systems

Avoid upgrades to

AFCAMS-

Envision that will cause disruptions to connected systems for more than 72 hours

COR Oversight If Contractor meets or exceeds the performance threshold, it will:

(i) contribute to a positive Schedule rating in CPARS.

(ii) increase likelihood of option exercise

5.4.4 Sustainment and

Continuous Development of

AFCAMS-E

Provide 100% accurate documentation for upgrades, training manuals and data configuration

COR Oversight in conjunction with approved roadmap

(If Contractor meets or exceeds the performance threshold, it will:

(i) contribute to a positive Schedule rating in CPARS.

(ii) increase likelihood of option exercise

All Respond to RFIs and Taskers within the time allocated

Provide complete and accurate response to RFI/task related to 4 phases of MA Constructs within the time allocated 90% of the time

COR Oversight If Contractor meets or exceeds the performance threshold, it will:

(i) contribute to a positive Schedule rating in CPARS.

3 – 4 The Contractor shall keep current all required certifications to perform the duties/roles of the appropriate LCAT.

At all times, the Contractor shall ensure its on-site personnel maintain and keep current all certifications.

Review during PMR or in Progress Reports.

If Contractor meets or exceeds the performance threshold, it will:

(i) contribute to a positive Schedule rating in CPARS.

3 – 4 Provide sufficient personnel to perform all tasks specified in Section 4 without interruption.

Replace any departing personnel within 45 days.

Onsite surveillance

7.3 Personnel vacancies No vacancies

greater than 2 weeks

4 Security No violation of security

8.2 Deliverables DD1423, Contract Data Requirements List

Paragraph Number

Item PWS Para Due Date

A001 Monthly Status Report 6.3 1st of each month

A002 Monthly expenditure Report

6.3 1st of each month

A003 Personnel list for security

4.1 and/or Annex A

Within 2 days of contract change

9 SECURITY

The contractor shall possess a DoD TOP SECRET clearance with an SCI caveat Facility Clearance and employees working on this program must be U.S. citizens and shall require a DOD TOP SECRET clearance with an SCI caveat granted by the Defense Security Service (DSS) to provide the required support. Clearances must be in place prior to contract award. A Visit Authorization Letter (VAL) shall be provided for each contractor employee working on this contract who will require access to any AF site. The VALs for collateral security clearance shall be typewritten, contain the information specified in paragraphs 6-103, 6-104 and 6-105 of the National Industrial Security Program Operating Manual (NISPOM), and be submitted to the AF/A3OB Security Manager who will process the request with AF/A3. The term of the VAL shall be for the term of the contract. The Contractor shall provide proof of U.S. citizenship for all contracted employees prior to entering the DTRC. The contractor shall comply with all terms of the DD 254, and the NISPOM, DoD 5220.22-M, NATIONAL INDUSTRIAL SECURITY PROGRAM, and any revisions to that manual. The contractor shall provide all forms and information, apply for clearances and shall be responsible for any expense incurred in obtaining TOP SECRET/SCI security clearances for the contractor employees.

The contractor shall produce SECRET and/or TOP SECRET documents. The contractor shall comply with all DoD requirements for marking, handling, storing and transporting classified documents, working papers, notes, media, etc. (herein referred to as documents) while in the possession of the contractor. This includes any document the contractor may generate in performance of this contract.

The contractor shall demonstrate sound and proven Operations Security practices, ensuring unclassified/sensitive information shall be properly managed and protected at all times, and abide by all AF Operations Security (OPSEC) policies and practices.

The contractor shall adhere to all facility access control policies and procedures. Contractor personnel shall wear security identification badges at all times while in government facilities, as access cards and Identification Cards (IDs) are presented upon request at all entry control points. Lost or stolen IDs or badges shall be verbally reported immediately, and followed up in writing, within 24 hours of incident to the A3OB Contracting Officer Representative.

The contractor shall safeguard all Government property provided for contractor use. At the end of each work period, all Government property, equipment and materials shall be secured.

10 GOVERNMENT FURNISHED PROPERTY OR EQUIPMENT (GFP/GFE)

Government furnished property will only be provided for contractor personnel seated in AF/A3OB workspaces. Specifically, government workspace, a laptop, computer peripheries, Common Access Cards (CACs), AF Email accounts, access to government file servers while off-site, and office supplies will be available.

Government equipment shall only be used by the contractor for the execution of the tasks specified in this contract. Contractor personnel are explicitly prohibited from using government equipment for personal use.

The Contractor shall submit requests for replacement of Government-furnished equipment to the COR for processing. Such requests must specify the reason for the replacement request within 15 days of known requirement. Lost or stolen GFE shall be verbally reported immediately, and followed up in writing, within 24 hours of incident to the COR.

Any accommodations not identified in this section are the responsibility of the contractor for their personnel.

PWS ANNEX A

Version 1.0 DRAFT 26 Feb 25 Page 1 of 3

Title Function Security Operations Specialist (Physical Security)

Conduct assessments of installation and facility’s ability to protect personnel, critical assets, and missions from physical attacks and ability to deter, detect, defend and respond to an attack.

General Engineer Subject Matter Expert (SME) in the Department of Defense (DoD) and United States Air Force (USAF) built infrastructure, including an in-depth understanding of Unified Facilities Criteria (UFCs) and the application of the DoD Mission Assurance Benchmarks for Supporting Infrastructure. The general engineer should also have a working knowledge of USAF Civil Engineering governance, programming, and processes. The general engineer shall conduct thorough vulnerability assessments across various infrastructure elements, such as water, wastewater, electricity, heating, ventilation, and air conditioning (HVAC), petroleum products, fire protection systems, generators, and natural gas systems. A crucial aspect of this position involves performing structural engineering vulnerability assessments that address perimeter security, Access Control Points, facility standoff, and overall facility protection, aligning with the Mission Assurance Program.

Information Operations Specialist

Performs technical communications vulnerability assessments of computer networks, Industrial Control Systems, radio, wireless, and other communication systems that directly support the Mission Assurance Programs or mission critical assets on DoD installations or other agencies’ facilities.

Telecommunications Specialist

Reviews and assesses the telecommunications infrastructure that supports the installation protection programs;

customer’s missions and supporting facilities to include equipment and routing. Additionally, the Telecommunications Specialist shall identify all aspects of communications-related vulnerabilities, impacts of communications on mission execution capability, and provide recommendations to mitigate or eliminate identified vulnerabilities.

Information Systems Auditor Conducts technical cyber and communications vulnerability assessments of computer networks, other technology (OT) systems telecommunications and other communication systems that directly support Mission Assurance Programs on DoD installations and other agencies’ facilities.

Additional skills required for this position are as follows:

- Possess a Bachelor's degree in Computer Science, Computer Engineering, Electrical Engineering, or a related technical discipline. In lieu of a degree, commensurate operational experience may be substituted.

- Possess IAT Level II certifications and CSSP Analyst computing environment certification as defined and described in Joint Publication 3-13 Information Operations and 3-12 Cyberspace Operations, DoDM 8140.03.

- Possess a working knowledge of computer network architecture and network diagraming.

- Possess a working knowledge of Computer Network vulnerability/compliance analysis software.

All Source Analysts (e.g., AFSC 16R – Planning and

All source analysts represent different disciplines and supports mission assurance assessments as they gather and analyze intelligence from various sources to assess potential risks and vulnerabilities that could affect the success of a mission.

Version 1.0 DRAFT 26 Feb 25 Page 2 of 3

Programming, Electromagnetic Spectrum Analyst, Mission Analyst, Emergency Management Specialist, etc.)

AFSC 16R – Planning and Programming Develop and write Air Force plans, programs and policies. Analyze the effectiveness of programming decisions.

Coordinate programming actions to resolve issues.

Electromagnetic Spectrum Analyst All Source Analyst shall assess supporting Defense Critical Infrastructure to identify vulnerabilities, which can be exploited by the UAS threat. Shall exercise ability to apply Radio Frequency (RF) engineering principals to evaluate spectrum dependent technologies. Shall have familiarization with a wide variety of spectrum dependent systems including radars, communications, data links, SATCOM, and GPS technologies. Additionally, the analyst shall be able to determine root causes and recommend methods of resolution; and provide expert advice on the development, integration, operation of and planning for spectrum specific countermeasures.

Mission Analyst All Source Analyst shall characterize the broad array of threats to DoD installations, sites, critical infrastructure, and assets. Identifying and evaluating potential threat actors, capabilities, and tactics and prioritize the data based on impact to military operations by assisting installation in the development of all hazard and threat assessments. Additionally, the All Source Analyst will be responsible for the identification and assessment of assets and threat abilities outside of the installation and integrate this information into a finished assessment product.

Emergency Management Specialist Conducts assessment of Emergency Management (EM); Chemical, Biological, Nuclear, Radiological, and High-Yield Explosives (CBRNE); and Continuity of Operations (COOP) programs to protect personnel, critical assets, and missions from hazards and threats that may impact the installation, facility, or asset.

Mission Assurance Team Lead

Mission Assurance Team Lead shall operate as the personnel responsible for the pre-assessment coordination requirements with AF/A3OB Mission Analyst and providing installation support for the development and publication of the All Hazards and Threat Assessment (AHTA) product in Enterprise Protection Risk Management (EPRM) and coordinating analysis of information gathered from applicable systems, orders, and plans as it relates to the mission focus of the assessment. This position working collaboratively with Support Staff are responsible for reporting to AF/A3OB on a regular basis.

Education and Training Analyst

The Education and Training Analyst shall assure mission assurance Technical, Education and Training operational and procedural requirements for AF/A3OB mission objectives and CARM requirements. The Analyst shall ensure MAAT

Version 1.0 DRAFT 26 Feb 25 Page 3 of 3 operational requirements training standards for each MA functional elements are administered and managed IAW USAF training management standards, practices, and policies. Member shall support the organization with annual conferences.

Senior Solutions Architect Senior Solutions Architect shall execute Project Management, process mapping/development, solution design, integration with other Department of Air Force (DAF) and DoD data systems and processes. Member shall apply architect designs software solutions to address complex business challenges. They shall work with MA and MAAT requirement business owners to understand needs and translate requirements into technical specifications and deliverables.

Obtainment of “Foundry Solution Architect” certification is required within 90 days of award.

Senior Systems Engineer/Integrator

Senior Systems Engineer/Integrator shall execute the role of Data Platform User Experience and Application Designer, Data Collection and Entry by designing the user interface and experience of a data collection platform, specifically focusing on making the process of entering data as intuitive and efficient as possible for users, ensuring accurate data capture and minimizing errors. Experience working in Palantir Foundry’s data integration and platform application development is also desired. Technical Proficiency: Competence in Type Script, user experience (UX) design, and database modeling best practices.

- Certification: Must achieve “Foundry Application Developer Certification” within 90 days of award.

Data Analyst Shall execute Data Pipeline and Ontology Development and shall have experience working in dynamic environments with stakeholders from multiple external organizations. Shall have at least 1 year working with data engineering in the Palantir Foundry data integration platform or approved equivalent, inclusive of both data pipelines and complex ontology development. Shall have demonstrable extensive knowledge of distributed computing frameworks (e.g., Spark) and Foundry programming languages (Python, PySpark, SQL, TypeScript).

- Certification: “Foundry Data Engineer Certification” shall be acquired within 90 days of award.

Technical Writer/Editor Shall support mission assurance assessment team requirements assessment reports, staffing, coordinating, and processing deliverable in accordance with MAA time line requirements. The MA Technical Writer produces fact-based documents and reports with information about MAA products and services, and how they work. The technical writer shall gain/maintain an understanding of MA products and/or applications and then design and write documentation to administratively support user requirements.

Other Additional SMEs as needed to support MAA requirements as determined by the MAA Team Lead and CARM Branch Chief.

8.2 Deliverables DD1423, Contract Data Requirements List