PWS_ATEC Civilian Careers Follow-On FINAL.pdf

PWS – ATEC Civilian Careers Website

PERFORMANCE WORK STATEMENT (PWS)

U.S. Army Test and Evaluation Command (ATEC), Headquarters (HQ)

ATEC Civilian Careers Website Management and Maintenance

1.0 Summary

This is a non-personal services contract in support of ATEC HQ Human Resources Directorate (G1) to maintain the ATEC civilian careers public website (www.atecciviliancareers.com).

1.2 Mission

The mission of the ATEC Human Resources Directorate is to implement efficient and effective human resources strategies and practices across the enterprise. In order to streamline the hire process and meet current and emerging mission needs, ATEC is leveraging technology to strategically recruit, acquire, and retain top talent.

1.3 Scope

ATEC requires support services for the maintenance and sustainment of their Civilian Careers public facing website that provides educational and interactive content targeted at individuals with an interest in a civilian career with ATEC and/or subordinate organizations. All content will be provided and approved by ATEC. The responsible contractor will maintain a fully functional website for ATEC that publicizes the vision, missions, interactive map with locations, internships and careers, and lifestyle of the HQ and each subordinate organization for public access.

1.4 Period of Performance

Upon contract award, this contract will include (1) (12-month) base period, followed by 4 (12-month) Option Years.

2.0 General Requirements

The contractor shall provide all personnel, equipment, software, supplies, facilities, transportation, tools, materials, supervision and non-personal services necessary to maintain a fully functional website as defined in this PWS. The contractor shall ensure the website is compliant with modern browsers, such as, Internet Explorer, Microsoft Edge, Firefox, Chrome, and Safari to include their mobile counterparts. The contractor will not have access to any Government systems to develop the website.

2.1 Non-Personal Services

The Government shall not supervise contractor employees nor control the method by which the contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual contractor employees. It shall be the responsibility of the contractor to manage its employees and to guard against any actions that are of the nature of personal services, or give the perception of personal services. If the contractor believes that any actions constitute, or are perceived to constitute personal services, it shall be the contractor's responsibility to notify the Contracting Officer’s Representative (COR) immediately.

2.2 Business Relations

The contractor shall successfully integrate and coordinate all activities needed to execute the requirement. The contractor shall manage the timeliness, completeness, and quality of problem identification. The contractor shall provide corrective action plans, proposal submittals, timely identification of issues, and effective management of subcontractors. The contractor shall seek to ensure customer satisfaction and professional and ethical behavior of all contractor personnel.

2.3 Contract Management

The contractor shall establish clear organizational lines of authority and responsibility to ensure effective management of the resources assigned to the requirement. The contractor must maintain continuity between the support operations at Aberdeen Proving Grounds (APG) and the contractor's corporate offices.

2.3.1 Data Rights

The Contractor shall deliver data and software (with applicable data rights) as set forth in this PWS. In accordance with DFARS 252.227-7013, 7014, 7016, 7017,7019, 7028, 7030, 7037 and DFARS 252.227-7103.6, the Government obtains under this Contract “Unlimited Rights” to all non-commercial computer software, software source code, computer software documentation, enhancements, technical data, and similar non-commercial data developed exclusively at Government expense and delivered to the Government under this contract. “Unlimited Rights” means rights to use, modify, reproduce, release, perform, display, or disclose in whole or in part, in any manner and for any purpose whatsoever, and to have the ability to authorize others to do so.

For all non-commercial software provided by the contractor, the contractor shall ensure that any individual who creates any of the computer software provides an assignment of any and all proprietary rights in the computer software including all copyrights and patent rights to the software so that the Government has the unlimited rights to the software specified above. It is the contractor's obligation to ensure compliance with all open-source covenants or requirements if any open-source software is included in any deliverable.

The Contractor shall embed the following Code Header in all software components delivered to the Government:

/// SECURITY CLASSIFICATION: CUI

/// UNLIMITED RIGHTS

/// DFARS Clause reference: 252.227-7013 (a)(16) and 252.227-7014 (a)(16) /// Unlimited Rights. The Government has the right to use, modify, reproduce, release, /// perform, display or disclose this (technical data or computer software) in whole or in /// part, in any manner, and for any purpose whatsoever, and to have or authorize others /// to do so.

/// Distribution Statement D. Distribution authorized to the Department of Defense and /// U.S. DoD contractors only in support of US DoD efforts. Other requests shall be /// referred to the Contracting Officer’s Representative (COR).

/// Warning: This document contains data whose export is restricted by the Arms Export /// Control Act (Title 22, U.S.C., Section 2751, et seq.) as amended, or the Export /// Administration Act (Title 50, U.S.C., App 2401 et seq.) as amended. Violations of /// these export laws are subject to severe criminal and civil penalties. Disseminate in /// accordance with provisions of DoD Directive 5230.25.

The contractor agrees that regardless of how contractor-provided data/software is developed or modified during contract performance, the contractor shall deliver data/software marked in accordance with requirements in DFARS 252.227-7013, 252.277-7014, or other applicable DFARS references. All documentation provided under this contract is a deliverable to the Government, and the Government has Unlimited Rights to documentation.

For commercial data delivered under this contract, the Government has the right to use, modify, reproduce, release, display, or disclose, in whole or in part, in any manner and for any purpose whatsoever, and to have or authorize others to do so. (Refer to DFARS 252.227-7015 Technical Data, Commercial Items). All deliverables shall be made electronically via email IAW CDRL DD1423 instructions. If a delivery is submitted via email and the size or the firewall prevents its delivery, the Contractor shall provide a Secure File Transfer Protocol site that allows the Government to download the deliverable. If a site is not available or not feasible, the Government will make one available to the contractor. In case no sites are available, the contractor shall deliver via compact disk/digital videodisk (CD/DVD). The CD/DVD must be properly labeled to identify the content to include classification, version number, and date.

2.4 Contract Administration

The contractor shall establish processes and assign appropriate resources to effectively administer the requirement. The contractor shall respond to Government requests for contractual actions within the specified timeline. The contractor shall use the COR as the single point of contact between the Government and contractor personnel assigned to support this contract. The COR and Subject Matter Experts (SMEs) will meet as necessary to monitor progress and determine corrective action, if necessary. The contractor shall assign work effort and maintain proper and accurate time keeping records of personnel assigned to work on the requirement.

2.5 Contractor Personnel

The contractor shall provide the necessary resources and infrastructure to manage, perform, and administer the contract.

2.5.1 Project Manager

The contractor shall provide the Contracting Officer (KO) a point of contact for this contract. The Project Manager (PM) will be familiar with the PWS, contract, wide area work flow and all other websites as defined in the PWS.

2.6 Locations and Hours of Work

ATEC’s intent is to have the contractor work at their location and not on-site at ATEC

HQ, APG, MD.

The contractor shall be reachable during normal eastern time business hours (0800-1700) on matters concerning contract payment, invoicing or general business matters.

2.7 Conflicts of Interest

The contractor shall remain conflict of interest free during the entire duration of this contract. If a potential OCI exists or becomes known during performance of the contract, the contractor shall notify the KO immediately.

The KO will analyze all potential OCI as prescribed by FAR Subpart 9.5 and make a determination if an actual OCI exists and whether an actual OCI can be mitigated. The KO will provide the rationale for an OCI determination and request a mitigation plan when the OCI is of a type that can be mitigated. The KO will evaluate the mitigation plan and either approve or disapprove the mitigation plan.

The contractor shall not employ off-duty COR, nor any other persons who is an employee of the U.S. Government or the DOD, either military or civilian, or if such employment would create a conflict of interest.

The above requirements include the prime contractor and all subcontractors.

3.0 Performance Requirements

The following section describes the tasks expected to be executed under this contract.

The contractor will be expected to perform all or a subset of these tasks concurrently.

3.1 Meetings

The contractor shall ensure they conduct all specified meetings below as indicated. The contractor can request additional meetings with the KO and COR.

3.1.1 The contractor will ensure they meet with the COR at each of the following meetings (KO will attend as needed):

1. Kick-off meeting (face to face or webinar)

2. Quarterly progress during the Base Period (face to face, voice or webinar)

3. Post-base period (face to face, voice or webinar)

4. Quarterly meetings (face to face, voice or webinar); for all option years

3.2 Monthly Status Report

The contractor shall submit a monthly status report no later than fifteen (15) days after the end of each month that shall include:

• Issues and Recommendations

• Technical Status

• Schedule of Completed, Current, and Future Tasks

• Website traffic: Total number of site visitors, to include pages visited

3.3 Website Sustainment and Maintenance

The contractor shall provide website sustainment and maintenance for the ATEC Civilian Careers website throughout the contract period of performance (POP), as specified below.

The contractor shall maintain the existing ATEC Civilian Careers website with the registered domain name (atecciviliancareers.com) and ensure it remains a fully functional, efficient, and effective website that is aesthetically pleasing, easy-to-navigate, and mobile accessible as defined. All ATEC stakeholders’ linked pages will be completely functional from the public domain. Website must also use Hypertext Transfer Protocol Secure (HTTPS), rather than HTTP access control. See Attachment 1 for existing Website Framework.

It is the responsibility of the contractor to provide ATEC a standardized format to receive the required information to update the web pages/content. ATEC will provide the contractor, the stakeholders, and the hierarchy with points of contact.

The contractor must have a website content management system with the capability to create new web pages and maintain existing web pages that incorporate text, graphics, pictures, objects, videos, animations, sounds, and all required media enhanced effects as requested by ATEC. The website must ensure/incorporate Search Engine Optimization fundamentals. The contractor can create custom web objects, animations, graphics, and interfaces predominantly using HTML, CSS, jQuery and JavaScript, and occasionally PHP, SQL, and SML.

3.3.1 The contractor shall provide ATEC a work order or ticket system that allows the Content Manager to upload the stakeholder’s products. The work order or ticket system will be utilized through all option years.

3.3.2 The contractor shall create new pages and web-links using the existing web design and infrastructure.

3.3.3 The contractor shall manage stakeholder’s web-link with new or updated content.

3.3.4 The contractor shall establish new web-links for new units and stakeholders within 5 business days.

3.3.5 The contractor shall make changes within 2 business days of receipt of a normal ticket. Expedited tickets need to be processed within 1 business day.

3.3.6 The contractor shall conduct stakeholders’ meetings to review required information to ensure information is accurate and current.

3.3.7 The contractor shall establish development/test and deployment environments for iterative reviews, user testing and approvals.

3.3.8 The contractor shall maintain cloud architecture, security implementation, and sustainment and code version controls.

3.3.9 The contractor shall conduct user acceptance testing, 508 compliance testing, and 404 error identification and institute the necessary resolutions for effective error handling.

3.3.10 The contractor shall track the number of visitors, average time on page, error rate, or successful navigation percentage.

3.3.11 The contractor shall conduct regular/routine maintenance of the website on a weekly basis to ensure stability and minimize outages. Maintenance shall include, but is not limited to checking for and fixing broken links, making sure videos and images are loading properly, ensuring loading speed is optimized (e.g. pages should take no more than 3-4 seconds to load), removing/updating outdated content, resolving tickets, patching any vulnerabilities, and ensuring results show up in major search engines (e.g.

Google, Bing, Yahoo, etc.).

3.4 Social Media and Application Integration

3.4.1 The contractor shall integrate Government managed social media accounts and ATEC’s independently procured Talent Acquisition Software Service application onto the website.

3.4.2 Integrate with the Talent Acquisition platform applications procured by ATEC and optimized for seamless interaction and pose no roadblocks for the users. The contractor will communicate, coordinate, and troubleshoot with Talent Acquisition Platform vendors when necessary to ensure successful integration.

3.5 Support and Training

The contractor shall provide helpdesk support and tracking, training on site usage/navigation, and maintenance services as required during and after implementation of website.

4.0 Special Requirements

This section describes the special requirements for this effort. The following sub-sections provide details of various considerations on this effort.

4.1 Security

The contractor will ensure data is secure and not vulnerable to exploitation. The contractor shall safeguard all Government property and any controlled forms, products, or data. The contractor shall immediately report all thefts, vandalism or destruction of resources (Government or Contractor owned) to the COR upon discovery.

Communications Security (COMSEC)/IT Security. All communications with DOD organizations are subject to COMSEC review. All telephone communications networks are continually subject to intercept by unfriendly intelligence organizations. DOD has authorized the military departments to conduct COMSEC monitoring and recording of telephone calls originating from, or terminating at, DOD organizations. Therefore, the contractor is advised any time they place or receive a call they are subject to COMSEC procedures. The contractor shall ensure wide and frequent dissemination of the above information to all employees dealing with DOD information.

4.2 Cloud Hosting

The Contractor shall maintain all data within the legal jurisdiction of the United States IAW DFARS 239.7602-2(b). The Contractor shall ensure that all cloud-related costs/price, which include but are not limited to: cost of modernization and migration of applications, Cloud Service Provider (CSP) costs, and cloud Operations and Maintenance (O&M) costs/prices are clearly identified and available for government reporting purposes. The contractor shall adhere to the DoD Cloud Computing Security Requirements Guide version 1 release 4 (or superseding versions or releases). In particular, the contractor shall provide security incident response plans, and shall update the plans on an annual basis, or when a significant change occurs to the technical or operational environment. The Contractor shall ensure that the cloud environment fully complies or exceeds the security requirements for impact level 2 in the DoD Cloud Computing Security Requirements Guide (SRG) version 1 release 4 (or superseding versions or releases). The Contractor shall make the environment accessible for a DoD security team to evaluate the environment prior to the placement of any DoD data in the environment and allow for periodic security reviews of the environment during the performance of this contract. The contractor shall ensure that all data-at-rest and data in- transit is encrypted utilizing NSA-approved encryption. The Contractor shall provide U.S. Army Cyber Command relevant access for Army Defensive Cyber Operations (DCO) elements to operate with appropriate access permissions to enable DCO maneuver and response within a timely manner based on severity of incident.

The Contractor shall provide U.S. Army Cyber Command read access to any logging or Security Information and Event Management (SIEM) data and will configure manual or automated export of logging or SIEM data to Army or other government sources on request. For IaaS environments, the contractor shall provide U.S. Army Cyber Command appropriately configured cloud infrastructure for Army Defensive Cyber Operations (DCO) elements to operate from when directed by the United States Government. Upon request by the USG, the contractor shall provide ARCYBER with access to additional information or equipment that is necessary to conduct a forensic analysis. During identified/suspected potential malicious cyber activity (MCA) or cyber security incident, the contractor shall provide U.S. Army Cyber (ARCYBER) all information related to the event, upon request by ARCYBER [DoD Event Category 5 and above within 3 hours or less, DoD Event Category 2-4 within 72 Hours]. Information provided would include but not be limited to: Owning organization/POC, Tenant ID/subscription ID, Resource Group/VPC information, Hostname, IP space, etc.

(1) The contractor shall provide ARCYBER all Government data and Government-related data in the format specified by ARCYBER. (2) The Vendor shall dispose of Government data and Government-related data in accordance with the terms of the contract and provide the confirmation of disposition to ARCYBER in accordance with contract closeout procedures. (3) The contractor shall provide the ARCYBER, or its authorized representatives, access to all Government data and Government-related data, access to contractor personnel involved in performance of the contract, and physical access to any Contractor facility with Government data, for the purpose of audits, investigations, inspections, or other similar activities, as authorized by law or regulation.

The Government will provide all Cloud Service Offering (CSO) requirements, at the required DoD Information Impact Level (IL) including IL2, IL4, IL5, and/or IL6 that are within scope of the Army Enterprise Cloud Contract Vehicle, as Government Furnished Equipment (GFE). The Government will furnish the tenant account administrative credentials or the appropriate role / Identity and Access Management (IAM) as Government Furnished Information (GFI) to the contractor to manage in accordance with Government policies. The contractor will not have access to Root administrator credentials.

4.3 Quality Control

Contractor performance will be monitored and evaluated by the ATEC COR using monthly status reports and quarterly progress meetings. Project status is evaluated based on performance of tasks as outlined in sections 3.3 and 3.4. ATEC project team members will ensure the completeness of each requirement and that the scope has been met by each deliverable.

4.4 Quality Assurance Surveillance Plan (QASP)

ATEC will evaluate the contractor’s performance under this contract IAW its Quality Assurance Surveillance Plan (QASP). This plan describes what ATEC must do to ensure that the contractor has performed IAW performance standards. It defines how the performance standards identified in the PWS will be measured, the frequency of the surveillance, the maximum acceptable defect rate(s), and by whom surveillance will be conducted. Negative performance assessment or surveillance results may be used as the basis for actions against the contractor including, but not limited to, contract termination, withholding of certain payments, or declaring the Contractor in material breach of contract.

4.5 Service Contract Reporting (SCR)

The contractor shall report all contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the Army via a secure data collection site. The contractor is required to completely fill in all required data fields using the following web address: https://sam.gov.

The contractor will provide the COR evidence of reporting before submitting the final invoice.

Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year.

5.0 Definitions

CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

CONTRACTING OFFICER (KO). A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

CONTRACTING OFFICER'S REPRESENTATIVE (COR). Contracting Officer’s Representative (COR) means an individual who is designated and authorized in writing by the Contracting Officer to perform specific technical or administrative functions on https://sam.gov./ contracts or orders. These individuals serve a critical and vital role in assuring contractors meet the performance requirements of the contract in terms of quality, quantity, schedule and of course cost/price. Only contracting officers have the authority to delegate these functions and assign a COR, a COR is not authorized to further delegate any responsibility. The COR will be assigned at time of award. The Contact information will be provided at that time.

WEB-LINK. A single page within the website.

6.0 Deliverables

The contractor shall provide the following deliverables. Deliverables shall be specified by the Government.

Description Timeline for deliverable Point of Contact

Establish a digital ticket system for customers to submit web content in the established standardized format.

15 days COR

Monthly Status Report 15 days after the end of each month

COR

Performance Requirement Summary (PRS)

Statements Standards/Acceptable

Quality Level (AQL) Incentive/Remedy

3.1 Meetings

3.1.1 The contractor will ensure they

meet with the KO/COR at each of the following meetings:

• Kick-off meeting (face to face or webinar)

• Quarterly Progress during the Base Period (face to face, webinar or voice)

• Post-base Period (face to face, webinar or voice)

• Quarterly meetings (face to face, webinar or voice) for all option years

a) Schedules each meeting with all stakeholders.

AQL: 15 days after contract award

3.3 Website Management and Maintenance

3.3.1 The contractor will provide the

ATEC COR a template and process of how stakeholders provide new and/or updated content for their web link.

a) Complete action within timeline specified AQL: 15 days after contract award

3.3.2 The contractor will manage

stakeholder’s web-link with new or updated content

a) normal ticket AQL: 2 business days after submission of ticket

b) expedited ticket AQL: 1 business day after submission of ticket

3.3.3 The contractor will establish

new web-links for new units and stakeholders.

a) Ticket for new content AQL: 5 business days after submission of ticket

3.3.4 The contractor will make

changes within 2 business days of receipt of a normal ticket. Expedited tickets need to be processed prior to 1 business day.

a) Ticket for removal of content AQL: 2 business days after submission of ticket

b) 1 business day after submission of ticket

ATTACHMENT 1

WEBSITE FRAMEWORK