PWS Computer Technicians 09032021.pdf

PERFORMANCE WORK STATEMENT (PWS)

Information Technology and Information Management services

G6, Medical Center of Excellence (MEDCoE)

1. GENERAL: This is a non-personal services contract to provide Information Technology and Information management services. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the

Government.

1.1 Description of Services/Introduction: The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform Information Technology and Information Management

Services as defined in this Performance Work Statement (PWS), section 5 except for those items specified as government furnished property and services. The Contractor shall perform to the standards in this contract.

1.2. Background: The MEDCOE is where the Army brings in all its Medical Areas of

Concentration (AOC) and Military Occupation Specialties (MOS) for training. The MEDCOE

G6 supports the 68W Combat Medic, the second largest Military Occupational Skill in the Army.

Due to the change in MEDCoE Programs of Instruction, Distributed Learning, and the increased number of laptops to support training and education the MEDCOE G6 requires additional help desk support services to the students and staff of MEDCoE end user devices. Without this additional support the MEDCOE G6 is unable to support the devices to enable courses using blended hybrid learning programs to continue mission during and after the COVID pandemic.

Eighteen hundred devices are issued to students (Per the approved 2015 300-68W Program of

Instruction) and are required to be maintained and profiles managed during this most recent

COVID19 pandemic and will continue to need support after the pandemic as the course changes to a hybrid learning environment. Several other Programs of instruction also increased laptops to students to support distributed learning through the pandemic and are now moving towards blended learning. MEDCOE students are required to pass National and State licensure to work their specialty and these devices enable the instructors ability to administer practice exams, lectures, and other material to students to prepare for the high stakes exams required for medical

AOCs and MOSs. Students on quarters/quarantine, medically approved will be enabled to continue training by having them either view or stream the lectures to them, avoiding recycle.

1.2.1 With the current staffing of MEDCOE G6 supporting over 9000 end user devices, 96 servers, and a storage area network the MEDCOE G6 cannot meet the Army’s Suspense of resolving work orders, updating operating systems and security, and continue to fight and defend our Operational Domain from those that wish to do harm to the Government. The purpose of the

PWS is to compliment the current Government IT Specialist staff and Contract G6 technical staff to service and support the additional devices and workload.

1.3 Objectives: The basic service objective is to provide tasks performed in accordance with the terms of this contract as guided by AR 25-1 and MEDCOE G6. Provide hands on, touch labor, and remote IM/IT technical support in accordance with the terms of this contract and as guided by MEDCOE G6.

1.4 Scope: The Contractor shall provide experienced/certified personnel to perform the required services IOT meet all the requirements within the PWS.

1.5 Period of Performance: The period of performance shall be a 12-month base year and four

12-month (4) options years.

1.6 GENERAL INFORMATION:

1.6.1 Federal Observed Holidays: Contractor is or is not required to perform services on holidays.

New Year’s Day Labor Day

Martin Luther King Jr.’s Birthday Columbus Day

President’s Day Veteran’s Day

Memorial Day Thanksgiving Day

Independence Day Christmas Day

Juneteenth

1.6.2 Hours of Operation: Each Contractor is responsible for conducting business, between the hours of 0730 to 1630, not to exceed 40 hrs/week Monday through Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons.

1.6.3 Place of Performance: The work to be performed under this contract will be performed at

Fort Sam Houston, TX.

1.6.4 Quality Control Program (QCP): The Contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The QCP shall initially identify potential problem areas and evolve over the life of the contract to incorporate identified problem areas based upon experience to develop an optimal QCP. The

Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract. The plan shall include an inspection system covering all the performance evaluation attributes. It must specify the areas to be inspected on a scheduled and unscheduled basis, how often inspections shall be accomplished, and the title of the individual(s) who shall perform the inspection. The methods for identifying and preventing defects in the quality of service performed before the level of performance becomes unacceptable. On site records of all inspections conducted by the

Contractor and necessary corrective action taken shall be made available to the Government during the term of the contract. The Contractor shall update the QCP as required and provide copies to the KO and COR. The Quality Control Plan shall be delivered to the COR for delivery to the KO within 30 days of contract award. In the event revisions are required the Contractor shall return the revised QCP within five (5) working days of receipt of notification to revise.

After acceptance of the quality control plan the Contractor shall receive the contracting officer’s acceptance in writing of any proposed change to his QC system.

1.6.5 Quality Assurance: N/A

1.6.6 Type of Contract: The Government will award a single Firm Fixed Price (FFP) commercial services contract award to perform the services as described.

1.6.7 Security Requirements: Work under this task order is Unclassified. The Contractor shall comply with all applicable Department of Defense (DoD) security regulations and procedures during the performance of this contract. The Contractor shall not disclose and must safeguard procurement sensitive information, computer systems and data, Privacy Act data, and

Government personnel work products that are obtained or generated in the performance of this contract. This includes dissemination of protocols and papers not generally available through the public literature.

1.6.7.1. Physical Security: The Contractor shall comply with all applicable federal, state and local laws and ensure performance is secure while protecting material, equipment, and supplies from damage and loss. Government security personnel shall have the express right to inspect for security violations at any time during the term of the contract.

1.6.7.1.1. The Contractor shall be responsible for safeguarding all government equipment, information and property provided for Contractor use. At the close of each work period, government facilities, equipment and materials shall be secured.

1.6.7.2. Key Control: The Contractor shall be responsible for safeguarding all keys issued to them according to MEDCoE Memo 190-1, Key and Lock Control Program.

1.6.8. Special Qualifications: The Contractor shall ensure employees have all required professional certifications/licenses (current and valid) for the specified occupation category before commencement of work.

1.6.8.1 All IT level II positions must be COMPTIA security plus certified prior to providing services on this contract. The contractor shall sign a Privilege-level Access Agreement (PAA) and Non-Disclosure Agreement (NDA) as a prerequisite to maintaining their positions. The contractor shall provide all training to ensure contractor personnel maintain technical proficiency for the O&M of the systems, software, and hardware outlined in DoD 8570.01-M, dated 19

December 2005, and incorporating change 3, 24 January 2012 DoD Information Assurance

Workforce Improvement Program, Chapter 3 (three) and other specified training described in this PWS. Training for existing hardware and software shall be provided at no additional cost to the Government. The Government will not provide or fund training to obtain certification for new contract employees.

1.6.8.2. All Contractor employees must be fluent in spoken and written English.

1.6.9 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation (FAR) Subpart 42.5. The KO and Contracting

Officer’s Representative (COR) shall meet periodically with the contractor to review the contractor's performance. At these meetings the KO will apprise the Contractor of how the

Government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues.

1.6.10 Contracting Officer’s Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration The COR is authorized to perform the following functions: Assure that the

Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the

Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, and specifications; monitor Contractor's performance and notifies both the KO and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.11 Key Personnel: N/A

1.6.12 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their Contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by Contractors are suitably marked as

Contractor products or that Contractor participation is appropriately disclosed.

1.6.12.1 The COR will coordinate the issuance of required installation passes to Contractor personnel, if applicable. Contract personnel shall wear a badge that clearly identifies them as a contract employee. The badge will contain a personal picture, name of employee, and

Contractor’s name. Badges shall be worn on the outer garment in full view at all times, attached to the outer shirt or jacket pocket by a button or clip or worn around the neck secured by an appropriate identification card lanyard.

1.6.13 Contractor Travel:

1.6.13.1 Local Vicinity: Travel within the local vicinity is required. Travel reimbursements for local travel are not authorized, nor are use of a government vehicle.

1.6.13.2 Distance Travel: Travel outside the local vicinity is not required.

1.6.14 Contractor Personnel Conduct: Contractor personnel’s conduct shall not reflect discredit upon the Government. The Contractor shall ensure that personnel present a professional appearance. The Contractor’s employees shall observe and comply with all local policies and procedures concerning fire, safety, environmental protection, sanitation, security, and possession of firearms or other lethal or illegal weapons or substance. The Contractor is responsible for ensuring that any contractor employees providing services under this contract conduct themselves and perform services in a professional, safe, and responsible manner. The Contractor shall remove from the job site any employee for reasons of misconduct or security. In accordance with DOD Directive 5500.7-R, “Joint Ethics Regulation”, Contractor employees must avoid improperly influenced in the execution of their duties under the contract. Particular attention should be paid to acceptance of gifts/ gratuities, and on non-disclosure of sensitive or classified information. The Contractor shall ensure employee conduct complies with 41 U.S. C 423 relative to release of acquisition related information or actions or discussions which may prejudice future competitions. The Contractor shall ensure no contractor employees conduct political related activities or events on the USAR Facilities.

1.6.14.1. The Contracting Officer may require the Contractor to remove from the job site any employee who is identified as a potential threat to the health, safety, security, general wellbeing or operational mission of the installation and its population.

1.6.15. Other Direct Costs: N/A

1.6.16. Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes and licensure of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the Contracting Officer. All materials supplied to the

Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.17 Organizational Conflict of Interest: Contractor and sub-Contractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR

Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The

Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the

Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.18 Antiterrorism (AT) and Operations Security (OPSEC)

1.6.18.1 AT Level I Training: All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities, and controlled access areas shall complete AT

Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR or to the KO, if a COR is not assigned within [15] calendar days after completion of training by all employees and subcontractor personnel.

1.6.18.2 Access and General Protection/Security Policy and Procedures: Contractor and all associated sub-contractors’ employees shall comply with applicable installation, facility, and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation

Provost Marshall Office, Director of Emergency Services, or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DOD, HQDA, and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.6.18.3. For contractors requiring Common Access Card (CAC). Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army

Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

1.6.18.3 iWATCH Training: The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity

ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within XX calendar days of contract award and within YY calendar days of new employees commencing performance with the results reported to the COR NLT [insert number of calendar days] calendar days after contract award.

1.6.18.4 Contractor Employees Who Require Access to Government Information Systems (IS):

All contractor employees with access to a government IS must be registered in the ATCTS

(Army Training Certification Tracking System) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the IS and then annually thereafter.

1.6.18.6 For Contracts that Require OPSEC Training: Per AR 530-1, Operations Security, new contractor employees must complete Level I OPSEC training within 30 calendar days of their reporting for duty. All contractor employees must complete annual OPSEC awareness training.

1.6.18.7 For Information Assurance (IA)/Information Technology (IT) Training: All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD

8570.01, DoD 8570.01-M and AR 25-2.

1.6.18.8 For Information Assurance (IA)/Information Technology (IT) Certification: Per DoD

8570.01-M, DFARS 252.239.7001, and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

1.6.18.9 Threat Awareness Reporting Program. For all contractors with security clearances. Per

AR 381-12 Threat Awareness and reporting Program (TARP), contractor employees must receive annual TARP training by a CI agent or other trained as specified in 2-4b.

1.6.19 Emergency Services

1.6.19.1 The Contractor shall have competent personnel trained and capable of dealing with minor personnel injuries. The Contractor of their employees shall immediately notify their supervisor of any accident requiring emergency medical treatment. The Contractor will, in turn, notify the KO or COR within 30 minutes of the incident.

1.6.19.2 Emergency medical treatment and services for Contractor personnel is the responsibility of the Contractor.

1.6.20. Identification of Privacy Act. This contract requires the development of a system of records in accordance with the Privacy Act of 1974.

1.6.21. Neither the Contractor nor any of its contract service providers shall disclose or cause to disseminate any information concerning operations of military activities. Such action(s) could result in violation of the contract and possible legal actions.

1.6.22. All inquiries, comments or complaints arising from any matter observed, experienced, or learned of as a result of or in connection with the performance of this contract, the resolution of which may require the dissemination of official information, shall be directed to the COR and the Contracting Officer (KO).

1.6.23. The Contractor shall only conduct business with designated government personnel listed as points of contact (POCs). Names of authorized personnel shall be provided to the Contractor by the government, in writing, and updated as necessary throughout the contract period.

1.6.24 U.S. Government records, copies of original results and reports, verified original data, corrected data, and corrected supporting final reports are maintained by the Contractor, but remain the property of the U.S. Government. These files/results must be surrendered to the COR.

Part 2

DEFINITIONS AND ACRONYMS

2. DEFINITIONS AND ACRONYMS. List pertinent Acronyms used in the PWS and the definition.

2.1. DEFINITIONS:

2.1.1. CONTRACTOR. A supplier or vendor having a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER. A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government.

Note: The only individual who can legally bind the government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S.

Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5. DELIVERABLE. Anything that can be physically delivered but may include non-physical things such as meeting minutes.

2.1.6. KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.7. PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.8. QUALITY ASSURANCE. The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.9. QUALITY ASSURANCE Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of Contractor performance.

2.1.10. QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.11. SUBCONTRACTOR. One that enters into a contract with a prime Contractor. The

Government does not have privity of contract with the subContractor.

2.1.12. WORK DAY. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.13. WORK WEEK. Is defined as Monday through Friday, unless specified otherwise.

2.2. ACRONYMS:

AFARS Army Federal Acquisition Regulation Supplement

AR Army Regulation

CFR Code of Federal Regulations

CIO Chief Information Officer

CONUS Continental United States (excludes Alaska and Hawaii)

COR Contracting Officer Representative

COTS Commercial Off the Shelf

DA Department of the Army

DD250 Department of Defense Form 250 (Receiving Report)

DD254 Department of Defense Contract Security Requirement List

DFARS Defense Federal Acquisition Regulation Supplement

DMDC Defense Manpower Data Center

DOD Department of Defense

FAR Federal Acquisition Regulation

FSH Fort Sam Houston

FSO Facility Security Officer

GTF Grow the Force

IA Information Assurance

IM Information Management

IT Information Technology

ITT Information Technology and Telecommunications

JPAS Joint Personnel Adjudicative System

KO Contracting Officer

LRC Learning Resource Center

MEDCoE Medical Center of Excellence

NACLC National Agency Check with Local Agency and Credit Check

NEC Network Enterprise Center

NLT No Later Than

OCI Organizational Conflict of Interest

OCONUS Outside Continental United States (includes Alaska and Hawaii)

ODC Other Direct Costs

PIPO Phase In/Phase Out

POC Point of Contact

POP Period of Performance

PRS Performance Requirements Summary

PWS Performance Work Statement

QA Quality Assurance

QAP Quality Assurance Program

QASP Quality Assurance Surveillance Plan

QC Quality Control

QCP Quality Control Program

SSBI Single Scope Background Investigation

TE Technical Exhibit

Part 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES: All GFE shall be utilized in strict performance of task related duties and the Contractor shall maintain policies that prohibit fraud and abuse.

3.1. Services: The Government will provide the vendor with all of the relevant data required to accomplish development of specific requirements and objectives described in PWS.

3.2. Facilities/Equipment: The Government will provide workspace, computers, utilities, electric power hook-up, and access to copiers, and telephone services, to include local and overseas calls through standard Government assets.

3.3. Utilities: The Government will provide all utilities in the facility will be available for the contractor’s use in performance of tasks outlined in this PWS. The Contractor shall instruct employees in utilities conservation practices. The contractor shall be responsible for operating under conditions that preclude the waste of utilities, which include turning off the water faucets or valves after using the required amount to accomplish cleaning vehicles and equipment.

3.4. Materials: The Government will provide all government specific training to Contractor employees. The Government shall provide the Contractor authority to access all information required to perform the required duties.

Part 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4.0. CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES:

4.1 General: The Contractor shall furnish all supplies, equipment, facilities and services required to perform work under this contract that are not listed under Section 3 of this PWS.

4.2 Secret Facility Clearance: N/A

4.3. Materials: N/A

4.4. Equipment: N/A

Part 5

SPECIFIC TASKS

5.0 SPECIFIC TASKS:

5.1. Basic Services: The Contractor shall provide four (4) contractor man-year equivalent computer technicians (Computer Tech (IT-II)) to provide services to support the MEDCoE, which includes but not limited to:

a. Operate and maintain the IT equipment and software; image, install, configure, troubleshoot, scan, and repair computer workstations, thin client workstations, personal digitals assistant (PDA) devices, printers, and current operating systems

(WIN 10).

b. Load, configure, and troubleshoot software applications unique to the installation and/or customers.

c. Perform administrative tasks in support of deployment services such as equipment documentation, inventory changes, customer contact updates, service issue processing, resolution of system troubles encountered with problems and deployment efforts, documentation of assessment, and timely closeout of service orders.

d. Lock systems out of the network that are not authorized or moved without coordination through the MEDCOE IAM, and NEC, and report associated incidents.

e. Enforces the Information Systems (IS) security guidance policies as provided by the

Information Assurance Management (IAM), and perform Cyber Security/Information

Assurance duties.

f. Enforces system access, operation, maintenance, and disposition requirements.

g. Ensures that personnel meet required security investigation clearance, authorization, mission requirement, and supervisory approval before granting access to the IS.

h. Report security violations and incidents to the servicing Regional Computer

Emergency Response Team (RCERT) in accordance with Section VIII, Incident and

Intrusion Reporting. Remediates vulnerabilities associated with the Information

Assurance Vulnerability Management (IAVM) program as required upon notification from MEDCoE G6 management staff or authorized NEC personnel.

i. Ensures systems are maintained with current anti-virus (AV) engines and definitions on all Information Systems.

j. Submits, reviews, verifies currency and updates user profiles, accounts accesses and logins.

k. Remove departing users’ accounts/profiles before departure.

l. Terminate inactive accounts verified as no longer required that exceed 45 days.

m. Suspend user accounts for the following types of actions: actions that knowingly threaten, damage or harm the IS, network or communications security; revocation, suspension, or denial of security clearance or interim security clearance investigations; or unauthorized use of IS and networks.

n. Maintain and use at least 2 separate accounts for access to network resources, 1 for their privileged level access and a separate general user, non-privileged level account for routine procedures.

o. Monitor IS performance to ensure that recovery processes, security features, and procedures are properly restored after an IS has been rebooted.

p. Monitor IS performance to ensure that processes and security features, and operating system configurations are unaltered.

q. Perform equipment custodian duties as necessary.

r. Notify the IAM when a system is no longer used to process sensitive information, or when changes occur that might affect Certification & Accreditation (C&A), to obtain disposition or resolution instructions.

s. Ensure Configuration Management (CM) for security-relevant IS software, (including

IS warning banners) and hardware is maintained and documented.

t. Implement and test IS and data backup procedures for integrity.

u. Prohibit attempts to strain or test security mechanisms or to perform network-line or keystroke monitoring without authorization.

v. Establish audit trails, conduct reviews and create archives as direct by the Lead or the team, Chief of IT Operations, or the IAM.

5.2 Certification: All IT level II positions must be COMPTIA security plus certified prior to providing services on this contract. The contractor shall sign a Privilege-level Access Agreement

(PAA) and Non-Disclosure Agreement (NDA) as a prerequisite to maintaining their positions.

The contractor shall provide all training to ensure contractor personnel maintain technical proficiency for the O&M of the systems, software, and hardware outlined in DoD 8570.01-M, dated 19 December 2005, and incorporating change 3, 24 January 2012 DoD Information

Assurance Workforce Improvement Program, Chapter 3 (three) and other specified training described in this PWS. Training for existing hardware and software shall be provided at no additional cost to the Government. The Government will not provide or fund training to obtain certification for new contract employees.

5.3. Deliverables: A monthly report will be maintained on the 1800 (68W) student laptops assigned the 32nd Brigade 68W Military Occupational Specialty Area of Operation. The report below will be completed monthly and one copy emailed to the COR by the 10th of each month for the previous month in either MS Word 2016/MS Excel 2016 format.

a. Report monthly by the 10th of the month on the previous month to the COR the total number of devices on hand in the office (PWS5.1).

b. Report monthly by the 10th of the month on the previous month to the COR the total number of devices assigned to students (PWS 5.1).

c. Report monthly by the 10th of the month on the previous month to the COR the total number of devices with the current software per the Network Enterprise Authorization to

Operate version of software (PWS 5.1).

d. Report monthly by the 10th of the month on the previous month to the COR the total number of equipment work orders reported by staff or students (PWS 5.1).

e. Report monthly by the 10th of the month on the previous month to the COR the total number of equipment work orders resolved in the previous month (PWS 5.1).

f. Report monthly by the 10th of the month on the previous month to the COR Total number software work orders reported in the previous (PWS 5.1).

g. Report monthly by the 10th of the month on the previous month to the COR total number software work orders resolved in the previous month (PWS 5.1).

h. Report monthly by the 10th of the month on the previous month to the COR total number of user profiles deleted in the previous month (PWS 5.1).

i. Report monthly by the 10th of the month on the previous month to the COR total number of user profiles created in the previous month (PWS 5.1).

PART 6

APPLICABLE PUBLICATIONS

6. APPLICABLE PUBLICATIONS (CURRENT EDITIONS)

ARMY Regulations:

AR 25-1, Army Knowledge Management and Information Technology

AR 25-2, Army Information Assurance

Army CIO/G6 Networthiness Certification Guidance; enforcement mandated by CIO/G6

Policy memorandum, Army Networthiness Certification

DoD Regulations:

DoD Instruction Number 8500.01, Cybersecurity

DoD Instruction Number 8510.01, Risk Management framework (RMF) for DoD Information

Technology (IT)

DoD Security Technical Implementation Guides

MEDCoE Regulations:

MEDCoE Memo 190-1, Key and Lock Control Program, 31 March 1994 and Change 1.

PART 7

ATTACHMENT/TECHNICAL EXHIBIT LISTING

7. ATTACHEMENT/TECHNICAL EXHIBIT LIST:

7.1 Attachment 1/Technical Exhibit 1 – Performance Requirements Summary

7.2 Attachment 2/Technical Exhibit 2 – Deliverables Schedule

TECHNICAL EXHIBIT 1

Performance Requirements Summary The contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

PERFORMANCE

OBJECTIVE

STANDARD

PERFORMANCE

THRESHOLD

Remedies

Maintain current image and software per ATO (PWS

5.1.a.).

Comply with all DOD directives.

Maintain 100% compliance with hosting services ATO.

100% Inspection.

Negative Contractor

Performance Assessment

System Reporting

Maintain the installation at an operational availability (PWS

5.1.a).

Maintain the installation at an operational availability of 98.9%.

Operational availability is based upon 8-hour-day, 5 days per week, and 52 weeks per year for all areas. For the purpose of this contract, this shall mean all (software and hardware to 1800 end user devices) in aggregate will be operational 98.9% of the time.

100% Inspection.

Negative

Contractor

Performance

Assessment System

Reporting

Ensure WIN 10 operating systems are installed and systems remain IAVA compliant (PWS 5.1.a.

and i.).

No more than 5 systems quarantined per quarter

Monitoring of 100% of memory sticks used to maintain laptops deployed to students

100% Inspection.

Negative Contractor

Performance Assessment

System Reporting

Troubleshoot and complete incidents reported (PWS 5.1.a-c.).

Troubleshoot and complete incidents reported within 5 working days incident reported.

Maintain the installation at an operational availability of 99.9%.

Monitoring of the incident work order log for 94% of scheduled incidents completed within the 5 working days with a maximum average rate of 4 incidents per day per two week period.

100% Inspection.

Negative Contractor

Performance Assessment

System Reporting for less than 94% completion rate or less than

OBJECTIVE

STANDARD

PERFORMANCE

THRESHOLD

Remedies

Student accounts and/or profiles (PWS

5.1.k)

Remove student profiles of

100% of devices within 5 days of student leaving and prior to reissuing that laptop to a new student.

Monitoring of 100% systems deployed to students

100% Inspection.

Negative Contractor

Performance Assessment

System Reporting

TECHNICAL EXHIBIT 2

DELIVERABLES SCHEDULE

Deliverable Frequency # of Copies Medium/Format Submit To

Monthly status report

Due no later than the 10th of each month for the previous month

One electronic copy by email to the COR

MS Word/Excel

Spreadsheet

Contracting Officer

Representative

Monthly status report on 1800 (68W) laptops 1 2 3 4 5 6 7 8 9 10 11 12

Total # devices on hand in office

Total # of devices assigned Students per month

Total # devices with current software per ATO per month

Total # equipment work orders reported per month

Total # equipment work orders resolved per month

Total # software work orders reported per month

Total # software work orders resolved per month

Total # of user profiles deleted per month

Total # of user profiles created per month