PWS DRAFT.pdf

USACyS Joint Curriculum Instructional Support (JCIS) Contract

PERFORMANCE WORK STATEMENT (PWS)

USACyS Joint Curriculum Instructional Support (JCIS) Contract (BY)

Part 1

General Information

1. GENERAL: This is a non-personal services contract to provide Technical Instructor/Writer Support for the Cyber School, Cyber Center of Excellence (CCoE), Fort Gordon, Georgia. The Government will not exercise any supervision or control over the contract service providers performing the services herein.

Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction: The contractor shall provide Instructional Support for the U.S.

Army Cyber School. The estimated staffing matrix can be found in Technical Exhibit 2. All Instructors associated with this effort shall instruct, update, and revise products in accordance with (IAW) Training and Doctrine Command (TRADOC) Regulation 350-70, TR PAM 350-70 Series (1-16) and all applicable regulations, Cyber School Training Development Standard Operating Procedures (SOP), and Higher Headquarters Guidance. All updated and revised products shall be submitted to the Government for review, approval, and submission to the appropriate agencies. Products shall be reviewed for educational soundness, conformance with the schools training philosophy, adherence to MOS training strategy, accuracy, deficiencies, and compliance with published guidance. In updating and revising products the instructors shall plan, organize, and carry out special studies, analysis, and evaluations effecting resident and nonresident training. Except for property and services specified as government furnished, the contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform instructional support as defined in this Performance Work Statement. The contractor shall perform to the standards in this contract.

1.2 Background: The Cyber School was established to provide trained 17 series personnel (17A, 17C, 17E, 17B, 170A, and 170B) that support the Army’s Cyberspace Electromagnetic Activities (CEMA) Operations across USCYBERCOM, ARCYBER, and Electronic Warfare unit’s missions. Additionally, the Cyber School has the goal of providing equipment, faculty, and an environment that build Soldiers’ skills and abilities while encouraging a culture of aggressive self-development. As stated in Self Development for Cyber Warriors (Conti, Caroland, Cook, Taylor) "Aggressive self-development is a critical task for the cyber warfare professional. No matter the quality, formal training and education programs age poorly when facing the relentless advance of technology and agile adversaries. Self-development serves as a continuous complement to formal training and fosters the currency and depth of expertise a world class cyber workforce demands.”

The Cyber Leader College (CyLC) plans, develops, and delivers the Cyber Effects Applications Course (CEAC) IOT integrate Cyber Operations thru the Joint Targeting Cycle and enable target analysts supporting Cyber Mission Force work roles the requisite skills to develop targets IAW CJCSI standards.

The target audience for the course include Interagency or Joint Cyber Mission Force personnel supporting and/or augmenting cyber operations-integrated planning elements.

1.3 Objectives This effort shall educate cyber personnel on intrinsic aspects of targeting in cyberspace.

Using the Joint Targeting Cycle as the framework for the course, CEAC emphasizes characteristics of targeting in cyberspace that are doctrinally unique and/or require an amended process not codified in joint targeting doctrine. Contractor personnel shall demonstrate model behavior and professionalism at all times.

Training Instructor Support will be conducted at a clearance up to TOP SECRET.

1.4 Scope: Provide technical instructional support to the Cyber School that include fostering self-development, platform instruction, assessing student performance, maintaining training resources, developing training schedules, managing exams, administering exercises, conducting student assessments, and assisting students with developing, preparing, and practicing presentations. Contractor personnel shall demonstrate model behavior and professionalism at all times.

1.5 Period of Performance: The period of performance shall be for one (1) Base Year of 12 months and one (2) 12-month option year. The Period of Performance reads as follows:

Base Year 10 Sep 2020 – 09 Sep 2021 Option Year I 10 Sep 2021 – 09 Sep 2022 Option Year II 10 Sep 2022 – 09 Sep 2023

1.6 General Information

1.6.1 Quality Control: The contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract. The contractor shall utilize personnel who possess the knowledge, skills, abilities, and experience to support Cyberspace Operations IAW all relevant regulations, requirements, and SOPs to include USCYBERCOM J7, National Cryptologic Training System (NSA standards per DoDI 3305.09), and DoD Cybersecurity Workforce Framework (i.e. DoD 8570 or 8140) training standards. The initial Quality Control Program (QCP) shall be delivered with the contractor’s proposal. After contract award, three copies of a comprehensive written QCP shall be submitted to the Contracting Officer and Contracting Officer’s Representative 30 days of start date and within 5 working days when changes are made thereafter.

After acceptance of the quality control plan the contractor shall receive the contracting officer’s acceptance in writing of any proposed change to his QC system.

1.6.1.1 Revisions: Revisions to the QCP may be required at any time during performance of the contract to assure contractor compliance with requirements of the PWS and contract. The contractor shall make appropriate revisions and obtain acceptance of the revised plan from the COR.

1.6.2 Quality Assurance: The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government shall do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.3 Recognized Holidays: The contractor is not expected to perform services on federal holidays.

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day

1.6.4 Hours of Operation: The contractor is responsible for conducting business, between the hours of 0800 to 1700 Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings.

For other than firm fixed price contracts, the contractor will not be reimbursed when the government facility is closed for the above reasons. The Contractor shall all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential. Shift work may be required. Anticipated shift schedule is as follows:

Day Shift 0800-1700 Swing Shift 1530-0030 Midnight Shift 2300-0800

1.6.4.1 In the event that personnel assigned to this contract are required for early/late/weekend school retraining of students or needed for classroom observation the anticipated hours are:

Alternate Day Shift 0630-1030 and 1500-1900 Alternate Swing Shift 1300-1700 and 1900-2300 Alternate Midnight Shift 2100-0100 and 0300-0700 Weekend Shift 0830-1330 on Saturdays, with five hours shifted from weekday work

1.6.4.2 In the event personnel supporting the Cyber School Training are required for early/late/weekend instruction or range operations the anticipated hours shall be shifted from the weekday work.

1.6.4.3 These operating hours and days may vary based on the requirements of the agency. Contractor personnel work schedules may be “flexed” to meet the training needs of the Cyber School for weekend and extended duty periods during regular training and exercises, while still adhering to the standard five-day work week. Overtime will not be authorized.

1.6.5 Place of Performance: The work to be performed under this contract will be performed at various locations within the Cyber School located on Fort Gordon, Georgia. Contractors are authorized to work from an Alternate duty/remote location during emergency situations within the Fort Gordon area of operations with the approval of the Contracting Officer Representative and Contracting Officer. Contractor shall continue to meet tasks, deliverables, and current level of support in accordance with contract.

Government reserves the right to approve, disapprove, or cancel contract personnel working from an alternate duty/remote location. Working from a remote location will be at no additional expense to the government. The Government does not authorize the use of off-site rates to accomplish alternate duty/remote location work and will not be responsible for any associated costs. Personal or company issued equipment may not be used to access the government network infrastructure unless pre-approved;

examples include using VPN or a corporate network. However, inability to access the government network infrastructure using authorized devices does not necessarily prohibit the contractor from performing off-site, whenever the work could be performed without such access.

1.6.6 Type of Contract: The government will award a firm fixed price contract.

1.6.7 Security Requirements: Contractor personnel performing work under this contract shall have a Top Secret Security Clearance with SCI eligibility at time of the proposal submission, and shall maintain the level of security required for the life of the contract. The security requirements are in accordance with the attached DD254

1.6.7. Physical Security: The contractor shall be responsible for safeguarding all government equipment, information, and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured. In some cases, as determined by the contracting officer’s representative (COR), contractors shall be required to sign for government provided equipment.

1.6.7.2 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

1.6.7.2.1. In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.6.7.2.2. The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.7.3 Lock Combinations: The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s Quality Control Plan.

1.6.7.4 The contractor is responsible for acquiring the required security clearances. The contractor shall ensure that all assigned personnel understand applicable security policies and directives found in DOD 5220.22-M, National Industry Security Program Operating Manual (NISPOM); DODM 5200.01 (Vol 4), DOD Information Security Program – Controlled Unclassified Information; AR 380-5, Information Security Program, and all other applicable policies and regulations.

1.6.7.4.1 The contractor shall ensure that classified data is controlled, protected, and safeguarded in accordance with AR 380-5 and current Army and DOD policy. Classified information shall be accessed and stored in government spaces only. The contractor shall agree that any data furnished by the government to the contractor shall be used only for performance under this PWS, and all copies of such data shall be returned to the government upon completion of this effort.

1.6.7.4.2 The contractor Facility Security Officer (FSO) shall ensure there is a procedure for all contractor employees to in-process and out-process the CCoE G2. All contractors shall turn-in their Common Access Card (CAC) to the COR (TA) on their last day of employment. Compliance with DD Form 254, Department of Defense Contract Security Classification Specification, is required.

1.6.7.5 Handling/Access to Classified Information: The contractor shall comply with FAR 52.204-2, Security Requirements. This involves access to information classified "Confidential," or "Secret," and requires contractors to comply with (1) the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M), and (2) any revisions to DoD 5220.22- M. Any adverse action preventing a contractor from retaining access to classified material shall be brought to the attention of the COR, CCoE G2, and contractor Facility Security Officer (FSO) immediately.

1.6.7.6 SIPRNET and JWICS Access: The COR will identify contract employees that are required to have SIPRNET and/or JWICS access. Secret Internet Protocol Network (SIPRNET) and Joint Worldwide Intelligence Communications System (JWICS). Contractors requiring access to the SIPRNET shall have a final Secret clearance or Interim TS clearance. Contractors requiring access to JWICS shall have a final TS clearance and be indoctrinated for Sensitive Compartmented Information access. SIPRNET/JWICS may contain NATO information and a NATO awareness brief and acknowledgement is required for all personnel prior to being granted access to the SIPRNET/JWICS. The NATO Awareness briefing is required to inform personnel how to protect NATO information in the event they come across it while accessing the SIPRNET/JWICS. A written acknowledgment shall be maintained by the COR. The contractor shall not access, download or further disseminate any classified information from

SIPRNET/JWICS which is outside the execution of the defined contract requirements unless specifically authorized in writing by the Government Program Manager and the Contract Officer (KO). In the event that any special access is required, the KO shall modify the requirements and DD 254.

1.6.7.7 Army Cybersecurity/Awareness Training: All contractor employees and associated subcontractors shall complete the DoD Cyber Awareness Challenge Training (https://cs.signal.army.mil) before issuance of network access and annually thereafter. Certificates of successful completion, for both initial awareness training and annual refresher training shall be provided to the COR via the Army Training and Certification Tracking System (ATCTS). All contractor employees shall successfully complete all required IA training as specified in AR 25-2 and as directed by the Government. At work performance start date all contractor employees working Cyber Security functions shall comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M, DoDD 8140.01, and AR 25-2.

1.6.7.8 Information Security Program Training: All contractor employees, including subcontractors, assigned to this contract, shall complete the on-line Information Security Program Training located on the Army Learning Management System (ALMS) site. Log into AKO, select “Self Service”, “My Training”, “ALMS”, and “Go to Mandatory Training”. Training shall be completed within 30 days of reporting for duty and annually thereafter. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager (Ref ALARACT 207/2013, DTG 291848Z Aug 13, Subj: Army Wide Roll-out and Requirement for Standardized Computer Web-Based Security Training on the Army Learning Management System

(ALMS)).

1.6.7.9 Anti-Terrorism (AT) Level I Training: All contractor employees, including subcontractors, assigned to this contract shall receive an initial Anti-Terrorism Level I Brief by a certified ATO Level II Officer within 30 days of reporting for duty (Monthly briefings are offered by the Garrison Antiterrorism Officer). Annual refresher Antiterrorism Level I Training shall be completed on-line at https://jkodirect.jten.mil/Atlas2/faces/page/login/Login.seam or contractor employees may attend the monthly training offered by the Garrison ATO. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager (Ref Department of the Army, US Army Contracting Agency, SFCA-CO, 05 Sep 07, subject:

Incorporation of Measures into the Contracting Process and AR 525-13, Antiterrorism).

1.6.7.9.1 Note: Contractor personnel shall receive an AOR briefing if traveling OCONUS on TDY.

Briefing shall be provided by a certified ATO Level II Officer within 7 working days prior to TDY departure outside the 50 United States, its territories, and possessions. This is separate from the normal annual AT Level I training requirement (Ref AR 525-13).

1.6.7.10 iWATCH: All contractor employees, including subcontractors, assigned to this contract shall receive a brief on the local iWATCH program (provided in conjunction with the AT Level I Training).

This training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 days of reporting to duty with the results reported to the COR and then annually thereafter.

1.6.7.11 Operation Security (OPSEC) Training: All contractor employees, including subcontractors, assigned to this contract shall complete Level I OPSEC training within 60 days of reporting for duty and then annually thereafter. Initial Level 1 OPSEC training will be conducted monthly by the Garrison OPSEC Officer or a Level II certified OPSEC Officer. Annual refresher training shall be completed on-line at http://cdsetrain.dtic.mil/opsec/index/htm. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. OPSEC training guidelines are contained in AR 530-1, Operations Security. The contractor shall adhere to local OPSEC policies and procedures of the government requiring activity. When in a TDY status in support of this work effort, the contractor shall also adhere to any OPSEC policies and procedures in effect at TDY locations.

1.6.7.12 Threat Awareness and Reporting Program (TARP) Training: All contractor employees, including subcontractors, assigned to this contract shall complete face-to-face TARP training within 30 days of reporting for duty and then annually thereafter. TARP training will be conducted monthly by the 902nd MI Group. The COR will ensure contractors are notified of available training. Completion of training shall be reported to the COR and the unit/activity security manager (Ref AR 381-12).

1.6.7.13 Installation Access: All contractor employees, including subcontractors, shall comply with applicable installation and facility access security policies and procedures at all work and TDY locations.

All contractors and subcontractors will be issued a Common Access Card (CAC) or an Installation Pass issued through the Automated Installation entry (AIE) Security System to access the installation. The Fort Gordon military installation is a limited access post. Unscheduled gate closures by the military police may occur at any time. In accordance with Army Regulation 525-13, paragraph 5-19, all prospective contractors will undergo a verification process by the installation Provost Marshal Office, Director of Emergency Services to determine the trustworthiness and suitability prior to being granted access to federal property. This will be accomplished using the National Crime Information Center (NCIC) Interstate Identification Index (III). This is the minimum baseline background check for entrance onto Army Installations for non-CAC holders to include entrance of visitors (Ref AR 190-13, paragraph 8-2). All personnel entering or exiting the installation may experience a delay due to vehicle inspections, registration checks, verification of seat belt use, etc. All vehicles and personnel are subject to search and seizure. The search and seizure provisions shall apply to contractor personnel while within Fort Gordon's area of jurisdiction. Contractor personnel shall comply with all entry control requirements and security policies/procedures in effect. Security procedures may change without notice.

1.6.7.14 Common Access Card (CAC): The contractor shalt obtain a CAC for those employees whose functions require access to systems or facilities controlled by the Common Access Card. The Contractor Representative shall notify the government Trusted Associate Sponsorship System (TASS) Trusted Agent (TA) of new employee CAC requirements. The company representative shall provide all personnel data required to process TASS applications with the TA, including security investigation requirements. A contractor employee shall obtain a CAC at the DEERS/RAPIDS terminal when the application is approved.

The contractor employee shall inform Corporate Facility Security Officer (FSO)/Security Manager of approval/denial of the CAC application and will return the CAC to the TA upon departure or dismissal.

The contractor is responsible for implementation and follow-up. Failure, inability, or delay in obtaining the CAC does not relieve the contractor from performing under the terms of the contract.

1.6.8 Special Qualifications: The Government’s historical staffing data is provided under Technical Exhibit 3. The Contractor shall be responsible to propose and deploy the correct labor types, mix, number and hours required to satisfactorily and professionally meet all PWS requirements. The Government anticipates the requirements within this PWS will require the following labor category: Project Lead and Instructor/Writer.

1.6.8.1 Contract Instructor Personnel shall:

Possess a T5/Single Scope Background Investigation (SSBI) with SCI eligibility and maintain the required security clearance throughout the life of the contract; possess a favorable T1/National Agency Check with Inquiries (NACI) at contract start date and maintain throughout the life of the contract.

Possess and maintain a valid driver’s license.

Possess and maintain all required training as stated throughout this PWS.

Possess skills/knowledge of performing office automation work that includes word processing, electronic mail, spreadsheets, presentations, and other personal computer applications; typing a variety of materials from rough draft into final form including narrative and tabular material, e.g., correspondence, reports, and forms; maintaining records, historical records, survey results, reference library of training catalogs, regulations and other miscellaneous publications;

establishing and maintaining office functional files and reference files; knowledge management applications e.g., SharePoint and Blackboard.

1.6.8.1.1 Targeting Instructor

Shall have graduated from Senior Leader Course, Captain’s Career Course, or Warrant Officer

Advance Course.

Shall have served as a Targeting Officer or NCO or in a similar leadership role of a battalion or higher element.

2+ years of prior military service at the E8 – E9 / CW3 / O3 - O6 level serving as a Chief of Fires /

Joint Fires Officer / FSCOORD above division level.

1+ years of prior military service at the E8– E9 / CW3 / O3 - O6 level serving as a Chief of

Targets in support of a JTF and/or CCMD.

Shall have 2 + years of recent individual and collective training as an OTDA or

Fire Support Planner defined in USCYBERCOM’s J7 Joint Cyberspace Training and Certification Standards (JCT&CS). The JCT&CS codifies the USCYBERCOM processes and procedures for development of individual certification and training standards.

2+ years of service (military/civilian/contractor) conducting Cyberspace Operations (CO) within the CMF, Joint Force Headquarters- Cyber (JFHQ-C), Operational Planning Team (OPT), Joint Cyber Center (JCC) supporting or enabling USCYBERCOM, or service component cyber commands directly supporting a CCMD/JTF Headquarters.

Possess a final Top Security Clearance and Single Scope Background Investigation (SSBI) with SCI eligibility at work performance start date and shall maintain the required security clearance throughout the life of the contract.

Possess skills/knowledge of performing office automation work that includes word processing, electronic mail, spreadsheets, presentations, and other personal computer applications; typing a variety of materials from rough draft into final form including narrative and tabular material, e.g., correspondence, reports, and forms; maintaining records, historical records, survey result, reference library of training catalogs, regulations and other miscellaneous publications; establishing and maintaining office functional files and reference files; knowledge management applications, e.g., SharePoint, Army training requirements and resources system (ATRRS), and Blackboard.

In lieu of a Bachelor Degree, a minimum of 3 (three) additional years of experience in the above areas.

Graduated the Army Basic Instructor Course (ABIC) or Foundation Instructor Facilitator’s Course (FIFC), or Common Faculty Development Instructor Course (CFD-IC) and, Faculty Development Program-1 (FDP-1), and Support Cadre Training Course (SCTC).

1.6.8.1.2 Exploitation Analyst Instructor Qualifications:

Shall have graduated from Senior Leader Course, Captain’s Career Course, or Warrant Officer

Advance Course.

Shall have served as an EA within the CMF.

Shall have 2+ years of prior military service at the E8 – E9 / CW2 / O3 - O6 level serving as a EA/ Operations Chief, JFHQ-C Technical Advisor, CMF Technical Advisor.

Shall have 1+ years of prior military service at the E6– E9 / CW3 / O3 - O6 level serving as an EA in support of CMF Team, JCC, OPT, JTF and/or CCMD CMF aligned team.

Shall have 2 + years of recent individual and collective training as an EA as defined in USCYBERCOM’s J7 Joint Cyberspace Training and Certification Standards (JCT&CS). The JCT&CS codifies the USCYBERCOM processes and procedures for development of individual certification and training standards.

Shall have 2 + years’ experience within the Cyber Mission Force (CMF), able to demonstrate or have relative experience within the Intelligence Community, Interagency experience, and operations across multiple authorities. Some demonstrated examples include training or demonstrating experience with the completion of the Joint Cyber Analysis Course, (JCAC), United States Cyber Command (USCYBERCOM) CMF Training Pipeline Version 4.0 Exploitation Analyst work role, completion of the Joint Qualification Standards (JQS) and Joint Qualification Requirements (JQR), and certification in accordance with the USCYBERCOM’s J7 Joint Cyberspace Training and Certification Standards (JCT&CS).

Shall have 2+ years of service (military/civilian/contractor) conducting Cyberspace Operations (CO) within the CMF, Joint Force Headquarters- Cyber, Operational Planning Team, Joint Cyber Center supporting or enabling USCYBERCOM, or service component cyber commands directly supporting a CCMD/JTF Headquarters. Candidates should possess knowledge to include, but not limited to:

o Possess training or demonstrate experience in Network Routing, Device Types and Operating Systems. Some demonstrated examples include Cisco Certified Network Associate (CCNA), Certified Change Management Professional (CCMP), Cisco Certified Network Associate (CCNA), and Cyber Security Service Provider (CSSP) Level III training in accordance with the Department of Defense 8570 baseline certifications.

o Two (2) years’ training or demonstrated experience on the utilization of Open- Source Intelligence (OSINT), Signals Intelligence (SIGINT), and Publically Available Information (PAI).

o Two (2) years’ experience, planning or the execution of missions that demonstrate an understanding of Cyber Key Terrain, and Targeting.

Development of Electronic Targeted Folders (ETFs).

o Participation in operations and targeting related Boards, Bureaus, Centers, Cells and Working Groups (B2C2WG).

o Possess and maintain all required training as stated throughout this PWS.

Possess and maintain the required security clearance throughout the contract. Possess a final Top

Security Clearance and Single Scope Background Investigation (SSBI) with SCI eligibility at work performance start date and shall maintain the required security clearance throughout the life of the contract.

Possess skills/knowledge of performing office automation work that includes word processing, electronic mail, spreadsheets, presentations, and other personal computer applications; typing a variety of materials from rough draft into final form including narrative and tabular material, e.g., correspondence, reports, and forms; maintaining records, historical records, survey results, reference library of training catalogs, regulations and other miscellaneous publications;

establishing and maintaining office functional files and reference files; knowledge management applications e.g., Training Development Capabilities (TDC) SharePoint, Army Training Requirements and Resources System (ATRRS), and Blackboard.

Graduated the Common Faculty Development-Instructor Course (CFD-IC), and Support Cadre Training Course (SCTC), or meet the requirements to attend required training within 60 days of contract start date.

In lieu of a Bachelor Degree, a minimum of 3 (three) additional years of experience in the below areas.

Possess advanced writing skills (e.g. tailoring content and delivery for different audiences using Bloom's Taxonomy).

Highly Skilled and a Subject Matter Expert knowledge in these topic areas: Networking, Security, Windows, UNIX and Programming demonstrated by 3-5 years’ experience.

Academia Degree or National certifications demonstrating Computer Science or related field (e.g., General Engineering, Computer Engineering, Electrical Engineering, System Engineering, Mathematics, Computer Forensics, Cyber Security, Information Technology, Information Assurance, Information Security, or Information Systems.

Relevant experience includes computer or information systems design/development, programming, information/cyber/network security, vulnerability analysis, penetration testing, computer forensics, information assurance, systems engineering, network and system administration, military training in a relevant area outlined in the JCT&CS.

1.6.8.3 Contractor Replacement: The contractor shall replace, within ten (10) business days, any contract personnel found to be unqualified or otherwise determined unsuitable by the government. This ten-day timeframe also includes any contract instructors who submit their resignation under the current contract.

1.6.8.4 Required certifications and/or training certificates shall be presented to the COR prior to hire.

Certification requirements that change during the life of the contract will be approved by the COR.

Contractors will be given 60 calendar days from the start date of this contract to obtain required certificate(s) of training and certification with the exception of the clearance; all contact personnel are required to in-process the CCoE G2 within 10 business days. All contract employees shall possess experience with Army-standard desktop applications and configurations, i.e., daily reporting programs, and Army Gold Master (AGM) configurations. The government will exercise the right, if deemed necessary, to select an appropriate method (pretest, hands on practical exercise, etc.) to determine if the contractor is qualified/suitable to perform the requirements stated in section 1.6.4 through 5.8

1.6.8.5 Government Provided Training: The Contractors attending Army Training will not be charged a tuition fee for mandatory training. Contractors are not authorized to attend elective training regardless of mode of instruction (e.g., resident, troop schools, on-site, garrison/installation instruction or distributed learning. Contractors may only be trained in skills they are not required to bring to the job, such as command unique rules, practices, procedures and/or systems that are essential for the contractor’s satisfactory contract performance. This type of training is considered mandatory/required and will be identified in the contract.

1.6.9 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The contracting officer, Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor shall apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues.

These meetings shall be at no additional cost to the government

1.6.10 Contracting Officer Representative (COR): The COR shall be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance;

maintain written and oral communications with the Contractor concerning technical aspects of the contract;

issue written interpretations of technical requirements, including Government drawings, designs, and specifications; monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property; and, provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.11 Key Personnel: The program manager is considered key personnel by the government. The contractor shall provide a program manager who shall be responsible for the performance of the work. The program manager shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The program manager or alternate shall be available between 8:00 a.m. to 5:00 p.m., Monday thru Friday, except Federal holidays or when the government facility is closed for administrative reasons.

1.6.12. Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They shall also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed.

1.6.12.1 ID Badges: The contractor shall provide each contractor employee an identification (ID) badge on contract start date or on employment start date. The ID badge shall be made of nonmetallic material, be easily readable, and shall contain the following minimum information: Employee's Name, Contract Company Name, and Employee's Photograph. Contract employees shall wear proper identification at Government workplaces at all times.

1.6.12. 1.1 Display of ID Badges: Contractor employees shall wear the ID badge at all times when performing work under this contract to include attending government meetings and conferences.

Unless otherwise specified in the contract, each contract employee shall wear the ID badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit such placement.

1.6.12.2 Utilizing Electronic Mail: When contractor employees send e-mail messages to government personnel while performing on this contract, the contractor employee's e-mail address shall include the company name together with the person's name (ex: John Smith, Contractor, ABC Company).

When contractor employees require access to a government computer, the contractor employee shall be required to obtain a Common Access Card. To do so, the contractor employee shall request a CAC Card through the COR. All contractor employees shall conduct official communication using Government-owned or provided e-mail, networks, websites, systems, and devices. The use of commercial ISP e-mail accounts or personal e-mail accounts to conduct official communication is prohibited. Remote access / telework technology may be leveraged to ensure compliance with these requirements. Contractor employees are prohibited from using Army-assigned, AKO, and other official e-mail addresses for unofficial business affiliations. Personnel shall not provide official e-mail addresses to businesses, affiliated organizations, or online retailers; unless those entities are known by personnel to be legitimately engaging in official business.

1.6.12.3 Eligibility Verification for Employment: E-Verify is an Internet-based system that compares information from an employee's Form I-9, Employment Eligibility Verification, to data from U.S. Department of Homeland Security and Social Security Administration records to confirm employment eligibility. The U.S. Department of Homeland Security is working to stop unauthorized employment. By using E-Verify to determine the employment eligibility of their employees, companies become part of the solution in addressing this problem. All U.S. employers shall complete and retain a Form I-9 for each individual they hire for employment in the United States. This includes citizens and noncitizens. On the form, the employer shall examine the employment eligibility and identity document(s) an employee presents to determine whether the document(s) reasonably appear to be genuine and relate to the individual and record the document information on the Form I-9. The list of acceptable documents can be found on the last page of the form. E-Verify is mandatory for employers with federal contracts or subcontracts that contain the Federal Acquisition Regulation E- Verify clause.

16.12.4 NOTE: The government issued CAC is the property of the U.S. Government and shall be returned to the COR/TA upon expiration of the contract, replacement or termination of the contract employee. (CAC card shall be turned in to the COR/TA on contractor’s last day of employment.)

Unauthorized possession of the CAC can be prosecuted criminally under section 701, title 18, United States Code.

1.6.13. Contractor Travel: Not Applicable.

1.6.14 Other Direct Costs: Other costs such as travel, reproduction, and shipping expenses associated with training activities and visits to contractor facilities, or the renting of suitable training venues, Shall be preapproved by the contracting officer. Other Direct Costs will be represented as a separate CLIN. This CLIN will be used to purchase Government approved Vouchers for the Cyber School, some examples are;

International Council of Electronic Commerce Consultants (EC-Council), Certified Ethical Hacker (CEH), International Information Systems Security Certification Consortium, Inc. (ISC 2), Certified Information Systems Security Professional (CISSP), Computing Technology Industry Association (CompTIA), CompTIA Security+ ce, Cisco Certified Network Associate (CCNA) Routing and Switching, Global Information Assurance Certifications (GIAC), Electronics Technicians Association, International (ETA-I), etc. The COR will provide the purchase request to the PM, voucher shall be purchased and delivered to the government within 10 business days.

1.6.15. Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the Contracting Officer. All materials supplied to the Government will be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.15.1. Privacy Act: All contract personnel assigned to this task shall have access to information that may be subject to the Privacy Act of 1974. The contractor is responsible for ensuring all assigned contract personnel are briefed on Privacy Act requirements.

1.6.15.1.1 The contractor shall ensure that all assigned personnel understand applicable Security policies and directives. Personnel who knowingly violate security policies or directives are subject to immediate removal from any work relating to this contract.

1.6.15.1.2 Contractor personnel shall have routine and unavoidable access to proprietary information which they are required to protect. Personnel applied to the tasks in this PWS may not work on other tasks for the contractor or for any other agency without a formal written request, and written consent granted by, the contracting officer.

1.6.15.2. Uses and Safeguarding of Information: Information from the secure web site is considered to be proprietary in nature when the contract number and contractor identity are associated with the direct labor hours and direct labor dollars. At no time will any data be released to the public with the contractor name and contract number associated with the data.

1.6.15.3. Subcontract Data: The contractor shall ensure that all reportable subcontract data is reported IAW the PWS and to this data collection web site (citing this contract/order number). At the discretion of the prime contractor, this reporting may be done directly by subcontractors to the data collection site; or by the prime contractor after consolidating and rationalizing all significant data from the subcontractors.

1.6.15.3.1. Reporting Flexibility: Contractors are encouraged to communicate with the Help Desk identified at the data collection web site to resolve reporting difficulties. Changes to facilitate reporting may be authorized by the contracting officer or the Help Desk (under HQDA policy direction and oversight).

1.6.16. Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent

Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.16.1 The contractor shall not divulge any information accessed and obtained during the course of performing this task to other contractor staff or anyone outside the government. In addition to any organizational conflict of interest provision, contractor personnel assigned to this contract shall be required, prior to beginning work, to sign a non- disclosure statement for the government agreeing not to share any information or data with other contractor personnel not assigned to the project or, if assigned to the project, who has not signed such a non-disclosure statement. Signed nondisclosure statements shall be furnished to the COR prior to contract performance. The company shall include as part of its Request for Quote (RFQ) submission, its plan to “firewall” these contract personnel and enforce this provision (i.e., internal controls, training, etc.). Failure to adhere to these non-disclosure safeguards may result in termination of this task. Final authorship and copyright (if required) of any deliverables shall reside with the government. The contractor shall not gain any unfair advantage. The contractor shall identify any organizational conflict of interest clauses they or their subcontractors are subject to, current or within three years of federal government contract services, by providing, with their offer, a copy of the clause, a description of the contract services performed, a contract number, a governmental point of contact, and a phone number for that point of contact.

1.6.17 PHASE IN /PHASE OUT PERIOD The Phase-out period shall apply to any contract follow-on requirements. Prior to the completion of the contract, an observation period shall occur at which time management personnel of the incoming workforce may observe operations and performance methods of the incumbent Contractor. This will allow for orderly turnover of facilities, equipment, and records and will help to ensure continuity of service. The incumbent contractor shall fully cooperate with the incoming contractor’s attempts to perform phase-in activities. The incumbent contractor shall permit the incoming contractor to observe its operations and performance methods. The incumbent contractor shall provide the incoming contractor with contact information for all incumbent contractor employees who agree to release of their personally identifiable information. The Contractor shall not defer any needed repairs or maintenance for the purpose of transferring responsibility to the successor Contractor.

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1. DEFINITIONS:

2.1.1. CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER. A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S.

Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5. DELIVERABLE. Anything that can be physically delivered, but may include non-manufactured things such as…