PWS_HR IT Modernization Support Services_Final.pdf

PERFORMANCE WORK STATEMENT

For

DEFENSE CIVILIAN ADVOSORY SERVICE (DCPAS)

HR IT MODERNIZATION SUPPORT SERVICES

1. INTRODUCTION

The Defense Civilian Personnel Advisory Service (DCPAS) in partnership with Defense Manpower Data Center (DMDC) in support of the Office of the Under Secretary of Defense for Personnel & Readiness (OUSD P&R), Defense Human Resources Activity (DHRA) requires change management and training services to support the configuration, implementation, maintenance and sustainment of Department of Defense Civilian Human Resources Management Information Technology (CHRM-IT) systems in support of 850K civilian employees and 24K human resources professionals.

2. BACKGROUND

The Department of Defense’s (DoD’s) Human Resource (HR) Functional Community is engaged in multiple activities to modernize the Department’s Civilian HR Management Information Technology portfolio. This high priority effort is being developed to meet current and future system support needs and to increase the efficiency of HR operations by reducing cost and redundancy. This modernization will enable rapid flow and analysis of relevant HR service delivery and program performance data and implement revised competency management, training, and credentialing to improve service, advice, and consultation.

The civilian workforce is a vital asset that brings critical perspectives and talent to the mission of DoD. Partnerships forged between civilian HR and its customers, functional communities, and leadership ensure that DoD can identify and respond to changing work requirements with human capital solutions that preserve the U.S. competitive advantage.

HR professionals are also a vital segment of the DoD civilian workforce. As we continue to transform and improve the delivery of products and service capabilities for our customers through integrated policies, processes, and tools, we will improve our posture and role as human capital advisors. Simultaneously, DoD is increasing its focus on the professionalization of the HR Functional Community through competency management, revised training, and credentialing.

Efforts to modernize and rationalize Human Resource Information Technology (HRIT) have been carefully mapped. These efforts are being implemented in a phased approach to build out a modern enterprise architecture that meets current and future HRIT requirements. The Defense Civilian Human Resources Management System (DCHRMS) will be implemented in the near future, ushering in opportunities to use streamlined business processes and cloud-based technologies that improve the products and services provided to the civilian workforce.

Enhancements to strategic human capital program management in the form of service delivery standards, accountability program expansion, and simplifying policy development and implementation will complement these new technologies and further our capability to provide more agile and flexible support and solutions.

The Reform Management Group (RMG) was established with authority to identify opportunities for cost reductions within DoD. In 2018, the RMG issued a Decision Memorandum directing the Chief Management Office (CMO) Information Technology (IT) Reform Team to deliver a new modern DoD civilian personnel system based on a commercial Software as a Service (SaaS) cloud product offering, concluding with the decommissioning of the Defense Civilian Personnel Data System (DCPDS). DCHRMS initial operating capability (IOC) includes core HR, performance management requirements, and processes. Other HR IT Modernization capabilities are not in configuration for the initial deployment but will need to be prioritized for the future DCHRMS deployments.

In conjunction with DCHRMS development, DoD is replacing Corporate Management Information System (CMIS) with the Civilian Personnel Data Warehouse (CPDW) and query tools to store and retrieve all historical DoD civilian personnel data and will available to authorized DoD users. This parallel effort is a part of the DoD Advana initiative which is advancing analytics, making data widely accessible, understandable and actionable across the DoD enterprise.

3. SCOPE

The Contractor shall provide comprehensive support to DCPAS HR IT Modernization efforts.

The contractor shall include best practices, techniques and procedures essential to the application’s operation, performance and efficiency. The scope includes the requirements analysis, business case assessments, and change management for the DCHRMS and other HR IT efforts throughout the lifecycle of the following operations, of the following DoD and non-DoD Components: DoD – Air Force, Army, Navy, Defense Finance and Accounting Service (DFAS), Defense Logistics Agency (DLA), and National Guard (NG).

The scope is Professional Support Services to meet the needs of the entire DoD. These services will support programs, projects, and initiatives in the HR IT portfolio and are as follows:

Task Area 1: Program, Requirements and Business Analyst Support

Task Area 2: Change Management and Communications Support

4. REQUIREMENTS The Contractor shall:

4.0 Post Award Conference. This meeting shall provide an introduction between the Contractor personnel and Government personnel who will be involved with the contract. The meeting shall provide the opportunity to discuss technical, management and security issues. The Post Award Conference will aid both the Government and Contractor in achieving a clear and mutual understanding of all requirements, and identify and resolve any potential issues. The Contractor shall be prepared to discuss any items requiring clarification and gather information as necessary to support each deliverable.

4.1. Status Reports. The Contractor shall provide monthly progress reports electronically in

Microsoft Word and conduct briefings in person or via telephone on project progress.

4.2. Provide Program, Requirements, and Business Analyst Support.

4.2.1. Support DCPAS with the development and execution of a requirements analysis and management processes. The process shall provide for the documentation of enterprise level workflows, business processes, data and services, and include a standard set of artifacts for the purpose of understanding the program asset/software requirements.

4.2.2. Support the Government with the development and provide subject matter expert support to the HR IT programs, projects, in various topics of the DoDI 5000 Series ensuring compliance with statutory and regulatory requirements, to include tailoring of these requirements, as permitted. With a focus on functional initiatives such as user testing, user stories, functional requirements, training, pre and post deployment activities.

4.2.2.1. Efforts shall be focused on functional initiatives such as user adoption, testing, functional requirements, training, and pre and post deployment activities.

4.2.2.2. Review references and provide recommendations to the Government for consideration of potential policy, guidelines, guides, directives, instructions, and regulations updates or non-compliance issues.

4.2.3. Provide support to Integrated Product Teams and other ad hoc forums as required, and ensure that functional requirements and needs are aligned to the acquisition or programmatic considerations are included as a part of the discussions. The Contractor shall provide necessary documentation support to include development and coordination of, info papers, reports, action items, briefing charts, etc. They shall also support the draft development and review of documentation and reports across the DoD, prior to submission to the Decision Authority for approval and/or release outside the Agency.

4.2.4. Develop the Business Case and Analysis of Alternative (AoA) materiel solutions documentation to satisfy the capability need. The Business Case and AoA also assesses critical technologies associated with each proposed materiel solution, and future HR IT efforts. The Business Case should include at minimum including:

technology maturity, integration risk, configuration feasibility, and where necessary, technology maturation and requirements for demonstration needs.

4.2.5. Develop the Benefits Analysis for HR IT Modernization efforts that consolidate and/or bundle requirements. It identifies, quantifies, and compares the benefits arising from the strategy’s implementation to benefits that would result from alternative strategies relative to cost savings, quality improvements, reductions in acquisition cycle times, better terms and conditions, etc., and is part of the AoA and Business Case. It includes market research to assist the Government in determining whether consolidation and/or bundling of the requirements is necessary and justified. The Contractor shall conduct research and provide the information, data, and comparative analysis for the Benefits Analysis but only a Government official can make the determination whether consolidation and/or bundling is necessary and justified.

4.3. Provide Change Management Support:

4.3.1. Participate in developing long-term program change management and communications to support the HR IT Modernization approaches that further the Government acquisition strategy goals and objectives. The Contractor will be required to develop artifacts that helps the department drive the change and communicating through each level in DoD and across the components. In addition, the Contractor shall participate in integrated team meetings, program management reviews, and other related meetings. The Contractor shall assist Executives, Directors, Associate Directors, Team members and others with direct and indirect correlation to HR IT Modernization Efforts with preparation of change management, communication, supplemental training artifacts documents and reports. The goal is to ensure change management and communication considerations are integrated into all planning, implementation, management, and oversight activities associated with the acquisition, development, production, fielding, support, and disposal of IT systems across its life cycle.

4.3.2. Develop and participate in helping a huge change initiative that meets business, schedule, and budget objectives. The Contractor shall focus on the people side of change, including changes to business processes, systems and technology, job roles, and organization structures. The Contractor shall create and implement change management plans and develop artifacts to communicate through the change curve that that will minimize HR professional, Mangers and Employee resistance and maximize engagement. The contractor shall assist DCPAS in driving faster adoption, greater usage, and higher proficiency on the changes impacting for the organization such that business results are achieved

4.3.3. The contractor shall have a subject matter expertise and deep comprehension of HR systems, emerging delivery models, organizational design and development, and change facilitation expertise to develop and drive major transformational changes in human resources culture, structure, and operations. The Contractor shall conduct assessments and surveys to identify required changes in processes, people, infrastructure, and technology, provide expertise to support clients in comprehending complex business changes, and convey changes to stakeholders in a clear, concise, and compelling manner. The Contractor is responsible for assisting Executives, Directors, Associate Directors, Team members and others with direct and indirect correlation to HR IT Modernization Efforts with data collection and information in preparation of documents and reports. Specifically, the contractor shall:

4.3.3.1. Manage program Change Management Initiatives to include:

4.3.3.1.1. Assessment of current DCHRMS Sharepoint/Website/Social Media presence with recommended options for redesign to meet objectives of change management plan.

4.3.3.1.2. Development of a Change Management and Communications Electronic Tool-Kit in support HRIS Deployments

4.3.3.2. Develop and maintain Government spreadsheets, charts, graphics, and presentation slides

4.3.3.3. Prepare briefings on HR IT Modernization Efforts through the lifecycle

4.3.3.4. Provide Weekly Activity Report (WAR) summarizing transactions performed in DPAS

5. DELIVERABLES

Deliverable PWS Ref. Delivery Date

Post-Award Conference 4.0 Not later than five (5) days after contract award

Monthly Status Reports 4.1 Not later than ten (10) days into the following month

Documentation of enterprise level workflows, business processes, data and services, and include a standard set of artifacts for the purpose of understanding the program asset/software requirements.

4.2.1 One hundred (100) days from contract award and weekly update and update as necessary

Change Management Playbook in support of HRIS Deployments w/ Communications Plan for Employees/ Leaders w/ actions and Milestones

4.3.1 One hundred (100) days from contract award and weekly update and update as necessary

Change Management Implementation Plan w/ actions and Milestones

4.3.2 Sixty (60) days from contract award, weekly update and updated as required

Change Management Adoption Plan w/ actions and Milestones

4.3.3 Not later than ninty (90) days from contract award, weekly update and updated as required

Change Management Assessments Reports using ICE or approved Assessment Tool

4.3.3 Quarterly

Sharepoint/Website/Social Media Assessment and Recommended Redesign w/actions and Milestones

4.3.3.1.1 Fourty-five (45) days from contract award, weekly update, and monthly updates thereafter

Change Management and Communications Electronic Tool- Kit in support HRIS Deployments

4.3.3.1.2 One hundred eighty (180) days from contract award weekly update and updated as required

6. CONTRACTOR MANPOWER REPORTING

The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract via SCR which has replaced the legacy Enterprise Contractor Manpower Reporting Application (ECMRA). SCR is located in in the System for Award Management (SAM) (https://sam.gov). Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, the reporting period for contractors in SAM is generally open from mid-October to mid- December for reporting against the prior government fiscal year, all data shall be reported no later than October 31 of each calendar year, unless a later date is otherwise authorized by the Department of Defense.

7. CONTRACTOR TRAVEL

The Government does not anticipate any travel for this contract.

8. SECURITY NOTE: Security Clearances are not required for access to unclassified data.

8.1. Personnel Security. Overarching security requirements are [UNCLASSIFIED] access. The Contractor/Subcontractor personnel under this contract will require [unclassified] access to DoD network(s), Information Technology (IT) systems, Government Furnished Equipment (GFE), DOD credential, also known as the Common Access Card (CAC) for physical and logical access to federally controlled facilities and or DoD Information Systems (IS) with Personally Identifiable Information (PII) or Controlled Unclassified Information (CUI).

8.2. All Contractor personnel assigned to this contract are required to obtain and maintain the appropriate background investigation (BI) and adjudication or suitability determination in accordance with DODI 5200.02-DoD Personnel Security Program (PSP).

8.3. The contractor/subcontractor personnel on this contract will be designated a Noncritical-

Sensitive position for Unclassified access.

8.3.1. Provide personnel already vetted or able to undergo a background investigation according to Department of Defense (DoD) regulations.

8.3.2. Must have or be able to obtain a completed [Tier 3 (T3)] an equivalent or higher BI according to the Defense Counterintelligence and Security Agency (DCSA) and the Office of Personnel Management (OPM) investigative alignment.

8.4. Security Clearances. Not Applicable

8.5. Staffing. The personnel supporting this contract requiring a DHRA sponsored CAC, access to DoD network(s), DoD information systems with CUI/PII data or IT/Information Systems must be Citizens of the United States. This includes personnel assigned or working on the contract at any remote sites.

8.6. Onboarding. Prior to requesting access to DHRA sponsored resources (e.g., DoD credential(s), IT systems, information systems, email or facility), the appointed contractor must have a favorably adjudicated [Tier (3)] BI that meets the requirement for access at DHRA or be in the process of a Personnel Security Investigation (PSI) equivalent or greater in scope with a minimum of interim eligibility.

8.7. Listing of Employees & Clearance Documentation. The Contractor shall maintain a current listing of employees. Within 10 calendar days of contract award, the Contractor https://sam.gov/ shall provide the COR a list with the names, location of performance and clearance requirements of all company employees assigned to this effort. The list shall be validated by the company and DHRA Personnel Security (PERSEC). An updated listing shall be provided when an employee's status or information changes.

8.8. Access To Sensitive Information. To the extent that the work under this contract requires the Contractor to have access to DoD sensitive information the Contractor shall after receipt thereof, treat such information as confidential and safeguard such information from unauthorized use and disclosure. The Contractor agrees not to appropriate such information for its own use or to disclose such information to third parties unless specifically authorized by the Government in writing.

8.8.1. The Contractor shall allow access only to those employees who need the sensitive information to perform services under this contract and agrees that sensitive information shall be used solely for the purpose of performing services under this contract. The Contractor shall ensure that its employees will not discuss, divulge or disclose any such sensitive information to any person or entity except those persons within the Contractor’s organization directly concerned with the performance of the contract.

8.9. Controlled Unclassified Information Requirements for DoD Contractors. The following procedures will be used to protect Controlled Unclassified Information (CUI) documents and materials:

8.9.1. HANDLING: Access to CUI material shall be limited to those employees needing the material to perform their duties. The CUI marking is assigned to documents and material created by a DoD User Agency. CUI is not a classification, but requires extra precautions to ensure it is properly safeguarded and disseminated and is not released to the public without government authorization.

8.9.2. MARKING: Mark unclassified documents containing CUI: “CUI" at the top and bottom of each page, include the CUI warning box, and the CUI Designation Indicator Block as required in DoDI 5200.48.

8.9.3. Mark other records such as computer print outs, photographs, films, tapes, or slides in accordance with DoDI 5200.48 so the receiver or viewer knows that it contains CUI material. Mark a message containing material in accordance with DoDI 5200.48.

Unclassified messages containing CUI material must show the abbreviation (CUI) before the text begins.

8.9.4. Ensure documents transmitting CUI material call attention to any attachments containing CUI.

8.9.5. CUI material released to a contractor by a DoD user agency must have the following statement on the front page or cover:

8.9.5.1. THIS DOCUMENT CONTAINS CUI MATERIAL AND MUST BE REVIEWED BY A

GOVERNMENT REPRESENTATIVE UNDER THE REQUIREMENTS OF DODI

5200.48, DODI 5230.09, and DODI 5230.29.

8.9.6. STORAGE: During normal duty hours, place CUI material in an out-of-sight location if your work area is accessible to persons who do not have an authorized government purpose for access to the material. After normal duty hours, store CUI material to prevent unauthorized access. File with other unclassified records in unlocked files or desks when internal building security is provided and the file is marked as CUI. When there is no internal security, locked buildings or rooms usually provide adequate after hours protection. For additional protection, store CUI material in locked containers such as file cabinets, desks, or bookcases.

8.9.7. TRANSMISSION: CUI documents and materials may be transmitted via first class mail, parcel post or for bulky shipments-fourth class mail. Within the CONUS discussion of CUI material on the telephone is authorized if necessary for the performance of the contract and no alternative is available. Electronic transmission of CUI (voice, data, or facsimile) should be by approved secure communications systems whenever practical.

If there is a fax transmission, the sender must ensure the intended receiver is available to receive it or a cover sheet will be used to allow carrying it to the final recipient to avoid unauthorized disclosure of the CUI.

8.9.8. RELEASE: CUI material shall not be released outside of the contractor’s facility except to the representative of DoD or DHRA.

8.9.9. DESTRUCTION: When the CUI material no longer meets the threshold for safeguarding and dissemination, it shall be immediately decontrolled, be processed through the records management process, and destroyed by the approved methods identified in DoDI 5200.48 precluding its disclosure to unauthorized individuals by rendering it unreadable, indecipherable, and irrecoverable.

8.10. Position of Trust (POT) Requirements. DCSA and OPM offers the Tier background investigations, Tier 1 (T1) – Tier 5 (T5) for Position of Trust determination.

The T5 being the most stringent investigation and T1 being the least stringent.

8.10.1. The Government is responsible for the cost of POT or sponsor a DoD-determined equivalent background check for unclassified access.

8.10.2. The Position of Trust BI process requires the DoD Government Security Office to review each request and establish the BI sponsorship. Submit a request and list of personnel for security investigation to the DHRA Security Office point of contact(s) to be provided by the COR- NLT five (5) business days after contract award.

8.10.3. Per DCSA a [T3 or T3 Reinvestigation (T3R)] meets the requirement for a

[Noncritical-Sensitive] position. A new application for a DoD [T3/T3R] BI for Position of Trust determination requires FBI fingerprints check, proof of US Citizenship and a Personnel Security Questionnaire (PSQ) on the Standard Form (SF) 86 using the National Background Investigation Services – electronic Application (NBIS/eApp). The Contractor employees shall provide all requested information pursuant to the Privacy Act of 1974 when requested by the Government. The Government Security Office will provide instructions according to the individual case and Tier BI to access the eApp system. For information visit NBIS at https://www.dcsa.mil/is/nbis/

8.10.4. Reciprocity. The DHRA and the Defense Logistics Agency (DLA) PERSEC will use reciprocity to the extent possible and if necessary will request re-adjudication by the https://www.dcsa.mil/is/nbis/

Department of Defense Consolidated Adjudications Facility (CAF) or DCSA Consolidated Adjudication Services (CAS) to support the DoD standards per Executive Order E.O 13488, Granting Reciprocity on Excepted Service and Federal Contractor Employee Fitness and Reinvestigating Individuals in Positions of Public Trust.

8.10.5. A BI equivalency will be according to the investigative alignments offered by the

OPM and the DCSA here, https://www.dcsa.mil/Portals/91/Documents/pv/GovHRSec/Position_Designation_I nvestigation_Type_Chart_Sept_2017.pdf

8.10.6. Reciprocity consideration includes verifying break in service longer than 24 months as a US Military, US Civilian or US Contractor from the last favorable investigation.

8.10.7. A new Position of Trust applicant under this contract must obtain at a minimum interim eligibility from the DLA Security prior to the assignment and performance of their duties in support of the Government in this contract.

8.10.8. DHRA’s interim Position of Trust eligibility is sponsored by DHRA PERSEC and approved by DLA PERSEC.

8.10.9. Eligible interim Position of Trust personnel expectations include, but are not limited to:

8.10.9.1. Comply with all personnel security requirements as specified by DHRA and

DLA PERSEC;

8.10.9.2. Attain and maintain favorable FBI fingerprint results;

8.10.9.3. Comply with all investigative and adjudicative requirements, which includes responsiveness to time-sensitive requests (e.g., interview(s), additional information or clarification) from the DLA PERSEC, investigator or the adjudicative agency (DoD CAF/CAS);

8.10.9.4. Attain and maintain favorable eligibility to the designated BI.

8.11. Controlled/Restricted Areas. The Contractor shall be compliant with local procedures for entry to DHRA controlled/restricted areas where Contractor personnel will work.

8.12. Physical Security. The Contractor shall safeguard all Government property and controlled forms provided for Contractor use and adhere to the Government property requirements contained in this contract. At the end of each work day, all Government facilities, equipment and materials shall be secured

8.13. Pass and Identification Items. The Contractor shall ensure the pass and identification items required for contract performance are obtained for employees and non-government owned vehicles.

8.14. DoD Credentials/Common Access Card (CAC). Contractor personnel must obtain a DoD credential or CAC if they are assigned to perform work under this contract requiring https://www.dcsa.mil/Portals/91/Documents/pv/GovHRSec/Position_Designation_Investigation_Type_Chart_Sept_2017.pdf https://www.dcsa.mil/Portals/91/Documents/pv/GovHRSec/Position_Designation_Investigation_Type_Chart_Sept_2017.pdf access to DoD network(s), CUI/PII data, IT/Information Systems, DoD Facilities or non- DoD federally controlled facilities on behalf of the DoD on a recurring basis per DODM 1000.13, DoD Identification (ID) Cards: ID Card Life-Cycle.

8.14.1. Comply with HSPD-12 Personal Identity Verification (PIV) issuance requirements.

Be responsible for obtaining a CAC or PIV and be in ready status prior to requesting access to DoD resources such as DoD Facilities, DoD IT/Information Systems (IS).

8.14.2. CAC Applicant supporting this contract will need to meet the following requirements:

8.14.2.1. Execute, obtain/maintain a favorable FBI National Criminal History Check

(fingerprint check);

8.14.2.2. Have an open [Tier 3 or equivalent BI to meet Noncritical-Sensitive] role;

8.14.2.3. Be ready to provide two forms of identification (I-9 document);

8.14.2.4. Provide proof of U.S Citizenship.

8.15. Retrieving Identification Media. The Contractor shall retrieve all identification media, including vehicle passes from employees, including those who depart for any reason before the contract expires; e.g. terminated for cause, retirement, etc.

8.16. Key Control/Access Badge Control. The Contractor shall establish and implement methods of making sure all keys/badges issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. The Contractor shall not duplicate any keys issued by the Government.

8.16.1. Prohibited Use. The Contractor shall prohibit the use of keys, issued by the

Government, by any persons other than the Contractor’s employees and the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in performance of contract work requirements in those areas.

8.17. Conduct while on Government Installation. The CO may direct the contractor to remove an employee(s) from an assignment under this contract for reasons of security or misconduct.

8.18. Weapons, Firearms, and Ammunition. Contractor employees are prohibited from possessing weapons, firearms, or ammunition, on themselves or within their contractor-owned vehicle or privately-owned vehicle while on all DHRA installations.

8.19. Reporting Requirements. Contractor personnel shall report to an appropriate authority any information or circumstances of which they are aware may pose a threat to the security of DOD personnel, Contractor personnel, resources, and classified or unclassified defense information.

8.20. Government Furnished Equipment (GFE). The Contractor shall establish and implement procedures to ensure all GFE to include laptops and other data processing devices, issued to the Contractor by the Government are not lost or misplaced, are not used by unauthorized persons or are not subject to unauthorized external devices. The Contractor shall immediately report to the COR any occurrences of lost GFE within two (2) hours of discovery of occurrence. In the event that GFE is lost, the Contractor may be required, upon written direction of the CO, to replace the equipment at no additional cost to the Government. The Government may replace the equipment and deduct the cost of such from the monthly payment due the Contractor.

8.21. Lock Combinations. Not Applicable

8.22. Offboarding. Upon completion of the contract, an employee’s relocation or termination of an employee, or upon request from the COR in accordance with DHRA centers or offices security policies coordinate the employees removal from work under this contract with the COR.

8.22.1. If at any time, any Contractor personnel supporting this contract are unable to obtain/maintain an adjudicated [T3 BI], the Contractor shall immediately notify the COR and coordinate removal of such a person from work under this contract and replace the individual with appropriate level background investigation knowledge, skill and ability (KSA) required to perform services.

8.22.2. As the contractor replaces employees, the contractor shall submit the outgoing employee’s installation access and return all CACs/badge(s)/identification card(s) immediately to the COR, who will turn it in to the local Installation Access Control Office or Government Security Office.

8.22.3. Submit an Off-boarding notification to the COR and the DHRA PERSEC as soon as the contractor knows an employee is leaving the contract.

8.22.4. When personnel change, provide updated personnel security list to the COR within three business days of a change.

8.22.5. Information System Security. The Contractor shall implement Information System

(IS) security protections and ensure the protections are appropriate to the confidentiality, integrity, and availability needs of the Government. Establish appropriate administrative, technical, and physical safeguards to protect any and all nonpublic Government data.

8.23. Mandatory Training Requirements:

8.23.1. Contractor employees performing under this contract shall complete the following mandatory trainings within 30 days of contract award and date of any option exercised. If additional mandatory training is required, a modification will be issued to incorporate the changes.

8.23.1.1. OPSEC Awareness for Military Members, DoD Employees and Contractors

IAW DoDM 5205.02, “DoD Operations Security (OPSEC) Program Manual”, dated October 29,2020.

8.23.1.2. New contractor employee must complete level 1 OPSEC Awareness training within 30 calendar days of their reporting for duty and annually thereafter.

8.23.1.3. OPSEC training Link:

https://securityawareness.usalearning.gov/opsec/index.htm

8.23.1.4. Unauthorized Disclosure of Classified Information and Controlled Unclassified Information IAW DoDI 5200.48, “Controlled Unclassified Information (CUI)”, dated March 6, 2020 is currently available at:

https://securityawareness.usalearning.gov/disclosure/index.html

8.23.1.5. DoD Mandatory Controlled Unclassified Information (CUI) Training, Executive Order 13556, Controlled Unclassified Information and DoDI 5200.48, “Controlled Unclassified Information (CUI)”, dated March 6, 2020.

https://securityawareness.usalearning.gov/cui/index.html

8.23.1.6. Insider Threat Awareness IAW DoDD 5205.16, “The DoD Insider Threat Program”, dated August 28, 2017 is currently available at:

https://securityawareness.usalearning.gov/itawareness/index.htm

8.23.1.7. Privacy Act and Personally Identifiable Information IAW DoDI 5400.11, “DoD Privacy and Civil Liberties Programs”, dated January 29, 2019 and the training is currently available at:

https://securityawareness.usalearning.gov/piiv2/index.htm

8.23.1.8. Cybersecurity Awareness IAW title 5, Code of Federal Regulations, section

930.301 and the training is currently available at:

https://public.cyber.mil/training/cyber-awareness-challenge/

8.23.1.9. Counterintelligence Awareness and Reporting Training IAW DoD Directive 5240.06, “Counterintelligence Awareness and Reporting (CIAR)”, dated July 21, 2017 and the training is currently available at:

https://securityawareness.usalearning.gov/cidod/index.html

8.23.1.10. Annual OSD Records and Information Management Training (DHA-US1369) IAW Administrative Instruction 15, “OSD Records and Information Management Program”, dated November 17, 2020 and the training is currently available at:

https://jkodirect.jten.mil/

8.23.2. The Contractor shall provide a copy of its employee(s)’ training certificates to the COR to meet the mandatory training requirements.

9. GOVERNMENT FURNISHED PROPERTY/EQUIPMENT/INFORMATION (GFP/GFE/GFI)

N/A

10. PLACE OF PERFORMANCE

The work shall be conducted at the contractor’s location. Meetings and communication shall take place virtually via email, telephone, or video collaboration service such as Microsoft Teams or Zoom.

11. QUALITY CONTROL

The contractor shall implement and maintain a Quality Control Plan (QCP) to ensure work performed conforms to the scope of work and meets the requirements under this PWS. The QCP shall, at a minimum provide a method for performing inspections; identifying, correcting and preventing problems/defective service; addressing customer complaints, and improving the quality of services over the life of the contract.

12. QUALITY ASSURANCE

https://securityawareness.usalearning.gov/opsec/index.htm https://securityawareness.usalearning.gov/disclosure/index.html https://securityawareness.usalearning.gov/cui/index.html https://securityawareness.usalearning.gov/itawareness/index.htm https://securityawareness.usalearning.gov/piiv2/index.htm https://public.cyber.mil/training/cyber-awareness-challenge/ https://securityawareness.usalearning.gov/cidod/index.html https://jkodirect.jten.mil/

12.1. The Government reserves the right to perform inspections and surveillance to evaluate the Contractor’s compliance to the contract terms and performance of the requirements in the

PWS.

12.2. Contract Discrepancy Report (CDR). In the event of unsatisfactory contractor performance, the Contracting Officer’s Representative (COR) or Contracting Officer (CO) will issue a CDR that will explain the circumstances and findings concerning the incomplete or unsatisfactory service. The contractor shall acknowledge receipt of the CDR and respond in writing as to how he/she shall correct the unacceptable performance and avoid a recurrence. The Government will review the contractor's corrective action response to determine acceptability and will use any completed CDR as part of an overall evaluation of Contractor performance when determining present or future contractual actions.

13. ORGANIZATIONAL CONFLICTS OF INTEREST

The Contractor acknowledges performance of this contract may limit its ability to compete for future awards and that it is familiar with FAR Subpart 9.5, Organizational and Consultant Conflicts of Interest, and agrees to avoid, neutralize or mitigate such conflicts of interest in accordance with the principles set forth in the FAR. If the performance requires the Contractor (to include subcontractors) to supply technical support related to systems or projects with which the Contractor is already directly concerned, either by prime or subcontract, the Contractor shall immediately inform the Contracting Officer. The PWS may be withdrawn if a conflict is found. The Contractor shall not undertake performance of any PWS requirements which requires it to supply technical support regarding such systems until the notice is given, and written consent to proceed is issued by the CO.

14. PERFORMANCE REQUIREMENT SUMMARY (PRS)

14.1 Purpose. The PRS lists performance objectives for the required services the Government will surveil. The absence of any contract requirement from the PRS shall not detract from its enforceability nor limit the rights or remedies of the Government under any other provision of the contract including the clauses entitled “Inspection of Services” or “Inspection” or “Default” in Section E and Section I of the contract.

14.2 Components. The PRS states the performance objective (required service), and threshold (performance standard, accept and reject points (if applicable)) in either a qualitative or quantitative fashion for each critical success factor.

Performance Objective

PWS paragraph

Performance Standard/Acceptable Quality Level

Provide qualified people at the time of (TO) start

1.0

Performance is acceptable when qualified personnel are on the job at TO start, unless previously negotiated by the CO

Maintain stable workforce 1.0 Less than 5 percent Lapse Rate across all contracted positions

Effectively replaces/substitutes personnel

1.0 Performance is acceptable when:

a) Vacancies are filled with qualified personnel within 14 days of vacancy, unless approved in writing or otherwise directed in advance by the CO;

AND

There is no mission impact due to position vacancies or unqualified personnel.

Provide meaningful progress reports monthly

4.1 Performance is acceptable when:

a) reports are provided electronically in

Microsoft Word, logically structured and clearly communicate project status, accomplishments, challenges and next steps;

AND

b) report is received on time.

Develop and submit all required deliverables per the deliverables table

4.2.1, 4.3.1, 4.3.2, 4.3.3, 4.3.3.1.1, 4.3.3.1.2

Performance is acceptable when:

a) One hundred (100) percent of deliverable requirements are met and received on time;

AND

b) critical information is accurate.

Full Change Management Plan

4.3 Is acceptable when full implementation plan

submissions include actionable recommendations for the Government

16. MANDATORY TRAINING REQUIREMENTS

Contractor employees performing under this contract shall complete the following mandatory trainings within thirty (30) days of contract award and date of any option exercised. If additional mandatory training is required, amendment or modification will be issued to incorporate the changes.

1. OPSEC Awareness for Military Members, DoD Employees and Contractors IAW DoDM 5205.02, “DoD Operations Security (OPSEC) Program Manual”, dated October 29, 2020. The training is currently available at:

https://securityawareness.usalearning.gov/opsec/index.htm

2. Unauthorized Disclosure of Classified Information and Controlled Unclassified Information IAW DoDI 5200.48, “Controlled Unclassified Information (CUI)”, dated March 6, 2020. The training is currently available at:

https://securityawareness.usalearning.gov/disclosure/index.html

3. DoD Mandatory Controlled Unclassified Information (CUI) Training, Executive Order 13556, Controlled Unclassified Information and DoDI 5200.48, “Controlled Unclassified Information (CUI)”, dated March 6, 2020. The training is currently available at:

https://securityawareness.usalearning.gov/cui/index.html

4. Insider Threat Awareness IAW DoDD 5205.16, “The DoD Insider Threat Program”, dated August 28, 2017. The training is currently available at:

https://securityawareness.usalearning.gov/itawareness/index.htm

5. Privacy Act and Personally Identifiable Information IAW DoDI 5400.11, “DoD Privacy and Civil Liberties Programs,” dated January 29, 2019. The training is currently available at:

https://securityawareness.usalearning.gov/opsec/index.htm https://securityawareness.usalearning.gov/disclosure/index.html https://securityawareness.usalearning.gov/cui/index.html https://securityawareness.usalearning.gov/itawareness/index.htm https://securityawareness.usalearning.gov/cybersecurity/index.htm or https://public.cyber.mil/cyber-training/training-catalog/

6. Cybersecurity Awareness IAW title 5, Code of Federal Regulations, section 930.301. The training is currently available at:

https://public.cyber.mil/training/cyber-awareness-challenge/

7. Counterintelligence Awareness and Reporting Training IAW DoD Directive 5240.06, “Counterintelligence Awareness and Reporting (CIAR)”, dated July 21, 2017. The training is currently available at: https://securityawareness.usalearning.gov/cidod/index.html

8. Annual OSD Records and Information Management Training (DHA-US1369) IAW Administrative Instruction 15, “OSD Records and Information Management Program,” dated November 17, 2020. The training is currently available at: https://jkodirect.jten.mil/

9. Antiterrorism (AT) Level 1 Training. IAW DoDI O-2000.16-V1, “DoD Antiterrorism Program Implementation” dated, November 17, 2016, Change 3, May 7, 2021. The training is currently available at: https://jkodirect.jten.mil/ (JS-US007).

The Contractor Program Manager shall provide a copy of its employee(s)’ training certificate to the COR to meet the mandatory training requirements. The CORs shall maintain the contractor’s certificate(s) in the COR file or COR Tracking Tool.

https://securityawareness.usalearning.gov/cybersecurity/index.htm https://public.cyber.mil/cyber-training/training-catalog/ https://public.cyber.mil/training/cyber-awareness-challenge/ https://securityawareness.usalearning.gov/cidod/index.html https://jkodirect.jten.mil/ https://jkodirect.jten.mil/