PWS - Magnet Forensics GrayKey.pdf

PWS

PERFORMANCE WORK STATEMENT (PWS)

U.S. Criminal Investigation Laboratory Center GrayKey Annual Licenses

Part 1 General Information

1. GENERAL: The U.S. Army Criminal Investigation Division (CID) requires the ability to unlock and extract data from Apple iOS devices to collect and analyze data in criminal investigations. Since 2018, CID has been using the Graykey product as a necessary solution for iOS devices and Android devices, and now has a need to renew 1 license for its Graykey located at the U.S. Army Criminal Investigation Laboratory (USACIL). CID routinely encounters iOS and Android devices in their investigations.

Failing to renew the GrayKey license will result in the inability to obtain data which could hold evidentiary value for criminal investigations.

1.1 Description of Services/Introduction: The contractor shall renew (1) Magnet Forensics, LLC, GrayKey license, as described in Section 4 of this Statement of Work for a period of one (1) year term. as defined in this Performance Work Statement. The contractor shall perform to the standards in this contract.

1.2 Background: USACIL requires 1 licensing option to include unlimited consent, Before First Unlock (BFU), After First Unlock (AFU), Instant Unlock, or Brute Force support for iOS and Android devices and software updates.

1.3 Scope: The contractor shall renew (1) Magnet Forensics, LLC, GrayKey license, as described in Section 4 of this Statement of Work for a period of one (1) year term. as defined in this Performance Work Statement.

1.4 Period of Performance: The period of performance shall be for one (1) Base Year of 12 months.

Base year 10 JUL 2025 – 09 JUL 2026

1.5 General Information

1.5.1 Quality Control: The contractor shall engage in an effective quality control program to ensure services are performed in accordance with this PWS. The contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract. A copy of the Contractor’s basic Quality Control Plan shall be provided to the Contracting Officer for approval not later than 10 calendar days after receipt of award. An updated copy shall be provided to the Contracting Officer and COR as changes occur.

1.5.2 Quality Assurance: The government shall evaluate the contractor’s performance under this contract in accordance with the quality assurance surveillance plan. These standards primarily focus on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. The standards define how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.5.3 Federal Government Holidays:

The contractor is not required to perform services on holidays.

New Year’s Day 1st day of January Martin Luther King Jr.’s Birthday 3rd Monday of January President’s Day 3rd Monday of February Memorial Day last Monday of May Juneteenth Independence Day 19th of June Independence Day 4th day of July Labor Day 1st Monday of September Columbus Day 2nd Monday of October Veteran’s Day 11th day of November Thanksgiving Day 4th Thursday of November Christmas Day 25th day of December

1.5.4 Hours of Operation: The contractor is responsible for conducting business, between the hours of 0800-1700 Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. For other than firm fixed price contracts, the contractor will not be reimbursed when the government facility is closed for the above reasons. The Contractor must always maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential.

1.5.5 Period of Performance: The contractor shall provide the Grayshift licenses, hardware, software, support and maintenance from 10 July 2025 until 09 July 2026.

1.5.6 Type of Contract: The government anticipates award of a firm-fixed price type contract for commercially available Magnet Forensics, LLC, GrayKey License and Maintenance Fees.

1.5.7 Security Requirements: N/A

1.5.7.1 Installation Access: N/A

1.5.7.2 Physical Security: N/A

1.5.7.3 Key Control: N/A

1.5.7.4 Lock Combinations: N/A

1.5.7.5 Training: N/A

1.6.8 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5.

The contracting officer, Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced.

Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.6.9 Contracting Officer Representative (COR): The (COR) will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration The COR is authorized to perform the following functions:

assure that the Contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance: maintain written and oral communications with the Contractor concerning technical aspects of the contract:

issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially regarding changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.10 Key Personnel: The follow personnel are considered key personnel by the government: Contract manager/Alternate contract manager. The contractor shall provide a contract manager who shall be responsible for the performance of the work.

The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the contracting officer. The contract manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The contract manager or alternate shall be available between 8:00 a.m. to 5:00 p.m., Monday thru Friday except Federal holidays or when the government facility is closed for administrative reasons

1.6.11 Contractor Travel: NA

1.6.12 Other Direct Costs: NA

1.6.13 Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the Contracting Officer.

All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.14 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.15 PHASE IN /PHASE OUT PERIOD: NA

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1 DEFINITIONS:

2.1.1 ASCLD-LAB. American Society of Criminal Laboratory Directors- Laboratory Accreditation Board. The certifying board under which the U.S. Army Criminal Investigation Laboratory maintains certification.

2.1.2 CONTRACT ADMINISTRATOR. The official Government representative delegated authority by the Contracting Officer to administer a contract. This individual is normally a member of the appropriate Contracting/Procurement career field and advises on all technical contractual matters.

2.1.3 CONTRACTOR. A supplier or vendor having a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.4 CONTRACTING OFFICER. A person with authority to enter, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.5 CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations.

This individual has authority to provide technical direction to the Contractor if that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.6 DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.7 DELIVERABLE. Anything that can be physically delivered but may include non-physical things such as meeting minutes.

2.1.8 GOVERNMENT-FURNISHED PROPERTY (GFP) OR GOVERNMENT PROPERTY (GP).

Property in the position of, or directly acquired by, the Government and subsequently made available to the Contractor.

2.1.9 ISO. Certifying body under which the laboratory has certification.

2.1.10 KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.11 N.I.S.T. National Institute of Standards and Technology.

2.1.12 PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.13 QUALITY ASSURANCE. The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.14 QUALITY ASSURANCE Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.15 QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of a product or service shall meet contract requirements.

2.1.16 SUBCONTRACTOR. One that enters a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.1.17 WORKDAY. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.18 WORK WEEK. Is defined as Monday through Friday, unless specified otherwise.

2.2. ACRONYMS:

AFARS Army Federal Acquisition Regulation Supplement AR Army Regulation CCE Contracting Center of Excellence CFR Code of Federal Regulations CMR Contract Manpower Reporting CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTS Commercial-Off-the-Shelf DA Department of the Army DD250 Department of Defense Form 250 (Receiving Report) DD254 Department of Defense Contract Security Requirement List DFARS Defense Federal Acquisition Regulation Supplement DMDC Defense Manpower Data Center DNA Deoxyribonucleic Acid DOD Department of Defense FAR Federal Acquisition Regulation HIPAA Health Insurance Portability and Accountability Act of 1996 KO Contracting Officer OCI Organizational Conflict of Interest OCONUS Outside Continental United States (includes Alaska and Hawaii) ODC Other Direct Costs PIPO Phase In/Phase Out PM Preventative Maintenance POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement

QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Program TE Technical Exhibit

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

N/A

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES:

General: The contractor shall provide the following license options:

Part No. Product Name Qty License No.

GKL-PFS GrayKey Offline Premier Unlimited iOS and Android Extractions

Renewal for Serial Numbers:

9a926beed469131c

1 9a926beed469131c

- Technical customer service between 0800-1600 hours, Monday through Friday, Eastern Standard Time.

4.1. Secret Facility Clearance: N/A

4.2. Materials: The Contractor shall provide the required parts for repair and equipment necessary to perform the repair or maintenance (i.e. temperature probe, filters, screwdrivers, etc).

4.3. Equipment: N/A

PART 5

SPECIFIC TASKS

5. Specific Tasks

5.1 The Contractor shall provide all license renewals for the performance period. The software must perform as detailed in the quote and contract.

5.2 The contract shall provide helpdesk support Monday through Friday , Eastern Standard time. Help desk support will be between 0800 – 1600 hours.

PART 6 APPLICABLE PUBLICATIONS

6. APPLICABLE PUBLICATIONS (CURRENT EDITIONS)

6.1. The Contractor must abide by all DoD, Army, DACID and USACIL applicable regulations, publications, manuals, and policies and procedures when performing all services pursuit to this PWS and contract.

NUMBER DATE DESCRIPTION MANDATORY

AR 200-1 Dec 07 Environmental Protection X

AR 385-10 Nov 13 Army Safety Program X EM-385-1-1 Aug 11 Safety and Health X Requirements Manual OSHA All OSHA guidelines X

PART 7 ATTACHMENT/TECHNICAL EXHIBIT LISTING

7 Attachment/Technical Exhibit List:

7.1. Attachment I/Technical Exhibit 1 - Performance Requirements

7.2. Attachment 2/Technical Exhibit 2 - Deliverables Schedule

7.3. Attachment 3/Technical Exhibit 3 -Agilent Instruments

7.4. Attachment 4ffechnical Exhibit 4- Contract Data Requirement List

TECHNICAL EXHIBIT 1

Performance Requirements Metrics

The Contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

Performance Objective STANDARDS PERFORMANC

E THRESHOLD

Method of

Surveillance

Incentive (Positive and/or Negative)

PRS 1; PWS 5.1. Contractor will provide all license renewals for the performance period

Software must perform as detailed in the quote and contract.

100% 100% inspection

Contractor performance will be documented in CPARS.

PRS 2; PWS 5.2. Contractor will provide helpdesk support Monday through Friday, Eastern Standard Time.

Help desk support will be between 0800-1600 hours. 100% 100% inspection

Contractor performance will be documented in CPARS.

- Technical customer service between 0800-1600 hours, Monday through Friday, Eastern Standard Time.