PWS-RITS5.pdf

Redstone ITS PWS Page 1 of 44

PERFORMANCE WORK STATEMENT

REDSTONE INFORMATION TECHNOLOGY (IT) SERVICES

CENTRAL REGION NETWORK ENTERPRISE CENTER (RNEC)

REDSTONE ARSENAL, ALABAMA

9 December 2021

INDEX

1.0 GENERAL

2.0 SCOPE AND BACKGROUND

2.1 SCOPE

2.2 REDSTONE ARSENAL ENVIRONMENT

3.0 TECHNICAL REQUIREMENTS

3.1 GENERAL

3.2 (PSC) 700.0 AUTOMATION

3.2.2 700.1 STORAGE SERVICES

3.2.3 700.2 DATABASE ADMINISTRATION

3.2.4 700.3 DESKTOP/ SOFTWARE/PERIPHERAL SUPPORT SERVICES

3.2.5 700.4 WEB SUPPORT SERVICES

3.2.6 700.5 SERVER ADMINISTRATION

3.2.7 700.6 DATA NETWORK SERVICES

3.3 (PSC) 701.0 COMMUNICATIONS SYSTEMS AND SYSTEM SUPPORT

3.3.1701.1 INSTALLATION INFRASTRUCTURE

3.3.2 701.1 COMMUNICATIONS FACILITIES PLANNING

3.3.3 701.4 (OPTIONAL) VIDEO TELECONFERENCING (VTC) SERVICES

3.3.4 DATA CENTER OPERATIONS

3.4 (PSC) 703.0 CYBERSECURITY

3.4.1 703.1 DOD PUBLIC KEY INFRASTRUCTURE (PKI)

3.4.2 703.3 (OPTIONAL) RISK MANAGEMENT FRAMEWORK

3.4.3 703.6 DEFENSIVE CYBERSPACE OPERATIONS

3.4.4 CONFIGURATION MANAGEMENT

4.0 ADMINISTRATIVE REQUIREMENTS:

4.1 PHASE-IN / PHASE OUT

4.2 PLACE OF WORK AND HOURS OF OPERATION

4.3 WORK ENVIRONMENT

Redstone ITS PWS Page 2 of 44

4.4 RESPONSE TIME(s)

4.5 WORK REQUESTS

4.6 WORK STOPPAGE

4.7 FUTURE REQUIREMENTS

4.8 EMERGENCY OPERATIONS

4.9 INCLEMENT WEATHER OPERATIONS

4.10 TRAINING

4.11 TRAVEL

4.12 SECURITY

4.13 PROTECTION

4.13.1 INFORMATION ASSURANCE TRAINING

4.13.2 INFORMATION ASSURANCE WORKFORCE CERTIFICATION .......... Error! Bookmark not defined.15

4.13.4 NON-GOVERNMENT-OWNED COMPUTING SYSTEMS OR DEVICES ... Error! Bookmark not defined.17

4.13.5 PROTECTION OF SENSTIVE UNCLASSIFIED DATA ........ Error! Bookmark not defined.17

4.13.6 ANTITERRORISM .................................................................... Error! Bookmark not defined.17

4.14 SAFETY

4.14.1 ACCIDENT REPORTING

4.14.2 SMOKING

4.14.3 FIRE PROTECTION

4.15 PERSONNEL PROCESSING

4.15.1 CONTRACTOR IDENTIFICATION REQUIREMENTS

4.15.2 LIST OF CONTRACTOR PERSONNEL

4.15.3 CONTRACTOR EMPLOYEES

4.15.4 COMMON ACCESS CARD (CAC)

4.16 GOVERNMENT PROPERTY:

4.16.2 INCIDENTAL PROPERTY

4.16.3 CONTRACTOR PROPERTY

4.16.4 VEHICLES ................................................................................. Error! Bookmark not defined.20

4.17 ACCESS TO PROTECTED INFORMATION

4.18 CLASSIFIED MATERIAL

Redstone ITS PWS Page 3 of 44

4.19 ACCESS TO DATA AND INFORMATION

4.20 RELEASE OF FILES

4.21 ACCOUNTING FOR CONTRACTOR SUPPORT

4.22 CONTRACTING OFFICER REPRESENTATIVE (COR)

4.23 STRIKE CONTINGENCY REPORT

5.0 DELIVERABLES AND DELIVERY SCHEDULE

5.1 PROBLEM AND INCIDENT ESCALATION PLAN

5.2 CONTINUITY AND EMERGENCY ACTION PLAN

5.3 AFTER ACTION REPORT

5.4 PROGRAM REVIEW

5.5 ARCHITECTURAL DESIGN DOCUMENT

5.6 STATUS REPORT

5.7 STANDARD OPERATING PROCEDURES (SOP)

5.8 INFORMATION AND WORKING PAPERS:

5.9 BRIEFING AND PRESENTATION:

5.10 EMPLOYEE ROSTER:

a) Name (last name, first name)

b) Physical Work Address

c) Work Phone Number

d) Government Email Address

e) Position Title

f) Employment Date

g) Security Clearance

5.11TRIP REPORT:

5.12 MONTHLY REPORTS:

5.13 TECHNICAL & MANAGMEN WORK PLAN

5.14 WEEKLY REPORTS

6.0 QUALITY CONTROL PLAN (QCP)/QUALITY ASSURANCE

6.1 QUALITY CONTROL PLAN (QCP)

6.1.1 PERFORMANCE REQUIREMENTS SUMMARY (PRS)

6.2 QUALITY ASSURANCE (QA)

ATTACHMENT A: BASELINE NETWORK PROPERTY, HARDWARE, AND SOFTWARE ... 3027

Redstone ITS PWS Page 4 of 44

ATTACHMENT B: BASELINE SYSTEMS PROPERTY, HARDWARE, AND SOFTWARE

ATTACHMENT C: BASELINE COMMUNICATIONS FACILITY PROJECTS . Error! Bookmark not defined.31

ATTACHMENT D: REIMBURSABLE SERVICES

ATTACHMENT E: REFERENCES

Redstone ITS PWS Page 5 of 44

1.0 GENERAL

This Performance Work Statement outlines the non-personal Information Technology (IT) services required by the Regional Network Enterprise Center Central (RNECC) located on Redstone Arsenal, Alabama (RSA), Local Network Enterprise Center (LNEC) Detroit Arsenal, Michigan (DTA), LNEC Rock Island Arsenal, Illinois (RIA);

and classified operational support to Anniston Army Depot, Alabama (ANAD), Iowa Army Ammunitions Plant (IAAAP), and Pine Bluff Arkansas (PBA).

2.0 SCOPE AND BACKGROUND:

2.1 SCOPE: The Contractor shall deliver comprehensive, integrated, end-to-end IT services that include items such as Directory Services, DoD Public Key Infrastructure (PKI) Service, Storage Services, Database Services, Desktop/ Software/Peripheral Support Services, Web Support Services, Server Administration, Continuity Of Operations Plan (COOP), Data Center Operations, Video Teleconferencing Service, Data Network Administration, Systems and Network Continuity of Operations Administration, Data Network Planning Support, and Communication Facilities Planning Support. The Contractor shall provide these services in support of both classified and unclassified networks at all locations supported by the RNECC unless otherwise annotated within this contract.

2.2 REDSTONE ARSENAL ENVIRONMENT: Redstone Aresenal is home to Headquarters Army Materiel Command (AMC), Headquarters U.S. Army Space & Missile Defense Command (SMDC), Headquarters U.S. Army Security Assistance Command (USASAC), Headquarters Army Contracting Command (ACC), Army Aviation and Missile Command (AMCOM), Army Combat Capabilities Development Command Aviation and Missile Center (CCDC AvMC), Threat Systems Management Officer (TSMO), Missile Defense Agency (MDA), Redstone Test Center (RTC), 2nd Recruiting Brigade, and 2nd Medical Recruiting Battalion. The installation is also recognized as a Federal Center of Excellence under Army Management, facilitating the execution of multiple federal agencies (NASA, DoD, DOJ, DA) services across four (4) distinct domains/mission sets: (1) Logistics; (2) Space and Ballistic Missile Defense; (3) Research, Development, Testing and Evaluation (RDT&E), and; (4) Intelligence/Homeland Defense that support global effects from NASA’s Space Launch System (SLS) to the FBI’s Terrorist Explosives Device Center (TEDAC) contributing to the eradication of improvised explosive devices (IEDs). Redstone Arsenal significantly impacts the Tennessee Valley, creating approximately 108,000 jobs in the area and adding approximately $18 Billion to the local economy each year. The Arsenal’s workforce is diverse and highly educated; 69% with degrees in science, engineering, logistics, acquisition and contracting. Department of Defense Chief Information Officer (CIO) memorandum, “Designation of Component Enterprise Data Centers and Core Data Centers” has approved the Redstone Arsenal Data Center as one of five CONUS Component Enterprise Data Centers (CEDCs) positioned to support the reduction of Army Data Centers and IT systems and applications making the RNECC a key stakeholder in the successful rationalization and preparation of applications migrating to the cloud and one of the largest Army providers for reimbursable hosting services. The Army has also designated Redstone Arsenal as the Central Region Network Enterprise Center (RNECC) with the responsibility to support IT across Alabama, Arkansas, Iowa, Illinois, and Detroit. Currently, RNECC supports SIPRNET Extension (SIPR-E) at the following locations across the network: ANAD; PBA; RIA; and DTA. The RNECC is also actively engaged in remote augmentation support for NIPRNET Extenstion (NIPR-E) services for ANAD; DTA; IAAAP; and RIA which may result in the need to surge to provide onsite support for a limited period of time to meet service and/or inspection requirements. While the PWS will provide some relevant information in support of Central Region sites external to Redstone Arsenal, the technical details provided supports remote administration augmentation and limited periods of onsite support only and does not expand the scope of the contract to include the full scope of IT services supported at the outlying sites unless otherwise modified . The above services and work locations supported within this region has the potential for updates and or alterations throughout the life of the contract if and / or when the Army makes alterations or realignments to the regional model. The RNECC operates as a subordinate element of the 7th Signal Command, part of the Army’s Network Enterprise Technology Command (NETCOM).

2.3 REDSTONE ARSENAL OPERATIONS: Redstone Arsenal’s CEDC offers two mechanisms to support the operations and maintenance (O&M) of reimbursable systems hosted within the facilities, shared and dedicated support personnel resources.

2.3.1 Shared. Redstone CEDC system administrators, back-up administrators, network administrators and cybersecurity personnel will respond to Customer tickets IAW Army IT Portfolio (AITP) Service List “Baseline”

Redstone ITS PWS Page 6 of 44 provided service performance standards based upon first-in-first-out (FIFO) ticket queues. Shared personnel are accountable for multiple systems supporting multiple Customers hosted within the CEDC. The use of shared (pool) personnel costs are embedded within the sustainment-maintenance cost of hosting the relevant system. The use of this mechanism does NOT result in additional labor costs to the Customer above the hosted service level costs, Customers understand that the Service Level Agreement (SLA) will be very limited in the ability to address the specific needs of the service delivery metrics.

2.3.2 Dedicated: Customers may fund Contractor provide support to become dedicated to the O&M of their system only. The use of dedicated personnel allows the Customer to set distinct timelines and performance metrics necessary to ensure a timely response to the mission system needs. The request for dedicated support will be addressed within the approved Reimbursable Support Worksheet (RSW) identifying the unique requirements of the Customer (available for Contractor review) and the cost between the Customer and the RNEC will be identified within the DD Form 1144 support agreement (not available for Contractor review). NOTE: Program Managed/Program of Record (PM/POR) systems MUST exercise the use of dedicated support to ensure programmatic timelines are met.

3.0 TECHNICAL REQUIREMENTS

3.1 GENERAL:

The information provided in this section is an overview of the services that are required at all locations previously identified in paragraph 2.2. All figures related to potential workload and customer base, including equipment and system totals, are provided for informational and estimating purposes only. The Government does not represent or guarantee that the figures will remain the same over the life of the task order.

The Contractor shall provide a Project Manager (Site Manager) who shall oversee and manage all requirements of this task order. The Site Manager shall be the Contractor’s on-site representative and shall have a basic knowledge of the information technologies identified within this performance work statement. The Contractor shall designate a primary and alternate Site Manager in writing and send this designation to the Contracting Officer (KO) and the COR. During task order performance, the Contractor shall provide a method by which the COR may contact the Site Manager to meet within 30 minutes during normal duty hours at a specific location. After normal duty hours the Site Manager or designated representative shall be available to respond to the requirements of the PWS within two hours of notification via phone call or email.

The Contractor shall provide technically qualified and properly cleared personnel to support the IT requirements listed in this PWS. Contractor personnel shall be certified as identified in Table 1. The IT requirements listed in this PWS apply to both classified Secret Internet Protocol Router Network (SIPRNET), unclassified Non-Classified Internet Protocol Router Network (NIPRNET) networks, and Joint Worldwide Intelligence Communications System (JWICS) Comparments SI/TK/G/HCS. Contractor personnel will have access to proscribed information.

Proscribed information is defined in DoD 5220.22-M (National Industrial Security Program Operating Manual) (NISPOM) as Top Secret, Communications Security (COMSEC) information or material, excluding controlled cryptographic items when unkeyed or utilized with unclassified keys, Restricted Data (RD), Special Access Program (SAP) information, or Sensitive Compartmented Information (SCI) as outlined in Attachment D.

The Contractor shall provide services correlated to their functional category and work assignment that supports the prevention of damage to, protection of, and restoration of computers, electronic communications systems, electronic communications services, wire and wireless communication to ensure its availability, integrity, authentication, confidentiality, and nonrepudiation of information. These services include the development of Standard Operating Procedures (SOPs) and Tactics, Techniques, and Procedures (TTPS), implementation of Security Technical Implementation Guidelines (STIGs), Information Assurance Vulnerability Alert (IAVA) updates, as well as software and firmware updates that increase the security posture of network. The Contractor shall support the Government with information assurance functional support for accreditation, certification, assessment, and documentation of systems managed by RNECC.

Redstone ITS PWS Page 7 of 44

The Contractor shall maintain the NIPRNET, SIPRNET and JWICS systems identified in the relevant sections at an operational availability of 99.9% In Accordance With (IAW) Army AITP Service List performance standards unless defined otherwise by reimbursable SLA. Operational availability is based on 24 hours per day, 7 days per week, 52 weeks per year, for all areas. Support availability 0700-1700 daily on non-holiday workdays w/ on call after hours.

3.2 Primary Service Category (PSC) 700.0 AUTOMATION: Provide electronic messaging, software development and maintenance, database support, automation training, administration and policy support, network support, and Continuity of Operations Plan (COOP) development. COOP is a United States federal government initiative, required by U.S. Presidential directive, to ensure that agencies are able to continue performance of essential functions under a broad range of circumstances.

3.2.1 700.1 DIRECTORY SERVICES: The Contractor shall maintain the baseline NIPRNET and SIPRNET directory systems identified in Attachment B Table 2, supporting services to include items such as the section 3.2.1 directory service examples listed below.

3.2.1.1 Operate, maintain and ensure overall security and integrity of the managed Installation Organizational Unit (OU) hierarchy.

3.2.1.2 Create utilities and scripts for authorized changes within directory services to include group policy object creation, troubleshooting and management, computer, user, group object management, reporting and problem diagnosis and resolution.

3.2.1.3 Provide local touch labor (troubleshooting, repairing, etc.) for assets within the NEC controlled facility.

3.2.2 700.1 STORAGE SERVICES: The Contractor shall maintain the baseline unclassified and classified storage systems identified in Attachment B Table(s) 5 and 6 supporting services to items such as the section 3.2.2 storage service examples listed below.

3.2.2.1 Operate and maintain Storage Area Network (SAN) and Network Attached Storage (NAS) (e.g., home directories, workgroup shares) file storage to include the installation, configuration, provisioning, and problem diagnosis of SAN/NAS devices, fiber channel switches and associated hardware and software.

3.2.2.2 Provide SAN/NAS design, analysis, and capacity planning to include monitoring storage utilization, performance, trend analytics, and management capabilities.

3.2.2.3 Monitor I/O performance of production SAN/NAS systems and take corrective troubleshooting actions to address performance issues impacting production services.

3.2.2.4 Develop and maintain records for the entire storage system, fiber channel switches, associated hardware/software and licensing requirements.

3.2.2.5 Perform and support backups for each provisioned volume with application based transaction log backups to recover data created between full backups to include courier capability to transport SIPRNET and COMSEC backup media to alternate storage locations on the installation. Courier capability includes obtaining proper courier authorization documentation from the supporting G2/S2/Security Office.

3.2.2.6 Provide high availability SAN-based data pathing for hosted application data storage.

3.2.2.7 Resolve requests through remote administration actions (troubleshooting, repairing) that do not require touch labor.

3.2.2.8 Provide local touch labor, to include troubleshooting, repairing, etc., for assets located within the NEC controlled facility.

3.2.2.9 (Optional) Contractor shall perform above baseline non-personal Information Technology (IT) automation and technical support services for Organizations supported by the RNEC. Current requirement detailed within

Redstone ITS PWS Page 8 of 44

Attachment D, this requirement may decrease or increase which will require a contract modification. The above baseline support is in addition to and outside the normal core requirement outlined in Attachment B.

3.2.3 700.2 DATABASE ADMINISTRATION: The Contractor shall maintain the baseline NIPRNET and SIPRNET database systems identified in Attachment B Table 3supporting services to include items such as the section 3.2.3 administration and maintenance examples listed below.

3.2.3.1 Perform local database administration for standard database software to include; perform database builds, reorganizations, maintenance, tuning, backups, restorations, and query design. Database configuration management support shall include oversight and maintenance of software licensing inventories, and documentation of database configurations.

3.2.3.2 Perform file transfers (file transfer protocols (FTPs)), loads, downloads, updates/changes, data file manipulation, data archiving, and coordination of implementation. Processing of superscans, driver actions, and updates/changes to unique and standard master files.

3.2.3.3 Perform incremental backups and full system backups for standard databases for systems to include performing disaster recovery exercises as required.

3.2.3.4 Develop, field, install, test, monitor and support database applications and make recommendations where improvements are necessary. Develop and maintain documentation as required when not supplied by product vendors.

3.2.3.5 Provide technical support involving software such as participation in structured walk-throughs, design reviews, code reviews, and technical evaluations.

3.2.3.6 Provide local touch labor (troubleshooting, repairing, etc.) on standard database systems for classified and unclassified systems located within NEC controlled facility.

3.2.3.7 Configure, monitor and maintain backup device security to meet security technical implementation guidelines to include plan, install and maintain data protection solutions to supported host systems.

3.2.3.8 (Optional) Contractor shall perform above baseline non-personal Information Technology (IT) automation and technical support services for Organizations supported by the RNEC. Current requirement detailed within Attachment D, this requirement may decrease or increase which will require a contract modification. The above baseline support is in addition to and outside the normal core requirement outlined in Attachment B.

3.2.4 700.3 DESKTOP/ SOFTWARE/PERIPHERAL SUPPORT SERVICES: The Contractor shall maintain and support the baseline NIPRNET, SIPRNET and JWICS systems identified in Attachment B Table 1 supporting services to include items such as the section 3.2.4 desktop, notebook, thin/zero client and peripheral service examples listed below.

3.2.4.1 Install approved for use desktop software on desktop systems.

3.2.4.2 Perform release management to include commercial software, standard software, and new system releases to include automated software updates, security updates, and vendor patches to end user devices on the enterprise network.

3.2.4.3 Maintain accountability for COMMON USER ENTERPRISE desktop software licenses.

3.2.4.4 Resolve desktop system requests through remote administration actions (troubleshooting, repairing) that do not require touch labor.

3.2.4.5 Provide local Touch Labor services to include installation, troubleshooting, and software updates, security updates, vendor patches (service packs, service releases), on desktop systems when electronic application means do not exist.

Redstone ITS PWS Page 9 of 44

3.2.4.6 Install and operate virtual systems in support of virtual machines for virtual desktop infrastructure (VDI).

3.2.4.7 Support the relocation, set-up, and configuration of authorized replacement (to include life-cycle) end user devices to include computers, printers, laptops, scanners, and other hardware. NOTE: The transfer of user data is not a responsibility of the Contractor under Desktop Support Services. This would include Life Cycle computer replacements. If the Contractor uses reimaging as a remedy for responding to a Tier II ITSM ticket, the Contractor shall be responsible for the restoration of that machine’s specific data. (COR approval required prior to supporting the physical relocation of equipment)

3.2.4.8 Perform problem management to include identifying and eliminating the causes of incidents, reduce impact of incidents that cannot be eliminated or prevented; Apply root cause analysis techniques to identify errors before they impact the enterprise.

3.2.4.9 Create utilities and scripts using modern scripting techniques in support of automating complex and/or repeatable tasks as it relates to managing end-user devices, servers and systems on the DODIN.

3.2.4.10 (Optional) The Contractor shall perform above baseline non-personal Information Technology (IT) automation and technical support services for Organizations supported by the RNEC. Current requirement detailed within Attachment D, this requirement may decrease or increase which will require a contract modification. The above baseline support is in addition to and outside the normal core requirement outlined in Attachment B.

3.2.5 700.4 WEB SUPPORT SERVICES: The Contractor shall maintain the baseline NIPRNET and SIPRNET systems identified in Attachment B supporting services to include items such as the 3.2.5 web hosting service examples listed below.

3.2.5.1 Plan, implement, operate and maintain web servers with considerations for Defense In Depth for ICAN IAW all DoD published regulations and policies to include certificate management, and compliancy.

3.2.5.2 Monitor web pages and applications for security and standards compliance and verify that user developed web pages follow regulations (Section 508 of the Rehabilitation Act and Department of Defense (DoD) web policy).

Monitor systems for disk usage, disk performance, and system performance.

3.2.5.3 Provide Web Application incident/event resolution for the Installation Emergency Service Support Center Common Operating Picture (COP) system.

3.2.5.4 Provide a formal web application change management process to deploy and maintain web sites, portals, web pages, and customized applications to include content management, i.e. update links, news bullets, reports, and charts.

3.2.5.5 Perform application testing to verify the operability and accuracy of implemented applications within the proponent automation environment. Perform debugging and coding required to correct errors or deficiencies encountered during testing.

3.2.5.6 Design, develop, and maintain static and dynamic web sites or portals using standard programming languages (Design, integrate, implement solutions inside Enterprise Portals such as A365 SharePoint).

3.2.6 700.5 SERVER ADMINISTRATION: The Contractor shall maintain the baseline SIPRNET, NIPRNET and JWICS systems identified in Attachment B Table 4 supporting services to include items such as the 3.2.6 server administration service examples listed below.

3.2.6.1 Provide system administration and operating system support for file, print, and application servers, server farms/banks to include hardware monitoring (Includes support to areas such as: virtual infrastructure, file, print, application, NPS, DHCP, OCSP, Voicemail, VOIP, DFS etc.).

Redstone ITS PWS Page 10 of 44

3.2.6.2 Provide and install hardware, operating system, and software for file, print, and applications servers, and server farms/banks to include test and verification of operating system service packs, application updates and patches while monitoring system logs, security logs, and application logs for each file, print, and applications server.

3.2.6.3 Perform system backups for each file, print, and common user applications server (Includes support to areas such as: hosts, vCenter, and the routine audit and verification of recovery processes).

3.2.6.4 Perform release management to include commercial software, standard software, and site license management, for new system releases and maintain accountability for software licenses and non-mission unique server licenses for NEC managed systems.

3.2.6.5 Provide legacy 911/E911 Emergency Service Server Support. This support consists of operating and maintaining data center environment for backend computing resources, which consists of TMS or TMS like server (for servers that are NEC-managed).

3.2.6.6 Provide local common user application, file, IIS and print servers touch labor, to include Layer 1, (troubleshooting, repairing, etc.) for assets managed by the local NEC.

3.2.6.7 Configure, deploy and maintain reporting and data analytics tools in support of various data analysis and reporting requirements (leverage SQL Server Reporting Service (SSRS), PowerBi, PowerShell etc.)

3.2.6.8 (Optional) Contractor shall perform above baseline non-personal Information Technology (IT) automation and technical support services for Organizations supported by the RNEC. Current requirement detailed within Attachment D, this requirement may decrease or increase which will require a contract modification. The above baseline support is in addition to and outside the normal core requirement outlined in Attachment B.

3.2.7 700.6 MANAGEMENT OF DATA NETWORK SERVICES

3.2.7.1 The Contractor shall maintain the baseline NIPRNET systems ONLY identified in Attachment A supporting services to include items such as the 3.2.7 installation and regional campus area network, virtual private network (VPN), network management, data network planning.

3.2.7.2 Monitor and manage Remote Access Servers (VPN, Remote Web Access, etc).

3.2.7.3 Operate and maintain VPNs for a dynamic site to site VPN structure that will support efficient, confidential communication directly between sites, IPN to IPN, and site to IPN connections.

3.2.7.4 Provide local touch labor (layer 1 troubleshooting, repairing, etc.) for Cyber Center assets. Provide local common-user NIPRNET Local Area Network( LAN) and Installation Campus Area Netwok (ICAN) touch labor (troubleshooting, repairing, etc.).

3.2.7.5 Operate and maintain NIPRNET connectivity and operate ICAN between LANs and computer resources.

3.2.7.6 Manage dynamic allocation of unclassified internet protocol (IP) address space. Assign and maintain unclassified IP address database using Dynamic Host Configuration Protocol (DHCP) or Static IP Addressing.

Develop and modify unclassified IP Assignment Schema. Monitor IP address utilization. Manage IP address blocks to tenant organizations and accomplish appropriate administrative registrations.

3.2.7.7 Monitor the ICAN and LAN by utilizing enterprise management software to monitor network performance, analyze network activity, and maintain network availability. Perform network discovery and conduct fault analysis.

Report circuit outages.

3.2.7.8 Conduct event management on network infrastructure and monitor services. Provide network utilization reports. Manage network equipment/software to include configuration management and capacity management.

Redstone ITS PWS Page 11 of 44

3.2.7.9 Operate and maintain common core (backbone infrastructure) network infrastructure equipment. Provide port authentication (ex.: 802.1x).

3.2.7.10 Implement Ports, Protocols, Services (PPS) change requests for Army organizations (Includes creating ports, protocols, and service management (PPSM) documents, and submitting documents using an ITIL change management process and in accordance with ARCYBER/NETCOM/ and DISA requirements).

3.2.7.11 Design, engineer and develop technical specifications for network equipment in support of Military Construction Army (MCA) projects, Unspecified Minor Military Construction Army (UMMCA) projects, and local minor construction/renovation/expansion projects. Update and maintain installation network standards.

3.3 (PSC) 701.0 COMMUNICATIONS SYSTEMS AND SYSTEM SUPPORT: Provide the cable infrastructure, internal and external networks necessary to deliver electronic information to, from, and among customers.

3.3.1 701.1 INSTALLATION INFRASTRUCTURE: The Contractor shall maintain the baseline NIPRNET systems supporting services to include items such as the 3.3.1 installation infrastructure service examples listed below.

3.3.1.1 Design, engineer, configure, operate and maintain the common user building information technology infrastructure to support data, voice and video.

3.3.1.2 Assist, coordinate, troubleshoot and identify problems involving the connectivity to the Army portion of the Department of Defense Information network (DoDIN)/Deployable Networks and digital service range support which exists on or connected to the Generating Force or installation common user networks infrastructure.

3.3.1.3 Maintain an electronic & hard copy Plant in Place (PIP) drawing library. Maintain in one of the Army systems of managing and storing engineering drawings (e.g., Joint Engineering Data Management and Control System).

3.3.1.4 Provide support for projects, site surveys, data calls etc. correlated to the modernization and maintenance of the installation infrastructure.

3.3.2 701.1 COMMUNICATIONS FACILITIES PLANNING: The Contractor shall support the planning for the baseline projects identified in Attachment C supporting services to include items such as the 3.3.2 installation infrastructure service examples listed below.

3.3.2.1 Plan transport requirements for Local Area Network/Campus Area Network/Wide Area Network

(LAN/CAN/WAN).

3.3.2.2 Design and engineer specifications for network connectivity to support building energy management/monitoring systems in support of MCA projects, UMMCA projects, and local minor construction/renovation/expansion projects. Update and maintain building network energy management/ monitoring standards required.

3.3.3 701.4 (OPTIONAL) VIDEO TELECONFERENCING (VTC) SERVICES: The Contractor shall perform above baseline non-personal Information Technology (IT) automation and technical support services for Organizations supported by the RNEC to include items such as the 3.3.3 VTC Studio service examples listed below.

Contractor current requirement detailed within Attachement D, this requirement may decrease or increase, which will require a contract modification.

3.3.3.1 Provide connection troubleshooting and support for customer provided endpoints. Includes support for room based VTC endpoints, desktop VTC endpoint, and Multi-point Connection Unit (MCU). (NIPRNET and SIPRNET)

3.3.3.2 Operate and maintain mission specific Controlled Unclassified Information (CUI) and SECRET VTC services as required when connected to the Defense Information Systems Network (DISN) or local area network.

Redstone ITS PWS Page 12 of 44

This includes VTC service in classrooms, transportable, command and control, conference room, briefing rooms, collaboration suites, and desktops. Provide design, installation advice and technical support for VTC studio suite equipment.

3.3.4 DATA CENTER OPERATIONS (DCO): The Contractor shall support the Data Center Manager in the operations of all data centers managed by RNEC. This support includes the management of: DISA Node Facility ~7400 sq. ft, NIPRNET facility ~30,000 sq. ft, and SIPRNET facility ~6,000 sq. ft. Services include items such as the configuration control of hardware installations, visitor access control, power and environmental systems management (includes monitoring of automated and non-automated alarms and alerts), and continuity of operations planning. Adhere to associated standards regarding cabling (ANSI/TIA-942), DCFI (ISO/IEC TS 22237) and HVAC (ASHRAE TC 9.9). Configure, update and manage DCIM tools such as StruxureWare. Complete routine actions, ranging from minor actions requiring only a few minutes of labor (example, escort access, lift and carry equipment) to major actions requiring hours of work (example, as air handler, power, or network failure oversight). Sometimes performed by multiple individuals on a large task, sometimes single individuals performing unique tasks. Duties may include operating fork lift, operating pallet jack, and other associated enabling equipment. Government does not guarantee or represent that the number will remain the same throughout the period of performance.

3.4 (PSC) 703.0 CYBERSECURITY: Prevention of damage to, protection of, and restoration of computers, electronic communications systems, electronic communications services, wire communication, and electronic communication, including information contained therein, to ensure its availability, integrity, authentication, confidentiality, and nonrepudiation.

3.4.1 703.1 DOD PUBLIC KEY INFRASTRUCTURE (PKI): The Contractor shall maintain the baseline NIPRNET and SIPRNET systems identified in Attachment B supporting services to include items such as the 3.4.1 PKI service examples listed below.

3.4.1.1 Provide DoD PKI Services including directory support, certificate validation, registration, interface to related Army systems, and required key management services as well as PKI solutions for e-mail, web applications, file transfer, and VPNs.

3.4.1.2 Provide PKI authentication for user devices (e.g. alternate Smart cards or tokens), and applications to discover and utilize global information services data and enable Command Access Card (CAC) Cryptographic Logon (CCL), (when applicable), for controlling logical access.

3.4.1.3 Responsible for requesting, receiving, and installation of system PKI certificates. Administer registration of all Army-owned PKI protected devices. Maintain accountability and currency of system PKI certificates and provide technical support (includes management of OCSP).

3.4.1.4 (Optional) Contractor shall perform above baseline non-personal Information Technology (IT) automation and technical support services for Organizations supported by the RNEC. Current requirement detailed within Attachment D, this requirement may decrease or increase which will require a contract modification. The above baseline support is in addition to and outside the normal core requirement outlined in Attachment B.

3.4.2 703.3 (OPTIONAL) RISK MANAGEMENT FRAMEWORK (RMF): The Contractor shall support the RMF process IAW DODI 8500.01 and 8510.01 which manages the lifecycle cybersecurity risk to DoD Information Technology in support of reimbursable mission funded systems. Contractor current requirement detailed within Attachement D, this requirement may decrease or increase, which will require a contract modification.

3.4.3 703.6 DEFENSIVE CYBERSPACE OPERATIONS (DCS): The Contractor shall maintain the baseline and above baseline SIPRNET, NIPRNET, and JWICS systems identified in Attachment A, B and D (when applicable) supporting services to include items such as the 3.4.3 network protection, network security monitoring, and network security sustainment, service examples listed below.

3.4.3.1 Plan, implement, operate and maintain a Defense In Depth for the ICAN and/or enclaves within the ICAN IAW all DoD published regulations and policies. Provide input to Army network enterprise security initiatives.

Redstone ITS PWS Page 13 of 44

3.4.3.2 Report IAVM compliance IAW applicable vulnerability management process. Provide details on information systems that may be compromised.

3.4.3.3 Report event and time-based incidents IAW all DoD published regulations and policies. Report unauthorized disclosure of classified information incident and remediation IAW all DoD published regulations and policies. Provide details on information systems that may be compromised.

3.4.3.4 Maintain firewall configurations and rule sets.

3.4.3.5 Analyze information systems logs for security anomalies and unauthorized activities. Provide technical support and assessment of Computer Network Defense (CND) operations.

3.4.3.6 Report and respond to unauthorized disclosure of classified information incidents IAW all DoD published regulations and policies.

3.4.3.7 Support and provide input of RMF Control assessments and test results (as required) for ongoing and recurring initiatives regarding assessment / re-assessment and authorization of Central Region NECs NIPRNET, SIPRNET, and JWICS networks to include support to areas such as: cybersecurity control statuses, risk assessments (RA), Plan of Action & Milestones (POA&M) forecasted, planned, or achieved; contribute to the remediation of unscheduled or on-demand scan compliance reports, narrative business process & procedures (BBP), Tactics, Techniques and Procedures (TTPs), and standard operating procedures (SOP) in regards to their specific duties performed within the NEC.

3.4.4 CONFIGURATION MANAGEMENT (CM): The Contractor shall provide the Government with (CM functional support for standardized planning, design, implementation, installation, Operations and Maintenance (O&M), and documentation of configuration hardware and software baselines, network diagrams, and physical elevation diagrams.

4.0 ADMINISTRATIVE REQUIREMENTS:

4.1 PHASE-IN / PHASE OUT

Phase-In. The Contractor shall conduct phase-in procedures beginning 30 calendar days before the performance date specified in this contract unless otherwise noted. The Contractor shall note all discrepancies and problems and submit them in writing to the COR for resolution. In no instance will the incoming Contractor be held liable for any discrepancy and problem noted. It is the sole responsibility of the outgoing Contractor to rectify the noted discrepancies or problems.

Phase-Out. At least thirty days before contract completion, the COR will notify the incumbent contractor of all outstanding requirements which shall be completed before contract completion. Any requirements that are not completed before the period of performance ends may be deducted from final payments in accordance with the Inspection of Services clause. The Contractor shall be required to provide transitional coordination and familiarization for a new contractor or Government employees during the phase-out period, prior to the performance period end of this contract. The Contractor shall turn over all current records/databases maintained for Government property. In the event a follow-on contract is awarded to other than the incumbent Contractor, the incumbent shall cooperate to the extent required to permit an orderly changeover to the successor contractor.

4.2 PLACE OF WORK AND HOURS OF OPERATION: The Contractor's place of duty shall be in a Government provided office environment located on Redstone Arsenal and local government provided off-post site, unless in a short-term TDY status. ACCESS TO CLASSIFIED INFORMATION IS LIMITED TO

GOVERNMENT WORK LOCATIONS. NO CLASSIFIED INFORMATION SHALL BE DISCUSSED,

PROCESSED, OR STORED IN THE CONTRACTOR’S FACILITY. Only Unclassified information is authorized at contractor location. Normal operating hours for this requirement are from 0600 to 1700 hours (6:00 am – 5:00 pm), Monday through Friday. These hours are provided to assist the Contractor in determining work scheduling, however, the hours may vary depending on individual customer’s needs. Flex-time and/or Alternate Work Schedules (AWS) may be employed so long as the mission requirements are not negatively impacted. Individual

Redstone ITS PWS Page 14 of 44 employees shall not exceed 80 hours during a standard two week pay period. The Contractor shall ensure appropriate coverage from 0600 to 1700.

Overtime: The COR must authorize and the KO must approve any overtime support or deviation from the standard schedule in advance. Contract performance is generally performed during normal duty hours, however, periodic requirements including emergencies, supporting deployments, and seasonal requirements may require work be accomplished at times other than normal duty hours. In some instances, on-call support may be required. When authorized by the COR, overtime worked in conjunction with normal duty hours shall be paid in ½ hour increments.

If contractor personnel are called in, a minimum of 2 hours of overtime shall be paid. Thereafter, overtime shall be paid in ½ hour increments. After normal duty hours the Site Manager or designated representative shall be available to respond to the requirements of the PWS within two hours of notification via phone call or email.

4.3 WORK ENVIRONMENT: Computer support services involve everyday risks and discomforts normally associated with this type of support. The work areas are climate controlled and adequately lighted.

4.4 RESPONSE TIME(s): The Contractor shall respond to urgent actions within U.S. Army Cyber Command (ARCYBER), Regional Cyber Center (RCC) and AITP Service List resolution timeframes. The Contractor shall be required to demonstrate compliance with performance objectives established for (1) Systems Response Time to Service Interruptions and (2) System Availability to Users/Customers. Government does not represent or guarantee that these metrics will meet the needs of reimbursable mission partners SLAs. The following urgent priority levels are established.

Priority 1 – Entire system down with no connectivity, Very Important People (VIPs) (such as the Commanding General), entire group or floor of users without connectivity, entire groups or buildings with no access to applications usually affecting more than 250 people. During normal duty hours is ¼ hour, and outside normal duty hours is 1 hour response time.

Priority 2 – No connectivity or access to the network or a server for populations between 50 and 200 people.

During normal duty hours is 1 hour, and outside normal duty hours is 2 hours response time.

4.5 WORK REQUESTS: The Contractor shall utilize the automated work order system of record provided by the Government to track work requests and ensure the systems are updated on a daily basis. The Contractor shall include data showing the number of work requests processed in the Workload Analysis Report (WAR) provided monthly to the COR.

4.6 WORK STOPPAGE: The KO may require the Contractor to cease operations associated with the performance of this task order for reasons of safety violations. The Contractor shall correct any safety violations caused by Contractor personnel. The KO may also require the Contractor to cease services of reimbursable support in cases where funds are not appropriately remitted to NETCOM within the prescribed period by the supported organization.

4.7 FUTURE REQUIREMENTS: It is anticipated that during the life of this task order new emerging technology could be added to the network. The Government may identify future requirements resulting from items such as population fluctuations of assigned organizations and personnel to Redstone Arsenal, changes to tenant customer missions, higher level mandated mission and network changes, emerging technology added to the network, regional convergence of services. These additions may require additional Contractor support in the following functional categories: Software / Application Development and Commercial Solutions for Classified (CSfC) services. Any changes will be negotiated by the KO and modified into the contract.

4.8 EMERGENCY OPERATIONS: The Contractor shall comply with the COOP and the Disaster Recovery Plan for all areas supported during routine operations and emergencies.

4.9 INCLEMENT WEATHER OPERATIONS: Inclement Weather Policy. Inclement weather shall mean the existence of abnormal climatic conditions such as hail, snow, high wind, severe dust storm, extreme temperatures or any combination thereof, by virtue of which it is either not reasonable or safe for contract personnel exposed thereto to continue working.

Redstone ITS PWS Page 15 of 44

1. The Government, or designated representative, when requested by the COR, shall confer with the Installation Operation Center (IOC) within a reasonable period of time, which should not exceed thirty minutes for the purpose of determining whether or not conditions are inclement. Weather shall not be regarded as inclement unless it is agreed upon at such conference. If the Government or designated representative refuses to confer within such reasonable period, contractor personnel shall be entitled to cease work.

2. If the employee's job is in one of the vital services or if the employee's agency especially needs the employee during bad weather conditions, the employee may be designated as key/mission essential and asked to stay on the job or report to work while fellow workers are excused. The employee will be informed if he or she is designated as key/mission. The designation of 'emergency/key essential' is not grievable by the employees so designated.

4.10 TRAINING: The Contractor shall ensure Contractor personnel possess and maintain technical proficiency for the operation and maintenance (O&M) of the systems and equipment listed in Attachments A and B. The Government will not provide or fund training to obtain certification for existing or new Contractor employees. If during the term of this task order, the Government installs new equipment that requires training to meet the certification requirements of this task order, the Government will provide one-time training for those employees currently working on site. If an employee who has received Government-provided training as described above should vacate his/her position for any reason, the Contractor shall provide certified personnel to complete the requirements of this task order at no additional cost to the Government. The Contractor shall be responsible for full performance of services at no additional cost to the Government during any absence of its employees while they attend training.

4.11 TRAVEL: The Contractor shall provide support at CONUS locations. The support outside Redstone Arsenal, AL, area will be designated as off-post site short-term TDY.. The Contractor shall ensure all Contractor employees comply with all guidance, instructions, and general orders applicable to U.S. Armed Forces and DoD civilians and issued by the Theater Commander or his/her representative. This shall include any and all guidance and instructions issued based on the need to ensure mission accomplishment, force protection, and safety. The Government will reimburse the Contractor, in accordance with FAR part 31.205-46, for all approved travel incurred during the performance of this task order. The COR will approve all travel requirements before travel begins.

All costs associated with local travel, i.e. travel within 50 miles of the place of work described in section 4.2 above, shall be borne by the Contractor and will not be reimbursed by the Government. This includes, but is not limited to, travel required for movement within the Redstone Arsenal area.

4.12 SECURITY: The Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret,” and requires Contractors to comply with the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M) and any revisions to DoD 5220.22-M.

4.12.1 This requirement will require access to classified and controlled or sensitive information and facilities.

Highest level security clearance requirement for this work effort is TOP SECRET. Upon performance start date, all Contractor personnel performing tasks in support of this task order shall have the required security clearance and shall maintain the required security clearance over the life of the task order, in accordance with DD Form 254, Contract Security Classification Specification. Contractor personnel shall comply with all applicable security and safety regulations, guidance, and procedures, including local, referenced in this PWS and in effect at the work sites.

All Contractor personnel shall be U.S. citizens. New or replacement personnel who require a security clearance to perform under this task order shall have the required security clearance at work performance start date. Contractor personnel may require access to SIPRNET or other classified systems in support of this work effort. Access to SIPRNET or other classified systems shall only be at specified Government work locations.

4.12.2 Investigations. Contractor personnel who require access to classified systems or information, or to work areas where classified information is processed or visible, will require an appropriate security investigation with a favorable fitness determination for the level of classified information they require access to. If Contractor personnel who require access to TOP SECRET do not have a favorable T5 or T5-Reinvestigation (T5R) on record, the Contractor shall contact the supporting Government Security Office/G2/S2 for submission of the T5 investigation

Redstone ITS PWS Page 16 of 44

(SF 86). The Contractor shall provide the contract/task order number as authority to request the investigation.

Contractor interim privileged level access to Army systems prior to completion and favorable adjudication of the required investigation will be in accordance with current Army and DoD policy.

4.12.3 Funtional Categories. Security clearance requirements, personnel security, and Information Assurance…