PWS V3_Jira Enterprise (8.7.26).pdf

AUG 22

Performance Work Statement (Includes associated Performance Requirements Summary (PRS)

PERFORMANCE WORK STATEMENT (PWS)

DeCA Enterprise Atlassian Software and Professional Services

Part 1

General Information

1. General: This is a non-personal service(s) contract under which the personnel rendering the service(s) are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the Government and its employees.

1.1 Description of Services/Introduction: This is a non-personal service(s) contract to provide Atlassian software subscriptions, role-based training, and expert technical advisory services. Under this contract, there is a clear division of responsibilities between Atlassian (the platform host) and the Contractor (the 3rd party vendor providing professional services).

1.1.1 Atlassian (Software-as-a-Service Provider): Atlassian is responsible for hosting, securing, maintaining, and updating the underlying Atlassian Government Cloud environments (FedRAMP Moderate). Atlassian is the supplier of the standard software subscriptions and platform-level support (Tier 3 infrastructure and core software defect resolution).

1.1.2 The Contractor: The Contractor is responsible for the performance requirements within this PWS, to include procuring and managing the subscriptions on behalf of DeCA, and providing all training and technical advisory services. The Contractor provides key personnel—specifically the Project Manager and a Senior Atlassian System Administrator—to support DeCA’s use of the Atlassian applications within the hosted environment.

1.2 Background: The Defense Commissary Agency (DeCA) is executing a strategic IT modernization effort to consolidate multiple business units onto a single, commercially supported enterprise platform for work management, service management, and project portfolio management. This action is necessary to replace aging legacy systems, eliminate data silos, and improve operational efficiency across the agency. This contract will serve as the single, enterprise-wide vehicle for procuring all Atlassian software licenses and the professional services required to onboard multiple DeCA organizations. While DeCA previously held a limited Atlassian contract for a single engineering unit (W58P05-25-P-0011, expiring 25 September 2026), this new contract will serve as the overarching enterprise-wide vehicle for procuring all Atlassian software licenses and professional services required to onboard the PMO, ARTS, and HR organizations.

1.3 Scope: The Contractor shall provide all personnel, software, materials, supervision, and other items necessary to perform the services as described in this PWS, except for those items specified in Part 3.

The scope of this contract is divided into two primary service categories:

1. Software Subscriptions (Hosted by Atlassian): The procurement and annual renewal of all required Atlassian software licenses for the designated DeCA enterprise organizations: Advanced Retail Technology Suite (ARTS), Human Resources (HR), and the Program Management Office (PMO) (specifically encompassing the Program Management, IT Product Support, and Systems Test & Evaluation teams) for the life of the contract. These subscriptions are hosted directly by Atlassian in the Atlassian Government Cloud (FedRAMP Moderate). The Contractor acts as the authorized reseller to provision and maintain these subscriptions, while Atlassian provides backend hosting, service availability, and core software maintenance.

2. Professional Services (Executed by Contractor Personnel): This category includes two distinct types of support:

• Base Year Training and Advisory Support: The contractor shall provide role-based training and expert technical advisory services to assist Government administrators in onboarding the new user groups (PMO, ARTS, and HR).

• Ongoing Sustainment Support (All Years): The contractor shall provide an optional, flexible Level of Effort (LOE) for ongoing over-the-shoulder technical advisory support, minor configuration guidance, and refresher training for all user groups.The Contractor shall perform all tasks to the standards and acceptable quality levels identified in this PWS.

1.4 Objectives: The primary objectives of this contract are to:

• Procure and maintain the required Atlassian software licenses (Jira Software, Confluence) for DeCA organizations.

• Deliver comprehensive, role-based user training to ensure successful adoption.

• Provide expert technical advisory support to assist Government personnel in configuring the platform and managing workflows.

• Provide a flexible mechanism for ongoing technical support and refresher training throughout the life of the contract.

1.5 General Information:

1.5.1 Quality Control Plan (QCP):

This acquisition is for commercial products and services and will be conducted in accordance with FAR Part 12. Therefore, as specified in FAR 12.208, the Government will rely on the contractor's existing quality assurance system. The contractor is responsible for delivering services that meet the performance standards defined in this PWS.

The Contractor shall provide a copy of their corporate Quality Control Plan (QCP) to the Contracting Officer’s Representative (COR) within ten (10) days after contract award {A001}.

This plan should describe the contractor’s internal processes for ensuring that all services and deliverables comply with the requirements of the contract.

1.5.1.1 RESERVED

1.5.1.2 RESERVED

1.5.2 Quality Assurance: The Government will evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the acceptable quality levels (performance thresholds).

1.5.3 Recognized Holidays: The following provides information on recognized holidays for the purpose of the PWS. If submittal of any documentation (e.g. deliverables, submittals, etc.)

deadlines fall on a holiday, the closest work day prior to the holiday will apply as the deadline for submittal.

1.5.3.1 U.S. Holidays: Work shall not be performed on U.S. federally recognized holidays occurring during the normal workweek unless otherwise directed by the Contracting Officer.

When a U.S. holiday occurs on a Saturday or a Sunday, the holiday is observed on the preceding Friday or following Monday, respectively.

New Year’s Day January 1st M. L. King Memorial Day 3rd Monday in Jan Presidents Day 3rd Monday in February Memorial Day last Monday in May Juneteenth June 19th Independence Day July 4th Labor Day 1st Monday in September Columbus Day 2nd Monday in October Veteran’s Day November 11th Thanksgiving Day 4th Thursday in November Christmas Day December 25th

1.5.3.2 Host Nation Holidays: RESERVED

1.5.4 Operating Hours: The Government facility office hours, facility operating hours, and the Contractor support hour requirements often coincide, however, they may differ. Please refer to the following.

1.5.4.1 Government Facility Office Hours: The Government's core business hours for communication and collaboration are 0800 to 1700 Eastern Time, Monday through Friday, except U.S. Holidays identified in paragraph 1.5.3.1 or when Government personnel are unavailable due to administrative closings.

1.5.4.2 Government Facility Operating Hours: As this contract will be performed primarily at the contractor's facilities, Government facility operating hours are not applicable for the remote portion of the work. For any required on-site performance at Fort Lee, VA, access will be coordinated in advance with the COR and will generally occur during the Government's core business hours.

1.5.4.3 Contractor Support Hours: The Contractor shall have its key personnel available for communication and collaboration with Government personnel during the core business hours of 0800 to 1700 Eastern Time, Monday through Friday, excluding U.S. Holidays. The Contractor is responsible for managing its own work schedule to meet the performance requirements of this PWS. As this is a Firm Fixed Price contract, the Government will not be responsible for contractor downtime resulting from the unavailability of Government personnel or systems.

1.5.4.3.1 Program Management Plan (PMP): The Contractor shall prepare and maintain a comprehensive Project Management Plan (PMP) that details the approach, schedule, and resources to be used in the performance of this contract. This PMP shall serve as the authoritative document for managing the project schedule, deliverables, and communication.

The Contractor’s proposed PMP shall be submitted to the Contracting Officer via the COR for review and acceptance within ten (10) days after contract award {A002}. The Government will review and provide comments to the Contractor within ten (10) days of receipt. The Contractor shall then have five (5) days to incorporate comments and submit a final, baseline PMP.

The PMP shall be treated as a living document and updated as necessary throughout the period of performance. Significant changes to the schedule or approach must be submitted to the COR for review and acceptance prior to implementation. At a minimum, the PMP shall include:

• A detailed project schedule with major tasks, milestones, and dependencies for the Base Year.

• A list of key personnel and their assigned roles and responsibilities.

• A Communication Plan outlining the frequency and format of meetings and reports.

• A Risk Management Plan identifying potential project risks and proposed mitigation strategies.

1.5.5 Training Holidays: RESERVED

1.5.6 Place of Performance: The work to be performed under this contract shall primarily be performed at the Contractor's own facilities.

On-site performance will be required at Fort Lee, Virginia, for specific tasks such as requirements workshops and user training, as coordinated in advance and approved by the

COR.

1.6 Security Requirements: The work performed under this contract is UNCLASSIFIED.

1.6.1 Security Program: RESERVED.

1.6.2 Personnel Security Clearance Requirements: RESERVED.

1.6.3 Installation Access: Access to U.S. installations, buildings, and controlled areas is limited to personnel who meet security criteria. For any required on-site work, the Contractor shall comply with all local installation access control requirements (e.g., visitor passes). The Contractor is responsible for returning any issued installation passes upon contract completion.

1.6.3.1 Installation Pass Log: RESERVED.

1.6.3.2 Individual Termination or Expiration of Employment: The Contractor shall collect any installation access passes (e.g., visitor or base passes) from an employee on their last day of employment on this contract and shall return them to the issuing office within two (2) business days.

1.6.3.3 Contract Termination or Cancellation: Upon termination or cancellation of this contract, the Contractor shall collect all outstanding installation access passes and return them to the issuing office within two (2) business days.

1.6.3.4 Common Access Cards (CAC) and CAC Log: RESERVED

1.6.4 Background Checks: Contractor personnel performing on-site work under this contract are designated as holding ADP-II / Moderate Risk Public Trust positions for physical access purposes. The Government will sponsor contractor personnel for the required background investigations for physical base access. The Contractor shall not be granted logical access to the DeCA IT network or the Atlassian cloud tenant.

1.6.4.1 U.S. Citizen: All contractor personnel performing on-site services must be U.S.

Citizens. These personnel must undergo and be favorably adjudicated for, at a minimum, a Tier 2 background investigation prior to performing on-site duties.

1.6.4.2 Local Nationals and Third Country Nationals: RESERVED.

1.6.5 Physical Security: RESERVED.

1.6.6 Operations Security (OPSEC) Requirements: Contractor personnel shall adhere to all Government OPSEC policies. The Contractor shall brief all personnel on the iWATCH "See Something, Say Something" program.

1.6.7 Cybersecurity Requirements:

• (a) CMMC Level 1: The work under this contract involves the handling of Federal Contract Information (FCI). Therefore, the contractor must have completed and uploaded a valid CMMC Level 1 self-assessment and affirmation to the Supplier Performance Risk System (SPRS) at the time of contract award and must maintain this certification for the life of the contract.

1.7 Key Control: RESERVED.

1.8 Post Award Conference/Periodic Progress Meetings: The Contractor shall attend any post award conference convened by the contracting activity or contract administration office in accordance with FAR Subpart 42.5. The Contracting Officer, COR, and other Government personnel, as appropriate, will meet periodically with the Contractor to review performance. At these meetings, the Government will apprise the Contractor of its view of the Contractor's performance, and the Contractor shall apprise the Government of any problems being experienced. These meetings shall be at no additional cost to the Government.

1.8.1 Project Status and Communication:

(a) Recurring Meetings: The Contractor shall lead and participate in recurring project status meetings with the COR and Government stakeholders.

• During the Base Year, these meetings shall be held weekly to review progress against the project schedule, discuss risks, and resolve issues.

• During the Option Years, the frequency of these meetings may be reduced to bi-weekly or monthly, as determined by the COR.

(b) Issue and Risk Reporting: The Contractor shall immediately inform the COR of any problems, risks, or potential issues that may negatively impact contract performance, cost, or schedule. Verbal notification must be made within one (1) business day of identification. This verbal report shall be followed up with a detailed discussion and written summary during the next scheduled weekly project status meeting.

(c) Monthly Progress Report: The Contractor shall prepare and deliver a comprehensive Monthly Progress Report {A005}. This report shall be delivered by the 5th business day of each month. At a minimum, the report must include:

• A summary of all activities performed in the previous month.

• The current status of all project schedule milestones and deliverables.

• A detailed summary of any new or ongoing risks, issues, and proposed mitigation steps.

• A summary of funds expended.

The Contractor's Project Manager or their designated alternate shall attend all scheduled meetings. Meetings will be conducted virtually unless otherwise specified by the COR.

1.9 Contracting Officer’s Representative (COR): Refer to Part 2 of this PWS for the definition of a COR. As determined by the Contracting Officer, a COR will be appointed and identified by letter of designation, a copy of which will be provided to the Contractor by the Contracting Officer. The designation letter states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates, or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is not authorized to obligate the Government. If the work is not written in the contract, the COR is not authorized to request new work. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract, perform inspections necessary in connection with contract performance, maintain written and oral communications with the Contractor concerning technical aspects of the contract, issue written interpretations of technical requirements, including Government drawings, designs, specifications, monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies, coordinate availability of Government property, and coordinate site entry of Contractor personnel.

1.10 Key Personnel: The following personnel are considered key personnel by the Government: Project Manager and Lead Technical Architect. The contractor is prohibited from removing or replacing key personnel without the prior written consent of the Contracting Officer.

The Contractor shall provide a Project Manager who shall be the primary point of contact and be responsible for the overall performance of the work. The names and Curricula Vitae (CVs) for the proposed Project Manager and the Senior Atlassian System Administrator shall be submitted with the contractor's proposal for evaluation.

The Project Manager or a designated alternate shall be available during the core Government business hours defined in paragraph 1.5.4.1. Qualifications for all key personnel are listed below:

a. Project Manager: The proposed Project Manager shall have, at a minimum:

• Five (5) years of experience managing the enterprise-level IT service management or project management platforms for U.S. Federal Government clients.

• A current Project Management Professional (PMP) certification or equivalent (e.g., Agile Certified Practitioner (ACP)).

• Demonstrated experience managing projects of similar size and complexity (i.e., multi-year, multi-million dollar IT implementations).

b. Senior Atlassian System Administrator: The proposed Senior Atlassian System Administrator shall have, at a minimum:

• Seven (7) years of hands-on experience as a system administrator on the Atlassian suite (Jira Software and Confluence).

• Demonstrated experience performing complex data migrations into the Jira platform from legacy systems.

• A current Atlassian Certified Master or multiple Atlassian Certified Expert level certifications. This is a mandatory requirement.

1.11 Identification of Contractor Employees: All Contractor personnel attending meetings, answering Government telephones, and working in other situations where their Contractor status is not obvious to third parties must identify themselves, to include proper marking of signature blocks in correspondence, to avoid creating an impression in the minds of members of the public that they are Government officials. The Contractor shall ensure that all documents or reports, produced by Contractors are suitably marked as Contractor products or that Contractor participation is appropriately disclosed.

1.12.1 RESERVED.

1.12.2 Contractor Identification Badges: When performing work on-site at a Government facility, Contractor personnel shall be clearly identifiable as contractors. Their Government-issued Common Access Card (CAC), if issued, shall serve as their primary identification.

Additionally, the Contractor shall ensure all personnel display a company-provided identification badge clearly showing the employee’s name and company affiliation. All badges shall be worn visibly while on Government property. The Contractor shall ensure proper accountability for all company-provided badges.

1.13 Contractor Travel: The Contractor shall be required to travel to perform on-site requirements workshops and role-based user training. The primary anticipated travel location is Fort Lee, Virginia. It is estimated that two (2) separate one-week trips for up to two (2) contractor personnel will be required during the Base Year.

All travel must be approved in writing by the COR at least ten (10) business days in advance of the planned travel date. The Contractor will be reimbursed for actual travel costs in accordance with the substantive provisions of the Federal Travel Regulation (FTR) and FAR 31.205-46. The Government will not pay any profit or fee on travel costs.

1.14 Other Direct Costs (ODCs): RESERVED.

1.15 Data Rights: The Government shall have unlimited rights to all data, documentation, and materials first produced or delivered in the performance of this contract. This includes, but is not limited to, all system configuration documentation, training materials, reports, and migrated Government data.

For the Commercial-Off-the-Shelf (COTS) Atlassian software itself, the Government receives the customary license rights provided by the manufacturer under their standard commercial license agreement. The Government does not own the source code of the COTS software.

The Contractor shall not use, release, or disclose any Government data or deliverables created under this contract for any purpose outside of contract performance without the prior written permission of the Contracting Officer.

1.16 Non-Disclosure Requirements: Performance under this contract may expose Contractor personnel to Government Controlled Unclassified Information (CUI), hosted on Government IT systems. The Contractor and all Contractor personnel shall not divulge, release, or disclose any data or information developed or obtained during the performance of this PWS, except to authorized Government personnel or upon the written approval of the Contracting Officer. The Contractor shall comply with all requirements for the safeguarding of CUI as specified in DFARS Clause 252.204-7012. All documentation containing individual names or other Personally Identifiable Information (PII) shall be controlled and protected in accordance with the Privacy Act of 1974.

1.17 Protection of Government and Contract Information: The Contractor shall not use the DeCA name, logos, or any information obtained during the performance of this contract for any public-facing advertising, marketing, or promotional purposes, including on its company website or social media, without the prior written approval of the Contracting Officer.

1.18 Non-Disclosure Statements: All contractor personnel performing work under this contract shall sign a Non-Disclosure Agreement provided by the Government. The Contractor shall provide these signed NDAs to the COR no later than ten (10) business days after contract award, and prior to any individual being granted access to Government systems or data {A003}.

1.19 Organizational Conflict of Interest (OCI): Contractor and subcontractor personnel performing work under this contract may receive or have access to proprietary or source-selection sensitive information. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI as defined in FAR Subpart 9.5. If an OCI is identified, the Contractor shall promptly submit a mitigation plan to the Contracting Officer for approval. The Government may affect other remedies as it deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.20 Phase Out Period: The Contractor shall support a phase-out period during the final sixty (60) days of the contract's period of performance to ensure a smooth transition of responsibilities {A007}.

1.21 Safety: The Contractor shall perform all work in a safe manner and shall comply with all applicable federal, state, and local safety regulations. While on Government property, the Contractor shall adhere to all local installation safety and emergency procedures.

1.21.1 RESERVED.

1.21.1.1 RESERVED.

1.21.1.2 RESERVED.

1.21.1.3 RESERVED.

1.22 Environmental Compliance: RESERVED

1.22.1 Environmental Compliance Plan and Program: RESERVED

1.23 Required Training: The Contractor is responsible for ensuring all employees, including subcontractor employees, performing on this contract complete and maintain all mandatory Government-directed training. Verification of training completion for all required courses shall be provided to the COR upon request.

In the event contractor personnel are unable to access the online training portals due to technical issues, the Contractor shall immediately notify the COR. The COR will then coordinate with the appropriate Government office to provide an alternate means of completing the training requirement.

1.23.1 Anti-Terrorism (AT) Level I Training: All contractor personnel requiring physical access to Government facilities shall complete AT Level I training within thirty (30) days of contract start and annually thereafter, if applicable. The training is available at https://jkodirect.jten.mil {A008}.

1.23.2 OPSEC Training: All contractor personnel requiring physical access to Government facilities shall complete Level I OPSEC training within thirty (30) days of contract start and annually thereafter. The training is available at http://www.cdse.edu/catalog/elearning/GS130.html {A008}.

1.23.3 iWATCH Training: All contractor personnel requiring physical access to Government facilities shall be briefed on the iWATCH "See Something, Say Something" program. The briefing shall be completed within thirty (30) days of contract start. Training materials are available on Army OneSource {A009}.

1.23.4 Information Assurance (IA) Training: RESERVED

1.23.4.1 RESERVED.

1.23.4.2 RESERVED.

1.23.4.3 RESERVED.

1.23.5 Personally Identifiable Information (PII): All contractor personnel shall complete training on "Identifying and Safeguarding Personally Identifiable Information" within thirty (30) days of contract start and annually thereafter. The training is available at:

https://securitytraining.dcsa.mil/ {A008}.

1.24 RESERVED.

1.24.1 RESERVED

1.24.2 RESERVED.

1.24.3 RESERVED.

1.25 Notice to Proceed: RESERVED.

1.26 Electromagnetic Compatibility Directive: RESERVED.

1.27 Government Property and Services: Refer to Part 3, Section 3.4 of this PWS for Government-Furnished Equipment (GFE) provided for this contract.

1.28 Conventional Forces Europe (CFE) Treaty Verification Inspection: RESERVED.

PART 2

DEFINITIONS & ACRONYMS

2. Definitions and Acronyms

2.1 Definitions: Although not inclusive of every term used within this PWS, the following provides a list of definitions used throughout this PWS and commonly used in the acquisition field.

Commercial-Off-the-Shelf (COTS) – A product or service that is sold, leased, or licensed to the general public, offered by a vendor trying to profit from it.

Contracting Officer – means a person with the authority to enter into, administer, and/or terminate contracts and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

Contracting Officer's Representative (COR) – As defined in DFARS 202.101, means an individual designated and authorized in writing by the Contracting Officer to perform specific technical or administrative functions. DoD Instruction (DoDI) 5000.72, Part II Definitions states the following when defining a COR: “Defined in subpart 202.101 of Reference (f). Any individual delegated responsibilities pursuant to subpart 1.602-2 of Reference (e), regardless of local terminology, must be certified in accordance with this instruction. For example, local terminology can be COR, Contracting Officer’s technical representative, technical point of contact, technical representative, alternate COR, administrative COR, assistant COR, line item manager, task order manager, quality assurance personnel, quality assurance evaluator, or COR management.” In addition, Army Regulation 70-13, Chapter 2, paragraph 2-2g, states, in part, the following when providing other surveillance support personnel to assist the COR when needed, “…These other surveillance support personnel may serve as on-site representatives of the COR in performance of actual contract surveillance if they meet all COR requirements and have been appointed by the Contracting Officer as alternate CORs.”

Contractor – means a supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

Day – means, unless otherwise specified, a calendar day.

Defective Service – means a service output that does not meet the standard of performance associated with the PWS.

Deliverable – means anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

Government-furnished Property – As reflected in FAR 52.245-1, Government-furnished Property “means property in the possession of, or directly acquired by, the Government and subsequently furnished to the Contractor for performance of a contract. Government-furnished property includes, but is not limited to, spares and property furnished for repair, maintenance, overhaul, or modification. Government-furnished property also includes contractor-acquired property if the contractor-acquired property is a deliverable under a cost contract when accepted by the Government for continued use under the contract

Project Management Plan (PMP) – The formal, approved document used to guide both project execution and project control. It documents planning assumptions and decisions.

Government Property - means all property owned or leased by the Government.Government property includes both Government-furnishedand Contractor-acquired property. Government property includes material, equipment, special tooling, special test equipment, and real property. Government property does not include intellectual property and software.

Property Administrator - means an authorized representative of the Contracting Officer appointed in accordance with agency procedures, responsible for administering the contract requirements and obligations relating to Government property in the possession of a Contractor.

Physical Security – means that part of security concerned with physical measures designed to safeguard personnel; to prevent unauthorized access to equipment, installations, material, and documents; and to safeguard against espionage, sabotage, damage, and theft.

Quality Assurance – (or Government contract quality assurance) means the various functions, including, inspection, performed by the Government to determine whether a Contractor has fulfilled the contract obligations pertaining to quality and quantity.

Quality Assurance Surveillance Plan (QASP) – means the key Government-developed surveillance process document, and is applied to Performance-Based Service Contracting (PBSC). The QASP is used for managing Contractor performance assessment by ensuring that systematic quality assurance methods validate that Contractor quality control efforts are timely, effective, and are delivering the results specified in the contract or task order. The QASP directly corresponds to the performance objectives and standards (i.e., quality, quantity, timeliness) specified in the PWS. It provides specific details on how the Government will survey, observe, test, sample, evaluate, and document Contractor performance results to determine if the Contractor has met the required standards for each objective in the PWS. The QASP, with very few if any exceptions, is an internal to Government document.

Quality Control – means all necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

Statement – means the specific results-based activities required to satisfy HLOs. A statement contains a result, the context of the statement, and the required action(s). Statements focus on “what” is to be accomplished; however they are not prescriptive in describing “how” the outcome is to be achieved. Each HLO may have several statements to flesh out the areas necessary to meet the objective. Statements are similar to Level 3 in a Work Breakdown Structure.

Subcontractor – means one that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subcontractor.

Work Day - The number of hours per day the Contractor provides services in accordance with the contract.

Work Week - Monday through Friday, unless otherwise specified.

2.2 Acronyms: Although not inclusive of every term used within this PWS, or that may be included in an acquisition, the following provides a list of acronyms commonly used in the acquisition field.

AQL Acceptable Quality Level ARTS Advanced Retail Technology Suite CAC Common Access Card CMMC Cybersecurity Maturity Model Certification CONUS Continental United States COR Contracting Officer’s Representative COTS Commercial-Off-the-Shelf CUI Controlled Unclassified Information CV Curriculum Vitae DeCA Defense Commissary Agency DFARS Defense Federal Acquisition Regulation Supplement DoD Department of Defense FAR Federal Acquisition Regulation FFP Firm Fixed Price FTR Federal Travel Regulation GFP Government-Furnished Property IA Information Assurance IGE Independent Government Estimate IOC Initial Operational Capability IT Information Technology ITSM IT Service Management J&A Justification and Approval JSM Jira Service Management LOE Level of Effort MICS Management Information Control Systems MRR Market Research Report NDA Non-Disclosure Agreement OCI Organizational Conflict of Interest OKR Objectives and Key Results OPM Office of Personnel Management PII Personally Identifiable Information PM Program/Project Manager PMP Project Management Plan

PMO Program Management Office PoP Period of Performance PWS Performance Work Statement QASP Quality Assurance Surveillance Plan QCP Quality Control Plan RFQ Request for Quote SaaS Software-as-a-Service SMS Sustainment Management System SSO Single Sign-On STD Standard UAT User Acceptance Testing

PART 3

GOVERNMENT PROPERTY (GP) AND SERVICES

3. Government Property and Services

3.1 Services: The Government will provide timely access to DeCA Subject Matter Experts (SMEs) from all participating organizations for interviews, workshops, and requirements validation sessions as required for the contractor to perform their duties.

3.2 Facilities: For any required on-site performance, the Government will provide adequate workspace, such as a conference room equipped with a projector/screen, for the contractor personnel to conduct training.

3.3 Utilities: For any required on-site performance, the Government will provide access to all necessary utilities in the provided workspace, including electricity and internet connectivity.

3.4 Equipment: The Government will NOT provide Government-Furnished Equipment (GFE) laptops. The Contractor shall not be granted logical access to the DeCA network or administrative access to the DeCA Atlassian Cloud environment. All system configuration and live data migration will be performed exclusively by Government personnel..

3.5 RESERVED.

3.6 Materials: The Government will provide the contractor with access to high-level, unclassified GFI necessary for the contractor to develop training materials and provide relevant advisory support. This information may include sanitized, high-level summaries of business processes, non-sensitive workflow diagrams, and points of contact for relevant programs. The Government will NOT provide the contractor with access to detailed technical documentation, live production data, or system data schemas. All information provided to the contractor will be strictly limited to that which is necessary to perform their training and advisory role.

3.7 Training: The Government will provide access to all mandatory Government training as specified in paragraph 1.23.

3.8 Common Access Cards (CAC): RESERVED.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. Contractor Furnished Property and Services

4.1 General: The Contractor shall furnish all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items necessary to perform services as described in this PWS, except for those items specified as Government furnished in Part 3.

4.2 RESERVED.

4.3 Materials: The Contractor shall provide all necessary office supplies, materials, and automated data processing equipment (ADPE) required to perform the services outlined in this PWS from their own facilities.

4.4 RESERVED.

4.5 Background Checks: The Contractor is responsible for ensuring its proposed personnel meet the background check and suitability requirements specified in paragraph 1.6.4. The Contractor shall cooperate fully and ensure their personnel complete all necessary paperwork in a timely manner to facilitate the Government-sponsored investigation process.

PART 5

SPECIFIC TASKS

5.1 Basic Services: The Contractor shall provide all necessary software subscriptions, technical advisory services, training, and project management required to support the designated DeCA organizations. The Contractor shall perform all tasks to the standards defined herein.

• Contractor Operational Boundaries: The Contractor is responsible for providing expert guidance to support the Government’s configuration and administrative management of the Atlassian application layers (e.g., project setup, permission schemes, custom fields, workflows, dashboards, and integrations).

• Atlassian Operational Boundaries: The underlying cloud infrastructure, physical security, database servers, network availability, and core software uptime remain the sole responsibility of Atlassian as the host of the Atlassian Government Cloud. The Contractor shall serve as the the primary technical liason to coordinate with Atlassian support for any host-level or platform-level service issues.

The Contractor shall perform all tasks to the standards defined herein.

5.2 Tasks:

5.2.1 High Level Objective 1: Software Provisioning and Management

5.2.1.1 Task: The Contractor shall procure, provision, and manage the specific types and quantities of Atlassian Premium software subscriptions for the designated DeCA organizations as detailed in the table below. All licenses shall be provisioned in the Atlassian Government Cloud (FedRAMP Moderate) environment. The Contractor shall provision these licenses as a co-terminated renewal to the existing DeCA Atlassian Government Cloud instance to ensure the preservation of all existing data and configurations for the PMO and ARTS teams.

DeCA Organization Jira Software (Premium)

Confluence (Premium)

Program Management Office (PMO)* 140 140 Advanced Retail Technology Suite (ARTS) 300 300 Human Resources 60 60 Total 500 500

*Note The PMO license allocation of 140 users is shared across three distinct operational teams: Program Management, IT Product Support, and Systems Test & Evaluation.

(a) STD: All required licenses, as specified in the table above, shall be provisioned and made accessible to authorized DeCA administrative personnel no later than September 26, 2026.

AQL: 100% Compliant. No deviation permitted.

5.2.1.2 Task: The Contractor shall successfully renew all software subscriptions for each subsequent option year with no lapse in service.

(a) STD: All required licenses, as specified in the table above, shall be provisioned and made accessible to authorized DeCA administrative personnel no later than the day after the end of the prior license year.

AQL: 100% Compliant. No lapse in service permitted.

5.2.2 High Level Objective 2: Project Management

5.2.2.1 Task: The Contractor shall manage the performance of this contract in accordance with the Government-approved Project Management Plan (PMP).

(a) STD: The Contractor shall lead weekly project status meetings during the Base Year training and advisory phase.

AQL: No more than one unexcused missed meeting per quarter.

5.2.3 High Level Objective 3: Base Year Technical Support

5.2.3.1 Task: The Contractor shall provide dedicated, expert technical advisory support to assist Government administrators in designing workflows, configuring the platform, and planning data migration strategies for the PMO, HR, and ARTS teams.

(a) STD: The Contractor shall provide up to a maximum defined Level of Effort (LOE) of advisory hours during the Base Year, responding to Government inquiries and providing over-the-shoulder guidance via virtual meetings.

AQL: Initial response shall be provided within two (2) business days, 95% of the time.

5.2.3.2 Task: The Contractor shall deliver comprehensive, role-based user training and interactive workshops for all user groups to ensure the Government has the knowledge and capability required to begin operational use of the tools. At a minimum, the training and workshop execution shall include:

5.2.3.2.1 Delivery of training materials, user guides, and supporting documentation {A006}.

5.2.3.2.2 Advisory support to guide the Government in verifying that required user accounts, roles, permissions, and access have been properly established prior to the workshops.

5.2.3.2.3 Demonstration of Jira capabilities, including issue creation, assignment, workflow management, tracking, dashboards, and reporting.

5.2.3.2.4 Demonstration of Confluence capabilities, including page creation, documentation management, collaboration features, and knowledge repository functions.

5.2.3.2.5 Demonstration and advisory validation of Jira and Confluence integration capabilities.

5.2.3.2.6 Completion of hands-on exercises to confirm users can perform required operational tasks.

5.2.3.2.7 Submission of a Training Completion Record, including attendance, completion status, and any identified follow-up training requirements {A010}.

(a) STD: All training materials shall be delivered for Government review at least 15 days prior to the first scheduled training session.

AQL: No more than one late delivery.

(b) STD: All initial user training sessions shall be completed within the first 120 days of the contract. Government review and acceptance of the Training Completion Record shall serve as verification that the training requirement has been met.

AQL: 100% Compliant.

5.2.4 High Level Objective 4: Optional Sustainment Support (This task shall only be performed when the Government exercises the optional CLIN for a block of support hours.)

5.2.4.1 Task: The Contractor shall provide a flexible Level of Effort (LOE) for ongoing technical support, available as a separately priced, optional CLIN in the Base Year and all Option Years.

This support is available for use by any of the DeCA teams for tasks such as:

• Advising on minor configuration enhancements and workflow adjustments.

• Providing refresher training for new or existing users.

(a) STD: When an optional task is assigned by the COR, the Contractor shall provide an initial response acknowledging the request and assigning a technical expert.

AQL: Initial response shall be provided within two (2) business days, 95% of the time.

5.3 Service Contract Reporting

5.3.1 System for Award Management (SAM) Service Contract Report (SCR): In accordance with FAR Subpart 4.17, the Contractor shall be required to report all contractor labor hours required for the performance of services provided under this contract. The Contractor shall complete all required reporting via the System for Award Management (SAM) at www.sam.gov by the required deadline of October 31st for the preceding Government Fiscal Year and provide confirmation of SCR submission to the COR {A004}.

STD: All information provided by the Contractor shall be accurate, complete, and not exceed suspense dates noted in corresponding paragraph above.

AQL: 100% Compliant

PART 6

APPLICABLE PUBLICATIONS

6. Applicable Publications (Current Editions): The following publications, manuals, regulations, etc. are mentioned in this PWS and are listed below.

6.1 Federal Acquisition Regulation (FAR) References:

FAR 31.205-46 - Travel Costs FAR Part 42.5 - Postaward Conferences FAR 52.204-21- Basic Safeguarding of Covered Contractor Information Systems

6.2 Defense Federal Acquisition Regulation Supplement (DFARS) References:

RESERVED

6.3 Other Government Regulations and Directives:

36 CFR Part 1194 - Section 508 of the Rehabilitation Act Federal Travel Regulation (FTR) Privacy Act of 1974, Public Law 93-579 DoD Instruction 8500.01 - Cybersecurity (or current equivalent)

6.4 Training Links:

AT Level I Training: https://jkodirect.jten.mil OPSEC Level I Training: http://www.cdse.edu/catalog/elearning/GS130.html

PART 7

ATTACHMENT AND TECHNICAL EXHIBIT LISTING

7. Attachment and Technical Exhibit List

7.1 Technical Exhibit A – Performance Requirements Summary:

7.2 Technical Exhibit B – Deliverables Schedule

TECHNICAL EXHIBIT A

Performance Requirements Summary (PRS)

PERFORMANCE

OBJECTIVE STANDARD

PERFORMANCE

THRESHOLD

ACCEPTABLE

QUALITY LEVELS

(AQLs)

METHOD OF

SURVEILLANCE

PRS#1 - Initial Software Provisioning (PWS para 5.2.1.1)

All required licenses, as specified in the PWS table, shall be provisioned and made accessible to authorized DeCA personnel no later than September 26, 2026.

100% Compliant. No deviation permitted.

100% Inspection

PRS#2 - Annual License Renewal (PWS para 5.2.1.2)

All required licenses shall be successfully renewed with no lapse in service.

Renewals must be complete no later than the day after the end of the prior option year.

100% Compliant. No lapse in service permitted.

100% Inspection

PRS#3 - Project Management (PWS para 5.2.2.1)

The Contractor shall manage the performance of this contract in accordance with the PMP, to include leading weekly project status meetings during the Base Year training and advisory phase.

No more than one

(1) unexcused missed status meeting per quarter.

Periodic Inspection;

Review of Meeting Minutes

PRS#4 - Technical Advisory Support (PWS para 5.2.3.1)

The Contractor shall provide expert technical advisory support via virtual meetings, providing responses to Government configuration and workflow inquiries.

Initial response to inquiries shall be provided within two

(2) business days, 95% of the time.

Random Sampling;

COR Log

PRS #5 - Training Delivery (PWS para 5.2.3.2)

All training materials shall be delivered for Government review at least 15 days prior to training. All initial user training sessions must be completed within the first 120 days of the contract.

Materials: No more than one (1) late delivery.Sessions:

100% Compliant.

Periodic Inspection;

Direct Observation

PRS #6 - Optional Sustainment Support (PWS para 5.2.4.1)

When an optional task is assigned by the COR, the Contractor shall provide an initial response

Initial response shall be provided within two (2) business

Random Sampling;

Validated Customer Complaint acknowledging the request and assigning a qualified technical expert.

days, 95% of the time.

PRS #7 - Service Contract Reporting (SCR) (PWS para 5.3)

The Contractor shall report all required labor hours in the System for Award Management (SAM) accurately and submit the report no later than October 31st of each calendar year.

100% Compliant.

Zero deviation from standard.

100% Inspection

PRS #8 – Mandatory Training (PWS para 1.23)

Contractor personnel shall complete AT Level I, OPSEC, iWATCH, and PII training within 30 days of contract start or individual hire.

100% Compliant. 100% Inspection of Certificates

TECHNICAL EXHIBIT B

DELIVERABLES SCHEDULE

Deliverable

Deliverable Title (PWS Paragraph) Frequency # of

Copies Medium/Format Submit To

A001 Quality Control Plan (QCP) (para 1.5.1)

Once, within 10 days after contract award.

Electronic (MS Word or PDF) / Contractor Format

COR

A002 Project Management Plan (PMP) (para 1.5.4.3.1)

Once, within 10 days after contract award.

Updated as required.

Electronic (MS Word or PDF) / Contractor Format

COR

A003 Signed Non- Disclosure Agreements (NDAs) (para 1.18)

Once, within 10 business days after contract award.

1 Electronic (PDF) COR

A004 Confirmation of SCR Submission (para 5.3)

Annually, by October 31st. 1

Electronic (Screenshot or Email)

COR

A005 Monthly Progress Report (Implicit in 1.8.1)

Monthly, by the 5th business day.

Electronic (MS Word or PDF) / Contractor Format

COR

A006 Training Materials (para 5.2.3.2)

Once, 15 days prior to the first scheduled training session.

Electronic (508 Compliant MS Office/PDF) / Contractor Format

COR

A007 Phase-Out Transition Plan (para 1.20)

Once, 90 days prior to the end of the final contract period.

Electronic (MS Word or PDF) / Contractor Format

COR

A008 Mandatory Training Certificates (1.23.1, 1.23.2, 1.23.5)

Once, within 30 days of contract start/hire.

1 Electronic (PDF) COR

A009 iWATCH Training Confirmation (1.23.3)

Once, within 30 days of contract start/hire.

1 Electronic (Email or Memo) COR

A010 Training Completion Record (para 5.2.3.2)

Once, within 5 days of concluding the Base Year training workshops.

Electronic (MS Word/Excel or

PDF)

COR

ATTACHMENT 1

ESTIMATED WORKLOAD DATA

RESERVED

ATTACHMENT 2

HISTORICAL WORKLOAD DATA

ATTACHMENT 3

GOVERNMENT FURNISHED PROPERTY (GFP)