RFQ_Attachment_1_-_PWS.pdf

Defense Contract Management Agency (DCMA) Performance Work Statement (PWS)

WAN / LAN / Wiring Support Services 3 June 2014

PWS DCMA WAN/LAN/Wiring Support Services

1. General Description

2. Restrictions on Disclosure

3. About DCMA

4. PERFORMANCE TASKS

4.1. NETWORK SUPPORT

4.1.1. Enterprise Level Network & Telecommunications Support

4.1.2. Hardware Configuration and Maintenance

4.1.3. Network Protocols Support

4.1.4. Technology Research

4.1.5. Benchmarking

4.1.6. Enterprise Architecture (EA) Documentation

4.1.7. Video Teleconferencing (VTC) Support

4.1.8. Unified Communications (UC) Design, Installation, and Support

4.1.9. Wireless Local Area Network (WiFi) Installation and Support

4.1.10. Information Assurance & Security Certification and Accreditation

4.2. LEGACY HQ PBX SUPPORT AND ADMINISTRATION

4.3. NETWORK CABLING UPGRADES AND INSTALLATION

4.3.1. Site Survey and Cabling Project Estimation

4.3.2. Cabling Project Installation

5. DCMAIT’s Customer Service Philosophies

6. Written Products

7. Periodic Adjustments to Performance Standards

8. Place of Performance

9. Period of Performance

10. Travel and Other Direct Costs

11. Time of Performance

12. Security

13. Information Assurance

14. Government-Furnished Hardware and Software

Appendix A Supported Enterprise Components

Appendix B IA Classification

Appendix C DCMAIT’s Customer Service Philosophies

Appendix D Current DCMA Network Locations

Appendix E Specific Deliverables

Appendix F DCMA Cabling Project General Requirements Appendix G Government Furnished Equipment……………………………………………………

1. General Description The Service Provider (SP) on this Performance Work Statement (PWS) will provide network support services for DCMA’s Wide Area Network (WAN) and Local Area Network (LAN) Infrastructure to include expert support for operations and maintenance, configuration control, design recommendations for upgrades to key systems and Tier 3 support on the DCMA WAN, LAN, VTC, WiFi, and VoIP Network and related infrastructure including network design and physical installation of network devices and wiring.

2. Restrictions on Disclosure This document describes DCMA’s Information Technology (IT) architecture in substantial detail and thereby exposes information that could be used maliciously by persons or organizations to do harm to DCMA’s networks, environments, and business information. For this reason, DCMA requires that dissemination of the information contained in this document and its attachments or appendices be strictly limited to only those persons or organizations with a need to know. “Need to know” in this context includes such activities as preparing contractual proposals, bids, quotations, or performance cost estimates, or referring to the information contained in this document, its attachments, etc., while engaged in the actual performance of the services called for by this Performance Work Statement

(PWS).

3. About DCMA

DCMA is the Department of Defense (DoD) agency responsible for working with the Defense industry to help ensure that systems, supplies, and services are delivered on time, at projected costs, and meet performance requirements. This involves managing 300,000 prime contracts valued at approximately $1.2 Trillion.

DCMA is headquartered on Ft Lee, Virginia and employs approximately 10,000 civilian and military professionals worldwide. The agency is organized into five regional organizations: East, Central, West, International, and Special Programs. The East Region headquarters is located in Boston, MA.

Central Region in Chicago, IL. and West Region in Carson, CA. The International and Special Programs Divisions are co-located with the agency headquarters at Ft Lee, VA. The divisions are further subdivided into 50 Contract Management Offices (CMOs) with over 800 employee duty stations worldwide, working with over 16,000 Defense related firms.

DCMA’s Information Technology (IT) Directorate provides information technology policy, planning, design, and telecommunications services to all DCMA employees and limited numbers of other DoD Components’ employees, as well. The DCMA IT employs nearly 300 personnel, along with a varying number of support SP personnel, who are responsible for managing a large technical architecture consisting of ~11,000 desktop personal computers, ~150 physical servers, ~900 virtual servers, and ~346 circuits of varying sizes from T-1 to OC-12. The DCMA IT headquarters and Chief Information Officer (CIO) is co-located with DCMA’s headquarters at Ft Lee, VA DCMA IT has three major field offices located in Carson, CA, Boston, MA, and Columbus, OH. Carson and Boston are DCMA’s primary data centers and Columbus is the DCMA Automated Testing Center (ATC). DCMA IT has additional subordinate offices worldwide, with most being located in the Continental United States.

DCMA is expanding the number DCMA network locations to include small user locations that were previously serviced by other connectivity methods. This will add 240+ sites to the network over the next 18-24 months (May-2014 to Apr-2016) at an average of 15-20 sites per month.

DCMA IT’s Network Operations Security Center (NOSC) is currently located in Smyrna, GA. The NOSC provides Tier 1 & 2 network monitoring and is DCMA’s Information Assurance Computer Network Defense (IACND) provider.

DCMA IT is approximately 80% complete in its migration from a network hub and spoke topology into a Multi-Protocol Layer Switching (MPLS) cloud as part of the Defense Information Systems Agency (DISA) DoD Network-Based Internet Protocol-Virtual Private Network Services (NB-IPVPN) and Voice over Internet Protocol Transport Services (VoIPTS) via the GSA Networx Enterprise Contract.

The primary DoD NB-IPVPN (MPLS) provider is Verizon Business.

DCMA IT began an Enterprise VoIP deployment in 2013 and has transitioned 10 CONUS locations and the 8 DCMA Afghanistan locations (940 phones total). DCMA is accelerating VoIP deployments with the intention of capturing 75% of all DCMA locations in the next 24 months.

4. PERFORMANCE TASKS

4.1. NETWORK SUPPORT

4.1.1. Enterprise Level Network & Telecommunications Support

The SP shall provide Tier 3 support to DCMA’s Configuration Management Center (CMC), Network Operations Support Center (NOSC), and Field Services for fault isolation and remediation, performance analysis and other investigations of operations as required. A list of specific support for each enterprise component is in Appendix A.

The preponderance of work shall be on the DoD Non-classified Internet Protocol Router Network (NIPRNet), but some shall involve the Secret Internet Protocol Router Network (SIPRNet).

Being a geographically distributed organization with a 300+ network locations, support issues surface daily and can range from simple electrical power issue to complex routing protocol problem.

Performance Objective – Ensure that complex technical issues affecting DCMA Network performance and operations are quickly resolved.

Performance Standard – The SP will identify source of network fault and a proposed remediation solution within 24 hours for all operations issues referred for resolution.

Performance Assessment – DCMA conducts a monthly review of status records and service center reports.

4.1.2. Hardware Configuration and Maintenance

The SP shall interact with vendors, data telecommunications providers, other support contractors and government personnel to implement network hardware operating system upgrades and software patches, configure and install new network devices in accordance with DCMA standard configurations and network hardware service, repairs or replacement as required. Equipment support includes all routers, switches, remote access routers, WiFi controllers and access points, Unified Communication VoIP infrastructure, and all VTC infrastructure related equipment (endpoints, bridges, gateways, gatekeepers, management server), and all physical layer media (media converters, T3 modems, mux, etc.). The SP must have adequate storage for components and devices during network equipment life-cycle deployments. DCMA’s network equipment life-cycle policy is currently five years.

Performance Objective – Ensure that routine maintenance and upgrades are performed in such time and manner as to maintain DCMA required performance levels while minimizing impact to the user community.

Performance Standard – The SP will coordinate with all involved parties and plan activities to ensure the following network metrics are maintained.

Maintain circuit availability 99.5% during business hours over annualized period.

95% of circuits will not exceed 70% utilization during peak business hours.

Performance Assessment – DCMA conducts a monthly metrics review.

4.1.3. Network Protocols Support

The SP shall provide recommendations and support for all issues related to data communications including routing protocols, switching technologies, Quality of Service (QOS), Video Teleconferencing (VTC), Voice over IP (VoIP), multicasting, IPv4 & IPv6, Multi-Protocol Layer Switching (MPLS), PCoIP, and WAN Optimization. The SP will be considered the expert resource with regard to Network Maintenance issues and is the focal point for establishing and maintaining effective standard operating procedures to assure efficient network operations.

Performance Objective – The SP will evaluate changing business requirements and demand for network services against the current and planned infrastructure and recommend actions necessary to maintain effective operations.

Performance Standard – The SP will evaluate proposed application, infrastructure and regulatory changes for impacts to network performance and notify the COR within 7 business days after receipt of change notice. (Deliverable: A010) Performance Standard – The SP will as needed develop a plan including a notional schedule to accommodate such changes within 25 business days after receipt of the directed changes.

Performance Assessment – DCMA conducts a quarterly review of change requests.

4.1.4. Technology Research

The SP shall provide recommendations for network design and new network architectures, equipment and or methods to improve DCMA’s telecommunications network. The SP shall analyze business requirements, research options, and provide recommendations for upgrades or technology refreshes of supported components. Examples of documentation include:

• Suggested alternative technology options and strategies

• Analyses of assigned topics and framework for decision making

• Models for cost/benefit projections

• Research of best practices and benchmarks

• Research of other assigned telecommunications related topics

• Prototype/proofs of concept development All changes to the DCMAIT environment shall be approved and documented prior to implementation in accordance with DCMAIT policies and procedures.

Performance Objective – The SP will keep DCMA senior Information Technology management aware of changes in technology and new products that can enhance DCMA’s telecommunications infrastructure and mission operations effectively and efficiently.

Performance Standard – The SP will maintain high awareness of the “state of the art” with regards to telecommunications operations and provide input to the Technical Architecture Working Group

(TAWG), Technical Architecture Steering Group (TASG) and the CIO about opportunities to effectively and efficiently enhance the DCMA telecommunications infrastructure and will do so in accordance with established DCMA TASG/TAWG procedures.

Performance Standard – Requests to evaluate specific technologies from the Director of Infrastructure or the CIO are addressed in the appropriate format within 15 business days of the request. (Deliverable: A020) Performance Assessment – DCMA conducts a semi-annual review of status records.

4.1.5. Benchmarking

Periodically, DCMA shall require the SP to perform benchmarking activities on DCMAIT supported software and hardware in order to provide detailed information for meeting application objectives or performance enhancement activities. The SP shall provide expert knowledge in the implementation and use of benchmarking tools and the capability to design meaningful reports for presentation to DCMA management and the program office staff.

Performance Objective – The SP will maintain a sufficient view of daily operations to identify potential problem areas before they become critical.

Performance Standard – The SP will sufficiently assess network performance statistics to assure 99% of network failures could not have been projected through analysis of performance statistics.

Performance Assessment – DCMA after action reviews.

4.1.6. Enterprise Architecture (EA) Documentation

The SP shall provide Enterprise Architecture documentation to include System Change Requests for all significant changes to the network, and maintenance of the DCMA circuit/site maps as well as network diagrams for DCMA network locations. This information will be provided to the DCMA EA focal point.

Performance Objective – The enterprise architecture is constantly maintained in a state that represents the actual environment.

Performance Standard – All routine documentation updates in support of Enterprise Architecture will be submitted within 7 business days after architecture change is implemented. (Deliverable: A030) Performance Assessment – DCMA conducts a monthly review of status records.

4.1.7. Video Teleconferencing (VTC) Support

The SP shall support the maintenance, and administration of the DCMA Video Teleconference System. In particular, the SP shall:

• Maintain VTC architecture and design based on mission requirements.

• Assist with the compilation of real-time usage statistics.

• Interact with vendor(s) on VTC hardware service/repair/replacement.

• Implement VTC hardware operating system upgrades and patches.

• Configure and install VTC devices IAW DCMA standard configurations.

• Provide Tier 3 support to DCMA Field Services and HQ VTC Coordinator.

Performance Objective -- The SP shall support the maintenance, and administration of the Video Teleconference System to assure operation meets user requirements.

Performance Standard – Maintain usage statistics to assure adequate capacity exists and proactively manage for potential faults to insure 99% availability of VTC operations as scheduled.

Performance Standard – Provide recommendations to assure VTC operation continues to incorporate advances in technology that can improve efficiency and the effectiveness of investments as needed but no less than semi-annually.

Performance Standard – Perform installations and upgrades in accordance with agreed upon schedule 95% of the time.

Performance Assessment – DCMA conducts a monthly review of status records.

4.1.8. Unified Communications (UC) Design, Installation, and Support The SP shall provide Network and System Engineering for DCMA’s Enterprise UC and Voice over Internet Protocol (VoIP) design, installation and sustainment to cover the UC infrastructure at the three data centers (Boston, Carson, Columbus) as well as existing VoIP CMO locations and preparation for VoIP deployment at additional CMO locations. SP will interface with equipment vendor and coordinate and document configurations. SP will interface with other DCMAIT organizations to coordinate deployment planning, installation and support processes and procedures.

DCMA estimates 15-20 small (<10 users) site VoIP installations a month for the next 24 months along with 12-15 large (>10 users) sites transitioning from existing PBX during that time.

Performance Objective – The SP will design, configure, and support DCMA’s VoIP infrastructure.

Performance Standard – The SP will meet all agreed to schedule milestones 95% of the time.

Performance Assessment – DCMA conducts a monthly review of status records and project schedules.

4.1.9. Wireless Local Area Network (WiFi) Installation and Support The SP shall install Wireless LAN equipment at the three Regional HQs and nine CMOs. SP will configure and support the wireless architecture and incorporate it into the existing DCMA network architecture. SP will interface with equipment vendor for support. SP will interface with other DCMA IT organizations to coordinate support processes and procedures.

DCMA CIO policy is that all new DCMA CMO facilities will include WiFi infrastructure. Currently 22 locations have WiFi and we anticipate 5 to 7 CMO facilities projects each year.

Performance Objective – The SP will install, configure, and support DCMA’s Wireless LAN infrastructure.

Performance Standard – The SP will meet all agreed to schedule milestones 95% of the time.

Performance Assessment – DCMA conducts a monthly review of status records and project schedules.

4.1.10. Information Assurance & Security Certification and Accreditation The SP shall assist in the identification of risks associated with the DCMAIT supported systems and provide documentation as may be required by the DCMA Information Systems Security Officer (ISSO) to document, and where possible, remediate these risks. Apply appropriate security patches as required by the DCMA CIO, Information Assurance Director, Infrastructure and Architecture

Director or NOSC. Maintain supported systems configuration IAW applicable DCMA standards and DISA Security Technical Implementation Guides (STIG).

DCMAIT supported environments are required to undergo security certification and accreditation in accordance with federal and departmental requirements. The SP shall be responsible for providing and maintaining documentation required to possess this certification and accreditation. The SP shall be responsible for providing recommendations to the Information Assurance Director, Infrastructure and Architecture Director for resolving any deficiencies identified and then implementing the corrective actions as directed by DCMA ISSO.

With the focus on Cyber Security, the frequency of IAVA and STIG updates is increasing. We estimate at least 10 significant IAVA or STIG related upgrades or changes per year.

Performance Objective – The SP will support the DCMA ISSO to assure the DCMA telecommunications network meets security requirements.

Performance Standard – The SP will respond to inquiries received from ISSO, the CIO, the Director Infrastructure and Architecture or the NOSC within 1 business day.

Performance Standard – The SP will apply appropriate security patches as required in accordance with the agreed upon schedule 99% of the time so as to minimize customer service.

Performance Assessment – DCMA conducts a monthly review of status records.

4.2. LEGACY HQ PBX SUPPORT AND ADMINISTRATION

DCMA has a number of legacy Private Branch Exchange (PBX) systems which require administration support for moves/adds/changes (MAC). The criticality of the DCMA HQ PBX systems requires at least one FTE be located on-site at Ft Lee, VA or Rivers Bend, VA to provide immediate phone support for those systems. DCMA estimates 20-30 MACs per month.

Performance Objective – The SP will provide support for DCMA HQ legacy PBX systems.

Performance Standard – The SP will act on HQ MAC requests within 1 business day.

Performance Assessment – DCMA conducts a monthly review of status records.

4.3. NETWORK CABLING UPGRADES AND INSTALLATION

DCMA is a large geographically dispersed organization with dynamic business mission responsibilities. Organizational change in response to changing business conditions is common in our environment and results in frequent establishment of new sites or relocation of existing ones.

The SP will support the implementation of these changes by moving, upgrading and/or replacing existing equipment with equipment capable of providing 100/1000Base-T Ethernet service; and configuring switches, routers, media adapters, T1/T3 modems, etc., as well as installing data and voice cabling. This includes initial site surveys to identify the requisite effort associated with equipment and materials, installation thereof, configuration, installation, integration, testing, and documentation of the infrastructure from dmarc to desktop.

Cabling Projects can range in size from a small office with a few network drops to a large CMO office space with hundreds of network drops and multiple floors. DCMA Special Programs offices required fiber drops. All other offices are standard Cat6 UTP. Appendix F details DCMA’s general UTP cabling guidelines.

4.3.1. Site Survey and Cabling Project Estimation

When tasked by DCMA, the SP will conduct a site survey for network data cabling installation project estimation at the specified location. Resulting survey report will include bill of materials (BOM), installation labor resources required, travel & per diem costs, project timeline, and special considerations. The SP shall work closely with DCMA IT Infrastructure/Architecture, Field Services and DCMA Facilities Service Center in coordinating site specific requirements.

Performance Objective – The SP will establish, change or relocate network operations at facilities as designated by DCMA in accordance with project schedule.

Performance Standard – Site survey conducted within 10 business days of tasking.

Performance Standard – Survey report issued within 10 business days after survey. (Deliverable:

A040) Performance Assessment – DCMA reviews survey report.

4.3.2. Cabling Project Installation

After cabling project site survey approval by DCMA, the SP shall work with local facilities project managers and, in the case of new facilities build-out, the site general contractor. The SP shall adhere to current network wiring standards and any local building codes and install DCMA network cabling in accordance with approved site survey results. SP will provide warranty coverage on materials and installation for at least 90 days after project completion. SP will provide “as built” documentation for each project within 10 business days after project completion.

Performance Objective – The SP will establish, change or relocate network cabling infrastructure at facilities as designated by DCMA in accordance with project schedule.

Performance Standard – Installation dates meet agreed upon schedule 98% of time.

Performance Standard -- Total installation cost is at or below agreed upon effort 98% of time.

Performance Standard – Installation complies with DCMA standards.

Performance Standard – “as built” documentation provided within 10 business days after project completion. (Deliverable: A050) Performance Assessment – DCMA conducts post project inspection review.

5. DCMAIT’s Customer Service Philosophies DCMA expects the SP to follow DCMAIT’s Customer Service Philosophies, which are at Appendix C, to the greatest extent possible.

6. Written Products The SP shall ensure that all written products are prepared in a clear and concise manner, properly formatted, spell checked, and grammatically correct. The SP shall deliver all SP-produced reports and briefings in formats that are readable by Microsoft Office 2010. DCMA uses Wiki formatted documents for Enterprise Architecture and Standard Operation Procedures.

7. Periodic Adjustments to Performance Standards In its experience with other performance-based instruments, DCMA has sometimes found it necessary to adjust performance standards. That’s because written expressions of performance standards sometime inadvertently motivate services provider behaviors that are actually counterproductive to achieving the desired performance objectives. DCMA accordingly reserves the right to adjust any or all performance standards in this PWS, including additions, deletions, substitutions, or modifications, at any time at DCMAIT’s discretion—subject, of course, to the stipulations in the “Changes” clause of any contract in which this PWS is included. DCMA, however, does not plan to make any such adjustments more than once each calendar quarter, and in fact, would prefer not to make them any more frequently than once each calendar year, if at all.

8. Place of Performance The SP is responsible for providing office space, location, and support services for their employees assigned to this contract. DCMA will provide connectivity to the DCMA Network and DCMA standard image workstations.

For rapid and immediate response, at least one FTE performing the legacy PBX administration will be located on-site at the HQ Ft Lee, VA or HQ Rivers Bend, Chester, VA location.

SP will provide on-site network support for SIPRNET at HQ Ft Lee, VA location at least one day every two weeks.

Some tasks will require temporary on-site SP presence at any CONUS DCMA locations as required.

See Appendix D for a listing of current DCMA locations.

While the place of performance is open, DCMA sees value in proximity to DCMA HQ Ft Lee, VA or DCMAIT NOSC Smyrna, VA or one of the DCMA data centers (Carson, CA; Boston, MA; or Columbus, OH) to facilitate convenient interaction with the DCMAIT organizations they support.

SP will provide adequate, controlled, secure storage space (~1500 square feet) for DCMA network GFE used for immediate sparing, life-cycle replacement, and DRMO preparation.

SP will provide controlled access to the office space location where DCMA network support is performed under this PWS.

9. Period of Performance The period of performance is one year after date of contract award, with four one-year option periods.

10. Travel and Other Direct Costs The Government will reimburse for approved travel. Travel must be approved by the Contracting Officer’s Representative (COR) prior to travel on a cost reimbursement basis and may only be conducted if funding is available on the contract. Travel will be in accordance with and not exceed the rates set forth in the Joint Travel Regulations (JTR). No overseas travel is anticipated.

It may be necessary to obtain items directly under this contract during wiring and cabling jobs or to facilitate immediate restoration of service and repair of network equipment or components (e.g. patch cables, media converters, GBICs, etc). These must be pre-approved by the COR and may only be procured if funding is available on the contract.

11. Time of Performance.

Work periods are normally restricted to regular business hours (Monday through Friday, of 0700 Eastern to 1900 Pacific). However, support to DCMA locations may require scheduling based on the site’s local time. Activity which would disrupt DCMA user connectivity is normally performed outside regular business hours. Tier 3 on call support is expected 24x7x365. Work will not typically be performed on federal holidays - http://www.opm.gov/fedhol/index.asp.

http://www.opm.gov/fedhol/index.asp

12. Security Service Provider personnel assigned to this contract will perform in an ADP I designated sensitive position due to the nature of the work performed. Assignment to an ADP I position requires favorable adjudication of a Single Scope Background Investigation (SSBI), Single Background Periodic Reinvestigation (SBPR), or Phased Periodic Reinvestigation, as appropriate. The SP will provide sufficient documentation through their Security Office to the Defense Contract Management Agency Security Office to show favorable adjudication of required investigations.

In accordance with the DoD 5200.2R, Personnel Security Program Regulation, Service Provider personnel assigned to positions equivalent to Critical Sensitive and access or perform Automated Data Processing (ADP) ADP-I functions shall be the subject of a favorably adjudicated SSBI), SBPR, or PPR, as appropriate. SP personnel assigned to positions equivalent to Non Critical Sensitive and access or perform ADP II functions shall be subject to a favorably adjudicated National Agency Check with Law and Credit (NACLC) investigation or Periodic Reinvestigation Secret (PRS), as appropriate.

DCMA security personnel will validate proof of existing investigations.

The Service Provider will provide Name, SSN, and security clearance information for all assigned personnel to show favorable adjudication of required investigations. Service Provider personnel will be briefed in accordance with DCMA security policies, given a security awareness exam, and briefed on proper disposition of their passwords and Common Access Cards (CACs) (if issued).

DCMA IT uses the Joint Personnel Adjudication Environment (JPAS) to verify clearances. JPAS uses a centralized database with centralized computer processing and application programs for standardized DoD personnel security processes. Vendors have access to JPAS to request and maintain security clearances for their personnel. New investigative requests will be submitted by the vendor through the Joint Personnel Adjudication Environment (JPAS).

https://www.dss.mil/GW/ShowBinary/DSS/diss/jpas/jpas.html.

DCMAIT-K will make every effort to confirm the clearance of vendors not in JPAS, however timely results are not common and delays would not be considered a reason for a Government caused delay.

Sharing or common use of DCMA User IDs and passwords is strictly prohibited.

13. Information Assurance In accordance with the requirements of DoD 8570.01-M., Change 1 dated May 2008 or latest version, individuals performing tasks related to Information Assurance (IA) must have the appropriate IA credentials. A listing of these tasks and their associated credentials are in Appendix B. The SP’s proposals shall include an analysis of IA related tasks to be performed by each labor category and the corresponding credentials.

14. Government-Furnished Hardware and Software DCMA will provide the SP with access to all computer and network hardware and software necessary to fulfill the requirements of this PWS (including ancillary environments, such as the DCMA Service Center trouble ticketing environment.) DCMA, however, expressly reserves the right to add, delete, or modify at its exclusive discretion any hardware, software, or access rights at any time during contract performance, based upon what in DCMA’s judgment is necessary to most effectively and efficiently perform the missions.

https://www.dss.mil/GW/ShowBinary/DSS/diss/jpas/jpas.html

The Government will retain ownership (or, where leases are involved, leaseholds) for all Government-furnished equipment described by this PWS and/or its attachments; and for such other miscellaneous items, materials, supplies, tools, or equipment as may be already in the Government’s possession or control, or as the Government may later acquire. The SP may be held liable for any loss, damage, or destruction of Government property resulting from SP personnel’s malicious or negligent acts.

Appendix A Supported Enterprise Components

DCMA is primarily a Cisco shop and as such, the SP must have a minimum of one CCIE (expert) Routing and Switching resource available for this support and one CCIE (expert) Collaboration.

Additional SP resources should be certified at the Cisco Professional level in a related area as required.

(Reference: http://www.cisco.com/web/learning/le3/learning_career_certifications_and_learning_paths_home.html )

SP must have support resources with expertise and/or certification in the following manufacturer equipment and technologies:

Riverbed Steelhead units for WAN Optimization Brocade MLX switches in the three data centers Aruba Wireless LAN (WiFi) controllers and access points Polycom HDX, CMA, RMX VTC equipment Cisco Tandberg MXP VTC equipment (legacy) Avaya PBX (MAC administration at DCMA HQ Ft Lee, VA)

DCMA may include other vendor’s equipment in the future and would expect support at similar certification levels for that equipment within sixty (60) days of notification or the change by the government.

DCMA uses SunView’s Change Gear for Service Center Incident, Problem, and Service Request tracking and the Solarwinds suite for network monitoring.

Cisco router and switch counts c1004 15.1(3)S IOS-XE (PPC_LINUX_IOSD-ADVENTERPRISEK9-M) 7 c2621XM 12.4(25b) C2600 (C2600-ADVIPSERVICESK9-M) 3 c2811 12.4(15)T10 2800 (C2800NM-ADVIPSERVICESK9-M) 29 c2811 12.4(15)T12 2800 (C2800NM-ADVIPSERVICESK9-M) 1 c2811 12.4(15)T14 2800 (C2800NM-ADVIPSERVICESK9-M) 1 c2811 12.4(24)T6 2800 (C2800NM-ADVIPSERVICESK9-M) 1 c2811 12.4(24)T7 2800 (C2800NM-ADVIPSERVICESK9-M) 52 c2811 15.1(4)M7 2800 (C2800NM-ADVIPSERVICESK9-M) 2 c2821 12.4(15)T10 2800 (C2800NM-ADVIPSERVICESK9-M) 1 c2851 15.1(4)M7 2800 (C2800NM-ADVIPSERVICESK9-M) 4 c2911 15.0(1)M7 C2900 (C2900-UNIVERSALK9-M) 2 c2911 15.1(4)M4 C2900 (C2900-UNIVERSALK9-M) 108 c2911 15.1(4)M7 C2900 (C2900-UNIVERSALK9-M) 32 c2951 15.0(1)M3 C2951 (C2951-UNIVERSALK9-M) 1 c2951 15.0(1)M5 C2951 (C2951-UNIVERSALK9-M) 1 c2951 15.0(1)M7 C2951 (C2951-UNIVERSALK9-M) 4 c2951 15.1(4)M4 C2951 (C2951-UNIVERSALK9-M) 47 c2951 15.1(4)M7 C2951 (C2951-UNIVERSALK9-M) 11 http://www.cisco.com/web/learning/le3/learning_career_certifications_and_learning_paths_home.html c2951 15.2(2)T1 C2951 (C2951-UNIVERSALK9-M) 1 c3725 12.4(15)T10 3700 (C3725-ADVIPSERVICESK9-M) 3 c3825 12.4(15)T10 3800 (C3825-ADVIPSERVICESK9-M) 6 c3825 12.4(24)T4 3800 (C3825-ADVIPSERVICESK9-M) 1 c3825 12.4(24)T6 3800 (C3825-ADVIPSERVICESK9-M) 3 c3845 12.4(15)T10 3800 (C3845-ADVIPSERVICESK9-M) 3 c3845 12.4(24)T7 3800 (C3845-ADVIPSERVICESK9-M) 3 c3945 15.1(4)M4 C3900 (C3900-UNIVERSALK9-M) 6 c7201 12.4(15)T10 7200 (C7200P-ADVIPSERVICESK9-M) 2 c7201 12.4(15)T17 7200 (C7200P-ADVIPSERVICESK9-M) 1 cat295012G 12.1(22)EA13 C2950 (C2950-I6K2L2Q4-M) 9 cat295024G 12.1(22)EA13 C2950 (C2950-I6K2L2Q4-M) 69 cat295048G 12.1(22)EA13 C2950 (C2950-I6K2L2Q4-M) 75 cat2960G24 12.2(52)SE C2960 (C2960-LANBASEK9-M) 3 cat2960G24 12.2(55)SE C2960 (C2960-LANBASEK9-M) 2 cat35608PC 12.2(52)SE C3560 (C3560-IPSERVICESK9-M) 21 cat35608PC 12.2(58)SE2 C3560 (C3560-IPSERVICESK9-M) 7 cat3560G24PS 12.2(44)SE1 C3560 (C3560-ADVIPSERVICESK9-M) 5 cat3560G24PS 12.2(52)SE C3560 (C3560-IPSERVICESK9-M) 88 cat3560G24PS 12.2(58)SE2 C3560 (C3560-IPSERVICESK9-M) 18 cat3560G24PS-S 12.2(52)SE C3560 (C3560-IPSERVICESK9-M) 6 cat3560G24PS-S 12.2(53)SE1 C3560 (C3560-IPSERVICESK9-M) 1 cat3560G48PS 12.2(35)SE C3560 (C3560-IPBASEK9-M) 1 cat3560G48PS 12.2(52)SE C3560 (C3560-IPSERVICESK9-M) 233 cat3560G48PS 12.2(58)SE2 C3560 (C3560-IPSERVICESK9-M) 43 cat3560v224ps 12.2(58)SE2 C3560 (C3560-IPSERVICESK9-M) 41 cat3560v224ts 12.2(50)SE5 C3560 (C3560-IPBASEK9-M) 1 cat3560v224ts 12.2(52)SE C3560 (C3560-IPSERVICESK9-M) 58 cat3560v224ts 12.2(58)SE2 C3560 (C3560-IPSERVICESK9-M) 36 cat3560v248ps 12.2(52)SE C3560 (C3560-IPSERVICESK9-M) 1 cat3560v248ps 12.2(55)SE5 C3560 (C3560-IPBASEK9-M) 4 cat3560v248ps 12.2(58)SE2 C3560 (C3560-IPSERVICESK9-M) 53 cat3560v248ts 12.2(50)SE1 C3560 (C3560-IPSERVICESK9-M) 1 cat3560v248ts 12.2(50)SE5 C3560 (C3560-IPBASEK9-M) 1 cat3560v248ts 12.2(52)SE C3560 (C3560-IPSERVICESK9-M) 138 cat3560v248ts 12.2(58)SE2 C3560 (C3560-IPSERVICESK9-M) 54 cat3750-24TS 12.2(52)SE C3750 (C3750-IPSERVICESK9-M) 44 cat3750-24TS 12.2(53)SE2 C3750 (C3750-IPSERVICESK9-M) 3 cat3750-24TS 12.2(55)SE C3750 (C3750-IPSERVICESK9-M) 1 cat3750-24TS 12.2(55)SE5 C3750 (C3750-IPSERVICESK9-M) 2 cat3750-24TS 12.2(55)SE5 C3750E (C3750E-UNIVERSALK9-M) 1 cat3750Nme16Es1Ge 12.2(52)SE C3750 (C3750-IPSERVICESK9-M) 6 cat3750NmeXd24Es2St 12.2(52)SE C3750 (C3750-IPSERVICESK9-M) 1 cat6506 12.1(27b)E1 c6sup2_rp (c6sup2_rp-JK2SV-M) 1 cat6506 12.1(27b)E4 c6sup2_rp (c6sup2_rp-JK2SV-M) 6 cat6506 12.2(33)SXI s72033_rp (s72033_rp-ADVIPSERVICESK9_WAN-VM) 1 cat6506 12.2(33)SXI3 s3223_rp (s3223_rp-ADVIPSERVICESK9_WAN-VM) 4 cat6509 12.1(27b)E4 c6sup2_rp (c6sup2_rp-JK2SV-M) 2 cat6509 12.2(18)SXF15 s72033_rp (s72033_rp-ADVIPSERVICESK9_WAN-M) 6 cat6513 12.2(18)SXF15 s72033_rp (s72033_rp-ADVIPSERVICESK9_WAN-M) 2

Aruba counts

Aruba 3600 6.1.2.3-FIPS 5 Aruba 3200 6.1.2.3-FIPS 10 Aruba 650 6.1.2.3-FIPS 11 Aruba AP 105 6.1.2.3-FIPS 459

Brocade counts

Brocade MLXe (System Mode: MLX8) 5 IronWare V5.4.0cT163 Brocade MLXe (System Mode: MLX16) 4 IronWare V5.4.0cT163

Polycom & Tandberg VTC counts

HDX 7000 HD 173 Release - 3.1.1.3-36019 HDX 8000 HD 5 Release - 3.1.1.3-36019 HDX 9006 2 Release - 3.1.1.3-36019 CMA Desktop 47 5.2.2.13044 TANDBERG Profile 3000MXP 24 F9.0 NTSC TANDBERG Profile 6000MXP 29 F9.0 NTSC TANDBERG Profile 8000MXP 2 F9.0 NTSC

Appendix B IA Classification The following outlines the IA requirements from DoD 8570.01-M, Information Assurance Workforce Improvement Program, December 19, 2005 Incorporating Change 3, January 24, 2012.Any changes or supercessions to this manual will supersede this appendix.

Information Assurance Technology (IAT) Workforce Requirements

Civilian, Military, Contractor*

(Including Civilian or Contractor LNs)

IAT Level I - III (FN/LN Levels I & II only)

Initial Training ** Yes

IA Baseline Certification (from approved list)

Yes (within 6 months)

Initial OJT Evaluation Yes (for initial position)

CE/OS Certification Certificate

Yes

Maintain Certification Status

(as required by certification)

Continuous Education or Sustainment Training

(as required by certification (e.g., International Information Systems Security Certification Consortium, (ISC)2 requires 120 hours within 3 years for the CISSP))

Background Investigation As required by IA level and Reference (b) Sign Privileged Access Statement

Yes

*Contractor category, level, and certification requirements to be specified in the contract **Classroom, distributive, blended, government, or commercial provider

Information Assurance Technology (IAT) Level I Based upon current architecture and processes the following positions fall into this category:

IAT Level I Functional Requirements

T-I.1. Recognize a potential security violation, take appropriate action to report the incident as required by regulation, and mitigate any adverse impact.

T-I.2. Apply instructions and pre-established guidelines to perform IA tasks within CE.

T-I.3. Provide end user IA support for all CE operating systems, peripherals, and applications.

T-I.4. Support, monitor, test, and troubleshoot hardware and software IA problems pertaining to their

CE.

T-I.5. Apply CE specific IA program requirements to identify areas of weakness.

T-I.6. Apply appropriate CE access controls.

T-I.7. Install and operate the IT systems in a test configuration manner that does not alter the program code or compromise security safeguards.

T-I.8. Conduct tests of IA safeguards in accordance with established test plans and procedures.

T-I.9. Implement and monitor IA safeguards for CE system(s) in accordance with implementation plans and standard operating procedures.

T-I.10. Apply established IA security procedures and safeguards and comply with responsibilities of assignment.

T-I.11. Comply with system termination procedures and incident reporting requirements related to potential CE security incidents or actual breaches.

T-I.12. Implement online warnings to inform users of access rules for CE systems.

T-I.13. Implement applicable patches including IA vulnerability alerts (IAVA), IA vulnerability bulletins (IAVB), and technical advisories (TA) for the CE operating systems(s).

T-I.14. Install, test, maintain, and upgrade CE operating systems software and hardware to comply with IA requirements.

T-I.15. Understand and implement technical vulnerability corrections.

T-I.16. Enter assets in a vulnerability management system.

T-I.17. Apply system security laws and regulations relevant to the CE being supported.

T-I.18. Implement DoD and DoD Component password policy.

T-I.19. Implement specific IA security countermeasures.

IAT Level I Position Requirements

Attribute Level Experience Normally has 0 to 5 or more years of experience in IA technology or a related field.

System Environment

Computing Environment (CE)

Knowledge Applies basic knowledge of IA concepts, practices, and procedures within the CE.

Supervision Works under supervision and typically reports to a CE manager.

Other Actions are usually authorized and controlled by policies and established procedures.

IA Baseline Certification & CE/OS Certificate

Within 6 months of assignment to position and mandatory for unsupervised privileged access.

DoD Approved Baseline IA Certifications http://iase.disa.mil/eta/iawip/content_pages/iabaseline.html

IAT Level II Based upon current architecture and processes the following positions fall into this category:

• Network Engineer

• PBX Administrator

IAT Level II Functions

T-II.1. Demonstrate expertise in IAT Level I CE knowledge and skills.

T-II.2. Examine potential security violations to determine if the NE policy has been breached, assess the impact, and preserve evidence.

T-II.3. Support, monitor, test, and troubleshoot hardware and software IA problems pertaining to the NE.

T-II.4. Recommend and schedule IA related repairs in the NE.

T-II.5. Perform IA related customer support functions including installation, configuration, troubleshooting, customer assistance, and/or training, in response to customer requirements for the NE.

T-II.6. Provide end user support for all IA related applications for the NE.

T-II.7. Analyze patterns of non-compliance and take appropriate administrative or programmatic actions to minimize security risks and insider threats T-II.8. Manage accounts, network rights, and access to NE systems and equipment.

T-II.9. Analyze system performance for potential security problems.

T-II.10. Assess the performance of IA security controls within the NE.

T-II.11. Identify IA vulnerabilities resulting from a departure from the implementation plan or that were not apparent during testing.

T-II.12. Provide leadership and direction to IA operations personnel.

T-II.13. Configure, optimize, and test network servers, hubs, routers, and switches to ensure they comply with security policy, procedures, and technical requirements.

T-II.14. Install, test, maintain, and upgrade network operating systems software and hardware to comply with IA requirements.

T-II.15. Evaluate potential IA security risks and take appropriate corrective and recovery action.

T-II.16. Ensure that hardware, software, data, and facility resources are archived, sanitized, or disposed of in a manner consistent with system security plans and requirements.

T-II.17. Diagnose and resolve IA problems in response to reported incidents.

T-II.18. Research, evaluate, and provide feedback on problematic IA trends and patterns in customer support requirements.

T-II.19. Ensure IAT Level I personnel are properly trained and have met OJT program requirements.

T-II.20. Perform system audits to assess security related factors within the NE.

T-II.21. Develop and implement access control lists on routers, firewalls, and other network devices.

T-II.22. Install perimeter defense systems including intrusion detection systems, firewalls, grid sensors, etc., and enhance rule sets to block sources of malicious traffic.

T-II.23. Work with other privileged users to jointly solve IA problems.

T-II.24. Write and maintain scripts for the NE.

T-II.25. Demonstrate proficiency in applying security requirements to an operating system for the NE or CE used in their current position.

T-II.26. Implement applicable patches including IAVAs, IAVBs, and TAs for their NE.

T-II.27. Adhere to IS security laws and regulations to support functional operations for the NE.

T-II.28. Implement response actions in reaction to security incidents.

T-II.29. Support the design and execution of exercise scenarios.

T-II.30. Support Security Test and Evaluations (Part of C&A Process).

T-II.31. Obtain and maintain IA certification appropriate to position.

IAT Level II Position Requirements

Experience Normally has at least 3 years in IA technology or a related area.

System Environment NE and advanced CE.

Knowledge • Mastery of the functions of the IAT Level I position.

• Applies knowledge and experience with standard IA concepts, practices, and procedures within the NE.

Supervision Works under general supervision and typically reports to network manager.

Other Relies on experience and judgment to plan and accomplish goals within the NE.

Within 6 months of assignment to position.

IAT Level III

IAT Level III Functions

T-III.1. Mastery of IAT Level I and IAT Level II CE/NE knowledge and skills.

T-III.2. Recommend, schedule, and/or implement IA related repairs within the enclave environment.

T-III.3. Coordinate and/or provide support for all enclave applications and operations.

T-III.4 Lead teams and/or support actions to quickly resolve or mitigate IA problems for the enclave environment.

T-III.5. Formulate or provide input to the enclave's IA/IT budget.

T-III.6. Support the installation of new or modified hardware, operating systems, and software applications ensuring integration with IA security requirements for the enclave.

T-III.7. Identify and/or determine whether a security incident is indicative of a violation of law that requires specific legal action.

T-III.8. Direct and/or implement operational structures and processes to ensure an effective enclave IA security program including boundary defense, incident detection and response, and key management.

T-III.9. Provide direction and/or support to system developers regarding correction of security problems identified during testing.

T-III.10. Evaluate functional operation and performance in light of test results and make recommendations regarding C&A.

T-III.11. Examine enclave vulnerabilities and determine actions to mitigate them.

T-III.12. Monitor and evaluate the effectiveness of enclave IA security procedures and safeguards.

T-III.13. Analyze IA security incidents and patterns to determine remedial actions to correct vulnerabilities.

T-III.14. Support development and/or implementation of the enclave termination plan to ensure that IA security incidents are avoided during shutdown and long term protection of archived resources is achieved.

T-III.15. Implement vulnerability countermeasures for the enclave.

T-III.16. Provide support for IA customer service performance requirements.

T-III.17. Provide support for the development of IA related customer support policies, procedures, and standards.

T-III.18. Write and maintain scripts required to ensure security of the enclave environment.

T-III.19. Implement and maintain perimeter defense systems including, but not limited to, intrusion detection systems, firewalls, grid sensors.

T-III.20. Schedule and perform regular and special backups on all enclave systems.

T-III.21. Establish enclave logging procedures to include: important enclave events; services and proxies; log archiving facility.

T-III.22. Provide OJT for IAT Level I and II DoD personnel.

T-III.23. Analyze IAVAs and Information Assurance Vulnerability Bulletins for enclave impact and take or recommend appropriate action.

T-III.24. Obtain and maintain IA certification appropriate to position.

IAT Level III Position Requirements

Experience Normally has at least seven years experience in IA technology or a related area.

System Environment Enclave Environment, advanced NE, and advanced CE.

Knowledge • Expert in all functions of both IAT Level I and IAT Level II positions.

• Applies extensive knowledge of a variety of the IA field’s concepts, practices, and procedures to ensure the secure integration and operation of all enclave systems

Supervision • Works independently to solve problems quickly and completely.

• May lead and direct the work of others.

• Typically reports to an enclave manager.

Other • Relies on extensive experience and judgment to plan and accomplish goals for the enclave environment.

• Supports, monitors, tests, and troubleshoots hardware and software IA problems pertaining to the enclave environment.

• Must be a U.S. Citizen.

Within 6 months of assignment to position.

Information Assurance Management (IAM) Workforce Requirements

Civilian, Military or Contractor* (Including LNs

IAM Level I - III (FN/LN Levels I & II** only)

Initial Training *** Yes

IA Baseline Certification (from approved list)

Initial OJT Evaluation No

CE/OS Certification Certificate

No

(as required by certification (e.g., (ISC)2 requires 120 hours within 3 years for the CISSP))

Background Investigation As required by IA level and Reference (b) *Requirements to be stated in contract **FN/LN IASAE Level II must meet conditions of References (b), (i) and (j) ***Classroom, distributive, blended, government, or commercial provider

Information Assurance Management (IAM) Level I

IAM Level I Functions

M-I.1. Use federal and organization specific published documents to manage operations of their CE system(s).

M-I.2. Provide system related input on IA security requirements to be included in statements of work and other appropriate procurement documents.

M-I.3. Support and administer data retention and recovery within the CE.

M-I.4. Participate in the development or modification of the computer environment IA security program plans and requirements.

M-I.5. Validate users’ designation for IT Level I or II sensitive positions, per Reference (b).

M-I.6. Develop procedures to ensure system users are aware of their IA responsibilities before granting access to DoD information systems.

M-I.7. Recognize a possible security violation and take appropriate action to report the incident, as required.

M-I.8. Supervise or manage protective or corrective measures when an IA incident or vulnerability is discovered.

M-I.9. Ensure thatsystem security configuration guidelines are followed.

M-I.10. Ensure that IA requirements are integrated into the Continuity of Operations Plan (COOP) for that system or DoD Component.

M-I.11. Ensure that IA security requirements are appropriately identified in computer environment operation procedures.

M-I.12. Monitor system performance and review for compliance with IA security and privacy requirements within the computer environment.

M-I.13. Ensure that IA inspections, tests, and reviews are coordinated for the CE.

M-I.14. Participate in an IS risk assessment during the Certification and Accreditation process.

M-I.15. Collect and maintain data needed to meet system IA reporting requirements.

M-I.16. Obtain and maintain IA baseline certification appropriate to position.

IAM Level I Position Requirements

Experience Usually an entry level management position with 0 to 5 or more years of management experience.

System Environment CE IAM.

Knowledge Applies knowledge of IA policy, procedures, and structure to develop, implement, and maintain a secure CE.

Supervision • For IA issues,…