Sources Sought DRAFT PWS.pdf

UNCLASSIFIED

Enclosure (1)

PROFESSIONAL, TECHNICAL AND ANALYTICAL SUPPORT

TO NAVY INFORMATION OPERATIONS

1.0 INTRODUCTION This Performance Work Statement (PWS) supports the Navy’s Information Operations warfighting and training capabilities. The primary organizations for this support are the Naval Information Warfare Training Group (NIWTG) and Naval Information Forces (NAVIFOR).

2.0 SCOPE This PWS encompasses support for NIWTG Missions, Functions, and Tasks (MF&T) related to the mission areas of Information Warfare Data Management, Information Warfare Training, and Cybersecurity/Information Assurance (IA). This PWS provides for services and support that includes both short term and annual support contracts in some or all of the following IO/IA tasks.

3.0 TASK DESCRIPTION The following tasks describe NIWTG services and support required under this contract:

3.1 Task I - Information Warfare Data Management and Navy Information Operations Database (NIODB) Support:

The Contractor shall provide engineering and technical support, assistance, and training for data management, interoperability, database design and development, data standardization and maintenance.

Technical ELINT Data & Electronic Warfare Reprogrammable Library Analysis Support:

The following knowledge, skills and abilities should be considered the minimum requirements for this position:

- 5+ years demonstrated experience in the field of Technical ELINT (TECHELINT) data analysis and authoritative national data sources to include NGES, EWIR, and CED.

- 5+ years demonstrated experience in the field of Electronic Warfare systems, RADAR threat parameter analysis, threat/friendly order of battle (OOB) analysis, Specific Emitter Identification (SEI), and authoritative national data sources to include ONI, NASIC, NGIC, MSIC, NGA, DIA, and NSA.

- 5+ years demonstrated experience in the use of data query and visualization tools such as MS Excel.

- Ability to effectively communicate orally and in writing to produce finished products, liaise with current and potential customers, prepare and present briefing documents, charts, graphs, and presentations.

This support shall include:

- Subject Matter Expertise in Worldwide Order Of Battle Analysis to support production of data in the NIODB and derivative products. Specific expertise utilizing authoritative data sources (i.e., ONI/NASIC/NGIC/MSIC) required.

- Subject Matter Expertise in Tech-ELINT analysis to support production of sensor parameter data in NIODB and derivative products. Specific expertise utilizing authoritative data sources (i.e., DIA EWIR/NSA CED) required.

- Subject Matter Expertise in Own Force Data (OFD) platform/parametric analysis to support production of validated data in the NIODB and derivative products.

- Subject Matter Expertise in Surface Electronic Warfare (EW) threat libraries to support development of SLQ-32(V)6 Anti-Ship Missile Defense (ASMD) threat libraries. Operational SLQ-32(V)6 experience highly desired but not required.

- Subject Matter Expertise in Tech-ELINT analysis to support development of SLQ- 32(V)6 Surface EW Tactical Trainer (SEWTT) libraries. SLQ-32(V)6 and NCTE/LVC experience highly desired but not required.

- Subject Matter Expertise in Tech-ELINT analysis to support production of Subsurface EW threat libraries. Operational BLQ-10 expertise highly desired but not required.

Database / Web Application Software Development and Sustainment Support Contractors must hold the appropriate certification per Defense Federal Acquisition Regulation Supplement (DFARS) 48 Code of Federal Regulations (CFR) Parts 239 and 252 Record Identification Number (RIN) 0750-AF52 DFARS: Information Assurance Contractor Training and Certification (DFARS Case 2006-D023).

Candidate(s) will require privileged access to development and production systems and must be DOD-8570 Cyber Security Workforce (CSWF) Certified with specific certification of Security+ as a day one requirement. Within six months of assignment to task, software developers shall verify attained certification in currently supported Microsoft.Net Framework Web Application certification.

The following knowledge, skills and abilities should be considered the minimum requirements for this position:

- 5+ years demonstrated experience in the field of software development with preferred prior performance in Oracle Relational Database Management System (RDBMS) development, Simple Query Language (SQL), development/maintenance.

- 2+ years demonstrated experience in the field of software development with specific prior performance in MS.NET Application development/maintenance.

- 2+ years demonstrated experience in the field of software development with specific prior performance eXtensable Markup Language (XML) including the use of XML schemas and eXtensible (XSLT) Stylesheet Language (XSLT) to support parsing and import of external data products to an Oracle Relational Database Management System (RDBMS).

- Subject Matter Expertise in software application/database design to support production of Subsurface EW threat libraries (i.e., BLQ-10B). DOD 8570 CSWF certification: Security+ CE, MS .Net Framework

- Subject Matter Expertise in software application/database design to support development and maintenance of the SIPR NIODB. The NIODB is a Microsoft Web Forms / MVC front-end web application supported by a back-end Oracle Enterprise RDBMS. Specific requirements include:

- DOD 8570 CSWF certification: Security+ CE, MS .Net Framework

- Data architecture development for NIODB support to legacy and emerging systems

- Support current programming languages (i.e., C#, JQuery, Javascript, JSON, Angular) while advising of new technologies and industry trends.

- Support conversion of legacy data formats to modern/next generation (.i.e., .CSV,.XML,JSON)

- Support maintenance, security, and documentation of software installation and configuration base line.

- Support development and sustainment of NIODB workflow and quality assurance solutions in support of all IW Data Management functions/products.

- Support network configuration managers, system administrators, and information system security professionals to understand and document development environment requirements.

- Liaison with National and Service Organizations for incorporating new database formats into the Navy’s authoritative database.

- Support establishment and maintenance of an alternate NIODB site to sustain disaster recovery and continuity of operations.

- Support Testing, verification, and validation of data products and data management applications.

- Develop of Plan of Action and Milestones (POAM) and related documentation to support Fleet requirements and related IO capabilities.

- Support project management employing Agile and sprints as an iterative approach to deliver products/services faster and with less re-work.

- Subject Matter Expertise in software application/database design to support development/maintenance of the NIODB Desktop (stand-alone). The NIODB Desktop is a Microsoft .NET WPF application utilizing .XML data stores. DOD 8570 CSWF certification: Security+ CE, MS .Net Framework

3.2 Task II - Oracle Database Administration Support:

The contractor shall provide database administration and technical support, assistance, and training of the in-place and follow-on production and development instances of the NIODB Oracle Enterprise 12 RDBMS or higher. Contractors must hold the appropriate certification per Defense Federal Acquisition Regulation Supplement (DFARS) 48 Code of Federal Regulations (CFR) Parts 239 and 252 Record Identification Number (RIN) 0750-AF52 DFARS: Information Assurance Contractor Training and Certification (DFARS Case 2006-D023). Candidate(s) will require privileged access to development and production systems and must be DOD-8570 Cyber Security Workforce (CSWF) Certified with specific certification of Security+ as a day one requirement.

The following knowledge, skills and abilities should be considered the minimum requirements for this position:

- Microsoft Certified Solutions Associate (MCSA): Microsoft Windows Server

2008r2 or higher

- Oracle Certified Associate (OCA) certified professional with 10+ years demonstrated experience in the field of Oracle database administration to include:

- Ability to review application codes written by developers to ensure the programming codes compliance with security and performance best practices.

- Ability to advise and assist developers in writing efficient codes for Oracle database.

- Experience across all functionalities of database management - creating, upgrading, migrating, patching, implementing/mitigating DISA STIG requirements, backups, restoration and recovery, and performance tuning.

- Experience managing database objects/database design - writing stored procedures and database triggers; creating database objects and constraints for application requirement; implementing roles/privileges at the object level for separation of roles and duties, etc.

- Experience managing OS level performance tuning related to the database server.

- Ability to provide clear concise documentation of results.

- 5+ years demonstrated experience in the field of Data Requirements Analysis and Database Architecture design to support standardization, rationalization, data management, interoperability, database design and development, data standardization and maintenance, and data migration.

- Ability to effectively communicate orally and in writing with management, development teams, vendors, system administrators and other related service providers and customers.

- Support the NIWTG Norfolk N6 and N9 Directorates in the enforcement and compliance with Information Assurance policy (e.g., RMF, STIG)

- Provide data resource sustainment and support capability development of the Navy Information Operations Database (NIODB) as part of the Electronic Warfare Data and Reprogrammable Library Support Program.

- Support Oracle Database Administration of the Oracle RDBMS, DBA support to Web Application Developers and software engineers, and coordination support to the Information Assurance Manager (IAM).

- Create and maintain all databases required for the NIWTG Norfolk Excepted Network and support to EW Data and Reprogrammable Library development, testing, education, and production usage.

- Perform the capacity planning required to create and maintain the databases.

The DBA will work closely with system administration staff and EW Data software developers to support application development in addition to the Oracle Databases.

- Perform ongoing tuning of the database instances.

- Install new versions of the Oracle RDBMS and its tools and any other tools that access the Oracle databases.

- Support planning and implementing backup and recovery of the Oracle databases.

Support controlled migration of programs, database changes, reference data changes and menu changes through the development life cycle.

Perform database re-organizations as required to assist performance and ensure maximum uptime of the databases.

Document and implement standards to ensure all application design and code is produced with proper integrity, security and performance. The DBA will perform reviews on the design and code frequently to ensure the site standards are being adhered to.

Support evaluating releases of Oracle and its tools, and third party products to ensure that the site is running the products that are most appropriate. Planning is also performed by the DBA, along with the application developers and System administrators, to ensure that any new product usage or release upgrade takes place with minimal impact.

- Support enforcement and maintain database constraints to ensure integrity of the database. Administer all database objects, including tables, clusters, indexes, views, sequences, packages, and procedures. Assist with impact analysis of any changes made to the database objects.

- Troubleshoot problems regarding the databases, applications and development tools.

3.3 Task III – Information Warfare Training and ETARS support:

The contractor shall provide Information Warfare Training subject matter expertise, operations management, curriculum standards, and Electronic Training Assessment Reporting Service (ETARS) software engineering services and support for the NIWTG N8 mission.

ETARS Database / Web Application Software Development and Sustainment Support Contractors must hold the appropriate certification per Defense Federal Acquisition Regulation Supplement (DFARS) 48 Code of Federal Regulations (CFR) Parts 239 and 252 Record Identification Number (RIN) 0750-AF52 DFARS: Information Assurance Contractor Training and Certification (DFARS Case 2006-D023).

Candidate(s) will require privileged access to development and production systems and must be DOD-8570 Cyber Security Workforce (CSWF) Certified with specific certification of Security+ as a day one requirement. Within six months of assignment to task, software developers shall verify attained certification in currently supported Microsoft.Net Framework Web Application certification.

The following knowledge, skills and abilities should be considered the minimum requirements for this position:

- 5+ years demonstrated experience in the field of software development with preferred prior performance in Oracle Relational Database Management System (RDBMS) development, Simple Query Language (SQL), development/maintenance.

- 2+ years demonstrated experience in the field of software development with specific prior performance in MS.NET Application development/maintenance.

- 2+ years demonstrated experience in the field of software development with specific prior performance eXtensable Markup Language (XML) including the use of XML schemas and eXtensible (XSLT) Stylesheet Language (XSLT) to support parsing and import of external data products to an Oracle Relational Database Management System (RDBMS).

- Subject Matter Expertise in software application/database design to support development and maintenance of the SIPR ETARS hosted within the Navy Information Operations Database (NIODB) framework. The NIODB is a Microsoft Web Forms / MVC front-end web application supported by a back-end Oracle Enterprise RDBMS. Specific requirements include:

- DOD 8570 CSWF certification: Security+ CE, MS .Net Framework

- Data architecture development for NIODB support to legacy and emerging systems

- Support current programming languages (i.e., C#, JQuery, Javascript, JSON, Angular) while advising of new technologies and industry trends.

- Support conversion of legacy data formats to modern/next generation (.i.e., .CSV,.XML,JSON)

- Support maintenance, security, and documentation of software installation and configuration base line.

- Support development and sustainment of NIODB workflow and quality assurance solutions in support of all IW Data Management functions/products.

- Support network configuration managers, system administrators, and information system security professionals to understand and document development environment requirements.

- Liaison with National and Service Organizations for incorporating new database formats into the Navy’s authoritative database.

- Support establishment and maintenance of an alternate NIODB site to sustain disaster recovery and continuity of operations.

- Support Testing, verification, and validation of data products and data management applications.

- Develop of Plan of Action and Milestones (POAM) and related documentation to support Fleet requirements and related IO capabilities.

- Support project management employing Agile and sprints as an iterative approach to deliver products/services faster and with less re-work.

Electronic Warfare (EW) Training Subject Matter Expert Support Requirements:

- 10+ years demonstrated expertise in the field of Navy Electronic Warfare (EW).

- 8+ years demonstrated expertise in the field of Navy Instructional methodologies.

- Comprehensive knowledge of training curriculum standards and development.

- Ability to effectively communicate orally and in writing to produce finished products, liaise with current and potential customers, prepare and present briefing documents, charts, graphs, and presentations.

- Candidate will not require privileged access and will not be considered a member of the Cyber Security Workforce.

- Liaison with N84 staff to document, interpret, and analyze current and fielded EW training requirements. This support shall include:

- Review of individual and Fleet training to ensure synchronization with established doctrine/Tactics Techniques and Procedures (TTP).

- Assist the government in developing an EW Fleet Response Training Plan (FRTP) strategy to include POAM. POAM within 45 days of task order award.

The objectives are as follows:

- Establish specific EW training criteria and materials for Basic Phase and

Integrated Phase training (classroom, self-training, practical work-sheets, etc.)

- Establish specific measures of effectiveness (exams and certification materials)

- Establish instructions, curriculum, and methodology (instructor and student guides) for each training topic/lesson.

- Assist the government in adapting or extending available material, or developing new training methodologies and techniques as required in support of the EW FRTP training program.

- Conduct research and support revising current EW training courses and prepare appropriate training materials in support of the EW FRTP training program.

- Conduct initial validity and reliability studies and survey of EW a training plans.

- Assist the government in establishing evaluation and certification criteria as part of the EW training programs.

- Assist the government in preparing and modifying training materials and documentation. To be determined upon completion of the EW FRTP training strategy.

- Providing project guidelines and periodic review of progress (Monthly).

- Assist the government in developing exam materials. To be determined upon completion of the EW FRTP training strategy.

- Assist the government with End of Mission Reporting, and data base entry.

Cryptologic Training Subject Matter Expert Support Requirements:

- 10+ years demonstrated expertise in the field of Navy Cryptology.

- 8+ years demonstrated expertise in the field of Navy Instructional methodologies.

- Comprehensive knowledge of training curriculum standards and development.

- Ability to effectively communicate orally and in writing to produce finished products, liaise with current and potential customers, prepare and present briefing documents, charts, graphs, and presentations.

- Candidate will not require privileged access and will not be considered a member

- Liaison with N84/ staff to document, interpret, and analyze current and fielded

CRY training requirements. This support shall include:

- Review of individual and Fleet training to ensure synchronization with established doctrine/Tactics Techniques and Procedures (TTP).

- Assist the government in developing an CRY FRTP training strategy to include

POAM. POAM within 45 days of task order award. The objectives are as follows:

- Establish specific CRY training criteria and materials for Basic Phase and

Integrated Phase training (classroom, self-training, practical work-sheets, etc.

- Establish specific measures of effectiveness (exams and certification materials)

- Establish instructions, curriculum, and methodology (instructor and student guides) for each training topic/lesson.

- Assist the government in adapting or extending available material, or developing new training methodologies and techniques as required in support of the CRY FRTP training program.

- Conduct research and support revising current CRY training courses and prepare appropriate training materials in support of the CRY FRTP training program.

- Conduct initial validity and reliability studies and survey of the CRY training plans.

- Assist the government in establishing evaluation and certification criteria as part of the CRY training programs.

- Assist the government in preparing and modifying training materials and documentation. To be determined upon completion of CRY FRTP training strategy.

- Providing project guidelines and periodic review of progress (Monthly).

- Assist the government in developing exam materials. To be determined upon completion of CRY FRTP training strategy.

- Assist the government with End of Mission Reporting, and data base entry.

Operations Manager Support Requirements:

12+ years demonstrated expertise in the field of Information Operations and

Navy Electronic Warfare (EW).

Thorough working knowledge of database structure, analysis, and entry.

Thorough working knowledge of Knowledge Management systems and procedures.

A thorough working knowledge and experience in Fleet operational concepts and practices; as well as a working knowledge of command, control, communications and intelligence systems (C4I); and national systems and data bases.

Must have the ability to manage multiple projects and develop integrating strategies and plans in support of N84 FRTP mission objectives.

Comprehensive knowledge of training standards and development.

Ability to effectively communicate orally and in writing to produce finished products, liaise with current and potential customers, prepare and present briefing documents, charts, graphs, and presentations.

Candidate will not require privileged access and will not be considered a member

Support shall include:

Liaison with N84 leadership and staff in the administration and operations of N84 department.

Assist the government in maintaining N84 operations, scheduling and work flow.

Assist the government in the Integration and collaboration of department operations within the N8 directorate.

Assist the government in maintaining organizational structure and billet alignments.

Assist the government in maintaining EW and CRY training lab and classroom operations and modernizations.

Assist the government in establishing Fleet training and mission requirements.

Assist the government in the execution of N84 Knowledge Management program.

Assist the government in establishing instructor training requirements in support of N84 mission tasking.

Assist the government in Defense Travel System travel approval and voucher submission.

3.3 Task IV - Cybersecurity and Information Assurance Support:

The contractor shall provide Cybersecurity/Information Assurance administration and technical support, assistance, and training support. Candidate will require privileged access and will be considered a member of the Cybersecurity Workforce (CSWF) designated as a DoD 8570.01-M Information Assurance Technician (IAT) Level III (Enclave). The following knowledge, skills and abilities should be considered the minimum requirements for this position:

- CISSP/CISM/GSLC certification.

- 3+ years’ experience with Microsoft Windows Server 2008/2012.

- 3+ years’ experience with RHEL and/or Linux+ certified.

- 2+ years’ experience with HBSS.

- 1+ years’ experience with ACAS and/or Nessus.

- 2+ years A&A RMF experience and/or appointed as a Navy Validator.

This support shall include:

Cybersecurity Compliance:

Reviews, updates, validates and authors less than 200 Cybersecurity procedures (SOPs) as required.

Reviews and maintains an inventory of authorized software (software custodian) consisting of less than 500 items as required.

Reviews and maintains an inventory of less than 300 authorized external (USB) devices and media as required.

Audits and validates configurations deployed on less than 500 laptops, workstations, and servers as required.

Audits and validates configurations of less than 200 network devices based on Defense Information Systems Agency Security Technical Implementation Guides (DISA STIGs) quarterly.

Provides monitoring, and analysis of less than 700 laptops, workstation, servers and network audit logs weekly.

Ensures Antivirus is properly deployed and current signatures are implemented across the laptops, workstations and servers weekly.

Monitors, reviews and reports on data restoration capabilities weekly.

Cybersecurity Operations:

Host Based Security System (HBSS) management of no more than five (5)

HBSS servers to include:

Management and updating of HBSS Windows Server OS, and database components.

Upgrade ePolicy Orchestrator (ePO) server software and extensions from centralized patch repository.

Maintaining and documenting Data Loss Prevention (DLP), Host Intrusion

Prevention (HIPS) rulesets and exceptions.

Creation and modification of user permissions and/or roles.

Assured Compliance Assessment Solution (ACAS) application management of no more than five (5) ACAS servers to include:

Management and updating of ACAS Linux OS, and database components.

Creation, execution and analysis of scans.

Creation of queries, assets and baselines.

Creation and modification of user permissions and/or roles.

Vulnerability Remediation Asset Manager (VRAM) on unclassified and classified networks Basic system knowledge including ability to upload scan data.

Create, implement and maintain system baselines.

Acknowledge weekly Information Assurance Vulnerability Alerts, Bulletin’s and Management (IAVA’s, IAVB’s and IAVM’s)

Assessment and Authorization (A&A) Maintain and update all A&A documentation to ensure the relevancy and currency of IWTG Norfolk assets to include required revisions and updates in the Enterprise Mission Assurance Support Service (eMass).

Conduct comprehensive annual A&A package reviews to ensure continued compliance of the IWTG Norfolk Excepted / Legacy Networks.

Ensure traceability is maintained throughout the A&A packages (e.g.: A&A Plan, POAM, RMF Risk Assessment Report (RAR), Topology, Software, Ports Protocols and Services, Test Plan).

Maintain network and system documentation in Department of the Navy Application and Database Management Systems Integrated IT Portfolio Management-Department of the Navy /Department of the Navy Application and Navy Application and Database Management Systems.

Maintain documentation and registration of Network Ports, Protocols, and Services.

Maintain circuit registrations in Global Information Grid Information Assurance Portfolio (GIAP) and Secure/Non-Secure Access Point (SNAP).

Maintain and report on the status of all outstanding A&A items and supporting documentation.

As a member of the Configuration Control Board (CCB), ensures CCB approved changes are timely and accurately reflected in the A&A documentation.

Vulnerability Assessment and Remediation Support compliance validation of current and future directives (e.g.: IAVs, STIGs, CTOs).

Provide recommendations for corrective action of any non-compliant security controls.

Execute DISA STIG validations for systems in conjunction with A&A package reviews annually.

Provide security expertise to ensure security controls are implemented and the resulting documentation and artifacts are current.

Perform internal vulnerability testing and scanning monthly to assess the security posture using ACAS Prepare reports on scanning results and configuration management observations monthly.

Document assessment activities and results in sufficient detail to enable external review of all assessment processes, activities, results, and conclusions.

Contingency and Disaster Recovery Conduct and document a semi-annual table top exercise (two times) each calendar year.

Produce test plans, draft after actions and other documents for review and comment as needed.

Review and/or revise Business Impact Analysis (BIA) to include business process, IT dependency, and physical security assessments annually.

Review and analyze IT contingency / disaster recovery plans for NIST and

Department of the Navy compliance, and produce checklists for IT systems annually.

Assist with exercise and/or training and documentation of IT contingency plan and execution annually.

3.34 Task V - Systems Server Administrator Support:

The contractor shall provide technical support, configuration, operation, security, availability, backup, and updates for the web servers, database servers, developer and analyst workstations, and their associated images. The systems administrator shall also be responsible for management of additional N9 systems required to perform the mission as they are acquired. Candidate(s) will require privileged access to development and production systems and must be DOD-8570 Cyber Security Workforce (CSWF) Certified with specific certification of Security+ as a day one requirement.

- The following knowledge, skills and abilities should be considered the minimum o Minimum of a Bachelor’s in Systems Administration, Computer Science, Information Technology, or a related field.

o IT certifications in MCSE: Microsoft Certified Solutions Expert: Core Infrastructure and VMWare certified professional o 3+ years Systems administration experience to include management of web and database servers o 3+ years’ experience in VMWare or similar virtualization tools.

o Past performance preferred in administration of Oracle servers.

o 3+ years’ experience managing workstation configurations.

o Strong experience in automated systems management tools o Strong knowledge of backup and recuperation procedures

- The Systems Administrator (SA) shall manage the hardware, software, security, and backups of the web servers upon which the NIODB and N9 websites are made accessible to users. The activities include (but are not limited to): ensuring the web servers and all installed software are compliant with DoD STIGs, performing access management in accordance with least privilege, updating and patching server hardware and software, reviewing audit logs for security and performance, managing the release of web code on the server, and performing back-ups.

- The SA shall, in coordination with the Database Administrator (DBA), manage the hardware, software, security, and backups of the database servers upon which the NIODB and N9 databases reside. The activities include (but are not limited to): ensuring the database servers and all installed software are compliant with DoD STIGs, performing access management in accordance with least privilege, updating and patching server hardware and software, reviewing audit logs for security and performance, assisting the DBA with Oracle patches, and performing back-ups.

- The SA shall manage the software configuration of N9 workstations to include patch management, software installations, STIG compliance, image management, and performance upgrades.

- The SA shall coordinate with offsite partners to establish and maintain back-up servers at an offsite location to include ensuring that the back up webservers, database servers, and N9 workstation images are up to date with current configurations and compliant with all STIGs.

- The SA shall be responsible for developing and recommending a disaster recovery plan to ensure that NIODB web sites, databases, and workstations are continuously available with minimal to no interruption and maximum transparency to users.

- The SA shall provide the government with recommendation regarding hardware and software solutions to meet changing requirements and ensure the NIODB web servers, database servers, and workstations are equipped with the most up to date and relevant tools.

- The SA shall configure and manage N9 assets related to training missions including simulators and any additional hardware required to be used by N9 in completion of its mission.

4.0 OTHER

Travel Requirements Location # of Travelers # of Trips # Days

TASK I:

Point Mugu, CA 2 2 5 Dayton, OH 2 2 4 Dahlgren, VA 2 4 2 Huntsville, AL 2 2 4 Fairmont, WV 2 2 2 San Antonio, TX 2 2 2 Honolulu, HI 1 1 5 Everett, WA 1 1 5 San Diego, CA 1 1 5

TASK II:

San Antonio, TX 3 2 2

TASK III:

Honolulu, HI 2 3 5 Everett, WA 2 3 5 San Diego, CA 2 3 5

TASK IV:

None

TASK V:

None

4.1 Security: Contractor personnel working on-site shall possess a Top Secret clearance with SCI access as a condition of hire to support NIWTG services to include the following subtasks:

- Task I - Information Warfare Data Management and Navy Information

Operations Database (NIODB) Support

- Task II - Oracle Database Administrator Support

- Task III - EW Training and Curriculum development Support

- Task IV – Cybersecurity/Information Assurance Support

- Task V – Systems Server Administrator Support

The following special security procedures apply to administration and execution of this contract to ensure proper safeguarding of SCI:

NIWTG Special Security Officer (SSO) will review the SCI requirements of this

PWS prior to issuance of a DD Form 254.

NIWTG Contracting Officer’s Representative (COR), SCI clearance required, will coordinate with the SSO on all requests by the Contractor for access, storage and processing of SCI materials and assist the Contractor in obtaining Government services and support from the SCI community, as required for contract performance.

Contractor access to SCI shall be at Government facilities only.

Contractors do not require substantial access to SCI.

Contractors require entry and unescorted access to SCI areas.

Use or storage of SCI at contractor operated facilities is not required.

The Government contracting activity does not require access to SCI for contract award or oversight.

Contractor will receive classified documents for reference only; however, if any classified information is generated in performance of this contract, it shall be derivatively classified and marked consistent with the source material.

Contractor requires access to classified source data up to and including Top

Secret in support of the work effort. Any extracts or use of such data requires the contractor to apply derivative classifications and markings consistent with the source documents. Use of “Multiple Sources” on the “Derived From” line necessitates compliance with the NISPOM, paragraph 4-208a, and the use of a bibliography.

4.2 CONTRACTOR IDENTIFICATION: For all services provided under this PWS, the Contractor employee(s) shall identify themselves as Contractor personnel by introducing themselves or being introduced as Contractor personnel and displaying distinguishing badges or other visible identification for meetings with Government personnel. Additionally, contractor personnel shall identify themselves as Contractor employees in telephone conversations and in formal and informal written correspondence. The Contractor shall advise the Government on all changes in personnel (key or otherwise) during the performance of this effort. 30 days’ notice will be given prior to personnel changes being made by the Contractor and emphasis should be made to thorough and complete turnover from one member to the other.

4.3 GOVERNMENT FURNISHED EQUIPMENT/INFORMATION: The Government will provide access to current information and data on a case-by-case basis. For permanent on-site personnel, government furnished material will be provided as necessary to perform any assigned task. All material provided shall be considered the property of the Government and will be returned to the designated representative or technical point of contact (TPOC) upon completion of the task. For permanent on-site contract personnel, the Government will provide a workspace and normal office equipment needed to complete the task. Contractor shall protect DoD sensitive unclassified data regardless of the location or ownership of the transport media, including, but not limited to mobile computing devices and removable storage media; whether Government furnished or contractor owned/leased. The Contractor shall comply with all current information assurance, information security policies, procedures, and statutes applicable to DoD information technology; including the July 3, 2007 DoD CIO Policy Memorandum on Encryption of Sensitive Unclassified Data at Rest on Mobile Computing Devices and Removable Storage Media.

For contract personnel working at the vendor accredited facility/corporate office, the vendor will furnish material/work space as necessary to perform assigned tasks.

4.4 Place of Performance: Performance of these tasks will occur at the following locations:

Naval Information Warfare Training Group Norfolk, 1247 West C Street, Building

U-132, Naval Station, Norfolk, VA. 23511 Navy Information Warfare Training Group San Diego, 2790 Channel Lane Bldg.

3141, San Diego, CA. 92101 Navy Information Warfare Training Group San Diego, 335 Voight St. Bldg 335

San Diego, CA. 92135 (approval required) Vendor company accredited facility/corporate office

4.5 Period of Performance:

Base Yr: 28 SEP 2020 thru 27 SEP 2021 Opt Yr I: 28 SEP 2021 thru 27 SEP 2022 Opt Yr II: 28 SEP 2022 thru 27 SEP 2023 Opt Yr III: 28 SEP 2023 thru 27 SEP 2024 Opt Yr IV: 28 SEP 2024 thru 27 SEP 2025