RFP_Attach_1-PWS_Revised_11-2-15.pdf

SP3300-16-R-0016

RFP Attachment 1

PERFORMANCE WORK STATEMENT (PWS)

INFORMATION TECHNOLOGY (IT) SUPPORT SERVICES

FOR

Local Area Networks and Wide Area Networks for DLA J6 Activities

SECTION 1 INTRODUCTION

DLA, Enterprise Information Services (EIS), Network and Telecommunications Services (NTS)- is responsible for the configuration management of LAN architecture and infrastructure, including interfaces with other DLA and DoD wide area networks (WANs), such as the DISA Non- Classified IP Router Network (NIPRNET), Secure IP Router Network (SIPRNET). Additionally, DLA NTS is required to provide voice and data telecommunications fact sheets, executive summaries, white papers, policies, guidelines, specifications, baselines, and operational procedures applicable all of DLA., To prepare this type of documentation, it is typically necessary not only to write the documents, but also to find various references and perform research.

DLA-J6 maintains and manages IP address space used at all DLA locations. IP addresses are assigned to network connected DLA end-user devices such as PCs, servers, printers, print servers, scan guns, etc. so that these devices cannot only communicate with their respective LANs and WANs, but also so that these devices can exchange data and information with other network connected devices. Each individual network connected device is assigned its own unique IP address when connected to a DLA network.

As DLA networks are able to support higher speeds and provide greater transport and transmission capacity, it will be possible for DLA to support network application software with enhanced feature sets and capabilities. DLA-J6 data networks for near and distant future must be able to support voice, video, multimedia, and text-only-based applications, some of which have real-time access and use requirements - e.g., voice over IP (VoIP) or Internet telephony, etc. These new LAN-based network configurations include wireless LAN components (based on the IEEE 802.11 standard).

The work performed and completed by this performance work statement shall be for a period of one (1) base year with one, six-month option period, following contract award, and shall be limited to the technical support area of data telecommunications. Voice telecommunications tasks and projects shall be limited to voice applications supported by data telecommunications networks for the same period of performance. Projects and tasks identified by this performance work statement may require the contractor to travel to other DLA, and/or DoD locations, but only when approved by the COR or KO.

SCOPE OF WORK 1.1

The Contractor shall provide all personnel, equipment, transportation, cell phones, supervision, and other items/services (other than those designated as Government-furnished per Section 4, Government- Furnished Property (GFP), Systems, Training and Support Services) necessary to perform LAN and WAN Support Services as defined in this PWS.

DLA- requires contract support services for the following: I ) Data and voice telecommunications' projects and initiatives; 2) Secure and non-secure Local Area Network (LAN) telecommunications' architecture and infrastructure interfaces, including interfaces with other DLA and Department of Defense (DoD) networks; and 3) Telecommunications and networks, configuration, installation, maintenance, planning, engineer design, documentation, and training.

This is a non-personal services contract to provide LAN and WAN support services. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn, is responsible to the Government. The Government and the Contractor understand that the services to be provided under this contract by the Contractor are non-personal services and that no employer-employee relationship exists between the Government and the Contractor. The Government may provide technical direction which will assist the Contractor in accomplishing the PWS; however, the Government will not control the methods used by the Contractor to perform the service requirements set forth in the PWS.

GENERAL OPERATING CONDITIONS 1.2

This Section provides general information relating to the conditions of operation and general requirements relating to the IT support services required.

A. The Contractor shall perform services required under this PWS in accordance with the Duty Hours identified in the PWS except Federal holidays and base closures.

B. Work shall be performed on site in New Cumberland, PA as determined by the Contracting Officer's Representative (COR). Travel may be required for supporting listed tasks in the PWS . The Senior Telecommunications Project Manager has historically travelled 40% of the productive year and the Senior Network Engineer has travelled 15% of the productive man year. The COR or Alternate COR (ACOR) will provide a two (2) week notification for all required travel and a two (2) week notification of any deviation from a pre-arranged travel schedule when possible. Contractor personnel shall be required to hold a passport during the duration of this contract.

C. Travel shall be required for the duration of this contract to CONUS and OCONUS locations. Travel will be approved by the COR. Travel costs will be paid for in accordance with the Joint Travel Regulations (http://www.defensetravel.dod.mil/site/perdiemCalc.cfm).

1.2.1 PERIOD OF PERFORMANCE

A. The period of performance for this contract action will be for one (1) base year with one, six-month option period.

1.2.2 FEDERAL HOLIDAYS

A. Federal holidays generally observed by government personnel include:

YRE4392

Highlight

Observed Federal Holidays

New Year’s Day Martin Luther King Day

Presidents Day Memorial Day

Independence Day Labor Day

Columbus Day Veterans Day

Thanksgiving Day Christmas Day

B. In the event an Executive Order issued by the President of the United States declares Agencies of the Federal Government closed for a regularly scheduled workday, the Contracting Officer (KO) or Contracting Officer’s Representative (COR) will determine and advise the Contractor on whether services are required for that day.

1.2.3 VISITOR CONTROL

A. Authorized visitors to the Contractor shall obtain approval from the host Law Enforcement and Security Office for entrance to the host installation. The Contractor shall submit a DLA Form 1818, “Visitor Request Form” or equivalent to the KO or designee at least one (1) week in advance for all planned off-base visitors and at least 24 hours in advance for all unscheduled visitors.

B. The Contractor shall develop specific procedures for identification (ID) and control of all visitors to warehousing and administrative areas and submit to the KO or designee for acceptance. The Contractor’s procedures shall include the following:

1. Positive methods of establishing the authority for admission of visitors, as well as any limitations concerning access.

2. Positive identification of all visitors by means of personal recognition, visitor security badge, visitor permit, or other identifying credentials. The Contractor shall contact the employee, supervisor, or officer in charge to ascertain the validity of the visit.

3. Using the DLA Form 584 “Visitor Register” or Contractor equivalent form to provide a record of the identity of the visitor, the time and the duration of the visit, and other pertinent control data.

The Contractor may use an automated system instead of the DLA Form 584 provided the system records, at a minimum, the same data included on the DLA Form 584. The Contractor shall establish procedures for recovering any visitor security badges, visitor permits, or other identifying credentials at the completion of the visit.

C. Foreign Visits. The Contractor shall not allow visits from foreign nationals to the DLA sites without the written approval from the KO or designee. A foreign national is defined as a person who is not a citizen or national of the United States. If approval is obtained, the Contractor shall follow the instructions for coordinating the visit IAW DLAI 4303, Foreign Visits and Disclosure Program.

COMPUTING ENVIRONMENT (CE) AND OPERATING SYSTEMS 1.3

• The following list identifies the computing environment (CE), operating systems and data systems for which the Contractor shall be required to provide support (or use) which includes but is not limited to:

• Microsoft Windows7 Enterprise workstations.

• Cisco and Enterasys networking equipment (routers, switches and access points).

• Motorola Radio Frequency (RF) handhelds and mobile mounted terminals.

• BMC/Remedy Incident and Asset Management System

• NetScout Sniffer Technologies Infoblox DNS and DHCP Management Greatbay Beacon

Endpoint Profiler

PERSONNEL QUALIFICATIONS AND CERTIFICATIONS 1.4

1.4.1 SENIOR TELECOMMUNICATIONS PROJECT MANAGER

• Knowledge of Government special wiring requirements, Telecommunications Industry Association/ Electronic Industries Alliance (TIA/EIA) Structured Cabling Standards and infrastructure.

• Knowledge of LAN/WAN transmission media, twisted pair, fiber optic, radio frequency, cabling standards and connectors.

• Ability to create documents utilizing Microsoft’s Office Suite.

• Knowledge of industry best practices involving Local Area Network /Wide Area Network

(LAN/WAN) Design.

• Have experience and/or be able to use Microsoft Word, Microsoft Excel, Adobe Acrobat, Microsoft PowerPoint, Microsoft Visio, Microsoft Access, AutoCAD and html-based software to create, maintain, and deliver documentation required by this PWS.

• Shall have and be able to exhibit excellent communications skills, both writing and speaking, to properly and appropriately interact with DLA, NTS staff, the DLA Information Technology Operations Center (ITOC), and DISA.

• Ability to research DOD/DLA regulations and policies concerning the DIACAP accreditation.

Evaluates DLA, NTS Information Security System posture and develops and recommends enhancements that balance security and user requirements.

• Ability to verify that all network connections are connected in accordance with DOD and DLA policy.

1.4.1.1 HISTORICAL LABOR CATEGORY INFORMATION - SENIOR

TELECOMMUNICATIONS PROJECT MANAGER:

Historically, the Senior Telecommunications Project Manager has performed the following general LAN & WAN support functions annually. These percentages are subject to change dependent upon the current LAN and WAN support needs of NTS.

• Travel on-site ISP/OSP site surveys and non travel ISP/OSP site surveys 40%

• Remedy Tickets - 20%

• Meetings - 10%

• Review Drawings - 20%

• Update Diagrams/ Drawings - 10%

1.4.2 SENIOR NETWORK ENGINEER

• Experience with Network General/NetScout Sniffer Technologies.

• Experience with Infoblox Domain Name Services (DNS)/Dynamic Host Configuration Protocol

(DHCP) or other network management software.

• Experience with Hewlett Packard Network Automation (HPNA).

• Experience with CA Technologies eHealth.

• Experience with Greatbay Beacon End Point Profiler.

• Experience with:

• Authentication, Authorization and Accounting (AAA)

• Network Access Control List (ACL)

• Spanning Tree Protocol (STP)

• IEEE 802.1Q Virtual LANs (VLANs)

• Multiple Spanning Tree Protocol (MSTP)

• Link Aggregation Control Protocol (LACP)

• IEEE 802.1X Port-based Network Access Control (PNAC)

• Quality of Service (QoS)

• In depth knowledge of Transmission Control Protocol/ Internet Protocol (IP)

• User Datagram Protocol (UDP)

• IP Addressing (IPv4 and IPv6)

• IP multicast

• Internet Group Management Protocol (IGMP)

• IGMP Snooping

• Protocol-Independent Multicast (PIM)

• VPN (Virtual Private Network)

• Dynamic Host Configuration Protocol (DHCP)

• DHCP snooping

• Domain Name System (DNS)

• IEEE 802.11 Wireless Local Area Network (WLAN)

• Wireless Intrusion Detection System (WIDS)

• Voice over IP (VoIP)/ IP telephony

• Local Area Network (LAN)

• Wide Area Network (WAN)

• LAN border protection.

• Firewalls

• Intrusion Detection/ Protection Systems (IDS/ IPS)

• Demilitarized Zones (DMZ)

• Knowledge of IEEE 802.x networking standards.

• Knowledge of LAN/WAN hardware and protocols.

• Knowledge of LAN/WAN transmission media, twisted pair, fiber optic, radio frequency, cabling standards and connectors.

• Ability to configure and troubleshoot network equipment.

• Experience with network equipment, to include Cisco routers and Cisco, Brocade and/or

Enterasys switches.

• Ability to Troubleshoot hardware and software problems related to desktop computers, print servers, Handhelds, tablets, computers and printers.

• Ability to identify and resolve hardware/software/network malfunctions.

• Have experience and/or be able to use Microsoft Word, Microsoft Excel, Adobe Acrobat, Microsoft PowerPoint, Microsoft Visio, Microsoft Access, AutoCAD and html-based software to create, maintain, and deliver documentation required by this PWS.

• Ability to analyze, diagnose, recommend and implement solutions for hardware, software and network problems.

• Ability to research DOD/DLA regulations and policies concerning the DIACAP accreditation.

Evaluates DLA, NTS Information Security System posture and develops and recommends enhancements that balance security and user requirements.

• Ability to verify that all network connections are connected in accordance with DOD and DLA policy.

• Provide input for IT-COOP (Information Technology-Continuity of Operations) and Incident Response Plan.

1.4.2.1 HISTORICAL LABOR CATEGORY INFORMATION - SENIOR NETWORK

ENGINEER

Historically, the Senior Network Engineer has performed the following general LAN & WAN support functions annually. These percentages are subject to change dependent upon the current LAN and WAN support needs of NTS.

• Tier 3 network support/ SME/ Trouble tickets - 60%

• On-site network refreshes and non-travel network refreshes 15%

• Run Sniffer traces - 15%

• Configure network devices - 10%

1.4.3 All contractor personnel must be proficient in reading and capable of communicating effectively in English.

1.4.4 Contractor personnel performing tasks under this PWS shall have appropriate level DoD 8570 IT level certifications for information assurance technical (IAT) and appropriate level

DLA approved computing environment (CE) certification(s) as identified in table 2.4.1, IAT and CE certification requirements.

Table 1, IAT and CE Certification Requirements

Approving Authority

Functional/ Support Type Certification Requirement

DoD Approved IAT Level 2 Baseline Certifications

Network Administrator

GSEC, Security+, SCNP, SCNA Personnel performing work must have and maintain at least (1) certification at IAT level 2.

DLA Approved

CE

Certifications

Network Administrator

BCNA, BCNE, CCSE NGX, CCNA, CCNP,

CCIE, CCSP, SCNA, CCSE NGX Plus NG with AI, CCMSE NG with AI, CSMSE NG with AI Plus VSX, NSA, ESE, ECIE-C

Personnel performing work must have and maintain at least (1) CE from the list. CE requirements depend on the Functional/ Support Type being performed.

NOTE: Refer to Section 3.2 for Acronym Definitions

1.4.5 All tasks performed under this PWS are categorized under information assurance technical (IAT) level II positions as outlined in DOD 8570.01-M. no waivers or extensions will be provided for mandatory DOD IA or DLA CE certification requirements. Contractor personnel who fail to maintain the required certifications are subject to ko directed removal for performance under section 1.2.2 of the PWS.

1.4.6 Personnel assigned to or utilized by the contractor in the performance of this contract shall possess the qualifications and skills set forth and shall be fully capable of performing in an efficient, reliable, and professional manner. If the KO or COR questions the qualifications or competence of any person performing under the contract, the burden of proof that the person is qualified as prescribed herein shall be upon the contractor.

1.4.7 The Contractor shall be responsible for obtaining all necessary licenses and certifications and for complying with all applicable Federal, State, and local laws. The Contractor shall maintain updated copies of any applicable licenses and certifications for all employees and provide copies to the COR.

1.4.8 PERSONNEL CLEARANCE

A. The Homeland Security Presidential Directive 12 (HSPD-12) dated 27 August 2004 has established criteria for contractors who require a Common Access Card (CAC) for either physical access to a U.S. Government controlled installation or access to government information technology (IT) systems. The Government requires Personnel Security Investigations (PSI) to establish that applicants or incumbents either employed by the Government or working for the Government under contract are suitable for the job and/or are eligible for a public trust position. These positions have been designated as IT-I and require a Secret clearance. Contractors shall be required to provide appropriate background investigation for IT-I with Secret clearance as required in accordance with DoD 5220.22-M, “National Industrial Security Program Operating Manual” (NISPOM) and DoD 5200.2-R. The appropriate background investigation for IT-I with Secret clearance is a Single Scope Background Investigation (SSBI). The contractor shall forward their employee clearance information to:

DLA Intelligence at Columbus: DSCC.PersonnelSecurity@dla.mil

B. The provisions outlined above apply to the prime contractor and any subcontractors the prime contractor may employ during the course of this contract. No contractor personnel performing sensitive duties shall be allowed to commence work on this effort until his or her trustworthiness has been favorably adjudicated.

C. All personnel employed by the Contractor in the performance of this contract, or any representative of the Contractor entering a U.S. Government installation, shall abide by all security regulations and policies of the installation including access badges, parking, access to controlled or restricted areas, classified information, controlled unclassified information, data and IT resources. The KO has the authority to order the removal of contractor personnel for cause.

D. DLA reserves the right to direct the removal of an employee, whose actions, while assigned to this contract, clearly conflict with the interests of the Government, regardless of prior clearance or mailto:DSCC.PersonnelSecurity@dla.mil adjudication status. DLA also reserves the right to direct the removal of an employee for misconduct, security violations, or performance reasons. The reason for removal shall be fully documented in writing by the Contracting Officer. When and if such removal occurs, the contractor shall assign qualified personnel to any vacancy(s) thus created within 10 working days. This action does not relieve the contractor from total performance of the contract tasks specified herein.

E. Contractor shall return all government issued identification, access badges, and vehicle passes to the KO or COR upon termination of service.

F. The provisions outlined above apply to the prime contractor and any subcontractors the prime contractor may employ during the course of this contract. No contractor personnel performing sensitive duties shall be allowed to commence work on this effort until his or her trustworthiness has been favorably adjudicated.

G. Not later than 15 calendar days prior to contract full performance start date, the Contractor shall provide the KO or COR a roster of all personnel, to include those requiring access to restricted or controlled access areas. The roster shall include each employee’s full name, Social Security number, identification card number (if assigned), branch or section (if applicable), and security clearance (level of clearance and last investigation date, if applicable). The Contractor shall provide additions to rosters and an updated roster to the KO or COR at least five working days prior to the date of required access. The Contractor shall make all modifications to the rosters and provide an update to the KO or COR within 12 hours for employees whose employment has been terminated and for employees who no longer require access to restricted or controlled access areas.

1.4.9 DOD COMMON ACCESS CARD (CAC)/ACCESS IDENTIFICATION BADGE (ID

BADGE)/ELECTRONIC KEY CARD

A. Every Contractor employee shall obtain and possess a DoD Common Access Card (CAC) and an Access ID Badge as required. Upon favorable review and initiation of the PSI to establish the suitability of an employee for the job and the approval for temporary Automated Information System (AIS) access pending final adjudication of the PSI, the Contractor shall submit to the KO a request for the DoD CAC and ID Badge.

B. The Contractor shall safeguard CAC and ID Badges furnished to them. Contractor employees shall not share CAC and ID Badges. Each Contractor employee shall wear the ID Badge conspicuously on his or her outer clothing above the waist at all times while working on the installation. Personnel may be challenged and removed from the work area or denied access to the host installation if the ID Badge is not worn.

C. In the event that a Contractor employee damages or loses his or her CAC and ID Badge, the

Contractor shall report the lost or damaged CAC and ID Badge within two (2) working hours of damage or loss to the KO or COR who will arrange for a replacement CAC or ID Badge. The Government will issue the Contractor employee a temporary ID Badge to be used for an eight to ten (8-10) working day waiting period until a new permanent ID Badge is issued. The Contractor shall return all government-furnished CAC or ID Badges to the Government either within one (1) working day of the completion of the contract or upon termination of an individual’s employment, whichever comes first. Contractor personnel failing to return their Government CAC or ID Badge are subject to criminal charges under USC Title 18, Chapter 1, Section 499 and 701.

D. The KO or COR will provide and maintain electronic key cards for the security access system. The electronic key card allows access to specific controlled areas of the facilities. The KO or COR will approve and provide the electronic key cards to the Contractor for access to the facilities.

1.4.10 INFORMATION SYSTEM SECURITY

A. Upon favorable review and initiation of the PSI to establish the suitability of an employee for the job and the approval for temporary AIS access pending final adjudication, but not less than forty five (45) calendar days prior to the full performance commencing employee’s start date, the Contractor shall request Information Technology (IT) eligibility for an employee requiring access and passwords to the government-furnished data systems. All positions involving computer activities require a minimum IT I category eligibility. The Contractor shall submit a Contractor Investigative Request (CIR) and a DD Form 2875 for temporary IT I eligibility, with final eligibility contingent upon receiving a favorably adjudicated background investigation.

B. All Contractor personnel provided with access to government-furnished computers and systems shall observe local AIS security policies and procedures as provided by the KO or COR. The Contractor shall notify the KO or COR within 12 hours when, for reasons of personnel resignation, reassignment, termination, or completion of portions of the contract, Contractor personnel no longer require access to government systems.

C. The Contractor shall observe all copyright agreements. In the interest of protecting Government systems from computer viruses, the Contractor shall not use public domain software nor shall Contractor personnel download software from public bulletin boards or Internet websites. The Contractor shall use only commercial off-the-shelf (COTS), Contractor-developed, or Government-furnished software in performance of the contract requirements. Should the introduction of a computer virus or malicious destruction of computer software, stored information, or hardware result from the use of public domain software or from software taken from a public bulletin board or Internet website, the Contractor shall be required to repair the damage and incur all costs at no expense to the Government and without impact on delivery schedules.

1.4.11 CONTACT OF A SUSPICIOUS NATURE

A. Contractor personnel who have been contacted under suspicious circumstances shall report that contact immediately, either verbally or in writing, to their supervisor who shall report it within two

(2) hours to the KO or COR for action. Key contacts for reporting purposes are defined as:

1. Contact with an individual (regardless of nationality) that suggests to the Contractor employee that an intelligence gathering or terrorist organization may have targeted him or her for possible intelligence exploitation.

2. A request by anyone (regardless of nationality) for illegal or unauthorized access to classified or unclassified sensitive information.

3. Contact with a known or suspected intelligence officer from any country.

4. Contact with a foreign diplomatic establishment, whether in the U.S. or abroad, for personal or official reasons. Certain Contractor personnel in positions designated as “sensitive” by the Government may also be required to inform their chain of command in advance of the nature and reason for contacting a foreign diplomatic establishment or travel to countries on the State Department list whose interests may be adverse to the United States.

B. Additionally, Contractor personnel who have information about activities pertaining to espionage, terrorism, unauthorized technology transfer, sabotage, sedition, subversion, spying, treason, unauthorized release of classified or unclassified controlled information, or unauthorized intrusions into automated information systems shall report that information immediately to the KO or COR for action.

1.4.12 VEHICLE REGISTRATION

A. The Contractor shall ensure that Contractor employee vehicles to be driven on the New Cumberland, PA host installation, to include motorcycles, are registered with the host installation security office and are in conformance with local regulations in effect at the time of registration and as long as employed by the Contractor. The Government will not permit access to the host installation without proper vehicle identification and registration. Evidence of a valid driver’s license, vehicle registration card, and insurance are required for registration. Contractor employees shall maintain current registration and proof of insurance on all privately-owned vehicles (POVs) brought on host installation.

1.4.13 PARKING AND TRAFFIC CONTROL

A. The Contractor and its employees shall abide by host installation parking regulations. All vehicles shall be parked in designated parking areas only. The Contractor and its employees shall conform to Federal, State and host installation driving regulations.

1.4.14 SAFEGUARDING INFORMATION

A. The Contractor shall not allow access or disclosure of information regarding the operations of DLA to any government agency, non-government agency, or individual unless specifically authorized by the KO or COR. The Contractor shall provide documents and files requested by such parties to the KO or COR within one hour of receipt of the authorized request.

B. The Contractor may be required to access data and information that is proprietary to a government agency or contractor or that is of such nature that its dissemination and use other than as specified in this contract would be adverse to the interests of the Government or others. The Contractor and its personnel shall not divulge or release data or information developed or obtained under performance of this contract except to government personnel who are authorized to receive the information or upon written approval of the KO or COR. The Contractor shall not use, disclose, or reproduce proprietary data that bears a restrictive legend other than as specified in this contract.

C. Disclosure of information regarding operations and services of DLA to persons not entitled to receive it, or failure to safeguard any classified information that may come into the Contractor’s control in connection with work under this contract, may subject the Contractor, its agent, or its employees to criminal liability under USC Title 18, Crimes and Criminal Procedure, Part I, Crimes, Chapter 37, Espionage and Censorship, Sections 793, Gathering, Transmitting or Losing Defense Information, and Section 798, Disclosure of Classified Information. Neither the Contractor nor its employees shall disclose or cause to be disseminated any information concerning the operations of the activity which could result in, or increase the likelihood of, the possibility of a breach of DLA’s security or interrupt the continuity of DLA’s operation.

1.4.15 POTENTIAL OPERATIONAL CONSTRAINTS

A. Force Protection Conditions (FPCONs) may affect access to the host installations and DLA facilities.

The FPCON is established by the host installation or higher national command authorities, and the Installation Commander is responsible for implementing the proper response to progressive levels of terrorist threats. FPCONs are normally displayed at most entrance gates, building entrances and office entrances. The Contractor shall adhere to and operate IAW any restrictions imposed as a result of a FPCON. Measures implemented under the various levels of terrorist threat may impact the Contractor’s normal operational approach to IT support services. The Contractor shall ensure that IT support services are sustained during heightened security measures.

ENVIRONMENTAL, SAFETY, AND OCCUPATIONAL HEALTH (ESOH) 1.5

A. The Contractor shall formulate and maintain a written safety and health plan and make available to the Government upon request. The written plan shall include the details of the Contractor’s responsibilities, method of program implementation, and how hazards and deficiencies shall be identified and corrected. It shall detail Contractor personnel responsibilities for: protection of Government property and safety of others, personnel responsibilities for reporting all mishaps, and establish procedures for reporting to correcting unsafe conditions, hazards, or practices. The Contractor shall have a central POC for safety and health related issues. The POC shall be identified in writing to the KO or COR.

B. The Contractor shall ensure employees have safety education when engaged in activities involving Government facilities, personnel, or equipment.

C. The Contractor shall notify the KO or COR immediately after the occurrence of all accidents and incidents resulting in either personal injury, loss of life, impact to the environment or property damage to a government facility or equipment. The Contractor shall submit a completed copy of DLA Form 1591 and supplemental information within four (4) working days of the accident or incidents.

D. The Contractor shall require their personnel to wear personal protection equipment (PPE) (i.e. safety shoes or safety boots, hearing protection, eye protection, gloves, safety harnesses) during the performance of this contract in accordance with OSHA standards. The Government will not be responsible for furnishing or paying for the cost of PPE.

E. The Contractor shall comply with all federal, state, and local environmental laws to include but not limited to Resource Conservation and Recovery Act (RCRA), Safe Water Drinking Act (SWDA), the Clean Air Act (CAA), and Federal Facilities Compliance Act (FFCA).

F. The Contractor shall inform personnel DLA Distribution is in the process of pursuing recognition under the Occupational Safety and Health Administration's (OSHA) Voluntary Protection Program

(VPP).

1. The Contractor shall inform personnel DLA Distribution is in the process of pursuing recognition under the Occupational Safety and Health Administration's (OSHA) Voluntary Protection Program (VPP).

2. A key element of VPP is to ensure our contractor employees are afforded the same safe and healthful work environment as DLA personnel. The Contractor is not required to "certify" to VPP, but employees must be aware of the VPP and DLA Distributions efforts towards the recognition. The Contractor is responsible for their own safety and health programs but should adhere to the tenets of VPP: Management Leadership and Employee Involvement; Worksite Analysis; Hazard Prevention and Control Safety and Health Training. Detailed information on VPP is available on the OSHA website at http://www.osha.gov/dcsp/vpp/index.html.

G. The Contractor shall contact the Installation Radiation Safety Office before bringing any radioactive source or device that produces radiation when operated for approval.

PHASE-IN PERIOD 1.6

A. A phase-in period may be required to allow for a smooth and orderly transfer of the IT support services from an incumbent Contractor to a new Contractor or during new initial Contractor support startup to include Government provided training. The Contractor shall participate in the phase-in period during which time the incumbent Contractor shall continue to perform the IT support services.

B. The phase-in period shall begin at the effective date of the contract and shall not exceed one (1) month, at which time full performance shall commence.

C. Within five (5) calendar days from the effective date of the contract, the Contractor shall complete all required hiring actions for the Team Lead. Within 20 calendar days of the effective date of the contract, the Contractor shall complete all hiring actions for personnel required to perform the requirements of the Contract and complete any associated training and certification requirements. The Contractor shall ensure that all new employees are trained and ready to begin working on the first day of full performance.

PREPAREDNESS EXERCISES 1.7

A. As directed by the KO or COR, the Contractor shall participate in preparedness exercises relating to security disaster preparedness and response, wartime response, and emergency and environmental and similar preparedness exercises.

B. The Contractor shall participate in emergency and recall notification and personnel accountability exercises. The Contractor shall establish emergency notification and recall and personnel accountability procedures in accordance with DoDI 3001.02, Personnel Accountability in Conjunction with Natural or Manmade Disasters, and test those procedures twice a year when directed by the KO or COR. During the exercise, the Contractor shall determine the status and whereabouts of assigned personnel, report the status of each Contractor employee to the KO or COR within established timelines, and continue to report periodic status until further direction by the KO or COR. The Contractor shall follow their personnel accountability procedures in the event of a real emergency as directed by the KO or COR.

CERTIFICATION AND ACCEPTANCE 1.8

A. The KO or COR is designated as the point of final inspection and acceptance by the Government of all items and services required by the contract.

http://www.osha.gov/dcsp/vpp/index.html

SECTION 2 DEFINITIONS

DOD DICTIONARY 2.1

A. The DoD Dictionary of definitions and terms is available on the Internet at:

http://www.dtic.mil/doctrine/dod_dictionary/.

SECTION 3 GOVERNMENT-FURNISHED PROPERTY (GFP), SYSTEMS,

TRAINING AND SUPPORT SERVICES

GENERAL INFORMATION 3.1

A. The Government will provide access to resources and information to include Government transactional data systems required in the performance of this PWS. This includes all Hardware and software needed in any required repairs of automated data processing equipment.

B. The Government will furnish on-site training for unique Government systems (GOTS) in performance of this PWS.

C. The Government may require Contractor personnel attend mandatory on-site or off-site training on DLA’s IT equipment, systems and/or network environment. The Government will be responsible for instructor costs associated with this Government-furnished training. The Government will reimburse the Contractor for travel costs allowed under FAR Part 31.205-46, Travel Costs for attending Government-furnished off-site training.

D. The Government will provide on-site office space with furniture, to include computer and network printer, office supplies and desk telephone.

E. The Government will provide all materials; equipment or supplies (i.e. lift equipment, tools and parts) that contractor personnel will need to perform this requirement.

F. At no cost to the Contractor, the Government will furnish the services to be used exclusively to perform the requirements of this contract that include custodial services, refuse and recycling collection, government forms, emergency medical services, police and fire protection, telephone and utilities.

SECTION 4 CONTRACTOR RESPONSIBILITY FOR EQUIPMENT AND TRAINING

CONTRACTOR-FURNISHED TRAINING 4.1

All training required to update and/or maintain professional certifications shall be provided and paid for by the Contractor.

A. The Contractor shall provide training (not designated as Government furnished) which may be required for Contractor personnel to comply with the contract requirements. The Contractor shall be responsible for all costs associated with this training. The Contractor shall maintain copies of training records, designation letters and certificates on site and make them available for the KO or COR to review upon request. The training records shall include, at a minimum, the name of the employee, the http://www.dtic.mil/doctrine/dod_dictionary/ name of the course, the source of the training, a description of the training provided and the date the employee successfully completed the training. The Contractor shall furnish the following training:

1. INFORMATION ASSURANCE (IAT) TECHNICAL TRAINING:

Contractor personnel performing tasks associated with this PWS that will be performing an IA function shall be trained and certified in accordance with DoD Directive 8570.1 Information Assurance Training, Certification, and Workforce Management and DoD 8570.1-M Information Assurance Workforce Improvement Program. IA functions are defined in chapters 3 and 4 of the DoD 8570.1-M. Contractor personnel performing IA functions on this contract shall be certified at the appropriate IAT Level as demonstrated by maintaining one (1) of the DoD approved certifications posted on the Defense Information Systems Agency (DISA) Information Assurance Support Environment (IASE) website (http://iase.disa.mil/eta/iawip/). The website provides a list of approved certifications for personnel performing IA functions that meet baseline IA certification requirements. Contractors may maintain any of the approved certifications to meet the applicable certification requirements for each associated level.

2. COMPUTING ENVIRONMENT (CE) TRAINING:

In addition to DoD IA baseline certification requirements, Contractor personnel shall maintain appropriate Computing Environment (CE) certifications for the operating system(s) and/or security related tools/devices being supported under this contract. Contractor personnel should maintain CE certifications for all tools, systems and devices being supported; however, at a minimum, Contractor personnel shall maintain a certification in the functional area(s) they spend the most time supporting (i.e. Windows7 certification for Desktops/End User Support, Cisco/ Enterasys/ Brocade certification for Networking, Windows 2008 for System Administration).

See the DLA approved list of CE certifications in Table 2.4.1, IAT and CE Requirements. The approved CE list will be periodically updated to ensure relevant or expired industry standard certifications are added or removed as applicable to the CE or as directed by DoD policy. The Contractor shall identify personnel performing IA functions identified in the PWS prior to that employee commencing any work under this PWS and provide documentation to the KO or COR showing the employee’s certification(s) and certification status. The Contractor shall demonstrate that they have a process to track certification status of employees to ensure certifications are current or to replace departing employees with employees possessing current certifications in a manner that will not cause program interruption. Contractor personnel shall be required to sign the User Access Agreement, Privileged Rules of Behavior, and General Rules of Behavior and non-Disclosure agreement prior to working on any government system(s).

3. SECURITY TRAINING. To ensure that all Contractor employees know and understand regulations and policy pertaining to physical, information, operations and personnel security, the Contractor shall provide security and antiterrorism training to all employees in accordance with applicable DOD regulatory requirements. At a minimum, security training requirements as required by the DLA Issuances and other applicable DOD guidance will be completed annually for: Antiterrorism/Force Protection (AT/FP), Operations Security (OPSEC), Counterintelligence Awareness Training, Information Security (INFOSEC), DoD Information Assurance Awareness and Combating Trafficking in Persons (CTIP). The security training is web-based and access will be provided by the Government. The Contractor shall ensure Contractor personnel have taken the required security training to meet DoD guidance and that the personnel continue to maintain their certifications.

http://iase.disa.mil/eta/iawip/

SECTION 5 CONTRACTOR FURNISHED EQUIPMENT

A. The Contractor shall provide equipment (not designated as Government furnished) which may be required for Contractor personnel to perform the requirements of this contract. The Contractor shall be responsible for all costs associated with this equipment.

SECTION 6 SPECIFIC TASKS

6.1 THE CONTRACTOR SHALL PROVIDE TECHNICAL SUPPORT TO DLA J6

INFORMATION OPERATIONS IN THE FOLLOWING AREAS:

6.1.1 NETWORK DESIGN AND PLANNING

• Knowledge of Telecommunications Industry Association, Electronic Industries Alliance (TIA/EIA) Structured Cabling Standards and infrastructure.

• Ensure that cable installation, repair and maintenance are Building Industry Consulting Service International (BICSI) compliant.

• Government special wiring requirements.

• Defense Logistics Agency telecommunications policies and procedures.

• Ensure Installation Design Plans (IDPs) are properly formatted and accurate.

• Complete a survey and documentation package of DLA, NTS LAN interface requirements to include network nodes current configuration of switches and routers and end user terminations. Maintain and apply changes to documentation as necessary.

• Provide project planning, integration and implementation of special projects. Provide knowledge transfer to DLA, NTS staff as identified by the IT Lead or manager.

• Serve as on-site technical staff to develop cost proposals, detailed implementation plans and customer instruction/guidance for management review and approval.

• Prepare documentation in the form of whitepapers and/or fact sheets. Research Internet web sites, text books, industry and Government periodicals, other whitepapers, seminars, conferences, and training classes.

• Prepare Executive Summaries, Fact Sheets, white papers, situation reports (SITREPs), maintenance procedures, and lists of training sources/providers using any one of the following software packages, per DLA, NTS specification: Microsoft Word, Adobe Acrobat PDF, Microsoft PowerPoint, Microsoft Visio, Auto CAD, or html.

• Complete all database work using Microsoft Access and all spreadsheet work using Microsoft Excel.

• Contractor shall conduct and complete research work for various Local Area and Wide Area Networks (LAN/WAN) telecommunications support areas using reference books, policies and standards, whitepapers, product brochures, and on-line web-based sources and resources.

• Research and suggest solutions to networking problems/requirements.

• Ability to provide knowledgeable technical advice and guidance when requested by DLA, EIS, NTS

• Serve as on-site technical staff to develop cost proposals, detailed implementation plans and customer instruction/guidance for management review and approval.

• Provide documentation to DLA, NTS in hardcopy (standard letter-size paper) and softcopy form (either a CD, or as an e-mail attachment) within a period of time specified by DLA, EIS, NTS, dependent upon the complexity of the request.

• Open Systems Interconnection (OSI) Layer Two network design

• OSI Layer Three network design

6.1.2 NETWORK CONFIGURATION

• Configure, install, maintain and troubleshoot:

• Network Routers

• Layer 2 Network Switches

• Layer 3 Network Switches

• Authentication, Authorization and Accounting (AAA)

• Network Access Control List (ACL)

• Spanning Tree Protocol (STP)

• IEEE 802.1Q Virtual LANs (VLANs)

• Multiple Spanning Tree Protocol (MSTP)

• Link Aggregation Control Protocol (LACP)

• IEEE 802.1X Port-based Network Access Control (PNAC)

• Quality of Service (QoS)

• IP Addressing (IPv4 and IPv6)

• IP multicast

• Internet Group Management Protocol (IGMP)

• IGMP Snooping

• Protocol-Independent Multicast (PIM)

• VPN (Virtual Private Network)

• Dynamic Host Configuration Protocol (DHCP)

• DHCP snooping

• Domain Name System (DNS)

• IEEE 802.11 Wireless Local Area Network (WLAN)

• Voice over IP (VoIP)/ IP telephony

6.1.3 NETWORK VULNERABILITY AND REVIEW

• Process assigned DLA CERT (Computer Emergency Response Team) and IAVM (Information Assurance Vulnerability Management) tasking’s in order to curtail vulnerabilities.

• Search network logs for unauthorized entry attempts and report any findings.

• Provide support for DIACAP (Department of Defense Information Assurance Certification and Accreditation Process) in accordance with:

• DOD/DLA regulations and policies

• DISA STIGs (Security Technical Implementation Guidelines)

• Provide support for the Information Assurance (IA) Functions to include:

• Examine potential security violations to determine if the Network Enclave (NE) has been breached, assess the impact, and preserve the evidence.

• Support, monitor, test, and, troubleshoot hardware and software IA problems pertaining to the

NE.

• Recommend and schedule IA-related repairs in the NE.

• Manage accounts, networks rights, and access to the NE systems and equipment.

• Ensure that hardware, software, data, and facility resources are archived, sanitized, or disposed of in a manner consistent with system security plans and requirements.

• Perform system audits to assess security related factors within the NE.

• Deliver unserviceable or excess IT equipment to staging area for disposal. Prepare hard drives for disposal in accordance with DLA policy and provide records to IT Team Lead or Manager.

• Provide documentation to the Accountable Property Officer (APO) to adjust inventory for any relocation or disposal of IT equipment.

6.1.4 CONFIGURATION AND MONITORING SOFTWARE

• Provides software configuration, troubleshooting and resolution.

• Provides software integration, identification of products to meet customer's requirements current and future.

• Provides technical support on software installation and configuration.

• Identify software diagnostic tools that can reduce downtime by decreasing problem identification and resolution time.

• Provide software support to include but not limited to the following:

• NetScout/Network General Sniffer

• Wireshark Packet a\Analyzer

• Extreme NetSight Atlas Console

• Solarwinds Network Management

• HP Network Automation (Opsware)

• Infoblox Network Services

• Great Bay Beacon Endpoint Profiler

• Depot-unique applications that shall require depot guidance for ongoing support

PROPERTY ACCOUNTABILITY 6.2

A. The Contractor shall maintain care of all Government-furnished property. At all times during the performance of the contract requirements, title to the mission stock and all other government-furnished property shall remain vested with the Government. In exercising care and custody, the Contractor shall safeguard all Government-furnished property.

B. The Contractor shall provide the proper protection for material under their custody and control. If there is a loss the Contractor shall immediately notify the KO or COR.

6.2.1 LIABILITY FOR GOVERNMENT PROPERTY

A. The Contractor shall be held financially liable for loss, damage, or destruction of government property caused by negligence, willful misconduct or unauthorized use. The KO or COR will make the pecuniary liability determination when a Contractor’s negligence results in loss, damage, or destruction of Government property.

B. The Contractor shall:

1. Notify the KO or COR immediately when it discovers the gain, loss, damage or destruction of government equipment or property.

2. Conduct an initial search and/or informal investigation into the loss or damage of equipment or property and forward all research data to the KO or COR.

3. Cooperate in any subsequent investigations.

6.2.2 INDEMNIFICATION AND LIMITATION OF LIABILITY

A. The Contractor shall indemnify the Government and hold it harmless against claims for injury to persons or damage to property of the Contractor or others arising from the Contractor’s possession or use of the government facilities, from its activities, or from its use, care and custody of the mission stock and government equipment and supplies relating to the performance of this contract.

B. When the KO or COR determines that any loss, damage or destruction of mission stock or other government property is caused by the Contractor’s negligence, willful misconduct or unauthorized use, the KO or COR may off-set payments under the contract by the determined value of the loss, damage or destruction. The Contractor’s liability per occurrence shall be limited to $50,000 with a total limit of liability of $1,000,000 per year. This limit of liability does not apply to the Government’s right to indemnification.

RECORDKEEPING 6.3

A. All documentation, record and databases, as described in this PWS, are the property of the Government.