W15QKN-22-Q-0003.pdf

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

Offeror To Complete Block 12, 17, 23, 24, & 30

1. Requisition Number Page Of

2. Contract No. 3. Award/Effective Date 4. Order Number 5. Solicitation Number 6. Solicitation Issue Date

7. For Solicitation Information Call:

A. Name B. Telephone Number (No Collect Calls) 8. Offer Due Date/Local Time

9. Issued By Code 10. This Acquisition is Unrestricted OR Set Aside: % For:

Small Business Women-Owned Small Business (WOSB) Eligible Under the Women-Owned Small Business Program

Hubzone Small Business EDWOSB

Service-Disabled Veteran-Owned Small Business NAICS:

Email: 8(A) Size Standard:

11. Delivery For FOB Destination Unless Block Is Marked

12. Discount Terms 13a. This Contract Is A Rated Order Under DPAS (15 CFR 700) 13b. Rating

See Schedule 14. Method Of Solicitation RFQ IFB RFP

15. Deliver To Code 16. Administered By Code

Telephone No.

17a. Contractor/Offeror Code Facility 18a. Payment Will Be Made By Code

Telephone No.

17b. Check If Remittance Is Different And Put Such Address In Offer

18b. Submit Invoices To Address Shown In Block 18a Unless Block Below Is Checked See Addendum

19.

Item No.

20.

Schedule Of Supplies/Services

21.

Quantity

22.

Unit

23.

Unit Price

24.

Amount

(Use Reverse and/or Attach Additional Sheets As Necessary)

25. Accounting And Appropriation Data 26. Total Award Amount (For Govt. Use Only)

27a.Solicitation Incorporates By Reference FAR 52.212-1, 52.212-4. FAR 52.212-3 And 52.212-5 Are Attached. Addenda Are Are Not Attached.

27b.Contract/Purchase Order Incorporates By Reference FAR 52.212-4. FAR 52.212-5 Is Attached. Addenda Are Are Not Attached.

28. Contractor Is Required To Sign This Document And Return _________ 29. Award Of Contract: Ref. Offer Copies to Issuing Office. Contractor Agrees To Furnish And Deliver All Items Set Forth Or Otherwise Identified Above And On Any Additional Sheets Subject To The Terms And Conditions Specified.

Dated . Your Offer On Solicitation (Block 5), Including Any Additions Or Changes Which Are Set Forth Herein, Is Accepted As To Items:

30a. Signature Of Offeror/Contractor 31a. United States Of America (Signature Of Contracting Officer)

30b. Name And Title Of Signer (Type Or Print) 30c. Date Signed 31b. Name Of Contracting Officer (Type Or Print) 31c. Date Signed

Authorized For Local Reproduction Previous Edition Is Not Usable

Standard Form 1449 (Rev. 2/2012) Prescribed By GSA-FAR (48 CFR) 53.212

W15QKN-22-Q-0003

BRIANNE DODD (973)724-0000

BRIANNE.A.DODD.CIV@MAIL.MIL

W15QKN

ARMY CONTRACTING COMMAND - NJ

PICATINNY ARSENAL, NJ 07806-5000

X

X 100

541611

X

X DOA6

X

SEE SCHEDULE

SEE SCHEDULE

X X

X 1

1 42

19.

Item No.

20.

Schedule Of Supplies/Services

21.

Quantity

22.

Unit

23.

Unit Price

24.

Amount

32a. Quantity In Column 21 Has Been

Received Inspected Accepted, And Conforms To The Contract, Except As Noted: _________________________________________________

32b. Signature Of Authorized Government Representative 32c. Date 32d. Printed Name and Title of Authorized Government Representative

32e. Mailing Address of Authorized Government Representative 32f. Telephone Number of Authorized Government Representative

32g. E-Mail of Authorized Government Representative

33. Ship Number 34. Voucher Number 35. Amount Verified 36. Payment 37. Check Number Correct For Partial Final Complete Partial Final

38. S/R Account No. 39. S/R Voucher Number 40. Paid By

41a. I Certify This Account Is Correct And Proper For Payment 42a. Received By (Print) 41b. Signature And Title Of Certifying Officer 41c. Date 42b. Received At (Location)

42c. Date Rec’d (YY/MM/DD) 42d. Total Containers

Standard Form 1449 (Rev. 2/2012) Back

CONTINUATION SHEET

Reference No. of Document Being Continued Page of

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

SUPPLEMENTAL INFORMATION

Buyer Name: BRIANNE DODD

Buyer Office Symbol/Telephone Number: CCNJ-JA/(973)724-0000

Type of Contract 1: Firm Fixed Price

Kind of Contract: Service Contracts

*** End of Narrative A0000 ***

This is a combined synopsis/solicitation for commercial items prepared in accordance with the format in Subpart 12.6, as supplemented with additional information included in this notice. This announcement constitutes the solicitation; Quotes are being requested.

Solicitation No. W15QKN-22-Q-0003 is issued as a Request for Quotation (RFQ), and incorporates provisions and clauses in effect through

Federal Acquisition Circular 2005-61. This is a Service Disabled Veteran Owned Small Business set-aside under NAICS 541611 with a small business size standard of $16,500,000.00.

In accordance with FAR 37.104-(a) Personal Service Contracts, the subsequent purchase order is not considered to be a personal service.

The U.S. Army Contracting Command - New Jersey (ACC-NJ), Picatinny Arsenal, NJ 07806-5000 intends to award one (1) firm-fixed-price

(FFP) purchase order, on a competitive basis, for Capability Maturity Model Integration (CMMI) model support using the CMMI Version 2.0

Appraisal Method to assess its strengths and weaknesses relative to the CMMI determining its CMMI maturity level.

DISCLOSURE OF UNIT PRICE INFORMATION

This constitutes notification pursuant to Exectuve Order 12600, Pre-Disclosure Notification Procedures for Confidential Commercial

Information (June 2, 1987), of our intention to release unit prices in response to any request under the Freedom of Information Act, 5, USC 552, Unit price is defined as the contract price per unit of item purchased. We consider any objection to be waived unless the

Contracting Officer is notified of yor objection to such posting prior to submission of initial proposals.

*** END OF NARRATIVE A0001 ***

2 42

PIIN/SIIN

Page of

Name of Offeror or Contractor:

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

Reference No. of Document Being Continued

MOD/AMD

SUPPLIES OR SERVICES AND PRICES/COSTS

0001 CMMI VER 2.0 EVALUATION AND BENCHMARK APPRAISAL _______________________________________________

SUPPORT $ _______ __________________

SERVICE REQUESTED: CMMI V 2.0 APPRAISAL

CLIN CONTRACT TYPE:

Firm Fixed Price

See PWS for this requirement.

The PSC Code for CLIN 0001 is B528.

The unit of measure for CLIN 0001 is one (1) LOT.

FOB Destination.

(End of narrative B001)

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

Deliveries or Performance _________________________

The Period of Performance for CLIN 0001 is nine (9) months from date of award.

(End of narrative F001)

0002 CONTRACT DATA REQUIREMENTS LIST (CDRLS A001-A011) _________________________________________________

A001 CDRL A001 - PRESENTATION MATERIAL 1 LO $ ** NSP ** _________________________________ __________________

SERVICE REQUESTED: CDRL A001

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

DLVR SCH PERF COMPL

REL CD QUANTITY DATE ________ ______________ __________

001 1 AS REQUIRED

A002 CDRL A002 - PRESENTATION MATERIAL 1 LO $ ** NSP ** _________________________________ __________________

3 42

Page of

Name of Offeror or Contractor:

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

Reference No. of Document Being Continued

MOD/AMD

SERVICE REQUESTED: A002

CLIN CONTRACT TYPE:

Firm Fixed Price

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

DLVR SCH PERF COMPL

REL CD QUANTITY DATE ________ ______________ __________

001 1 AS REQUIRED

A003 CDRL A003 - PRESENTATION MATERIAL 1 LO $ ** NSP ** _________________________________ __________________

SERVICE REQUESTED: CDRL A003

CLIN CONTRACT TYPE:

Firm Fixed Price

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

DLVR SCH PERF COMPL

REL CD QUANTITY DATE ________ ______________ __________

001 1 AS REQUIRED

A004 CDRL A004 - CONTRACT SUMMARY REPORT 1 LO $ ** NSP ** ___________________________________ __________________

SERVICE REQUESTED: CDRL A004

CLIN CONTRACT TYPE:

Firm Fixed Price

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

DLVR SCH PERF COMPL

REL CD QUANTITY DATE ________ ______________ __________

001 1 AS REQUIRED

A005 CDRL A005 - PRESENTATION MATERIALS 1 LO $ ** NSP ** ___________________________________ __________________

SERVICE REQUESTED: A005

CLIN CONTRACT TYPE:

Firm Fixed Price

Inspection and Acceptance _________________________

4 42

Page of

Name of Offeror or Contractor:

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

Reference No. of Document Being Continued

MOD/AMD

INSPECTION: Destination ACCEPTANCE: Destination

DLVR SCH PERF COMPL

REL CD QUANTITY DATE ________ ______________ __________

001 1 AS REQUIRED

A006 CDRL A006 - PRESENTATION MATERIALS 1 LO $ ** NSP ** __________________________________ __________________

SERVICE REQUESTED: CDRL A006

CLIN CONTRACT TYPE:

Firm Fixed Price

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

DLVR SCH PERF COMPL

REL CD QUANTITY DATE ________ ______________ __________

001 1 AS REQUIRED

A007 CDRL A007 - PRESENTATION MATERIALS 1 LO $ ** NSP ** __________________________________ __________________

SERVICE REQUESTED: CDRL A007

CLIN CONTRACT TYPE:

Firm Fixed Price

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

DLVR SCH PERF COMPL

REL CD QUANTITY DATE ________ ______________ __________

001 1 AS REQUIRED

A008 CDRL A008 - CONTRACT SUMMARY REPORT 1 LO $ ** NSP ** ___________________________________ __________________

SERVICE REQUESTED: CDRL A008

CLIN CONTRACT TYPE:

Firm Fixed Price

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

DLVR SCH PERF COMPL

REL CD QUANTITY DATE ________ ______________ __________

001 1 AS REQUIRED

A009 CDRL A009 - ACCIDENT/INCIDENT REPORT 1 LO $ ** NSP ** ____________________________________ __________________

5 42

Page of

Name of Offeror or Contractor:

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

Reference No. of Document Being Continued

MOD/AMD

SERVICE REQUESTED: CDRL A009

CLIN CONTRACT TYPE:

Firm Fixed Price

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

DLVR SCH PERF COMPL

REL CD QUANTITY DATE ________ ______________ __________

001 1 AS REQUIRED

A010 CDRL A010 - OPERATIONS SECURITY PLAN 1 LO $ ** NSP ** ____________________________________ __________________

SERVICE REQUESTED: CDRL A010

CLIN CONTRACT TYPE:

Firm Fixed Price

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

DLVR SCH PERF COMPL

REL CD QUANTITY DATE ________ ______________ __________

001 1 AS REQUIRED

A011 CDRL A011 - CERTIFICATION/DATA REPORT 1 LO $ ** NSP ** _____________________________________ __________________

SERVICE REQUESTED: A011

Inspection and Acceptance _________________________

INSPECTION: Destination ACCEPTANCE: Destination

DLVR SCH PERF COMPL

REL CD QUANTITY DATE ________ ______________ __________

001 1 AS REQUIRED

0003 CONTRACTOR MANPOWER REPORTING _____________________________

6 42

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

DESCRIPTION/SPECIFICATIONS/WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS)

For

Armament Software Engineering Center (Armament Sec) Directorate

Capability Maturity Model Integration (CMMI) V2.0 Evaluation and Benchmark Appraisal Support

1. Background/Scope

2. Applicable Documents/Tool

3. Requirements

4. Quality Assurance Surveillance Plan (QASP)

5. Accounting for Contract Services

1.0 BACKGROUND/SCOPE:

1.1 Background: The Armament Software Engineering Center (Armament SEC) within the DEVCOM Armaments Center (AC) structure of the Weapons and Software Engineering Center (WSEC) provides Program Executive Offices (PEOs), Program Managers (PMs) and other internal and external customers with software engineering and acquisition support throughout the lifecycle of their systems. This life cycle support includes supporting the system throughout the development process and maintaining it following transition to Government control. To accomplish the mission, the Armament SEC requires contractor support to assist in providing high quality services throughout the organization for software engineering, acquisition, process improvement, and configuration management, infrastructure, advanced technologies, fielding, and sustainment.

1.1.1 The Armament SEC uses the CMMI standards for software appraisals, developed by the CMMI Institute, to appraise the organizations implementation of CMMI best practices, using an aggregation of evidence that is collected via instruments, presentations, documents, and interviews. The appraisal team observes, hears, and reads information that is transformed first into notes, and then into statements of practice implementation gaps or strengths (where appropriate), and then into preliminary findings. The organizational unit validates these findings before they become final findings. The critical concept is that these transformations are applied to data reflecting the enacted processes in the organizational unit and the CMMI reference model used to form the basis for ratings and other appraisal results.

1.2 Scope: The Government requires contract support in assessing its strengths and weaknesses relative to the CMMI and determining its CMMI maturity level. The DEVCOM AC Armament SEC needs to assure their software applications adhere to CMMI practices to effectively provide cradle-to-grave life cycle engineering for a broad spectrum of armament technologies and products.

1.3 The DEVCOM AC Armament SEC requires support to execute the following:

a)benchmark Armament SECs process ratings relative to Capability Maturity Model Integration (CMMI) model using the CMMI Version 2.0

Appraisal Method;

b)gain insight into DEVCOM ACs engineering capability by identifying the strengths and weaknesses of its current processes;

c)relate these strengths and weaknesses to the CMMI model; and d)derive CMMI capability level ratings as well as a maturity level rating.

2.0 APPLICABLE DOCUMENTS/TOOL:

2.1 CMMI Institute, Capability Maturity Model Integration, CMMI Version 2.0, Mar 2018

2.2 CMMI Institute, CMMI Version 2.0 Appraisal Method, Mar 2018

2.3 Appraisal Wizard software (current) or equivalent appraisal software compatible with CMMI Version 2.0 (V2.0)

3.0 REQUIREMENTS:

The Contractor shall conduct a CMMI V2.0 Evaluation and CMMI V2.0 Benchmark appraisals in accordance with the CMMI V2.0 Appraisal

Methodology. The Contractor shall provide personnel that have the CMMI Institute Authorized Instructor/High Maturity Lead Appraiser credentials. All meetings, training and appraisal activities shall take place at Picatinny Arsenal, NJ. The Evaluation Appraisal and

Benchmark Appraisal shall cover the CMMI process areas for Maturity Levels 1 through five. The Government has been using Appraisal

Wizard software for CMMI Appraisal Readiness Reviews and Appraisal events, the Contractor shall use the same software or another tool that is compatible.

3.1 Appraisal Planning:

3.1.1 Evaluation Appraisal planning task shall be completed in three (3) days, consisting of two (2) day onsite meeting at

Picatinny Arsenal and another one (1) day meeting via teleconference. Prior to the actual appraisal event, the contractors CMMI

Institute Authorized Instructor/High Maturity Lead Appraiser personnel shall travel to Picatinny Arsenal for a two (2) day Appraisal

Planning with the appraisal sponsor to produce the draft plan for the appraisal and ascertain the scope of the organization to be

7 42

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

appraised (actual projects or programs that will participate), applicability of Armament SEC processes to CMMI, and the scope within the

CMMI model (practice areas). Additionally, the contractor shall allocate one (1) day to finalize the Appraisal Plan (to be used for

Requirements 3.3 and 3.4) with the appraisal sponsor via teleconference.

3.1.2 Benchmark Appraisal Planning task shall be completed in two (2) days. Prior to the actual appraisal event, the contractors CMMI Institute Authorized Instructor/High Maturity personnel shall collaborate with the Appraisal Sponsor to produce the

Appraisal Plan (to be used for Requirements 3.5 and 3.6) for the appraisal and ascertain the scope of the organization to be appraised

(actual projects or programs that will participate), applicability of Armament SEC processes to CMMI, and the scope within the CMMI model (practice areas).

3.2 Appraiser Training:

Prior to the actual Evaluation appraisal event, the CMMI Institute Authorized Instructor /High Maturity Lead Appraiser personnel shall travel to Picatinny Arsenal for five (5) days and provide training, specified by paragraphs 3.2.1 through 3.2.3 of this PWS, for up to fifteen (15) students. The CMMI Institute Authorized Instructor /High Maturity Lead Appraiser contractor shall employ training instruction, training criteria (e.g., desired learning outcomes and performance goals), and evaluation methods and metrics to verify training effectiveness in accordance with criteria (e.g., quizzes regarding content). The CMMI Institute Authorized Instructor /High

Maturity Lead Appraiser personnel may use MIL-HDBK-29612-2A - Department of Defense Handbook, Instructional Systems Development/Systems

Approach to Training and Education (Part 2 of 5 Parts), 31 August 2001 as guidance.

3.2.1 CMMI V2.0 Foundations of Capability and Building Development Excellence (including CMMI Associate Exam)

3.2.2 CMMI V2.0 High Maturity Concepts

3.2.3 Appraisal Method training using Appraisal Wizard or another tool that is compatible

3.3 CMMI Evaluation Readiness Review:

3.3.1 Prior to the actual appraisal event, the Contractors Lead Appraiser shall travel to Picatinny Arsenal for a five (5) day Readiness Review with the appraisal team based on the Appraisal Plan to complete the readiness review event for the projects participating in the appraisal.

3.4 CMMI EVALUATION Appraisal Event

3.4.1 The Contractor shall conduct in a seven (7) day CMMI Evaluation Appraisal based on the Appraisal Plan at Picatinny

Arsenal. At the start of the appraisal, the Contractor shall provide an Initial Briefing that describes the appraisal purpose, schedule, and activities. During the on-site period, the appraisal team shall verify and validate the objective evidence provided by the appraised organization to identify strengths and weaknesses relative to the CMMI reference model. The appraisal team shall focus on collecting data from the appraised organization via interviews and artifacts to judge the extent to which the model is implemented. The

Contractor shall ensure that data and information is collected on all the reference model practices for each process instantiation being appraised within the organizational unit. Upon determining that sufficient coverage of the reference model and organizational unit has been obtained, the appraisal team shall generate the appraisal findings and ratings. Goal ratings are determined within each process area, which collectively are used to determine a capability level rating for the individual process areas, as well as a risk rating for the organizational unit.

3.4.2 Report Results:

3.4.2.1 The Contractor shall prepare and present the draft findings to the organization. The appraisal team shall verify and validate the additional objective evidence provided by the organization after the draft findings. The Contractor shall conduct the preparation and presentation of the final findings and ratings as appraisal results to the appraisal sponsor and the organization.

These appraisal results become part of the appraisal record, which becomes protected data according to the desires of the sponsoring / appraised organization.

3.5 CMMI BENCHMARK Readiness Review:

3.5.1 Prior to the actual appraisal event, the Contractors Lead Appraiser shall travel to Picatinny Arsenal for a four (4) day Readiness Review with the appraisal team based on the Appraisal Plan to complete the readiness review event for the projects participating in the appraisal.

3.6 CMMI BENCHMARK Appraisal Event:

3.6.1 The Contractors Lead Appraiser shall conduct an eight (8) day CMMI Benchmark Appraisal based on the Appraisal Plan at

Picatinny Arsenal. At the start of the appraisal, the Contractor shall provide an Initial Briefing that describes the appraisal purpose, schedule, and activities. During the on-site period, the appraisal team shall verify and validate the objective evidence provided by the appraised organization to identify strengths and weaknesses relative to the CMMI reference model. The appraisal team

8 42

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

shall focus on collecting data from the appraised organization via interviews and artifacts to judge the extent to which the model is implemented. The Contractor shall ensure that data and information is collected on all the reference model practices for each process instantiation being appraised within the organizational unit. Upon determining that sufficient coverage of the reference model and organizational unit has been obtained, the appraisal team shall generate the appraisal findings and ratings. Goal ratings are determined within each process area, which collectively are used to determine a capability level rating for the individual process areas, as well as a process maturity rating for the organizational unit.

3.6.2 Report Results:

3.6.2.1 The Contractor shall conduct the preparation and presentation of the draft findings to the organization. The appraisal team shall verify and validate the additional objective evidence provided by the organization after the draft findings. The

Contractor shall conduct the preparation and presentation of the final findings and ratings as appraisal results to the appraisal sponsor and the organization. These appraisal results become part of the appraisal record, which becomes protected data according to the desires of the sponsoring / appraised organization. The appraisal results shall be submitted to the CMMI Institute.

3.7 General Requirements:

3.7.1 Materials/Service The Contractor shall provide training for Appraisal Team Member Training.

3.7.2 The Government will furnish incidental Material and Property - Laptops, workspace, and other material necessary to accomplish the required work.

3.7.3 The Contractor will provide the licenses for Appraisal Wizard Software or another software that is compatible.

3.7.4 Travel: The Contractor shall be required to travel to Picatinny Arsenal and provide the meeting, training, and appraisal support requirements. The trips required are as follows:

3.7.4.1 Evaluation Appraisal Planning Meeting, per paragraph 3.1.1 and Appraiser training, per paragraph 3.2

Meeting/Training Length: Five (5) business days

Number of person: One (1) person

3.7.4.2 CMMI Evaluation Readiness Review, per paragraph 3.3

Meeting Length: Five (5) business days

Number of person: One (1) person

3.7.4.3 CMMI Evaluation Appraisal, per paragraph 3.4.1

Appraisal Length: Seven (7) business days

Number of person: One (1) person

3.7.4.4 CMMI Benchmark Readiness Review, pre paragraph 3.5

Meeting Length: Four (4) business days

Number of person: One (1) person

3.7.4.5 CMMI Benchmark Appraisal, pre paragraph 3.6

Meeting Length: Eight (8) business days

Number of person: One (1) person

3.7.5 Period of Performance:

3.7.5.1 The period of performance for this task is nine (9) months after contract award.

3.7.6 Place of Performance:

3.7.6.1 The work to be performed under this task shall be performed at the Contractors site and Picatinny Arsenal. The contract will include travel from the Contractors site to Picatinny Arsenal, NJ and return for the following: Appraisal Method Training, Appraisal Planning, Readiness Review and the Appraisal event.

3.7.7 Technical POC: Anthony Astrologo 973-724-2551, anthony.f.astrologo.civ@army.mil

3.8 Security: The Highest level of classification is UNCLASSIFIED.

3.8.1 Antiterrorism Training:

3.8.1.1 AT Level I:

9 42

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

3.8.1.1.1 All Contractor employees, including subcontractor employees, requiring access to Department of Defense installations, facilities, or controlled access areas shall complete AT Level I awareness training within 45 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies and within 12 months prior to travel outside of the US, then annually thereafter (DI-MISC-80678, A011). The Contractor shall submit certificates of completion for each affected

Contractor employee and subcontractor employee to the COR (or to the contracting officer, if a COR is not assigned) within 14 calendar days after completion of training by all employees and subcontractor personnel. AT Level I, awareness training is available at http://jkodirect.jten.mil/ .

3.8.1.2 iWATCH:

3.8.1.2.1 All Contractor employees, including subcontractor employees, shall receive training and conduct the local iWATCH program (training standards provided by the requiring activity ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 45 calendar days after contract start date or effective date of incorporation of this requirement into the contract. (DI-MISC-

80678, A011). The Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR (or to the contracting officer, if a COR is not assigned) within 14 calendar days after completion of training by all employees and subcontractor personnel.

3.8.2 Installation Access

3.8.2.1 Access and General Protection/Security Policy and Procedures:

All Contractor employees, including subcontractor employees, shall comply with all installation and facility access and local security policies and procedures (provided by the Government representative), and security/emergency management exercises. The Contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by the installation Provost Marshal Office, Director of Emergency Services, or Security Office. Contractor workforce must comply with all personal identity verification requirements (CFR clause 52.204-9, Personal Identity Verification of Contract Personnel) as directed by

DoD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force

Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in Contractor security matters or processes. During FPCONs Charlie and Delta, services/installation access may be discontinued/ postponed due to higher threat. Services will resume when FPCON level and or threat is reduced to an acceptable level as determined by the Installation

Commander. Contractor personnel working on an installation are required to conduct the Installation Random Antiterrorism Measures

Program as directed. Contractors may be subject to and must comply with vehicle searches, wearing of ID badges, etc.

3.8.2.2 Do not require CAC, but require access to a DoD facility or installation:

Contractor and all associated subcontractor employees shall comply with adjudication standards and procedures using the National Crime

Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (Army Directive 2014-05/AR 190-13);

applicable installation, facility and area commander installation and facility access and local security policies and procedures

(provided by Government representative); or, at OCONUS locations, in accordance with status-of-forces agreements and other theater regulations.

3.8.3 Government Furnished Items:

All Contractor employees, including subcontractor employees, will return all issued U.S. Government owned equipment which includes travel laptops, mobile devices, Common Access Cards, installation badges, and/or access passes to the COR when the contract is completed or when a Contractor employee no longer requires access to the installation or facility.

3.8.4 Export Control Laws/International Traffic in Arms Regulation:

DFARS Clause 252.225-7048, Export- Controlled Items applies to this effort. All documents determined to contain export controlled technical data will be marked with the following notice: WARNING: - This document contains technical data whose export is restricted by the Arms Export Control

Act (Title 22, U.S.C., App. 2401 et seq. Violations of these export laws are subject to severe criminal penalties. Disseminate in accordance with provisions of DoD Directive 5230.25.

3.8.5 OPSEC:

3.8.5.1 Contract personnel shall be capable of accessing, handling, receiving, and storing UNCLASSIFIED documents, equipment, hardware, and test items, using the applicable standards of FOUO and CUI. DFARS Clause 252.204-7012, Safeguarding Covered Defense Information and

Cyber Incident Reporting applies to this effort.

3.8.5.2 Per AR 530-1 (or DoDM 5205.02-M), new Contractor employees, including subcontractor employees, must complete initial (Level I)

OPSEC training within 30 calendar days of reporting for duty and must also complete annual OPSEC awareness training as provided by the appropriately designated OPSEC level II trained OPSEC Officer/Coordinator (DI-MISC-80678, A011). The Contracting Officer Representative

(COR) can request DEVCOM AC OPSEC training from DEVCOM AC OPSEC POC.

10 42

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

3.8.5.3 Per AR 530-1 (or DoDM 5205.02-M), an OPSEC review is required prior to all public releases. All government information intended for public release by a Contractor will undergo a government OPSEC review prior to release.

3.8.5.4 The Contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan, in accordance with DI-MGMT-80934C, within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer, per AR 530-1, Operations

Security. This SOP/Plan will specify the projects critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. In addition, the Contractor shall identify an individual who will be an OPSEC

Coordinator. The Contractor will ensure that this individual becomes OPSEC Level II certified per AR 530-1. CCDC Armaments Center OPSEC

POC e-mail: usarmy.pica.ccdc-ac.mbx.ardec-opsec@mail.mil.

3.8.6 Data Rights:

All reference material, documents, training support material, and other information obtained, produced, or developed by the Contractor in support of this effort shall become the property of the Government, and shall be delivered to the Armament SEC team. The Government shall have the unlimited right to use, modify, reproduce, release, perform, display or disclose technical data, software, and products for all work products developed and modified under this task order.

3.8.7 Information Management Army Information Technology:

The Contractor shall be capable of accessing, handling, receiving, and storing UNCLASSIFIED documents, equipment, hardware, and test items, using the applicable standards of FOUO information. Controlled Unclassified Information (documents designated as FOR OFFICIAL USE

ONLY and/or LIMITED DISTRIBUTION) shall be submitted by a controlled means using USPS mail, Safe Access File Exchange (SAFE) website and/ or DoD Army approved encryption software as per AR 25-1.

3.8.8 Controlled Unclassified Information (CUI) OR Critical Program Information (CPI):

3.8.8.1 System Security Plan and Plans of Action and Milestones (SSP/POAM) Reviews:

(a) Within thirty (30) days of contract award, unless otherwise notified by the Government, the Contractor shall make its System

Security Plan(s) (SSP(s)) for its covered Contractor information system(s) available for review by the Government at the Contractor's facility. The SSP(s) shall describe how the National Institute of Standards and Technology (NIST) Special Publication

(SP) 800-171 security requirements are implemented as required by Defense Federal Acquisition Regulation Supplement (DFARS) clause

252.204-7012, which is included in this contract, and identify all applicable Commercial and Government Entity Code codes affected. The

Contractor shall fully cooperate in the Government's review of the SSPs at the Contractor's facility.

(b) If the Government determines that the SSP(s) does not adequately describe how the NIST SP 800-171 security requirements are implemented, then the Government shall notify the Contractor of each identified deficiency. The Contractor shall correct any identified deficiencies within thirty (30) days of notification by the Government. The contracting officer may provide for a correction period longer than thirty (30) days and, in such a case, may require the Contractor to submit a Plan of Action and Milestones

(POAM) for the correction of the identified deficiencies. The Contractor shall immediately notify the contracting officer of any failure or anticipated failure to meet a milestone in such a POAM.

(c) Upon conclusion of the correction period, the Government may conduct a follow-on review of the SSP(s) at the Contractor's facilities. The Government may continue to conduct follow-on reviews until the Government determines that the Contractor has corrected all identified deficiencies in the SSP(s).

(d) The Government may, in its sole discretion or in response to a cyber incident, conduct subsequent reviews at the Contractor's site to verify the information in the SSP(s). The Government may conduct reviews at any time upon thirty (30) days' notice to the Contractor.

3.8.8.2 Compliance to NISTSP 800-171:

(a) The Contractor shall fully implement the Controlled Unclassified Information (CUI) Security Requirements (Requirements) in NIST SP

800-171 in effect at the time the solicitation is issued or as authorized by the Contracting Officer, or establish a SSP(s) and POAMs) that varies from NIST SP 800-171 only in accordance with DFARS clause 252.204-7012(b)(2), for all covered Contractor information systems affecting this contract.

(b) Notwithstanding the allowance for such variation, the Contractor shall identify in any SSP and POAM their plans to implement the following, at a minimum:

Aug 2016

(1) Implement Requirement 3.5.3 (Multi-factor authentication). This means that multi-factor authentication is required for all users, privileged and unprivileged accounts that log into a network. In other words, any system that is not standalone should be required to utilize acceptable multi-factor authentication. For legacy systems and systems that cannot support this requirement, a combination of physical and logical protections acceptable to the Government may be substituted;

(2) Implement Requirement 3.1.5 (least privilege) and associated Requirements, and identify practices that the Contractor implements to restrict the unnecessary sharing with, or flow of, covered defense information to its subcontractors, suppliers, or vendors based on need-to-know principles;

(3) Implement Requirement 3.1.12 (monitoring and control remote access sessions)-Require monitoring and controlling of remote access

11 42

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

sessions and include mechanisms to audit the sessions and methods;

(4) Audit user privileges on at least an annual basis;

(5) Implement Requirement 3.13.11 (Federal Information Processing Standards (FIPS) 140-2 validated cryptology or implementation of

National Security Agency- or NIST-approved algorithms (i.e., FIPS 140-2 Annex A: Advanced Encryption Standard (AES) Or Triple Data

Encryption Standard (DES) or compensating controls as documented in a SSP and POAM));

(6) Implement Requirement 3.13.16 (Protect the confidentiality of CUI at rest) or provide a POAM for implementation which can be evaluated by the Government Program Manager for risk to the program;

(7) Implement Requirement 3.1.19 (encrypt CUI on mobile devices) or provide a plan of action for implementation which can be evaluated by the Government Program Manager for risk to the program

3.8.8.3 Army Counterintelligence (CI) Outreach:

The Contractor shall engage, whenever practicable, with Army Cl industry outreach efforts and consider recommendations for hardening of covered Contractor information systems affecting Army programs and technologies; and make Contractor personnel available for threat briefings specific to foreign intelligence threats to Army programs and technologies.

3.8.8.4 Cyber Incident Response:

a) The Contractor shall, within fifteen (15) days of discovering the cyber incident (inclusive of the 72-hour reporting period in DFARS clause 252.204-7012 ), deliver all data used in performance of the contract that the Contractor determines is impacted by the incident and begin assessment of potential warfighter/program impact. Incident data shall be delivered in accordance with the Department of

Defense Cyber Crimes Center (DC3) Instructions for Submitting Media available at http://www.acq.osd.mil/dpap/dars/pgi/docs/lnstructions_for_Submitting_Media.docx .

In delivery of the incident data, the Contractor shall, to the extent practical, remove contractor-owned information from Government covered defense information.

(b) If the Contractor subsequently identifies any such data not previously delivered to DC3, then the Contractor shall immediately notify the contracting officer in writing and shall deliver the incident data within ten (10) days of identification. In such a case, the Contractor may request a delivery date later than ten (10) days after identification. The contracting officer will approve or disapprove the request after coordination with DC3.

3.8.8.5 Army CI/Industry Monitoring:

(a) In the event of a cyber incident or at any time the Government has indication of a vulnerability or potential vulnerability, the Contractor shall cooperate with the Army Cl, which may include cooperation related to: threat indicators; pre-determined incident information derived from the Contractor's infrastructure systems; and the continuous provision of all Contractor, subcontractor, or vendor logs that show network activity, including any additional logs the Contractor, subcontractor or vendor agrees to initiate as a result of the cyber incident or notice of actual or potential vulnerability.

(b) If the Government determines that the collection of all logs does not adequately protect its interests, the Contractor will coordinate with Army Cl to implement additional measures, which may include allowing the installation of an appropriate network device that is owned and maintained by the Army Cl, on the Contractor's information systems or information technology assets. The specific details (e.g., type of device, type of data gathered, monitoring period) regarding the installation of an Army Cl network device shall be the subject of a separate agreement negotiated between Army Cl and the Contractor. In the alternative, the Contractor may install network sensor capabilities or a network monitoring service, either of which must be reviewed for acceptability by Army Cl.

Use of this alternative approach shall also be the subject of a separate agreement negotiated between Army Cl and the Contractor.

(c) In all cases, the collection or provision of data and any activities associated with this statement of work shall be in accordance with federal, state, and non-US law.

3.9 Deliverables:

3.9.1 The Contractor shall prepare and submit CMMI V2.0 Upgrade training (including CMMI Associate Exam) (DI-ADMN-81373, A001). The training presentation shall be due to the Government at the Appraiser Training session and shall be presented in Contractor format.

3.9.2 The Contractor shall prepare and submit CMMI V2.0 High Maturity Concepts training (DI-ADMN-81373, A002). The training presentation shall be due to the Government at the Appraiser Training session and shall be presented in Contractor format.

3.9.3 The Contractor shall prepare and submit CMMI V2.0 Appraisal Method training (DI-ADMN-81373, A003). The training presentation shall be due to the Government at the Appraiser Training session and shall be presented in Contractor format.

12 42

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

3.9.4 The Contractor shall prepare submit an Appraisal Plan (DI-NDTI-80566A/DI-IPSC-81438A, A004) which details the approach, data and information to be collected, and how ratings shall be defined. The report shall be due to the Government no later than the beginning of the Appraisal Training, and shall be presented in Contractor format.

3.9.5 The Contractor shall prepare and submit CMMI V2.0 Evaluation Appraisal Findings Briefing (DI-ADMN-81373, A005) which details the results of the CMMI Evaluation Appraisal. The briefing shall be due to the Government at the end of the CMMI Evaluation event, and shall be presented in Contractor format.

3.9.6 The Contractor shall prepare and submit CMMI V2.0 Benchmark Appraisal Initial Briefing (DI-ADMN-81373, A006) which defines the appraisal purpose, schedule and activities. The presentation shall be due to the Government at the beginning of the CMMI

Evaluation Appraisal event and shall be presented in Contractor format.

3.9.7 The Contractor shall prepare and submit CMMI V2.0 Benchmark Appraisal Findings Briefing (DI-ADMN-81373, A007) which details the results of the CMMI Benchmark Appraisal. The briefing shall be due to the Government at the end of the CMMI Benchmark event, and shall be presented in Contractor format.

3.9.8 The Contractor shall document and submit the appraisal data including observations and documentation references. The appraisal data report (DI-MISC-80477A, A008) shall cover both the CMMI Evaluation and Benchmark appraisals, and be presented in

Contractor format. The report shall be due to the Government seven (7) months after contract award.

3.9.9 Accidents and Incidents. The Contractor shall immediately report any major accident or incident, including fire, which results in any of the following: one or more disabling injuries, damage to Government property exceeding $10,000, disruption of program plans or production schedules, degradation of the safety of equipment under contract such that personal injury or property damage may be involved, or identifies a potential hazard which requires correction action (DI-SAFT-81563, A009).

3.9.10 Contractor Administrative Report: Reporting - Contractor Roster (DI-MGMT-81596, Tailored, A010): Within 10 days of contract award, the contractor shall prepare and deliver to the Government the following:

1. Name of Contractor

2. Contract Number (including the task order number, if applicable)

3. Start date and end date of contract

4. Names of contractor personnel occupying administrative space at Picatinny

5. The Building number the contractor personnel occupy

4.0 QUALITY ASSURANCE SURVEILLANCE PLAN (QASP)

Reference the Quality Assurance Surveillance Plan (QASP).

*** END OF NARRATIVE C0001 ***

13 42

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

CONTRACT ADMINISTRATION DATA

Regulatory Cite Title Date Regulatory Cite Title Date _______________ ______________________________________________________________________ ____________ _______________ ______________________________________________________________________ ____________

1 252.232-7006 WIDE AREA WORKFLOW PAYMENT INSTRUCTIONS DEC/2018

(a) Definitions. As used in this clause--

"Department of Defense Activity Address Code (DoDAAC)" is a six position code that uniquely identifies a unit, activity, or organization.

"Document type" means the type of payment request or receiving report available for creation in Wide Area WorkFlow (WAWF).

"Local processing office (LPO)" is the office responsible for payment certification when payment certification is done external to the entitlement system.

"Payment request" and "receiving report" are defined in the clause at 252.232-7003, Electronic Submission of Payment Requests and

Receiving Reports.

(b) Electronic invoicing. The WAWF system provides the method to electronically process vendor payment requests and receiving reports, as authorized by Defense Federal Acquisition Regulation Supplement (DFARS) 252.232-7003, Electronic Submission of Payment Requests and

Receiving Reports.

(c) WAWF access. To access WAWF, the Contractor shall--

(1) Have a designated electronic business point of contact in the System for Award Management at https://www.sam.gov ; and

(2) Be registered to use WAWF at https://wawf.eb.mil/ following the step-by-step procedures for self-registration available at this Web site.

(d) WAWF training. The Contractor should follow the training instructions of the WAWF Web-Based Training Course and use the Practice

Training Site before submitting payment requests through WAWF. Both can be accessed by selecting the "Web Based Training" link on the

WAWF home page at https://wawf.eb.mil/ .

(e) WAWF methods of document submission. Document submissions may be via Web entry, Electronic Data Interchange, or File Transfer

Protocol.

(f) WAWF payment instructions. The Contractor shall use the following information when submitting payment requests and receiving reports in WAWF for this contract or task or delivery order:

(1) Document type. The Contractor shall submit payment requests using the following document type(s):

(i) For cost-type line items, including labor-hour or time-and-materials, submit a cost voucher.

(ii) For fixed price line items--

(A) That require shipment of a deliverable, submit the invoice and receiving report specified by the Contracting Officer.

2-in-1 invoice

(B) For services that do not require shipment of a deliverable, submit either the Invoice 2in1, which meets the requirements for the invoice and receiving report, or the applicable invoice and receiving report, as specified by the Contracting Officer.

2-in-1 invoice

(iii) For customary progress payments based on costs incurred, submit a progress payment request.

(iv) For performance based payments, submit a performance based payment request.

(v) For commercial item financing, submit a commercial item financing request.

(2) Fast Pay requests are only permitted when Federal Acquisition Regulation (FAR) 52.213-1 is included in the contract.

[Note: The Contractor may use a WAWF "combo" document type to create some Combinations of invoice and receiving report in one step.]

(3) Document routing. The Contractor shall use the information in the Routing Data Table below only to fill in applicable fields in

14 42

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

WAWF when creating payment requests and receiving reports in the system.

Routing Data Table*

Field Name in WAWF Data to be entered in WAWF

Pay Official DoDAAC HQ0490

Issue By DoDAAC W15QKN

Admin DoDAAC W15QKN

Inspect By DoDAAC W15BW9

Ship To Code N/A

Ship From Code N/A

Mark For Code N/A

Service Approver (DoDAAC) W15BW9

Service Acceptor (DoDAAC) W15BW9

Accept at Other DoDAAC N/A

LPO DoDAAC N/A

DCAA Auditor DoDAAC N/A

Other DoDAAC(s) N/A

(4) Payment request. The Contractor shall ensure a payment request includes documentation appropriate to the type of payment request in accordance with the payment clause, contract financing clause, or Federal Acquisition Regulation 52.216-7, Allowable Cost and

Payment, as applicable.

(5) Receiving report. The Contractor shall ensure a receiving report meets the requirements of DFARS Appendix F.

(g) WAWF point of contact.

(1) The Contractor may obtain clarification regarding invoicing in WAWF from the following contracting activity's WAWF point of contact.

Anthony Astrologo, anthony.f.astrologo.civ@army.mil

(2) Contact the WAWF helpdesk at 866-618-5988, if assistance is needed.

(End of clause)

15 42

Name of Offeror or Contractor:

PIIN/SIIN MOD/AMD

CONTRACT CLAUSES

2 52.204-9 PERSONAL IDENTITY VERIFICATION OF CONTRACTOR PERSONNEL JAN/2011

3 52.204-13 SYSTEM FOR AWARD MANAGEMENT MAINTENANCE OCT/2018

4 52.204-18 COMMERCIAL AND GOVERNMENT ENTITY CODE MAINTENANCE AUG/2020

5 52.212-4 CONTRACT TERMS AND CONDITIONS--COMMERCIAL ITEMS OCT/2018

6 52.222-50 COMBATING TRAFFICKING IN PERSONS OCT/2020

7 52.232-40 PROVIDING ACCELERATED PAYMENTS TO SMALL BUSINESS SUBCONTRACTORS DEC/2013

8 252.204-7012 SAFEGUARDING COVERED DEFENSE INFORMATION AND CYBER INCIDENT REPORTING DEC/2019

9 252.204-7015 NOTICE OF AUTHORIZED DISCLOSURE OF INFORMATION FOR LITIGATION SUPPORT MAY/2016

10 252.204-7018 PROHIBITION ON THE ACQUISITION OF COVERED DEFENSE TELECOMMUNICATIONS JAN/2021

EQUIPMENT OR SERVICES

11 252.204-7020 NIST SP 800-171 DOD ASSESSMENT REQUIREMENTS NOV/2020

12 252.232-7017 ACCELERATING PAYMENTS TO SMALL BUSINESS SUBCONTRACTORS--PROHIBITION APR/2020

ON FEES AND CONSIDERATION

13 52.212-5 CONTRACT TERMS AND CONDITIONS REQUIRED TO IMPLEMENT STATUTES OR SEP/2021

EXECUTIVE ORDERS--COMMERCIAL ITEMS

(a) The Contractor shall comply with the following Federal Acquisition Regulation (FAR) clauses, which are incorporated in this contract by reference, to implement provisions of law or Executive orders applicable to acquisitions of commercial items:

(1) 52.203-19, Prohibition on Requiring Certain Internal Confidentiality Agreements or Statements (JAN 2017) (section 743 of Division

E, Title VII, of the Consolidated and Further Continuing Appropriations Act, 2015 (Pub. L. 113-235) and its successor provisions in subsequent appropriations acts (and as extended in continuing resolutions)).

(2) 52.204-23, Prohibition on Contracting for Hardware, Software, and Services Developed or Provided by Kaspersky Lab and Other

Covered Entities (Jul 2018) (Section 1634 of Pub. L. 115-91).

(3) 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment. (AUG 2020)

(Section 889(a)(1)(A) of Pub. L. 115-232).

(4) 52.209-10, Prohibition on Contracting with Inverted Domestic Corporations (Nov 2015)

(5) 52.233-3, Protest After Award (AUG 1996) (31 U.S.C. 3553).

(6) 52.233-4, Applicable Law for Breach of Contract Claim (OCT 2004) (Public Laws 108-77 and 108-78 (19 U.S.C. 3805 note)).

(b) The Contractor shall comply with the FAR clauses in this paragraph (b) that the contracting officer has indicated as being incorporated in this contract by reference to…