Attachment_0002_-_QASP_-_ACES_-_Final.pdf

QASP- Army Cybersecurity Enterprise Support.

QUALITY ASSURANCE SURVEILLANCE PLAN (QASP)

Army Cybersecurity Enterprise Support

30JUN2016

1.0 INTRODUCTION

HQDA CIO/G-6 is responsible for the information management function for the Department of the Army and its responsibilities include:

Serving as the Chief Information Officer (CIO) of the Army, Action agency concentrating in research and development of Information Technology (IT) Area for the Department of the Army, which includes the theater, tactical, strategic, and sustaining base environments, Developing Global Network Enterprise Strategy products for Army wide deployment.

Executing Army wide joint military Enterprise IT Strategy Initiative programs and projects, Supporting and monitoring Army Information Strategy Initiatives Program, The QASP will be used as a Government document to enforce the inspection and acceptance terms of the contract. The Government reserves the right to make changes to this QASP during the period of performance (POP) by unilateral and or bilateral modification to the award. The QASP describes the mechanism for documenting noteworthy accomplishments or discrepancies for work performed by the contractor.

1.1 Purpose of the QASP

The QASP provides the cognizant CIO/G-6 Contracting Officer Representative (COR) the ability to conduct surveillance activities of contractor performance during the life of the order. The QASP details how and when CIO/G-6 will monitor, evaluate, and document contractor performance.

The QASP is intended to accomplish the following:

1. Define the roles and responsibilities of participating Government officials;

2. Identify the key deliverables that will be assessed;

3. Describe the performance objectives, the standards and thresholds, and the method of surveillance that will be employed by the Government in assessing the Contractor’s performance.

4. Define the Limitation on Contractor’s Liability.

1.2 Roles and Responsibilities of Government Officials

The QASP is a guide to be used by the CIO/G-6 COR in conducting surveillance activities of the contractor after contract award. The COR may review technical documents and products generated by the contractor. The COR will also review other contract deliverables, such as Monthly Status Reports, Plans, and other deliverables identified in the PWS. The COR will use this QASP as a tool to assess the contractor’s performance against the metrics and standards set forth in the order. These assessments will be the basis for determining incentives and disincentives for the contractor.

The Government Task Lead (GTL) and/or Contracting Officer’s Representative (COR) will be responsible for monitoring, assessing, recording, and reporting on the technical performance of the contractor on a day-to-day basis.

The Contracting Officer (KO), or his/her representative, will have overall responsibility for administering the contract. The KO will also be responsible for the day-to-day monitoring of the contractor’s performance in the area of contract compliance, contract administration, cost control; reviewing the COR’s assessment of the contractor performance; and resolving all differences between the COR’s version and the contractor’s version. The KO may call upon the technical expertise of other Government officials as required.

1.3 Key Deliverables to be assessed and Standards of Performance

The Performance Requirements Summary (table below) identifies the deliverables that will be evaluated by the QASP:

Ref No

PWS Para Deliverable Required Performance Svc

Performance Standard

Acceptable Quality Level

Allowable Deviation Standard

Method of Surveillance

(Quality Assurance)

4.1 3.1 Post-Award Brief and Minutes

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review by

COR/GTL

4.2 ALL Monthly Status

Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. Beginning 30 days after award and monthly thereafter.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.3 ALL Final Technical

Report

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. At the end of each performance period.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.4 3.3.1/Emergi ng PKI Technologies Analysis

PKI Emerging Technologies Reports

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. Paper will describe emerging technologies pertaining to PKI.

(30 pgs appx each).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.5 PWS,

Paragraph 3.3.1

PKI Emerging Technology Product Evaluations

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review by

COR/GTL

award. Paper will detail the testing and evaluation of emerging technologies in PKI.

This will encompass 2-5 product evaluations annually. (30 pgs appx each).

4.6 PWS,

Paragraph 3.3.1

PKI Analyses of Alternatives

Provide all necessary deliverables for the support of this award. This study will allow Army CIO/G-6 to differentiate between PKI solutions and how they pertain to their changing needs (15 pgs).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.7 PWS,

Paragraph 3.3.1

Technology White Papers

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This study will provide a snapshot of technological developments that could impact PKI initiatives. (10 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.8 3.3.2/ PKI

Transformati on

Electronic Library Updates for all program documents

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This is an Army CIO/G-6 repository for its IDAM Division program documents. Appx 2-3 document updates per month throughout the TO period of performance.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.9 PWS,

Paragraph 3.2.2

PKI Architecture Analyses

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This is a review of the

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Army’s present-state PKI infrastructure. (10 pgs appx).

4.10 PWS,

Paragraph 3.3.2

Technology Implementation Analyses

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will review how newly implemented technologies are improving or impacting the Army and DoD PKI (15 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.11 PWS,

Paragraph 3.3.2

PKI Evaluation Papers

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This study will evaluate the PKI and Public Key Enablement (PKE) to ensure they meet the Army’s evolving needs (15 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.12 PWS,

Paragraph 3.2.2

PKI Configuration Analyses

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This analysis will provide recommendations on how to improve

PKI/PKE

configurations within the Army.

(15 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.13 PWS,

Paragraph 3.3.2

Impact/Risk Assessment Reports

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will assess how PKI technologies are deployed within the tactical environment (20 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

4.14 PWS,

Paragraph 3.3.2

PKI Guidance Recommendations Report

Provide all necessary deliverables for the support of this award. This report will detail recommended changes based on the testing and evaluation of emerging technologies, and on the research and analysis completed across PKI. (10 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.15 3.3.3/Policy Analysis

Army Policy Memorandum Recommendations

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. These studies will track DoD and Army policies as they pertain to PKI. (10 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours.

5% with no impact to operational requirement, programs and plans.

Review/Inspect by the COR/GTL

4.16 PWS,

Paragraph 3.3.3

Army Technology Policy Position Papers

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. These studies will analyze how the Army’s new technology solutions integrate with PKI. (10 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.17 PWS,

Paragraph 3.3.3

Policy Working Group Briefings

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. These papers will summarize policy working groups.

(10 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review by

COR/GTL

4.18 3.3.4/ Registration Authority

(RA)

Advancemen t

Registration Practice Statement (RPS) /Certificate Practice Statement Review Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This will provide an annual analysis of how RPS

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL is being utilized by Registration Authorities (RAs).

(20 pgs appx).

4.19 PWS,

Paragraph 3.3.4

RA Process Improvements Recommendations Report

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This study will analyze current RA operations and make recommendations on how to streamline processes to improve IA across the Army. (15 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.20 PWS,

Paragraph 3.3.4

Issuance Performance Metrics Analysis

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report presents statistical analyses of NIPR and SIPR tokens issued. (1 pg).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.21 PWS,

Paragraph 3.3.4

Next Generation (NexGen) RA Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will present futuristic solutions for automating RA technology. (30 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review by

COR/GTL

PWS,

Paragraph 3.4.1

Current State Identity Data Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will analyze redundancies in the collection and maintenance of identity data.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours.

5% with no impact to operational requirement, programs, and plans.

COR/GTL.

PWS,

3.4.1

Army Identity Attribute Specification (IAS) Business Processes Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will examine all new identity attributes needed to support the cyber functions of the Army IdAM System.

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours.

5% with no impact to operational requirement, programs, and plans.

Review by

COR/GTL.

PWS,

Paragraph 3.4.1

Attribute Change Control Process Development Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report details the requirements necessary to develop an attribute change control process within the Army.

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours.

5% with no impact to operational requirement, programs, and plans.

Review by

COR/GTL.

PWS,

Paragraph 3.4.1

Requirements Vetting Process Analysis

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will analyze the attributes needed by Army organizations and assess their feasibility.

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours.

5% with no impact to operational requirement, programs, and plans.

Review by

COR/GTL.

PWS,

Paragraph 3.4.1

Account Life Cycle Management Analysis Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will analyze the user account lifecycle to streamline and automate.

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours.

5% with no impact to operational requirement, programs, and plans.

Review by

COR/GTL.

PWS,

Paragraph 3.4.1

End User Identity Use Case

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This use case will map the

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours.

5% with no impact to operational requirement, programs, and plans.

COR/GTL.

identity lifecycle process for users across the Army.

PWS,

Paragraph 3.4.2

Reference Architectures Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will document the IdAM architectures and how they interface with DISA

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours.

5% with no impact to operational requirement, programs, and plans.

Review by

COR/GTL.

PWS,

Paragraph 3.4.2

Attribute Based Access Controls (ABAC) and Role Based Access Controls (RBAC) Information Papers

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will analyze the effectiveness of ABAC and RBAC and how best to utilize these technologies within the Army (50-100 pgs appx).

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs, and plans.

Review by

COR/GTL

PWS,

Paragraph 3.4.2

ABAC and RBAC Army Implementation Plans

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. These plans will document how best to implement these technologies.

(30 pgs appx).

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

PWS,

Paragraph 3.4.2

ABAC Operational View and Reference Architecture Analysis

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will provide the baseline for analyzing optimal ABAC operational architectures. (50 pgs appx)

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

PWS,

3.4.2

RBAC Operational View and Reference Architecture Analysis

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will provide the baseline for analyzing optimal RBAC operational architectures. (50 pgs appx)

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

PWS,

Paragraph 3.4.2

ABAC and RBAC Implementation Methodologies Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will examine potential risks associated with ABAC and RBAC implementation and provide recommended methodologies for mitigating these risks (50 pgs appx)

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

PWS,

Paragraph 3.4.2

ABAC and RBAC Best Business Practices Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will analyze efficiencies by effectively implementing ABAC and RBAC technologies (50 pgs appx)

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs, and plans

Review/Inspect by the COR/GTL

PWS,

Paragraph 3.4.2

Analysis of Alternatives for Federated Dervices Findings and Recommendation Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This analysis will examine which information services can be federated and integrated with Army information services without posting information security threats.

(30 pgs appx).

The contractor shall provide all necessary personnel, products, and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs, and plans

4..22 PWS

3.4.3

Identity Management Infrastructure Improvements Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report presents analysis on how to improve the identity management systems within the Army (20 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.23 PWS,

Paragraph 3.4.3

Operation and Reference Architectures Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will provide an update on progress of IdAM in the tactical space (10 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.24 PWS,

Paragraph 3.4.3

Army EIDS Concept of Operations (CONOPS) Update Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will provide updates and recommendations for Army EIDS

CONOPS

improvements. (30 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.25 PWS,

Paragraph 3.4.3

Army IdAM Roadmap Update Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will diagram the Army’s IdAM environment and how it interfaces with DISA.

(diagram)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review by

COR/GTL

4.26 PWS,

Paragraph 3.4.3

Army EIDS Identity Provisioning Capability Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will provide a monthly snapshot

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans of accounts provisioned by EIDS. (5 pgs appx)

4.27 PWS,

3.4.3

Army EIDS Authentication and Authorization Framework Analysis

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This study will analyze the EIDS framework and makes necessary recommendations to ensure EIDS meets the Army’s needs, mission and goals (50 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.28 PWS,

Paragraph 3.4.3

Army EIDS Identity Federation Capability Analysis

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will analyze how federating services streamlines the existing DISA EIDS capability (50 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.29 3.5.1/ Governance and Policy Analysis

Document Review/ Comment Matrix Analysis

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will examine overlaps and gaps in existing governance and policy documents (50 pgs appx).

necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review by

COR/GTL

4.30 PWS,

Paragraph 3.5.1

Best Business Practices (BBP) Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will examine how to build efficiencies into Army business

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans practices (30 pgs appx).

4.31 PWS,

Paragraph 3.5.1

Policy Guidance/Updates Recommendations Report

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This study will provide policy recommendations for COMSEC, as required.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.32 PWS,

Paragraph 3.5.1

Portfolio Management, Line of Efforts (LOE) Roadmap

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will provide direction guidance and implementation timeline to support the Army’s key initiatives for effectiveness and efficiency strengthen network operations (e.g.

Mid-Term, Long- Term).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.33 PWS,

Paragraph 3.5.1

Next Generation Cryptographic Policy Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will provide new direction and guidance on how to implement new Cryptographic capability (20 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review by

COR/GTL

4.34 PWS,

Paragraph 3.5.1

AR 25-2 - COMSEC

Policy Guidance/Updates Recommendations Report

Provide all necessary deliverables for the support of this award. This report will examine how new Cyber policies and technological advancements

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans impact this policy (20 pgs appx)

4.35 PWS,

Paragraph 3.5.1

AR Policies Guidance/Updates Recommendations Report

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This report will examine how new Cyber policies and technological advancements impact this policy.

(20 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.37 PWS,

Paragraph 3.5.1

DA PAMs Policy Guidance/Updates Recommendations Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will examine how new Cyber policies and technological advancements impact this policy (20 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review by

COR/GTL

4.38 3.5.2/Key Managemen t Integration

Electronic Key Management Systems (EKMS) to Key Management Infrastructure (KMI) Transition Plan

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This is a report that analyzes the optimal method for transitioning the Army from EKMS to KMI (20 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.39 PWS,

Paragraph 3.5.2

Life Cycle Management Infrastructure (KMI) Transition Plan

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This report will track, evaluate, and report the opening/closing of COMSEC accounts (Quarterly)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

440 PWS,

3.5.2

Key Management Baseline Standards Report for Common Operating Environment (COE)

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will examine the existing baseline construct for COE (30 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.41 PWS,

Paragraph 3.5.2

Key & Certificate Management Plan (KCMP) BBP Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will identify streamlined, cost-efficient methods for effectively managing key and certificate issuances (30 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review by

COR/GTL

4.42 PWS,

Paragraph 3.5.2

Report for Army Network Campaign Plan

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.43 3.5.3/COMS

EC

Modernizati on Compliance

Cryptographic Modernization Strategy Analysis

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will assess how the Army can improve its strategy for acquiring and developing modernized cryptographic capabilities (50-100 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.44 PWS,

Paragraph 3.5.3

Develop, Distribute, and Maintain Cryptographic Evolution Charts

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This will diagram cryptographic evolution and how technological advancements impact legacy Army

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Systems Diagram).

4.45 PWS,

Paragraph 3.5.3

Information Systems Security Program Cryptographic Requirements Validation Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will validate the Army’s cryptographic requirements against DoD requirements. (5 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.46 PWS,

Paragraph 3.5.3

Commercial Solutions Integration Strategy Timeline Roadmap

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This study will analyze how commercial solutions can best integrate into Army systems and assess progress towards Army’s strategic goals (15 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.47 PWS,

Paragraph 3.5.3

New Capabilities/ Technology Report

Provide all necessary deliverables and technical reports necessary for the support of this award. This study will analyze new and emerging technologies and how they can integrate into the Army’s COMSEC program while remaining compliant with existing requirements (50 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

4.48 PWS,

3.5.3

COMSEC

Replacement and Obsolescence and Divestiture Strategy

Provide all necessary quality assurance deliverables necessary for the support of this award. This study will examine how best to leverage legacy COMSEC solutions while adequately disposing of obsolete capabilities (40 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review by

COR/GTL

4.49 3.5.6/COMS

EC Strategic Planning

Key Management Roadmap Analysis

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This study will provide an as-is mapping of key management capabilities (30 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.50 PWS,

Paragraph 3.5.6

Cryptographic Roadmap

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This study will provide an as-is mapping of cryptographic capabilities (30 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.51 PWS,

Paragraph 3.5.6

Cryptographic Modernization Annual Planning Memo

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will examine cryptography advancements and propose a plan for implementing them across the Army (10 pgs appx).

necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

4.52 PWS,

3.5.6

Cryptographic Modernization Guidance Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will provide key guidance on risk mitigation for modernizing Army cryptography capabilities (40 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.53 PWS,

Paragraph 3.5.6

COMSEC

Obsolescence and Divestiture Report

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This report will provide key guidance CYBERW the Chairman Joint Chiefs Instruction/Notice (CJCSI) 6510 to transition off of legacy cryptography capabilities (15 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.54 PWS,

Paragraph 3.5.6

Document review on BOIPs, technical publications

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will track the Army’s progress in modernizing its cryptographic capabilities with the Programs of Record (POR) (40 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.55 PWS,

Paragraph 3.5.6

Next Generation Cryptographic Capabilities

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will track the Army’s progress in modernizing its cryptographic capabilities (40 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

4.56 PWS,

3.5.6

Cryptographic Modernization Assessment Report (Command Plan Roll-Up)

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This report will track the Army’s progress in modernizing its cryptographic capabilities with Camp/Post/Stations (40 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

4.57 PWS,

3.5.6

Monitor and track the execution of the COMSEC/ Modernization Budget

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This report will examine requirements for projecting cryptography capabilities to strengthen and implement a robust network (15 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

4.58 PWS,

3.5.6

Prepare and document input for Army Budget Estimate Submission (BES)

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This study will assist with examining and reporting data for modernization to deliver enhance capability to the tactical edge (15 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.59 3.6/ Network Operations Analysis

IA/ NetOps Briefings Reports

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This briefing will provide up-to-date information for key leaders on IA and NetOps advancements (3- 15 pgs Briefings)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

4.60 PWS,

3.6

Impact Statements Provide all necessary deliverables and technical reports necessary for the support of this award. These statements will provide leadership with concise information on the status of NetOps (1 pg)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.61 PWS,

Paragraph 3.6

NetOps Strategy Report

Provide all necessary technical updates, quality assurance deliverables and technical reports necessary for the support of this award. This study will outline a strategy for improving Army NetOps and measure the Army’s progress in meeting strategic goals and objectives (30 pgs appx)

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts and technical updates corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.62 PWS,

Paragraph 3.6

Policy Recommendations Report

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. This report will provide policy recommendations based on changes in NetOps (15 pgs appx).

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.63 PWS,

Paragraph 3.8.8 Emerging Technologie s Integration

Analysis of Alternatives (AoA) for Authentication Methodologies

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. Identify and address AuthN methods used in Enterprise environments across industry to identify AuthN alternatives for Army and DoD.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

4.64 PWS,

3.8.8

Authentication Requirements

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. Develop and keep up to date formal Army AuthN Requirements document based on specific Army user populations.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.65 PWS,

Paragraph 3.8.8

Authentication Roadmap

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. Develop the Army AuthN roadmap to identify the use of AuthN methodologies throughout the Army.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.66 PWS,

Paragraph 3.8.8

Functional Attribute Specification

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. Defines the critical attributes that will drive the IT Entitlement Service.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.67 PWS,

Paragraph 3.8.8

Analysis of Alternatives for Authorization Suites

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. Analysis of key vendor suites and down selection for further testing and evaluation.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.68 PWS,

Paragraph 3.8.8

Provisioning Roadmap

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. Defines the critical iterative processes and coordination requirements between Army, DISA, and DMDC to complete the

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans provisioning services.

4.69 PWS,

Paragraph 3.8.8

Provisioning Policies and Guidelines

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. Establish the principals and policies that forest owners will adhere to and follow once connected to the DISA provisioning services.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.70 PWS,

Paragraph 3.8.8

Whitepapers and Information Briefings

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. Details of emerging ICAM technologies for Army Senior Leadership knowledge.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.71 PWS,

Paragraph 3.8.8

Industry Demonstrations and Briefings

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award.

Coordinating vendor demonstrations of emerging technology for the Army CIO/G-6 Senior Leadership.

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans

Review/Inspect by the COR/GTL

4.72 PWS,

Paragraph 3.8.8

Annual Emerging Technology Demonstration

Provide all necessary quality assurance deliverables and technical reports necessary for the support of this award. Annual offsite demonstration to Army CIO/G-6 Cyber Security Leadership of emerging security technology and

The contractor shall provide all necessary personnel, products and deliverables.

95% error free draft report/docume nts corrected to 100% error free within 24 hours

5% with no impact to operational requirement, programs and plans possible integration efforts for consideration.

4.73 PWS

Paragraph 3.9.3 Continuous Monitoring and Identity Analytics

Develop…