SEC_HQ__Engineering_and_Administrative_Support_PWS_Standalone_01Dec2015.doc

Performance Work Statement (PWS)

Software Engineering Center Headquarters (SEC HQ) Engineering and Administrative Support

12/01/2015

Version 1.0 4Vision Statement

1 Scope

1.1 Background

1.3 Order Type

1.4 Period of Performance

1.5 Place of Performance

1.5.1 Onsite (Government Facility)

1.5.2 Offsite (Contractor Facility)

2 Applicable Documents and Websites 3 Requirements

3.1 General

3.1.1 Materials, Equipment and Facilities

3.1.2 Security

3.1.3 Inspection and Acceptance / FOB

3.1.4 Phase In and Phase Out

3.1.5 Contract Management

3.1.6 Travel

3.1.7 Personnel Qualifications

3.1.8 Work Hours

3.1.9 Contractor Manpower Reporting (CMR)

3.1.10 Contractor Mandatory Training

3.1.11 Formal Reviews

3.2 Performance

3.2.1 The contractor shall administer and implement a physical security program for SEC work areas.

3.2.2 The contractor shall provide Personnel Security support for SEC.

3.2.3 The Contractor shall provide Information Security support for SEC.

3.2.4 The contractor shall provide Operations Security (OPSEC) support for SEC.

3.2.5 The contractor shall provide Special Security support for SEC.

3.2.6 The contractor shall provide Safety support for SEC.

3.2.7 Provide Communications Support for SEC.

3.2.8 Provide Customer Relation support for SEC.

3.2.9 Provide Process Improvement for SEC.

3.2.10 The Contractor shall provide Operational Support for SEC.

3.2.11 Provide Planning/Strategic Studies for SEC.

3.2.12 Provide Logistics Support for SEC.

4 Deliverables 5 Data Rights

Performance Work Statement (PWS) Software Engineering Center Headquarters (SEC HQ) Engineering and Administrative Support Vision Statement 1 Scope

This Performance Work Statement (PWS) provides project management, communications support, data analysis and administrative support, security support and customer relations in support of the U.S. Army Communications-Electronics Command (CECOM) Software Engineering Center (SEC), Operations Directorate (OD) at Aberdeen Proving Ground (APG), Maryland.

1.1 Background

The SEC Operations Directorate (OD) serves as the focal point for all internal, external and enterprise level functions and tasks. Work efforts include planning, security, human resource, process improvement and technical assessments to help the SEC support their customers and provide updates to CECOM Headquarters (HQS) by providing daily support to the SEC Directors Office, SEC HQs staff, and the management of inquiries from CECOM, customers and other agencies. Support will consist of strategic planning by performing various financial and engineering studies to assist in the development of budget forecasts, assist in providing project management support for various efforts that help to improve the quality or efficiency of the organization, maintenance of various center level metrics and perform other administrative duties to keep SEC records and data up to date. The Software Acquisition Management/Centralized Acquisition and License Management (SAM/CALM) services are responsible for commercial hardware and software acquisition, license management, software asset management tracking and reporting. It provides a centralized procurement and license management for Commercial-Off-The-Shelf (COTS) software/hardware in order to reduce total costs of ownership and license redundancy. The SEC security function is the focal point for all security planning, policy and security process implementation throughout SEC. This office is responsible for all aspects of Physical Security, Personnel Security (PERSEC), Operations Security (OPSEC), Information Security (INFOSEC), Industrial Security, Communications Security (COMSEC), Security Education and Safety programs throughout the SEC.

1.3 Order Type

This contract is a Cost Plus Fixed Fee-Term (CPFF-Term) for all line items other than travel and materials. Travel and materials are on a Cost basis in accordance with FAR 16.302.

1.4 Period of Performance

The period of performance shall be a twelve (12) month base period with four twelve (12) month option periods.

1.5 Place of Performance

1.5.1 Onsite (Government Facility)

The place of performance for this contract shall be at APG, MD.

1.5.2 Offsite (Contractor Facility)

Place of Performance (SEC Security) for this TO shall be at Fort Huachuca, AZ and Fort Lee, VA.

2 Applicable Documents and Websites

The following documents and websites are referenced for the performance of this contract. The Government reserves the right to update applicable documents.

Department of Defense Directives:

DoDD 5000.01 The Defense Acquisition System, 20 November 2007

DoDD 8500.01E Information Assurance, 23 April 2007

Department of Defense Instructions:

DoDI 5000.02 Operation of the Defense Acquisition System, 8 Dec 2008

DoDI 5200.40 Information Technology Security Certification and Accreditation Process, 30 Nov 1999

DoDI 8510.01 Information Assurance Certification and Accreditation Process (DIACAP), 28 Nov 2007

DoDI 8500.2 Information Assurance (IA) Implementation, 6 February 2003

DoDI 8520.02 Public Key Infrastructure (PKI) and Public Key (PK) Enabling, 24 May 2011

DoD 8570.01M Information Assurance Workforce Improvement Program, 24 January 2012

Department of Defense Manuals:

DoDM 8260.03 GFM DI Implementation Unique Identification (UID) for GFM Volume 1, 20 November 2009

DoDM 8570.01 Information Assurance Workforce Improvement Program, 24 Jan 2012

Army Regulations/Other:

AR 190-13

Army Physical Security Program, 30 Oct 1993

AR 190-51

Security of Unclassified Army Property (Sensitive & Non Sensitive), 23 Nov 2010

AR 25-2

Information Assurance, 23 March 2009

AR 380-5

Information Security Program, 23 Nov 2010

AR380-19

Information Systems Security, 27 Feb 1998

AR 380-67

Personnel Security Program, 9 Sept 1988

AR 381-12

Threat Awareness and Reporting Program, 4 Oct 2010

AR 525-13

Antiterrorism, 11 Sept 2008

AR 530-1

Operations Security, 19 Apr 2007

AR 710-2

Supply Policy below the National Level, 28 March 2008

DIAM 50-5

Sensitive Compartmented Information Contractor Administration Security, 22 Oct 1979

SEC

SEC Style/Branding Guide, 19 Apr 2013

3 Requirements

3.1 General

3.1.1 Materials, Equipment and Facilities

The Government will provide onsite contractor personnel with adequate workspace and materiel equivalent to that used by the Government personnel (i.e., personal computers, desks, chairs, cabinet space, and telephones) on a rent free basis. Government shall provide access to data and information required for the execution of this effort. GFE/GFP will be conveyed to the contractor. During the course of this contract, the contractor shall properly handle, transport, operate, maintain, track, account for, and control all GFE/GFP required for support of the DoD mission, throughout the entire performance period of the Contract. Damage, destruction, theft or loss, of GFE/GFP will be the contractor's responsibility. The contractor shall either repair or replace to the government's satisfaction. The Government will determine acceptance of repairs and replacement. Contractor shall notify the COR within twenty-four (24) hours of damage, destruction, theft or loss of GFEIGFP. In addition, all subsequent contractor-acquired items (hardware and software) in the performance of this contract shall be added to, and maintained as, part of this GFE/GFP pool, until the end of the performance period of the contract, or until directed otherwise by the Government. The contractor shall be responsible for all GFE/GFP and shall take appropriate measures to maintain control and accountability of all GFE/GFP inventory. Management and control methods for GFE/GFP employed by the contractor must be supportive of and consistent with effective performance of tasks under this contract. All GFE/GFP shall be returned to the Government at the end of the TO for subsequent employment in support of the DoD mission.

A list of government furnished materials, equipment, and facilities for this contract is provided in Appendix K. The Contractor shall provide a Status of GFE Listing IAW CDRL C002 (DI-MGMT-80269).

3.1.2 Security

The highest level of facility clearance required for the contractor to perform on this contract is TOP SECRET. The highest level of classified material the contractor will be required to safeguard at its own facility is NONE.

The following security requirements apply to this contract and are further described in the DD Form 254, Contract Security Classification Specification (See Appendix G):

· This contract will require access to Sensitive Compartmentalized Information (SCI.)

· This contract will require access to Non-SCI Intelligence Information.

· This contract will require access to NATO Information.

· This contract will require access to Foreign Government Information.

· This contract will require access to For Official Use Only Information (FOUO.)

· This contract will require access to SIPRNET/NIPRNET/JWICS/NSANet - Government Facilities Only.

· In performing this contract, the contractor will have access to classified information only at another contractor's facility or a government activity.

· In performing this contract, the contractor will receive classified documents only.

· In performing this contract, the contractor will receive and generate classified material.

· In performing this contract, the contractor will fabricate, modify, or store classified hardware.

· In performing this contract, the contractor will have operational security (OPSEC) requirements.

· In performing this contract, the contractor will have sensitive IT duties.

· In performing this contract, the contractor will have SCI IT Processing.

3.1.3 Inspection and Acceptance / FOB

Inspection and acceptance shall be at the Software Engineering Center (SEC), Bldg. 6002, Aberdeen Proving Ground, Maryland. Deliverables shall be FOB destination.

Ship to address is:

ATTN: AMSEL-SEC-OSA

Bldg. 6002 Combat Drive

Aberdeen Proving Ground, MD 21005

All deliverables shall be delivered to the Government IAW PWS paragraph 3.2 and PWS Appendix D.

3.1.4 Phase In and Phase Out

Transition periods are scheduled for the 60 days immediately after contract start date (phase in) and for the 60 days prior to contract end date (phase out) to allow for orderly contract transition. The contractor shall prepare and deliver a Phase Out Plan IAW CDRL D029 (DI-MISC-80508B).

3.1.5 Contract Management

The Government will provide the necessary oversight, management, and review of cost and performance data submitted in accordance with the Contract Data Requirements Lists (CDRLs) addressed in paragraph 4.0 below. In addition to these formal reporting requirements, the Government will maintain appropriate oversight through continuous informal technical interchanges with the contractor. When substituting personnel, the contractor shall ensure that the new personnel meet or exceed the stated qualification requirements. This Contract shall be addressed in the IAW Monthly Status Reports CDRL C003 (DI-MGMT-80368A) and Monthly Performance and Cost Reports IAW CDRL B001 (DI-FNCL-80912.) The contractor will be monitored by the COR to ensure all standards set forth in section 3.2 are adhered to.

3.1.6 Travel

A summary of anticipated travel is provided in Appendix E. All travel must be authorized in advance by the Contracting Officer or designee and be done IAW established travel regulations and policies. Authorized travel will be payable as a direct cost. There will be no reimbursement for local travel in and around the primary work site. Local travel is defined as fifty (50) miles or less. Reimbursement for the cost of lodging and incidental expenses will be considered to be reasonable and allowable to the extent that costs submitted for reimbursement do not exceed the rates and amounts allowed by the Joint Travel Regulation as it applies to civilian employees of the United States Government. The contractor shall prepare and deliver trip reports IAW CDRL A001 (DI-ADMN-81308A) and meeting minutes IAW CDRL A012 (DI-ADMN-81505).

3.1.7 Personnel Qualifications

The contractor shall employ only personnel who meet the minimum qualifications provided under Appendix A and are fully qualified and competent to perform the tasks specified in this PWS. The contractor shall ensure that such personnel are utilized in a manner that maximizes productivity and efficiency. For purposes of surveillance, resumes of contractor personnel performing support services as described within this PWS are subject to verification by the COR to ensure that the support personnel meet or exceed the proposed category descriptions, qualifications, and possess the minimum technical skills and experience specified at Appendix A of this PWS.

The critical personnel specified in Appendix A of this PWS are considered to be essential to work performance. At least 30 days prior to diverting any of the specified individuals to other programs or contracts (or as soon as possible, if an individual must be replaced, for example, as a result of leaving the employ of the Contractor), the Contractor shall notify the Contracting Officer and shall submit, IAW CDRL C001 DI-MGMT-80368A, Status Report/Critical Personnel Change, comprehensive justification for the diversion or replacement request (including proposed substitutions for critical positions) to permit evaluation by the Government of the impact on performance under this contract. The Contractor shall not divert or otherwise replace any critical personnel without the written consent of the Contracting Officer. The Government may modify the contract to add or delete key personnel at the request of the contractor or Government. Critical positions shall be filled within thirty (30) calendars days of any vacancy. Non-critical positions shall be filled within forty-five (45) calendar days of any vacancy.

3.1.8 Work Hours

Full time personnel are expected to work a 40 hour work week and 8 hour work day. Overtime, defined as hours worked that are in excess of 40 hours per week, is not authorized unless written authorization is obtained from the PCO. Due to limited equipment resources within the SEC test beds, and in order to meet scheduling constraints of individual contracts, contractor personnel periodically may be required to utilize SEC test bed equipment on other than a prime shift. Prime shift is defined as 0800 hours to 1700 hours, Monday through Friday. The Contractor shall be required to adhere to the published Federal Holiday schedule.

Post/Base closures due to emergencies: From time to time, the Post/Base Commander may decide to close all or part of the Post/Base in response to an unforeseen emergency or similar occurrence. Such emergencies include, but are not limited to, adverse weather such as snow or flood, an Act of God, such as tornado or earthquake, or a post/base disaster such as a natural gas leak or fire. Contractor personnel are considered non-essential personnel for purposes of any instructions regarding the emergency. Contractor personnel shall promptly secure all Government furnished property appropriately and evacuate in an expedient but safe manner.

The Contractor is authorized to work an Alternate Work Schedule (AWS), with approval by the COR, provided that there is no impact to cost or performance. AWS is defined as both flexible work schedules and compressed work schedules. Flexible work schedule is defined as, in the case of a full time employee, has 80-hour bi-weekly basic work requirement that allows an employee to determine his or her own schedule within the limits set by SEC, and in the case of a part-time employee, has a bi-weekly basic work requirement of less than 80 hours that allows an employee to determine his or her own schedule within the limits set by SEC. Compressed work schedule is defined as, in the case of a full-time employee, an 80-hour biweekly basic work requirement that is scheduled by an agency for less than 10 workdays; and in the case of a part-time employee, a biweekly basic work requirement of less than 80 hours that is scheduled by an agency for less than 10 workdays and that may require the employee to work more than 8 hours in a day.

The contractor shall at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is open for operations.

3.1.9 Contractor Manpower Reporting (CMR)

The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the contractor will report ALL contractor manpower (including subcontractor manpower) required for performance of this contract. The contractor is required to completely fill in all the information in the format using the following web address: https://cmra.army.mil. The required information includes:

· Contracting Office, PCO, Contracting Officers Technical Representative;

· Contract number, including task and delivery order number;

· Beginning and ending dates covered by reporting period;

· Contractor name, address, phone number, e-mail address, identification data for incoming contractor employee;

· Estimated direct labor hours (including sub-contractors);

· Estimated direct labor dollars paid this reporting period (including sub-contractors);

· Total payments (including sub-contractors);

· Predominant Federal Service Code (FSC) reflecting services provided by contractor (and separate predominant FSC for each sub-contractor if different);

· Estimated data collection cost;

· Organizational title associated with the Unit Identification Code (UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the contractor with its UIC for the purposes of reporting this information);

· Locations where contractor and sub-contractors perform the work (specified by zip code in the United States and nearest city, country, when in an overseas location, using standardized nomenclature provided on website);

· Presence of deployment or contingency contract language; and

· Number of contractor and sub-contractor employees deployed in theater this reporting period (by country). As part of its submission, the contractor will also provide the estimated total cost (if any) incurred to comply with this reporting requirement

Reporting period will be the period of performance not to exceed twelve (12) months ending 30 September of each government fiscal year and must be reported by 31 October of each calendar year. Contractors may use a direct Extensible Markup Language (XML) data transfer to the database server or fill in the fields on the website. The XML direct transfer is a format for transferring files from a contractors systems to the secure web site without the need for separate data entries for each required data element at the web site. The specific formats for the XML direct transfer may be downloaded from the web.

3.1.10 Contractor Mandatory Training

The contractor shall complete all government mandated training requirements as determined by CECOM SEC for contractor employees that occur during the period of performance for this contract. Contractors shall track Mandatory Training compliance using their own resources. Evidence of compliance shall be presented upon Government request. The use of the Total Employee Development (TED) system is not required.

3.1.11 Formal Reviews

A post award orientation meeting shall be held at the Government's facility at Aberdeen Proving Ground, MD within ten (10) business days after award of contract. The contractor shall prepare and deliver meeting minutes IAW A012 (DI-ADMN-81505). This provision shall in no way constitute grounds for excusable delay by the contractor in performance under the contract.

3.2 Performance

The following section specifies the Performance Objectives and Performance Elements for this contract. The contractor’s performance will be evaluated by the Government in accordance with the PWS and the Quality Assurance Surveillance Plan (QASP). Satisfactory performance constitutes successful performance of the tasks as set forth in the following paragraphs.

3.2.1 The contractor shall administer and implement a physical security program for SEC work areas.

Performance Standards

a) STD: AR 190-51 AQL: 100% compliant with standard

b) STD: AR 525-13 AQL: 100% compliant with standard

c) STD: AR 710-2 AQL: 100% compliant with standard

3.2.1.1 The Contractor shall develop, update, and disseminate the Physical Security Plan for SEC.

Performance Standards

a) STD: AR 190-13 AQL: 100% compliant with standard

b) STD: AR 190-51 AQL: 100% compliant with standard Deliverables D022 SEC Physical Security Plan

3.2.1.2 The Contractor shall prepare and maintain Facility Risk Assessments in support of Mission Essential and Vulnerability Areas (MEVA) for SEC.

Performance Standards

a) STD: DA PAM 190-51 AQL: 100% compliant with standard

D005 DA Form 7278-R Risk Level Worksheet

3.2.1.3 The Contractor shall ensure and report accountability of SEC issued badges.

a) STD: Notify SEC Security Manager within 1 hour of reported loss.

AQL: Notify SEC Security Manager within 3 hours of reported loss.

3.2.1.4 The Contractor shall conduct physical security inspections for SEC facilities.

Performance Standards

a) STD: AR 190-13 AQL: 100% compliant with standard

b) STD: AR 380-5 AQL: 100% compliant with standard

D021 SEC Physical Security Inspection Report

3.2.1.5 The Contractor shall develop and maintain Key Control Program for SEC facilities.

a) STD: AR 190-51 AQL: 100% compliant with standard

D011 Key and Lock Inventory

3.2.1.6 The Contractor shall secure classified areas until IDS becomes fully operational.

a) STD: AR 380-5 AQL: 100% compliant with standard

b) STD: IDS outage addressed within 3 hours of notification 24/7 AQL: IDS outage addressed within 6 hours of notification 24/7

3.2.1.7 The Contractor shall conduct degausser recertification for SEC.

Performance Standards

a) STD: NSA-CSS Policy Manual 9-12 AQL: 100% compliant with standard

D006 Degausser Recertification Memo

3.2.1.8 The Contractor shall update access control lists for SEC controlled areas.

a) STD: AR 190-13 AQL: 100% compliant with standard

b) STD: AR 190-51 AQL: 100% compliant with standard

D004 Controlled Area Access List

3.2.1.9 The Contractor shall maintain and update a list of all Physical Security Work Orders for SEC.

a) STD: AR 190-13 AQL: 100% compliant with standard

b) STD: AR 190-51 AQL: 100% compliant with standard

D013 Physical Security Work Order List

3.2.2 The contractor shall provide Personnel Security support for SEC.

a) STD: AR 380-67 AQL: 100% compliant with standard

3.2.2.1 The Contractor shall process Visit Requests by accessing Scattered Castles and /or the Joint Personnel Adjudication System (JPAS) for SEC.

Performance Standards

a) STD: Within 48 hours of receipt of request during business hours AQL: Within 72 hours of receipt of request during business hours

3.2.2.2 The Contractor shall establish owning/servicing relationship in JPAS for new personnel for SEC.

Performance Standards

a) STD: Within (1) work day of notification of arrival during business hours AQL: Within (2) work days of notification of arrival during business hours

3.2.2.3 The Contractor shall release owning/servicing relationship in JPAS for departing personnel for SEC.

Performance Standards

a) STD: Within (1) work day of notification of arrival during business hours AQL: Within (2) work days of notification of arrival during business hours

3.2.2.4 The Contractor shall validate and process picture badge/access requests for personnel working for/in SEC facilities.

Performance Standards

a) STD: AR 380-67 AQL: 100% compliant with standard

3.2.2.5 The Contractor shall provide training/informational newsletters to ensure awareness of current Personnel Security related issues/events/responsibilities for SEC workforce.

Performance Standards

a) STD: AR 380-67 AQL: 100% compliant with standard

b) STD: AR 380-5 AQL: 100% compliant with standard

A006 Personnel Security Newsletter

3.2.3 The Contractor shall provide Information Security support for SEC.

a) STD: AR 380-5 AQL: 100% compliant with standard

3.2.3.1 The Contractor shall properly handle Classified Military Information (CMI)/Controlled Unclassified Information (CUI) for SEC.

Performance Standards

a) STD: AR 380-5 AQL: 100% compliant with standard

3.2.3.2 The Contractor shall ensure and provide oversight on the conduct of annual reviews for SEC classified holdings.

Performance Standards

a) STD: AR 380-5 AQL: 100% compliant with standard

b) STD: CECOM INFOSEC SOP AQL: 100% compliant with standard

D002 Annual Review of Holdings Compliance Statement

3.2.3.3 The Contractor shall provide guidance on packaging and transmission of classified information for SEC.

a) STD: AR 380-5 AQL: 100% compliant with standard

3.2.3.4 The Contractor shall review packaging and marking for classified material being transmitted.

Performance Standards

a) STD: AR 380-5 AQL: 100% compliant with standard

3.2.3.5 The Contractor shall ensure combination of locks on classified storage containers are changed for SEC.

Performance Standards

a) STD: AR 380-5 AQL: 100% compliant with standard

b) STD: AR 190-51 AQL: 100% compliant with standard

3.2.3.6 The Contractor shall assist with preliminary inquiries to ascertain all of the circumstances surrounding a loss or compromise for classified information/material.

Performance Standards

a) STD: AR 380-5 AQL: 100% compliant with standard

3.2.3.7 The Contractor shall provide training/informational newsletters to ensure awareness of current INFOSEC related issues/events/responsibilities for SEC workforce.

Performance Standards

a) STD: AR 380-67 AQL: 100% compliant with standard

b) STD: AR 380-5 AQL: 100% compliant with standard Deliverables A003 INFOSEC Newsletter C004 Security Briefing

3.2.4 The contractor shall provide Operations Security (OPSEC) support for SEC.

a) STD: AR 530-1 AQL: 100% compliant with standard

b) STD: AR 525-13 AQL: 100% compliant with standard

3.2.4.1 The Contractor shall maintain and update the OPSEC Plan for SEC.

Performance Standards

a) STD: AR 530-1 AQL: 100% compliant with standard Deliverables D019 SEC OPSEC Plan D020 SEC Photography Policy

3.2.4.2 The Contractor shall provide training/informational newsletters to ensure awareness of current OPSEC related issues/events/responsibilities for SEC workforce.

a) STD: AR 380-67 AQL: 100% compliant with standard

b) STD: AR 380-5 AQL: 100% compliant with standard

A005 OPSEC Newsletter

3.2.5 The contractor shall provide Special Security support for SEC.

a) STD: AR 380-381 SAPs and Sensitive Activities AQL: 100% compliant with standard

b) STD: DCID 1-21 Physical Security Standards for SCIF AQL: 100% compliant with standard

c) STD: DoD Manual 5105-21 Volume 1, Administration of Information and Information Systems Security AQL: 100% compliant with standard

d) STD: DoD Manual 5105-21 Volume 2, Administration of Physical Security, Visitor Control, and Technical Security AQL: 100% compliant with standard

e) STD: DoD Manual 5105-21 Volume 3, Administration of Personnel Security, Industrial Security, and Special Activities AQL: 100% compliant with standard

f) STD: ICD 702 Technical Surveillance Countermeasures AQL: 100% compliant with standard

g) STD: ICD 705 Technical Specifications for Construction and Management of SCIF AQL: 100% compliant with standard

h) STD: ICD 704, Personnel Security Standards and Procedures Governing Eligibility for Access to SCIF and Other Controlled Access Program Information AQL: 100% compliant with standard

i) STD: AR 380-5 AQL: 100% compliant with standard

3.2.5.1 The Contractor shall provide Sensitive Compartmented Information Facility (SCIF) Administrator to be resident within each SEC SCIF and an alternate SCIF administrator to perform duties of the primary in his/her absence for SEC.

Performance Standards

a) STD: DoD Manual 5105-21, Volume 2 AQL: 100% compliant with standard

b) STD: DoD Manual 5105-21, Volume 3 AQL: 100% compliant with standard

3.2.5.2 The Contractor shall work in conjunction with Special Security Representatives (SSRs), CECOM Special Security Officer (SSO), and Defense Intelligence Agency (DIA) for initial/subsequent requests to establish and maintain a SCIF.

Included, but not limited to:

FFCL

Tempest Inspection

SSAA

SCIP SOP, etc.

Performance Standards

a) STD: ICD 705 AQL: 100% compliant with standard

b) STD: DCID 1-21 AQL: 100% compliant with standard

3.2.5.3 The Contractor shall ensure indoctrinated employees understand the necessary procedures and time requirements to arrange for visits for SCIF.

Performance Standards

a) STD: DoD Manual 5105-21, Volume 3 AQL: 100% compliant with standard

3.2.5.4 The Contractor shall conduct security awareness training for indoctrinated employees on topics deemed important by SCIF government officials for SEC.

Performance Standards

a) STD: DoD Manual 5105-21, Volume 1 AQL: 100% compliant with standard

b) STD: AR 380-5 AQL: 100% compliant with standard

3.2.5.5 The Contractor shall assess security posture of the SCIF for SEC.

Performance Standards

a) STD: Document findings of all violations within 1 business day following the inspection AQL: Document findings of all violations within 2 business days following the inspection

b) STD: AR 381-381 AQL: 100% compliant with standard

c) STD: DCID 1-21 Physical Security Standards for SCIF AQL: 100% compliant with standard

d) STD: DoD Manual 5105-21 Volume 1, Administration of Information and Information Systems Security AQL: 100% compliant with standard

e) STD: DoD Manual 5105-21 Volume 2, Administration of Physical Security, Visitor Control, and Technical Security AQL: 100% compliant with standard

f) STD: DoD Manual 5105-21 Volume 3, Administration of Personnel Security, Industrial Security, and Special Activities AQL: 100% compliant with standard

g) STD: AR 380-5

D018 SCIF Inspection Report

3.2.5.6 The Contractor shall serve as an Alternate TOP SECRET Control Officer (TSCO) for SEC.

a) STD: AR 380-5 AQL: 100% compliant with standard

3.2.5.7 The Contractor shall maintain access roster listing those individuals approved to work in the SCIF to which they are assigned for SEC.

Performance Standards

a) STD: DoD Manual 5105-21 Volume 2, Administration of Physical Security, Visitor Control, and Technical Security AQL: 100% compliant with standard

b) STD: DoD Manual 5105-21 Volume 3, Administration of Personnel Security, Industrial Security, and Special Activities AQL: 100% compliant with standard

3.2.5.8 The Contractor shall establish and maintain a secure facility visitor register and verify visitors' access level prior to SCIF entry.

Performance Standards

a) STD: DoD Manual 5105-21 Volume 2, Administration of Physical Security, Visitor Control, and Technical Security AQL: 100% compliant with standard

b) STD: DoD Manual 5105-21 Volume 3, Administration of Personnel Security, Industrial Security, and Special Activities AQL: 100% compliant with standard

c) STD: ICD 704, Personnel Security Standards and Procedures Governing Eligibility for Access to SCIF and Other Controlled Access Program Information AQL: 100% compliant with standard

3.2.5.9 The Contractor shall perform security scan and inspection for all incoming and outgoing media.

Performance Standards

a) STD: DoD Manual 5105-21 Volume 1, Administration of Information and Information Systems Security AQL: 100% compliant with standard

3.2.5.10 The Contractor shall perform physical security inspections for both the interior and exterior of the facility to ensure that adequate security precautions are being taken at all times for TS information and SCI.

Performance Standards

a) STD: DCID 1-21 Physical Security Standards for SCIF AQL: 100% compliant with standard

3.2.5.11 The Contractor shall serve as trusted agent to provide PKI certifications to all required C4ISR personnel for JWICS and NSANet.

NSA CSS Policy 5-1 requires a counterintelligence scope polygraph for all personnel that require an NSANet account.

Performance Standards

a) STD: NSA-CSS Policy 5-1 AQL: 100% compliant with standard

3.2.5.12 The Contractor shall submit to a counterintelligence scope polygraph examination if indoctrinated into the Department of the Army Cryptographic Access Program (DACAP) for SEC.

Performance Standards

a) STD: NSA-CSS Policy 5-1 AQL: 100% compliant with standard

3.2.6 The contractor shall provide Safety support for SEC.

Performance Standards

a) STD: AR 385-10 AQL: 100% compliant with standard

b) STD: DA PAM 385-10 AQL: 100% compliant with standard

3.2.6.1 The Contractor shall conduct safety inspections for SEC facilities.

Performance Standards

a) STD: AR 385-10 AQL: 100% compliant with standard

b) STD: DA PAM 385-10 AQL: 100% compliant with standard

D017 Safety Inspection Report

3.2.6.2 The Contractor shall review and update Emergency Action Plan for SEC.

a) STD: AR 385-10 AQL: 100% compliant with standard

b) STD: DA PAM 385-10 AQL: 100% compliant with standard

D007 Emergency Action Plan

3.2.6.3 The Contractor shall maintain and prepare the current status of all mishaps utilizing the CECOM mishap reporting tool for SEC.

a) STD: AR 385-10 AQL: 100% compliant with standard

b) STD: DA PAM 385-10 AQL: 100% compliant with standard

D003 CECOM Mishap Entry Report

3.2.6.4 The Contractor shall assess the posture of safety program for SEC.

a) STD: AR 385-10 AQL: 100% compliant with standard

b) STD: DA PAM 385-10 AQL: 100% compliant with standard

c) STD: CECOM Safety and Occupational Health (SOH) Objectives AQL: 100% compliant with standard Deliverables A002 CECOM Safety and Occupational Health Advisory Council (SOHAC) Slide A009 SEC Safety Slide

3.2.6.5 The Contractor shall coordinate Industrial Hygiene support to assess SEC work areas.

a) STD: AR 385-10 AQL: 100% compliant with standard

b) STD: DA PAM 385-10 AQL: 100% compliant with standard

3.2.6.6 The Contractor shall provide training/informational newsletters to ensure awareness of current Safety related issues/events/responsibilities for SEC workforce.

Performance Standards

a) STD: AR 385-10 AQL: 100% compliant with standard

b) STD: DA PAM 385-10 AQL: 100% compliant with standard

c) STD: CECOM Safety and Occupational Health (SOH) Objectives AQL: 100% compliant with standard

A008 Safety Newsletter

3.2.7 Provide Communications Support for SEC.

3.2.7.1 The Contractor shall provide graphic design services for SEC.

Graphic Design Services include pictures, production of award certificates, displays and posters.

Performance Standards

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95% of the time

A007 Presentation Materials

3.2.7.2 The Contractor shall provide multimedia services for SEC.

Multimedia Services include the development and editing of scripts, script review, and formatting of layout for video production.

Performance Standards

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95% of the time

A004 Multimedia Materials

3.2.7.3 The Contractor shall track questions and requests concerning new business opportunities to ensure that SEC is responsive for customer requirements.

a) STD: Responses are provided within 2 business days during normal business hours AQL: Responses are provided within 3 business days during normal business hours

3.2.7.4 The Contractor shall provide services to support internal communication products for SEC.

Communications Products include white papers, web posts, briefings, senior leadership messages, and presentations.

Performance Standards

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95% of the time Deliverables

D016 Reports

3.2.7.5 The Contractor shall produce and design external communication products for SEC.

External Communication Products include the SEC Products and Services Catalog, creation of fact sheets, and overview documents.

Performance Standards

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95% of the time

A004 Multimedia Materials

3.2.7.6 The Contractor shall coordinate, develop, and track responses to requests for information from CECOM or other Government agencies for SEC.

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95 % of the time

D024 Suspense Tracking Spreadsheet/Report

3.2.7.7 The Contractor shall provide updates to the SEC public web site and social media sites, blog and Intranet web sites to show latest information for SEC.

a) STD: Identifies and corrects deficiencies within 10 business days AQL: Identifies and corrects deficiencies within 15 business days

3.2.8 Provide Customer Relation support for SEC.

3.2.8.1 The Contractor shall support the customer survey process for SEC.

Customer Survey Process includes administering customer surveys, gathering of customer contact data, developing survey forms, preparing message for delivery, and tracking/compiling results.

Performance Standards

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95% of the time

3.2.8.2 The Contractor shall review survey methodology, questionnaires, interview/focus group guides and analysis methodology for SEC.

Performance Standards

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95% of the time

D015 Recommendation, Questions, & Analysis Technique Report

3.2.9 Provide Process Improvement for SEC.

3.2.9.1 The Contractor shall perform analysis as requested to assist with tracking industry trends and quality assurance compliance for SEC.

Performance Standards

a) STD: Identifies trends and areas of improvement AQL: Identifies trends and areas of improvement that are no less than 90% accurate

D025 Trends & Metrics Report

3.2.9.2 The Contractor shall develop and deliver SEC process training and related PI topics for SEC workforce.

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95% of the time

A012 Training Materials and Records

3.2.9.3 The Contractor shall provide support in the identification and development of new or modified processes.

a) STD: Bi-weekly updates to the Policy and Procedure Report AQL: Weekly updates to the Policy and Procedure Report

D014 Policy and Procedure Reports

3.2.9.4 The Contractor shall monitor, track, provide configuration management, and report which require approval, modification, and development for new process implementation.

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance within schedule 95% of the time.

D014 Policy and Procedure Reports

3.2.9.5 The Contractor shall perform peer reviews of documentation and processes for SEC.

a) STD: Identify errors and inadequacies within documentation for error free processes AQL: Identify errors and inadequacies within documentation for error free processes through peer reviews 95% of the time

D012 Peer Review Results

3.2.10 The Contractor shall provide Operational Support for SEC.

3.2.10.1 The Contractor shall assist in the development and editing for SEC strategic documentation.

Performance Standards

a) STD: Deliverables are made in accordance with schedule.

AQL: Deliverables are made in accordance with schedule 95% of the time

3.2.10.2 The Contractor shall provide support in the development and sustainment of the SEC document repository.

SEC document repository includes defining the architecture, design, delivery and maintenance for a web-based PI work environment such as Microsoft SharePoint or other government designated repository.

Performance Standards

a) STD: Upon approval, files are uploaded within 3 business days AQL: Upon approval, files are uploaded within 5 business days

D001 Administrator Report

3.2.10.3 The Contractor shall assist in the development and maintenance for SEC marketing materials.

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95% of the time Deliverables A010 SEC Services and Products Catalog A011 SEC Style Guide

3.2.10.4 The Contractor shall assist with coordination of special events for SEC.

Special Events include VIP/Distinguished Visitors visits and Meeting (Town Hall).

3.2.10.5 The Contractor shall assist in facilitation and documentation for meetings.

Performance Standards

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95% of the time

A013 Meeting Documentation

3.2.10.6 The Contractor shall prepare and maintain briefings and presentations for SEC senior management meetings.

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95% of the time

3.2.10.7 The Contractor shall assist with administrative support for SEC.

Administrative Support includes data entry, data validation, telephone and functional support lists, vehicle tracking and maintenance, and equipment coordination.

Performance Standards

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95% of the time

3.2.10.8 The Contractor shall provide technical writer and reviewer for SEC.

Technical Writer/Reviewer will include support for SEC documents produced and used for internal/external communications.

Performance Standards

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95 % of the time

3.2.11 Provide Planning/Strategic Studies for SEC.

3.2.11.1 The Contractor shall analyze OPS29 (Depot Maintenance Post-Production Software Support [PPSS]) requirements for accountability, accuracy, and reasonableness of logic.

Requirement will comprise of analysis of financial requirements for depot maintenance in support of OPS29 (FY+1 and POM years). Includes details at DA G4 prioritization categories level, and associated assumptions/models/etc. to build requirements. Source will be PPSS project leads (potentially branch chiefs). Analysis will include review of logic used, assumptions and guidance applied for identifying requirement. In general, each yearly report will include analysis of 130 systems.

Performance Standards

a) STD: Deliverables are made in accordance with schedule.

AQL: Deliverables are made in accordance within schedule 95% of the time.

b) STD: Identifies deficiencies AQL: Identifies deficiencies that are no less than 90% accurate

c) STD: Identifies trends and areas of improvement AQL: Identifies trends and areas of improvement that are no less that 90% accurate

D026 Analysis Report

3.2.11.2 The Contractor shall analyze non-system related OPS29 (Depot Maintenance Post-Production Software Support [PPSS]) requirements for accountability, accuracy, and reasonableness of logic.

Requirement will comprise of analysis of financial requirements for depot maintenance in support of OPS29 (FY+1 and POM years). Includes details at DA G4 prioritization categories/subcategories level, and associated assumptions/models/etc. to build requirements. Source will be SEC Operations office. Analysis will include review of logic used, assumptions and guidance applied for identifying requirement. This will be comprised of one annual report.

Performance Standards

a) STD: Deliverables are made in accordance with schedule.

AQL: Deliverables are made in accordance within schedule 95% of the time.

b) STD: Identifies deficiencies AQL: Identifies deficiencies that are no less than 90% accurate

c) STD: Identifies trends and areas of improvement AQL: Identifies trends and areas of improvement that are no less than 90% accurate

3.2.11.3 The Contractor shall analyze upcoming Fiscal Year requirements for input into the CECOM/AMC Resource Summit.

Review requirements with project leads and the Operations Directorate to ensure rationale and logic to identify next FY 1-n requirements across each funded area (MDEP) are valid (Historically, this has been three lists as follows: direct depot maintenance PPSS system, direct depot maintenance PPSS non-system, and tactical/logistics systems 1-n). In total, the 1-n requirements report generally has 900 individual 1-n entries.

Performance Standards

a) STD: Identifies trends and areas of improvement AQL: 90% of trends validated. 80% of recommended areas of improvement incorporated into requirements

b) STD: Identify errors and inadequacies associated with requirement estimates AQL: 90% of recommendations associated with errors/inadequacies identified incorporated into final submission

3.2.11.4 The Contractor shall provide data gathering, research and analysis in support of various higher HQ and SEC tasks/assignments for SEC.

Examples include coordination of comments and associated analysis/integration for Work Breakdown Structure options associated with Depot Maintenance Software Support; Research, coordination across MSCs and documentation of personnel structures supporting Depot maintenance PPSS; Coordination, analysis and integration of "Core Competency definition. Development of information and data to support concept plans (contractor support and/or government personnel), support identification of government status on systems in Depot maintenance to include government ownership of data rights, source code, documentation, analysis of 1-n (execution vs. planned), etc.

Performance Standards

a) STD: Report variances that are more than +/- 10% or greater than $500 thousand of the estimate within specified deadlines AQL: Report variances that are more than +/- 10% or greater than $500 thousand of the estimate within specified deadlines.

Deliverables D026 Analysis Report D027 Financial Comparison Report D028 New System Manpower Report

3.2.11.5 The Contractor shall support 1-n position prioritization for manpower POM and manpower planning.

Assist in creating a prioritized list of requirements within each manpower allocation (direct & reimbursable depot maintenance PPSS and direct reimbursable Tactical logistics/business information systems) Performance Standards

a) STD: Adheres to prioritization guidance AQL: 90% error free

D030 Prioritization Report

3.2.11.6 The Contractor shall report, evaluate, and consolidate a tally of software “efforts“ performed for Capability Set driven maintenance, Information Assurance Vulnerability Alert (IAVA)s, Category I/II issues, and Category III-V issues, etc..

For each effort "area" (IAVAs, Cat I/II issues, Cat III-V issues, and Capability Set driven maintenance, etc.), research quantifiable "outputs" of maintenance effort. Objective is to determine those outputs as "counts" associated with each and collect the associated "count" data.

For example, for any system in PPSS (Advanced Field Artillery Tactical Data System (AFATDS), Firefinder TPQ-36, etc.), there are IAVAs that must be addressed. Over a period (at minimum, yearly data), how many IAVAS were performed and what drove/influenced those counts (i.e., what software products such as Oracle product X, Everian product X, etc. and/or architectures of the software).

For system X, over the past year, 43 IAVAs were completed. The 43 IAVAs were based on: 18 to address Microsoft product X IAVAs, 15 to address Oracle product x IAVAs, 10 to address CISCO product X IAVAs.

Performance Standards

a) STD: Data provided is auditable (applying same process will yield same results) AQL: 90% error free

D031 Software Maintenance Effort Analysis Report

3.2.11.7 The Contractor shall analyze, consolidate, and report on the cost impacts for maintaining multiple software versions/releases.

For each system, research cost impacts associated with maintaining multiple software versions/releases to include various software licenses, configuration control, assignment of versions to locations, training, etc. Objective is to determine the costs of each version/release to estimate potential "savings" associated with minimizing multiple versions.

For example:

1. System X has seven different versions. There are costs to analyze IAVAs associated with each version. If an older version is eliminated, the costs associated with the IAVA for that version would be eliminated (there may be an increase in remaining version which is part of the analysis).

2. System X has seven different versions. There are license costs associated with the first two versions that will be eliminated as later versions no longer require that license. What are the cost impacts (license) associated with eliminating those earlier versions?

Performance Standards

a) STD: Data provided is auditable (applying same process will yield same results) AQL: 90% accurate

D032 Software Version Analysis Report

3.2.12 Provide Logistics Support for SEC.

3.2.12.1 The Contractor shall validate licenses for SEC procured software products.

IAW Government policy Performance Standards

a) STD: Deliverables are made in accordance with schedule within 3 business days AQL: Deliverables are made in accordance with schedule within 5 business days

b) STD: Verify/Validate license dates are not expired within 3 business days of receipt AQL: Verify/Validate license dates are not expired within 5 business days of receipt

c) STD: Data received is usable for analysis AQL: 100% compliant with standard

3.2.12.2 The Contractor shall research best value of hardware/software purchases for SEC.

Performance Standards

a) STD: IAW Government Purchasing Policies - CHESS AQL: 100% compliant with standard

b) STD: IAW Approved Government Vehicles - General Service Administration (GSA) & Solutions for Enterprise Wide Procurement (SEWP) AQL: 100% compliant with standard

D010 Hardware/Software Quotes

3.2.12.3 The Contractor shall perform technical cost comparisons of vendor quotes for SEC.

a) STD: Deliverables are made in accordance with schedule AQL: Deliverables are made in accordance with schedule 95% of the time

b) STD: All final products delivered are error free AQL: 100% compliant with standard

c) STD: Meets technical specifications AQL: 100% compliant with standard

d) STD: Addressed within 5 days of notification during normal business hours AQL: Addressed within 10 days of notification during normal business hours

D009 Hardware/Software Comparison Report

3.2.12.4 The Contractor shall develop hardware/software acquisition packages for submission to the Army…