DraftPWS_W5J9CQ16R0017.pdf

Draft Performance Work Statement (PWS) For

Remote Ground Terminal System Engineering and Information Assurance Services

1. General:

This is a non-personnel services contract to provide systems engineering to the Army Geospatial Center (AGC) and software development for the enhancement and information assurance processes for the Remote Ground Terminal (RGT) system in support of U.S. Army Geospatial-Intelligence (GEOINT) requirements.

1.1 Description of Services/Introduction: The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personnel services necessary to perform RGT systems engineering and software development as defined in this Performance Work Statement. The Contractor shall perform to the standards in this contract.

1.2 Background: This acquisition is intended to provide the Army Geospatial Center (AGC) and System Acquisition Support Directorate with RGT system and engineering services. The RGT is scheduled to transition to Distributed Common Ground System – Army (DCSG-A) an Army program of record. DCGS-A is a major system that is deployed globally and will utilize RGT ability for near-real time Direct Downlink (DDL) and processing of commercial imagery in Disconnected, Intermittent, and Limited bandwidth (DIL) environments. Commercial imagery provides Army and supported users with unclassified, timely, accurate and ever-increasing resolution products capable of satisfying multiple requirements in peace, crisis and wartime. Due to the unclassified nature of commercial imagery, properly licensed data is available with no security constraints and may be shared throughout coalition operations, as well as in Humanitarian Assistance/Disaster Relief (HADR) situations.

1.3 Objectives:

• Provide technical services and software development for the enhancement of the RGT System and transition to DCGS-A.

• Provide software development and technical documentation required for the Risk Management Framework (RMF) Certification and Accreditation (C&A) process on the existing RGT Software baseline.

• Provide technical support and software modification for the RMF C&A process of the RGT System for Non-Secure Internet Protocol Router Network (NIPRnet).

Complete security activities on the system required in the Security Controls Assessor (SCA) assessment process.

• Provide factory acceptance testing to ensure complete RGT development and support operational testing to ensure operational functionality of the RGT system.

• Develop and provide technical documentation to include training, maintenance plan, and architecture documentation for the transition to DCGS-A.

1.4 Scope: Provide system engineering and software development services to assist the AGC with the enhancement of the RGT System and with RMF C&A process.

1.5 Period of Performance: The period of performance will be from 24 September 2016 – 23 September 2019 for a base and two (2) one-year options.

1.6 Type of Contract: The Government will award a Firm-Fixed Price (FFP) Contract.

1.7 General Information

1.7.1 Quality Control: The Contractor shall adhere to the approved Quality Control (QC) measures for this contract. The Contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control program is the means by which they assure themselves that their work complies with the requirement of the contract.

This plan shall ensure product completeness through each monthly reporting period and ensure that the delivered technical services, training and maintenance are of the highest quality. The first draft of the Quality Control Plan (QCP) will be included in the Contractor’s proposal.

The final QCP will be delivered within five days after contract award. The QCP shall be submitted to the KO and COR within five working days when changes are made thereafter. After acceptance of the QCP the Contractor shall receive the contracting officer’s acceptance in writing of any proposed change to their QC plan.

1.7.2 Quality Assurance: The Government will evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.7.3 Recognized Holidays: The Contractor is not required to perform services on the following holidays:

New Year’s Day Labor Day

Martin Luther King Jr.’s Birthday Columbus Day

President’s Day Veteran’s Day

Memorial Day Thanksgiving Day

Independence Day Christmas Day

1.7.4 Hours of Operation: The Contractor is responsible for conducting business, between the hours of 8 a.m. and 6 p.m. Monday through Friday except Federal holidays.

1.7.5 Place of Performance: Work shall be performed at the Contractor’s location.

1.7.6 Clearance Requirements: Security Clearances are not required to be maintained for the life of the contract.

1.7.7 Antiterrorism (AT) Level 1 Training: All Contractor employees, to include subContractor employees, requiring access to Army installations, facilities, controlled access areas, or require network access, shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. Upon request, the Contractor shall submit certificates of completion for each affected Contractor employee and subContractor employee, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training by all employees and subContractor personnel. AT Level I awareness training is available at the following website: http://jko.jten.mil/courses/atl1/launch.html; or it can be provided by the RA ATO in presentation form which will be documented via memorandum.

1.7.8 Installation Access: All Contractor and all associated sub-Contractors employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by Government representative). The Contractor shall also provide all information required for background checks to meet installation/facility access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office.

Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by Department of Defense (DoD), Headquarters, Department of Army (HQDA) and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any installation or facility change, the Government may require changes in Contractor security matters or processes

1.7.9 Common Access Card (CAC): The Contractor and all sub-Contractors employees will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using

DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an interim CAC may be issued based on a favorable review of the Federal Bureau of Investigation (FBI) fingerprint check and a successfully scheduled National Agency check with Inquiries (NACI) at the Office of Personnel Management.

1.7.10 Contractors without CACs that require access to a DoD facility or installation: Contractor and all associated sub-Contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Index and Terrorist Screening Database applicable installation, facility and area commander installation/facility access and local security policies and procedures, or at Outside Continental United States (OCONUS) locations, in accordance with status of forces agreements and other theater regulations.

1.7.11 Suspicious Activity Reporting Training: The Contractor and all associated sub-Contractors shall receive a brief/training (provided by the RA) on the local suspicious activity reporting program. This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the project manager, security representative or law enforcement entity. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR no later than (NLT) 5 calendar days after the completion of the training.

1.7.12 Access to Government Information Systems: All Contractor employees with access to a Government info system must be registered in the Army Training Certification Tracking System (ATCTS) at commencement of services, and must successfully complete the DoD Information Assurance Awareness prior to access to the information systems and then annually thereafter in accordance with personnel security standards listed in Army Regulation (AR) 25-2 Information Assurance, an appropriate background investigation will be conducted prior to accessing the Government information systems.

1.7.13 Operational Security (OPSEC) Training: All new Contractor employees will complete Level 1 OPSEC training within 30 calendar days of reporting for duty. Additionally, all Contractor employees must complete annual OPSEC awareness training. The Contractor shall submit certificates of completion for each affected Contractor or subContractor employee, to the COR or the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training. OPSEC awareness training is available at the following websites: https://www.iad.gov/ioss or http://www.cdse.edu/catalog/operations-security.html; or it can be provided by the RA OPSEC Officer in the presentation form which will be documented via memorandum.

https://www.iad.gov/ioss http://www.cdse.edu/catalog/operations-security.html http://www.cdse.edu/catalog/operations-security.html

1.7.14 Information Assurance/Information Technology training (IA/IT): All Contractor employees and associated subContractor employees must complete DoD IA awareness training before issuance of network access and annually thereafter. All Contractor employees working IA/IT functions must comply with DoD and Army training requirements in Department of Defense Directive (DoDD) 8570.01, DoD 8570.01-M, and AR 25-2 within six months of employment.

1.7.15 Escort in areas where Contractors may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas: All contract employees, including subContractor employees who are not in possession of appropriate security clearance or access privileges, will be escorted in areas where they may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas.

1.7.16 E-Verify Program: The Contractor must pre-screen candidates using the E-verify Program website to meet the established employment eligibility requirements. The vendor must ensure that the candidate has two valid forms of Government issued identification prior to enrollment to ensure the correct information is entered into the E-verify system. An initial list of verified/eligible candidates must be provided to the COR no later than 3 business days after the initial contract award.

1.7.17 Threat Awareness Reporting Program Training: All new Contractor employees will complete annual Threat Awareness and Reporting Program (TARP) Training provided by a Counterintelligence Agent, IAW AR 381-12.

The Contractor shall submit certificates of completion for each affected Contractor and subContractor employee(s) or a memorandum for the record, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training. Authorized web based TARP training for CAC card holders is available at the following website:

1.7.18 Other Direct Costs: This category includes travel, reproduction, and shipping expenses associated with training activities and visits to Contractor facilities. It could also entail the renting of suitable training venues.

1.7.19 Data Rights: The Government has Government Purpose Data Rights to all data, documents, and material produced under this contract. All data, documents, and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These data, documents, and materials may not be used or sold by the Contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.7.20 Contractor Travel: When necessary, there may be requirements to attend conferences, seminars and/or meetings, perform system maintenance, conduct training and collect data relating to support task requirements at various US Army installations. Occasional travel within the U.S. and abroad may be required for such meetings, conferences, system maintenance, training and data collection. Travel will not exceed 50 Contractor trips during this period of performance and each site visit will not exceed 14 days (total travel will not exceed contract travel funding amount). All travel requires Government approval/authorization and notification to the COR.

1.7.21 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The Contracting Officer, Contracting Officer’s Representative (COR), and other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings the contracting officer will apprise the Contractor of how the Government views the Contractor's performance and the Contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

1.7.22 Contracting Officer’s Representative: The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions; assure that the Contractor performs the technical requirements of the contract, perform inspections necessary in connection with contract performance, maintain written and oral communications with the Contractor concerning technical aspects of the contract, issue written interpretations of technical requirements, including Government drawings, designs, specifications, monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies, coordinate availability of Government furnished property, and provide site entry of Contractor personnel.

A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

2. Definitions and Acronyms:

2.1. Definitions:

CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

CONTRACTING OFFICER. A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S.

Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations.

This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

DELIVERABLE. Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

QUALITY ASSURANCE. The Government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

QUALITY ASSURANCE Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of Contractor performance.

QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

RADARSAT-2. A Canadian commercial radar satellite

SUBCONTRACTOR. One that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subContractor.

WORK DAY. The number of hours per day the Contractor provides services in accordance with the contract.

WORK WEEK. Monday through Friday, unless specified otherwise.

2.2. Acronyms:

ACOR Alternate Contracting Officer's Representative

AFARS Army Federal Acquisition Regulation Supplement

AGC Army Geospatial Center

AR Army Regulation

AT Antiterrorism

ATCTS Army Training Certification Tracking System

C&A Certification and Accreditation

CAC Common Access Card

CCE Contracting Center of Excellence

CDP Commercial Data Provider

CDRL Contract Data Requirements List

CFR Code of Federal Regulations

CIO Chief Information Officer

CONUS Continental United States (excludes Alaska and Hawaii)

COR Contracting Officer Representative

COTR Contracting Officer's Technical Representative

COTS Commercial-Off-the-Shelf

DA Department of the Army

DCGS-A Distributed Common Ground System - Army

DD250 Department of Defense Form 250 (Receiving Report)

DD254 Department of Defense Contract Security Requirement List

DDL Direct Downlink

DFARS Defense Federal Acquisition Regulation Supplement

DIL disconnected, Intermittent, and Limited bandwidth

DMDC Defense Manpower Data Center

DoD Department of Defense

DoDD Department of Defense Directive

FAR Federal Acquisition Regulation

FBI Federal Bureau of Investigation

FFP Firm-Fixed Price

FPCON Force Protection Condition

GEOINT Geospatial Intelligence

HIPAA Health Insurance Portability and Accountability Act of 1996

HADR Humanitarian Assistance/Disaster Relief

HQDA Headquarters, Department of the Army

IA/IT Information Assurance/Information Technology

JTR Joint Travel Regulation

KO Contracting Officer

NACI National Agency check with Inquiries

NIPRNet Non-Secure Internet Protocol Router NETwork

NLT No later than

OCI Organizational Conflict of Interest

OCONUS Outside Continental United States (includes Alaska and Hawaii)

ODC Other Direct Costs

OPSEC Operational Security

PIPO Phase In/Phase Out

POC Point of Contact

PRS Performance Requirements Summary

PWS Performance Work Statement

QA Quality Assurance

QAP Quality Assurance Program

QASP Quality Assurance Surveillance Plan

QC Quality Control

QCP Quality Control Program

RGT Remote Ground Terminal

RMF Risk Management Framework

SCA Security Controls Assessor

SOP Standing Operating Procedures

TARP Threat Awareness and Reporting Program (TARP)

3. Government Furnished Property, Equipment and Services

3.1 Information and Data:

3.1.1 Government furnished raster imagery data at varied resolutions as required.

3.2 Hardware and Software: The Government will provide hardware and software as determined necessary by the Government for use by the Contractor at the Contractor’s facilities.

3.3 Facilities: The work performed under this contract will take place at the Contractor facility.

4. Contractor Furnished Items:

4.1. The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform RGT Technical Services as defined in this Performance Work Statement except for those items specified as Government furnished property and services. The Contractor shall perform to the standards in this contract.

5. Specific Tasks:

5.1 Technical Services: The Contractor shall provide technical services to U.S. Army Geospatial Center (AGC) for the continued development and upgrade of the RGT System.

Contractor Site:

• Provide system engineering support for the upgrade of the operating systems comply with the Department of Defense (DoD) Chief of Information Officer’s (CIO) directive.

• Modify existing RGT software to incorporate enterprise authentication and security services.

• Maintain a complete RGT system.

• Make improvements to the user interface and system usability.

• Develop and maintain technical documentation and Standard Operating

Procedures (SOPs) required for RMF.

• Develop and integrate all authentication security measures as well as backup solution.

5.2 Information Assurance and Security: The Contractor shall support AGC in the

RGT system Certification and Accreditation (C&A) effort based on the Risk Management Framework (RMF) requirements by completing software modifications the current RGT Software baseline.

• Development of a complete technical package to submit for RMF C&A

(CDRL-A003).

• Provide IT and admin support to the Security Control Assessment process.

• Make necessary IA configuration changes and software modifications according to assessment findings.

• Apply required security patches and reports.

• Complete a technology refresh of system.

• Establish a means for transfer of Commercial Data Provider (CDP) support data files using a secure file server.

5.3 Network Certification: The Contractor shall provide support to the RADARSAT-2 Network Station Certification.

• Establish RGT as a certified RADARSAT-2 Network Station.

• Conduct training on RADARSAT-2 to support operations and testing.

5.4 Testing Support: The Contractor shall provide support for factory acceptance testing of the RGT system as well as support to an operational test activity.

• Support AGC in the development of test plans (CDRL-A006).

• Conduct a factory acceptance test to review readiness and provide report

(CDRL-A007).

• Provide support to operational testing at a CONUS location.

5.5 Technical Documentation: The Contractor shall provide technical documentation to AGC that will be required to transition the RGT system to DCGS-A.

• Produce a Logistics and Maintenance Support Plan (CDRL-A004)

• Produce a Training Material Plan and Users’ Manual (CDRL-A005)

• Provide System Overviews and Systems View Architecture diagrams in System Architect (CDRL-A008)

5.6 Maintenance Plan: The Contractor shall develop and provide a maintenance plan for the RGT.

• Develop Maintenance manuals for the RGT system

• Provide documentation on system configuration

5.7 Program Review

• Produce a Technical Management and Work Plan (CDRL-A001)

• Produce Monthly Reports (CDRL-A002)

• Produce a Quality Control report

6. Applicable Publications (Current Editions)

6.1. The Contractor must abide by all applicable regulations, publications, manuals, and local policies and procedures including:

• AR 25-2

• AR 530-1

7. Attachment List:

7.1. Performance Requirements Summary

The Contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

Performance Requirement

Standard Acceptable Quality Level

Method of Surveillance

Project Management Kickoff Meeting and Project Plan

Project Plan Acceptance

95% USACE Project Manager and COR review

IA Package Complete and ready for RMF C&A process

Technical documents acceptance

95% USACE Project Manager and COR review

RADARSAT-2 Station Certification

Completion of

RADARSAT-2

Certification Course

95% USACE Project Manager and COR review.

Customer feedback

Technical documentation reviews

Technical documents acceptance

95% USACE Project Manager and COR review.

Customer feedback

Monthly Project Status Reports Meetings

Meetings held monthly

95% USACE Project Manager and COR review

Factory Acceptance Test Successful, functional demonstration

95% USACE Project Manager and COR review.

Customer feedback

SCA Testing Activities Support

RFT C&A Process 95% USACE Project Manager and COR review

Operational Test Successful, functional demonstration

95% Customer feedback

7.2. Deliverables Schedule

Deliverable Frequency # of Copies Medium/Forma t Submit To

CDRL

Technical and Management Work Plan

Once with 30 days of contract award

1 MS Word or PDF delivered via email

COR A001

Contractor Progress, Status, and Management Report

Monthly by the 5th of every month

1 MS Word or PDF delivered via email

COR A002

DoD RMF Package Deliverables

Once by 01/13/2018

1 MS Word or PDF delivered via email

COR A003

Maintenance Support Plan

Once by 3/29/2018

1 MS Word or PDF delivered via email

COR A004

Training Materials

Once by 01/28/2018

1 MS Word or PDF delivered via email

COR A005

Acceptance Test Plan

Once by the start of test

1 MS Word or PDF delivered via email

COR A006

Acceptance Test Report

Once by 08/21/2017

1 MS Word or PDF delivered via email

COR A007

DoD Architecture Framework Documentation

Once by 09/29/2017

1 System Architect

COR A008

Quality Control report

Once by 09/29/2017

1 MS Word or PDF delivered via email

COR A009