DRAFT_PWS_for_RFI.docx

DRAFT

PERFORMANCE WORK STATEMENT (PWS)

US Army Geospatial Center (AGC) Information Management/Information Technology (IM/IT) Systems Engineering and Technical Assistance (SETA) Support

PART 1

GENERAL INFORMATION

1. General: This is a non-personal service contract to provide Information Management/Information Technology (IT) Systems Engineering and Technical Assistance (SETA) support for the United States Army Geospatial Center (AGC).

1.1 Description of Services/Introduction: The contractor shall provide all personnel, equipment, supplies, facility, transportation, tools, materials, supervision, and other items and non-personal services necessary to provide SETA support for AGC IM/IT as defined in this PWS. The contractor shall provide technical support to manage AGC’s IM/IT infrastructure which includes configuring network infrastructure, architecture development, applications, accreditation, maintenance, cloud technology, logistics, helpdesk, and geospatial enterprise solutions.

1.2 Background: The U.S. Army Geospatial Center (AGC) is a Major Subordinate Command under the U.S. Army Corps of Engineers (USACE). The AGC mission is to provide timely, accurate and relevant geospatial information, capabilities and domain expertise for Army Geospatial Enterprise implementation in support of unified land operations. The AGC supports the Army's LandWarNet / Mission Command concepts, capabilities, and systems - facilitating dissemination of relevant geospatial information to every echelon throughout the dynamic battlefield environment. The AGC also supports the Army, Department of Defense, and the Nation by executing policy and implementing standards while monitoring emerging technologies and validating Army Geospatial Enterprise (AGE) technical solutions; serving as the Army Knowledge Center for geospatial expertise by providing direct support to Army units and activities (geospatial data production, analysis and reachback); providing technical, acquisition integration, and logistical support to Army select Programs of Record and transitional technical capabilities under Army and Joint Capability Demonstrations, while also building and maintaining the Army Geospatial Logical Data Model and conducting Research, Development, Testing and Evaluation (RDT&E) focused on increasing the agility of Battle Command across the full spectrum of military operations - from conventional armed conflicts to counterinsurgencies and irregular warfare; researching new technologies and methodologies which leverage geospatial data and information in order to augment analysis and mission planning, helping the Warfighter make a more informed decision. This contract does not duplicate services provided by USACE Enterprise IT (ACE-IT).

1.3 Period of Performance: The period of performance will include a one year base with four one-year option periods.

1.4 General Information

1.4.1 Supervision of Contractor Employees: The Government will not exercise any supervision or control over contractor or subcontractor employees while performing work under the contract.

1.4.2 Quality Control: Quality Control is the responsibility of the contractor. The contractor is responsible for the delivery of quality services/supplies to the Government (see FAR 52.246-1, Contractor Inspection Requirements).

The contractor shall develop, implement and maintain an effective Quality Control System (QCS) which includes a written Quality Control Plan (QCP). The QCP shall implement standardized procedure/methodology for monitoring and documenting contract performance to ensure all contract requirements are met. The contractors’ QCP must contain a systematic approach to monitor operations to ensure acceptable services/products are provided to the Government. The QCP shall address continuous process improvement; procedures for scheduling, conducting and documentation of inspection; discrepancy identification and correction; corrective action procedures to include procedures for addressing Government discovered non-conformances; procedures for root cause analysis to identify the root cause and root cause corrective action to prevent re-occurrence of discrepancies; procedures for trend analysis; procedures for collecting and addressing customer feedback/complaints. The contractor shall upon request provide to the Government their quality control documentation. The QCP shall be submitted with the offeror’s proposal. The contractor shall notify and submit to the Contracting Officer (KO)/Contracting Officer Representative (COR) any proposed changes to the QCP five business days prior to implementation. After acceptance of the quality control plan the contractor shall receive the Contracting Officer’s acceptance in writing of any proposed change to their QC system.

1.4.3 Quality Assurance: The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is a Government document primarily focused on what the Government must do to assure that the contractor has performed in accordance with the requirements of the contract.

1.4.4 Federal Government Holidays: The contractor is not required to perform routine services on the following holidays.

1.4.5 Hours of Operation: The contractor shall plan daily work hours to include the AGC core hours of 0900 through 1500 Monday through Friday. The exceptions are Helpdesk, which shall cover the hours between 0700 and 1700 and after-hour patching, which shall be performed on a bi-monthly basis between the hours of 1700 to 2200. After-hour patching performed in the AGC Sensitive Compartmented Information Facility (SCIF) requires a two- personnel minimum. Work days shall include Monday through Friday except during Government closure or when notified by the COR.

1.4.6 Place of Performance: The primary duty location shall be the US Army Geospatial Center, Alexandria, Virginia. Annual visits shall be made to the following locations: Hanover, NH; Vicksburg, MS; and Winchester, VA (see section 1.10).

1.5 Type of Contract: The government anticipates awarding an Indefinite Delivery Indefinite Quantity (IDIQ) Task Order Firm-Fixed-Price Single-Award-Task Order-Contract (FFP SATOC).The maximum value of the IDIQ will be $36M. The contract minimum guarantee will be $2,500.

1.6 Security Requirements: All contractor personnel performing work under this contract shall be US Citizens possessing DoD SECRET (S) and/or TOP SECRET (TS) Sensitive Compartmented Information (SCI) clearance, and must maintain the level of security required as specified by each task order. The security requirements are in accordance with the attached DD Form 254, Department of Defense Contract Security Classification Specification. Offerors must demonstrate their proposed plan for meeting this requirement upon the start of contract performance.

In order to gain entry to AGC, the contractor shall perform the following:

· Submit personnel information in the Joint Personnel Adjudication System (JPAS) to the AGC Security Office using Security Management Office (SMO) code W6RNAA2.

· Provide contractor personnel Personally Identifiable Information (PII) to the COR and receive date for reporting to AGC.

1.6.1 The contractor shall maintain and administer a security program IAW the Industrial Security Manual DoD 5220.22M and additional regulations provided by DoD under the Industrial Security Program.

1.6.2 Loss or suspension of required security clearance as set forth on the DD Form 254 could result in the contractor’s inability to perform IAW the terms and conditions of this contract. As a result of this failure to perform, the contractor is subject to termination under the termination clause herein.

1.6.3 The government reserves the right to direct that any contractor employee be removed from performance, directly or indirectly, whenever there is a probable cause to believe, on the basis of all facts available, that such action is warranted in the interest of national security. This action shall occur whether or not the cause is deemed of sufficient severity to warrant action to terminate the contractor or individual’s security clearance. The government also reserves the right to remove any contractor for the purpose of conducting any investigation of alleged misconduct, which may, in the opinion of the contracting officer, jeopardize the security of the project.

1.6.4 Facility Clearance Requirements: The contractor’s Company shall have a Facility Clearance (FCL) at the appropriate level (IAW the NISPOM DoD 5220.22-M and AR 380-49) prior to RFP closing. FCL requirements shall be maintained for the life of the contract IAW the DD254.

1.6.5 Antiterrorism (AT) Level I Training: All contractor personnel and associated subcontractor employees requiring access to Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or within 30 calendar days of new personnel commencing employment. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR within 5 calendar days after completion of training by all personnel and subcontractor personnel. AT Level I awareness training is available at the following website: https://atlevel1.dtic.mil/at.

1.6.6 The contractor shall comply with AGC procedures for personnel in-processing and out-processing. The contractor shall notify the COR within one business day of known personnel decisions regarding departure, hiring, substitutions and duty transfer.

In addition the contractor shall comply with the following procedures:

· In cases of immediate removal, the contractor shall, in the following order,

· Inform COR and AGC security with identity of affected employee.

· Inform affected personnel of the action taken.

· Escort the employee until departure from the Humphreys Engineering Center and Support Activity (HECSA) compound.

· In cases of general departure, the contractor shall

· Inform COR with identity of the affected employee.

· Inform COR of the last date of duty performance.

· Inform COR of date of new employee in-processing.

· Provide COR documentation for in-processing new employee at least one business day prior to employee reporting to AGC.

1.6.7 Access and General Protection/Security Policy and Procedures: All contractor personnel shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). Prior to reporting to AGC, the contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by the AGC Security Office. The contractor workforce must comply with all personal identity verification requirements as directed by AGC and/or local policy.

1.6.8 iWATCH and/or CorpsWatch Training: The contractor shall brief all personnel on the local iWATCH, CorpsWatch, or See Something, Say Something program. This local developed training will be used to inform personnel of the types of behavior to watch for and instruct personnel to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new personnel commencing performance.

1.6.9 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use. Prior to departure at the end of each work day, Government facilities, equipment, and materials shall be secured in accordance with AGC policy.

1.6.9.1 Key Control. The contractor shall establish and implement methods of making sure all keys/key cards issued to the contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the contractor by the Government shall be duplicated. The contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the COR.

1.6.9.1.1 In the event keys, other than master keys, are lost or duplicated, the contractor shall, upon direction of the COR, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the contractor.

1.6.9.1.2 The contractor shall prohibit the use of Government issued keys/key cards by any persons other than the contractor’s employees. The contractor shall prohibit the opening of locked areas by contractor employees to permit entrance of persons other than contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the COR.

1.6.9.1.3 Lock Combinations. The contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. These procedures shall be included in the contractor’s Quality Control Plan.

1.7 Contracting Officer Representative (COR):

The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration.

A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR. The COR is not authorized to change any of the terms and conditions of the resulting contract. The warranted Contracting Officer is the only entity with authorization to negotiate and make changes to this contract.

1.8 Key Personnel: Certain skilled experienced professional and/or technical personnel are essential for successful contractor accomplishment of the work to be performed under this contract. These are defined as "Key Personnel" and are those persons whose resumes are submitted for evaluation of any proposal. Key personnel shall be available during AGC Core hours between 0900 and 1500 Eastern Time, Monday thru Friday except Federal holidays.

The following personnel are considered key personnel by the government: Program Manager, Technical Lead, Helpdesk Manager. The program manager shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the program manager is unavailable shall be designated in writing to the contracting officer. The program manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. Qualifications for all key personnel are listed below:

Program Manager: The Program Manager shall have PMP certification and at least 10 years of experience managing requirements, contracts, operations, and personnel, all in the DoD IT field.

Technical Lead: The Technical Lead serves as the system architect and shall have the following certifications as a minimum: CISSP-ISSAP, CISSP-ISSEP, CISSP-ISSMP. This position shall have at least 15 years of experience in DoD IT, network engineering, cyber security, system administration, and specifically, geospatial information support.

Helpdesk Manager: The Helpdesk Manager shall have at the minimum Security+ certification and over 5 years of Helpdesk operations experience.

The Contractor shall have all Key Personnel on board on Date of Award (DOA). The contractor shall notify the COR within 24 hours of known intent to substitute key personnel. In the event of such substitution, key personnel must meet requirements of section 1.8.

The Contractor shall submit their proposed key personnel to meet the Government’s needs based upon the task orders. The contractor shall include with its proposal the title of the key personnel and qualifications as well as educational experience.

1.9 All Personnel

To ensure uninterrupted performance, the contractor shall maintain an adequate workforce and shall ensure data and information are not lost upon departure of contractor personnel..

The Contractor shall provide experienced personnel to perform the required services. The Government and the Contractor understand and agree that the services to be delivered are non-personal services and both parties recognize and agree that no employer-employee relationships exist between the Government and the Contractor and/or between the Government and the Contractor’s employees. Contactor personnel performing under this contract shall not be placed in a position where they are employed by a Federal Officer or are under the supervision, direction, or evaluation of a Federal Officer, military or civilian.

Contractor personnel shall conform to standards of conduct and code of ethics, which are consistent with those applicable to Government employees as provided in the Joint Ethics Regulation 5500.7.R. Contractor personnel shall present a neat professional appearance and be easily identified. The contracting officer may require the contractor to remove from the job site an employee working under this contract for reason for misconduct, security violations, or found to be suspected to be under the influence of alcohol, drugs or other incapacitating agent. Contractor employees shall be subject to dismissal from the premises upon determination by the Contracting Officer that such action is in the best interest of the Government. Such removal from the job site or dismissal from the premises shall not relieve the contractor of the requirement to provide sufficient personnel to perform the services as required by this contract.

The Contractor shall comply with all applicable laws, rules and regulations.

Contractor personnel will obtain a Common Access Card (CAC) for computer access as required and detailed in each task order.

The contractor shall ensure that contract personnel maintain and update required DoD 8570.01-M baseline and computer environment certifications. The contractor shall ensure Army Training Certification Tracking System (ATCTS) registration requirements are met. The contractor shall also attend security related training offered at the AGC, including the Threat Awareness and Reporting Program (TARP).

1.9.1 Identification of Contractor Employees: AGC ID Badges shall be worn at all times during which the employee is performing work under this contract. Each contractor employee shall wear the ID Badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit. All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed.

1.10 Contractor Travel:

Area of Travel. The contractor shall be required to travel CONUS and within the National Capital Region (NCR) during the performance of this contract to attend meetings, conferences, and training. One contractor personnel shall make one one-day trip to each of the following USACE sites: Hanover, NH; Vicksburg, MS; and Winchester, VA. A Not to Exceed (NTE) amount for travel will be specified in each task order.

Travel Policy. The Government will reimburse the Contractor for allowable travel costs incurred by the Contractor in performance of the contract and determined to be in accordance with FAR subpart 31.2, subject to the following provisions: Travel required for tasks assigned under this contract shall be governed in accordance with rules set forth for temporary duty travel in the Department of Defense Joint Travel Regulations (JTR). The Contractor shall execute all travel IAW DoD, COCOM and local commander regulations and policies. All travel and expenses must be approved by the COR in writing, prior to travel.

Travel. Travel, subsistence, and associated labor charges for travel time are authorized for travel beyond a 50-mile radius of the local office, whenever a task assignment requires work to be accomplished at an alternate work site. No travel, subsistence or associated labor charges for travel time shall be charged for work performed within a 50-mile radius of the Contractor’s local office, normal work site, or temporary work site unless approved in advance by the Contracting Officer Representative (COR). Under no circumstances will costs be reimbursed for travel performed for personal convenience and daily travel to and from the normal work site, to include parking expenses.

1.11 Data Rights: The Government shall obtain rights in technical data in accordance with the standard data rights clauses at DFARS 252.227-7013 and 252.227-7014. The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.12 Organizational Conflict of Interest (OCI): Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.13 Transition Period: The transition period is the last thirty (30) days of the incumbent contract. During this period, to maximize productivity and to prevent possible delays in services, the incoming contractor shall on-board personnel in order to commence full performance of services on the contract start date.

During the transition period, the incumbent contractor shall prepare to return Government Furnished Equipment (see Part 3) to the COR. The incumbent contractor shall also provide a list of personnel to the incoming contractor.

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1 DEFINITIONS:

2.1.1 CONTRACT ADMINISTRATOR. The official Government representative delegated authority by the Contracting Officer to administer a contract. This individual is normally a member of the appropriate Contracting/Procurement career field and advises on all technical contractual matters.

2.1.2 CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or services to the government. The term used in this contract refers to the prime.

2.1.3 CONTRACTING OFFICER. A person with authority to enter into, administer, and/or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.4 CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.5 DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.6 DELIVERABLE. Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

2.1.7 GOVERNMENT-FURNISHED PROPERTY (GFP) OR GOVERNMENT PROPERTY (GP). Property in the possession of, or directly acquired by, the Government and subsequently made available to the contractor.

2.1.8 KEY PERSONNEL. Contractor personnel that the Government deems critical to the performance of the contract.

2.1.9 PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.10 QUALITY ASSURANCE. The government procedures to verify that services being performed by the contractor are acceptable in accordance with established standards and requirements of this contract.

2.1.11 QUALITY ASSURANCE SPECIALIST. An official Government representative concerned with matters pertaining to the contract administration process and quality assurance/quality control. Acts as technical advisor to the Contracting Officer in these areas.

2.1.12 QUALITY ASSURANCE SURVEILLANCE PLAN (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.13 QUALITY CONTROL. All necessary measures taken by the contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.14 SUBCONTRACTOR. One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.2 ACRONYMS:

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

This section covers only services provided on site at AGC.

3.1 Facilities: The Government will provide the necessary workspace for the contractor staff to provide the support outlined in the Performance Work Statement (PWS) to include desk space, telephones, computers, licenses, and secured storage.

3.2 The contractor shall not assign or remove Government resources (e.g., office space, equipment, licenses, etc.) without approval from the COR.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES:

4.1 General: The Contractor shall furnish all supplies, equipment, facilities and services required to perform work under this contract that are not listed under Part 3 of this PWS.

PART 5

SPECIFIC TASKS

5. Tasks

The contractor shall provide technical support for the operation, maintenance, sustainment, accreditation, upgrade, development, and migration of AGC NIPRNET/SIPRNET/JWICS geospatial systems, assets, data, support and infrastructure from USACE/AGC-managed to Army Enterprise.

5.1 Program Management and Reporting

5.1.1 The contractor shall execute geospatial IM/IT services for AGC. The contractor shall provide weekly updates on each of the assigned activities. The contractor shall manage, coordinate, facilitate, oversee, and track initiatives and projects with varying timelines and scopes. The contractor shall comply with reporting requirements as identified by CDRL’s (A001 for monthly status reports, A002 for presentation material, A003 for monthly scientific and technical reports, and A004 for training/user manual).

5.1.2 The contractor shall make hardware and software technical recommendations, including providing justification. The contractor shall conduct the planning, configure, and research for new or upgraded hardware and software.

5.2 Network Engineering

5.2.1 The contractor shall be responsible for configuration management of hardware to include servers, storage appliances, communications hardware (phones, VTC, COMSEC), firewalls, routers, and switches.

5.2.2 The contractor shall maintain network devices, upgrade network devices and recommend equipment replacement. The contractor shall manage space on the network drives. In the event of network failure the contractor shall perform fixes to correct failures and provide written documentation of the event.

5.2.3 The contractor shall monitor network performance to determine current and potential problems and propose network additions and enhancements to improve performance. The contractor shall support major network architecture changes and perform Government-furnished servers/devices migration such as: new devices deployment and movement, new server deployment and movement, and wireless scanning activities.

5.2.4 The contractor shall develop a preventive maintenance plan for network devices and perform regularly scheduled preventive maintenance of the network, systems, Uninteruptible Power Supplies (UPS), and components according to said plan. The UPS’s include two (2) Powerware 9390 – 160kVA and one Powerware 9310 – 80kVA. This requirement does not apply to items under separate maintenance plans (e.g. Manufacturer’s warranty). For systems already under maintenance plans, the contractor shall act as the technical liaison and communicate technical issues with maintenance providers.

5.2.5 The contractor shall upgrade and install network equipment and software, and return malfunctioning devices to full operation. See Exhibit A.

5.2.6 For current and future networks, including but not limited to NIPRNET, SIPRNET, JWICS, DDTE, the contractor shall provide comprehensive support comprised of cabling, hardware, software, licensing, and COMSEC. The contractor shall maintain and update a helpdesk system where each request is assigned as ticket to appropriate personnel. The contractor shall also serve as coordinator with external Helpdesks as required. The contractor shall maintain, update, and provide network documentation in accordance with CDRL A003,to include network architecture (logical, physical), hardware asset (switches, routers, etc.), software asset, workstation layout/floor plan, Ports Protocols and Services (PPS), IP listing, fiber connectivity diagram, and comms closet layout.

5.2.7 The contractor shall provide technical support in the areas of network administration, systems administration, and cyber security for PKI, NIPRNET, SIPRNET and JWICS enterprise networks systems and for the communications required to connect to these wide area networks. The contractor shall setup and manage user accounts to include AGC; the Sensors-Aerial Intelligence (SAI) office at AGC/Ft. Belvoir; the Geotechnical & Structures Laboratory (GSL), Vicksburg, MS; Headquarters, US Army Corps of Engineers; Transatlantic Division (TAD); and the Cold Regions Research and Engineering Laboratory (CRREL), Hanover, NH.

5.3 Systems Administration

5.3.1 The contractor shall provide infrastructure support for hardware (Server, PC, and peripherals), operating system (OS) and software.

5.3.2 The contractor shall provide subject matter expertise and resources to install, maintain, configure and optimize PC and Network Operating Systems, to include Microsoft, Linux and VMware server operating systems.

5.3.3 The contractor shall configure, implement, and maintain data storage/back-up/recovery, server software and firmware upgrades, and standard server maintenance. Support also includes the design, implementation, and/or on-going sustainment of Microsoft Active Directory and Exchange services.

5.3.4 The contractor shall develop a life-cycle management plan, provide equipment reconfiguration requirements, develop floor plan layouts, estimate bills-of-material, identify data communication requirements and shortfalls, in order to meet mission critical requirements.

5.3.5 The contractor shall be responsible for the management of UNIX, Linux, Solaris, Windows, VMware and other operating systems managed by GISO. The contractor shall support and maintain the operating systems, patches, upgrades, and apply Cyber Security requirements for systems managed by AGC. The contractor shall ensure that these systems are online and available to customers and ensure backups are addressed in the event of failures.

5.3.6 The contractor shall monitor network performance to include the server, network (wired and wireless), and virtualization environments. Support shall include the use of SolarWinds to provide monitoring and alert notifications of mission critical assets. Wireless support is limited to scanning for unauthorized devices.

5.3.7 The contractor shall build, test, and deploy virtualization solutions.

5.4 Cyber Security

5.4.1 The contractor shall provide Cyber Security support. All Cyber positions must be proficient with related automated tools to include but not limited to: the Enterprise Mission Assurance Support Service (eMASS), Host Based Security System (HBSS), and Assured Compliance Assessment Solution (ACAS). The contractor shall possess expert knowledge and in-depth experience with:

· Application and system assessment, determination of accreditation requirements (CoN, ATO, IATT, CTF, etc.).

· Categorization of information systems and/or data types IAW NIST SP 800-60 Vol II.

· Establishment of appropriate IA control set based on the impact level for confidentiality, integrity, and availability (per RMF) and establishment of Security Requirements Traceability Matrix which identifies applicable DISA IASE STIGs and SRGs.

· Selection of security controls per NIST SP 800-53 and CNSSI 1253.

· Writing System Security Plan (SSP), associated security controls assessment artifacts, and PO&AMs.

· Application of DISA IASE STIGs and SRGs.

· Management of security controls assessment artifacts in eMASS in preparation of packages for RMF (DoDI 8510.01, NIST SP 800-37) processes.

· Evaluation of security controls per NIST SP 800-53A.

· Implementation of continuous monitoring solutions per NIST SP 800-137.

5.4.2 The contractor shall identify, mitigate and resolve cyber security incident issues and concerns. The contractor shall develop guidelines/plans, analyses, reviews, and mitigations in the areas of security incident response and mitigation strategies, vulnerability scanning, writing security assessments, and other cyber security related activities and mandates.

5.4.3 The contractor shall review anti-virus updates on a weekly basis.

5.4.4 The contractor shall respond to all Cyber security notices from the AGC Chief Information Technology Officer (CITO), take action to comply with security notices and record compliance.

5.4.5 The contractor shall provide technical support, including documentation, to enable AGC systems to meet the requirements of receiving an Authority to Operate (ATO) accreditation decision via the Department of Defense (DoD) Risk Management Framework (RMF).

5.5 Web Services

5.5.1 The contractor shall provide technical support for web development to maintain the AGC’s websites (from unclassified to classified). Additionally, the contractor shall implement and use collaboration tools, such as CommonSpot, Coldfusion, PHP, Photoshop, Javascript, SQL, HTML, Sharepoint. The contractor shall apply computer programming languages and techniques to formulate programming specifications and programming code designs while maintaining new or modification of existing programs, codes, tests, debugs, and documents and maintains the program. The contractor shall be responsible for website availability, and coordinate and resolve website hardware/software problems.

5.6 Cloud Technology

5.6.1 The contractor shall provide technical support for building an agency enclave Cloud Security Model (CSM) that supports Impact Levels 2, 4, and 5 geospatial type systems in the commercial cloud environment. This shall include development of agency Cloud Enclave Strategic Plan and Proof of Concept (PoC), obtaining enclave accreditation approval under Risk Management Framework (RMF), identifying enclave architecture requirements, evaluation of candidate agency cloud services, defining metrics, supporting documentation and final reference architecture.

5.7 Helpdesk

5.7.1 The contractor shall deliver services, staff, and expertise to operate and maintain Helpdesk functions including ticketing, and system and operational support and troubleshooting onsite or remotely as required by Tier I, Tier II, and Tier III technicians. The contractor shall manage user accounts, from account creation, DD2875 processing, track users by branch/directorate or office, and account deletion.

5.8 Video Teleconferencing

5.8.1 The contractor shall support secure and non-secure video systems to include Video Teleconference (VTC) and desktop Local Area Network (LAN) VTC systems and web-based collaboration tools. The contractor shall schedule rooms and operate equipment during VTC sessions.

5.9 IT Logistics

5.9.1 The contractor shall provide AGC with IT operational logistics. This shall include: Obtain and follow operational guidance from the COR; Move, track, and excess equipment and various hardware. Some equipment exceed 25 lbs.

5.10 COOP

5.10.1 The contractor shall provide technical support for Continuity of Operations Plan (COOP) planning and execution to minimize interruption and ensure effective operation of AGC IT systems and networks. Within 180 days after contract award, the contractor shall establish both preventive measures and recovery plans appropriate for each system or network’s requirements, including classification, availability, and impact level. The contractor shall incorporate system and network changes to the COOP and provide for COR approval. The contractor shall provision and identify COOP personnel, to include qualifications, experience, and responsibilities. As a minimum, COOP personnel shall be comprised of the key personnel identified in section 1.8.

5.11 CONTRACTOR MANAGEMENT REPORTING (CMR): The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the contractor will report ALL contractor manpower (including subcontractor manpower) required for performance of this contract. The Contractor shall verify information input by the Government and completely fill in all other required fields in the reporting system using the following web address: https://cmra.army.mil/. The required information includes but is not limited to: (1) Contracting Organization, Contracting Officer, Contracting Officer’s Technical Representative (COR/COTR); (2) Contract number, including task and delivery order number; (3) Fiscal year covered by reporting period; (4) Contractor name, address, phone number, e-mail address, identity of contractor employee entering data; (5) Direct labor hours (including Subcontractors); (6) Direct labor dollars paid this reporting period (including Subcontractors); (7) Total invoiced amount (including Subcontractors); (8) Predominant Federal Service Code (FSC) reflecting services provided by Contractor (and separate predominant FSC for each Subcontractor if different); (9) Organizational title associated with the Unit Identification Code (UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the contractor with its UIC for the purposes of reporting this information; and (10) Locations where Contractor and Subcontractors perform the work (specified by zip code in the United States and nearest city, country, when in an overseas location, using standardized nomenclature provided on website). As part of its submission, the Contractor will also provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period will be the period of performance not to exceed 12 months ending September 30 of each Government fiscal year and must be reported by 31 October of each calendar year. Contractors may use a direct XML data transfer to the database server or fill in the fields on the website. The XML direct transfer is a format for transferring files from a Contractor’s systems to the secure website without the need for separate data entries for each required data element at the website. The specific formats for the XML direct transfer may be downloaded from the website.

PART 6

APPLICABLE PUBLICATIONS

6. APPLICABLE PUBLICATIONS (CURRENT EDITIONS)

6.1. The contractor (to include subcontractors) must abide by the following and all other applicable regulations, publications, manuals, and local policies and procedures in support of this contract.

a) Federal Information Security Management Act (P.L. 107-347, Title III).

b) Department of Defense Instruction 8500.01, Cybersecurity.

c) Department of Defense Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology.

d) Department of Defense 8570.01-M, Information Assurance Workforce Improvement Program.

e) Defense Information Systems Agency (DISA) Secure Technical Implementation Guides (STIGs).

f) Army Regulation 25-1, Army Information Technology.

g) Army Regulation 25-2, Information Assurance.

PART 7

ATTACHMENT/EXHIBIT

7.1 Performance Requirement Summary

The contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement.

PWS 5.2

Maintain Network Connectivity

Customer Feedback.

PWS 5.3

Maintain System Availability

Customer Feedback.

PWS 5.2

NIPR/SIPR Migration

Customer Feedback.

PWS 5.4

Cyber Security implementation

Customer Feedback.

PWS 5.4

Facilitate accreditation documentation

PWS 5.4

System protection shall be able to survive potential threats; the backup and recovery plans are acceptable

PWS 5.7

Helpdesk

PWS 5.1

Management and Reporting

CONTRACT DATA REQUIREMENTS LIST

Form Approved CMB No. 0704-0188

Public reporting burden for this collection of information is estimated to average 220 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any Other aspect of this collection of information, including suggestions for reducing this burden to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 222202-2302, and to the Office of Management and Budget, Paperwork Reduction Project (0704-0188), Washington, DC 20503. Please DO NOT RETURNS your form to either of these addresses. Send completed form to the Government Issuing Contracting Officer for the Contract. PR No. Listed in Block E.

A. Contract Line Item No.

B. Exhibit

C. Category

D. System/Item:

USAGC - Geospatial Information Support E. Contract/PR NO.

F. Contractor

1. Data Item No.

A001

2. Title of Data Item: Monthly Status Report (s)

3. Subtitle

4. Authority (Data Acquisition Document No.)

5. Contract Reference

6. Requiring Office

USAGC

7. DD 250 Req: NO

9.Dist Statement

10. Frequency Monthly

12. Date of First Submission:

See item 16

14. Distribution

8. APP Code

11. As of Date

13. Date of Subsequent Submission See item 16

a. Addressee

b. Copies

Draft

Final

16. REMARKS:

The contractor shall provide a Monthly Status report on the first day of each month for each Task Order including program status, costs, schedule(s), and activities accomplished. The format shall be contractor specified as agreed upon by the Government and will be delivered via email or in softcopy.

CEAGC-GI

CECT-AGC

15. TOTAL

G.PREPARED BY:

D. Trinh

K. Foster

J. DATE 07/22/2016

DD Form 1423-2, JUN 90 Previous editions are obsolete Page 1 of 4 Pages

CONTRACT DATA REQUIREMENTS LIST

Form Approved CMB No. 0704-0188

Public reporting burden for this collection of information is estimated to average 220 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any Other aspect of this collection of information, including suggestions for reducing this burden to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 222202-2302, and to the Office of Management and Budget, Paperwork Reduction Project (0704-0188), Washington, DC 20503.