Task_Order_0001_PWS.pdf

TASK ORDER 0001

PERFORMANCE WORK STATEMENT (PWS)

US Army Geospatial Center (AGC) Information Management/Information Technology

(IM/IT)

Systems Engineering and Technical Assistance (SETA) Support

PART 1

GENERAL INFORMATION

1. General: This is a non-personal service task order to provide Information Management/Information Technology (IT) Systems Engineering and Technical Assistance (SETA) support for the United States Army Geospatial Center (AGC).

1.1 Description of Services/Introduction: The contractor shall provide all personnel, supplies, facility, transportation, tools, materials, supervision, and other items and non-personal services necessary to provide SETA support for AGC IM/IT as defined in this PWS. The contractor shall provide technical support to manage AGC’s IM/IT infrastructure which includes designing network infrastructure, architecture development, applications, accreditation, maintenance, cloud technology, logistics, helpdesk, and geospatial enterprise solutions.

1.2 Background: The U.S. Army Geospatial Center (AGC) is a Major Subordinate Command under the U.S. Army Corps of Engineers (USACE). The AGC mission is to provide timely, accurate and relevant geospatial information, capabilities and domain expertise for Army Geospatial Enterprise implementation in support of unified land operations. The AGC supports the Army's LandWarNet / Mission Command concepts, capabilities, and systems - facilitating dissemination of relevant geospatial information to every echelon throughout the dynamic battlefield environment. The AGC also supports the Army, Department of Defense, and the Nation by executing policy and implementing standards while monitoring emerging technologies and validating Army Geospatial Enterprise (AGE) technical solutions; serving as the Army Knowledge Center for geospatial expertise by providing direct support to Army units and activities (geospatial data production, analysis and reachback); providing technical, acquisition integration, and logistical support to Army select Programs of Record and transitional technical capabilities under Army and Joint Capability Demonstrations, while also building and maintaining the Army Geospatial Logical Data Model and conducting Research, Development, Testing and Evaluation (RDT&E) focused on increasing the agility of Battle Command across the full spectrum of military operations - from conventional armed conflicts to counterinsurgencies and irregular warfare; researching new technologies and methodologies which leverage geospatial data and information in order to augment analysis and mission planning, helping the Warfighter make a more informed decision. This task order does not duplicate services provided by USACE Enterprise IT (ACE-IT).

1.3 Period of Performance: The period of performance for this task order will include a one year base with four one-year option periods.

1.4 General Information

1.4.1 Supervision of Contractor Employees: The Government will not exercise any supervision or control over contractor or subcontractor employees while performing work under the contract.

1.4.2 Quality Control: Quality Control is the responsibility of the contractor. The contractor is responsible for the delivery of quality services/supplies to the Government (see FAR 52.246-1, Contractor Inspection Requirements).

The contractor shall develop, implement and maintain an effective Quality Control System (QCS) which includes a written Quality Control Plan (QCP). The QCP shall implement standardized procedure/methodology for monitoring and documenting contract performance to ensure all contract requirements are met. The contractors’ QCP must contain a systematic approach to monitor operations to ensure acceptable services/products are provided to the Government. The QCP shall address procedures for scheduling, conducting and documentation of inspection; discrepancy identification and correction; corrective action procedures to include procedures for addressing Government discovered non-conformances; procedures for root cause analysis to identify the root cause and root cause corrective action to prevent re-occurrence of discrepancies; procedures for trend analysis; procedures for collecting and addressing customer feedback/complaints. The contractor shall upon request provide to the Government their quality control documentation. The QCP shall be submitted with the offeror’s proposal. The contractor shall notify and submit to the Contracting Officer (KO)/Contracting Officer Representative (COR) any proposed changes to the QCP five business days prior to implementation. After acceptance of the quality control plan the contractor shall receive the Contracting Officer’s acceptance in writing of any proposed change to their QC system.

1.4.3 Quality Assurance: The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is a Government document primarily focused on what the Government must do to assure that the contractor has performed in accordance with the requirements of the contract.

1.4.4 Federal Government Holidays: The contractor is not required to perform routine services on the following holidays.

New Years Day 1st day of January Martin Luther King Jr.'s Birthday 3rd Monday of January Presidents Day 3rd Monday of February Memorial Day Last Monday of May Independence Day 4th day of July Labor Day 1st Monday of September Columbus Day 2nd Monday of October Veterans Day 11th day of November Thanksgiving Day 4th Thursday of November Christmas Day 25th day of December

1.4.5 Hours of Operation: The contractor shall plan daily work hours to include the AGC core hours of 0900 through 1500 Monday through Friday. The exceptions are Helpdesk, which shall cover the hours between 0700 and 1700 and after-hour patching, which shall be performed on a bi-monthly basis between the hours of 1700 to 2200. After-hour patching performed in the AGC Sensitive Compartmented Information Facility (SCIF) requires a two-personnel minimum. Work days shall include Monday through Friday except during Government closure or when notified by the COR.

1.4.6 Place of Performance: The primary place of performance shall be the US Army Geospatial Center, Alexandria, Virginia. Annual visits shall be made to the following locations: Hanover, NH; Vicksburg, MS; Winchester, VA; Washington, DC; and Ft. Belvoir, VA (see section 1.10).

1.5 Type of Contract: This Task Order is Firm-Fixed-Price (FFP).

1.6 Security Requirements: All contractor personnel performing work under this task order shall be US Citizens possessing DoD TOP SECRET (TS) Sensitive Compartmented Information (SCI) clearance with SI/TK/G/HCS. The security requirements are in accordance with the DD 254, Department of Defense Contract Security Classification Specification.

1.7 Key Personnel: Certain skilled experienced professional and/or technical personnel are essential for successful contractor accomplishment of the work to be performed under this Task Order. These are defined as "Key Personnel" and are those persons whose resumes are submitted for evaluation of any proposal. Key personnel shall be available during AGC Core hours between 0900 and 1500 Eastern Time, Monday thru Friday except Federal holidays.

The following personnel are considered key personnel by the government: Program Manager, Technical Lead, Helpdesk Manager. The program manager shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the program manager is unavailable shall be designated in writing to the contracting officer. The program manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. Qualifications for all key personnel are listed below:

Program Manager: The Program Manager shall have PMP certification and experience managing requirements, contracts, operations, and personnel, all in the DoD IT field.

Technical Lead: The Technical Lead serves as the system architect and shall be certified in accordance with DOD 8570.01-M, as a minimum, at the IASAE III level and as CSSP Manager.

This position shall have experience in DoD IT, network engineering, cyber security, system administration, and specifically, geospatial information support.

Helpdesk Manager: The Helpdesk Manager shall have at the minimum DOD 8570.01-M IAT Level II certification and Helpdesk operations experience.

The Contractor shall have all Key Personnel on board on Day 1 of Phase-in period. The contractor shall notify the COR within 24 hours of known intent to substitute key personnel. In the event of such substitution, key personnel must meet requirements of section 1.8.

1.8 All Personnel

The Contractor shall provide experienced personnel to perform the required services.

1.9 Contractor Travel:

Area of Travel. The contractor shall be required to travel CONUS and within the National Capital Region (NCR) during the performance of this contract to attend meetings, conferences, and training. One contractor personnel shall make one one-day trip to each of the following USACE sites: Hanover, NH; Vicksburg, MS; Winchester, VA; and Washington, DC. A Not to Exceed (NTE) amount for travel will be specified in this task order.

1.10 Transition Period: The 30-day period between contract award and full-performance start will constitute the phase-in period. During the phase-in period, the contractor shall prepare to assume full responsibility for all areas of operation in accordance with the terms and conditions of the contract. The 30-day period prior to the completion of this Task Order (to include option periods) will constitute the phase-out period. During the phase-out period, management personnel of the incoming workforce may observe operations and performance methods of the incumbent contractor. This will allow for orderly turnover of equipment and records and will help to ensure continuity of service. If a follow-on contract is necessary to continue services, the contractor shall not defer any requirements for the purpose of avoiding responsibility or of transferring such responsibility to the succeeding contractor. The contractor shall also fully cooperate with the succeeding contractor and the Government.

The Contractor shall take all actions necessary for an efficient transition of the contracted operations. Contractor phase-in and phase-out operations shall not unduly interfere with Government business. Phase-In and Phase-Out Plans shall be in accordance with CDRL A003.

1.10.1 Phase-In: Phase-in includes all activities for on-boarding personnel in order to commence full performance of services on the full-performance start date; establishment of offices, Government Furnished Property (GFP), security, and other necessary processes for the contractor's operations at AGC. The contractor shall provide a draft Phase-in Plan to the Contracting Officer for review and acceptance, as part of the contractor's proposal submission, which clearly describes how the contractor plans to phase-in personnel. The Government may elect to incorporate the successful offeror's Phase-in Plan into the resulting contract award.

On contract award, the contractor shall submit a revised Phase-in Plan to the Contracting Officer no later than 10 calendar days after the award of the contract. Contractor's format is acceptable. The Government will make all facilities and equipment accessible to the Contractor during the phase-in period.

During the phase-in period, the Contractor shall at a minimum:

Develop and provide a phase-in milestone activity schedule Recruit, hire, and train personnel necessary to meet the requirements of this contract Obtain certifications, badges and credentials required to perform under this contract

1.10.2 Phase-Out: Phase-out includes all activities for out-processing personnel and returning GFP no longer required on the contract. The contractor shall establish and implement plans for an orderly phase-out of the contracted operations at the termination of this contract. The contractor shall develop and submit a Phase-out Plan including a schedule to the Contracting Officer for evaluation 180 calendar days after contract award. The Contractor's phase-out procedures shall not disrupt or adversely affect the day-to-day conduct of Government business. The contractor shall provide the Contracting Officer with copies of changes and revisions for review and approval prior to implementation.

The contractor shall develop and submit a revised Phase-out Plan to the Contracting Officer 60 calendar days prior to the beginning of the first option year, updating the plan each year, 60 days prior to the beginning of each option year. The phase-out plan shall fully describe how the Contractor shall, at a minimum, approach the following issues:

Employee notification; retention of key personnel; turnover of work-in-progress, inventories, and Government property; data and information transfer; and any other actions required to ensure continuity of operations.

Perform a joint inventory by the incumbent, the Government, and a successor. All parties shall be present during the inventory process.

Reconciliation of all property accounts, requisitions, and work-in-progress; turn-in of excess property and clean-up of contractor work areas.

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1 DEFINITIONS:

2.1.1 CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or services to the government. The term used in this contract refers to the prime.

2.1.2 CONTRACTING OFFICER. A person with authority to enter into, administer, and/or terminate contracts, and make related determinations and findings on behalf of the government.

Note: The only individual who can legally bind the government.

2.1.3 CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S.

Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4 DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5 DELIVERABLE. Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

2.1.6 GOVERNMENT-FURNISHED PROPERTY (GFP) OR GOVERNMENT-FURNISHED

EQUIPMENT (GFE). Property in the possession of, or directly acquired by, the Government and subsequently made available to the contractor.

2.1.7 KEY PERSONNEL. Contractor personnel that the Government deems critical to the performance of the contract.

2.1.8 PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.9 QUALITY ASSURANCE. The government procedures to verify that services being performed by the contractor are acceptable in accordance with established standards and requirements of this contract.

2.1.10 QUALITY ASSURANCE SURVEILLANCE PLAN (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.11 QUALITY CONTROL. All necessary measures taken by the contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.12 SUBCONTRACTOR. One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.2 ACRONYMS:

ACAS Assured Compliance Assessment Solution ACOR Alternate Contracting Officer's Representative AFARS Army Federal Acquisition Regulation Supplement AGC Army Geospatial Center AGE Army Geospatial Enterprise AQL Acceptable Quality Level AR Army Regulation ATCTS Army Training Certification Tracking System ATO Authority to Operate CFR Code of Federal Regulations CISSP Certified Information Systems Security Professional CMR Contract Manpower Reporting CON Certificate of Networthiness CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTR Contracting Officer's Technical Representative COTS Commercial-Off-the-Shelf CTF Certificate to Field DA Department of the Army DD250 Department of Defense Form 250 (Receiving Report) DD254 Department of Defense Contract Security Requirement List DDTE Design, Development, Test, and Evaluation DFARS Defense Federal Acquisition Regulation Supplement DMDC Defense Manpower Data Center DoD Department of Defense eMASS Enterprise Mission Assurance Support Service FAR Federal Acquisition Regulation FCL Facility Clearance FFP Firm Fixed Price GFE Government Furnished Equipment HBSS Host Based Security System HECSA Humphreys Engineering Center and Support Activity HIPAA Health Insurance Portability and Accountability Act of 1996 IA Information Assurance IATT Interim Authority to Test IAW In accordance with IM Information Management ISSAP Information Systems Security Architecture Professional

ISSEP Information Systems Security Engineering Professional ISSMP Information Systems Security Management Professional IT Information Technology JPAS Joint Personnel Adjudication System JTR Joint Travel Regulation KO Contracting Officer NISPOM National Industrial Security Program Operating Manual NIST National Institute of Standards and Technology OCI Organizational Conflict of Interest OCONUS Outside Continental United States (includes Alaska and Hawaii) ODC Other Direct Costs PII Personally Identifiable Information POAM Plan of Action and Milestones POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QCP Quality Control Program RDT&E Research, Development, Testing and Evaluation RMF Risk Management Framework SATOC Single Award Task Order Contract SCI Sensitive Compartmented Information SETA Systems Engineering and Technical Assistance SI/TK/G/HCS Special Intelligence/Talent Keyhole/Gamma/HUMINT Control System SMO Security Management Office SME Subject Matter Expert SRG Security Recommendation Guide SSP System Security Plan STIG Security Technical Implementation Guide TARP Threat Awareness and Reporting Program TE Technical Exhibit TO Task Order TS Top Secret USACE US Army Corps of Engineers

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1 Facilities: The Government will provide the necessary workspace for the contractor staff to provide the support outlined in the Performance Work Statement (PWS) to include desk space, telephones, and personal computers/licenses.

3.2 The contractor shall not assign or remove Government resources (e.g., office space, equipment, licenses, etc.) without approval from the COR.

3.3 Hardware and software are GFE.

3.4 The Government will provide all Government badges and credentials (such as CAC and SIPR Tokens) to facilitate appropriate building and system access by contractor personnel.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES:

4.1 General: The Contractor shall furnish all supplies, facilities and services required to perform work under this contract that are not listed under Part 3 of this PWS.

PART 5

SPECIFIC TASKS

5. Tasks

The contractor shall provide technical support for the operation, maintenance, sustainment, accreditation, upgrade, and development of AGC NIPRNET/SIPRNET/JWICS geospatial systems, assets, data, and infrastructure. See Exhibit A for historical information.

5.1 Program Management and Reporting

5.1.1 The contractor shall execute geospatial IM/IT services for AGC. The contractor shall provide weekly updates on each of the assigned activities. The contractor shall manage, coordinate, facilitate, oversee, and track initiatives and projects with varying timelines and scopes. The contractor shall comply with reporting requirements as identified by CDRL’s (A001 for status reports, A002 for presentation material, A003 for monthly scientific and technical reports, and A004 for training/user manual).

5.1.2 The contractor shall make hardware and software technical recommendations, including providing justification. The contractor shall conduct the planning, design, and research for new or upgraded hardware and software systems (CDRL A003).

5.1.3 The contractor shall submit monthly status report with the following programmatic details (CDRL A001):

Itemized expenses, including ODC, from the previous month, and remaining balance from each CLIN.

Number of accounts from each network, organized by office, including changes from the previous month.

Summary of key activities, including problems, recommendations, and/or solutions as applicable.

5.1.4 The contractor shall submit weekly status report detailing technical activities and events for the preceding week (CDRL A001).

5.2 Network Engineering

5.2.1 The contractor shall provide technical support in the areas of network administration, systems administration, and cyber security for PKI, NIPRNET, SIPRNET, JWICS enterprise networks systems and for the communications required to connect to these wide area networks.

5.2.2 The contractor shall be responsible for configuration management of hardware to include servers, storage appliances, communications hardware (phones, VTC, COMSEC), firewalls, routers, and switches.

5.2.3 The contractor shall maintain network devices, upgrade network devices and recommend equipment replacement. The contractor shall manage space on the network drives. In the event of network failure the contractor shall perform fixes to correct failures and provide written documentation of the event.

5.2.4 The contractor shall monitor network performance to determine current and potential problems and propose network additions and enhancements to improve performance. The contractor shall support major network architecture changes and perform Government-furnished servers/devices tasks such as: new devices deployment and movement, new server deployment and movement, and wireless scanning activities.

5.2.5 The contractor shall develop a preventive maintenance plan for network devices and perform regularly scheduled preventive maintenance of the network, systems, and components according to said plan. This requirement does not apply to items under separate maintenance plans (e.g. Manufacturer’s warranty). For systems already under maintenance plans, the contractor shall act as the technical liaison and communicate technical issues with maintenance providers.

5.2.6 The contractor shall install network equipment and software, and return malfunctioning devices to full operation.

5.2.7 The contractor shall survey, update, maintain, and provide network documentation in accordance with CDRL A003,to include network architecture (logical and physical) and schematics, hardware (switches, routers, etc.), software, workstation layout/floor plan, Ports Protocols and Services (PPS), IP listing, fiber connectivity diagram, and communications closet layout.

5.3 Systems Administration

5.3.1 The contractor shall provide infrastructure support for hardware (Server, PC, and peripherals), operating system (OS) and software.

5.3.2 The contractor shall provide subject matter expertise and resources to install, maintain, configure and optimize PC and Network Operating Systems, to include Microsoft, Linux and VMware server operating systems.

5.3.3 The contractor shall design, implement, and maintain data storage/back-up/recovery, server software and firmware upgrades, and standard server maintenance. Support also includes the design, implementation, and/or on-going sustainment of Microsoft Active Directory and Exchange services.

5.3.4 The contractor shall develop a life-cycle management plan, provide equipment reconfiguration requirements, develop floor plan layouts, estimate bills-of-material, identify data communication requirements and shortfalls, in order to meet mission critical requirements.

5.3.5 The contractor shall be responsible for the management of UNIX, Linux, Solaris, Windows, VMware and other operating systems managed by GISO. The contractor shall support and maintain the operating systems, patches, upgrades, and apply Cyber Security requirements for systems managed by AGC. The contractor shall ensure that these systems are online and available to customers and ensure backups are addressed in the event of failures.

5.3.6 The contractor shall monitor network performance to include the server, network (wired and wireless), and virtualization environments. Support shall include the use of SolarWinds to provide monitoring and alert notifications of mission critical assets. Wireless support is limited to scanning for unauthorized devices.

5.3.7 The contractor shall perform workstation management to include planning, testing, imaging, deployment, administration, day to day operations to operating systems, software applications, and hardware utilized on user workstations.

5.3.8 The contractor shall build, test, and deploy virtualization solutions.

5.4 Cyber Security

5.4.1 The contractor shall provide Cyber Security support. All Cyber positions must be proficient with related automated tools to include but not limited to: the Enterprise Mission Assurance Support Service (eMASS), Host Based Security System (HBSS), and Assured Compliance Assessment Solution (ACAS). The contractor shall possess expert knowledge and in-depth experience with:

Application and system assessment, determination of accreditation requirements (CoN, ATO, IATT, CTF, etc.).

Categorization of information systems and/or data types IAW NIST SP 800-60 Vol II.

Establishment of appropriate IA control set based on the impact level for confidentiality, integrity, and availability (per RMF) and establishment of Security Requirements Traceability Matrix which identifies applicable DISA IASE STIGs and SRGs.

Selection of security controls per NIST SP 800-53 and CNSSI 1253.

Writing System Security Plan (SSP), associated security controls assessment artifacts, and PO&AMs.

Application of DISA IASE STIGs and SRGs.

Management of security controls assessment artifacts in eMASS in preparation of packages for RMF (DoDI 8510.01, NIST SP 800-37) processes.

Evaluation of security controls per NIST SP 800-53A.

Implementation of continuous monitoring solutions per NIST SP 800-137.

5.4.2 The contractor shall identify, mitigate and resolve cyber security incident issues and concerns. The contractor shall develop guidelines/plans, analyses, reviews, and mitigations in the areas of security incident response and mitigation strategies, vulnerability scanning, writing security assessments, and other cyber security related activities and mandates.

5.4.3 The contractor shall review and update anti-virus definitions as required.

5.4.4 The contractor shall respond to all Cyber security notices as directed by the AGC Chief Information Technology Officer (CITO), take action to comply with security notices and record compliance.

5.4.5 The contractor shall provide technical support, including documentation, to enable AGC systems to meet the requirements of receiving an Authority to Operate (ATO) accreditation decision via the Department of Defense (DoD) Risk Management Framework (RMF).

5.5 Web Services

5.5.1 The contractor shall provide technical support for web development to maintain the AGC’s websites (from unclassified to classified). Additionally, the contractor shall implement and use tools, such as CommonSpot, Coldfusion, PHP, Photoshop, Javascript, SQL, HTML, Sharepoint.

The contractor shall apply computer programming languages and techniques to formulate programming specifications and programming code designs while maintaining new or modification of existing programs, codes, tests, debugs, and documents and maintains the program. The contractor shall be responsible for website availability, and coordinate and resolve website hardware/software problems.

5.5.2 The contractor shall develop, administer, and maintain web pages for AGC. These tasks include defining and developing requirements, conducting testing, implementation, and database administration.

5.6 Cloud Technology

5.6.1 The contractor shall provide system administration support and cloud subject matter expertise for building a prototype agency enclave Cloud Security Model (CSM) that supports Impact Levels 2, 4, and 5 geospatial type systems in the commercial cloud environment. This shall include development of agency Cloud Enclave Strategic Plan and Proof of Concept (PoC), obtaining enclave accreditation approval under Risk Management Framework (RMF), identifying enclave architecture requirements, evaluation of candidate agency cloud services, defining metrics, supporting documentation and final reference architecture.

5.7 Helpdesk

5.7.1 The contractor shall deliver services, staff, and expertise to operate and maintain Helpdesk functions including ticketing, and system and operational support and troubleshooting onsite or remotely as required by Tier I, Tier II, and Tier III technicians.

The contractor shall maintain and update the AGC BMC helpdesk system where each request is assigned as ticket to appropriate personnel. The contractor shall also serve as coordinator with external Helpdesks as required.

5.7.2 The contractor shall accept requests for resources and trouble tickets through AGC’s BMC system. In the event that customers do not have access to BMC, the contractor shall accept requests from users through dial-in method and create tickets in BMC. The contractor shall answer the Helpdesk phone number during all hours between 0700 and

1700, see section 1.4.5.

5.7.3 The contractor shall process and manage user accounts from account creation, providing users with forms and instructions, keeping users informed of processing time, to account deletion. The contractor shall document changes to the user base. User accounts currently include AGC; the Sensors-Aerial Intelligence (SAI) office at AGC/Ft. Belvoir;

the Geotechnical & Structures Laboratory (GSL), Vicksburg, MS; Headquarters, US Army Corps of Engineers; Transatlantic Division (TAD); and the Cold Regions Research and Engineering Laboratory (CRREL), Hanover, NH.

5.7.4 The contractor shall monitor usage of IT consumables such as toners, batteries, equipment filters, etc. and inform the COR at least 30 calendar days prior to the expiration or depletion of said consumables.

5.8 Video Teleconferencing

5.8.1 The contractor shall support secure and non-secure video systems to include Video Teleconference (VTC) and desktop Local Area Network (LAN) VTC systems and web-based collaboration tools. The contractor shall schedule rooms, connections, and operate VTC equipment during approximately seven sessions per month.

5.9 IT Logistics

5.9.1 The contractor shall provide AGC with IT operational logistics. This shall include: Obtain and follow operational guidance from the COR; Move, track, and excess equipment and various hardware. Some equipment exceed 25 lbs.

5.9.2 The contractor shall provide hardware logistics support to include packing, unpacking, assembling, setting up, labeling, inventorying, and creating/updating property transfer documentation.

5.9.3 The contractor shall support the GISO Hand Receipt Holder by ensuring that all property transfers are approved by the COR and documented.

5.10 COOP

5.10.1 The contractor shall provide technical support for Continuity of Operations Plan (COOP) planning and execution to minimize interruption and ensure effective operation of AGC IT systems and networks. Within 180 days after contract award, the contractor shall establish both preventive measures and recovery plans appropriate for each system or network’s requirements, including classification, availability, and impact level. The contractor shall incorporate system and network changes to the COOP and provide for COR approval. The contractor shall provision and identify COOP personnel, to include qualifications, experience, and responsibilities. As a minimum, COOP personnel shall be comprised of the key personnel identified in section 1.8.

5.11 Operations Support

5.11.1 The contractor shall be responsible for day-to-day operations of two AGC server rooms, two network cafes, two secured VTC rooms, and approximately 60 secured phones. The contractor shall work with the COR to monitor and ensure that server rooms and cafes have proper heating, cooling, ventilation, lighting, and space management.

5.12 IT Technical Writing Support

5.12.1 The contractor shall create briefing and presentation materials. The contractor shall capture processes and document them as Standard Operating Procedures (SOPs). The contractor shall research and create ad hoc manuals and white papers, approximately 5 per year (CDRL A004).

5.13 Contractor Manpower Reporting (CMR): The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the contractor will report ALL contractor manpower (including subcontractor manpower) required for performance of this contract. The Contractor shall verify information input by the Government and completely fill in all other required fields in the reporting system using the following web address: https://cmra.army.mil/. The required information includes but is not limited to: (1) Contracting Organization, Contracting Officer, Contracting Officer’s Technical Representative (COR/COTR); (2) Contract number, including task and delivery order number;

(3) Fiscal year covered by reporting period; (4) Contractor name, address, phone number, e-mail address, identity of contractor employee entering data; (5) Direct labor hours (including Subcontractors); (6) Direct labor dollars paid this reporting period (including Subcontractors);

(7) Total invoiced amount (including Subcontractors); (8) Predominant Federal Service Code (FSC) reflecting services provided by Contractor (and separate predominant FSC for each Subcontractor if different); (9) Organizational title associated with the Unit Identification Code (UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the contractor with its UIC for the purposes of reporting this information; and (10) Locations where Contractor and Subcontractors perform the work (specified by zip code in the United States and nearest city, country, when in an overseas location, using standardized nomenclature provided on website). As part of its submission, the Contractor will also provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period will be the period of performance not to exceed 12 months ending September 30 of each Government fiscal year and must be reported by 31 October of each calendar year. Contractors may use a direct XML data transfer to the database server or fill in the fields on the website. The XML direct transfer is a format for transferring files from a Contractor’s systems to the secure website without the need for separate data entries for each required data element at the website.

The specific formats for the XML direct transfer may be downloaded from the website.

PART 6

APPLICABLE PUBLICATIONS

6. APPLICABLE PUBLICATIONS (CURRENT EDITIONS)

6.1. The contractor (to include subcontractors) must abide by the following and all other applicable regulations, publications, manuals, and local policies and procedures in support of this contract.

a) Federal Information Security Management Act (P.L. 107-347, Title III).

b) Department of Defense Instruction 8500.01, Cybersecurity.

c) Department of Defense Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology.

d) Department of Defense Directive 8140.01, Cyberspace Workforce Management.

e) Department of Defense Manual 8570.01-M, Information Assurance Workforce Improvement Program.

f) Defense Information Systems Agency (DISA) Secure Technical Implementation Guides (STIGs).

g) Army Regulation 25-1, Army Information Technology.

h) Army Regulation 25-2, Information Assurance.

i) The National Security Act.

j) The Clinger-Cohen Act.

k) National Security Telecommunications and Information Systems Security Policy (NSTISSP) No. 11.

l) Federal Information Processing Standards (FIPS).

PART 7

ATTACHMENT/EXHIBIT

7.1 Performance Requirement Summary

The contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement.

Performance Objectives

Standard AQL Method of Surveillance

PWS 5.2

Maintain Network Connectivity

Connectivity to

NIPR, SIPR, JWICS

is operational.

Network access is available 98% of the time.

Month ly COR inspec t ion .

Cus tomer f eedback .

PWS 5.3

Maintain System Availability

Systems are operational.

Systems are operational 98% of the time.

Monthly COR inspection.

Cus tomer f eedback .

PWS 5.4

Cyber Security implementation

IA plans, procedures and SOPs for security implementation are consistent with regulations.

Timely and efficient service provided.

Security violations are avoided 98% of the time.

Monthly COR review of Audit Reports.

PWS 5.4

Facilitate accreditation documentation

Documents are professionally written, complete, on schedule and represents valid information.

Documentation is valid 98% of the time.

CIO approval.

PWS 5.4

System protection shall be able to survive potential threats; the backup and recovery plans are acceptable

Compliance with all information assurance vulnerability alert (IAVA) notifications implemented within established date for the corrective action.

Systems tested meet 100% of security requirements; no security breaches are detected.

Monthly COR review of Audit Reports.

PWS 5.7

Helpdesk

Helpdesk tickets are resolved timely and accurately as prescribed in Task Orders.

Tickets are resolved accurately 98% of the time and timely 95% of the time.

Monthly COR log inspection.

Customer feedback.

PWS 5.1

Management and Reporting

Monthly Reports are accurate and complete.

Del iverab les a re va l id 95% of the time.

Quarterly COR inspection.

CONTRACT DATA REQUIREMENTS LIST

Form Approved CMB No. 0704-0188

Public reporting burden for this collection of information is estimated to average 220 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any Other aspect of this collection of information, including suggestions for reducing this burden to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 222202-2302, and to the Office of Management and Budget, Paperwork Reduction Project (0704-0188), Washington, DC 20503. Please DO NOT RETURNS your form to either of these addresses. Send completed form to the Government Issuing Contracting Officer for the Contract. PR No. Listed in Block E.

A. Contract Line Item No.

B. Exhibit

C. Category

D. System/Item:

USAGC - Geospatial Information Support

E. Contract/PR NO.

F. Contractor

1. Data Item No.

A001

2. Title of Data Item: Status Report (s)

3. Subtitle

4. Authority (Data Acquisition Document No.)

5. Contract Reference

6. Requiring Office

USAGC

7. DD 250

Req: NO

9.Dist Statement

10. Frequency Monthly/Weekly

12. Date of First Submission:

See item 16

14. Distribution

8. APP Code

11. As of Date

13. Date of Subsequent Submission

a. Addressee

b. Copies

Draft

Final Reg Repro

16. REMARKS:

The contractor shall provide a Monthly Status report on the first day of each month for each Task Order including program status, costs, schedule(s), and activities accomplished. The contractor shall provide a Weekly Status report on the first day of each week covering technical activities and events. The format shall be contractor specified as agreed upon by the Government and will be delivered via email or in softcopy.

CEAGC-GI 1

CECT-AGC 1

15. TOTAL 1

G.PREPARED BY:

D. Trinh

H. DATE

07/22/2016

I. APPROVED BY:

K. Foster

J. DATE

07/22/2016

DD Form 1423-2, JUN 90 Previous editions are obsolete Page 1 of 4 Pages

Public reporting burden for this collection of information is estimated to average 220 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any Other aspect of this collection of information, including suggestions for reducing this burden to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 222202-2302, and to the Office of Management and Budget, Paperwork Reduction Project (0704-0188), Washington, DC 20503. Please DO NOT RETURNS your form to either of these addresses. Send completed form to the

A002

2. Title of Data Item: Presentation Material

As required

17. REMARKS:

Upon request, the contractor shall provide presentation material in contractor specified format as agreed upon by the Government and will be delivered via hardcopy, softcopy, and/or email. Presentation material may be comprised of charts, videos, etc. to support meetings.

D. Trinh

H. DATE

07/22/2016

I. APPROVED BY:

K. Foster

J. DATE

DD Form 1423-2, JUN 90 Previous editions are obsolete Page 2 of 4 Pages

Public reporting burden for this collection of information is estimated to average 220 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any Other aspect of this collection of information, including suggestions for reducing this burden to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 222202-2302, and to the Office of Management and Budget, Paperwork Reduction Project (0704-0188), Washington, DC 20503. Please DO NOT RETURNS your form to either of these addresses. Send completed form to the

A003

2. Title of Data Item: Scientific and Technical Reports

18. REMARKS:

The contractor shall provide reports in contractor specified format as agreed upon by the Government and will be delivered via hardcopy, softcopy, and/or email. Said reports comprise, but are not limited to, Analysis Reports, Phase-In Plan, Phase-Out Plan, Test Results, Designs, Drawings, Schematics, Project Schedules, Monthly Reports, etc.

Monthly reports shall be provided on the first day of the month. Multiple classifications are permitted per security guidelines as described in the DD254.

D. Trinh

H. DATE

07/22/2016

I. APPROVED BY:

K. Foster

J. DATE

DD Form 1423-2, JUN 90 Previous editions are obsolete Page 3 of 4 Pages

Public reporting burden for this collection of information is estimated to average 220 hours per response, including the time for reviewing instructions, searching existing data sources, gathering and maintaining the data needed, and completing and reviewing the collection of information. Send comments regarding this burden estimate or any Other aspect of this collection of information, including suggestions for reducing this burden to Department of Defense, Washington Headquarters Services, Directorate for Information Operations and Reports, 1215 Jefferson Davis Highway, Suite 1204, Arlington, VA 222202-2302, and to the Office of Management and Budget, Paperwork Reduction Project (0704-0188), Washington, DC 20503. Please DO NOT RETURNS your form to either of these addresses. Send completed form to the

A004

2. Title of Data Item: Training/User Manual(s)

19. REMARKS:

Upon request, the contractor shall deliver training package(s) in contractor specified format as agreed upon by the Government and will be delivered via hardcopy and/or softcopy. These packages may include training briefing material, user manuals, train-the-trainer documentation, and instructor material.

Drafts will be required for review and acceptance by the Government prior to final submission.

D. Trinh

H. DATE

07/22/2016

I. APPROVED BY:

K. Foster

J. DATE

DD Form 1423-2, JUN 90 Previous editions are obsolete Page 4 of 4 Pages

EXHIBIT A

Existing Infrastructure

Forty (40) physical servers Ninety (90) virtual servers Windows and Linux operating systems 550 user accounts

Existing Systems and Software

BMC Helpdesk Veeam Web Trends Fluke OptiView Quantum Appliances NetApp Applicances Polycom VTC SQL Server CommonSpot Shavlik SolarWinds

Historical Labor Categories

Program Manager Cloud Architect Network Engineer Computer System Administrator System Administrator Helpdesk Technician Cyber Security Officer Web Developer Logistics Technician