W5J9CQ-17-R-0004_0003.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

The purpose of this amendment is to:

* Remove SCI from facility clearance references to reflect DOD TS facility clearance

* Change QCP from submitted w ith the offeror's proposal to w ithin 30 calendar days of contract aw ard, see PWS paragraph 1.4.2.

* Remove requirement to comply w ith 52.219-9, contained w ithin 52.212-5.

1. CONTRACT ID CODE PAGE OF PAGES

S 1 35

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 12-May-2017

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X W5J9CQ-17-R-0004

X 9B. DATED (SEE ITEM 11)

04-May-2017

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

12-May-2017

CODE

W6RN USA GEOSPATIAL CTR

CONTRACTING DIVISION

7701 TELEGRAPH RD BLDG 2592

ALEXANDRIA VA 22315-3864

W5J9CQ 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

W5J9CQ-17-R-0004

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

The following have been modified:

PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS) for base IDIQ

US Army Geospatial Center (AGC) Information Management/Information Technology (IM/IT) Systems Engineering and Technical Assistance (SETA) Support

PART 1

GENERAL INFORMATION

1. General: This is a non-personal service contract to provide Information Management/Information Technology (IT) Systems Engineering and Technical Assistance (SETA) support for the United States Army Geospatial Center (AGC).

1.1 Description of Services/Introduction: The contractor shall provide all personnel, supplies, facility, transportation, tools, materials, supervision, and other items and non-personal services necessary to provide SETA support for AGC IM/IT as defined in this PWS. The contractor shall provide technical support to manage AGC’s IM/IT infrastructure which includes designing network infrastructure, architecture development, applications, accreditation, maintenance, cloud technology, logistics, helpdesk, and geospatial enterprise solutions.

1.2 Background: The U.S. Army Geospatial Center (AGC) is a Major Subordinate Command under the U.S. Army Corps of Engineers (USACE). The AGC mission is to provide timely, accurate and relevant geospatial information, capabilities and domain expertise for Army Geospatial Enterprise implementation in support of unified land operations. The AGC supports the Army's LandWarNet / Mission Command concepts, capabilities, and systems - facilitating dissemination of relevant geospatial information to every echelon throughout the dynamic battlefield environment. The AGC also supports the Army, Department of Defense, and the Nation by executing policy and implementing standards while monitoring emerging technologies and validating Army Geospatial Enterprise (AGE) technical solutions; serving as the Army Knowledge Center for geospatial expertise by providing direct support to Army units and activities (geospatial data production, analysis and reachback); providing technical, acquisition integration, and logistical support to Army select Programs of Record and transitional technical capabilities under Army and Joint Capability Demonstrations, while also building and maintaining the Army Geospatial Logical Data Model and conducting Research, Development, Testing and Evaluation (RDT&E) focused on increasing the agility of Battle Command across the full spectrum of military operations - from conventional armed conflicts to counterinsurgencies and irregular warfare; researching new technologies and methodologies which leverage geospatial data and information in order to augment analysis and mission planning, helping the Warfighter make a more informed decision. This contract does not duplicate services provided by USACE Enterprise IT (ACE-IT).

1.3 Period of Performance: The period of performance will include a one year base with four one-year option periods.

1.4 General Information

1.4.1 Supervision of Contractor Employees: The Government will not exercise any supervision or control over contractor or subcontractor employees while performing work under the contract.

1.4.2 Quality Control: Quality Control is the responsibility of the contractor. The contractor is responsible for the delivery of quality services/supplies to the Government (see FAR 52.246-1, Contractor Inspection Requirements).

The contractor shall develop, implement and maintain an effective Quality Control System (QCS) which includes a written Quality Control Plan (QCP). The QCP shall implement standardized procedure/methodology for monitoring and documenting contract performance to ensure all contract requirements are met. The contractors’ QCP must contain a systematic approach to monitor operations to ensure acceptable services/products are provided to the Government. The QCP shall address procedures for scheduling, conducting and documentation of inspection; discrepancy identification and correction; corrective action procedures to include procedures for addressing Government discovered non-conformances; procedures for root cause analysis to identify the root cause and root cause corrective action to prevent re-occurrence of discrepancies; procedures for trend analysis; procedures for collecting and addressing customer feedback/complaints. The contractor shall upon request provide to the Government their quality control documentation. The QCP shall be submitted within 30 calendar days of contract award with the offeror’s proposal. The contractor shall notify and submit to the Contracting Officer (KO)/Contracting Officer Representative (COR) any proposed changes to the QCP five business days prior to implementation. After acceptance of the quality control plan the contractor shall receive the Contracting Officer’s acceptance in writing of any proposed change to their QC system.

1.4.3 Quality Assurance: The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is a Government document primarily focused on what the Government must do to assure that the contractor has performed in accordance with the requirements of the contract.

1.4.4 Federal Government Holidays: The contractor is not required to perform routine services on the following holidays.

New Years Day 1st day of January Martin Luther King Jr.'s Birthday 3rd Monday of January Presidents Day 3rd Monday of February Memorial Day Last Monday of May

Independence Day 4th day of July Labor Day 1st Monday of September Columbus Day 2nd Monday of October Veterans Day 11th day of November Thanksgiving Day 4th Thursday of November Christmas Day 25th day of December

1.4.5 Hours of Operation: The contractor shall plan daily work hours to include the AGC core hours of 0900 through 1500 Monday through Friday. The exceptions are Helpdesk, which shall cover the hours between 0700 and 1700 and after-hour patching, which shall be performed on a bi-monthly basis between the hours of 1700 to 2200. After-hour patching performed in the AGC Sensitive Compartmented Information Facility (SCIF) requires a two-personnel minimum. Work days shall include Monday through Friday except during Government closure or when notified by the COR.

1.4.6 Place of Performance: The primary place of performance shall be the US Army Geospatial Center, Alexandria, Virginia.

1.5 Type of Contract: The government anticipates awarding an Indefinite Delivery Indefinite Quantity (IDIQ) Task Order Firm-Fixed-Price Single-Award-Task Order-Contract (FFP SATOC). The maximum value of the IDIQ will be $38M. The contract minimum guarantee will be $2,500.

1.6 Security Requirements: All contractor personnel performing work under this contract shall be US Citizens possessing DoD SECRET (S) or DoD TOP SECRET (TS) Sensitive Compartmented Information (SCI) clearance, and must maintain the level of security required as specified by each task order. In order to support the infrastructure, the contractor will require access to the following information only at the Government site: Communication Security (COMSEC) information, Intelligence information (SCI and Non-SCI), NATO information, and For Official Use Only (FOUO) information because this information is part of the Government infrastructure. SCI includes SI/TK/G/HCS. The contractor shall conform to additional security requirements as stated in the attached DD 254, DoD Contract Security Classification Specification.

1.6.1 In order to gain entry to AGC, the contractor shall perform the following:

o Submit personnel information in the Joint Personnel Adjudication System (JPAS) to the AGC Security Office using Security Management Office (SMO) code W6RNAA2.

o Provide contractor personnel Personally Identifiable Information (PII) to the COR and receive date for reporting to AGC.

1.6.2 In order to out-process from AGC or the contract, the contractor shall comply with the following procedures:

In cases of immediate removal, the contractor shall, in the following order, o Inform COR and AGC security with identity of affected employee.

o Inform affected personnel of the action taken.

o Escort the employee until departure from the Humphreys Engineering Center and

Support Activity (HECSA) compound.

In cases of general departure, the contractor shall o Inform COR with identity of the affected employee.

o Inform COR of the last date of duty performance.

o Inform COR of date of new employee in-processing.

o Provide COR documentation for in-processing new employee at least one business day prior to employee reporting to AGC.

The contractor shall notify the COR within one business day of known personnel decisions regarding departure, hiring, and substitution.

1.6.3 The government reserves the right to direct that any contractor employee be removed from performance, directly or indirectly, whenever there is a probable cause to believe, on the basis of all facts available, that such action is warranted in the interest of national security. This action shall occur whether or not the cause is deemed of sufficient severity to warrant action to terminate the contractor or individual’s security clearance. The government also reserves the right to remove any contractor for the purpose of conducting any investigation of alleged misconduct, which may, in the opinion of the contracting officer, jeopardize security.

1.6.4 Antiterrorism (AT) Level I Training: All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities, controlled access areas, or require network access, shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. Upon request, the contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at the following website: http://jko.jten.mil/courses/atl1/launch.html.

1.6.5 Access and General Protection/Security Policy and Procedures: All contractor and all associated sub-contractors employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation/facility access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office.

Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any installation or facility change, the Government may require changes in contractor security matters or processes.

1.6.6 For contractors requiring Common Access Card (CAC): The contractor and all sub-contractors employees will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or

(3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an interim CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

1.6.7 Suspicious Activity Reporting Training (e.g. iWATCH, CorpsWatch, or See Something, Say Something): The contractor and all associated sub-contractors shall receive a brief/training on the local suspicious activity reporting program. This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT 5 calendar days after the completion of the training.

1.6.8 Contractor Employees Who Require Access to Government Information Systems: All contractor employees with access to a government info system must be registered in the Army Training Certification Tracking System (ATCTS) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the information systems and then annually thereafter in accordance with personnel security standards listed in AR 25-2. An appropriate background investigation will be conducted prior to accessing the government information systems.

1.6.9 OPSEC Standing Operating Procedure/Plan: The contractor shall develop an OPSEC SOP/Plan within 90 days of contract award. The OPSEC SOP/Plan must be reviewed and approved by the RA OPSEC Officer. The SOP/Plan will include the government's critical information, why it needs to be protected, where it is located, who is responsible for it and how to protect it. In addition, the contractor shall identify an individual who will be an OPSEC Coordinator.

1.6.10 OPSEC Training: All new contractor employees will complete Level I OPSEC Training within 30 calendar days of reporting. Additionally, all contractor employees must complete annual OPSEC awareness training. The contractor shall submit certificates of completion for each affected contractor and subcontractor employee, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training. OPSEC awareness training is available at the following websites: https://www.iad.gov/ioss/ or http://www.cdse.edu/catalog/operations-security.html; or it can be provided by the RA OPSEC Officer in presentation form which will be documented via memorandum.

1.6.11 Cyber Security/information technology (IT) training: All contractor employees and associated sub-contractor employees must complete the DoD Cyber Security awareness training before issuance of network access and annually thereafter. All contractor employees working Cyber Security/IT functions must comply with DoD and Army training requirements in DoD 8570.01-M and AR 25-2. within six months of employment.

1.6.12 Cyber Security/IT certification: All contractor employees supporting Cyber Security/IT functions shall be appropriately certified upon contract award IAW DoD 8570.01-M, DFARS 252.239-7001 and AR 25-2.

1.6.13 Handling or Access to Classified Information: The contractor shall comply with AR 380- 67 (Personnel Security Program) and Homeland Security Presidential Directive 12 (Policy for a Common Identification Standard for Federal Employees and Contractors) as well as FAR 52.204-2, Security Requirements. Additionally, the contractor must comply with - (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); any revisions to DOD 5220.22-M, notice of which has been furnished to the contractor. The DD Form 254 will be attached with the contract.

1.6.14 Facility Clearance and individual clearances: The prime contractor must have a Facility Clearance (FCL) at the appropriate level (IAW the NISPOM DOD 5220.22-M and AR 380-49) prior to the start of the contract awarded period of performance. Contractor personnel performing work under this contract must have the required security clearance, per AR 380-67, at the appropriate level at the start of the period of performance. Security Clearances and FCL requirements are required to be maintained for the life of the contract IAW the DD Form 254 attached to the contract.

1.6.15 E-Verify Program: If applicable, the contractor must pre-screen candidates using the E-verify Program (http://www.uscis.gov/e-verify) website to meet the established employment eligibility requirements.

1.6.16 Threat Awareness and Reporting Program (TARP): All new contractor employees shall complete annual TARP training provided by a Counterintelligence Agent, IAW AR 381-12. The contractor shall submit certificates of completion for each affected contractor and subcontractor employee(s) or a memorandum for the record, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training. Authorized web-based TARP training for CAC card holders is available at the following website:

https://www.us.army.mil/suite/page/655474.

1.6.17 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use. Prior to departure at the end of each work day, Government facilities, equipment, and materials shall be secured in accordance with AGC policy.

1.6.17.1 The contractor shall follow AGC procedures, and obtain SSO approval, prior to bringing resources (e.g. hardware, personnel, etc.) into or out of the AGC SCIF.

1.6.17.2 The contractor shall not permit entrance of unauthorized persons into the contractor’s authorized areas.

1.7 Contracting Officer Representative (COR):

The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration.

A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR. The COR is not authorized to change any of the terms and conditions of the resulting contract. The warranted Contracting Officer is the only entity with authorization to negotiate and make changes to this contract.

1.8 Key Personnel: Key Personnel shall be identified and evaluated at the Task Order level.

Certain skilled experienced professional and/or technical personnel are essential for successful contractor accomplishment of the work to be performed under this contract. These are defined as "Key Personnel" and are those persons whose resumes are submitted for evaluation of any proposal. Key personnel shall be available during AGC Core hours between 0900 and 1500 Eastern Time, Monday thru Friday except Federal holidays. The contractor shall notify the COR within 24 hours of known intent to substitute key personnel.

1.9 All Personnel

To ensure uninterrupted performance, the contractor shall maintain an adequate workforce and shall ensure data and information are not lost upon departure of contractor personnel.

1.9.1 Identification of Contractor Employees: AGC badges shall be worn at all times during which the employee is performing work under this contract. Each contractor employee shall wear AGC badge(s) in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit. All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed.

1.10 Contractor Travel:

Area of Travel. The contractor shall be required to travel CONUS and within the National Capital Region (NCR) during the performance of this contract to attend meetings, conferences, and training. A Not to Exceed (NTE) amount for travel will be specified in each task order.

Travel Policy. The Government will reimburse the Contractor for allowable travel costs incurred by the Contractor in performance of the contract and determined to be in accordance with FAR subpart 31.2. Travel required for tasks assigned under this contract shall be governed in accordance with rules set forth for temporary duty travel in the Department of Defense Joint Travel Regulations (JTR). The Contractor shall execute all travel IAW DoD, COCOM and local commander regulations and policies. All travel and estimated expenses must be approved by the COR in writing, prior to travel.

1.11 Data Rights: The Government shall obtain rights in technical data in accordance with the standard data rights clauses at DFARS 252.227-7013 and 252.227-7014. The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.12 Organizational Conflict of Interest (OCI): Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.13 Transition Period: The transition period is the last thirty (30) days of the incumbent contract. During this period, to maximize productivity and to prevent possible delays in services, the incoming contractor shall on-board personnel in order to commence full performance of services on the contract start date. For the incoming contractor, this period is the Phase-in period.

During the transition period, the incumbent contractor shall prepare to return Government Furnished Equipment (see Part 3) to the COR.

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1 DEFINITIONS:

2.1.1 CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or services to the government. The term used in this contract refers to the prime.

2.1.2 CONTRACTING OFFICER. A person with authority to enter into, administer, and/or terminate contracts, and make related determinations and findings on behalf of the government.

Note: The only individual who can legally bind the government.

2.1.3 CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S.

Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4 DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5 DELIVERABLE. Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

2.1.6 GOVERNMENT-FURNISHED PROPERTY (GFP) OR GOVERNMENT-FURNISHED

EQUIPMENT (GFE). Property in the possession of, or directly acquired by, the Government and subsequently made available to the contractor.

2.1.7 KEY PERSONNEL. Contractor personnel that the Government deems critical to the performance of the contract.

2.1.8 PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.9 QUALITY ASSURANCE. The government procedures to verify that services being performed by the contractor are acceptable in accordance with established standards and requirements of this contract.

2.1.10 QUALITY ASSURANCE SURVEILLANCE PLAN (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.11 QUALITY CONTROL. All necessary measures taken by the contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.12 SUBCONTRACTOR. One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.2 ACRONYMS:

ACAS Assured Compliance Assessment Solution ACOR Alternate Contracting Officer's Representative AFARS Army Federal Acquisition Regulation Supplement AGC Army Geospatial Center AGE Army Geospatial Enterprise AQL Acceptable Quality Level AR Army Regulation ATCTS Army Training Certification Tracking System ATO Authority to Operate CFR Code of Federal Regulations CISSP Certified Information Systems Security Professional CMR Contract Manpower Reporting CON Certificate of Networthiness CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTR Contracting Officer's Technical Representative COTS Commercial-Off-the-Shelf CTF Certificate to Field DA Department of the Army DD250 Department of Defense Form 250 (Receiving Report) DD254 Department of Defense Contract Security Requirement List DDTE Design, Development, Test, and Evaluation DFARS Defense Federal Acquisition Regulation Supplement DMDC Defense Manpower Data Center DoD Department of Defense eMASS Enterprise Mission Assurance Support Service FAR Federal Acquisition Regulation FCL Facility Clearance FFP Firm Fixed Price GFE Government Furnished Equipment HBSS Host Based Security System HECSA Humphreys Engineering Center and Support Activity HIPAA Health Insurance Portability and Accountability Act of 1996 IA Information Assurance IATT Interim Authority to Test IAW In accordance with IM Information Management

ISSAP Information Systems Security Architecture Professional ISSEP Information Systems Security Engineering Professional ISSMP Information Systems Security Management Professional IT Information Technology JPAS Joint Personnel Adjudication System JTR Joint Travel Regulation KO Contracting Officer NISPOM National Industrial Security Program Operating Manual NIST National Institute of Standards and Technology OCI Organizational Conflict of Interest OCONUS Outside Continental United States (includes Alaska and Hawaii) ODC Other Direct Costs PII Personally Identifiable Information POAM Plan of Action and Milestones POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QCP Quality Control Program RDT&E Research, Development, Testing and Evaluation RMF Risk Management Framework SATOC Single Award Task Order Contract SCI Sensitive Compartmented Information SETA Systems Engineering and Technical Assistance SI/TK/G/HCS Special Intelligence/Talent Keyhole/Gamma/HUMINT Control System SMO Security Management Office SME Subject Matter Expert SRG Security Recommendation Guide SSP System Security Plan STIG Security Technical Implementation Guide TARP Threat Awareness and Reporting Program TE Technical Exhibit TO Task Order TS Top Secret USACE US Army Corps of Engineers

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1 Facilities: The Government will provide the necessary workspace for the contractor staff to provide the support outlined in the Performance Work Statement (PWS) to include desk space, telephones, and personal computers/licenses.

3.2 The contractor shall not assign or remove Government resources (e.g., office space, equipment, licenses, etc.) without approval from the COR.

3.3 NIPR/SIPR/JWICs Hardware and software are GFE.

3.4 The Government will provide all Government badges and credentials (such as CAC and SIPR Tokens) to facilitate appropriate building and system access by contractor personnel.

PART 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4. CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES:

4.1 General: The Contractor shall furnish all supplies, facilities and services required to perform work under this contract that are not listed under Part 3.1 of this PWS.

PART 5

SPECIFIC TASKS

5. Tasks

The contractor shall provide technical support for the operation, maintenance, sustainment, accreditation, upgrade, and development of AGC NIPRNET/SIPRNET/JWICS geospatial systems, assets, data, and infrastructure.

5.1 Program Management and Reporting

5.1.1 The contractor shall execute geospatial IM/IT services for AGC. The contractor shall provide weekly updates on each of the assigned activities. The contractor shall manage, coordinate, facilitate, oversee, and track initiatives and projects with varying timelines and scopes. The contractor shall comply with reporting requirements as identified by CDRL’s (A001 for monthly status reports, A002 for presentation material, A003 for monthly scientific and technical reports, and A004 for training/user manual).

5.1.2 The contractor shall make hardware and software technical recommendations, including providing justification. The contractor shall conduct the planning, design, and research for new or upgraded hardware and software systems.

5.2 Network Engineering

5.2.1 The contractor shall be responsible for configuration management of hardware to include servers, storage appliances, communications hardware (phones, VTC, COMSEC), firewalls, routers, and switches.

5.2.2 The contractor shall maintain network devices, upgrade network devices and recommend equipment replacement. The contractor shall manage space on the network drives. In the event of network failure the contractor shall perform fixes to correct failures and provide written documentation of the event.

5.2.3 The contractor shall monitor network performance to determine current and potential problems and propose network additions and enhancements to improve performance. The contractor shall support major network architecture changes and perform Government-furnished servers/devices tasks such as: new devices deployment and movement, new server deployment and movement, and wireless scanning activities.

5.2.4 The contractor shall develop a preventive maintenance plan for network devices and perform regularly scheduled preventive maintenance of the network, systems, and components according to said plan. This requirement does not apply to items under separate maintenance plans (e.g. Manufacturer’s warranty). For systems already under maintenance plans, the contractor shall act as the technical liaison and communicate technical issues with maintenance providers.

5.2.5 The contractor shall upgrade and install network equipment and software, and return malfunctioning devices to full operation.

5.2.6 For current and future networks, including but not limited to NIPRNET, SIPRNET, JWICS, DDTE, the contractor shall provide comprehensive support comprised of cabling, hardware, software, licensing, and COMSEC. The contractor shall maintain and update a helpdesk system where each request is assigned as ticket to appropriate personnel. The contractor shall also serve as coordinator with external Helpdesks as required. The contractor shall maintain, update, and provide network documentation in accordance with CDRL A003, to include network architecture (logical, physical), hardware asset (switches, routers, etc.), software asset, workstation layout/floor plan, Ports Protocols and Services (PPS), IP listing, fiber connectivity diagram, and comms closet layout.

5.2.7 The contractor shall provide technical support in the areas of network administration, systems administration, and cyber security for PKI, NIPRNET, SIPRNET and JWICS enterprise networks systems and for the communications required to connect to these wide area networks.

The contractor shall setup and manage user accounts to include AGC; the Sensors-Aerial Intelligence (SAI) office at AGC/Ft. Belvoir; the Geotechnical & Structures Laboratory (GSL), Vicksburg, MS; Headquarters, US Army Corps of Engineers; Transatlantic Division (TAD); and the Cold Regions Research and Engineering Laboratory (CRREL), Hanover, NH.

5.3 Systems Administration

5.3.1 The contractor shall provide infrastructure support for hardware (Server, PC, and peripherals), operating system (OS) and software.

5.3.2 The contractor shall provide subject matter expertise and resources to install, maintain, configure and optimize PC and Network Operating Systems, to include Microsoft, Linux and VMware server operating systems.

5.3.3 The contractor shall design, gain COR approval, implement, and maintain data storage/back-up/recovery, server software and firmware upgrades, and standard server maintenance. Support also includes the design, implementation, and/or on-going sustainment of Microsoft Active Directory and Exchange services.

5.3.4 The contractor shall develop a life-cycle management plan, provide equipment reconfiguration requirements, develop floor plan layouts, estimate bills-of-material, identify data communication requirements and shortfalls, in order to meet mission critical requirements.

5.3.5 The contractor shall be responsible for the management of UNIX, Linux, Solaris, Windows, VMware and other operating systems managed by GISO. The contractor shall support and maintain the operating systems, patches, upgrades, and apply Cyber Security requirements for systems managed by AGC. The contractor shall ensure that these systems are online and available to customers and ensure backups are addressed in the event of failures.

5.3.6 The contractor shall monitor network performance to include the server, network (wired and wireless), and virtualization environments. Support shall include the use of SolarWinds to provide monitoring and alert notifications of mission critical assets. Wireless support is limited to scanning for unauthorized devices.

5.3.7 The contractor shall build, test, and deploy virtualization solutions, that have been accepted by the COR.

5.4 Cyber Security

5.4.1 The contractor shall provide Cyber Security support. All Cyber positions must be proficient with related automated tools to include but not limited to: the Enterprise Mission Assurance Support Service (eMASS), Host Based Security System (HBSS), and Assured Compliance Assessment Solution (ACAS). The contractor shall possess expert knowledge and in-depth experience with:

Application and system assessment, determination of accreditation requirements (CoN, ATO, IATT, CTF, etc.).

Categorization of information systems and/or data types IAW NIST SP 800-60 Vol II.

Establishment of appropriate IA control set based on the impact level for confidentiality, integrity, and availability (per RMF) and establishment of Security Requirements Traceability Matrix which identifies applicable DISA IASE STIGs and SRGs.

Selection of security controls per NIST SP 800-53 and CNSSI 1253.

Writing System Security Plan (SSP), associated security controls assessment artifacts, and PO&AMs.

Application of DISA IASE STIGs and SRGs.

Management of security controls assessment artifacts in eMASS in preparation of packages for RMF (DoDI 8510.01, NIST SP 800-37) processes.

Evaluation of security controls per NIST SP 800-53A.

Implementation of continuous monitoring solutions per NIST SP 800-137.

5.4.2 The contractor shall identify, mitigate and resolve cyber security incident issues and concerns. The contractor shall develop guidelines/plans, analyses, reviews, and mitigations in the areas of security incident response and mitigation strategies, vulnerability scanning, writing security assessments, and other cyber security related activities and mandates.

5.4.3 The contractor shall review anti-virus updates on a weekly basis.

5.4.4 The contractor shall respond to all Cyber security notices from the AGC Chief Information Technology Officer (CITO), take action to comply with security notices and record compliance.

5.4.5 The contractor shall provide technical support, including documentation, to enable AGC systems to meet the requirements of receiving an Authority to Operate (ATO) accreditation decision via the Department of Defense (DoD) Risk Management Framework (RMF).

5.5 Web Services

5.5.1 The contractor shall provide technical support for web development to maintain the AGC’s websites (from unclassified to classified). Additionally, the contractor shall implement and use collaboration tools, such as CommonSpot, Coldfusion, PHP, Photoshop, Javascript, SQL, HTML, Sharepoint. The contractor shall apply computer programming languages and techniques to formulate programming specifications and programming code designs while maintaining new or modification of existing programs, codes, tests, debugs, and documents and maintains the program. The contractor shall be responsible for website availability, and coordinate and resolve website hardware/software problems.

5.6 Cloud Technology

5.6.1 The contractor shall provide technical support for building an agency enclave Cloud Security Model (CSM) that supports Impact Levels 2, 4, and 5 geospatial type systems in the commercial cloud environment. This shall include development of agency Cloud Enclave Strategic Plan and Proof of Concept (PoC), obtaining enclave accreditation approval under Risk Management Framework (RMF), identifying enclave architecture requirements, evaluation of candidate agency cloud services, defining metrics, supporting documentation and final reference architecture.

5.7 Helpdesk

5.7.1 The contractor shall deliver services, staff, and expertise to operate and maintain Helpdesk functions including ticketing, and system and operational support and troubleshooting onsite or remotely as required by Tier I, Tier II, and Tier III technicians.

The contractor shall manage user accounts, from account creation, DD2875 processing, track users by branch/directorate or office, and account deletion.

5.8 Video Teleconferencing

5.8.1 The contractor shall support secure and non-secure video systems to include Video Teleconference (VTC) and desktop Local Area Network (LAN) VTC systems and web-based collaboration tools. The contractor shall schedule rooms and operate equipment during VTC sessions.

5.9 IT Logistics

5.9.1 The contractor shall provide AGC with IT operational logistics. This shall include: Obtain and follow operational guidance from the COR; Move, track, and excess equipment and various hardware. Some equipment exceed 25 lbs.

5.10 COOP

5.10.1 The contractor shall provide technical support for Continuity of Operations Plan (COOP) planning and execution to minimize interruption and ensure effective operation of AGC IT systems and networks. Within 180 days after contract award, the contractor shall establish both preventive measures and recovery plans appropriate for each system or network’s requirements, including classification, availability, and impact level. The contractor shall incorporate system and network changes to the COOP and provide for COR approval. The contractor shall provision and identify COOP personnel, to include qualifications, experience, and responsibilities. As a minimum, COOP personnel shall be comprised of the key personnel identified in section 1.8.

5.11 Operations Support

5.11.1 The contractor shall be responsible for day-to-day operations of two AGC server rooms, two network cafes, two secured VTC rooms, and approximately 60 secured phones. The contractor shall work with the COR to monitor and ensure that server rooms and cafes have proper heating, cooling, ventilation, lighting, and space management.

5.12 IT Technical Writing Support

5.12.1 The contractor shall create briefing and presentation materials. The contractor shall capture processes and document them as Standard Operating Procedures (SOPs). The contractor shall research and create ad hoc manuals and white papers, approximately 5 per year (CDRL A004).

5.13 Contractor Manpower Reporting (CMR): The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the contractor will report ALL contractor manpower (including subcontractor manpower) required for performance of this contract. The Contractor shall verify information input by the Government and completely fill in all other required fields in the reporting system using the following web address: https://cmra.army.mil/. The required information includes but is not limited to: (1) Contracting Organization, Contracting Officer, Contracting Officer’s Technical Representative (COR/COTR); (2) Contract number, including task and delivery order number;

(3) Fiscal year covered by reporting period; (4) Contractor name, address, phone number, e-mail address, identity of contractor employee entering data; (5) Direct labor hours (including Subcontractors); (6) Direct labor dollars paid this reporting period (including Subcontractors);

(7) Total invoiced amount (including Subcontractors); (8) Predominant Federal Service Code (FSC) reflecting services provided by Contractor (and separate predominant FSC for each Subcontractor if different); (9) Organizational title associated with the Unit Identification Code (UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the contractor with its UIC for the purposes of reporting this information; and (10) Locations where Contractor and Subcontractors perform the work (specified by zip code in the United States and nearest city, country, when in an overseas location, using standardized nomenclature provided on website). As part of its submission, the Contractor will also provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period will be the period of performance not to exceed 12 months ending September 30 of each

Government fiscal year and must be reported by 31 October of each calendar year. Contractors may use a direct XML data transfer to the database server or fill in the fields on the website. The XML direct transfer is a format for transferring files from a Contractor’s systems to the secure website without the need for separate data entries for each required data element at the website.

The specific formats for the XML direct transfer may be downloaded from the website.

PART 6

APPLICABLE PUBLICATIONS

6. APPLICABLE PUBLICATIONS (CURRENT EDITIONS)

6.1. The contractor (to include subcontractors) must abide by the following and all other applicable regulations, publications, manuals, and local policies and procedures in support of this contract.

a) Federal Information Security Management Act (P.L. 107-347, Title III).

b) Department of Defense Instruction 8500.01, Cybersecurity.

c) Department of Defense Instruction 8510.01, Risk Management Framework (RMF) for DoD Information Technology.

d) Department of Defense Directive 8140.01, Cyberspace Workforce Management.

e) Department of Defense Manual 8570.01-M, Information Assurance Workforce Improvement Program.

f) Defense Information Systems Agency (DISA) Secure Technical Implementation Guides (STIGs).

g) Army Regulation 25-1, Army Information Technology.

h) Army Regulation 25-2, Information Assurance.

i) The National Security Act.

j) The Clinger-Cohen Act.

k) National Security Telecommunications and Information Systems Security Policy (NSTISSP) No. 11.

l) Federal Information Processing Standards (FIPS).

PART 7

ATTACHMENT/EXHIBIT

7.1 Performance Requirement Summary

The contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement.

Performance Objectives

Standard AQL Method of Surveillance

PWS 5.2

Maintain Network Connectivity

Connectivity to

NIPR, SIPR, JWICS

is operational.

Network access is available 98% of the time.

Monthly COR Inspection

Customer Feedback

PWS 5.3

Maintain System Availability

Systems are operational.

Systems are operational 98% of the time.

Monthly COR Inspection

Customer Feedback

PWS 5.4

Cyber Security implementation

IA plans, procedures and SOPs for security implementation are consistent with regulations.

Timely and efficient service provided. Security violations are avoided 98% of the time.

Monthly COR Review of Audit Reports

PWS 5.4

Facilitate accreditation documentation

Documents are professionally written, complete, on schedule and represents valid information.

Documentation is valid and on schedule, responses to inquiries related to documentation are reliable and facilitate approval

CIO Approval

PWS 5.4

System protection shall be able to survive potential threats; the backup and recovery plans are acceptable

Compliance with all information assurance vulnerability alert (IAVA) notifications implemented within established date for the corrective action.

Systems tested meet 100% of security requirements; no security breaches are detected.

Monthly COR Review of Audit Reports

PWS 5.7

Helpdesk

Helpdesk tickets are resolved timely and accurately as prescribed in Task Orders.

Tickets are resolved accurately 98% of the time and timely 95% of the time.

Monthly COR Log Inspection

Customer feedback.

PWS 5.1

Management and Reporting

Monthly Reports are accurate and complete.

De l iverab les a re t imely and accurate 95% of the time.

Quarterly COR Inspection

52.212-1 INSTRUCTIONS TO OFFERORS -- COMMERCIAL…