W900KK20R0011_Attach_25_NCRC_EPOS_Distribution_Agreement+GFI_List_20200225.pdf

DISTRIBUTION AGREEMENT NATIONAL CYBER RANGE COMPLEX

EVENT PLANNING, OPERATIONS, AND SUPPORT

W900KK-20-R-0011

1) National Cyber Range Complex (NCRC) Event Planning, Operations and Support (EPOS) Government Furnished Information. Performance Work Statements (PWSs) and Government Furnished Information (GFI) for the NCRC EPOS requirement is available to responsible contractors that are eligible to receive award of a DoD contract; who are currently U.S. DoD Contractors; and that intend to submit proposals in response to the U.S. Army Contracting Command – Orlando Request for Proposals (RFP). NCRC EPOS documents in this release include:

SEE NCRC EPOS PWS(s) and GFI LIST AT PAGES 10 - 13

Purpose: Use of the Performance Work Statements (PWSs) and Government Furnished Information (GFI) listed herein is limited to proposal preparation and submission by U.S. DoD Contractors responding to solicitation W900KK-20-R-0011.

Rights granted herein will expire on 6 April 2021.

THE GFI RELEASED UNDER THIS NCRC EPOS DISTRIBUTION AGREEMENT

WILL ONLY BE DISTRIBUTED BY THE GOVERNMENT TO PRIME CONTRACTORS.

PRIME CONTRACTORS, (ALSO KNOWN AS THE OFFEROR), MUST REQUEST

AND RECEIVE WRITTEN APPROVAL FROM THE GOVERNMENT TO FURTHER

RELEASE GFI TO THEIR SUBCONTRACTORS AT ALL TIERS/LEVELS.

THEREFORE, WHEN SUBMITTING THIS NCRC EPOS DISTRIBUTION

AGREEMENT EACH OFFEROR/PRIME CONTRACTOR MUST SUBMIT A LIST OF

ALL SUBCONTRACTORS AND A CURRENT DD FORM 2345 THAT HAS BEEN

APPROVED BY THE DEFENSE LOGISTICS AGENCY (DLA) JOINT

CERTIFICATION PROGRAM (JCP) FOR EACH SUBCONTRACTOR.

WHEN WRITTEN APPROVAL IS RECEIVED FROM THE GOVERNMENT TO

FURTHER RELEASE GFI TO THEIR SUBCONTRACTORS, OFFERORS MUST

FLOW DOWN A COPY OF THEIR APPROVED NCRC EPOS DISTRIBUTION

AGREEMENT TO EACH SUBCONTRACTOR WHEN GFI IS DISTRIBUTED.

PRIME CONTRACTORS AND THEIR SUBCONTRACTORS ARE RESPONSIBLE

FOR COMPLYING WITH ALL TERMS AND CONDITIONS IN THIS NCRC EPOS

DISTRIBUTION AGREEMENT.

By completing and signing this distribution agreement, the U.S. DoD Contractor certifies they shall ensure strict compliance with all requirements and limitations stipulated herein.

The NCRC EPOS documents will be provided upon request and the approval granted using this form. The U.S. DoD Contractor shall submit a completed distribution agreement to Mr. Robert D. Baird, Contract Specialist, at robert.d.baird10.civ@mail.mil.

Requests will be considered until the GFI List is superseded, or upon notification of a cancellation of the NCRC EPOS requirement.

All communications and deliveries regarding this NCRC EPOS Distribution Agreement shall be through the Procuring Contracting Officer or designated Contract Specialist(s)

REQUEST FOR NCRC EPOS GOVERNMENT FURNISHED INFORMATION

Requesting Prime Contractor’s Organization Name:

Address:

Telephone: ________________________ E-Mail: __________________________

CAGE: ____________ DUNS: ____________________

Requesting U.S. Department of Defense (DoD) Contractor Authorized Point Of Contact

(POC):

Name (Please Print): _____________________________ Date: ________________

Telephone: ________________________ E-Mail: __________________________

Address:

Alternate Requesting U.S. Department of Defense (DoD) Contractor Authorized POC:

Name (Please Print): _____________________________ Date: ________________

Telephone: ________________________ E-Mail: __________________________

Address:

I hereby agree to the terms and conditions of this distribution agreement and will utilize the NCRC EPOS GFI, only for the purpose/use described herein. I understand that storing, processing or transmitting this export controlled material via any public electronic medium is strictly prohibited.

SIGNATURE: _____________________________________ Date: _____________ (Requesting Company’s Contracting Manager)

In accordance with DoDI 5230.24, export-controlled items marked Distribution Statement F shall not be disseminated outside the U.S. Government or to U.S.

Government contractors without first verifying the recipient’s eligibility and authority to receive export-controlled information by verifying they have a current, valid DD Form 2345. Each U.S. DoD Contractor must submit a valid DD Form 2345 with their request.

RELEASE AUTHORIZATION TO U.S. DoD CONTRACTOR:1

NCRC EPOS GFI is authorized to be released to the U.S. DoD Contractor identified above for the stated purpose. It is hereby certified that the expiration limits identified above are correct and the identified U.S. DoD Contractor requires the GFI for the aforementioned purpose.

Date:

Name: _____________________________

Telephone: ________________________ E-Mail: __________________________

Signature:

Issuing Office (ACC-Orlando) Date

U.S. GOVERNMENT CONTROLLING DOD OFFICE APPROVAL2

The above request is approved for the purposes stated by the requestor.

Signature:

(Project Manager, or designated Representative) Date

1 To be completed by Issuing DoD Office

2 To be completed by Controlling DoD Office Definitions

1. Definitions:

a. Controlling DoD Office. The DoD activity that generated the GFI for NCRC EPOS or received the GFI on behalf of the DoD and has the inherently governmental responsibility for determining the distribution of the GFI. For joint sponsorship, the Controlling Office is determined by advance agreement and may be a party, group, or committee representing the interested activities or DoD Components. Only the Controlling Office [Department of Defense Test Resource Management Center (TRMC)], or higher authority may authorize distribution beyond the distribution statement.

b. DoD Potential Contractor. An individual or organization outside the DoD approved and certified by a sponsoring DoD activity as “eligible for DoD technical information services” under a DoD Component potential contractor program. This may be based on participation in any similar DoD Component program. The DoD Components without a formal potential contractor program may certify a contractor based on a company’s legitimate business relationship as defined DoDD 5230.25, entitled Withholding of Unclassified Technical Data From Public Disclosure. The sponsoring DoD activity shall be reasonably assured that this individual or organization may benefit by their access to Defense technical information in their understanding of and for responding to a DoD acquisition.

c. Issuing DoD Office. DoD activity that releases the GFI for NCRC EPOS on behalf of the Controlling DoD Office and monitors or enforces compliance with this Distribution Agreement. (ACC-ORL)

d. ACC-ORL. U.S. Army Contracting Command – Orlando.

e. PM. Program Manager. (Program Manager for NCRC Expansion)

f. Procuring Contracting Officer. Person with the authority to enter into, administer, and/or terminate contracts and make related determinations and findings.

g. U.S. DoD Contractor. Those U.S. Contractors currently holding grants or contracts with the Department of Defense.

2. The NCRC EPOS GFI are marked with one or more of the following restrictions:

DISTRIBUTION STATEMENT C. DISTRIBUTION AUTHORIZED TO U.S.

GOVERNMENT AGENCIES AND THEIR CONTRACTORS DUE TO EXPORT

CONTROLS [FEBRUARY 2015]. OTHER REQUESTS FOR THIS DOCUMENT SHALL

BE REFERRED TO THE THE DIRECTOR, NATIONAL CYBER RANGE COMPLEX

(NCRC) FOR APPROVAL PRIOR TO RELEASE.

DISTRIBUTION STATEMENT F. DISTRIBUTION ONLY AS DIRECTED BY THE

DIRECTOR, NATIONAL CYBER RANGE COMPLEX (NCRC). REQUESTS FOR THIS

DOCUMENT MUST BE SUBMITTED TO THE OFFICE OF THE DIRECTOR,

NATIONAL CYBER RANGE COMPLEX (NCRC).”

EXPORT CONTROL WARNING - THIS DOCUMENT CONTAINS TECHNICAL DATA

WHOSE EXPORT IS RESTRICTED BY THE ARMS EXPORT CONTROL ACT (TITLE

22, USC Sec 2751, et.seq.). OR THE EXPORT ADMINISTRATION ACT OF 1979, AS AMENDED (TITLE 50, USC App 2401 et.seq). VIOLATIONS OF THESE EXPORT

LAWS ARE SUBJECT TO SEVERE CRIMINAL PENALTIES. DISSEMINATION IN

ACCORDANCE WITH PROVISIONS OF DoD DIRECTIVE 5230.25.

3. Subject to approval by the Issuing DoD Office, the NCRC EPOS GFI may be used for the purpose(s) stated with the following general conditions (Initials must be hand-written):

a. The NCRC EPOS GFI will be handled and maintained in accordance with the following restrictions (as applicable): For Official Use Only, Distribution Statement C, Export Control, and Army Regulation 380-5 requirements. All cleared DoD contractors are required to meet the requirements of the National Industrial Security Manual program. _______

(Initials)

b. The NCRC EPOS GFI will be used only in accordance with this Distribution

Agreement and all stipulations herein. ______ (Initials)

c. The NCRC EPOS GFI will not be modified, adapted, or otherwise altered except as required under the terms and conditions of a contract with the U.S. Government.

(Initials)

d. The NCRC EPOS GFI shall not be re-distributed, sold, or used for commercial purposes or practices, in whole or in part, without the express written permission of the Issuing DoD Office. The recipient is prohibited from using any information delivered within the NCRC EPOS GFI for commercial practices and profitable gains. The recipient may reproduce copies of the NCRC EPOS GFI for use within his/her organization only for the sole purpose stated above. The U.S. DoD Contractor shall ensure that a copy of this approved Distribution Agreement shall be provided and maintained with each authorized copy of the NCRC EPOS GFI and appropriate personnel shall be briefed regarding the Distribution Agreement requirements. The original recipient of the NCRC EPOS GFI shall be responsible for compliance with the terms of this Distribution Agreement related to all authorized copies. ______

(Initials)

e. U.S. DoD Contractors and Subcontractors shall return and/or destroy the NCRC EPOS GFI and/or Copies after completion of the stated purpose under which the work is authorized. U.S. DoD Contractors and Subcontractors shall certify in writing that the requirements of this paragraph were met. ______

(Initials)

f. The U.S. Government and its agents shall not be liable for any harm, damage, or injury that may result from the use or untimely receipt of the NCRC EPOS GFI.

g. The Issuing Office may revoke permission or hereinafter make permission subject to additional conditions as dictated by Government interests. _______ (Initials)

h. All personnel who come in contact with the NCRC EPOS GFI or who participate in NCRC EPOS related discussions on behalf of U.S. DoD Contractors shall be U.S.

citizens in accordance with the Arms Export Control Act (Title 22, U.S.C., Sec 2751, et seq.). _______

(Initials)

i. U.S. DoD Contractor acknowledges his/her responsibilities under the U.S. export control laws and regulations and agrees that will not disseminate any export- controlled NCRC EPOS GFI subject to this agreement in a manner that would violate applicable export control laws and regulations. ______

(Initials)

j. U.S. DoD Contractor agrees that he/she will not provide access to this material to persons other than its employees or persons acting on its behalf, without permission of the Issuing Office. ______

k. To the extent of his/her knowledge and belief, the requesting U.S. DoD Contractor knows of no person employed by it, or acting on its behalf, who will have access to the NCRC EPOS GFI, who is debarred, suspended, or otherwise ineligible from performing on U.S. Government contracts, or has violated U.S. export control laws.

l. U.S. DoD Contractor is not debarred, suspended or otherwise determined ineligible by any agency of the U.S. Government to perform on U.S. Government contracts, has not been convicted of export control law violations, and has not been disqualified under the provisions of DoD Directive 5230.25. ________

(Initials)

m. Failure to return and/or destroy NCRC EPOS GFI and/or Copies will be deemed a breach of this agreement and may result in prosecution of the USG’s rights in the applicable forum. The U.S. DoD Contractor agrees that it will not assert that such return and/or destruction is a Government-caused delay under any contract with the U.S.

Government. ________

NOTICE TO ACCOMPANY THE DISSEMINATION OF EXPORT-CONTROLLED

TECHNICAL DATA

1. Export of information contained herein, which includes, in some circumstances, release to foreign nationals within the United States, without first obtaining approval or license from the Department of State for items controlled by the International Traffic in Arms Regulations (ITAR), or the Department of Commerce for items controlled by the Export Administration Regulations (EAR), may constitute a violation of law.

2. Under 22 U.S.C. 2778 the penalty for unlawful export of items or information controlled under the ITAR is up to 2 years imprisonment, or a fine of $100,000, or both.

Under 50 U.S.C., Appendix 2410, the penalty for unlawful export of items or information controlled under the EAR is a fine of up to $1,000,000, or five times the value of the exports, whichever is greater; or for an individual, imprisonment of up to 10 years, or a fine of up to $250,000, or both.

3. In accordance with your certification that establishes you as a "qualified U.S.

contractor," unauthorized dissemination of this information is prohibited and may result in disqualification as a qualified U.S. contractor, and may be considered in determining your eligibility for future contracts with the Department of Defense.

4. The U.S. Government assumes no liability for direct patent infringement, or contributory patent infringement or misuse of technical data.

5. The U.S. Government does not warrant the adequacy, accuracy, currency, or completeness of the technical data.

6. The U.S. Government assumes no liability for loss, damage, or injury resulting from manufacture or use for any purpose of any product, article, system, or material involving reliance upon any or all technical data furnished in response to the request for technical data.

7. If the technical data furnished by the Government will be used for commercial manufacturing or other profit potential, a license for such use may be necessary. Any payments made in support of the request for data do not include or involve any license rights.

8. A copy of this notice shall be provided with any partial or complete reproduction of these data that are provided to qualified U.S. contractors.

Filename Document Number Document Title Performance Work Statements (PWS)

W900KK20R0011_Attach_01_NCRC_EPOS_IDIQ

_PWS

PWS‐2019‐044 NCRC EPOS IDIQ PWS, 7 Feb 2020

W900KK20R0011_Attach_07_NITC_PWS PWS‐2019‐048 NCRC EPOS ‐ NITC PWS, 7 Feb 2020 W900KK20R0011_Attach_14_CHS_PWS PWS‐2019‐047 NCRC EPOS NCRC‐CHS Site Services PWS, 7 Feb 2020 W900KK20R0011_Attach_20_ITSM_PWS PWS‐2019‐046 NCRC EPOS NCRC ITSM PWS, 7 Feb 2020

Government Furnished Information (GFI)

EPOS_W900KK20R0011_SPAWARLANT_3070.1B

_20200122.pdf

SPAWARSYSCENLANTINST

3070.1B

Space and Naval Warfare Systems Center Atlantic Instruction – Operations Security Policy dated 20 Jan

EPOS_W900KK20R0011_DON_AUP_220200122.

pdf

DON Memo Acceptable Use of Department of the Navy (DON) Information Technology (IT), 12 Feb 2016

EPOS_W900KK20R0011_CONOPS_20200122.pdf National Cyber Range Complex (NCRC) Concept of Operations (CONOPS), 31 July 2019

EPOS_W900KK20R0011_TDP_Read_Me_Guide_ 20200131.pdf

NCRC Technical Data Package – Read Me Guide, 31 January 2020

EPOS_W900KK20R0011_TDP_Document‐ 1_20200122.pdf

National Cyber Range System, Concept of Employment, Version 1.1, July 9, 2019

EPOS_W900KK20R0011_TDP_Document‐ 2_20200122.pdf

National Cyber Range System, Systems & Hardware Information, Version 1.0, June 7, 2019

EPOS_W900KK20R0011_TDP_Document‐ 3_20200122.pdf

National Cyber Range Program, Software User Manual, Version 1.0, August 1, 2019

EPOS_W900KK20R0011_TDP_Document‐ 4_20200122.pdf

Range Support Center (RSC)/Range Environments Software List

EPOS_W900KK20R0011_TDP_Document‐ 5_20200122.pdf

National Cyber Range Complex, Statement of Support Capabilities, Version 1.0, November 5, 2019

EPOS_W900KK20R0011_TDP_Document‐ 6_20200122.pdf

National Cyber Range Program, Operator’s Manual, Version 1.2.1, November 14, 2019

EPOS_W900KK20R0011_COTS_Manuals_List_20 200131.pdf

NCR List of COTS Manuals (Includes 32 COTS Manuals), 31 Jan 2020 (see page 12)

EPOS_W900KK20R0011_OPNAV‐5239‐14‐SAAR‐

N_20200122.pdf

System Authorization Access Request Navy (SAAR‐N) Form, Rev 09/2011

EPOS_W900KK20R0011_SECNAV_5510.30_2020

0122.pdf

SECNAV M‐5510.30 Department of the Navy Personnel Security Program dated May 2006

EPOS_W900KK20R0011_SECNAV‐5510‐

36_20200122.pdf

SECNAV M‐5510.36 Secretary of the Navy Manual – DoN Information Security Program dated Jun 2006

EPOS_W900KK20R0011_secnavinst 5510.30b_20200122.pdf

SECNAV M‐5510.30 Instruction Department of the Navy Personnel Security Program (PSP) dated 6 Oct 2006

EPOS_W900KK20R0011_SOP_190‐

1B_20200122.pdf

PEO‐STRI SOP 190‐1A Badging and Access to PEO STRI Facilities in the Orlando Area, 8 Mar 2018

EPOS_W900KK20R0011_SOP_25‐

2C_20200122.pdf

PEO‐STRI SOP 25‐2C Cybersecurity (CS) Policy for Users of the PEO STRI Business Systems, 9 Feb 2016

EPOS_W900KK20R0011_SOP_690‐990‐

3B_20200122.pdf

PEO-STRI SOP-690-990-3B In‐ and Out‐Processing of SETA Support Services Contractor to the PEO STRI, 17 May 2016

EPOS_W900KK20R0011_SOP25‐7D‐

GITR_20200122.pdf

PEO‐STRI SOP 25‐7D Use of Government Information Technology Resources (GITR), 04 Nov 2015

EPOS_W900KK20R0011_SPAWARINST_3432.1_5

08_Compliant.pdf

SPAWARINST 3432.1 Space and Naval Warfare Instruction – Operations Security (OPSEC) Policy dated 2 Feb 05

EPOS_W900KK20R0011_DoD_CTT_Guidebook_v 1_20200122.pdf

The Department of Defense Cyber Table Top Guidebook, Version 1.0, 2 July 2018

NCRC EPOS Commercial-Off-The-Shelf (COTS) Manuals W900KK-20-R-0011

31 January 2020

Document Title

Document Format Manufacturer Description Date

321-1601 - QSFP+ MM, 40G 4 x 1 10G Soft /PDF Cisco SFP 29-Nov-18

3900TSM00111 - Switch Fabric Module Gen2 QSFP+ fiber interface card Soft /PDF Cisco Cisco Switch 4-Dec-18

APC Netshelter Enclosures 42U Rack Soft /PDF APC Rack 7-Dec-18

APC Network SurgeArrest, 7 Outlet Soft /PDF APC Surge Protector 8-Aug-18

Cisco 10GBase SFP Soft /PDF Cisco Optical Module Transceiver 6-Jun-18

Cisco Catalyst 2960-X Soft /PDF Cisco Cisco Switch 28-Jun-18

Cisco Catalyst 3850 2 x 10GE Network Module Soft /PDF Cisco Network Module 26-Nov-18

Cisco Catalyst 3850 48 Port Data LAN Base Soft /PDF Cisco Port Data LAN Base 29-Nov-18

Cisco Catalyst 9300 Soft /PDF Cisco Switch 26-Sep-18

Cisco MDS 9710 Multilayer Director Networking Soft /PDF Cisco Multilayer Director 5-Aug-18

Cisco Nexus 3548 Soft /PDF Cisco Switch 2-Jul-18

Cisco SG110 Soft /PDF Cisco Cisco Switch 28-Jun-18 dce-rack-system-user-manual Soft /PDF Vertiv Vertiv Rack 7-May-19

Dell Optiplex 7060 Service Manual Soft /PDF Dell Single Monitor workstation 18-Jun-18

Dell PowerEdge R640 Technical Guide Soft /PDF Dell Server 12-Nov-18

Dell Poweredge R730 Technical Manual Soft /PDF Dell Server 5-Dec-18

Dell Poweredge R730 XL Owners Manual Soft /PDF Dell Server 5-Dec-18

Dell Precision 5820 Tower Owner's Manual Soft /PDF Dell Workstation 26-Sep-18

Dell U2414h User's Guide Soft /PDF Dell Dell Monitor 24' 2-Jul-18

Dell U2415 User's Guide Soft /PDF Dell Dell Monitor 24' 27-Aug-18

Finisar 10G SFP+ SR SW 850nm 400m LC Transceiver Soft /PDF Finisar LC Transceiver 10-Dec-18

LG Blu-Ray W BE16NU50 Soft /PDF LG Blu-Ray 17-Jul-18

LG Blu-Ray W Soft /PDF LG Blu-Ray 17-Jul-18

Document Title

Document Format Manufacturer Description Date

Logger_AdminGuide_6.6 Soft /PDF Arsight Log Management System 2-Oct-18

Microsemi Syncserver SIS600 Option1 Soft /PDF Microsemi Time Server 16-Aug-18

MS Office Home & Business 2016 Soft /PDF Microsoft Software 10-Dec-18

Netapp Clustered Data ONTAP 83 Physical Storage Soft /PDF Netapp Disk Shelf 3-Jul-18

NetScout DS nGenius 3900 Series Packet Flow Switch Soft /PDF Netapp Switch 4-Dec-18

Safenet Key Management System Model G460 1 G NIC Soft /PDF Safenet Key Management System 15-Aug-18

StarTech RS-232 Soft /PDF StarTech Serial to IP Ethernet Device 5-Dec-18

Switched Rack PDU_AP8962_APC Soft /PDF APC Power Distribution Unit 17-Jul-18

TS_Mgmt_v46200_AG_733-1090 Soft /PDF NetScout TestStream Management

Software 7-May-19