PWS CCRI 10Jan20.pdf

(10 January 2020)

PERFORMANCE WORK STATEMENT (PWS)

FOR

Command Cyber Readiness Inspection Preparation Services

1.0 General:

1.1 Scope: The objective for this service is to provide the Florida Army National Guard (FLARNG) with Command Cyber Readiness Inspection (CCRI) certified reviewers to pre-inspect the myriad of domains covered during a CCRI to include: web and database servers, Host Based Security System (HBSS), Assured Compliance Assessment Solution (ACAS), traditional/physical security and Network Infrastructure. The team, led by a CCRI certified team lead will perform a full mock CCRI, identifying shortfalls, providing hands-on training and written/digital products to the staff to improve the organization’s CCRI score.

Additionally, they will assist with the implementation of corrections identified shortfalls, provide daily out briefs to go over all shortfalls and ways forward along with a final out brief to go over the result of the mock CCRI, providing grading results in accordance with CCRI formulas currently used by DISA CCRI Teams.

The team will also provide Risk Assessment grading results in accordance with CCRI Risk Indicator formulas currently used by DISA CCRI Teams and documented recommendations for a ‘Path to Success”. The contractor shall provide all personnel, equipment, tools, materials, supervision, and quality control necessary, except as specified in Paragraph 3.0 as Government Furnished, to perform CCRI Preparation Services, as defined in this PWS.

Historical level of effort for this type of pre-inspection and corrective action is:

Labor Category Hours CCRI Certified Team Leader 72 CCRI Team Members 316

1.2 Background: The CCRI evaluates an organizations Cyber Security posture. The inspection is driven by Army regulations and DISA guidelines. The domains evaluated are Technology, Cyber Network Defense (CND) and Contributing Factors.

The Technology components each have corresponding Security Technical Implementation Guides (STIG(s)) that pertain to the technology domains. The current versions of the STIGs are available on the Information Assurance Support Environment (IASE) website https://public.cyber.mil/stigs/downloads/. Each STIG also provides general information regarding the review process of that technology domain and generates the checklist used during the CCRI.

https://public.cyber.mil/stigs/downloads/

CND Components are Warning Orders (WARNORDs), Tasking Orders (TASKORDs), Operations Orders (OPORD), General Administrative Order (GENADMIN) and Fragmentary Orders(FRAGOs) issued by USCYBERCOM and JFHQ-DODIN.

USCYBERCOM and JFHQ-DODIN plan, coordinate, integrate, synchronize, and conduct activities to; direct the operations and defense of specified Department of Defense information networks (DODINs) and when directed, conduct full-spectrum military cyberspace operations in order to enable actions across all domains, ensuring US/Allied freedom of action in cyberspace and denying the same to our adversaries.

The Contributing Factors are designed to evaluate the Command’s emphasis on compliance of existing Information Assurance (IA) controls during a Command Cyber Readiness Inspection (CCRI). The inspection items/calls in this document link to one or more of the IA Controls as found in NIST SP 800-53. The Contributing Factors evaluate three overall IA areas: Culture, Capability, and Conduct. Each area must be evaluated and discussed during a CCRI.

1.3 Period of Performance (PoP): The Period of Performance shall be 8-10 working days Monday- Friday completed on or before 31 March 2020.

1.4 General Information:

1.4.1 Quality Control (QC): The contractor shall develop and maintain an effective QC Plan (QCP) to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s QCP is the means by which it assures itself that its work complies with the requirements of the contract. As a minimum, the contractor shall develop QC procedures that address the areas identified in Technical Exhibit 1, Performance Requirements Summary. After acceptance of the QCP, the contractor shall obtain the Contracting Officer’s (KO) acceptance in writing of any proposed changes to its QCP.

1.4.2 Quality Assurance (QA): The Government shall evaluate the contractor’s performance under this contract in accordance with the Performance Requirements Summary. This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and acceptable quality level(s) (defect rate(s)).

1.4.3 Recognized Holidays: The following are recognized US holidays. The contractor shall not perform services on these days:

1.4.3.1 New Year’s Day: January 1st

1.4.3.2 Martin Luther King, Jr.’s Birthday: January 15th

1.4.3.3 President’s Day: February 17th

1.4.4 Place and Performance of Services: The contractor shall provide services between the hours of 0800-1630 on Monday through Friday, except when the Government facility/installation is closed due to local or national emergencies, administrative closings, or similar Government-directed facility/installation closings.

Performance shall be at 2305 State Road 207, Saint Augustine, Florida 32082. The contractor shall at all times maintain an adequate work force for the uninterrupted performance of all tasks defined within this PWS when the Government facility/installation is not closed for the above reasons. When hiring personnel, the contractor shall keep in mind that the stability and continuity of the work force are essential. Telecommuting is not authorized.

1.4.4.1 Unscheduled gate closures by the Security Police may occur at any time causing all personnel entering or exiting a closed installation to experience a delay. This cannot be predicted or prevented. Contractors are not compensated for unexpected closures or delays. Vehicles operated by contractor personnel are subject to search pursuant to applicable regulations. Any moving violation of any applicable motor vehicle regulation may result in the termination of the contractor employee’s installation driving privileges.

1.4.4.2 The contractor’s employees shall become familiar with and obey the regulations of the installation; including fire, traffic, safety and security regulations while on the installation. Contractor employees should only enter restricted areas when required to do so and only upon prior approval. All contractor employees shall carry proper identification with them at all times. The contractor shall ensure compliance with all regulations and orders of the installation which may affect performance.

1.4.4.3 Security Requirements. (from AT/OPSEC #2) Contractor and all associated sub-contractors employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.4.4.4 For contractors that do not require CAC, but require access to a DoD facility or installation. (from AT/OPSEC #2b) Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

1.4.4.5 COMSEC/IT Security. All communications with DOD organizations are subject to communications security (COMSEC) review. All telephone communications networks are continually subject to intercept by unfriendly intelligence organizations. DOD has authorized the military departments to conduct COMSEC monitoring and recording of telephone calls originating from, or terminating at, DOD organizations. Therefore, the contractor is advised that any time contractor place or receive a call they are subject to COMSEC procedures. The contractor shall ensure wide and frequent dissemination of the above information to all employees dealing with DOD information. The contractor shall abide by all Government regulations concerning the authorized use of the Government's computer network, including the restriction against using the network to recruit Government personnel or advertise job openings.

1.4.4.6 Protection of Personally Identifiable Information (PII). The contractor shall protect all Personally Identifiable Information (PII) encountered in the performance of services in accordance with DFARS 224.103 and DoDD 5400.11, Department of Defense Privacy Program, and DoD 5400.11-R. If a PII breach results from the contractor’s violation of the aforementioned policies, the contractor shall bear all notification costs, call-center support costs, and credit monitoring service costs for all individuals who’s PII has been compromised.

1.4.4.7 Classified Information. For Contracts That Require Handling or Access to Classified Information. The contractor shall comply with FAR Clause 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M) and applicable updates/changes. The Contractor will be escorted and monitored during the inspection and requires Secret clearance.

1.4.5 Physical Security. The contractor shall safeguard all Government property provided for contractor use. At the close of each work period, Government facilities, equipment and materials shall be secured.

1.4.5.1 The contactor shall prohibit the use of the Government issued keys/key cards by any persons other than the contractor’s employees. The contractor shall prohibit the opening of locked areas by contractor employees to permit entrance of persons other than contactor employees engaged in the performance of services in those areas, or personnel authorized entrance by the KO.

1.4.6 Special Qualifications: FLARNG is requesting a team that has CCRI certified Reviewers to help in the preparation of our upcoming CCRI inspection.

The following are the minimum requirements and certifications for team members and their respective areas of responsibility:

1. Team Lead Requirements - CCRI DISA certified TL, Tenable TCNA certified, and CISSP

2. Traditional/Physical Security Inspector Requirements – ASIS Physical Security professional (PSP) and/or SAPPC certified

3. Network Infrastructure Inspector Requirements - DISA CCRI Certified Network Security Reviewer.

4. Web/Database Inspector Requirements - DISA CCRI Certified Senior WEB, Database, Windows AD and DNS Server Reviewer.

5. HBSS/ACAS Inspector Requirements - DISA CCRI Certified HBSS/Windows Workstation Security Reviewer.

6. Wireless/VOIP Inspector Requirements – DISA CCRI Certified

Wireless/VOIP.

1.4.7 Post Award Conference/Periodic Progress Meetings: The contractor agrees to attend any post award conference convened by the KO in accordance with Federal Acquisition Regulations Subpart 42.5. The KO, COR, and other Government personnel, as appropriate, may meet periodically with the contractor to review the contactor’s performance. At these meetings, the KO will apprise the contractor of how the Government views the contractor’s performance and the contractor shall apprise the Government of problems, if any, being experienced. The contractor shall resolve outstanding issues raised by the Government. Contractor attendance at these meetings shall be at no additional cost to the Government.

1.4.8 Contract Manager (CM): The contactor shall designate a CM who shall ensure performance under this contract. The name of this person, and an alternate who shall act for the contractor when the CM is absent, shall be designated in writing to the KO. The CM or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The CM shall work through the COR, (or the KO if a COR is not assigned), to resolve issues, receive technical instructions, and ensure adequate performance of services. The CM shall ensure that contractor employees do not perform any services outside the scope of the contract without an official modification issued by the KO. The CM shall ensure contractor employees understand that services performed outside the scope of the contract are performed wholly at the expense of the contractor.

1.4.9 Identification of Contractor Employees: All contractor personnel attending meetings, answering Government telephones and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression that they are Government employees. The contractor shall ensure that all documents or reports produced by contractor personnel are suitably marked as contractor products or that contractor participation is appropriately disclosed. The contractor’s status as a “contractor” shall be predominantly displayed in all correspondence types (to include signature blocks on e- mail) and dealings with Government or non-Government entities/ Contractor personnel shall wear identification badges distinguishing themselves as such. The badges shall have the company name, employee name and the word “contractor” displayed. The contractor shall retrieve all identification media (including vehicle passes) from their employees who depart employment for any reason. All identification media (i.e., badges and vehicles passes) shall be returned to the KO within 14 days of an employee’s departure.

1.4.11. Combating Trafficking in Persons: The United States Government has adopted a zero tolerance policy regarding trafficking in persons. Contractors and contractor employees shall not engage in severe forms of trafficking in persons during the period of performance of the contract; procure commercial sex acts during the period of performance of the contract; or use forced labor in the performance of the contract. The Contractor shall notify its employees of the United States Government’s zero tolerance policy, the actions that will be taken against employees for violations of this policy. Such actions may include, but are not limited to, removal from the contract, reduction in benefits, or termination of employment. The Contractor shall take appropriate action, up to and including termination, against employees or subcontractors that violate the US Government policy as described at FAR 22.17.

1.4.12 Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the KO. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.4.13 Organizational Conflicts of Interest (OCI): The contractor and subcontractor personnel performing services under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent OCIs, as defined in FAR Subpart 9.5. The contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the contractor from participation in subsequent contracted requirements which may be affected by the OCI.

2.0 Definitions and Acronyms:

2.1.1 CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2 CONTRACTING OFFICER (KO). A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.3 CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government designated by the KO to monitor contractor performance. Such appointment shall be in writing and shall state the scope of authority and limitations.

This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4 DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5 DELIVERABLE. Anything that can be physically delivered and includes non-manufactured things such as meeting minutes or reports.

2.1.6 KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.7 PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.8 QUALITY ASSURANCE. The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.9 QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.10 SUBCONTRACTOR. One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.1.11 WORK DAY. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.12 WORK WEEK. Monday through Friday, unless specified otherwise.

2.2 ACRONYMS:

ACAS Assured Compliance Assessment Solution AEI APHIS Enterprise Infrastructure AFARS Army Federal Acquisition Regulation Supplement AR Army Regulation ASIS Authorized Service Interruption Standards

AT/OPSEC Antiterrorism/Operational Security CCRI Command Cyber Readiness Inspection CFR Code of Federal Regulations CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTS Commercial-Off-the-Shelf DA Department of the Army DD250 Department of Defense Form 250 (Receiving Report) DD254 Department of Defense Contract Security Requirement List DFARS Defense Federal Acquisition Regulation Supplement DISA Defense Information Systems Agency DNS Domain Name Service DOD Department of Defense FAR Federal Acquisition Regulation GFP/M/E/S Government Furnished Property/Material/Equipment/Services HBSS Host Based Security System IA Information Assurance IS Information System(s) KO Contracting Officer OCI Organizational Conflict of Interest ODC Other Direct Costs PII Personally Identifiable Information PIPO Phase In/Phase Out POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Program STIG Security Technical Implementation Guide TE Technical Exhibit VOIP Voice Over Internet Protocol

3.0 Government Furnished Property, Material, Equipment and Services

3.1 Government Furnished Property, Material, Equipment and Services (GFP/M/E/S):

The Government will provide the property, material, equipment, and/or services listed below solely for the purpose of performance under this contract:

3.2 Property: The Government will furnish the necessary workspace for the contractor to perform services outlined in this PWS.

3.3 Materials: Not used

3.4 Equipment: Not used

3.5 Services: Not used

3.6 Utilities: All utilities in the facility will be available for the contactor’s use in the performance of this contract. The contractor shall instruct employees in utilities conservation practices. The contractor shall operate under conditions that preclude the waste of utilities, which include turning off the water faucets or valves after using the required amount.

4.0 Contractor Furnished Property, Materials, and Equipment (CFP/M/E):

4.1 General: Except for those items specifically stated to be Government-Furnished in Paragraph 3.0, the contractor shall furnish everything required to perform these services as indicated in Paragraph 1.1.

5.0 Performance Requirements & Deliverables

5.1 The contractor shall provide a full mock Command Cyber Readiness Inspection.

5.1.1 (DELIVERABLE C001) The contractor shall provide all documentation used to support their findings and use official DISA templates, spreadsheets, and guidance for reviewing the three separate domains of the CCRI including: (1) CND directives, (2) Technology Areas and (3) Contributing Factors from the following references:

- Defense Information Systems Agency, Command Cyber Readiness Inspection Coordination Instruction Version 4, Revision 2 or Newer

Computer Network Defense (CND) Directive Guide Version 2, Revision 9 or Newer

Contributing Factors Guide Version 1, Revision 10 or Newer

5.2 The contractor shall identify all shortfalls identified during the mock CCRI that require remediation.

5.2.1 (DELIVERABLE C002) The contractor shall present and provide a detailed, prioritized recommendation report to the FLARNG which includes actions and publications required to remediate each item identified during the mock CCRI.

5.2.2 (DELIVERABLE C003) The contractor shall use the CCRI grading criteria as part of the detailed report for the mock CCRI.

5.3 The contractor shall provide training, and written documentation to address the shortcomings and improve the overall score of the FLARNG CCRI.

5.3.1 (DELIVERABLE C004) The contractor shall provide written documentation for how to improve the overall CCRI score.

5.3.2 (DELIVERABLE C005) The contractor shall provide best practice templated products to address shortcomings found during the CCRI to both the Network Operations Supervisor and the Plans/Policies Supervisor.

5.3.3 (DELIVERABLE C006) The contractor shall provide onsite training to address the shortcomings found during the mock CCRI.

5.4 The contractor shall provide daily out-briefs and Final Out-Brief to FLARNG Staff and Leadership addressing the findings and work done for the day from the mock CCRI process and Path to Success.

5.4.1 (DELIVERABLE C007) The contractor shall work with the identified sections of the FLARNG to address the findings from the mock CCRI working together to improve the score providing progress reports at end of day to the FLARNG staff.

5.4.2 (DELIVERABLE C008) The contractor shall provide a Final out-brief explaining the entire process of the mock CCRI, all changes and final score along with the way ahead for the FLARNG.

6.0 Contractor Manpower Reporting Application (CMRA):

6.1.1 The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the National Guard Bureau Florida Army National Guard via a secure data collection site.

6.1.2 The contractor shall completely fill in all required data fields using the following web address: https://www.ecmra.mil/. Reporting inputs shall be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year, beginning with 2013. Contractors may direct questions to the help desk at https://www.ecmra.mil.

https://www.ecmra.mil/ https://www.ecmra.mil/

TECHNICAL EXHIBIT 1

Performance Requirements Summary This Performance Requirements Summary includes performance standards. The Government will use these standards to determine contractor performance and will compare contractor performance to the Acceptable Quality Level (AQL).

PWS

Paragraph Task Performance

Standard Acceptable Quality

Levels (AQL) Surveillance Method

/ By Whom

5.1 The contractor shall

provide a full mock CCRI Provide grading results in accordance with

CCRI grading criteria currently used by DISA CCRI Teams by end of Final Out-Brief

Complete mock CCRI with grading worksheet along with the Path to success

100% Collection of Documentation/COR

5.1.1 The contractor shall provide

all documentation used to support their findings and use official DISA templates, spreadsheets, and guidance for reviewing the three separate domains of the CCRI

Provide all official documentation used to support their findings from the mock CCRI by end of Final Out-Brief

Digital documentation of any STIG’s, Directives, SOP’s, Memo’s, Regulations used to support the

CCRI findings

100% Collection of Documentation/COR

5.2 The contractor shall review

FLARNG current CCRI status and provide a plan and documentation for a Path to Success

Identify weak areas and develop a plan of focus for the FLARNG for each daily out brief and the final out brief

Documentation stating the shortcomings and how to remediate them in an organized format

100% Collection of Documentation/COR

5.2.1 The contractor shall

present and provide detailed, prioritized recommendation report to the FLARNG which includes actions and publications required to remediate each item identified during the mock CCRI

Provide a document prioritizing in detail what actions and publications needed to remediate each identified shortcoming presented no later than the Final out brief

Document that is prioritized for level or importance of what needs to be addressed, a plan of action for each identified shortcoming

100% Collection of Documentation/COR

5.2.2 The contractor shall use

the CCRI grading criteria as part of the detailed report for the mock CCRI

Use the CCRI criteria providing site findings, pm vulnerabilities scan, pm finding summary non-scan, contributing factors, findings summary and overall grade by end of the mock CCRI inspection

Provide a completed grading criteria worksheet

100% Collection of Documentation/

COR

5.3 The contractor shall provide

training, and written documentation to address the shortcomings and improve the overall score of the FLARNG CCRI

The contractor shall provide training to a max of 3 staff members per section after the daily out-briefs to address any issues. All documents provided by the contractor will belong to the FLARNG.

Training will take place each day as needed by the FLARNG Staff

Instruction with the different sections with documentation on what was addressed each day

100% Collection of Documentation/COR

5.3.1 The contractor shall

provide written documentation for how to improve the overall CCRI score

Provide documentation on how the FLARNG can improve the

CCRI score no later than the final out brief

Documentation addressing the shortcomings and detailed information to improve to a CCRI score above a 90%

100% Collection of Documentation/COR

5.3.2 The contractor shall provide

best practice templated products to address shortcomings found during the CCRI to both the Network Operations

Supervisor and the Plans/Policies

Supervisor

Provide templated products to the FLARNG that address shortcomings from the CCRI no later than the final out brief

Provide templated products in a digital format that meets

CCRI standards, that will address the findings from the

CCRI

100% Collection of Documentation/COR

5.3.3 The contractor shall provide

onsite training to address the shortcomings found during the mock CCRI

Train the sections in order to fix any findings that were found from the mock CCRI, this will take place daily as needed by the FLARNG staff

Correct shortfalls found from the mock CCRI that are quick fixes and provide written documentation on the areas that will need more time given to them

100% Collection of Documentation/COR

5.4 The contractor shall provide

daily out-brief and Final

Out-Brief to FLARNG Staff and Leadership addressing the findings and work done for the day from the mock

CCRI process and Path to Success.

Each day an out-brief will be conducted and on the final day a final overarching out brief will be conducted

Daily reporting documentation for the above performance requirements and Path to Success

100% Collection of Documentation/COR

5.4.1 The contractor shall work

with the identified sections of the G6 to address the shortcomings found in the initial mock CCRI and work together to improve the score providing progress reports at end of day to the G6 staff

Work alongside the

FLARNG

representatives in correcting the mock CCRI findings, this process will happen daily

Improve the overall CCRI score by 15% from the initial mock CCRI grading criteria worksheet. If 15% is unattainable do to time constraint, provide written documentation to increase CCRI score

100% Collection of Documentation/

COR

5.4.2 The contractor shall provide

a Final out-brief explaining the entire process of the mock CCRI, all changes and final score along with the way ahead for the

FLARNG

Final out-brief that consists of initial mock CCRI Score and findings, then provide what the corrections were done by both the contractor and G6 Staff, provide a final CCRI Score of where the FLARNG is after corrections were made and a way ahead to address anything unable to complete in the 2 week timeframe by COB of the Final out brief day

Provide the Performance standards in a digital format to be presented and given to the FLARNG G6

100% Collection of Documentation/COR

5.5 The contractor shall report

ALL contractor labor hours

(including subcontractor labor hours) required for performance of services provided under this contract for the Florida Army

National Guard via a secure data collection site.

The contractor shall completely fill in all required data fields using the following web address:

https://ecmra.mil

Fill in all required data fields using the following web address:

https://ecmra.mil

100% Collection of information to the appropriate sites/Contracting office

5.5.1 The line item has been

included in this solicitation/contract to allow for payment to the contractor for compliance with this requirement

Upon award, the contracting office, with assistance of the FLARNG requesting activity, will create the contract in CMRA

The contracting office, with assistance of the

FLARNG

requesting activity, will create the contract in CMRA

100% Collection of information to the appropriate sites/Contracting office

5.5.2 The CMRA data must be

complete prior to the contractor being paid in full

The CMRA data must be complete

The CMRA data must be complete

100%

100% Collection of information to the appropriate sites/Contracting office

Exhibit 2- Deliverables

PWS Reference / Deliverable Title

Documentation Number of Copies

Medium/Format Submit To

DELIVERABLE C001 Shall provide all documentation used to support their findings

2 Electronic Submission

Hard Copy

Network Operations Supervisor

Plans/Policies Supervisor

DELIVERABLE C002 Shall prioritize and provide a detailed recommendation report to remediate findings from the mock CCRI

2 Electronic Submission

Hard Copy

Network Operations Supervisor

Plans/Policies Supervisor

DELIVERABLE C003 Shall provide a CCRI Phase IV Grading Criteria Worksheet Fully Completed

2 Electronic Submission

Hard Copy

Network Operations Supervisor

Plans/Policies Supervisor

DELIVERABLE C004 Shall provide written documentation for how to improve the overall score of the

FLARNG which addresses all shortcomings

2 Electronic Submission

Hard Copy

Network Operations Supervisor

Plans/Policies Supervisor

DELIVERABLE C005 Shall provide best practice template products to address shortcomings found during the CCRI

2 Electronic Submission

Hard Copy

Network Operations Supervisor

Plans/Policies Supervisor

DELIVERABLE C006 Shall provide onsite training to address the shortcomings with written documentation to the section lead

2 Electronic Submission

Hard Copy

Network Operations Supervisor

Plans/Policies Supervisor

DELIVERABLE C007 Shall work with the identified sections of the FLARNG to address the findings from the mock CCRI working together to improve the score providing progress reports at end of day to the FLARNG staff

2 Electronic Submission

Hard Copy

Network Operations Supervisor

Plans/Policies Supervisor

DELIVERABLE C008 Shall provide a Final out-brief explaining the entire process of the mock CCRI with all written documentation and Path to Success

2 Electronic Submission

Hard Copy

Network Operations Supervisor

Plans/Policies Supervisor

DELIVERABLE C009 Reporting inputs will be for the labor executed during the period of performance

2 Electronic Submission

Hard Copy

Network Operations Supervisor

Plans/Policies Supervisor

END OF PWS