SF_30_03.pdf

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

The reason for amendment #0002 (currently labeled as #0003) to this solicitation is as follow s:

a. Correct an administrative error on the original solicitation. If a new contractor is selected, the anticipated contract's thirty (30) day Phase-In Period w ill begin 19 June 2018 and end 18 July 2018. The eleven (11) month Base Period w ill then begin 19 July 2018 and end 18 June 2019. All other Period of Performance dates for the tw o (2) Options and thirty (30) day Phase Out Period for have been revised to reflect this change.

b. Because of this administrative error, the new RFQ submission deadline has been extended to 10:00 AM EST on Monday 23 April 2018 to allow interested offerors time to revise their quotes to reflect the revised Period of Performance.

c. See the changes highlighted in yellow below for more information.

1. CONTRACT ID CODE PAGE OF PAGES

S 1 83

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 17-Apr-2018

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X W91247-18-T-R019

X 9B. DATED (SEE ITEM 11)

14-Mar-2018

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

17-Apr-2018

CODE

MICC CENTER - FORT BRAGG

MICC - FORT BRAGG

2175 REILLY ROAD STOP A

FORT BRAGG NC 28310-5000

W91247 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

W91247-18-T-R019

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

The following have been modified:

PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS)

XVIII Airborne Corps (ABC) Knowledge Management Office (KMO) Support Services

XVIII ABC KMO

Part I General Information

1. GENERAL: This is a non-personal services contract to provide Information Technology (IT) and Information Sharing (IS) Support Services to the XVIII Airborne Corps )ABC). The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government. The Contractor, in turn, shall be accountable to the Government for Contractor or subcontractor personnel.

1.1 Description of Services/Introduction: The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform Information Technology (IT) and Information Sharing (IS) Support Services, as defined in this Performance Work Statement (PWS), except for those items specified as government furnished property and services. The Contractor shall perform in accordance with (IAW) the terms and conditions of the contract and consistently with the established standards in this PWS and contract.

1.1.1 Knowledge Management (KM) Program Goals: The XVIII Airborne Corps Knowledge Management Section provides the Corps Commander, Staff, Major Subordinate Commands and Tenants on Fort Bragg critical IT services and tools that support mission command. Our goal is to provide quality service in order to have the right information at the right time to the right people so our leaders can make better informed decisions. We will achieve this by using the KM components of People, Tools, Processes and Organization through the KM process detailed in Ref. FM 6-0, Commander and Staff Organization and Operations, May 2014. This is an essential process that the contractor needs to understand. We will continue to press the importance of our functions by committing to our KM Strategy, facilitate shared understanding and decision making.

1.2 Background: Fort Bragg is the Army’s largest installation in population and growing. The installation encompasses approximately 160,832 acres (251 square miles) and is home to the United States Army’s Airborne and Special Operations which include the Premier Contingency Forces: HQ, XVIII Airborne Corps; HQ, Forces Command; HQ, Army Special Operations Command; HQ, Joint Special Operations Command which serve every Combatant Commander. These three-star commands are postured for no-notice worldwide deployment by air, sea, and land. The newest tenant commands at Fort Bragg include two Army commands, Forces Command and the U.S.

Army Reserve Command (USARC) which oversee 70% of the Army’s war fighting capabilities. Other significant tenants include: the 82d Airborne Division, the United States Army Special Forces Command, the United States Army John F. Kennedy Special Warfare Center & School, and the United States Army Civil Affairs and Psychological Operations Command. Fort Bragg supports over 60,000 military personnel, employs more than 20,000 civilian / contractor personnel, and serves a daytime population of over 90,000.

1.2.1 The work in this contract requires highly trained technical skills necessary to operate and maintain XVIII Airborne Corps mission support web based knowledge SharePoint Portals in support of the Commander, XVIII Airborne Corps, Fort Bragg and its staff. The SharePoint portal environment was previously maintained by military personnel and the Fort Bragg Network Enterprise Center (NEC) with significant outage times that impeded effective information and knowledge sharing. Approximately nine years ago, Contractor services were established to reduce portal outage times, provide resident operation and maintenance expertise, IT training as needed and leverage the capabilities of the organization’ Knowledge Management (KM) tools.

1.2.2. Scope: This contract effort is funded with Army Operations & Maintenance (OMA) funds. DoD and Army fiscal authorities place significant limits on the scope of IT services funded with OMA, including under circumstances that could be implicated by this PWS. In particular, these regulations severely limit the Army’s, and consequently the contractor’s, authority to engage in the development, or significant enhancement, of IT applications/modules/software, etc. with the use OMA funds under this contract. Said restrictions include the development, or significant enhancement which increases the performance envelope, of applications/ modules /software that reside on COTS IT platforms such as SharePoint, etc. As such, the contractor will abide by the restrictions noted above and below, unless other appropriate funding is provided or unless the contractor receives direction per subparagraph (g) below. These restrictions are applicable and take precedence over any language elsewhere in this contract that may conflict with this clause:

a. Permissible “Software/Application Development,” as that term is used elsewhere in this contract, may include minor configuration utilizing the software's existing capabilities/functionality, but does not include major upgrades increasing the performance envelope of existing software or systems. “Software development” under this contract does not include writing new software code that creates new capabilities.

b. “Software/Application maintenance” under this contract may include minor improvements in functionality accomplished during routine maintenance (for example, the creation/purchase of small a plug-and-play application or script that fine tunes or optimizes the existing application service provider capability); however, it does not include writing new software code on existing software that creates new capabilities.

c. Provision of software "upgrades" as part of software maintenance may include providing software releases categories as versions of the basic release and not involving significant improvements or extensive testing.

However, it does not include adding significant additional software functionality.

d. Similarly, permissible software or hardware "development," "enhancement," "fixes," "automation," “dashboard creation,” “programming,” “process improvement,” “workflow creation,” “solution development,” “patch management,” “solution exploitation,” as those terms may appear elsewhere in this contract, or other related support, does not include writing new code (including code-assisted configuration and customization developmental efforts that are based on COTS IT platforms such as SharePoint, etc.) beyond minor configuration of existing software, does not include creating significant new functionality, and does not include conducting significant testing and/or evaluation.

e. Permissible “code writing” does not include adding significant new functionality.

f. Permissible “test and evaluation” does not include testing and evaluation of new products or capability improvements to current products that do not presently exist, including modifying COTS items to add Army unique functionality.

g. Where the scope of effort may fall into the restrictions of subparagraphs (a) through (f) above, the contractor shall, prior to proceeding with the effort, request direction from the COR. Prior to providing such direction to the contractor, the COR will solicit advice from the legal advisor to the fund certifying officer for this contract, as to whether the contemplated effort is compliant with DoD and Army fiscal regulations.

1.3 Objectives: The contractor shall support the XVIII Airborne Corps KMO to administer and maintain the overall delivery of both classified and unclassified data on the Corps Information Technology (IT) Portals on Secure Internet Protocol Router (SIPR), Non-Secure Internet Protocol Router (NIPR), Battlefield Information Collection and Exploitation System (BICES), CENTCOM Partner Network- eXpanded (CPN-X) and other Mission Partner Environments (MPE) as required. The contractor shall provide personnel capable of performing sustaining the required Information Technology services IAW the KM strategy, training plans and the Chief Information

Officer/G6 (CIO/G6) Army Command, Control, Communications, Computers, and Information Management (C4IM) service catalog. In addition to general maintenance of the classified and unclassified sites and servers the team will address SharePoint Data Management, Collaboration Tool/Methods and Information Display projects on two (2), four (4) and six (6) week focused rotating timelines. Specific IT support service objectives include:

1.3.1. Provide Subject Matter Experts (SMEs) who meet qualifications in PWS 1.15 to provide SharePoint Integration, Content Management and Data Administration Support Services to the Knowledge Management (KM) Office of the XVIII Airborne Corps’. These SMEs shall:

1.3.1.1. Provide all required support maintenance, required updates and necessary documentation to client designated servers, data bases and software identified in PWS 5.1.1.

1.3.1.2. Ensure Server / System Optimization by monitoring and maintaining a necessary amount of free space on the servers to allow successful post office disk file maintenance and backup IAW PWS 5.1.2.

1.3.1.3. Monitor all portal servers daily to identify and resolve all potential problem areas IAW PWS 5.1.3.

1.3.1.4. Maintain continuity of portal operations for the Senior Commander Fort Bragg and remaining units and portal users when the XVIII Airborne Corps headquarters deploys IAW PWS 5.1.4.

1.3.2. Provide SharePoint Support Services. This includes planning, organizing, and managing and/or reviewing resources to bring about the successful completion of specific project/goals and/or objectives. Specific Tasks include:

1.3.2.1. Installation and system integration of net web applications, SharePoint tools, and database programming solutions to meet Stakeholder-approved mission requirements IAW PWS 5.2.1. Specifically this includes providing minor improvements or creation of a small plug and play applications or scripts that fine tunes or optimize the existing application capability. Specific examples of these tasks are helping to use SharePoint OOTB solutions to build dashboards for the Commanding General or maximizing calendar functionality for conference room scheduling.

1.3.2.2. Administering pages and web parts to maximize SharePoint functionality and increase XVIII Airborne Corps process efficiency IAW PWS 5.2.2..

1.3.2.3. The contractor shall provide SharePoint Services to the XVIII Airborne Corps Staff IAW PWS 5.2.3.

1.3.3. Conduct SharePoint Portal Training to Content Managers and Users. The SMEs shall provide any necessary IT training IAW PWS 5.3.

1.3.4. Ensure Information Assurance (IA) Policy Compliance and provide all require Security Software installation, updates and maintenance IAW PWS 5.4.

1.4 Scope: IT Support Services are required for the management and maintenance of the following:

1.4.1. At least six (6) permanent portals with possible expansion to ten (10) as mission requirements dictate. The management and maintenance of this software includes content management on these portals, as well as review of the sites to ensure they are in compliance with the content management memorandum of instruction. The contractor shall also conduct training for site owners and users of these permanent portals.

1.4.2. The contractor shall be responsible for the maintenance and management of twenty (20) servers across two (2) different networks; seven (7) of these twenty (20) servers are Search and Query Language (SQL) database servers containing over one hundred (100) data bases. Other servers are web servers, media servers and additional services to support the portal.

1.4.3. Other support services are required for the maintenance of thirty (30) client work stations (refers to individual user desktop/laptop). Additionally, there are sixteen (16) servers and eight (8) client workstations used that shall be managed and maintained, that are in addition to the servers in paragraph 1.4.2.

1.5 Period of Performance: The Period of Performance is as follows:

Phase-In: One (1) Month Period Base Year: Eleven (11) Month Period Option Years: One (1), Twelve (12) month Option Period, One Eleven (11) month Option Period Phase-Out: One

(1) Month Period.

1.6 Quality Control: Quality Control is the responsibility of the Contractor. The Contractor shall develop, implement, and maintain a Quality Control Program (QCP) to ensure all work described in this contract is performed at or above the standard defined in the Performance Requirements Summary (PRS). The QCP is developed by the contractor to ensure that it performs and delivers high-quality service and products. And it shall include methods of documenting and enforcing quality control operations of both prime contractor and or subcontractor work; including inspection and testing.

1.6.1 The Contractor shall submit their QC Plan as part of the contractor’s proposal within ten (10) days of contract award. After acceptance of the QCP, the contractor shall receive the Contracting Officer’s (KO) acceptance in writing or any proposed changes to the QC procedures. The contractor shall submit QCP changes within five (5) days to the KO and Contracting Officer’s Representative (COR) for review and approval prior to implementation.

The Quality Control Plan shall address as a minimum:

1.6.2 Inspection System. The contractor shall develop, implement and maintain a system to inspect their services as well as their subcontractor services and products to ensure compliance with PWS requirements, and applicable laws and regulations. It shall specify tasks or areas to be inspected on a scheduled or unscheduled basis, the manner in which inspections are to be conducted, the titles of the individuals who will perform the inspections, and the percentage of the work that will be inspected on a recurring basis.

1.6.3 Inspection Files. The contractor shall document all inspections conducted, and the necessary corrective and preventive actions taken.

1.6.4 Deficiency Identification, Prevention and Correction. The QCP shall include a method of identifying and preventing deficiencies in the quality of services performed before the level of performance becomes unacceptable as defined in the PRS, without dependence upon Government direction. The contractor shall identify and prevent defects in quality of products and services performed before the level becomes unacceptable and before they are provided to the Government. The QCP at a minimum shall address process control and continuous process improvement; procedures for scheduling, conducting and documentation of inspection; discrepancy identification;

procedures for root cause analysis; corrective and preventive action procedures to include procedures for addressing Government discovered non-conformances; procedures for trend analysis; and procedures for collecting and addressing customer feedback/complaints. The QCP shall document process control and process performance measurement procedures that shall include how the Contractor shall implement preventive corrective actions. The Contractor shall demonstrate that it has designed quality into the delivery of services thereby mitigating the risk(s) associated with delivery of deficient or nonconforming services.

1.6.5 The contractor shall keep records on-site of all inspections conducted by the Contractor and necessary corrective action taken. These documents shall be available for inspection by the Government during the term of the contract.

1.6.6 The QCP shall contain methods of communications (direct and indirect) with the Government regarding performance of the contract. Communication shall include regular and formal meetings with the Government for review and analyses of key process indicators, analysis of process deficiencies, and problem resolution.

1.6.7 The QCP shall have a customer comment processing system for correction of Contracting Officers Representative (COR) validated comments received verbally or through the Interactive Customer Evaluation (ICE) program. The system should be designed to provide feedback to the Government based on customer contact, investigation of derogatory comments, rebuttal to derogatory comments, or corrective action(s). Government collected and graded customer satisfaction comment cards will be part of the Government’s performance evaluation process. The contractor shall document all customer complaints and report the complaint to the COR within one workday after receipt of complaint. The contractor shall use electronic mail or other written memoranda as notification. Each customer complaint reported to the COR shall have a scheduled completion date subject to COR approval.

1.6.8 Detail how continuous quality improvement will be a sustaining focus throughout the QCP and report monthly via a Process Improvements Tracker (PIT) ongoing initiatives to streamline processes, improve service and detail benefits to the Government.

1.6.9 Upon request from the COR, the Contractor shall provide, all reports generated as a result of the Contractor’s quality control efforts. This shall include any summary information used to track quality control, including any charts/graphs.

1.7 Contractor Discrepancy Report (CDR): When the Contractor's performance is unsatisfactory, a CDR will be issued. The Contractor shall reply in writing within five (5) work days from the date of receipt of the CDR, giving the reasons for the unsatisfactory performance, corrective action taken, and procedures to preclude recurrence.

1.8 Quality Assurance: The COR will evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the COR must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

When an observation indicates defective performance, the COR will require the Contractor or designated on-site representative to initial the observation to acknowledge the defective performance. The acknowledgement of the observation does not necessarily constitute Contractor concurrence with the observation, only that the Contractor has been made aware of the defective performance.

1.8.1 Quality Assurance Support Services: The contractor shall provide Quality Assurance Support Services. This task includes providing on-site quality assurance support services to actively support XVIII Airborne Corps Staff to better serve their users with providing site visits. The on-site representatives shall have knowledge of servers and data switches infrastructure. The representative will inspect the quality and completion status of the projects performed by the KM Section. The contractor will have the ability to maintain records and update databases, spreadsheets, charts and graphs as required, provide suggested actions to improve processes, resolve defects in workmanship, or guide construction efforts towards successful completion. All on site contractors will recognize and report safety hazards to appropriate authorities.

1.9 Property Management System: The Contractor shall establish a system to manage Government Furnished Equipment (GFE); Property (GFP); Material (GFM) in its possession to control, use, preserve, protect, repair and maintain. The Property Management System (PMS) must be adequate to satisfy the requirements of the contract.

1.10 Reserved

1.11 Recognized Federal Holidays: The Contractor is normally not required to perform services on recognized federal holidays. However, that requirement is subject to mission execution requirements. The recognized federal holidays include:

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day Washington’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day

1.11.1 When a holiday occurs on a Saturday, Federal employees are normally granted the previous Friday as the holiday observance. When a holiday occurs on a Sunday, Federal employees are normally granted the following Monday as the holiday. The contractor shall work on the days the Government is scheduled to work.

1.11.2 When an unforeseen installation closure occurs on a regularly scheduled day of work, the Contractor will have the following options:

1.11.2.1 Reschedule the work so it is performed the following day unless the following day falls on a weekend.

1.11.2.2 Reschedule the work on any day that is mutually satisfactory.

1.11.3 Hours of Operation: The Contractor shall be responsible for providing services, between the hours of 8:30 AM – 5:30 PM; Monday through Friday, except federal holidays or when the government facility is closed due to local or national emergencies, administrative closings or similar government directed facility closings. The Contractor shall at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential to successful performance under this contract. No overtime (OT) or compensatory time (CT) is authorized. Contractor personnel shall not exceed a forty (40_ hour work week; flexible work schedule may be considered.

1.11.3.1 Performance of work by Contractor personnel under the terms of this contract shall not interfere with regularly scheduled government operational activities.

1.11.4 Place of Performance: Contractor shall have routine access to Government-controlled facilities. The work to be performed under this contract shall be accomplished at the XVIII Airborne Corp, KMO, Building 2-1127, Stairways 3714 in Fort Bragg, NC.

1.12 Security Requirements:

1.12.1 Security Clearance: All Contractor personnel shall have be required to possess a SECRET clearance at a minimum at the time work commences at the aforementioned Place of Performance and the Contractor must maintain the level of security required for the duration of the contract. The security requirements are in accordance with the attached DD254. Contractor personnel shall comply with all applicable security and safety regulations, guidance, and procedures, including local, referenced in this PWS and in effect at the work sites. All personnel must meet requirements IAW DODD 8140.01. For more information, please visit http://www.dss.mil. Personnel Security Clearances must be kept to an absolute minimum based on contractual needs.

1.12.1.1 Originate the request through your Contractor Company Facility Security Officer (FSO) based on bona fide contractual occupational requirement.

1.12.1.2 Contractor personnel shall have a favorable National Agency Check (NACI) with inquiry in accordance with Security definition for personnel who occupy “ADP (Automated Data Processing) Sensitive” positions, as per AR 380-67, paragraph 3-601, “The Personnel Security Program” no later than ten (10) work days prior to start of base contract period or prior to performance under this contract.

1.12.2 Common Access Card Issuance: All Contractor personnel performing work under this contract shall obtain a Department of Defense (DoD) Common Access Card (CAC) and a Corps access badge. The CAC and the Corps access badge shall be worn at all times, when performing work under this contract, to include attending government meetings and conferences. Unless otherwise specified in the contract, Contractor personnel shall wear the Corps access badge in a conspicuous place on the front of exterior clothing and above the waist, except when safety or health reasons prohibit such placement or when being used for computer access. Reference CAC Issuance and Revocations: DoDI 5200.46, September 9, 2014

Contractor personnel shall be required to obtain a CAC at least ten (10) work days prior to start of base contract period or prior to performance under this contract, whichever comes first.

1.12.2.1 The Contractor shall develop, maintain, and provide to the COR an updated roster which shall include names and positions of all Contractor personnel as well as indicating which employees were issued CAC or other forms of government identification cards. The Contractor shall submit initial roster to the COR within ten (10) calendar days after commencement of base period of performance.

1.12.2.2 The Contractor shall immediately report any lost CAC or government issued identification cards to the COR and Military and/or DoD police agencies. The Contractor shall immediately collect the CAC and other government issued forms of identification upon termination of employee, or at the end of the contract performance period. The CAC and other government issued forms of identification shall be returned to the COR within one (1) hour of employee termination, or at the end of contract performance period, whichever comes first. Final payment may be delayed if Contractor fails to comply with these requirements.

1.12.3 National Industrial Security Program (NISP). The Contractor shall implement and maintain a security program for control of personnel, property, and information, including, unclassified and classified materials, documents, and records. Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires Contractors to comply with—(1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); any revisions to DOD 5220.22-M, notice of which has been furnished to the Contractor.

In addition, the Contractor’s security program shall include provisions for, but not limited to:

--Initial and Annual Operations Security (OPSEC) awareness training IAW AR 530-1. Operations Security, new contract employees shall complete Level I OPSEC training within 30 calendar days of their reporting for duty and annually thereafter.

--Receiving, storing, disseminating, transmitting, transporting, and protecting items classified as CONFIDENTIAL or SECRET by the Government, including the use of courier cards.

--In-processing and out-processing Contractor personnel for security matters.

--Obtaining Contractor personnel security clearances.

--Documenting and reporting actual and potential security problems.

--Initiating proper procedures to correct documented problems and implementing corrective procedures in the Contractor's security program.

--Filing Classified Documents. All Government-furnished classified and unclassified files in existence at the contract performance start date and those generated under this contract shall be maintained in accordance with AR 25-400-2 or other applicable regulations. Files shall be transferred to the KO or designated representative upon completion of the contract period or last day of contract performance, whichever comes first. Such files are the property of the U.S. Government. The Contractor shall provide security of classified documents in accordance with AR 380-5 and DOD 5200.1-R, NISP Operating Manual.

1.12.3.1 Physical Security Plan. This portion of the Contractor’s security program shall address physical security aspects associated with contract performance and describe how the Contractor shall prevent unauthorized access, vandalism, pilferage, larceny, sabotage, and arson directed toward Contractor-controlled facilities and Government Furnished Property (GFP). The following regulations shall apply when developing the physical security plan: ARs 190-11, 190-13, and 190-51; Department of Defense (DOD) 4500.9-R, and Department of Defense Instruction (DODI) 5100.76 and DODI 5220.22. The Contractor shall develop and implement a physical security plan in accordance with AR 190-13.

1.12.3.2 Key Control. The Contractor shall include in the physical security section of the Contractor’s security program a key control plan IAW applicable regulations, policies and directives ensuring keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. The key control plan shall include requirements of AR 380-5, Fort Bragg 380-5 and FORSCOM Supplement 1 to AR 380-5, if classified materials are being stored. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the COR.

In the event keys are lost or duplicated, the Contractor shall, upon direction of the KO, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying.

When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor. The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the KO.

1.12.3 Lock Combinations. The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations.

These procedures shall be included in the Contractor’s security program.

1.12.4. Information Security Plan.

1.12.4.1 The Contractor shall develop and implement an Information Security Plan IAW AR 380-5 AR 380-67, Fort Bragg regulation 380-5, FB 380-67, and FORSCOM Supplement 1 to AR 380-5, for the control of classified information. The Contractor’s information security program shall include applicable provisions of AR 380-series regulations.

1.12.4.2 The contractor shall complete the DoD IA awareness training before issuance of network access and must complete IA awareness training annually thereafter. Information assurance (IA)/information technology (IT) training: The Contractor employees working IA/IT functions shall comply with DoD and Army training requirements in DoDD 8570.01, DoDD 8570.01-M and AR 25-2 within 60 days of employment. Training is available at https://ia.signal.army.mil/DoDIAA/default.asp. All required IA awareness training shall be taken upon work performance start date and annually thereafter, for the duration of this contract.

1.12.5 Access and General Protection/Security Policy and Procedures:

1.12.6 All Contractor personnel performing work under this contract shall comply with applicable installation, facility and area commander installation/facility access, local security policies and security procedures provided by the Security Manager Government representative. Contractor personnel shall provide all information required for background checks to meet installation access requirements to be accomplished by the installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor personnel shall comply with all personal identity verification requirements as directed by Department of Defense (DoD), HQ Department of Army (DA) or local policies. Sponsoring organizations, activities, and persons will be responsible for monitoring contractor access by submitting a completed and approved DES Form 118 to the Installation All American VCC 5, detailing the contracted services to be performed, location of services, and duration of the contract. Contractors requesting access for less than one year may receive an AIE visitor card on a case by case basis, or a temporary vehicle pass for 90 days. Contractor cards will be issued for periods of one to three years depending on the terms of their contract. AIE card expirations may be updated to reflect a new contract period by submitting an approved DES Form 118 to the All American VCC 5. Renewed short term passes must be re-processed at the All American VCC. In addition to the changes otherwise authorized by this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in Contractor and subcontractor security matters or processes.

1.13. Anti-Terrorism Program:

1.13.1 Anti-Terrorism (AT) Level I Training: Contractor personnel performing work under this contract that require access to Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after commencing performance under this contract. The Contractor shall submit employee certificates of completion within 30 calendar days after completion of the training. AT Level I awareness training is available at the following website: https://jkodirect.jten.mil/Atlas2/page/login/Login.jsf

1.13.1.1 iWATCH Training: The Contractor shall brief all personnel performing work under this contract on the local iWATCH program [training standards provided by the requiring activity Anti-Terrorism Office (ATO)]. This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within thirty (30) calendar days of contract award with the results reported to the COR NLT forty five (45) calendar days after contract award. New employees shall complete the training within ten (10) calendar days of commencing performance of work under this contract, with the results reported to the COR NLT fifteen (15) calendar days.

1.13.1.2 iWatch is simply common awareness. Contract employees can be good sources of information. iWatch training would include organization instructions on “things to look for” and a phone number to call in case the contract employees have information regarding possible terrorist or criminal activities. Providing contractors with awareness materials such as the iWatch brochure or wallet card is a cost effective alternative to training. The card describes suspicious activity and can be modified to include the COR in reporting procedures. Samples of the iWatch brochure and posters are available on the Antiterrorism Enterprise Portal (ATEP) at https://army.deps.mil/army/sites/PMG/prog/ATEP/iWATCH%20Army/Forms/AllItems.aspx and https://www.army.mil/e2/c/downloads/287489.pdf

1.13.2 Contractor Employees Requiring Access to Government Information Systems: Contractor shall have access to Government-controlled information systems during performance of work under this contract. All contractor employees and associated subcontractors who require access to a government information system shall be registered in the ATCTS (Army Training Certification Tracking System) at commencement of support services, and must successfully complete the DoD Information Assurance Awareness prior to access to the information systems.

Training shall be required annually after the initial training. Completion certificates shall be submitted to the COR within fifteen (15) calendar days from date of commencing performance under this contract.

1.14 Safety: The contractor shall perform work in a safe manner as required by OSHA Safety and Health Requirements. Provide a verbal notification to the KO as soon as possible of each occurrence of damage to Government property or an accident resulting in death, injury, occupational disease, or adverse environmental impact. Provide a completed copy of required Accident Investigation Reports to the KO within five calendar days of each occurrence.

1.14.1 Environment and OSHA: The Contractor shall comply with all local, state, and Federal environmental and occupational safety laws, rules, and regulations. Any apparent conflict between compliance with such local, state and Federal laws, rules and regulations, and compliance with the requirements of the contract shall be immediately brought to the attention of the KO and/or the COR final resolution. The Contractor shall notify the KO and COR in writing in addition to any verbal notification of such conflicts. The Contractor shall be liable for all fines, penalties, and costs which result from violations of, or failure to comply with, all such local state, or Federal laws, rules, and regulations. All unsafe acts or conditions fostered by the Contractor or Contractor personnel may be grounds for the KO or COR, to halt all Contractor performance with a commensurate deduction of monies due the Contractor until such unsafe conditions are corrected. The Contractor shall take due caution not to endanger personnel during performance of this contract. Upon discovery of any hazard such as, but not limited to, fire, or large fuel spill, the Contractor shall immediately notify the KO or COR.

1.15 Special Qualifications.

1.15.1. The contractor shall provide a minimum of five (5) personnel depicted from the three (3) position types below with the following qualifications:

1.15.1.1 SharePoint System Integration Specialist: Must be Microsoft Certified Solutions Associate: Office365 (MCSA: Office 365). The SharePoint System Integration Specialists shall have an understanding and use of SharePoint applications, (including modifying SharePoint to meet mission specific requirements and the use of source code necessary for system integration). The contractor shall have the knowledge to apply tools within SharePoint software to provide solutions to different military processes and establish display methods to help the users/unit better see the organization’s metrics (an example is a Commander’s Dashboard). The contractor shall have the following minimum qualifications:

Five (5) years’ of experience working with SharePoint 2010 and 2013. The contractor shall also be familiar with

SharePoint 2016 and shall have in-depth experience managing collaborative portals, enterprise search capabilities and enterprise content management.

The contractor shall have experience with design, customization and integration efforts of enterprise solutions involving Collaboration, Portals, Enterprise Search, Enterprise Content Management (ECM), Business Process (workflow) and Forms, and Business Intelligence (BI), utilizing Silverlight 4.0, Microsoft SharePoint Server 2013, SharePoint Foundation 2013, SharePoint Designer 2013 and experience building and deploying SharePoint solutions with Visual Studio 2017/.NET 4.0., 4.5.

All SharePoint System Integration Specialists shall have current certifications on MCSA or MCSE, but in lieu of certifications with the following software applications will accept experience with .Net, ASP.Net, HTML, JavaScript, C#, and CSS software applications.

1.15.1.2 Project Manager/SharePoint Content Management: The SharePoint PM/Content Manager shall have the following minimum qualifications: Microsoft Certified Solutions Expert (MCSE).

At least five (5) years of technical experience with SharePoint and enterprise content management. This technical experience must include the following:

o Experience with Microsoft Office, including Word, Excel, and PowerPoint;

o Experience with helping new SharePoint users learn and adopt SharePoint Solutions; experience with building SharePoint 2013 solutions, including custom lists, pages, libraries, searches, and forms; familiarization with SharePoint 2016; Knowledge of content and document management and data migration.

The SharePoint PM/Content Manager shall have experience conducting SharePoint training, user support and document management. The contractor shall develop SharePoint training materials and implement standardized testing to validate training.

As required, the Content Management Specialist shall attend the Knowledge Management Working Groups and perform Information Management Officer (IMO) duties.

1.15.1.3 SharePoint Data Base Administrator (DBA): The SharePoint DBA shall have the following minimum qualifications:

A least three (3) years of relevant experience in SharePoint Server Administration that includes experience troubleshooting network connections and authentication problems, in-depth knowledge of the SharePoint farm architecture and installation processes and the capability of rebuilding the farm quickly.

Capacity to serve as a Subject Matter Expert (SME) with all the functionality of the "Central Administration" web application and the STSADM.EXE commands (some functionality is only available in STSADM) as well as the Shared Services functions, including managed properties, content sources, crawling, profiles, etc., and how it interfaces with the other parts of the farm.

Required DBA skills include proficiency using the SQL Server database (backups and restores, log shipping, creating logins, monitoring performance, etc.) using the features of Windows Server.

Other Specialized Skills / Other Qualifications include proficiency in the following:

o Proficiency and/or formal certification in the following systems: IIS Manager and IIS 6/7 architecture, Server Manager and its functionality, Active Directory (including LDAP queries), DNS, SMTP, Network Load Balancing (NLB), Windows Firewall, Event Viewer and Performance Monitor, and Powershell scripting.

o A broad knowledge of Windows networking and authentication, particularly Kerberos.

o Proficiency in the use of utilities such as Network Monitor 3.2, Fiddler, LDAP browsers, KLIST, and ADSI Edit.

1.15.2 General:

1.15.2.1 The Contractor shall be responsible for ensuring all personnel performing work under this contract possess and maintain current certifications as indicated in this PWS during the execution of this contract.

1.15.2.2 Contractor personnel performing work under this contract shall be able to read, write, speak, and understand the English language to effectively carry out all contract requirements. They shall have a command of both the written and spoken English language to properly clearly, and effectively communicate in person or via electronic devices (telephone or Email) with co-workers, customers, and the general public.

1.15.2.3 Contractor personnel performing work under this contract shall be U.S. citizens unless the provisions of Army Regulation 25-2, Information Assurance have been fully completed and approval has been granted by the Government for the non-U.S. citizen to perform the required support.

1.15.2.4 DFARS 252.239-7001, Information Assurance Contractor Training and Certification is applicable to this contract. Contractor personnel performing IA functions as described in DoD 8570.01-M and Army CIO/G6 Best Business Practice 05-PR-M-0002 shall have the required IA certifications and appropriate operating system certification for information assurance technical positions as required by DoD 8570.01-M. As the intent of the DFARS clause is to implement the manual, section C2.3 of the manual provides further guidance for training and certification.

1.15.2.5 Contract personnel shall go to the Army Training and Certification Tracking System website (ATCTS) at https://atc.us.army.mil, create an account and profile, and identify the COR as their Container Manager. Certificates of successful completion, for initial awareness and annual refresher training and all certifications/re-certifications, shall be uploaded to ATCTS and provided to the COR, upon work performance start date and annually thereafter.

1.15.2.6 The contractor shall comply with AR 25-1, AR 25-2, and applicable Information Assurance Best Business Practices. The contractor shall not install or connect non-Government-owned computing systems or devices to Government networks without the COR’s coordinating and obtaining proper authorization from the appropriate IA office and ensuring that software has a Government Certificate of Networthiness. The non-Government-owned computing systems or devices include, but are not limited to personal or contractor-owned thumb drives (e.g., memory sticks, flash drives, Universal Serial Bus (USB) drives, jump drives, pen drives), removable or external hard drives, Personal Digital Assistants (PDA), PC Cards/Express Cards, MP3 players, cell phones, digital media, floppy disks, compact disc (CD)/ Digital Video Disks (DVD) burners, optical recordings, photo flash cards, laptops or any devices that can store data.

1.15.2.7 The contractor shall ensure any sensitive information, including but not limited to Personally Identifiable Information (PII), For Official Use Only (FOUO), proprietary, and Law Enforcement Sensitive information residing on Mobile Computing Devices (MCD) or other external media, is protected in accordance with current Data at Rest (DAR) guidelines and requirements using an authorized, approved and prescribed DAR solution. MCDs include, but are not limited to, laptop, Netbook, notebook, or tablet computers; Blackberry or equivalent devices; external media includes optical disc media such as CDs/DVDs, USB drives, also referred to as flash or thumb drives (when authorization to use them is restored), and floppy disks, or other portable digital storage devices.