Attachment_I_-PWS__6-6-2017_FINAL.pdf

W91249-17-R-0001

Attachment I

PERFORMANCE WORK STATEMENT

The U.S. Army Training and Doctrine Command (TRADOC) Capability Manager – Network and Services (TCM N&S) Information Technology, Telecommunications, Network Operations and Information Assurance (IT-TNOIA) Services Requirements Determination

Part 1 General Information

1.0 General: This is a non-personal services contract to provide Network Operations (NETOPS) services, telecommunications engineering, information services analyses, and information assurance analysis services for the TRADOC Capability Manager – Network and Services (TCM N&S) Office, U.S. Army Cyber Center of Excellence, Fort Gordon GA.

1.1 Description of Services/Introduction: The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary in support of TCM N&S as defined in this Performance Work Statement except for those items specified as Government furnished property and services.

1.2 Background: The U.S. Army Cyber Center of Excellence (CCoE), TCM N&S, works closely with other major agencies to identify and define functional requirements for current and future Army Expeditionary and Enterprise Network Operations (NetOps), Satellite Communications (SATCOM), Information Services, and Communications Security (COMSEC) procedures, processes and systems. Among these collaborative agencies are the Program Executive Office for Enterprise Information Systems (PEO EIS), Program Executive Office for Intelligence, Electronic Warfare and Sensors (PEO IEW&S), Program Executive Office for Command Control and Communications-Tactical (PEO C3T), Program Management (PM) Office for the Defense Communications and Army Transmission Systems (PM-DCATS), Product Management Office for Wideband Enterprise Satellite Systems (PdM WESS), PM Office for the Warfighter Information Network-Tactical (WIN-T), the PdM for Satellite Communications (SATCOM), and the PM Office for Communications Security (COMSEC).

The PM WIN-T, PdM SATCOM, and Project Lead Network Enablers (PL NE) are the U.S.

Army’s Programs of Record (PORs) that provide Materiel Solutions to meet the user’s Network Operations (NetOps), SATCOM, and COMSEC requirements as part of the systems acquisition process. These requirements are developed by TCM N&S and must be vetted through the CCoE.

Therefore, PdM WIN-T, PdM SATCOM, and PL EN must enforce the analysis, design and implementation of protected information assurance tools and services between U.S. Army elements. These Materiel Developers have the responsibility for providing reliable and timely telecommunications, Key Management, Net-centric voice, data and video services. These services are provided across the U.S. Army’s strategic, operational, and tactical boundaries in support of the Department of Defense’s (DoD’s) full spectrum of warfighting, intelligence, and business missions.

The NetOps discipline is defined at a high level in the next three paragraphs.

1.2.1 Network Management (NM): The day-to-day management (fault, configuration, monitoring, performance, information assurance, planning, etc.) of communications (terrestrial, high-altitude and space), electromagnetic spectrum, computer-based information systems, elements of systems and services to include software applications.

1.2.2 Cyber Security (CS) and Computer Network Defense (CND) ensures the availability, integrity, identification, authentication, confidentiality, and non-repudiation of friendly information and information systems while denying adversaries’ access to the same. CND incorporates those actions taken to protect, monitor, analyze, detect and respond to unauthorized activity within DoD information systems and computer networks.

1.2.3 Information Dissemination Management (IDM): IDM intends to provide the right information to the right person in the right format at the right place and time in accordance with the Commander’s information dissemination policies. Also, IDM must optimize the use of information infrastructure resources. IDM provides services that address awareness, access, and delivery of information.

1.2.4 Additionally, the TCM N&S Office has the mission to synchronize the requirements for “HOW” information is initialized, moved, stored, and shared across the tactical Land Warrior Network (LWN) and the entire Army Enterprise. The TCM N&S Office supports the development of all the U.S. Army Training and Doctrine Command’s (TRADOC’s) application, device, and system capability documents that require initialization, movement, storage, and/or sharing of information across the tactical network. The contractor shall ensure that every individual, designated by the contractor to perform or directly support these functions has a detailed understanding and knowledge in the cryptographic discipline. This discipline is defined as the distinct area of cybersecurity which deals with the securing of information systems and services. This is accomplished through the employment of varying degrees of hardware and software solutions as well as various techniques and applications which enhance security services. It involves the encryption and decryption of information between producers and consumers to ensure the confidentiality, integrity and availability of the data being disseminated.

Through the use of algorithmic functions it ensures an appropriate security level for national security systems consistent with operational imperatives and mission environments. This cryptographic expertise shall allow the determination and analysis of “WHEN” and “HOW” to deploy stand-alone or embedded Communications Security (COMSEC) devices to support the many systems and architectures, listed below, that fall under, support, and complement the TCM N&S mission. Specific TCM N&S Office responsibilities in support of the cryptographic discipline include providing engineering support for the following Department of Defense Information Network (DoDIN) systems:

a) Warfighter Information Network – Tactical (WIN-T) with all increments;

b) SATCOM Systems;

c) Bridge-to-Future Network;

d) Integrated System Control (ISYSCON);

e) Army Key Management System (AKMS);

f) Army Key Management Infrastructure (KMI);

g) Joint Network Management System (JNMS);

h) Defense Messaging Systems;

i) DoDIN Transport and Services capability area;

j) Integration of separate Networks into one Network;

k) Mission Command System Information Services (IS);

l) Army Data Utilization;

m) Key Management Information System;

n) Common Information Services migration to Network-provided IS;

o) Army Implementation of Global Information Grid (GIG) Enterprise Services;

p) Army Implementation of Department of Defense Information Network (DoDIN)

q) NetOps Systems; Initialization, Movement and Storage;

r) Public Key Infrastructure (PKI);

s) Common Operating Environment

t) Transport Convergence

u) Sharing of Information between Weapon’s applications, sensors and devices as well as between Warfighters, intelligence sources, mission areas DODIN integration with Joint, strategic, interagency, multinational and commercial information systems.

v) Identity Access Management

w) Army Enterprise Network

x) Data Cloud and Service Architecture

y) Data Centers and Tactical Servers

1.3 Objective: To accomplish the complete mission, the TCM N&S Office, PM WIN-T, Project Lead Network Enablers, PM DCATs, PM Mission Command, PdM WESS and PdM SATCOM must employ a highly skilled staff of Military and Department of the U.S. Army (DA) Civilian personnel and specialized contractor support located at various installations within the Army’s area of responsibility (AOR); moreover, these materiel developing military organizations perform as the Army’s centralized coordinator for evolutionary capability development of user activities associated with the tactical tier of DoDIN. The contractor shall provide research services, requirements definition, and analytical services to support these systems, technologies, and programs and will be required to engage in significant coordination with several agencies on Fort Gordon, Georgia as well as other locations throughout the U.S. Army both Continental United States (CONUS) and Outside Continental United States (OCONUS). Additionally, contractor support services shall assist with managing all Doctrine, Organization, Training, Materiel, Leadership & Education, Personnel, and Facilities (DOTMLPF) facets of user activities, and ensure all aspects of training are synchronized with the fielding of assigned capabilities.

1.4 Scope: This Performance Work Statement (PWS) outlines the support services that the contractor shall provide to TCM N&S to execute requirements analysis and determinations for telecommunications, COMSEC, and NetOps programs and systems that originate at the CCoE, Fort Gordon, GA. The contractor shall support the TCM N&S Office in achieving its goals by providing on-site telecommunications engineering, network engineering, information assurance analysis, and technical support services as specified within the PWS.

1.4.1 The PWS includes four optional services: Section 5.14, develop operational mission threads IAW the U.S. Army Interoperability Certification process; Section 5.15, provide support to CyberQuest, CyberBlitz, Network Integration Evaluation, and Army Warfighter Assessment events / experiments; 5.16, execute registration authority support; and 5.17, support the local registration authority. The Government may acquire these optional services, individually or collectively, by issuing a bilateral modification on a firm-fixed price basis. Prior to issuing the modification, the Government will notify the contractor, in writing, of the specific scope, nature, and duration of the optional services required. Thereafter, the contractor shall identify a firm fixed price for those services that does not exceed the fully burdened labor rates in the Pricing Worksheet of the contractor’s Price Proposal which shall be incorporated into the contract at the time of award.

1.4.2 The capabilities/systems to be supported under this PWS include but is not limited to:

WIN-T INC 2, WIN-T INC 2 NETOPS, ADSI, BFN "RHN", CRYPTO MOD, T2C2, MCN-AE,

ITNO/UNO, PED, BFN "WIN-T INC 1", NGLD, GBS, TPKI, TRILOS, WSOMS, TROPO,

NBCIC (DATA PROD), PHOENIX, IDAM, EMC, AKMI, SMART T, TAP, ANN-MMP,

ANN-MC, SNAP, AESD, GRRIP, DCCGF, EWSTS, TNMS, 4GLTE, CHS, TDM, WIFI, CCE,

BCCS/TSI, J-TNT, PATS, MET, IC3NS. In exhibit A, Overview of Capabilities/Systems, will be a short description of each of the above.

Exhibit A – Overview of Capabilities/Systems

Program Description

WIN-T

Warfighting Information Network - Tactical - the current tactical communications systems for warfighters supports command posts and key leaders.

WIN-T NETOPS The network management, cybersecurity and information dissemination management component of WIN-T

ADSI

Army DoDIN Services Infrastructure - the server and common services software for all 6 computing environments and the network upgrades to support the common operating environment.

BFN "RHN"

Bridge to Future Networks - Regional Hub Node: Regional Hub Node is the enterprise satellite terminal that supports the COCOMs and serves as the hub the tactical satellites and entrance into the strategic networks.

CRYPTO MOD

Crypto modernization: the implementation of new cryptography systems in all communications and information systems. The planning for divesture of old devices.

T2C2 Small and Medium transit cased based satellite system.

MCN-AE

Modular Communications Node - Advanced Enclave (MCN-AE) - Provides TS/SCI enclaves at the BCT with tunneling reach-back over the WIN-T backbone to the Trojan Network Control Center (TNCC).

ITNO/UNO The next generation network operations concept and requirements to develop an end to end NETOPS capability from enterprise to tactical for all echelons.

PED

Processing, Exploitation, and Dissemination support with various plans to push the data from tactical sensors to strategic locations where the data is analyzed.

BFN "WIN-T INC 1 Bridge to Future Network - WIN-T Increment 1, the requirements for Joint Network Node and Command Post Nodes.

NGLD Next generating load device which loads crypto and other systems with key material and configurations sets.

GBS Global Broadcast system

TPKI Tactical public key infrastructure - the implementation of the PKI in the tactical forces.

TRILOS Next generation tactical Line of Sight radio system.

WSOMS Wideband SATCOM Operations Management System - used to plan manage and monitor wideband MILSATCOM.

TROPO Next generation troposcatter transmission system.

NBCIC (DATA PROD) Network Battle Command Initialization Capability systems provides automated configuration files for tactical network battle command systems.

PHOENIX Satellite system deployed in the Expeditionary Signal Battalions.

IDAM The capability and program to support single identity in the end to end network and systems from strategic to tactical networks.

EMC Enroute Mission Command system deployed to on C17/C15 aircraft to support the Global Reaction Force.

AKMI Army Key Management Infrastructure that deploys servicers and crypto key generation systems throughout the force.

SMART-T

Secure, Mobile, Anti-Jam, Reliable, Tactical-Terminal (SMART-T) - Provide units with SATCOM Capability which provides beyond line of sight range extensions.

TAP Tactical Aerostat Program - concept to use airborne relays.

ANN-MMP Aerial Network Node Modular Mission Payload concept for airborne node with a modular set of communication capabilities.

ANN-MC Aerial Network Node Mission Command replacement for the current Army Airborne Command and Control System.

SNAP SIPR and NIPR Access Point - deployed equipment to provide SIPRNET and NIPRNET access.

AESD

Army Enterprise Service Desk - the requirements document for the implementation of the global enterprise service desk to support IT management.

GRRIP Currently fielded small tactical satellite terminals

DC/C/GF CE

Data Center/ Cloud/ Generating Force Computing environment. The computing environment include networks and servers and facilities for the strategic network.

EWSTS Enterprise Wideband SATCOM Terminal system - the program document supporting the global enterprise SATCOM terminals and upgrades.

TNMS Tactical Network Services Manager provides real-time situational awareness for services and systems in the command posts.

4GLTE Tactical transit cased based 4GLTE system for the command posts CHS Common Hardware System

TDM Tactical Digital Media - combat camera, PAO and others program of record for digital photography

WIFI Tactical WIFI also known as CP Wireless fielding a commercial for classified set of technologies.

CCE

Commercial and Coalition Communications Equipment - provides enclave support for coalition and commercial. Includes voice bridge, server and call manager functions with support for workstations and VOIP phones.

BCCS/TSI Battle Command Services / Tactical Services Infrastructure - the deployed servers and services for the command posts.

J-TNT Joint Tactical Networking Environment Network Operations Toolkit provides a means to load and configure our family of software-defined radios.

PATS Next generation protected anti-jam satellite transmission system

MET IC3NS Modernization of Enterprise Terminals - the plan and implementation of modernizing the STEP and Teleport sites globally

1.5 Period of Performance: The period of performance for the awarded contract consists of a 9 month base period, which includes a 30-day Phase-In, and two (2) twelve (12) month option periods.

1.5.1 Phase-In Period: During the phase-in period, the contractor shall become familiar with performance requirements in order to commence full performance of services at the end of the phase-in period.

1.6 Place of Performance: The contractor shall perform services under this contract at Fort Gordon, GA; Fort Benning, GA; Fort Leavenworth, KS; and at other CONUS and OCONUS locations as mission dictates. The contractor shall provide one Communications Integration Engineer at Fort Benning, one Communications Integration Engineer at Fort Leavenworth and the remainder of its staff at Fort Gordon.

1.7 Quality Control: Quality control is the responsibility of the contractor. The contractor shall develop, implement, and maintain an effective quality control system, which includes a written quality control plan (QCP), to ensure services are performed in accordance with the contract.

1.7.1 The contractor shall develop, implement and maintain an effective quality control system, which includes a written QCP, to ensure services are performed in accordance with the contract.

The QCP shall implement a standardized procedure / methodology for monitoring and documenting contract performance to ensure acceptable services are provided to the Government. The QCP, at a minimum, shall address continuous process improvement;

procedures for: scheduling, conducting, and documenting inspections; identifying and correcting discrepancies and non-conformances, whether discovered by the contractor or the Government;

procedures for analyzing, identifying and correcting the root cause of discrepancies or non-conforming services/products to prevent their recurrence; and, procedures for conducting trend analysis and for collecting and addressing customer feedback/complaints.

1.7.2 The contractor shall submit its QCP within five (5) days after contract award. The contractor shall submit copies of its QCP to the Contracting Officer and Contracting Officer Representative (COR) within five (5) working days of making proposed changes to its QCP.

The contractor is required to receive the contracting officer’s acceptance of the proposed changes, in writing, prior to implementing the revised QCP.

1.7.3 The contractor shall provide to the Government quality control documentation generated as part of its quality control system under this contract upon request by the contracting officer or

COR.

1.8 Quality Assurance: The Government shall evaluate the contractor’s performance under this contract in accordance with the Government Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what surveillance the Government must accomplish to ensure that the contractor has performed in accordance with the contract performance standards. The QASP defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.9 Recognized Holidays: The contractor is not expected to perform services on the following federal holidays:

New Year’s Day Labor Day Martin Luther King Jr. Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day

1.9.1 When one of the above designated legal holidays falls on a Sunday, the following Monday will be observed as a legal holiday. When a legal holiday falls on a Saturday, the preceding Friday is observed as a legal holiday. The list of holidays relates to Government duty days and is not intended to supplement or otherwise alter the provisions of any Wage Determination or Collective Bargaining Agreement regarding applicable paid holidays.

1.9.2 In addition to the days designated above, the Government observes the following days: any other day designated by Federal Statute, by Executive Order, or by Presidential Proclamation.

1.10 Hours of Operation: The contractor is responsible for conducting business, between the hours of 0800 hours to 1700 hours, Monday thru Friday, except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government-directed facility closings. The contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the contractor shall keep in mind that the stability and continuity of the workforce are essential.

1.11 Security Requirements: Contractor employees performing on this contract must be U.S.

citizens. IAW Army Regulation and Air Force Instructions, all prospective contractors shall undergo a verification process to determine trustworthiness and suitability prior to being granted access to government networks and federal property. Limited access with escort may be granted (at the installation's discretion) for an interim period while investigations are being conducted.

At the start of the phase-in period, the following contractor employees performing on this contract shall have a final Top Secret security clearance with Sensitive Compartmented Information (SCI) eligibility: three (3) Information Assurance Engineer; two (2) Communication Analyst Senior; one (1) Network Engineer Senior; two (2) Network Planning Analyst Senior;

one (1) Communications Transmission Engineer; three (3) Communications Integration Engineer; one (1) Telecommunications Engineer Senior; and one (1) Program Manager, and shall maintain the clearance throughout the life of the contract. At the start of the phase-in period, all other contractor employees performing on this contract shall have a final SECRET security clearance and shall maintain the required security clearance throughout the life of the contract. The contractor is responsible for acquiring the clearances. The contractor will ensure an owning relationship is established in JPAS for each individual performing duty in support of this contract. The contractor shall ensure that all assigned personnel understand applicable security policies and directives found in DOD 5220.22-M, National Industry Security Program Operating Manual (NISPOM); AR 380-5, Information Security Program; and all other applicable policies and regulations.

In addition to the requirements stated above, all other Contractor personnel working on sensitive information portions of this contract shall have a TOP SECRET security clearance. The Government will identify all classified material at the appropriate level. A background investigation is required for SECRET level or above access. Contractor personnel shall adhere to the following regulations:

a. Army Regulation (AR) 25-1, paragraph 5-3c, the Army Knowledge Management and Information Technology.

b. Use of Government Property, 5 CFR 2635.704.

1.11.1 Government Issued Common Access Card (CAC). The common access card (CAC) is the DOD personal identity verification credential. In order to receive a CAC, every employee must be investigated as part of the HSPD-12 process. The type of investigation used in compliance with HSPD-12 adjudications is the National Agency Check with Inquiries, or NACI.

The NACI serves as the minimum type of investigation required to be issued a CAC. It consists of several elements, including database and local agency checks as well as written inquiries. The NACI examines the last five years of an applicant's life, but no further back than the applicant's 18th birthday. CACs will not be issued before the fingerprint check results have been completed and the investigation has been submitted. FINGERPRINTS AND THE APPROPRIATED INVESTIGATION WILL BE SUBMITTED BY THE GOVERNMENT. The Contractor shall be responsible for notifying the Government when an employee departs so the CAC card access can be inactivated. The security manager and or trusted agent shall be responsible for retrieving the CAC from a departing contractor.

1.11.2 Classified Data: The contractor shall ensure that classified data is controlled, protected, and safeguarded in accordance with AR 380-5 and current Army and DOD policy. Information shall be accessed and stored in Government spaces that are appropriate to the classification level.

The contractor shall agree that any data furnished by the Government to the contractor shall be used only for performance under this PWS, and all copies of such data shall be returned to the Government upon completion of this effort. Compliance with DD Form 254, Department of Defense Contract Security Classifications Specifications, is required.

1.11.2.1 Handling/Access to Classified Information: The contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with (1) the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M), and (2) any revisions to DoD 5220.22-M.

The contractor shall notify the COR and the Contractor’s Facility Security Office (FSO) immediately of any adverse or questionable information that may have a bearing on the individual’s initial or continued eligibility for access to classified information.

1.11.2.2 SIPRNET and JWICS: Secret Internet Protocol Network (SIPRNET) and Joint Worldwide Intelligence Communications System (JWICS) access will only be as directed by the Government requirement activity and at government facilities only. Contractors requiring access to the SIPRNET must have a final Secret clearance or Interim TS clearance. Contractors requiring access to the JWICS must have a final TS clearance and be indoctrinated for Sensitive Compartmented Information access. Approval by the COR is required prior to granting access.

SIPRNET/JWICS may contain NATO information and a NATO awareness brief and acknowledgement is required for all personnel prior to being granted access to the SIPRNET/JWICS. The NATO Awareness briefing is required to inform personnel how to protect NATO information in the event they come across it while accessing the SIPRNET/JWICS. A written acknowledgment shall be maintained by the COR. The contractor shall not access, download or further disseminate any classified information from SIPRNET/JWICS which is outside the execution of the defined contract requirements unless specifically authorized in writing by the Government Program Manager and the Contracting Officer. In the event that any special access is required, the Contracting Officer must modify the requirements and DD 254.

1.11.2.3 COMSEC: The contractor requires access to COMSEC material to perform the mission under the terms of the contract. Classified COMSEC material is not releasable to contractor employees who have not received a final clearance at the appropriate security level. COMSEC access shall be IAW DOD 5220.22-M and AR 380-40. When access is required at Government facilities, contractor personnel will adhere to COMSEC rules and regulations as mandated by Command policy and procedures. Written concurrence of the Contracting Officer is required prior to subcontracting.

1.11.3 Cyber Security (formerly Information Assurance (IA)/Information Technology (IT)) Training: All contractor employees and associated subcontractors shall complete the DoD Cyber Awareness Challenge Training (https://ia.signal.army.mil/DoDIAA) before issuance of network access and annually thereafter. The contractor shall provide certificates of successful completion, for both initial awareness training and annual refresher training shall be provided to the COR via the Army Training and Certification Tracking System (ATCTS). All contractor employees will successfully complete all required IA training as specified in AR 25-2 and as directed by the Government. All contractor employees working IA/IT functions shall comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M, DoDD 8140.01, and AR 25-2.

Contractor employees, to include subcontractors, requiring access to information systems to fulfill their duties shall possess the required favorable security investigation. The Information Assurance Security Officer (IASO) / Information Assurance Network Officer (IANO) from the activity that the contractor employee supports, will submit an electronic DD 2875, System Authorization Access Request (SAAR) to the Cyber G2 for verification that the contractor employee meets the requirements of AR 25-2 for accessing the Fort Gordon network. (Ref AR 25-2)

1.11.4 Information Assurance (IA)/Information Technology (IT) Certification: Per DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2, contractor personnel supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

1.11.5 Information Security Program Training: All contractor employees, including subcontractors, assigned to this contract shall complete the online Information Security Program Training located on the Army Learning Management System (ALMS) site. Log into AKO, “Self Service”, “My Training”, “ALMS”, “Go To Mandatory Training.” Training must be completed within 30 days of reporting for duty and annually thereafter. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. (Ref ALARACT 207/2013, DTG 291848Z Aug 13, Subj: Army Wide Rollout and Requirement for Standardized Computer Web-Based Security Training on the Army Learning Management System (ALMS)).

1.11.6 Anti-Terrorism (AT) Awareness Training: All contractor employees, including subcontractors, assigned to this contract shall receive an initial Antiterrorism Level I Brief by a certified ATO Level II Officer within 30 days of reporting for duty. (Monthly briefings will be offered by the Garrison Antiterrorism Officer.) Annual refresher Antiterrorism Level I Training shall be completed on-line at https://jkodirect.jten.mil/Atlas2/faces/page/login/Login.seam or they may attend the monthly training offered by the Garrison ATO. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. (Ref Department of the Army, US Army Contracting Agency, SFCA-CO, 5 Sep 07, subject: Incorporation of Measures into the Contracting Process and AR 525-13, Antiterrorism).

NOTE: Contractor personnel shall receive an AOR briefing when traveling OCONUS on TDY.

Briefing shall be provided by a certified ATO Level II Officer within 7 working days prior to TDY departure outside the 50 United States, its territories, and possessions. This is separate from the normal annual AT Level I training requirement. (Ref AR 525-13)

1.11.7 iWatch: All contractor employees assigned to this contract shall receive a brief on the local iWatch program (provided in conjunction with the At Level 1 Training). This training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 days of reporting to duty and annual refresher training with the results reported to the COR.

1.11.8 Operations Security (OPSEC) Awareness Training: All contractor employees, including subcontractors, assigned to this contract shall complete Level I OPSEC training within 30 days of reporting for duty and then annually thereafter. Initial Level 1 OPSEC training will be conducted monthly by the Garrison OPSEC Officer or a Level II certified OPSEC Officer.

Annual refresher OPSEC training shall be completed on-line at http://cdsetrain.dtic.mil/opsec/index.htm. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. (Ref AR 530-1, Operations Security)

The contractor shall adhere to local OPSEC policies and procedures of the government requiring activity. When in a TDY status in support of this work effort, the contractor shall also adhere to any OPSEC policies and procedures in effect at TDY locations.

1.11.9 Threat Awareness and Reporting Program (TARP) Training: All contractor employees, including subcontractors, assigned to this contract shall complete TARP training within 30 days of reporting for duty and then annually thereafter. TARP training will be conducted monthly by the 902nd MI Group. The COR will ensure the contractor is notified of available training. Completion of training shall be reported to the COR and the unit/activity security manager. (Ref AR 381-12).

1.11.10 Access to Information.

1.11.10.1 Privacy Act: All contractor personnel assigned to this task will have access to information that may be subject to the Privacy Act of 1974. The contractor shall ensure all assigned contractor personnel are briefed on Privacy Act requirements. The contractor shall ensure that all assigned personnel understand applicable security policies and directives.

Personnel who knowingly violate security policies or directives are subject to removal from any work relating to this contract.

1.11.11 Installation Access: All contractor employees, including subcontractors, shall comply with applicable installation and facility access security policies and procedures at all work and TDY locations. All contractors and subcontractors will be issued a Common Access Card (CAC) or an Installation Pass issued through the Automated Installation entry (AIE) Security System to access the installation. Military installations are limited access posts. Unscheduled gate closures by the military police may occur at any time. In accordance with Army Regulation 525-13, paragraph 5-19, all prospective contractors will undergo a verification process by the installation Provost Marshal Office, Director of Emergency Services to determine the trustworthiness and suitability prior to being granted access to federal property. This will be accomplished using the National Crime Information Center (NCIC) Interstate Identification Index (III). This is the minimum baseline background check for entrance onto Army Installations for non-CAC holders to include entrance of visitors (Ref AR 190-13, paragraph 8- 2). All personnel entering or exiting the installation may experience a delay due to vehicle inspections, registration checks, verification of seat belt use, etc. All vehicles and personnel are subject to search and seizure. The search and seizure provisions shall apply to contractor personnel while within Fort Gordon's area of jurisdiction. Contractor personnel shall comply with all entry control requirements and security policies/procedures in effect. Security procedures may change without notice.

1.12 Identification of contract employees: Contract personnel shall identify themselves as a contractor at all times while on the job, e.g., in the workplace, when attending meetings, in email, when answering Government telephones, or when making phone calls. Contract employees shall wear proper identification, to include their name and company name, in their work area at all times.

1.12.1 ID Badges: The contractor shall provide each contractor employee an identification (ID) badge on contract start date or on employment start date. The ID badge shall be made of nonmetallic material, be easily readable, and shall contain the following minimum information:

1.12.1.1 Employee's name

1.12.1.2 Contractor’s organization

1.12.1.3 Employee's photograph

1.12.2 Display of ID Badges: Contractor personnel shall wear the ID badge at all times when performing work under this contract to include attending Government meetings and conferences.

Unless otherwise specified in the contract, each contract personnel shall wear the ID badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit such placement.

1.12.3 Answering Telephones: Contractor personnel shall identify themselves as contractor employees when answering and making calls on Government telephones.

1.12.4 Utilizing Electronic Mail:

1.12.4.1 When contractor personnel send e-mail messages to Government personnel while performing on this contract, the contractor personnel e-mail addresses and signature blocks shall include the company name together with the person's name.

1.12.4.2 When contractor personnel require access to a Government computer, the employee shall obtain a Common Access Card (CAC). To do so, the contractor employee shall request a CAC through the COR, and shall complete an automated DD Form 1172-2 application through the Contractor Verification System (CVS). NOTE: The Government-issued CAC is the property of the U.S. Government; and the contractor shall returned the CAC to the COR upon expiration, replacement, or termination of the contractor employee. Unauthorized possession of the CAC can be prosecuted criminally under section 701, title 18, United States Code.

1.13 Compliance with Laws and Regulations:

1.13.1 The contractor shall fully comply with local Military Installation, city, state and federal laws, regulations and/or ordinances pertinent to performance of the contractual services required under this contract. It is the responsibility of the contractor to perform services only after necessary clearances and approvals have been obtained.

1.13.2 The contractor and his employees shall observe all rules and regulations issued by the installation Commanding Officer pertaining to fire, safety, sanitation, severe weather, admission to the installation, conduct of operations and so forth on the installations where services are performed. These rules and regulations are available at the local Provost Marshal’s Office.

1.13.3 Fire Regulations: The contractor and associated employees shall observe all rules and regulations issued by the National Board of Fire Underwriter covering storage and use of flammable mixtures, which might constitute a fire hazard.

1.13.4 Safety Regulations: All rules of safety, which are or may be imposed upon the contractor by Federal, State or municipal code, and the applicable installation regulations, shall be effectively carried out in the performance of the service contemplated herein. These rules and regulations are available at the local Provost Marshal’s Office. The contractor shall take proper safety and health precautions to protect the work, the employees, and the public and associated property.

1.13.5 Accident Prevention and Safety Requirements:

1.13.5.1 In order to provide safety controls for protection to the life and health of employees and other persons, for prevention of damage to property, materials, supplies and equipment, and for avoidance of work interruption in the performance of this contract, the contractor shall comply with all pertinent provisions of the Occupational Safety and Health Act of 1970, Public Law 91-

596. The contractor shall also take or cause to be taken such additional measures as the Contracting Officer may determine to be reasonable and necessary for the purpose.

1.13.5.2 The contractor shall maintain an accurate record of, and shall report to the COR in the manner and on the forms prescribed by the COR, exposure data and all accidents resulting in death, traumatic injury, occupational disease and damage to property, materials, supplies, and equipment incident to work performed under this contract.

1.13.5.3 The COR will notify the contractor of any non-compliance with the forgoing provisions and the action to be taken. The contractor shall, after receipt of such notice, immediately take corrective action. Such notice, when delivered to the contractor or its representative at the site of the work, shall be deemed sufficient for this purpose. If the contractor fails or refuses to comply promptly, the Contracting Officer may issue an order stopping all or part of the work until satisfactory corrective action has been taken. No part of the time lost due to any such stop orders shall be made the subject of claim for extension of time or for excess costs or damages by the contractor.

1.13.5.4 The contractor shall be responsible for the performance and conduct of their employees and/or subcontractors at all times while performing under the contract. The contractor shall maintain provisions for the immediate removal of employees from military installations for misconduct or other causes prejudicial to the maintenance of health, welfare, morale or security.

The contractor shall be aware of the Installation Commander's responsibility for the general security and wellbeing of personnel, and shall ensure that personnel removal provisions support the Installation Commander in this regard. The Government has an inherent right under law, practice and regulation, to control access to its facilities, property and data, including those that are the subject of this contract. The Government's exercise of its right to grant and revoke access by particular individual(s) to its facilities will not constitute a breach or change to this contract, regardless of whether said individual(s) are employed by the contractor, and regardless of whether said individuals are thereby precluded from performing work under this PWS. The contractor is required to continue performing the requirements under the PWS.

1.13.5.5 The contractor personnel shall attend the annual Sexual Harassment/Assault Response and Prevention (SHARP) training. The SHARP Program's mission is to reduce with an aim toward eliminating sexual offenses within the Army through cultural change, prevention, intervention, investigation, accountability, advocacy/response, assessment, and training to sustain the All-Volunteer Force.

1.14 Special Qualifications: The Government anticipates that the complexity of the tasks and deliverables defined within this PWS will require the disciplines listed below. Attachment III identifies the Government’s projected estimate of the contractor staffing necessary to perform this contract. That stated, it is the contractor’s responsibility to propose and deploy contractor personnel with the correct labor types, skillsets, mix, and hours required to meet all PWS requirements.

1.14.1 Information Assurance Engineer: The following are the minimum qualifications for information assurance engineers:

1.14.1.1 Possess experience in Information Assurance, Windows and Linux OS.

1.14.1.2 Must have at time of award or within 6 months of start date the following network and Information Technology certifications: U.S. Army Certification and accreditation (C&A);

Department of Defense Information Assurance Certification and Accreditation Process (DIACAP); Certified Information Security System Professional (CISSP) and/or Security Plus/Network Plus Certification; Information Assurance Security Officer (IASO); and Operations Security (OS) Certification.

1.14.1.3 Qualified as a PKI Registration Authority as defined by the U.S. Army CIO/G6;

1.14.2 Communication Analyst Senior: The following are the minimum qualifications for senior communication analysts:

1.14.2.1 Possess relevant experience and extensive knowledge and understanding of performing logistics management operations including planning, coordinating, or evaluating the logistical actions required to support a specified mission, weapons system, or other designated program.

1.14.3 Network Engineer Senior: The following are the minimum qualifications for senior network engineers:

1.14.3.1 Relevant experience and extensive knowledge and understanding of network architecture and IT technology.

1.14.3.2 All Senior Network Engineers shall be ISO certified as follows:

1.14.3.2.1 The Contractor shall meet the applicable information assurance certification requirements, including: DoD-approved information assurance workforce certifications appropriate for each category and level as listed in the current version of DoD 8570.01-M and appropriate operating system certification for information assurance technical positions as required by DOD 8570.01-M.

1.14.3.2.2 Upon request by the Government, the Contractor shall provide documentation supporting the information assurance certification status of personnel performing information assurance functions.

-1.14.4 Network Planning Analyst Senior: The following are the minimum qualifications for senior network planning analysts:

1.14.4.1 Must have the following ISO certifications.

1.14.4.1.1 The contractor shall meet applicable information assurance certification requirements, including: DoD-approved information assurance workforce certifications appropriate for each category and level as listed in the current version of DoD 8570.01-M and appropriate operating system certification for information assurance technical positions as required by DOD 8570.01- M.

1.14.5 Communications Transmission Engineer: The following are the minimum qualifications for communications transmission engineers:

1.14.5.1. Shall have experience working with military communications, networking, and satellite communications to demonstrate proficiency in communications principles, technical analysis, and problem solving.

1.14.6 Communications Integration Engineer

1.14.6.1 Possess relevant experience and extensive knowledge and understanding of performing communications network engineering, integration and operations including planning, coordinating, or evaluating actions required to support a specified mission, weapons system, or other designated program.

1.14.7 Technical Writer:

1.14.7.1 Shall possess relevant experience and extensive knowledge and understanding of network architecture and IT technology including experience writing requirements documents for the developer.

1.14.7.5 Must possess a Secret Security Clearance.

1.14.8 Telecommunications Engineer Senior

1.14.8.1 Relevant experience and extensive knowledge and understanding of network architecture and IT technology including experience writing requirements documents for the developer.

1.14.9 Program Manager:

1.14.9.1 Possess a current PMP certification.

1.15 Contracting Officer’s Representative (COR). The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the contractor concerning technical aspects of the contract; issue written interpretations of technical requirements to include: Government drawings, designs, specifications; monitor contractor's performance and notify both the Contracting Officer and contractor of any deficiencies;

coordinate availability of government furnished property, and provide site entry of contractor personnel. A letter of appointment issued to the COR, a copy of which is sent to the contractor and states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.16 Key Personnel: Certain experienced professional and/or technical personnel are essential for successful performance under this contract. These “Key Personnel” will be US Citizens and shall be identified by name within the Contractor’s proposal and their qualifications shall be submitted for evaluation during the source selection process. The Contractor agrees that such personnel shall not be removed or replaced within the performance of this contract unless the following measures are taken and fully documented in writing.

1.16.1 If one or more of the key personnel, for any reason, becomes or is expected to become unavailable for work under this contract for a continuous period exceeding 30 work days, or is expected to devote substantially less effort to the work than indicated in the proposal or initially anticipated, the Contractor shall, subject to the concurrence of the Contracting Officer, promptly replace personnel with personnel who possess equal, or better, qualifications as the original employee. Key personnel vacancies must be filled within 15 days.

1.16.2 All requests for approval of substitutions hereunder must be in writing and provide a detailed explanation of the circumstances necessitating the proposed substitutions. The request must contain the qualifications for the proposed substitute and any other information requested by the Contracting Officer. The Contracting Officer must concur in writing with the change.

1.16.3. The following personnel (4ea) are considered key personnel and shall meet the qualifications specified within the performance work statement: at least one individual from the following Labor Categories: Information Assurance Engineer, Communications Integration Engineer, Network Planning Analyst Senior, or Communications Transmission Engineer.

1.16.4. Key Personnel must have a Top Secret Security Clearance with Sensitive Compartmented Information (SCI) eligibility.

1.17 Travel: The contractor shall be required to travel within the CONUS and OCONUS to support tasks and requirements described within this PWS. Specific destinations will be determined during contract performance, as needed.

1.17.1 Whenever possible, the COR or related Project Officer will give the contractor 10 working days’ advance notice of a scheduled trip. The COR may change a scheduled trip by giving 2-days advance written notice. The contractor shall provide a cost estimate to the COR and shall obtain the COR’s written approval prior to travel. Travel that is not approved in advance by the COR will not be reimbursed and will be at the contractor’s expense. Trip reports shall be completed per CDRL #0001. Trip reports are due to the COR NLT 5 days after travel per paragraph 5.2.

1.17.2 The contractor shall submit actual travel receipts and invoices for reimbursement citing the appropriate CLIN and the amount claimed for reimbursement. All supporting documentation for travel shall be legible and error free. The contractor will be authorized reimbursement of travel expenses consistent with Federal Acquisition Regulation (FAR) 31.205-46, guidelines within the contract and any funding limitation specified on this contract.