W91249-18-R-0006-0001.pdf

MICC - FORT GORDON

SHANNON L. MCCAULEY 706-791-1832

MISSION DIVISION

SHANNON.L.MCCAULEY3.CIV@MAIL.MIL

FORT GORDON GA 30905-5719

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

The purpose of this admendment is to:

1. Post the Questions and Answ ers.

2. Update the PWS and attachements as needed.

3. Responses are due 31 January 2018, Noon.

1. CONTRACT ID CODE PAGE OF PAGES

S 1 30

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 19-Jan-2018

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X W91249-18-R-0006

X 9B. DATED (SEE ITEM 11)

11-Jan-2018

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

19-Jan-2018

CODE

MICC - FORT GORDON

271 3RD AVENUE, BLDG. 35200

FT GORDON GA 30905

W91249 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE W91249

FACILITY CODECODE

EMAIL:TEL:

W91249-18-R-0006

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

The following items are applicable to this modification:

SUMMARY OF CHANGES

SECTION SF 1449 - CONTINUATION SHEET

PWS

PERFORMANCE WORK STATEMENT (PWS)

United States Army Cyber School

Tech Instructor Support Contract

Period of Performance:

Base Year plus Two Option Year’s

United States Army Cyber School U.S. Army Cyber Center of Excellence (CCoE)

Fort Gordon, Georgia 30905-5000

Part 1 General Information:

1. General: This is a non-personal services contract to provide Instructional and Content Development Support for the Cyber School, Cyber Center of Excellence (CCoE), Fort Gordon, Georgia. This effort will support the Cyber School in conducting training for the Army’s new Cyber Branch. The Government will not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn, is responsible to the Government.

1.1 Description of Services/Introduction: This requirement is to provide the U.S. Army Cyber School with nine

(9) qualified Instructor/Writers that instruct and facilitate adult learning through modern training techniques and methodologies and assist in developing Government-owned Cyberspace Operations (CO) curriculum. Personnel shall meet the standards outlined in established Programs of Instruction (POI), Cyber School training guidance, the USCYBERCOM J7/National Cryptologic Training System (NSA standards per DoDI 3305.09), and DoD Cybersecurity Workforce Framework (i.e. DoD 8570 or 8140) Personnel shall provide support through certified classroom instruction, cyber-lab technical support, operational testing, and curriculum validation IAW the requirements and deliverables of this acquisition. Except for property and services specified as government furnished the contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform instructional support as defined in this Performance Work Statement. The contractor shall perform to the standards in this contract.

1.2 Background: The Cyber School was established to provide trained 17 series personnel (17A, 17C, and 170A) that support the Army’s Cyberspace Operations across USCYBERCOM, ARCYBER, and Cyber Protection Brigade missions. Additionally, the Cyber School has the goal of providing equipment, faculty, and an environment that build Soldiers’ skills and abilities while encouraging a culture of aggressive self-development. As stated in Self Development for Cyber Warriors (Conti, Caroland, Cook, Taylor) "Aggressive self-development is a critical task for the cyber warfare professional. No matter the quality, formal training and education programs age poorly when facing the relentless advance of technology and agile adversaries. Self-development serves as a continuous complement to formal training and fosters the currency and depth of expertise a world class cyber workforce demands."

The structure of the internally developed Cyber Common Technical Core (CCTC) course demonstrates this training mentality. CCTC embraces the adult learning concept by creating an environment that is approximately 80% hands-on and 20% knowledge-based instruction. Students are generally provided a short block of instruction on a high-level concept, such as Public Key Infrastructure, then are assigned associated tasks that build and reinforce knowledge and skill through application. Students are not confined to a particular method of completing a task and are encouraged to think outside of the box. During the task completion phase, the instructor assumes a facilitator role and provides guidance and resources as needed. This method requires a marked change in typical military-style classes and demands a high level of competency from the instructor pool.

1.3. Objectives: Support the instruction and development of Army Cyber School technical and planning courses as described throughout this PWS, and support the training requirements of the Cyber School that include fostering self-development, platform instruction, assessing student performance, maintaining training resources, developing training schedules, managing exams, administering exercises, conducting student assessments, and assisting students with developing, preparing, and practicing presentations. Contractor personnel shall demonstrate model behavior and professionalism at all times. Instruction and curriculum development will be conducted at a clearance up to TOP

SECRET//SCI.

1.4. Scope: Army Cyber School training includes Career Field 17’s (Cyber Operations) Basic Officer Leader Course (BOLC), Captain’s Career Course (CCC), Operations Officer Course (OOC), Advanced Individual Training (AIT), Advanced Leader Course (ALC), Senior Leader Course (SLC), Warrant Officer Basic Course (WOBC), Warrant Officer Advanced Course (WOAC), and other Cyberspace Operations courses as determined by the Army Cyber Commandant. The majority of these courses consist of technical and planning cyber training validated by USCYBERCOM J7, DoD CIO, and the NSA. The contractor shall provide instructional support and training development for the Cyber School. Personnel assigned to this contract shall assist and support the CCoE personnel and shall utilize and develop all training related products IAW all applicable regulations and SOPs (i.e. TRADOC REG 350-70 with appendixes). The Government will own all developed products.

1.5. Period of Performance: The period of performance shall be for one (1) Base Year of 12 months and two (2) 12-month option years. The Period of Performance reads as follows:

Base Year

Option Year I Option Year II

1.6. General Information:

1.6.1. Quality Control: The contractor shall develop and maintain an effective Quality Control Program (QCP) to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s QCP is the means assuring the work and products delivered comply with the requirements of the contract. Cyber School Content Development: The contractor shall utilize qualified personnel who when not instructing shall assist in developing training material and products for all courses assigned to the Cyber School. The contractor shall utilize personnel who possess the knowledge, skills, abilities and experience to develop Cyberspace Operations training IAW all relevant regulations, requirements, and SOPs to include USCYBERCOM J7, National Cryptologic Training System (NSA standards per DoDI 3305.09), and DoD Cybersecurity Workforce Framework (i.e. DoD 8570 or 8140) training standards. All products developed are Government Owned products. The development of a QCP is to ensure services are performed in accordance with this PWS. The QCP shall be delivered within 30 days of start date and within 5 working days when changes are made thereafter. After acceptance of the quality control plan the contractor shall receive the contracting officer’s acceptance in writing of any proposed change to his QC system.

1.6.2 Quality Assurance: The Government will evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the maximum acceptable defect rate(s).

1.6.3 Recognized Holidays: The contractor is not expected to perform services on the following federal holidays:

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day

1.6.4 Hours of Operation: The contractor is responsible for conducting business between the hours of 0800 to 1700 Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential. Shift work may be required. Anticipated shift schedule is as follows:

Day Shift 0800-1700 Swing Shift 1530-0030 Midnight Shift 2330-0830

In the event that personnel assigned to this contract are required for early/late/weekend school retraining of students or needed for classroom observation the anticipated hours are:

Alternate Day Shift 0630-1030 and 1500-1900 Alternate Swing Shift 1300-1700 and 1900-2300 Alternate Midnight Shift 2100-0100 and 0300-0700 Weekend Shift 0830-1330 on Saturdays, with five hours shifted from weekday work

These operating hours and days may vary based on the requirements of the agency. Contractor personnel work schedules may be “flexed” to meet the training needs of the Cyber School for weekend and extended duty periods during regular training and exercises, while still adhering to the standard five-day work week. Overtime will not be authorized.

1.6.5 Place of Performance: Work outlined in the PWS will be performed at various locations within the Cyber School located on Fort Gordon, Georgia 30905-5715. Contractors may be required to travel to attend necessary training/certification and to facilitate Mobile Training Team (MTT) at CONUS and OCONUS locations.

1.6.6 Type of Contract: The government will award a firm fixed price contract.

1.6.7 Security Requirements: Contractor employees performing on this contract must be U.S. citizens. At contract start date all personnel performing on this contract shall have a Top Secret Security Clearance with SCI eligibility, and shall maintain the required security clearance throughout the life of the contract. All contractors shall have a TS/SCI clearance and receive SI/TK/HCS/G/NATO S.

The contractor is responsible for acquiring the clearances. The contractor shall ensure that all assigned personnel understand applicable security policies and directives found in DOD 5220.22-M, National Industry Security Program Operating Manual (NISPOM); AR 380-5, Information Security Program, and all other applicable policies and regulations.

The contractor shall ensure that classified data is controlled, protected, and safeguarded in accordance with AR 380- 5 and current Army and DOD policy. Classified information shall be accessed and stored in government spaces only. The contractor shall agree that any data furnished by the government to the contractor shall be used only for performance under this PWS, and all copies of such data shall be returned to the government upon completion of this effort.

The contractor Facility Security Officer (FSO) will ensure there is a procedure for all terminated employees to out process the installation. Compliance with DD Form 254, Department of Defense Contract Security Classification Specification, is required.

1.6.7.1. Handling/Access to Classified Information: The contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified "Confidential," "Secret," or "Top Secret" and requires contractors to comply with (1) the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M), and (2) any revisions to DoD 5220.22-M. Any adverse action preventing a contractor from retaining access to classified material must be brought to the attention of the COR and contractor Facility Security Officer (FSO) immediately.

1.6.7.2 SIPRNET and JWICS Access: The COR will identify contract employees that are required to have SIPRNET and/or JWICS access. Secret Internet Protocol Network (SIPRNET) and Joint Worldwide Intelligence Communications System (JWICS) access will only be as directed by the Government requirement activity and at government facilities only. Contractors requiring access to the SIPRNET must have a final Secret clearance or Interim TS clearance. Contractors requiring access to JWICS must have a final TS clearance and be indoctrinated for Sensitive Compartmented Information access. Approval by the COR is required prior to granting access.

SIPRNET/JWICS may contain NATO information and a NATO awareness brief and acknowledgement is required for all personnel prior to being granted access to the SIPRNET/JWICS. The NATO Awareness briefing is required to inform personnel how to protect NATO information in the event they come across it while accessing the SIPRNET/JWICS. A written acknowledgment shall be maintained by the COR. The contractor shall not access, download or further disseminate any classified information from SIPRNET/JWICS which is outside the execution of the defined contract requirements unless specifically authorized in writing by the Government Program Manager and the KO. In the event that any special access is required, the KO must modify the requirements and DD 254.

1.6.7.3. Cybersecurity (formerly Information Assurance (IA)/Information Technology (IT)) Training: All contractor employees and associated subcontractors must complete the DoD Cyber Awareness Challenge Training (https://ia.signal.army.mil/DoDIAA) before issuance of network access and annually thereafter. Certificates of successful completion, for both initial awareness training and annual refresher training shall be provided to the COR via the Army Training and Certification Tracking System (ATCTS). All contractor employees will successfully complete all required IA training as specified in AR 25-2 and as directed by the Government. At work performance start date all contractor employees working Cyber Security functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M, DoDD 8140.01, and AR 25-2.

Information Assurance (IA)/Information Technology (IT) Certification. Per DoD 8570.01-M, DFARS 252.239.7001, and AR 25-2, the contractor employees’ supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

1.6.7.4. Annual Security Refresher Training: All contractor employees, including subcontractors, assigned to this contract shall complete the online Annual Security Refresher Training located on the Army Learning Management System (ALMS) site. Log into AKO, “Self Service”, “My Training”, “ALMS”, “Go to Mandatory Training”.

Training must be completed within 30 days of reporting for duty. The contractor shall submit certificate of completion for each contractor and subcontractor employee to the COR and unit/activity security manager. (Ref ALARACT 207/2013, DTG 291848Z Aug 13, Subj: Army Wide Rollout and Requirement for Standardized Computer Web-Based Security Training on the Army Learning Management System (ALMS)).

1.6.7.5. Anti-Terrorism (AT) Level I Training: All contractor employees, including subcontractors, assigned to this contract shall receive an initial Antiterrorism Level I Brief by a certified ATO Level II Officer within 30 days of reporting for duty (Monthly briefings will be offered by the Garrison Antiterrorism Officer). Annual refresher Antiterrorism Level I Training shall be completed on-line at https://jkodirect.jten.mil/Atlas2/faces/page/login/Login.seam or they may attend the monthly training offered by the Garrison ATO. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager (Ref Department of the Army, US Army Contracting Agency, SFCA-CO, 05 Sep 07, subject: Incorporation of Measures into the Contracting Process and AR 525-13, Antiterrorism). Note: Contractor personnel shall receive an AOR briefing when traveling OCONUS on TDY. Briefing must be provided by a certified ATO Level II Officer within 7 working days prior to TDY departure outside the 50 United States, its territories, and possessions. This is separate from the normal annual AT Level I training requirement (Ref AR 525-13).

1.6.7.6. iWATCH: All contractor employees, including subcontractors, assigned to this contract shall receive a brief on the local iWATCH program (provided in conjunction with the AT Level I Training). This training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 days of reporting to duty and annual refresher training with the results reported to the COR.

1.6.7.7. Operation Security (OPSEC) Training: All contractor employees, including subcontractors, assigned to this contract shall complete Level I OPSEC training within 30 days of reporting for duty and then annually thereafter. Initial Level 1 OPSEC training will be conducted monthly by the Garrison OPSEC Officer or a Level II certified OPSEC Officer. Annual refresher training shall be completed on-line at http://cdsetrain.dtic.mil/opsec/index/htm. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. OPSEC training guidelines are contained in AR 530-1, Operations Security. The contractor shall adhere to local OPSEC policies and procedures of the government requiring activity. When in a TDY status in support of this work effort, the contractor shall also adhere to any OPSEC policies and procedures in effect at TDY locations.

1.6.7.8. Threat Awareness and Reporting Program (TARP) Training: All contractor employees, including subcontractors, assigned to this contract shall complete TARP training within 30 days of reporting for duty and then annually thereafter. TARP training will be conducted monthly by the 902nd MI Group. The COR will ensure contractors are notified of available training. Completion of training shall be reported to the COR and the unit/activity security manager (Ref AR 381-12).

1.6.7.9. Installation Access: All contractor employees, including subcontractors, shall comply with applicable installation and facility access security policies and procedures at all work and TDY locations. All contractors and subcontractors will be issued a Common Access Card (CAC) or an Installation Pass issued through the Automated Installation entry (AIE) Security System to access the installation. The Fort Gordon military installation is a limited access post. Unscheduled gate closures by the military police may occur at any time. In accordance with Army Regulation 525-13, paragraph 5-19, all prospective contractors will undergo a verification process by the installation Provost Marshal Office, Director of Emergency Services to determine the trustworthiness and suitability prior to being granted access to federal property. This will be accomplished using the National Crime Information Center (NCIC) Interstate Identification Index (III). This is the minimum baseline background check for entrance onto Army Installations for non-CAC holders to include entrance of visitors (Ref AR 190-13, paragraph 8-2). All personnel entering or exiting the installation may experience a delay due to vehicle inspections, registration checks, verification of seat belt use, etc. All vehicles and personnel are subject to search and seizure. The search and seizure provisions shall apply to contractor personnel while within Fort Gordon's area of jurisdiction. Contractor personnel shall comply with all entry control requirements and security policies/procedures in effect. Security procedures may change without notice.

1.6.7.10. Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Contractor personnel will be required to obtain and wear badges in the performance of this service.

1.6.7.11. ID Badges: The contractor shall provide each contractor employee an identification (ID) badge on contract start date or on employment start date. The ID badge shall be made of nonmetallic material, be easily readable, and shall contain the following minimum information: Employee's Name, Contract Company Name and

Employee's Photograph. Contract employees shall wear proper identification at Government workplaces at all times.

1.6.7.12. Display of ID Badges: Contractor employees shall wear the ID badge at all times when performing work under this contract to include attending government meetings and conferences. Unless otherwise specified in the contract, each contract employee shall wear the ID badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit such placement.

1.6.7.13. Answering Telephones: Contractor employees shall identify themselves as a contract employee when answering and making calls on government telephones.

1.6.7.14. Utilizing Electronic Mail: When contractor employees send e-mail messages to government personnel while performing on this contract, the contractor employee's e-mail address shall include the company name together with the person's name (ex: John Smith, Contractor, ABC Company). When contractor employees require access to a government computer, the contractor employee shall be required to obtain a Common Access Card. To do so, the contractor employee shall request a CAC Card through the COR. NOTE: The government issued CAC is the property of the U.S. Government and shall be returned to the COR upon expiration of the contract, replacement or termination of the contract employee (CAC card must be turned in to the COR on contractor employee's last day of employment). Unauthorized possession of the CAC can be prosecuted criminally under section 701, title 18, United States Code. All contractor employees shall conduct official communication using Government-owned or provided e-mail, networks, websites, systems, and devices. The use of commercial ISP e-mail accounts or personal e-mail accounts to conduct official communication is prohibited. Remote access / telework technology may be leveraged to ensure compliance with these requirements. Contractor employees are prohibited from using Army-assigned, AKO, and other official e-mail addresses for unofficial business affiliations. Personnel shall not provide official e-mail addresses to businesses, affiliated organizations, or online retailers; unless those entities are known by personnel to be legitimately engaging in official business.

1.6.7.15. Eligibility Verification for Employment: E-Verify is an Internet-based system that compares information from an employee's Form I-9, Employment Eligibility Verification, to data from U.S. Department of Homeland Security and Social Security Administration records to confirm employment eligibility. The U.S.

Department of Homeland Security is working to stop unauthorized employment. By using E-Verify to determine the employment eligibility of their employees, companies become part of the solution in addressing this problem. All U.S. employers must complete and retain a Form I-9 for each individual they hire for employment in the United States. This includes citizens and noncitizens. On the form, the employer must examine the employment eligibility and identity document(s) an employee presents to determine whether the document(s) reasonably appear to be genuine and relate to the individual and record the document information on the Form I-9. The list of acceptable documents can be found on the last page of the form. E-Verify is mandatory for employers with federal contracts or subcontracts that contain the Federal Acquisition Regulation E-Verify clause.

NOTE: The government issued CAC is the property of the U.S. Government and shall be returned to the COR upon expiration of the contract, replacement or termination of the contract employee. (CAC card must be turned in to the COR on contractor’s last day of employment.) Unauthorized possession of the CAC can be prosecuted criminally under section 701, title 18, United States Code.

1.6.7.16 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured.

1.6.7.17 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons.

NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government will be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.7.18. Lock Combinations: The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations.

These procedures shall be included in the Contractor’s Quality Control Plan.

1.6.7.19 Contractor Verification System (CVS)/Trusted Agent Sponsorship System: Contractor User Guide see http://www.uscg.mil/hq/cg-85/CVS/Training/Contractor%20User%20Guide.htm, Additional Program Information see http://www.uscg.mil/hq/cg-85/CVS/CVS.htm

1.6.7.20 Common Access Card (CAC): Contractor must obtain a CAC for those employees whose functions require access to systems or facilities controlled by the Common Access Card. Contractor Representative will notify government CVS Trusted Agent (TA) of new employee CAC requirements. Company representative must provide all personnel data required to process CVS application with the TA, including security investigation requirements.

Contractor employee will obtain CAC at DEERS/RAPIDS terminal when the application is approved. Contractor employee will inform Corporate Facility Security Officer (FSO)/Security Manager of approval/denial of CAC application, and will return CAC to Corporate FSO upon departure or dismissal. Contractor is responsible for implementation and follow-up. Failure, inability, or delay in obtaining the CAC does not relieve the contractor from performing under the terms of the contract.

1.6.8. Staffing and Personnel: The contractor is responsible for the overall management and oversight of this contract. It is the contactor’s responsibility to staff and deploy qualified contractor personnel to meet all of the PWS requirements. The Government anticipates the requirements within this PWS will require the following labor categories. Operating Systems Instructor/Content Developer Services, Networking Instructor/Content Developer Services, Program Management. The Government’s historical staffing data is provided under Technical Exhibit 2.

The Contractor shall be responsible to propose and deploy the correct labor types, mix, number and hours required to satisfactorily and professionally meet all PWS requirements. The Government anticipates the requirements within this PWS shall require the following labor categories Program Manager, Networking Systems Instructor/Content Developer and Operating Systems Instructor/Content Developer.

1.6.8.1. All Contract Personnel:

Possess a Single Scope Background Investigation (SSBI) for appropriate level security clearance (TS/SCI); possess a National Agency Check with Local Agency and Credit Check (NACLC) for appropriate level security clearance (Secret); and maintain the required security clearance throughout the life of the contract.

Possess and maintain a valid driver’s license.

Have a full TS, with SCI eligibility at the award of the contract.

Possess and maintain all required training as stated throughout this PWS.

Possess skills/knowledge of performing office automation work that includes word processing, electronic mail, spreadsheets, presentations, and other personal computer applications; typing a variety of materials from rough draft into final form including narrative and tabular material, e.g., correspondence, reports, and forms; maintaining records, historical records, survey results, reference library of training catalogs, regulations and other miscellaneous publications;

establishing and maintaining office functional files and reference files; knowledge management applications e.g., SharePoint, Army training requirements and resources system (ATRRS), and Blackboard.

Graduated the Support Cadre Training Course (SCTC) and either the Army Basic Instructor Course (ABIC) or the Foundation Instructor Facilitator Course (FIFC).

1.6.8.1.1. Operating Systems Instructor/Content Developer:

Must have in-depth knowledge of operating system concepts such as processes, threads, context switching, user mode/kernel mode, synchronization, IO and CPU Scheduling and their associated algorithms, memory management, and filesystems, and X86 assembly

Must have knowledge of the aforementioned in Windows, GNU/Linux, and BSD Must be proficient with and able to complete both LFS and BLFS (Linux from Scratch/Beyond

Linux from Scratch) Must be proficient in C, PowerShell and Bash Scripting Must be proficient with both the Linux API and Windows API (win32 & UWP) Must have experience in instructing the aforementioned topics Must be proficient with systems exploitation without the assistance of toolkits Must be proficient with reverse engineering patches to discover the original vulnerabilities Must have a deep and thorough understanding of Regular Expressions and Context-Free

Grammars

1.6.8.1.2. Networking Systems Instructor/Content Developer:

Must have networking expertise and experience equivalent to the CCNP level or GIAC Certifications.

Must be able to build, secure, and exploit network infrastructure comprised of varied equipment and topology.

Must understand networking from both the theoretical & practical perspectives Must be proficient with reading and understanding Requests for Comment (RFC) Must be proficient with taking an RFC for a networking protocol and creating a compliant implementation from scratch Must be proficient in Python Must understand Software Defined Networking (SDN) Must have experience in instructing the aforementioned topics Must be proficient with networking exploitation without the assistance of toolkits Must be proficient with reverse engineering patches to discover the original vulnerabilities

1.6.8.1.3. Program Management: The PM is the key point of contact for this effort and is considered Key personnel. The PM shall supervise, coordinate work schedules, resolve minor concerns/issues and complete the administrative tasks associated with this PWS. The PM shall be familiar with all duties and qualifications stated in the PWS.

Shall have at least ten years management experience or equivalent on similar government contracts.

Shall ensure all deliverables described in the PWS are delivered on time.

Provide analysis of project requirements and accurate cost estimates.

Provide project coordination and process improvements thru the Quality Control Plan.

Provide and gather required information to assist with coordination support efforts.

Be proficient in conflict resolution.

Possess the skill sets to supervise contractor employees.

Be capable of coordinating work schedules/assignments of contractor employees.

Be able to communicate orally and via writing with the COR.

1.6.8.3. Contractor Replacement: The contractor shall replace, within twenty-one (21) business days, any contract personnel found to be unqualified or otherwise determined unsuitable by the government. This twenty-one day timeframe also includes any contract instructors who submit their resignation under the current contract.

1.6.8.4. Required certifications and/or training certificates shall be presented to the COR upon hire. Certification requirements that change during the life of the contract must be approved by the COR. Contractors will be given 60 calendar days from the start date of this contract to obtain required certificate(s) of training and certification with the exception of the clearance; only 10 business days will be allotted to rectify clearance issues. Any training provided by the Government to contractor personnel, with the exception of mandatory security training listed throughout section 1.6 of this PWS, is subject to collection of reimbursement from the contractor for the full burdened cost of training. All contract employees shall possess experience with Army-standard desktop applications and configurations, i.e., daily reporting programs, and Army Gold Master (AGM) configurations. The government will exercise the right, if deemed necessary, to select an appropriate method (pretest, hands on practical exercise, etc.) to determine if the contractor is qualified/suitable to perform the requirements stated in section 1.6.4 through 5.8.

See TRADOC Reimbursement Chart in Attachments.

1.6.8.5. Government Provided Training: The Contractor shall reimburse the Government for any training provided by the Government to contractor personnel, with the exception of mandatory security training listed in sections 1.6.7.3, 1.6.7.4, 1.6.7.5, 1.6.7.6, and 1.6.7.7 and 1.6.7.8 of this PWS. Reimbursement shall be for the fully burdened cost of training. Below is a reimbursement tuition rate chart per student that should be used when determining the cost for government training of Federal but Non-DOD personnel and Non-Federal Personnel.

1.6.9. Post Award Conference/Periodic Progress Meetings: The contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation (FAR) Subpart 42.5. The Contracting Officer (KO), Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the Contracting Officer will apprise the contractor of how the government views the contractor's performance and the contractor shall apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

1.6.10. Contracting Officer’s Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract;

perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, and specifications; monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property; and, provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.11. Key Personnel: The Program Manager (PM) and Site Lead as determined by the contractor are considered Key Personnel by the Government. Qualifications for Key personnel are primarily located throughout paragraph 1.6 of the PWS. The Program Manager shall be responsible for the performance of the work. The name of this person and an alternate for the contractor when the PM is absent shall be designated in writing to the contracting officer.

The PM or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The PM or alternate shall be available from 8:00 a.m. to 5:00 p.m., Monday thru Friday except Federal holidays or when the government facility is closed for administrative reasons.

1.6.12. Contractor Travel: Contractors may be required to travel within the Continental United States (CONUS) to participate in training conferences, attend necessary training/certification, and to facilitate Mobile Training Team (MTT) at CONUS and OCONUS locations. Contractor will be authorized travel expenses consistent with the substantive provisions of the Joint Travel Regulation (JTR) and the limitation of funds specified in this contract. All travel requires Government approval/authorization and notification to the COR.

1.6.13. Data Rights: The Government has unlimited rights to all documents/material produced under this contract.

All documents and materials produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the Contracting

Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.14. Privacy Act: All contract personnel assigned to this task shall have access to information that may be subject to the Privacy Act of 1974. The contractor is responsible for ensuring all assigned contract personnel are briefed on Privacy Act requirements.

The contractor shall ensure that all assigned personnel understand applicable Security policies and directives.

Personnel who knowingly violate security policies or directives are subject to immediate removal from any work relating to this contract.

Contractor personnel shall have routine and unavoidable access to proprietary information which they are required to protect. Personnel applied to the tasks in this PWS may not work on other tasks for the contractor or for any other agency without a formal written request, and written consent granted by, the contracting officer.

1.6.15. Uses and Safeguarding of Information: Information from the secure web site is considered to be proprietary in nature when the contract number and contractor identity are associated with the direct labor hours and direct labor dollars. At no time will any data be released to the public with the contractor name and contract number associated with the data.

1.6.16. Subcontract Data: The contractor shall ensure that all reportable subcontract data is reported IAW the PWS and to this data collection web site (citing this contract/order number). At the discretion of the prime contractor, this reporting may be done directly by subcontractors to the data collection site; or by the prime contractor after consolidating and rationalizing all significant data from the subcontractors.

1.6.17. Reporting Flexibility: Contractors are encouraged to communicate with the Help Desk identified at the data collection web site to resolve reporting difficulties. Changes to facilitate reporting may be authorized by the contracting officer or the Help Desk (under HQDA policy direction and oversight).

1.6.18. Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI. The contractor shall not divulge any information accessed and obtained during the course of performing this task to other contractor staff or anyone outside the government. In addition to any organizational conflict of interest provision, contractor personnel assigned to this contract shall be required, prior to beginning work, to sign a non-disclosure statement for the government agreeing not to share any information or data with other contractor personnel not assigned to the project or, if assigned to the project, who has not signed such a non-disclosure statement. Signed nondisclosure statements shall be furnished to the COR prior to contract performance. The company shall include as part of its Request for Quote (RFQ) submission, its plan to “firewall” these contract personnel and enforce this provision (i.e., internal controls, training, etc.). Failure to adhere to these non-disclosure safeguards may result in termination of this task. Final authorship and copyright (if required) of any deliverables shall reside with the government. The contractor shall not gain any unfair advantage. The contractor shall identify any organizational conflict of interest clauses they or their subcontractors are subject to, current or within three years of federal government contract services, by providing, with their offer, a copy of the clause, a description of the contract services performed, a contract number, a governmental point of contact, and a phone number for that point of contact.

1.6.19. Phase In / Phase Out Period: N/A

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1. DEFINITIONS:

2.1.1. CONTRACTOR: A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER: A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE (COR): An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. DELIVERABLE: Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

2.1.5. KEY PERSONNEL: Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.6. PHYSICAL SECURITY: Actions that prevent the loss or damage of Government property.

2.1.7. QUALITY ASSURANCE: The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.8. QUALITY ASSURANCE SURVEILLANCE PLAN (QASP): An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.9. QUALITY CONTROL: All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.10. SUBCONTRACTOR: One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.1.11. WORK DAY: The number of hours per day the Contractor provides services in accordance with the contract.

2.1.12. WORK WEEK: Monday through Friday, unless…