W91249-20-R-0003 G6 Information Technology Solicitation.pdf

SEE ADDENDUM

(No Collect Calls)

W9124920R0003 21-Nov-2019

b. TELEPHONE NUMBER

706-791-9208

8. OFFER DUE DATE/LOCAL TIME

11:00 AM 06 Jan 2020

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA X ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

W912499. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

SHERRILYN U. RICE

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

1 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.X

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

0011266223-0005

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED OR X

SMALL BUSINESS

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

MICC - FORT GORDON

271 HERITAGE PARK LANE

BLDG. 35200

FT GORDON GA 30905

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE W58MUU 16. ADMINISTERED BY

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

W58MUU

CYBER CENTER OF EXCELLENCE

506 CHAMBERLAIN AVE

FORT GORDON GA 30905

TEL: FAX:

706-791-8651FAX:

TEL: 706-791-1800 SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

X 8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$30,000,000

NAICS:

541512

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

W9124920R0003

Section SF 1449 - CONTINUATION SHEET

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1 Job G6 IT Support

FFP

The contractor shall provide all necessary management, supervision and other labor required to successfully perform non-personal G6 Information Technology support services in accordance with the Performance Work Statement (PWS) and other areas of the solicitation.

FOB: Destination

PURCHASE REQUEST NUMBER: 0011266223-0005

PSC CD: R425

NET AMT

0002 1 Job Travel

COST

Travel IAW the PWS. Includes all Travel approved in advance by the Contracting Officer in accordance with PWS. Approved Travel costs shall be reimbursed in accordance with the Joint Travel Regulations, FAR 31.205-46 and shall be a Not to- Exceed Amount of $15,000.00. Profit, G&A and handling fees are not allowable.

FOB: Destination

PURCHASE REQUEST NUMBER: 0011266223-0005

ESTIMATED COST

0003 1 Job Other Direct Cost (ODC)

COST

ODC's IAW the PWS. All expenses associated with this CLIN shall be provided in writing to the Government for approval prior to execution. Costs are reimbursable up to the Not-To-Exceed (NTE) amount of $25,000.00 as the CLIN total amount. Profit and handling fees are not allowable.

FOB: Destination

0004 1 Each Contract Manpower Reporting

FFP

Contractor is required to provide data on Contractor labor hours (including subcontractor labor hours) for performance of this contract IAW the PWS. The cost, if any, for providing this data shall be entered into the space provided at this CLIN. If no direct cost is associated with providing the data, enter “No Cost”.

Instructions, including the Contractor and Subcontractor User Guides, are available at http://www.ecmra.mil.

1001 1 Job OPTION G6 IT Support

FFP

The contractor shall provide all necessary management, supervision and other labor required to successfully perform non-personal G6 Information Technology support services in accordance with the Performance Work Statement (PWS) and other areas of the solicitation.

1002 1 Job OPTION Travel

FFP

Travel IAW the PWS. Includes all Travel approved in advance by the Contracting Officer in accordance with PWS. Approved Travel costs shall be reimbursed in accordance with the Joint Travel Regulations, FAR 31.205-46 and shall be a Not to- Exceed Amount of $15,000.00. Profit, G&A and handling fees are not allowable.

1003 1 Job OPTION Other Direct Cost (ODC)

COST

ODC's IAW the PWS. All expenses associated with this CLIN shall be provided in writing to the Government for approval prior to execution. Costs are reimbursable up to the Not-To-Exceed (NTE) amount of $25,000.00 as the CLIN total amount. Profit and handling fees are not allowable.

1004 1 Each OPTION Contract Manpower Reporting

FFP

Contractor is required to provide data on Contractor labor hours (including subcontractor labor hours) for performance of this contract IAW the PWS. The cost, if any, for providing this data shall be entered into the space provided at this CLIN. If no direct cost is associated with providing the data, enter “No Cost”.

Instructions, including the Contractor and Subcontractor User Guides, are available at http://www.ecmra.mil.

2001 1 Job OPTION G6 IT Support

FFP

The contractor shall provide all necessary management, supervision and other labor required to successfully perform non-personal G6 Information Technology support services in accordance with the Performance Work Statement (PWS) and other areas of the solicitation.

2002 1 Job OPTION Travel

COST

Travel IAW the PWS. Includes all Travel approved in advance by the Contracting Officer in accordance with PWS. Approved Travel costs shall be reimbursed in accordance with the Joint Travel Regulations, FAR 31.205-46 and shall be a Not to- Exceed Amount of $15,000.00. Profit, G&A and handling fees are not allowable.

2003 1 Job OPTION Other Direct Cost (ODC)

COST

ODC's IAW the PWS. All expenses associated with this CLIN shall be provided in writing to the Government for approval prior to execution. Costs are reimbursable up to the Not-To-Exceed (NTE) amount of $25,000.00 as the CLIN total amount. Profit, and handling fees are not allowable.

2004 1 Each OPTION Contract Manpower Reporting

FFP

Contractor is required to provide data on Contractor labor hours (including subcontractor labor hours) for performance of this contract IAW the PWS. The cost, if any, for providing this data shall be entered into the space provided at this CLIN. If no direct cost is associated with providing the data, enter “No Cost”.

Instructions, including the Contractor and Subcontractor User Guides, are available at http://www.ecmra.mil.

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government 0002 Destination Government Destination Government 0003 Destination Government Destination Government 0004 Destination Government Destination Government 1001 Destination Government Destination Government 1002 Destination Government Destination Government

1003 Destination Government Destination Government 1004 Destination Government Destination Government 2001 Destination Government Destination Government 2002 Destination Government Destination Government 2003 Destination Government Destination Government 2004 Destination Government Destination Government

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 POP 29-MAR-2020 TO

28-MAR-2021

N/A W58MUU

CYBER CENTER OF EXCELLENCE

506 CHAMBERLAIN AVE

FORT GORDON GA 30905

W58MUU

0002 POP 29-MAR-2020 TO

28-MAR-2021

N/A (SAME AS PREVIOUS LOCATION)

0003 POP 29-MAR-2020 TO

28-MAR-2021

N/A (SAME AS PREVIOUS LOCATION)

0004 28-MAR-2021 1 (SAME AS PREVIOUS LOCATION)

1001 POP 29-MAR-2021 TO

28-MAR-2022

N/A (SAME AS PREVIOUS LOCATION)

1002 POP 29-MAR-2021 TO

N/A (SAME AS PREVIOUS LOCATION)

1003 POP 29-MAR-2021 TO

N/A (SAME AS PREVIOUS LOCATION)

1004 28-MAR-2022 1 (SAME AS PREVIOUS LOCATION)

2001 POP 29-MAR-2022 TO

28-MAR-2023

N/A (SAME AS PREVIOUS LOCATION)

2002 POP 29-MAR-2022 TO

N/A (SAME AS PREVIOUS LOCATION)

2003 POP 29-MAR-2022 TO

N/A (SAME AS PREVIOUS LOCATION)

2004 28-MAR-2023 1 (SAME AS PREVIOUS LOCATION)

PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS)

US Army Cyber Center of Excellence, Fort Gordon, Georgia

G6 Information Technology Services

Part 1

General Information

1.0 General: This is a non-personal services contract to provide Cyber Center of Excellence (CCoE) G6 Information Technology (IT) Services. Consistent with FAR 37.104 guidance, the Government will not exercise supervision or control over the contractor personnel. The contractor is responsible for the conduct and performance of contractor personnel.

1.1 Description of Services/Introduction: The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform G6 Information Technology Services as defined in this Performance Work Statement except for those items specified as Government furnished property and services. The Contractor shall perform to the standards in this contract.

1.2 Background: The Office of the G6 is a primary staff section to the Commanding General (CG) Cyber Center of Excellence and Fort Gordon Senior Mission Commander. Under the Mission Command concept the G6 receives guidance and orders from the following Headquarters (HQs): Combined Arms Center (CAC) G6, Training and Doctrine Command (TRADOC) G6, HQ Department of the Army (DA) Chief Information Officer (CIO)/G6; Army G2, Defense Information Systems Agency (DISA), and Army Cyber Command (ARCYBER). All formal directives must go through the CCoE G3 and be approved the CCoE’s Chief of Staff (CofS). The G6 works to ensure CCoE CG’s priorities are supported by capabilities. The G6 recognizes the rapid rate of change in today’s environment, especially as it pertains to Cyber, Signal and IT equipment and training. A G6 is necessary in order to address and meet the challenges of these rapid changes and to further support enhancement and maintenance of the CCoE’s IT requirements.

1.3 Objectives. This PWS will support the CCoE G6 mission to provide IT services and support at the Non-Secure Internet Protocol Router (NIPRNET), Secure Internet Protocol Router (SIPRNET), and Joint Worldwide Intelligence Communications System (JWICS) levels for the CCoE and all school through the following: Cyber Security, Training Network, Operations, IT Project Management, IT Procurement, and Enterprise Service Desk.

The G6 Information Technology Services contract will provide results in the form of the following but not limited to:

• Establishing, maintaining, and supporting the CCoE Training Network

• Providing enforcement and management of Cyber Security policies and programs

• Providing consolidated Service Desk support of the training and operational environment.

• Creating, reviewing, maintaining, and providing assistance with IT Acquisition Management and Oversight

(AMO) packets

• Simultaneously managing multiple, diverse IT projects and IT Enterprise level solutions across multiple

CCoE organizations

• Providing day to day Operations support to G6

1.4 Scope:

1.4.1. This PWS defines the requirements and acceptable performance levels for execution. The Contractor shall perform all administrative services, (i.e. software and material requests), quality control (QC), and correspondence, in order to meet service requirements. The Contractor shall acquire and maintain accurate and complete records, files and libraries of documents (if not Government-Furnished as identified) to include Federal, State, and local regulations, codes, laws, technical manuals and manufacturer’s instructions and recommendations, which are necessary and related to the services being provided. The Contractor shall provide support to the CCoE as defined in this PWS. The Contractor shall also assist the CCoE on IT projects and taskings sent down from higher headquarters (HHQ) (to include TRADOC and CAC).

1.4.1.a. Training Network – The Training Network will expand over the next year to be a virtual environment to support Signal and Cyber School Programs of Instruction (POI) for up to 6000 simultaneous users. This project consists of multiple phases and will continuously be evolving to support a world-class training environment.

Training Network personnel will be required to engineer, install, deploy, operate and maintain the environment and ensure adequate resources are provided to support the requirements within the POI. The virtualization efforts will also include integrating tools such as Cisco Modeling Labs or an equivalent to allow physical labs to be replaced with virtual labs. The architecture is being expanded to support additional users, eventually growing to the ability to support 6000 separate virtualized sessions. The training network is required to virtualize content provided by the various Schools. As new requirements are identified by Signal and Cyber Schools there will be additional engineering, design, and implementation required to support this evolving environment. Assumptions/Exceptions:

• The Government provides hardware and software required to meet desired end-state in a timely manner.

• Network bandwidth will be adequate to support VDI environment.

• Enterprise and security services are provided by the Government and integrated into the environment by the

Contractor on the DODIN network.

• The Contractor will be able to virtualize over 95% of provided content and applications for deployment from the Training Network

1.4.1.b. Enterprise Division - Ability to Manage a Help desk that supports 5 networks across multiple Security Classifications such as Non-Classified Internet Protocol Router Network (NIPR), Secure Internet Protocol Router (SIPR), Joint Worldwide Intelligence Communications System (JWICS), Visual Information Systems (VIS), and the training network that encompasses over 50 different locations with over 16,000 clients supporting the administrative and training environment.

1.4.2. The contractor will conduct an annual IT inventory of all hardware and software components managed/maintained by the CCoE G6 and provide an updated IT inventory on a quarterly basis (CDRL A006). The IT inventory will collect specific information required to support the CCoE G6 in meeting multiple requirements such as Life Cycle Management, the Tenant Security Plan (TSP), and other taskings as identified. The information required for the completed IT inventory will be collected through both technical and physical means including visiting each building as necessary. Inventory will be updated as new hardware and software are procured and added to the network by the CCoE G6.

1.5 Period of Performance: The period of performance shall be for one (1) Base Year of 9 months and two (2) 12-months Option Year's. The Period of Performance reads as follows:

Base Year 29 March 2020 – 28 March 2021 Option Year I 29 March 2021 – 28 March 2022 Option Year II 29 March 2022 – 28 March 2023

1.6 General Information

1.6.1 Quality Control: The Contractor shall develop and maintain an effective Quality Control Program (QCP) to ensure services are performed in accordance with this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract. The initial QCP shall be delivered with the Contractor’s proposal. After award, the final QCP shall be delivered within 30 days of start date and within 5 working days when changes are made thereafter. After acceptance of the QCP, the Contractor shall receive the Contracting Officer’s acceptance in writing of any proposed change to their QC system.

1.6.2 Quality Assurance: The Government will evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the maximum acceptable defect rate(s).

1.6.3 Recognized Holidays: The Contractor is not required to perform services on holidays. Holidays falling on a Saturday will be observed on the preceding Friday. Holidays falling on a Sunday will be observed on the following Monday. In addition to the days designated as holidays, the Government recognizes any other day designated by Federal Statute, Executive Order or Presidential Proclamation.

New Year’s Day 1st day of January Martin Luther King Jr.’s Birthday 3rd Monday of January President’s Day 3rd Monday of February Memorial Day Last Monday in May Independence Day 4 July Labor Day 1st Monday of September Columbus Day 2nd Monday of October Veteran’s Day 11th day of November Thanksgiving Day 4th Thursday of November Christmas Day 25th day of December

1.6.4 Hours of Operation: The Contractor is responsible for conducting business between the core hours of 0730 to 1700 with a lunch conducted in accordance with company policy, unless otherwise specified in the G6 Division-specific work hours identified below. Contractors may be required to flex hours in the event of a mission critical requirement or event (i.e. system outage, project deadline, etc.). Overtime is not authorized. Unless otherwise directed, the Contractor workdays will be Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. For other than firm fixed price contracts, the Contractor shall not be reimbursed when the Government facility is closed for the above reasons. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential.

o Procurement Services: 0730-1630. However, work hours may be required to flex hours during peak end of year (EOY) procurement processing (generally Aug – Sept) and other emergency procurement situations with little notice.

o Operations: 0730-1630 o Cyber Security: 0730-1630 o Enterprise: Staggered coverage required between the hours of 0700-1730. Two Contractor personnel must remain present for duty with a minimum of one during the hours of 1130-1300.

• Additionally a minimum of two Contractor personnel must be present for duty at the Cyber

Training Facility (CTF), which is a Sensitive Compartmented Facility (SCIF) between the hours of 0700-1630 with at least one present during the hours of 1130-1300.

• The Contractor shall have an additional Linux system administrator that is assigned to the CTF that is not included in the numbers of Contractor personnel above o Training Network: Staggered coverage required between the hours of 0700-1730. Must maintain two Contractor personnel during the hours of 1130-1300. Must stagger Contractor personnel to accommodate coverage of 0700-1730.

• For operational emergency support required outside of normal operations (0700-1730), the COR will notify the PM immediately of the requirement. Regardless of support required

(remote or on site), required Contractor response time is two (2) hours. PM and COR or Division TPOC will be responsible for ensuring Contractor has building/room access to affected area(s) and/or system access, as required.

• When unexpected events arise requiring work schedule adjustments to meet mission requirements (i.e. end of year procurement deadlines, unexpected IT issues with Enterprise Service Desk support, Cyber Security accreditation deadlines, etc.) contract personnel work schedules may be “flexed” to meet mission requirements while still adhering to the standard five-day work week. Flexed schedules must be coordinated between COR and PM.

1.6.5 Place of Performance: The majority of work, under this contract, will be performed at CCoE on Fort Gordon, Georgia. There is potential requirement for support to short term projects and mission requirements that would require travel in support of this contract.

1.6.6 Type of Contract: The Government will award a firm fixed price contract.

1.6.7 Security Requirements: Contractor employees performing on this contract must be U.S. citizens. At contract start date and through the life of the contract, a minimum of 20 (twenty) Contractors identified in Exhibit 3, Workload Data, must have a final Top Secret security clearance with Sensitive Compartmented Information (TS/SCI) as well as meet position requirements IAW PWS at contract start date. All other Contractors shall have a minimum of a final Secret Security Clearance and will be initiated by their Facility Security Officer (FSO) for TS/SCI within 30 days of onboard; and shall maintain the required security clearance throughout the life of the contract. The Contractor is responsible for acquiring the clearances and maintaining a minimum of 20 TS cleared personnel with SCI read on at all times. The Contractor shall possess and maintain a TOP SECRET facility clearance from the Defense Security Service.” in this paragraph as well. The security requirements are in accordance with the attached DD Form 254, Department of Defense Contract Security Classification Specification. The Contractor shall ensure that all assigned personnel understand applicable security policies and directives found in DOD 5220.22-M, National Industry Security Program Operating Manual (NISPOM); AR 380-5, Information Security Program; and all other applicable policies and regulations..

1.6.7.1 Physical Security: The Contractor shall be responsible for safeguarding all Government equipment, information and property provided for Contractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured. The Contractor shall ensure that classified data is controlled, protected, and safeguarded in accordance with AR 380-5 and current Army and Department of Defense (DOD) policy.

Information shall be accessed and stored in Government spaces only appropriate to the classification level. The Contractor shall agree that any data furnished by the Government to the Contractor shall be used only for performance under this PWS, and all copies of such data shall be returned to the Government upon completion of this effort.

1.6.7.2 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons.

NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government will be duplicated. The Contractor shall develop procedures covering key control that shall be included in the QCP. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

1.6.7.2.1 In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.6.7.2.2 The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.7.3 Lock Combinations: The Contractor shall establish and implement methods of ensuring that not all lock combinations are revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s QCP.

1.6.7.4 Communications Security (COMSEC): Classified COMSEC material is not releasable to Contractor employees who have not received a final clearance at the appropriate security level. COMSEC access shall be IAW DOD 5220.22-M and AR 380-40. When access is required at Government facilities, Contractor personnel will adhere to COMSEC rules and regulations as mandated by Command policy and procedures. Written concurrence of the contracting office (KO) is required prior to subcontracting.

1.6.7.5 Handling/Access to Classified Information: The Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified Confidential, Secret, or Top Secret and requires Contractors to comply with (1) the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M), and (2) any revisions to DoD 5220.22-M.

1.6.7.6 SIPRNET and JWICS: SIPRNET and JWICS access will only be as directed by the Government requiring activity and at Government facilities only. Contractors requiring access to the SIPRNET must have a final Secret clearance or Interim TS clearance. Contractors requiring access to JWICS must have a final TS clearance and be indoctrinated for SCI access. Approval by the COR is required prior to granting access. SIPRNET/JWICS may contain NATO information and a NATO awareness brief and acknowledgement is required for all personnel prior to being granted access to the SIPRNET/JWICS. The NATO Awareness briefing is required to inform personnel how to protect NATO information in the event they come across it while accessing the SIPRNET JWICS. A written acknowledgment shall be maintained by the COR before leaving the NATO Awareness briefing, the Contractor should request a copy of the signed agreement to provide to the COR. The Contractor shall not access, download or further disseminate any classified information from SIPRNET/JWICS, which is outside the execution of the defined contract requirements unless specifically authorized in writing by the Government Program Manager and the KO. In the event that any special access is required, the KO must modify the requirements and DD 254.

1.6.7.7 Information Assurance (IA)/Information Technology (IT) Training: All Contractor employees and associated subcontractors must complete the DoD Cyber Awareness Challenge Training (https://cs.signal.army.mil) before issuance of network access and annually thereafter. Certificates of successful completion, for both initial awareness training and annual refresher training shall be provided to the COR. All Contractor employees will successfully complete all required IA training as specified in AR 25-2 and as directed by the Government. All Contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M, and AR 25-2.

1.6.7.8 Fort Gordon Network Access: Contractor employees, to include subcontractors, requiring access to information systems to fulfill their duties must possess the required favorable security investigation. The IASO/IANO from the activity that the Contractor employee is assigned to, will submit an electronic DD 2875, System Authorization Access Request (SAAR) to the CCoE G2 for verification that the Contractor employee meets the requirements of AR 25-2 for accessing the Fort Gordon network. (Ref AR 25-2)

1.6.7.9 Cybersecurity/Information Technology (IT) Certification: Per DoD 8570.01-M, DFARS 252.239.7001 and AR 25-2, the Contractor employees' supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award. Current guidance on baseline certifications can be found at Technical Exhibit 4, DoD 8570 Baseline Certifications, and further identified in section 1.6.8, Special Qualifications, where required, by position.

1.6.7.10 Information Security Program Training: All Contractor employees, including subcontractors, assigned to this contract shall complete the online Information Security Program Training located on the Army Learning

Management System (ALMS) site. Log into AKO, “Self Service”, “My Training”, “ALMS”, “Go To Mandatory Training”. Training must be completed within 30 days of reporting for duty and annually thereafter. The Contractor shall submit certificate of completion for each affected Contractor employee and subcontractor employee to the COR and unit/activity security manager. (Ref ALARACT 207/2013, DTG 291848Z Aug 13, Subj: Army Wide Rollout and Requirement for Standardized Computer Web-Based Security Training on the Army Learning Management System (ALMS)).

1.6.7.11 Anti-Terrorism (AT) Level I Training: All Contractor employees, including subcontractors, assigned to this contract shall receive an initial Antiterrorism Level I Brief by a certified ATO Level II Officer within 30 days of reporting for duty (monthly the Garrison Antiterrorism Officer will offer briefings). Annual refresher Antiterrorism Level I training shall be completed on-line at https://jkodirect.jten.mil/Atlas2/faces/page/login/Login or they may attend the monthly training offered by the Garrison ATO. For face to face initial training, completion of training shall be reported to the COR and the unit/activity security manager. COR will confirm with sign in rosters received from AT officer. For on-line training, the Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR and unit/activity security manager (ref Department of the Army, US Army Contracting Agency, SFCA-CO, and 5 Sep 07, Subject: Incorporation of Measures into the Contracting Process and AR 525-13, Antiterrorism). NOTE: Contractor personnel shall receive an AOR briefing when traveling OCONUS on TDY. A certified ATO Level II Officer must provide briefing within seven (7) working days prior to TDY departure outside the 50 United States, its territories and possessions. This is separate from the normal annual AT Level I training requirement. (Ref AR 525-13)

1.7.12 iWATCH: All Contractor employees, including subcontractors, assigned to this contract shall receive a brief on the local iWATCH program (provided in conjunction with the AT Level I training). This training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR). This training shall be completed within 30 days of reporting to duty and annual refresher training with the results reported to the COR.

1.7.13 Operation Security (OPSEC) Training: All Contractor employees, including subcontractors, assigned to this contract shall complete Level I OPSEC training within 30 days of reporting for duty and then annually thereafter. The Garrison OPSEC Officer will conduct initial Level 1 OPSEC training monthly or a Level II certified OPSEC Officer. Annual refresher OPSEC training shall be completed on-line at http://cdsetrain.dtic.mil/opsec/index.htm. The Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR and unit/activity security manager (ref AR 530-1, Operations Security). The Contractor shall adhere to local OPSEC policies and procedures of the Government requiring activity. When in a TDY status in support of this work effort, the Contractor shall also adhere to any OPSEC policies and procedures in effect at TDY locations.

1.6.7.14 Threat Awareness and Reporting Program (TARP) Training: All Contractor employees, including subcontractors, assigned to this contract shall complete TARP training within 30 days of reporting for duty and then annually thereafter. Contractor TARP training conducted monthly by the 902nd MI Group. The COR will ensure Contractors are notified of available training. Completion of training shall be reported to the COR and the unit/activity security manager Contractor personnel shall report threat-related incidents, behavioral indicators, and other matters to counterintelligence interest specified in AR 381-12 to the nearest military CI office. (Ref AR 381- 12).

1.6.7.15 Installation Access: All Contractor employees, including subcontractors, shall comply with applicable installation and facility security access policies and procedures at all work and TDY locations. The Fort Gordon military installation is a limited access post. Unscheduled gate closures by the military police may occur at any time. In accordance with Army Regulation 525-13, paragraph 5-19, all prospective Contractors will undergo a verification process by the installation Provost Marshal Office, Director of Emergency Services to determine the trustworthiness and suitability prior to being granted access to federal property. This will be accomplished using the National Crime Information Center (NCIC) Interstate Identification Index (III). This is the minimum baseline background check for entrance onto Army Installations for non-CAC holders to include entrance of visitors (ref AR 190-13, paragraph 8-2). All personnel entering or exiting the installation may experience a delay due to vehicle inspections, registration checks, verification of seat belt use, etc. All vehicles and personnel are subject to search https://jkodirect.jten.mil/Atlas2/faces/page/login/Login http://cdsetrain.dtic.mil/opsec/index.htm and seizure. The search and seizure provisions shall apply to Contractor personnel while within Fort Gordon's area of jurisdiction. Contractor personnel shall comply with all entry control requirements and security policies/procedures in effect. Security procedures may change without notice.

1.6.7.16 Eligibility Verification for Employment: E-Verify is an Internet-based system that compares information from an employee's Form I-9, Employment Eligibility Verification, to data from U.S. Department of Homeland Security and Social Security Administration records to confirm employment eligibility. The U.S. Department of Homeland Security is working to stop unauthorized employment. By using E-Verify to determine the employment eligibility of their employees, companies become part of the solution in addressing this problem. All U.S.

employers must complete and retain a Form I-9 for each individual they hire for employment in the United States.

This includes citizens and noncitizens. On the form, the employer must examine the employment eligibility and identity document(s) an employee presents to determine whether the document(s) reasonably appear to be genuine and relate to the individual and record the document information on the Form I-9. The list of acceptable documents found on the last page of the form. E-Verify is mandatory for employers with federal contracts or subcontracts that contain the Federal Acquisition Regulation E-Verify clause.

1.6.7.17. Courier Card: Five (5) personnel must obtain and maintain courier orders to transport classified equipment (i.e computers, hard drives, computer power and connectivity accessories, storage devices, etc.) within the immediate Fort Gordon area to include supported offsite events. Contractor personnel must register for and complete training, pass required exam(s) and provide a copy of the completed courier card training certificate to the COR within fourteen (14) business days of performance start date. COR will submit Courier Card Justification/Request and courier card training certificate to G2 via email. Contractor is required to set up an appointment with G2 for courier card issue within two (2) business days of COR Courier Card Justification/Request submission to G2. Detailed instructions are provided at Technical Exhibit 5. Training and exam renewal is required every two years. Courier card renewal is required annually. Contractors are responsible for maintaining current (non-expired) Secret courier cards at all times. A copy of the Secret courier orders will be provided to the COR, Enterprise Division Chief, and Enterprise NCOIC.

1.6.7.18 Contractor Verification System (CVS)/Trusted Agent Sponsorship System: Contractor User Guide see http://www.uscg.mil/hq/cg-85/CVS/Training/Contractor%20User%20Guide.htm, Additional Program Information see http://www.uscg.mil/hq/cg-85/CVS/CVS.htm

1.6.7.19 Common Access Card: (CAC): Contractor must obtain a CAC for those employees whose functions require access to systems or facilities controlled by the Common Access Card. Contractor Representative will notify government CVS Trusted Agent (TA) of new employee CAC requirements.

Company representative must provide all personnel data required to process CVS application with the TA, including security investigation requirements.

Contractor employee will obtain CAC at DEERS/RAPIDS terminal when the application is approved.

Contractor employee will inform Corporate Facility Security Officer (FSO)/Security Manager of approval/denial of CAC application, and will return CAC to Corporate FSO upon departure or dismissal. Contractor is responsible for implementation and follow-up. Failure, inability, or delay in obtaining the CAC does not relieve the contractor from performing under the terms of the contract.

1.6.8. Special Qualifications: The contractor is responsible for the overall management and oversight of this contract. It is the contractor’s responsibility to staff and deploy qualified contractor personnel to meet all of the PWS requirements. The Government’s historical staffing data is provided under Technical Exhibit 3. These CME must deliver specialized IT skills to enhance the G-6 missions not hinder the mission or stop progress. The Government anticipates the requirements within this PWS will require the following labor categories:

• Data Center Engineer/Virtualization Architect

• Senior Cyber Security Engineer

• Cyber Security Analyst

• Senior IT Project Manager http://www.uscg.mil/hq/cg-85/CVS/Training/Contractor%20User%20Guide.htm http://www.uscg.mil/hq/cg-85/CVS/Training/Contractor%20User%20Guide.htm http://www.uscg.mil/hq/cg-85/CVS/CVS.htm

• Senior System Administrator

• System Administrator

• IT Procurement Specialist

• Operations Specialist

• VTC Technician

• VTC Engineer

• Senior Linux Administrator

• Senior Network Administrator

The Contractor shall utilize qualified personnel to meet the requirements identified in the PWS. Contract personnel shall possess the knowledge, skills and abilities that will enable them the ability to perform the duties listed in the PWS immediately when hired without additional train-up time being required. At times, the Contractor may be required to carry, move, and/or relocate/transport on hand receipt IT peripherals in a Government vehicle.

1.6.8.1. Program Manager (PM) shall:

• Possess and maintain an active Project Management Professional (PMP) commercial certification at start date.

• Possess at least three years of documented proven experience as a IT Program or Project Manager

• Have a Master’s degree in an IT related field of study with at least 5-10 years of professional experience, OR

Have a Bachelor’s degree in an IT related field of study, with at least 10-15 years of equivalent work experience

• Be detail-oriented with a keen focus on quality and continuous improvement.

• Demonstrate the highest level of professional through written and verbal communication when presenting products and briefs to senior level management and stakeholder within the CCoE.

• Have a thorough understanding of program/project management techniques, methods and tools.

• Have ability to interpret business objectives and successfully incorporate those objectives.

• Have relevant industry knowledge of widely used systems and subsystems.

• Have experience with group facilitation; ability to manage large-scale IT projects.

• Have the ability to identify and understand complex problems/issues and develop solutions.

• Possess proven ability to manage teams, have demonstrated self-initiative and leadership skills.

• Have strong verbal and written communication skills, ability to present to senior management, Division Chiefs and COR.

• Be proficient in conflict resolution and resolve concerns/issues related to performance of this Contract.

• Possess strong organizational and analytical skills.

• Be physically located onsite at Fort Gordon

• See security clearance requirements within section 1.6.7 Security Requirements.

1.6.8.2. Procurement Specialist shall:

• Have at least 3 to 5 years of IT experience with IT Resources and Army IT acquisition/procurement processes

• Possess proven ability to interpret IT-related Enterprise Service Agreements (ESAs), Joint/Enterprise License

Agreements (J/ELAs), Service Level Agreements (SLAs), Memorandums of Understanding (MOUs), etc. in support of the CCoE C4 mission IAW applicable regulations and terms and conditions of agreements.

• Possess ability to analyze and properly apply IT budgetary policies to create or review IT Acquisition Management and Oversight (AMO) packets and supporting documents.

• Possess the ability to provide recommendations or alternate, realistic IT solutions

• Be proficient in Microsoft Office Suite and Adobe software applications sufficient to create and/or modify documents to streamline the procurement process.

• See security clearance requirement within section 1.6.7 Security Requirements.

1.6.8.3. Data Center Engineer/ Virtualization Architect shall:

• Possess all of the following:

o 10+ years of experience in information technology o 5+ years of customer-facing professional services or IT consulting experience o 3+ years of experience in infrastructure architecture and design of complex distributed systems environments, including failover techniques, recovery/rollback, and application partitioning o A minimum of three (3) years of experience VMWare Virtualization administration experience

• Technical Skills Required:

o Have outstanding communications and interpersonal skills o Have strong VMware vSphere experience o Have strong Windows desktop OS administration experience o Have understanding of storage architectures, including peripheral interfaces (SCSI, RAID, Ethernet) and multi-processor designs (SMP) o Have technical awareness of one or more additional VMware products: vCloud Suite, vRealize Suite, vRealize Automation (vRA), vRealize Orchestrator (vRO), Horizon View, VMware Virtual SAN (vSAN), or NSX o Have Horizon View design and implementation experience in enterprise environments

• Certification Requirements:

o This position is designated as Information Assurance Workforce (IAWF) Information Assurance Technical Level II (IAT II). See section 1.6.7.9, Cybersecurity/Information Technology (IT) Certification, in this PWS for detailed Army and DoD guidance and requirements. The following are required at contract start date and must be maintained throughout the life of the contract:

Baseline certification: IAT II Computing Environment (CE): must be maintained IAW Army guidance at current platform

(or higher) and adhere to VMWare recertification policies. Currently: VMware Certified Professional – Data Center Virtualization 2019 or VMware Certified Professional Cloud Management and Automation 2019.

• See security clearance requirement within section 1.6.7 Security Requirements.

1.6.8.4. System Administrator - may be assigned to work throughout all areas of the CCoE to include Secure Compartmented Information Facilities (SCIFs). System Administrator shall:

• Have at least three (3) years of experience in server administration

• HHave at least two (2) years of experience with basic switching concepts and managed switch configuration.

• Be familiar with DevOps business practices

• Possess the ability to install, operate, and maintain configuration management software and remote execution engine

• Be familiar with completely automating PXE boot processes using UEFI firmware in a GNU/Linux environment (to include secureboot, etc.)

• Have knowledge of cloud and virtualization

• Possess at least five (5) years of experience in IT desktop support, IT Service Desk support

• Mobile Device Manager coordinate cell provider for device and service concerns and issue; Subject matter expert to resolve cell phone issues.

• Certification Requirements:

o This position is designated as Information Assurance Workforce (IAWF) Information Assurance Technical Level II (IAT II). See section 1.6.7.9, Cybersecurity/Information Technology (IT) Certification, in this PWS for detailed Army and DoD guidance and requirements. The following are required at contract start date and must be maintained throughout the life of the contract:

Baseline certification: IAT II Computing Environment (CE): must be current platform (or higher) IAW Army guidance (i.e

Windows 10, Server 2008 to 2012, etc.). Currently:

• All personnel: Installing and Configuring Windows 10 (70-698) or MD-100 and

MD-101

• A minimum of three (3) personnel: Installing and Configuring Windows Server

2012 (70-410) and Configuring Advanced Server 2012 Services (70-412), 70-740 Installation, Storage and Compute with Windows Server 2016 or equivalent o Receive IA appointment orders from Chain of Command o Be monitored in the Army Training and Certification Tracking System (ATCTS).

o Successfully complete Information Assurance Fundamentals on line course and exam at https://cs.signal.army.mil.

o Complete Privileged Level Access Agreement (PLAA) annually.

o This Personnel Security Standard for this position is IT-I (Personnel in IA positions with privileged-level access to control, manage, or configure IA tools or devices, individual and networked IS and devices, and enclaves).

• See security clearance requirement within section 1.6.7 Security Requirements.

1.6.8.5. Video Teleconference (VTC) Technician shall:

• Have at least three (3) years of experience in VTC setup and configuration

• Possess at least five (5) years of experience in IT desktop support, IT Service Desk support

• Certification Requirement o This position is designated as Information Assurance Workforce (IAWF) Information Assurance Technical Level II (IAT II). See section 1.6.7.9, Cybersecurity/Information Technology (IT) Certification, in this PWS for detailed Army and DoD guidance and requirements. The following are required at work performance start date and must be maintained throughout the life of the contract:

o Baseline certification: IAT II o Computing Environment (CE): must be current platform (or higher) IAW Army guidance (i.e migration from Windows 7 to Windows 10, Server 2008 to 2012, etc.). Currently:

o All personnel: Installing and Configuring Windows 10 (70-698) or MD-100 and MD-101 o Receive IA appointment orders from Chain of Command o Be monitored in the Army Training and Certification Tracking System (ATCTS).

o Successfully complete Information Assurance Fundamentals on line course and exam at https://cs.signal.army.mil o Complete Privileged Level Access Agreement (PLAA) annually.

o This Personnel Security Standard for this position is IT-II (Personnel in IA positions with privileged-level access to control, manage, or configure IA tools or devices, individual and networked IS and devices, and enclaves).

1.6.8.6. Video Teleconference (VTC) Engineer shall:

• Have at least three (3) year of experience in VTC setup and configuration and VTC Engineer experience

• Have at least three (3) years of VTC Engineering experience

• Have knowledge of cloud and virtualization

• Possess at least five (5) years of experience in IT desktop support, IT Service Desk support

•…