W91249-20-R-0009 CsRA Support Services_Solicitation.....pdf

SEE ADDENDUM

(No Collect Calls)

W9124920R0009 17-Jan-2020

b. TELEPHONE NUMBER

706-791-9208

8. OFFER DUE DATE/LOCAL TIME

11:00 AM 31 Jan 2020

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA X ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

W912499. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

SHERRILYN U. RICE

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

1 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.X

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

0011420118

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED OR X

SMALL BUSINESS

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

MICC - FORT GORDON

TARA L. MCADOO 706-791-1831

MISSION DIVISION

TARA.L.MCADOO.CIV@MAIL.MIL

FORT GORDON GA 30905-5719

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE W58MUV 16. ADMINISTERED BY

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

CYBER COE

CYBER COE

633 BARNES AVEVUE, BLDG. 25601

FORT GORDON GA 30905

TEL: FAX:

FAX:

TEL: 706-791-1831 SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

X 8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$12,000,000

NAICS:

611430

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

Section SF 1449 - CONTINUATION SHEET

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1 Job (CsRA) & Technical Instructional Support

FFP

The contractor shall provide all necessary management, supervision and other labor required to successfully perform non-personal Cyberspace Response Assessment (CsRA) & Technical Instructional Support services in accordance with the Performance Work Statement (PWS) and other areas of the solicitation.

FOB: Destination

PURCHASE REQUEST NUMBER: 0011420118

PSC CD: U008

NET AMT

0002 1 Each Contract Manpower Reporting

FFP

Contractor is required to provide data on Contractor labor hours (including subcontractor labor hours) for performance of this contract IAW the PWS. The cost, if any, for providing this data shall be entered into the space provided at this CLIN. If no direct cost is associated with providing the data, enter “No Cost”.

Instructions, including the Contractor and Subcontractor User Guides, are available at http://www.ecmra.mil.

FOB: Destination

1001 1 Job OPTION (CsRA) & Technical Instructional Support

FFP

The contractor shall provide all necessary management, supervision and other labor required to successfully perform non-personal Cyberspace Response Assessment (CsRA) & Technical Instructional Support services in accordance with the Performance Work Statement (PWS) and other areas of the solicitation.

FOB: Destination

PURCHASE REQUEST NUMBER: 0011420118

1002 1 Each OPTION Contract Manpower Reporting

FFP

Contractor is required to provide data on Contractor labor hours (including subcontractor labor hours) for performance of this contract IAW the PWS. The cost, if any, for providing this data shall be entered into the space provided at this CLIN. If no direct cost is associated with providing the data, enter “No Cost”.

Instructions, including the Contractor and Subcontractor User Guides, are available at http://www.ecmra.mil.

2001 1 Job OPTION (CsRA) & Technical Instructional Support

FFP

The contractor shall provide all necessary management, supervision and other labor required to successfully perform non-personal Cyberspace Response Assessment (CsRA) & Technical Instructional Support services in accordance with the Performance Work Statement (PWS) and other areas of the solicitation.

2002 1 Each OPTION Contract Manpower Reporting

FFP

Contractor is required to provide data on Contractor labor hours (including subcontractor labor hours) for performance of this contract IAW the PWS. The cost, if any, for providing this data shall be entered into the space provided at this CLIN. If no direct cost is associated with providing the data, enter “No Cost”.

Instructions, including the Contractor and Subcontractor User Guides, are available at http://www.ecmra.mil.

3001 1 Job OPTION (CsRA) & Technical Instructional Support

FFP

The contractor shall provide all necessary management, supervision and other labor required to successfully perform non-personal Cyberspace Response Assessment (CsRA) & Technical Instructional Support services in accordance with the Performance Work Statement (PWS) and other areas of the solicitation.

3002 1 Each OPTION Contract Manpower Reporting

FFP

Contractor is required to provide data on Contractor labor hours (including subcontractor labor hours) for performance of this contract IAW the PWS. The cost, if any, for providing this data shall be entered into the space provided at this CLIN. If no direct cost is associated with providing the data, enter “No Cost”.

Instructions, including the Contractor and Subcontractor User Guides, are available at http://www.ecmra.mil.

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government 0002 Destination Government Destination Government

1001 Destination Government Destination Government 1002 Destination Government Destination Government 2001 Destination Government Destination Government 2002 Destination Government Destination Government 3001 Destination Government Destination Government 3002 Destination Government Destination Government

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 POP 01-MAR-2020 TO

28-FEB-2021

N/A CYBER COE

CYBER COE

633 BARNES AVEVUE, BLDG. 25601

FORT GORDON GA 30905

W58MUV

0002 28-FEB-2021 1 (SAME AS PREVIOUS LOCATION)

1001 POP 01-MAR-2021 TO

28-FEB-2022

N/A (SAME AS PREVIOUS LOCATION)

1002 28-FEB-2022 1 (SAME AS PREVIOUS LOCATION)

2001 POP 01-MAR-2022 TO

28-FEB-2023

N/A (SAME AS PREVIOUS LOCATION)

2002 28-FEB-2023 1 (SAME AS PREVIOUS LOCATION)

3001 POP 01-MAR-2023 TO

28-FEB-2024

N/A (SAME AS PREVIOUS LOCATION)

3002 28-FEB-2024 1 (SAME AS PREVIOUS LOCATION)

OPTION TO EXTEND SERVICES

Notice of Evaluation of Option to Extend Services. As part of price evaluation, the Government will evaluate its option to extend services (see FAR Clause 52.217-8) by adding six (6) months of the offeror’s final option period price to the offeror’s total price.

Offerors are required only to price the base and option periods. Offerors shall not submit a price for the potential six months extension of services period. The Government may choose to exercise the Extension of Services at the end of any performance period (base or option periods), utilizing the rates of that performance period.

PWS

PERFORMANCE WORK STATEMENT (PWS)

U. S. Army Cyber School

(USACyS) Cyberspace Response Assessment (CsRA) & Technical

Instructional Support Cyber Center of Excellence, Fort

Gordon, Georgia

Part 1

1. General: This is a non-personal services contract to provide CsRA and Technical Instructional Support for the Cyber School, Cyber Center of Excellence (CCoE), Fort Gordon, Georgia. CsRA scenario-based exercise that will evaluate the students’ abilities at the culmination of their schoolhouse training. This effort will support the Cyber School Cyberspace Response Assessment by providing a scenario-based exercise that will evaluate the students’ abilities at the culmination of their schoolhouse training. The Government will not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn, is responsible to the Government.

1.1 Description of Services/Introduction: The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform Instructor/writer duties as defined in this Performance of Work Statement except for those items specified as government furnished property and services. The contractor shall perform to the standards in this contract. This requirement is to support the U.S. Army Cyber School Cyberspace Response Assessment exercising practical application knowledge, skills, and attributes attained through hands-on evaluation of cyber and electronic warfare skills. The assessment provides for practical application of knowledge, skills and attributes attained throughout Cyber Training and Education Development (CTED) courses and shall provide 2ea Operating Systems (OS) Instructors/Writer, 1ea Networking Instructor/Writer and 6ea Cyberspace Response Assessment (CsRA) Instructor/Writers for courses associated with the U.S. Army Cyber School. The Technical Instructors shall facilitate progress and instruct and facilitate adult learning through modern training techniques and methodologies and assist in developing Government-owned CsRA curriculum. All material developed and used for instruction is Government-owned. Contract personnel shall meet the standards outlined in established Programs of Instruction (POI), Cyber School training guidance, the USCYBERCOM J7/National Cryptologic Training System (NSA standards per DoDI 3305.09), and DoD Cybersecurity Workforce Framework (i.e. DoD 8570 or 8140) through certified classroom instruction, cyber-lab technical support, operational testing, and curriculum validation IAW the requirements and deliverables of this acquisition. Except for property and services specified as government furnished the contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform instructional support as defined in this Performance Work Statement. The contractor shall perform to the standards in this contract.

1.2 Background: The Army recently established the Cyber School under the CCoE to train the new Cyber Branch/Career Field 17, which includes courses for MOS 17A, 170A, and 17C. The Cyber Branch primarily provides trained personnel to Army Cyber Command’s Cyber Mission Force (CMF) teams. 17-series 1Training will occur at Fort Gordon under the Army Cyber School, which is experiencing personnel shortfalls. Training for PME and other Army organizations will occur at various locations throughout CONUS and OCONUS. Training will occur at classification levels from UNCLASSIFIED to TOP SECRET/SCI. The contractor shall provide all personnel, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform these services to include: develop training and training products IAW USCYBERCOM J7, Army University SALT, Unified Land Operations, Basic Officer Leader Course Common Core standards, Captain’s Career Course Common Core standards, the Analysis Design Develop Implement and Evaluate (ADDIE) process, Army Learning Model (ALM) Principles, and all applicable regulations and SOPs (i.e. TRADOC REG 350-70 and all appendixes). The contractor shall perform to the standards in this contract.

1.3. Objectives: Support instruction and training development of Army Cyber School courses and Army University PME instruction, primarily consisting of Cyber/17 Series initial entry training, professional military education common core Unified Land Operations instruction. Maintain classrooms, support the training and training development requirements of the Cyber School such as: determining individual critical tasks and learning objectives; reviewing/modifying course materials for Cyber School and Army PME courses; assist with developing training support documents including lessons plans, individual student assessment plans, POI, and practical exercises; present course instruction IAW the POI and Lesson Plan for Cyber School and Army PME courses; write and develop training pamphlets, handbooks, and education training strategies and documents; and maintain classrooms. Contractor personnel shall demonstrate model behavior and professionalism at all times.

Instruction and curriculum development will be conducted at a clearance up to TOP SECRET//SCI.

1.4. Scope: Army Cyber School training includes Career Field 17’s (Cyber Operations) Basic Officer Leader Course (BOLC), Captain’s Career Course (CCC), Operations Officer Course (OOC), Advanced Individual Training (AIT), Advanced Leader Course (ALC), Senior Leader Course (SLC), Warrant Officer Basic Course (WOBC), Warrant Officer Advanced Course (WOAC), and other Cyberspace Operations courses as determined by the Army Cyber Commandant. The majority of these courses consist of technical and planning cyber training validated by USCYBERCOM J7, DoD CIO, and the NSA. The contractor shall provide instructional support and training development for the Cyber School. Personnel assigned to this contract shall assist and support the CCoE personnel and shall utilize and develop all training related products IAW all applicable regulations and SOPs (i.e. TRADOC REG 350-70 with appendixes). The Government will own all developed products.

1.5. Period of Performance: The period of performance shall be for one (1) Base Year of 12 months and three

(3) 12-month option years. The Period of Performance reads as follows:

Base Year 1 Mar 2020 – 28 Feb 2021 Option Year I 1 Mar 2021 – 28 Feb 2022 Option Year II 1 Mar 2022 – 28 Feb 2023 Option Year III 1 Mar 2023 – 28 Feb 2024

1.6. General Information:

1.6.1. Quality Control: The contractor shall develop and maintain an effective Quality Control Program (QCP) to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s QCP is the means assuring the work and products delivered comply with the requirements of the contract.

Cyber School Training Developers (TD): The contractor shall utilize qualified TDs who shall develop training material and products for all courses assigned to the Cyber School. The contractor shall utilize personnel who possess the knowledge, skills, abilities and experience to develop Cyberspace Operations training IAW all relevant regulations, requirements, and SOPs to include USCYBERCOM J7, National Cryptologic Training System (NSA standards per DoDI 3305.09), and DoD Cybersecurity Workforce Framework (i.e. DoD 8570 or 8140) training standards. All products developed are Government Owned products. The development of a QCP is to ensure services are performed in accordance with this PWS. The initial QCP shall be delivered with the contractor’s proposal. After award the final QCP shall be delivered within 30 days of start date and within 5 working days when changes are made thereafter. After acceptance of the quality control plan the contractor shall receive the contracting officer’s acceptance in writing of any proposed change to his QC system.

1.6.2 Quality Assurance: The Government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards.

It defines how the performance standards will be applied, the frequency of surveillance, and the maximum acceptable defect rate(s).

1.6.3 Recognized Holidays: The contractor is not expected to perform services on federal holidays including days designated as holidays by an Executive Order:

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day

1.6.3 Hours of Operation: The contractor is responsible for conducting business between the hours of 0800 to 1700 Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential. Shift work may be required. Anticipated shift schedule is as follows:

Day Shift 0800-1700 Swing Shift 1530-0030 Midnight Shift 2300-0800

1.6.3.1 In the event that personnel assigned to this contract are required for early/late/weekend school retraining of students or needed for classroom observation the anticipated hours are:

Alternate Day Shift 0630-1030 and 1500-1900 Alternate Swing Shift 1300-1700 and 1900-2300 Alternate Midnight Shift 2100-0100 and 0300-0700 Weekend Shift 0830-1330 on Saturdays, with five hours shifted from weekday work

These operating hours and days may vary based on the requirements of the agency. Contractor personnel work schedules may be “flexed” to meet the training needs of the Cyber School for weekend and extended duty periods during regular training and exercises, while still adhering to the standard five-day work week. Overtime will not be authorized.

1.6.4 Place of Performance: Work outlined in the PWS will be performed at various locations within the Cyber School located on Fort Gordon, Georgia 30905-5715. All Contract instructors may be required to travel to participate in training development conferences, attend necessary training/certification, and to facilitate Mobile Training Team (MTT) at CONUS and OCONUS locations. Contract instructors may be required to travel up to 20% of the time.

1.6.5 Type of Contract: The government will award a firm fixed price contract.

1.6.6 Security Requirements: At the time of the proposal submission, all contractors to include subcontractors, performing on this contract shall have a final Top Secret security clearance with SCI eligibility and shall maintain the required security clearance throughout the life of the contract. Contractor employees performing on this contract must be U.S. citizens.

All contractors must have a TS/SCI clearance, receive SCI read-ons, have a SIPR account with a SIPR token, and a JWICS account within two (2) weeks of the contract award date. The contractor is responsible for acquiring the clearances. The contractor shall ensure that all assigned personnel understand applicable security policies and directives found in DOD 5220.22-M, National Industry Security Program Operating Manual (NISPOM); AR 380-5, Information Security Program, and all other applicable policies and regulations.

The contractor shall ensure that classified data is controlled, protected, and safeguarded in accordance with AR 380-5 and current Army and DOD policy. Classified information shall be accessed and stored in government spaces only. The contractor shall agree that any data furnished by the government to the contractor shall be used only for performance under this PWS, and all copies of such data shall be returned to the government upon completion of this effort.

The contractor Facility Security Officer (FSO) will ensure there is a procedure for all terminated employees to out process the installation. Compliance with DD Form 254, Department of Defense Contract Security Classification Specification, is required.

1.6.7.1. Handling/Access to Classified Information: The contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified "Confidential," "Secret," or "Top Secret" and requires contractors to comply with (1) the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M), and (2) any revisions to DoD 5220.22-M. Any adverse action preventing a contractor from retaining access to classified material must be brought to the attention of the COR and contractor Facility Security Officer (FSO) immediately.

1.6.7.2 SIPRNET and JWICS Access: The COR will identify contract employees that are required to have SIPRNET and/or JWICS access. Secret Internet Protocol Network (SIPRNET) and Joint Worldwide Intelligence Communications System (JWICS) access will only be as directed by the Government requirement activity and at government facilities only. Contractors requiring access to the SIPRNET must have a final Secret clearance or Interim TS clearance. Contractors requiring access to JWICS must have a final TS clearance and be indoctrinated for Sensitive Compartmented Information access. Approval by the COR is required prior to granting access.

SIPRNET/JWICS may contain NATO information and a NATO awareness brief and acknowledgement is required for all personnel prior to being granted access to the SIPRNET/JWICS. The NATO Awareness briefing is required to inform personnel how to protect NATO information in the event they come across it while accessing the SIPRNET/JWICS. A written acknowledgment shall be maintained by the COR. The contractor shall not access, download or further disseminate any classified information from SIPRNET/JWICS which is outside the execution of the defined contract requirements unless specifically authorized in writing by the Government Program Manager and the KO. In the event that any special access is required, the KO must modify the requirements and DD 254.

CEMA contractors are required to have SIPR accounts with SIPR tokens and JWICS accounts.

1.6.7.3. Cybersecurity (formerly Information Assurance (IA)/Information Technology (IT)) Training: All contractor employees and associated subcontractors must complete the DoD Cyber Awareness Challenge Training (https://sc.signal.army.mil/DoDIAA) before issuance of network access and annually thereafter.

Certificates of successful completion, for both initial awareness training and annual refresher training shall be provided to the COR via the Army Training and Certification Tracking System (ATCTS). All contractor employees will successfully complete all required IA training as specified in AR 25-2 and as directed by the Government. At work performance start date all contractor employees working Cyber Security functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01- M, DoDD 8140.01, and

AR 25-2.

1.6.7.3.1. Information Assurance (IA)/Information Technology (IT) Certification. Per DoD 8570.01- M, DFARS 252.239.7001, and AR 25-2, the contractor employees’ supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

1.6.7.4. Initial Security Orientation and Annual Security Refresher Training: All contractor employees, including subcontractors, assigned to this contract shall complete the online Initial Security Orientation Training located on the Army Learning Management System (ALMS) site. Log into AKO, “Self Service”, “My Training”, “ALMS”, “Go To Mandatory Training”. Training must be completed within 30 days of reporting for duty. The contractor shall submit certificate of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. The Annual Security Refresher Training is required annually thereafter. (Ref ALARACT 207/2013, DTG 291848Z Aug 13, Subj: Army Wide Rollout and Requirement for Standardized Computer Web-Based Security Training on the Army Learning Management System (ALMS)).

1.6.7.5. Anti-Terrorism (AT) Level I Training: All contractor employees, including subcontractors, assigned to this contract shall receive an initial Antiterrorism Level I Brief by a certified ATO Level II Officer within 30 days of reporting for duty (Monthly briefings will be offered by the Garrison Antiterrorism Officer). Annual refresher Antiterrorism Level I Training shall be completed on-line at https://jkodirect.jten.mil/Atlas2/faces/page/login/Login.seam or they may attend the monthly training offered by the Garrison ATO. The contractor shall submit certificates of completion for each affected contractor employee https://jkodirect.jten.mil/Atlas2/faces/page/login/Login.seam and subcontractor employee to the COR and unit/activity security manager (Ref Department of the Army, US Army Contracting Agency, SFCA-CO, 05 Sep 07, subject: Incorporation of Measures into the Contracting Process and AR 525-13, Antiterrorism). Note: Contractor personnel shall receive an AOR briefing when traveling OCONUS on TDY. Briefing must be provided by a certified ATO Level II Officer within 7 working days prior to TDY departure outside the 50 United States, its territories, and possessions. This is separate from the normal annual AT Level I training requirement (Ref AR 525-13).

1.6.7.6. iWATCH: All contractor employees, including subcontractors, assigned to this contract shall receive a brief on the local iWATCH program (provided in conjunction with the AT Level I Training). This training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 days of reporting to duty and annual refresher training with the results reported to the COR.

1.6.7.7. Operation Security (OPSEC) Training: All contractor employees, including subcontractors, assigned to this contract shall complete Level I OPSEC training within 30 days of reporting for duty and then annually thereafter. Initial Level 1 OPSEC training will be conducted monthly by the Garrison OPSEC Officer or a Level II certified OPSEC Officer. Annual refresher training shall be completed on-line at http://cdsetrain.dtic.mil/opsec/index/htm. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. OPSEC training guidelines are contained in AR 530-1, Operations Security. The contractor shall adhere to local OPSEC policies and procedures of the government requiring activity. When in a TDY status in support of this work effort, the contractor shall also adhere to any OPSEC policies and procedures in effect at TDY locations.

1.6.7.8. Threat Awareness and Reporting Program (TARP) Training: All contractor employees, including subcontractors, assigned to this contract shall complete TARP training within 30 days of reporting for duty and then annually thereafter. TARP training will be conducted monthly by the 902nd MI Group. The COR will ensure contractors are notified of available training. Completion of training shall be reported to the COR and the unit/activity security manager (Ref AR 381-12).

1.6.7.9. Installation Access: All contractor employees, including subcontractors, shall comply with applicable installation and facility access security policies and procedures at all work and TDY locations. All contractors and subcontractors will be issued a Common Access Card (CAC) or an Installation Pass issued through the Automated Installation entry (AIE) Security System to access the installation. The Fort Gordon military installation is a limited access post. Unscheduled gate closures by the military police may occur at any time. In accordance with Army Regulation 525-13, paragraph 5-19, all prospective contractors will undergo a verification process by the installation Provost Marshal Office, Director of Emergency Services to determine the trustworthiness and suitability prior to being granted access to federal property. This will be accomplished using the National Crime Information Center (NCIC) Interstate Identification Index (III). This is the minimum baseline background check for entrance onto Army Installations for non-CAC holders to include entrance of visitors (Ref AR 190-13, paragraph 8- 2). All personnel entering or exiting the installation may experience a delay due to vehicle inspections, registration checks, verification of seat belt use, etc. All vehicles and personnel are subject to search and seizure. The search and seizure provisions shall apply to contractor personnel while within Fort Gordon's area of jurisdiction. Contractor personnel shall comply with all entry control requirements and security policies/procedures in effect. Security procedures may change without notice.

1.6.7.10. Identification of Contractor Employees: In accordance with FAR 37.114 contractor employees shall identify themselves as a contractor at all times while on the job, e.g., in the workplace, when attending meetings, in email, when answering government telephones, or when making phone calls.

1.6.7.11. ID Badges: The contractor shall provide each contractor employee an identification (ID) badge on contract start date or on employment start date. The ID badge shall be made of nonmetallic material, be easily readable, and shall contain the following minimum information: Employee's Name, Contract Company Name and Employee's Photograph. Contract employees shall wear proper identification at Government workplaces at all times.

1.6.7.12. Display of ID Badges: Contractor employees shall wear the ID badge at all times when performing http://cdsetrain.dtic.mil/opsec/index/htm work under this contract to include attending government meetings and conferences. Unless otherwise specified in the contract, each contract employee shall wear the ID badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit such placement.

1.6.7.13. Answering Telephones: Contractor employees shall identify themselves as a contract employee when answering and making calls on government telephones.

1.6.7.14. Utilizing Electronic Mail: When contractor employees send e-mail messages to government personnel while performing on this contract, the contractor employee's e-mail address shall include the company name together with the person's name (ex: John Smith, Contractor, ABC Company). When contractor employees require access to a government computer, the contractor employee shall be required to obtain a Common Access Card. To do so, the contractor employee shall request a CAC Card through the COR. NOTE:

The government issued CAC is the property of the U.S. Government and shall be returned to the COR upon expiration of the contract, replacement or termination of the contract employee (CAC card must be turned in to the COR on contractor employee's last day of employment). Unauthorized possession of the CAC can be prosecuted criminally under section 701, title 18, United States Code. All contractor employees shall conduct official communication using Government-owned or provided e-mail, networks, websites, systems, and devices.

The use of commercial ISP e-mail accounts or personal e-mail accounts to conduct official communication is prohibited. Remote access / telework technology may be leveraged to ensure compliance with these requirements. Contractor employees are prohibited from using Army-assigned, AKO, and other official e-mail addresses for unofficial business affiliations. Personnel shall not provide official e-mail addresses to businesses, affiliated organizations, or online retailers; unless those entities are known by personnel to be legitimately engaging in official business.

1.6.7.15. Eligibility Verification for Employment: E-Verify is an Internet-based system that compares information from an employee's Form I-9, Employment Eligibility Verification, to data from U.S. Department of Homeland Security and Social Security Administration records to confirm employment eligibility. The U.S.

Department of Homeland Security is working to stop unauthorized employment. By using E-Verify to determine the employment eligibility of their employees, companies become part of the solution in addressing this problem.

All U.S. employers must complete and retain a Form I-9 for each individual they hire for employment in the United States. This includes citizens and noncitizens. On the form, the employer must examine the employment eligibility and identity document(s) an employee presents to determine whether the document(s) reasonably appear to be genuine and relate to the individual and record the document information on the Form I-9. The list of acceptable documents can be found on the last page of the form. E-Verify is mandatory for employers with federal contracts or subcontracts that contain the Federal Acquisition Regulation E-Verify clause.

NOTE: The government issued CAC is the property of the U.S. Government and shall be returned to the COR upon expiration of the contract, replacement or termination of the contract employee. (CAC card must be turned in to the COR on contractor’s last day of employment.) Unauthorized possession of the CAC can be prosecuted criminally under section 701, title 18, United States Code.

1.6.7.16 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured.

1.6.7.17 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons.

NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government will be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.7.18. Lock Combinations: The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations.

These procedures shall be included in the Contractor’s Quality Control Plan.

1.6.7.19 Contractor Verification System (CVS)/Trusted Agent Sponsorship System: Contractor User Guide see http://www.uscg.mil/hq/cg-85/CVS/Training/Contractor%20User%20Guide.htm, Additional Program Information see http://www.uscg.mil/hq/cg-85/CVS/CVS.htm

1.6.7.20 Common Access Card (CAC): Contractor must obtain a CAC for those employees whose functions require access to systems or facilities controlled by the Common Access Card. Contractor Representative will notify government CVS Trusted Agent (TA) of new employee CAC requirements. Company representative must provide all personnel data required to process CVS application with the TA, including security investigation requirements. Contractor employee will obtain CAC at DEERS/RAPIDS terminal when the application is approved. Contractor employee will inform Corporate Facility Security Officer (FSO)/Security Manager of approval/denial of CAC application, and will return CAC to Corporate FSO upon departure or dismissal.

Contractor is responsible for implementation and follow-up. Failure, inability, or delay in obtaining the CAC does not relieve the contractor from performing under the terms of the contract.

1.6.8. Staffing and Personnel: The contractor is responsible for the overall management and oversight of this contract. It is the contactor’s responsibility to staff and deploy qualified contractor personnel to meet all of the PWS requirements. The Government anticipates the requirements within this PWS will require the following labor categories. One (1) Program Manager, two (2ea) Operating Systems Training instructors (Instructor/Writers (TS/SCI), 1 Networking Training Instructor Instructor/Writers (TS/SCI), six (6ea) Cyberspace Response Assessment (CsRA) Training Instructors (Instructor/Writers (TS/SCI), the Government’s historical staffing data is provided under Technical Exhibit 3. The Contractor shall be responsible to propose and deploy the correct labor types, mix, number and hours required to satisfactorily and professionally meet all PWS requirements. The Government anticipates the requirements within this PWS will require the following labor categories:

1.6.8.1 Program Manager: shall supervise, coordinate work schedules, resolve minor concerns/issues and complete the administrative tasks associated with this PWS. The PM shall be familiar with all duties and qualifications stated in the PWS.

• At contract start date possess a T5/Single Scope Background Investigation (SSBI) with SCI eligibility and maintain the required security clearance throughout the life of the contract.

• Shall have at least five (5) years management experience or equivalent on similar government contracts.

• Be proficient in conflict resolution.

• Possess the skill sets to supervise contractor employees.

• Be capable of coordinating work schedules/assignments of contractor employees.

• Be able to communicate orally and written with COR.

1.6.8.2 All Contract Instructor/Writer Personnel Shall:

• Must be U.S. Citizens http://www.uscg.mil/hq/cg-85/CVS/Training/Contractor%20User%20Guide.htm http://www.uscg.mil/hq/cg-85/CVS/Training/Contractor%20User%20Guide.htm http://www.uscg.mil/hq/cg-85/CVS/CVS.htm

• Possess a final Top Security Clearance and Single Scope Background Investigation (SSBI) with SCI eligibility at work performance start date and shall maintain the required security clearance throughout the life of the contract.

• Possess and maintain a valid driver’s license.

• Possess and maintain all required training as stated throughout this PWS.

• Possess skills/knowledge of performing office automation work that includes word processing, electronic mail, spreadsheets, presentations, and other personal computer applications; typing a variety of materials from rough draft into final form including narrative and tabular material, e.g., correspondence, reports, and forms; maintaining records, historical records, survey results, reference library of training catalogs, regulations and other miscellaneous publications; establishing and maintaining office functional files and reference files; knowledge management applications e.g., SharePoint, Army training requirements and resources system (ATRRS), and Blackboard.

• Graduated the Support Cadre Training Course (SCTC) and Army Basic Instructor Course (ABIC) or the Foundation Instructor Facilitator Course (FIFC), or the Common Faculty Development Instructor Course.

1.6.8.3. CsRA Training Instructor (Instructor/Writer) Qualifications:

• Possess a final Top Security Clearance and Single Scope Background Investigation (SSBI) with SCI eligibility at work performance start date and shall maintain the required security clearance throughout the life of the contract.

• Possess and maintain a valid driver’s license

• Have 2 (two) years of experience, within the last 5 (five) years, employing mission command procedures for crisis, incident, and emergency situations.

• Must have Bachelor’s Degree. Preferred degrees included Computer Science, Computer

Engineering, Electrical Engineering, Information Technology, Information Systems, or an equivalent degree.

• In lieu of a Bachelor Degree, a minimum of 3 (three) additional years of experience in the below areas.

• U.S. Army Mission Command and Plan Unified Signal/Military Intelligence/Cyber- Electromagnetic Operations

• Assessing Cyberspace Related Risks

• Integrating Intelligence into Cyberspace Operations

• Employing Cyberspace Defense

• Detecting Indicators of Compromise, Unknown Vulnerabilities, or Anomalous Behavior

• Perform Incident Response and provide Cyber-Threat Indications and Warnings

• Provide a Critical Asset Vulnerability Assessment

• Implement Defensive Cyberspace Operations – Response Actions

• Perform Cyberspace Intelligence, Surveillance, and Reconnaissance Activities

• Perform Cyberspace Operational Preparation of the Environment

• Perform Cyberspace Attack Operations Orders

• Possess and maintain all required training as stated throughout this PWS.

• Possess skills/knowledge of performing office automation work that includes word processing, electronic mail, spreadsheets, presentations, and other personal computer applications; typing a variety of materials from rough draft into final form including narrative and tabular material, e.g., correspondence, reports, and forms; maintaining records, historical records, survey results, reference library of training catalogs, regulations and other miscellaneous publications; establishing and maintaining office functional files and reference files; knowledge management applications, e.g., SharePoint, Army training requirements and resources system (ATRRS), and Blackboard.

• Graduated the Foundation Instructor/Facilitator Course (FIFC), Faculty Development Program-1 (FDP-1), and Support Cadre Training Course (SCTC).

• Graduated from the Army’s Functional Area 29 Officer Course, 17A Officer Course, 170B Warrant Officer Basic Course, 170A Warrant Officer Advanced Course, 290A Warrant

Officer Advanced Course, the Army Cyberspace Operations Planners Course (ACOPC), Joint Cyberspace Operations Planners Course (JCOPC), Joint Advanced Cyber Warfare Course (JACWC), Joint Network Attack Course (JNAC), Joint Staff or Army Special Technical Operations (STO) Planners Course, AFIT Cyber 200 or 300, or alternate/equivalent qualification training for USCYBERCOM Cyber Mission Forces (CMF) teams or industry equivalent cyberspace support. Completion of the Joint Combined Warfighting School, the School of Advanced Military Studies (SAMS) or industry equivalent courses in combination with one or more of the previously mentioned CEMA or Cyberspace qualification courses is also highly valued.

1.6.8.4. Operating Systems Training Instructor (Instructor /Writer)

• Must have in-depth knowledge of operating system concepts such as processes, threads, context switching, user mode/kernel mode, synchronization, IO and CPU Scheduling and their associated algorithms, memory management, and filesystems, and X86 assembly

• Must have knowledge of the aforementioned in Windows, GNU/Linux, and BSD

• Must be proficient with and able to complete both LFS and BLFS (Linux from

Scratch/Beyond Linux from Scratch)

• Must be proficient in C, PowerShell and Bash Scripting

• Must be proficient with both the Linux API and Windows API (win32 & UWP)

• Must have experience in instructing the aforementioned topics

• Must be proficient with systems exploitation without the assistance of toolkits

• Must be proficient with reverse engineering patches to discover the original vulnerabilities

• Must have a deep and thorough understanding of Regular Expressions and Context-Free

Grammars

1.6.8.5. Networking Instructor/Instructor/Writer:

• Must have networking expertise and experience equivalent to the CCIE-R&S or JNCIE-SP level

• Must understand networking from both the theoretical & practical perspectives

• Must be proficient with reading and understanding Requests for Comment (RFC)

• Must be proficient with taking an RFC for a networking protocol and creating a compliant implementation from scratch

• Must be proficient in Python

• Must understand Software Defined Networking (SDN)

• Must have experience in instructing the aforementioned topics

• Must be proficient with networking exploitation without the assistance of toolkits

• Must be proficient with reverse engineering patches to discover the original vulnerabilities

1.6.8.6. The Contractor shall utilize qualified personnel to meet the requirements identified in the PWS.

Contract personnel shall possess the knowledge, skills, and abilities to perform the duties listed in the PWS immediately when hired without additional train-up time

1.6.8.7 Contractor Replacement: The contractor shall replace, within ten (10) business days, any contract personnel found to be unqualified or otherwise determined unsuitable by the government. This ten-day timeframe also includes any contract instructors who submit their resignation under the current contract.

1.6.8.8. Required certifications and/or training certificates shall be presented to the COR upon hire. Certification requirements that change during the life of the contract must be approved by the COR. Contractors will be given 60 calendar days from the start date of this contract to obtain required certificate(s) of training and certification with the exception of the clearance; only 10 business days will be allotted to rectify clearance issues. Any training provided by the Government to contractor personnel, with the exception of mandatory security training listed throughout section 1.6 of this PWS, is subject to collection of reimbursement from the contractor for the full burdened cost of training. All contract employees shall possess experience with Army-standard desktop applications and configurations, i.e., daily reporting programs, and Army Gold Master (AGM) configurations.

The government will exercise the right, if deemed necessary, to select an appropriate method (pretest, hands on practical exercise, etc.) to determine if the contractor is qualified/suitable to perform the requirements stated in section 1.6.4 through 5.8.

1.6.8.9. Government Provided Training: The Contractor shall reimburse the Government for any training provided by the Government to contractor personnel, with the exception of mandatory security training listed in sections 1.6.7.3, 1.6.7.4, 1.6.7.5, 1.6.7.6, and 1.6.7.7 and 1.6.7.8 of this PWS. Reimbursement shall be for the fully burdened cost of training. Below is a reimbursement tuition rate chart per student that should be used when determining the cost for government training of Federal but Non-DOD personnel and Non-Federal Personnel.

1.6.9. Post Award Conference/Periodic Progress Meetings: The contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation (FAR) Subpart 42.5. The Contracting Officer (KO), Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the Contracting Officer will apprise the contractor of how the government views the contractor's performance and the contractor shall apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues.