W9124923R0012 SOLICITATION.pdf

SEE ADDENDUM

(No Collect Calls)

W9124923R0012 17-Apr-2023

b. TELEPHONE NUMBER

(706) 791-1896

8. OFFER DUE DATE/LOCAL TIME

03:00 PM 25 Apr 2023

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

W912499. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

CAROLINE DALLAS

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

0 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

0011930951

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED OR X

SMALL BUSINESSX

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

MICC - FORT GORDON

271 HERITAGE PARK LANE

BLDG. 35200

FT GORDON GA 30905

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE 16. ADMINISTERED BY

SEE SCHEDULE

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

706-791-8651FAX:

TEL: 706-791-1800 SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$16,000,000

NAICS:

611420

X

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF57

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

Section SF 1449 - CONTINUATION SHEET

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 1 Job Cyber Threat Emulation

FFP

The contractor shall provide all necessary management, supervision and other labor required to successfully perform non-personal Cyber Threat Emulation servicesIAW the Performance Work Statement (PWS) and other areas of this Solicitation.

FOB: Destination

PURCHASE REQUEST NUMBER: 0011930951

PSC CD: U008

NET AMT

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

CLIN INSPECT AT INSPECT BY ACCEPT AT ACCEPT BY

0001 Destination Government Destination Government

DELIVERY INFORMATION

CLIN DELIVERY DATE QUANTITY SHIP TO ADDRESS DODAAC /

CAGE

0001 POP 04-MAY-2023 TO

03-MAY-2024

N/A N/A

FOB: Destination

PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS)

Cyber Threat Emulation (CTE) Training

Part 1 General Information

1. GENERAL: This is a non-personnel services contract to provide advanced individual cyber threat emulation training, low density subject matter expertise enhancement and certifications. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Vendor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction: The vendor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform instruction and support services in a virtual learning environment as defined in this Performance Work Statement except for those items specified as government furnished property and services. The vendor shall perform to the standards in this contract.

1.2 Background: The United States Army Cyber Protection Brigade (USACPB) requires vendor training support for Defensive Cyber Operations (DCO) instruction for developing specific and critical skill sets for enhancement of operational capability in direct support of the United States Cyber Command (USCC) Cyber Mission Force (CMF) employment of forces.

1.3 Objectives: Provide highly technical CTE training to CMF professionals assigned to USACPB.

1.4 Scope: The advanced training pipeline is designed to provide hands-on training of high-quality industry content and curriculum to USACPB personnel. Services include advanced technical cyber security expertise and knowledge not readily available in the U.S. Army training inventory. The vendor shall provide training that will ultimately prepare CMF personnel, and emerging cyber-force specialty areas, with the knowledge and expertise to utilize various tools to defend, monitor, detect, analyze, audit, and mitigate threats to Department of Defense (DoD) and United States Army networks.

1.4.1. The vendor shall provide, maintain, and make available a Flexible Program that provides the USACPB training that can be used throughout the year, as needed and applied towards any CTE training or certification products, including a platform that allows personnel to sharpen skills and gain confidence in the safety of a simulated real-world enterprise infrastructure which can provide the services specified in this Performance Work Statement (PWS). The vendor shall provide and maintain current curriculum and develop new curriculum; perform planning, research and development, technical analysis, and administration; develop course material, syllabi, and software package/images used to perform labs or practical exams; conduct classroom and lab instruction and maintenance; develop and grade homework assignments, tests, and labs; provide training solutions, labs, assessment, an or self-study products; provide all subject texts and textbooks for the requisite course; develop and employ advanced distributed learning; as directed by the Contracting Officer’s Representative (COR).

This task is required to support the United States Cyber Command (USCC) Cyber Mission Force (CMF) training and certification requirements for the employment of Cyber Protection Teams (CPTs) and the conduct of DCO.

1.5. Period of Performance: The period of performance shall be for one (1) Base Year of 12 months.

Base Year: 04 May 23 – 03 May 24 (or one year from award)

1.6. General Information

1.6.1. Deliverables:

1.6.1.1. Monthly Progress Reports (MPR) (CDRL A001). The vendor shall provide a monthly Vendor’s Progress, Status, and Management Report. The report must be submitted to the COR no later than the 15th of every month. The report must accompany a copy of that month’s WAWF invoice. The MPR’s shall be compiled, reviewed, and submitted with a cover letter, which summarizes the activities and significant events occurring during the preceding month. The MPR shall include, but shall not be limited to:

a) Significant events or activities regarding the contract.

b) Progress on deliverable products.

c) Current or anticipated problem areas.

d) Summary of activities planned for the next reporting period.

1.6.1.2. Training Records (CDRL A002). The vendor shall provide certificates of training to students following the successful completion of class. In addition to the vendor maintaining a copy of all training/certification records of individuals attending training for a minimum of two years from the last day of training conducted executed under this contract, the vendor will provide a soft (digital) copy of certificates to the COR NLT one (1) week following the completion of each class.

1.6.1.3. Quality Control Plan (CDRL A003). The vendor shall provide a Quality Control Plan (QCP) upon the Government’s request. Initially the QCP should be delivered to the Government within two (2) weeks after the contract start date.

Revisions should be submitted for Government approval as the vendor adjusts the

QCP.

1.6.1.4. Voucher Accounts (CDRL A004). Requisite Voucher Accounts (i.e., Curriculum Voucher Account, Retest Voucher Account), and any other vendor-specific account access as required by the government for tracking and managing product usability are due upon the contract start date.

1.6.1.5. End of Course Feedback (CDRL A005). The vendor shall provide end of course feedback to students of each class. Following each class, no later than one (1) week after the completion of a class, the vendor will provide all student feedback to the Contracting Officer’s Representative (COR).

1.6.2. Quality Control: The vendor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The vendor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The vendor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract.

The vendor shall provide a Quality Control Plan (QCP) upon the Government’s request. Initially the QCP should be delivered to the Government within thirty (30) days after the contract start date. Revisions should be submitted for Government approval as the vendor adjusts the QCP. After acceptance of the quality control plan the vendor shall receive the contracting officer’s acceptance in writing of any proposed change to his QC system.

1.6.3. Quality Assurance: The government shall evaluate the vendor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the vendor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.3.1. Revisions. Revisions to the Quality Control Plan may be required at any time during performance of the contract to assure vendor compliance with requirements of the PWS and contract. The vendor shall make appropriate revisions and obtain acceptance of the revised plan from the COR.

1.6.4. Recognized Holidays: Any of the below holidays falling on a Saturday will be observed on the preceding Friday. Holidays falling on a Sunday will be observed on the following Monday. In addition to the days designated as holidays, the Government any other day designated by Federal Statute, Executive Order or Presidential Proclamation.

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Juneteenth Thanksgiving Day Independence Day Christmas Day

1.6.5. Hours of Operation: The vendor is responsible for conducting business, between the hours of 8 A.M. to 5 P.M. Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings.

For other than firm fixed price contracts, the vendor will not be reimbursed when the government facility is closed for the above reasons. The work schedule may vary based on training requirements and course length, e.g., Monday thru Saturday for a six (6) day class. The Vendor must at all times maintain an adequate workforce for facilitation of training defined within this PWS when the Government facility is not closed for the above reasons. The Vendor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Vendor shall keep in mind that the stability and continuity of the workforce are essential.

1.6.5.1. Dress/ Appearance. N/A. This training bundle is 100% Virtual and not instructor lead.

1.6.6. Place of Performance: N/A This training is 100% Virtual and not instructor led.

1.6.7. Type of Contract: The government will award a Firm-Fixed Price Contract.

1.6.8. Security Requirements: None.

1.6.8.1. Anti-Terrorism (AT) Level I Training. All vendor employees, including sub-vendors, assigned to this contract shall receive an initial Antiterrorism Level I Brief by a certified ATO Level II Officer within 30 days of reporting for duty. (Monthly briefings will be offered by the Garrison Antiterrorism Officer.) Annual refresher Antiterrorism Level I Training shall be completed on-line at https://jkodirect.jten.mil/Atlas2/page/login/Login.jsf or they may attend the monthly training offered by the Garrison ATO. The vendor shall submit certificates of completion for each affected vendor employee and sub-vendor employee to the COR and unit/activity security manager. (Ref Department of the Army, US Army Contracting Agency, SFCA-CO, 5 Sep 07, subject: Incorporation of Measures into the Contracting Process and AR 525-13, Antiterrorism).

1.6.8.2. Access and General Protection/Security Policy and Procedures. This standard language text is for vendor employees with an area of performance within an Army controlled installation, facility, or area. Vendor and all associated sub-vendors employees shall comply with applicable installation, facility, and area commander installation/facility access and local security policies and procedures (provided by government representative). The vendor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, or Security Office. Vendor workforce must comply with all personal identity verification requirements as directed by DoD, HQDA, and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in vendor security matters or processes.

1.6.8.3. iWATCH. All vendor employees, including sub-vendors, assigned to this contract shall receive a brief on the local iWATCH program (provided in conjunction with the AT Level I Training). This training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 days of reporting to duty and annual refresher training with the results reported to the COR.

1.6.8.4. Installation Access. All vendor employees, including sub-vendors, shall comply with applicable installation and facility access security policies and procedures at all work and TDY locations. The Fort

Gordon military installation is a limited access post. Unscheduled gate closures by the military police may occur at any time. In accordance with Army Regulation 525-13, paragraph 5-19, all prospective vendors will undergo a verification process by the installation Provost marshal Office, Director of Emergency Services to determine the trustworthiness and suitability prior to being granted access to federal property. This will be accomplished using the National Crime Information Center (NCIC) Interstate Identification Index (III). This is the minimum baseline background check for entrance onto Army Installations for non- CAC holders to include entrance of visitors (Ref AR 190-13, paragraph 8-2). All personnel entering or exiting the installation may experience a delay due to vehicle inspections, registration checks, verification of seat belt use, etc. All vehicles and personnel are subject to search and seizure. The search and seizure provisions shall apply to vendor personnel while within Fort Gordon's area of jurisdiction. Vendor personnel shall comply with all entry control requirements and security policies/procedures in effect.

Security procedures may change without notice.

1.6.8.2. PHYSICAL Security: The vendor shall be responsible for safeguarding all government equipment, information and property provided for vendor use. At the close of each work period, government facilities, equipment, and materials shall be secured.

1.6.8.3. Key Control. The Vendor shall establish and implement methods of making sure all keys/key cards issued to the Vendor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards.

No keys issued to the Vendor by the Government shall be duplicated. The Vendor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Vendor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

1.6.8.3.1. In the event keys, other than master keys, are lost or duplicated, the Vendor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re- keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Vendor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Vendor.

1.6.8.3.2. The Vendor shall prohibit the use of Government issued keys/key cards by any persons other than the Vendor’s employees. The Vendor shall prohibit the opening of locked areas by Vendor employees to permit entrance of persons other than Vendor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.8.4. Lock Combinations. The Vendor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Vendor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Vendor’s Quality Control Plan.

1.6.9. Post Award Conference/Periodic Progress Meetings: The Vendor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5.

The contracting officer, Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the vendor to review the vendor's performance. At these meetings the contracting officer will apprise the vendor of how the government views the vendor's performance and the vendor will apprise the Government of problems, if any, being experienced.

Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.6.10. Contracting Officer Representative (COR): The (COR) will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration The COR is authorized to perform the following functions:

assure that the Vendor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance: maintain written and oral communications with the Vendor concerning technical aspects of the contract:

issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Vendor's performance and notifies both the Contracting Officer and Vendor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Vendor personnel. A letter of designation issued to the COR, a copy of which is sent to the Vendor, states the responsibilities and limitations of the COR, especially regarding changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.11. Key Personnel: N/A. There are no personnel performing on this contract. Training is 100% Virtual.

1.6.11.1. Contract Manager and Alternate. N/A. There is no requirement for a Contract Manager and Alternate.

1.6.12. Identification of Vendor Employees: N/A. There are no vendors performing on this contract.

1.6.12.1. ID Badges. N/A. There are no vendors performing on this contract.

1.6.13. Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the vendor without written permission from the Contracting Officer.

All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.14. Organizational Conflict of Interest: Vendor and sub-vendor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Vendor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The Vendor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Vendor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.15. Invoicing.

1.6.15.1. Wide Area Workflow (WAWF) shall be implemented in accordance with DFAR 252.232-7003 Electronic Submission of Payment Requests. Manual invoices will not be accepted.

1.6.15.2. Format. All invoices shall be submitted in WAWF as a 2-in-1 invoice with all applicable monthly documentation attached. Monthly documentation includes Monthly Status Reports (MSR), In- Progress Reviews (IPR) and other reports where applicable as stated in the PWS. Monthly documentation may not be submitted via email.

Invoices submitted as anything other than a 2-in-1 and/or without attached monthly documentation will be rejected.

1.6.15.3. Routing. Invoices shall be routed to the COR as “inspector” as well as the S8/Resource Management officer as “acceptor”. When preparing an invoice, both the “inspector” and “acceptor” fields shall be completed with the DODAAC “W58TSU”.

This same DODAAC shall be used in both the “inspector” and “acceptor” field.

1.6.15.4. Email notification of invoice submission shall be sent to the COR and appropriate S8/Resource Management representative. This email shall be initiated through the WAWF system by clicking on the

"send more email notifications” link. This link is found at the bottom of the "submitted successfully" page after the invoice is submitted into the system. Email notifications, other than those initiated through WAWF, will not meet proper routing requirements and will not be accepted. If email notifications are not properly sent to appropriate individuals through WAWF, the invoice will be rejected.

1.6.15.5. A contract employee with the authority to bind the company contractually shall certify all invoices. Invoices shall be submitted no later than (NLT) ten days after the end of each month (30-day period), depending on the contract award date.

Failure to submit invoices in a timely manner is a direct violation of this contract agreement. The Government shall have the right to exercise a penalty cost, due to the vendor being out of compliance of this contract agreement.

1.6.15.6. The invoice submitted at the end of the period of performance shall state “final invoice.” This annotation shall be accomplished in Wide Area Workflow

Invoice 2-in-1 section, under Tab Misc. Info, and in the area of Initiator Information Comments.

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1. DEFINITIONS:

2.1.1. VENDOR. A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER. A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Vendor if that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5. DELIVERABLE. Anything that can be physically delivered but may include non-manufactured things such as meeting minutes or reports.

2.1.6. KEY PERSONNEL. Vendor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.7. PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.8. QUALITY ASSURANCE. The government procedures to verify that services being performed by the Vendor are performed according to acceptable standards.

2.1.9. QUALITY ASSURANCE Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of vendor performance.

2.1.10. QUALITY CONTROL. All necessary measures taken by the Vendor to assure that the quality of an end product or service shall meet contract requirements.

2.1.11. SUBVENDOR. One that enters into a contract with a prime vendor. The Government does not have privity of contract with the sub-vendor.

2.1.12. WORK DAY. The number of hours per day the Vendor provides services in accordance with the contract.

2.1.12. WORK WEEK. Monday through Friday, unless specified otherwise.

2.2. ACRONYMS:

ACOR Alternate Contracting Officer's Representative AFARS Army Federal Acquisition Regulation Supplement AR Army Regulation

CCE Contracting Center of Excellence CFR Code of Federal Regulations CJCSI Chairman of the Joint Chiefs of Staff Instruction CJCSM Chairman of the Joint Chiefs of Staff Manual CMR Vendor Manpower Reporting CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTR Contracting Officer's Technical Representative COTS Commercial-Off-the-Shelf DA Department of the Army DD250 Department of Defense Form 250 (Receiving Report) DD254 Department of Defense Contract Security Requirement List DFARS Defense Federal Acquisition Regulation Supplement DISA [Department of] Defense Information Systems Agency DMDC Defense Manpower Data Center DOD Department of Defense DODD Department of Defense Directive DODI Department of Defense Instruction FAR Federal Acquisition Regulation FM Field Manual GIAC Global Information Assurance Certification GSE GIAC Security Expert HIPAA Health Insurance Portability and Accountability Act of 1996 IA Information Assurance KO Contracting Officer OCI Organizational Conflict of Interest OCONUS Outside Continental United States (includes Alaska and Hawaii) ODC Other Direct Costs PIPO Phase In/Phase Out POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Program SOP Standing Operating Procedure TE Technical Exhibit TRADOC Training and Doctrine Command USACPB United States Army Cyber Protection Brigade

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1. Services: The Government will provide personnel to assist with facilities scheduling.

3.2. Facilities: The Government will provide the necessary workspace for the vendor staff to provide the support outlined in the PWS to include desk space, telephones, computers, and other items necessary to maintain an office environment.

3.3. Utilities: The Government will provide all utilities in the facility which will be available for the vendor’s use in performance of tasks outlined in this PWS. The Vendor shall instruct employees in utilities conservation practices. The vendor shall be responsible for operating under conditions that preclude the waste of utilities, which include turning off the water faucets or valves after using the required amount to accomplish cleaning vehicles and equipment.

3.4. Equipment: The Government will provide overhead projectors and student computers.

3.5. Materials: The Government will provide Standard Operating Procedures and Policies.

PART 4

VENDOR FURNISHED ITEMS AND SERVICES

4. VENDOR FURNISHED ITEMS AND RESPONSIBILITIES:

4.1. General: The vendor shall provide textbooks, hardware, software, licensing, shipping, printed materials, testing products, media resources, lab packages, and other courseware products, as required for each instructed course required to perform work under this contract that are not listed under Section 3 of this PWS.

4.2. Materials. The Vendor shall provide a copy of the training material (digital and/or printed) to students that can be used for reference after the conclusion of training.

4.2.1. Provide student material that can be used as a reference during GIAC exam for that subject. This material shall be updated quarterly or semi-annually so as to incorporate current-threat technology and not become obsolete.

4.2.1.2 Provide all classroom training materials such as student handouts, lesson plans, slides, and practical exercises.

4.4. Equipment. The Vendor shall furnish classroom equipment and supplies not listed under Section 3 of this PWS to meet the requirements of this PWS.

PART 5

SPECIFIC TASKS

5. Specific Tasks:

5.1. Basic Services. The vendor shall provide, maintain, and make available a Flexible Program for private on-line training to include virtual site management, unlimited exam attempts, and customer service support individual cyber training from the vendor’s catalog to include in Penetration Testing with Kali Linux, Evasion Techniques and Breaching Defenses, Windows User Mode Exploit Development, Macos Control Bypasses and Advance Web Attacks and exploitation. The Flexible Program will provide the USACPB training that can be used throughout the year, as needed, and applied towards any CTE training or certification products, including a fully hosted platform that allows personnel to sharpen skills and gain confidence in the safety of a simulated real-world enterprise infrastructure which can provide the services specified in this Performance Work Statement (PWS).

5.5. Curriculum Access:

5.5.1. Vendor will ensure on-line (Virtual) Curriculum is available 24 hours a day seven (7) days per week.

5.5.2. Vendor will maintain and report student, records, and statistics. Evaluate students and report academic concerns to the COR when warranted (never log-on; account activation etc.).

5.5.3. The vendor shall maintain a copy of all training/certification records for individuals attending training for a minimum of two years from the last day of training conducted executed under this contract.

5.5.4. Special Qualifications: None

5.6. Individual Needs & Custom Requirements may be used for products to include, but not limited to:

Single Seat Registrations online courses, Exams, Retakes, Continuous License, Assessments, etc.

Individual Needs & Custom Requirements also provides an online management tool for accountability including progress reports.

PART 6

APPLICABLE PUBLICATIONS

6. APPLICABLE PUBLICATIONS (CURRENT EDITIONS)

6.1. The Vendor must abide by all applicable regulations, publications, manuals, and local policies and procedures.

• AR 350-1, Army Training; http://www.apd.army.mil/series_range_pubs.asp?range=350

• AR 25-2, Information Assurance.

• AR 380-5, Department of the Army Information Security Program

• AR 530-1, Operations Security

• AR 380-53, dated April 1998, Information Systems Security Monitoring

• CJCSI 6510.01E, dated August 2007, Information Assurance (IA) and Computer Network Defense ( ND)

• CJCSM 6510.01A, dated June 2009, Information Assurance (IA) And Computer Network Defense (CND)

- Volume I (Incident Handling Program)

• DOD Directive 5105.21-M-1, dated August 1998, Department of Defense Sensitive Compartmented Information Administrative Security Manual

• DOD 5200.2-R, Personnel Security Program

• DODD 8530-1, dated January 2001, Computer Network Defense (CND) Directive

• DOD 8530.1-M, dated December 2003, CND Service Provider Certification and Accreditation Process Program Manual.

• TRADOC Pamphlet 350-70-12, dated 29 March 2004, Distributed Learning - Managing Courseware Production and Implementation

• TRADOC Pamphlet 525-7-8, dated 22 February 2010, The United States Army's Cyberspace Operations Concept Capability Plan 2016-2028.

• USASC&FG 350-5 (Ft Gordon Academic Practices)

• USASC&FG 350-22 (Test Control Policies and Procedures)

• IA Training Best Business Practices, dated 30 Nov 2009; https://atc.us.army.mil/iastar/regulations.php

• Applicable DOD, Joint, Army, TRADOC, and USASC&FG regulations, policies, SOPs, and guidance located at the DISA's IA one-stop-shop: http://iase.disa.mil/policy-guidance/index.html.

PART 7

ATTACHMENT/TECHNICAL EXHIBIT LISTING

7. Attachment/Technical Exhibit List:

7.1. Attachment 1/Technical Exhibit 1 – Performance Requirements Summary

TECHNICAL EXHIBIT 1

Performance Requirements Summary The vendor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

Performance Objective

Performance Standard Performance Threshold

Method of Surveillance

Incentive/Disincentive

PRS # 1

Provide flexible Vendor shall provide 24 hour, No deviation, 100% inspection, Document Vendor's program for CTE seven days a week unlimited access unless approved random sampling, performance in Vendor training and to CTE training and shall provide in advance by planned inspection, Performance certification. (5.1) all equipment, supplies, tools, the Government periodic inspection, Assessment Reporting materials, other mission items and customer surveys & System non-personal services necessary for validated customer instruction and support in the complaints virtual environment

PRS # 2 No deviation, 100% inspection, Document Vendor's Provide course Provide support for the installation, unless approved random sampling, performance in Vendor materials (5.1) configuration and administration of in advance by planned inspection, Performance the lab network. the Government periodic inspection, Assessment Reporting customer surveys & System validated customer complaints

PRS # 3

Provide Coordinate classes, conduct testing No deviation, 100% inspection, Document Vendor's administrative and maintain training materials. unless approved random sampling, performance in Vendor support. (5.0) in advance by planned inspection, Performance the Government periodic inspection, Assessment Reporting customer surveys & System validated customer complaints

PRS # 4 Exams must be available at all No deviation, 100% inspection, Document Vendor's Provide unlimited times, during the 12 month unless approved random sampling, performance in Vendor module exam subscription period. in advance by planned inspection, Performance attempts. (5.1) the Government periodic inspection, Assessment Reporting customer surveys & System validated customer complaints

W9124923R0012

TECHNICA

L EXHIBIT

DELIVERA

BLES

SCHEDULE

Deliverable Frequency # of Copies Medium/Format Submit To

CDRL A001 Monthly Progress Report (1.6.1.1)

Monthly, NLT 15th of the month

1 original Paper (hard copy) in MS Word or PDF

Attached to WAWF Invoice

CDRL A001

Training Records (1.6.1.2)

NLT one week following completion of a class

2 original Paper (hard copy) in MS Word or PDF;

Digital

Student; COR

CDRL A003

Quality Control Plan (1.6.1.3)

Initially – 2 weeks after contract start date.

Revisions as adjustments are made.

1 original Paper (hard copy) in MS Word or PDF

COR

CDRL A004

Voucher Accounts (1.6.1.4)

As required 1 original Paper (hard copy) in MS Word or PDF

COR

CDRL A005

End of Course Feedback (1.6.1.5)

NLT one week following completion of a class

1 original Paper (hard copy) in MS Word or PDF

COR

CLAUSES INCORPORATED BY REFERENCE

52.204-9 Personal Identity Verification of Contractor Personnel JAN 2011 52.212-4 Contract Terms and Conditions--Commercial Products and

Commercial Services

DEC 2022

52.222-50 Combating Trafficking in Persons NOV 2021 52.232-33 Payment by Electronic Funds Transfer--System for Award

Management

OCT 2018

252.203-7000 Requirements Relating to Compensation of Former DoD Officials

SEP 2011

252.204-7012 Safeguarding Covered Defense Information and Cyber Incident Reporting

JAN 2023

252.211-7003 Item Unique Identification and Valuation JAN 2023 252.232-7003 Electronic Submission of Payment Requests and Receiving

Reports

DEC 2018

252.232-7010 Levies on Contract Payments DEC 2006

CLAUSES INCORPORATED BY FULL TEXT

52.204-24 REPRESENTATION REGARDING CERTAIN TELECOMMUNICATIONS AND VIDEO

SURVEILLANCE SERVICES OR EQUIPMENT (NOV 2021)

The Offeror shall not complete the representation at paragraph (d)(1) of this provision if the Offeror has represented that it "does not provide covered telecommunications equipment or services as a part of its offered products or services to the Government in the performance of any contract, subcontract, or other contractual instrument" in paragraph (c)(1) in the provision at 52.204-26, Covered Telecommunications Equipment or Services-- Representation, or in paragraph (v)(2)(i) of the provision at 52.212-3, Offeror Representations and Certifications- Commercial Products and Commercial Services. The Offeror shall not complete the representation in paragraph (d)(2) of this provision if the Offeror has represented that it "does not use covered telecommunications equipment or services, or any equipment, system, or service that uses covered telecommunications equipment or services" in paragraph (c)(2) of the provision at 52.204-26, or in paragraph (v)(2)(ii) of the provision at 52.212-3.

(a) Definitions. As used in this provision-

Backhaul, covered telecommunications equipment or services, critical technology, interconnection arrangements, reasonable inquiry, roaming, and substantial or essential component have the meanings provided in the clause 52.204-25, Prohibition on Contracting for Certain Telecommunications and Video Surveillance Services or Equipment.

(b) Prohibition.

(1) Section 889(a)(1)(A) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L.

115-232) prohibits the head of an executive agency on or after August 13, 2019, from procuring or obtaining, or extending or renewing a contract to procure or obtain, any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. Nothing in the prohibition shall be construed to--

(i) Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or

(ii) Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(2) Section 889(a)(1)(B) of the John S. McCain National Defense Authorization Act for Fiscal Year 2019 (Pub. L.

115-232) prohibits the head of an executive agency on or after August 13, 2020, from entering into a contract or extending or renewing a contract with an entity that uses any equipment, system, or service that uses covered telecommunications equipment or services as a substantial or essential component of any system, or as critical technology as part of any system. This prohibition applies to the use of covered telecommunications equipment or services, regardless of whether that use is in performance of work under a Federal contract. Nothing in the prohibition shall be construed to--

(i) Prohibit the head of an executive agency from procuring with an entity to provide a service that connects to the facilities of a third-party, such as backhaul, roaming, or interconnection arrangements; or

(ii) Cover telecommunications equipment that cannot route or redirect user data traffic or cannot permit visibility into any user data or packets that such equipment transmits or otherwise handles.

(c) Procedures. The Offeror shall review the list of excluded parties in the System for Award Management (SAM) (https://www.sam.gov) for entities excluded from receiving federal awards for "covered telecommunications equipment or services."

(d) Representations. The Offeror represents that--

(1) It [ ___ ] will, [ ___ ] will not provide covered telecommunications equipment or services to the Government in the performance of any contract, subcontract or other contractual instrument resulting from this solicitation. The Offeror shall provide the additional disclosure information required at paragraph (e)(1) of this section if the Offeror responds "will" in paragraph (d)(1) of this section; and

(2) After conducting a reasonable inquiry, for purposes of this representation, the Offeror represents that--

It [ ___ ] does, [ ___ ] does not use covered telecommunications equipment or services, or use any equipment, system, or service that uses covered telecommunications equipment or services. The Offeror shall provide the additional disclosure information required at paragraph (e)(2) of this section if the Offeror responds "does" in paragraph (d)(2) of this section.

(e) Disclosures.

(1) Disclosure for the representation in paragraph (d)(1) of this provision. If the Offeror has responded "will" in the representation in paragraph (d)(1) of this provision, the Offeror shall provide the following information as part of the offer:

(i) For covered equipment--

(A) The entity that produced the covered telecommunications equipment (include entity name, unique entity identifier, CAGE code, and whether the entity was the original equipment manufacturer (OEM) or a distributor, if known);

(B) A description of all covered telecommunications equipment offered (include brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); and

(C) Explanation of the proposed use of covered telecommunications equipment and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(1) of this provision.

(ii) For covered services--

(A) If the service is related to item maintenance: A description of all covered telecommunications services offered (include on the item being maintained: Brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); or

(B) If not associated with maintenance, the Product Service Code (PSC) of the service being provided; and explanation of the proposed use of covered telecommunications services and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(1) of this provision.

(2) Disclosure for the representation in paragraph (d)(2) of this provision. If the Offeror has responded "does" in the representation in paragraph (d)(2) of this provision, the Offeror shall provide the following information as part of the offer:

(i) For covered equipment--

(A) The entity that produced the covered telecommunications equipment (include entity name, unique entity identifier, CAGE code, and whether the entity was the OEM or a distributor, if known);

(B) A description of all covered telecommunications equipment offered (include brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); and

(C) Explanation of the proposed use of covered telecommunications equipment and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(2) of this provision.

(ii) For covered services--

(A) If the service is related to item maintenance: A description of all covered telecommunications services offered (include on the item being maintained: Brand; model number, such as OEM number, manufacturer part number, or wholesaler number; and item description, as applicable); or

(B) If not associated with maintenance, the PSC of the service being provided; and explanation of the proposed use of covered telecommunications services and any factors relevant to determining if such use would be permissible under the prohibition in paragraph (b)(2) of this provision.

(End of provision)

52.204-25 PROHIBITION ON CONTRACTING FOR CERTAIN TELECOMMUNICATIONS AND VIDEO

SURVEILLANCE SERVICES OR EQUIPMENT (NOV 2021)

(a) Definitions. As used in this clause--

Backhaul means intermediate links between the core network, or backbone network, and the small subnetworks at the edge of the network (e.g., connecting cell phones/towers to the core telephone network). Backhaul can be wireless (e.g., microwave) or wired (e.g., fiber optic, coaxial cable, Ethernet).

Covered foreign country means The People's Republic of China.

Covered telecommunications equipment or services means--

(1) Telecommunications equipment produced by Huawei Technologies Company or ZTE Corporation (or any subsidiary or affiliate of such entities);

(2) For the purpose of public safety, security of Government facilities, physical security surveillance of critical infrastructure, and other national security purposes, video surveillance and telecommunications equipment produced by Hytera Communications Corporation, Hangzhou Hikvision Digital Technology Company, or Dahua Technology Company (or any subsidiary or affiliate of such entities);

(3) Telecommunications or video surveillance services provided by such entities or using such equipment; or

(4) Telecommunications or video surveillance equipment or services produced or provided by an entity that the Secretary of Defense, in consultation with the Director of National Intelligence or the Director of the Federal Bureau of Investigation, reasonably believes to be an entity owned or controlled by, or otherwise connected to, the government of a covered foreign country.

Critical technology means--

(1) Defense articles or defense services included on the United States Munitions List set forth in the International Traffic in Arms Regulations under subchapter M of chapter I of title 22, Code of Federal Regulations;

(2) Items included on the Commerce Control List set forth in Supplement No. 1 to part 774 of the Export Administration Regulations under subchapter C of chapter VII of title 15, Code of Federal Regulations, and controlled--

(i) Pursuant to multilateral regimes, including for reasons relating to national security, chemical and biological weapons proliferation, nuclear nonproliferation, or missile technology; or

(ii) For reasons relating…