Draft_PWS_USMIRSDBA_posted_22_Feb_18.pdf

PERFORMANCE WORK STATEMENT (PWS)

HQ, United States Military Entrance Processing Command (USMEPCOM) MEPCOM INTEGRATED

RESOURCE SYSTEM, ADOBE AND BUSINESS ANALYSIS (MIRSDBA II)

Part 1

General Information

1. GENERAL: This is a non-personal services contract to provide maintenance and support for MEPCOM

Integrated Resource System (MIRS), business analysis, project management, and process improvement services, for USMEPCOM’s Operations Directorate (J-3). The government will not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the contractor who, in turn is responsible to the government.

1.1 Description of Services/Introduction: The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform Information Technology (IT) Services (MIRSDBA2) as defined in this PWS except for those items specified as government furnished property and services. The contractor shall perform to the standards in this contract.

1.2 Background: Work is required to support and maintain MIRS, Service Oriented Architecture (SOA), e-

Records, e-Medical and e-Security systems sustainment, which will allow USMEPCOM to maintain its core applicant processing functions in a web enabled, net-centric environment. Additionally, business analysis, project management, meeting facilitation, and process improvement services are required to create and enhance USMEPCOM’s operational efficiencies.

1.3 Objectives: The contractor shall provide professional and competent services to accomplish all deliverables and execute all performance requirements at or above the standards outlined in the PRS.

1.4 Scope: The scope of this contract is as follows:

1.4.1 The contractor shall provide maintenance and support for the Adobe software application.

1.4.2 The contractor shall provide USMEPCOM with maintenance, support, updates, and upgrades for its

MIRS platform.

1.4.3 The contractor shall provide USMEPCOM with a Business Analyst (BA) who shall work with the

USMEPCOM J-3 Operations Directorate; acting as a liaison between internal and external USMEPCOM J-3 customers.

1.5 Period of Performance: The Period of Performance (POP) for this contract shall be as follows:

Base Period 4/01/2018 – 3/31/2019 Option One 4/01/2019 – 8/31/2019 Option Two 9/31/2019 – 2/28/2020

1.6 General Information

1.6.1 Quality Control: The contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s quality control program is the means by which the contractor assures the work complies with the requirement of the contract. The contractor shall provide the Quality Control Plan (QCP) no later than 20 business days after award of the contract. Copies of the QCP are to be provided to the Contracting Officer (KO) and the Contracting Officer Representative (COR) via e-Mail as a Microsoft Word 2007 or newer version document. Any changes to the QCP shall be provided to the KO and COR in the same fashion described above within five business days when changes are made thereafter. After acceptance of the QCP, the contractor shall receive the contracting officer’s acceptance in writing of any proposed change to his QC system.

1.6.2 Quality Assurance: The government will evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is focused on what the Government will do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.3 Recognized Holidays: IT services will normally not occur on the holidays listed below. However, for special projects, urgent repairs, or emergencies it may be necessary to conduct activities during this period to avoid unnecessary system outages during normal business hours. Proper coordination shall be made with the COR to ensure that USMEPCOM personnel are available to support and allow access.

Legal Federal holidays:

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day

1.6.4 Hours of Operation: The contractor shall staff in such a manner that business operations throughout

USMEPCOM facilities can be fully supported from 0330 to 2030 hours US Central Time Monday through Friday and on select Saturdays designated as processing days in which normal business operations occurs at select MEPS. Weekend processing days occur up to twelve times a year.

1.6.4.1 The contractor shall staff the contract management contact(s) and support staff are on-site at HQ

USMEPCOM from 0600 to 1800 hours Central Time Monday through Friday excluding the Federal Holidays listed elsewhere in this PWS. The contractor shall have staff available (on call) for emergencies and/or system outages outside of the previously stated business hours of 0330 to 2030 to include weekends and holidays.

1.6.4.2 There are typically two weekends per month reserved for IT system maintenance to include software releases and change management functions. The contractor shall staff in a manner to support all requested and required services to maintain the systems and provide services stated in this PWS. The contractor shall arrange through the IT change management process any other non-business hours to schedule outages as necessary to maintain systems IAW the level required in this PWS.

1.6.4.3 The contractor shall staff at HQ USMEPCOM after business hours to support ongoing system maintenance, application of patches and changes for security requirements (STIGs) as needed to fulfil contract performance and deliverables.

1.6.5 Place of Performance: The work to be performed under this contract shall be primarily performed at the government facility of HQ USMEPCOM, 2834 Green Bay Road, North Chicago, IL 60064-3094 unless otherwise coordinated and approved by the COR a minimum of one day in advance or off-site performance. Travel to MEPS and remote services granted on a per case basis with discussion with Contract Management and the COR.

1.6.6 Type of Contract: The government will award a Firm-Fixed Price contract.

1.6.6.1 For contracts that require handling or access to classified information. Contractor shall comply with FAR

52.204‐2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with— (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22‐M); (2) any revisions to DOD 5220.22‐M, notice of which has been furnished to the contractor.

1.6.7 Security Requirements: Contractor personnel performing work under this contract shall have an appropriate background check IAW 1.6.7.17 of this PWS and be registered in JPAS at time of the contract award, and shall maintain the level of security required for the life of the contract.

1.6.7.1 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information, and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured.

1.6.7.1.1 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the QCP. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

1.6.7.1.2 In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.6.7.1.3 The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the Contracting Officer.

1.6.7.1.4 Contractor management shall notify COR within one business day of names and dates whenever current employees terminate work during the contract period. Contractor management shall notify the COR at least one week before new personnel are to begin working at USMEPCOM. If the start date changes, the COR shall be notified no later than the scheduled start date. The contractor shall notify the COR as soon as possible before any personnel are terminating work at USMEPCOM. The contractor shall work with the COR on a smooth transition, including any final documentation and knowledge transfer to the GPM and COR as applicable.

1.6.7.1.5 Information assurance (IA)/information technology (IT) training. All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2 before being granted access into USMEPCOM. All contractor employees shall in process through the USMEPCOM J-6 Cyber Security Office (CSO) on the first day of on boarding.

1.6.7.1.6 Information Assurance (IA)/ Information Technology (IT) Certification. Per DoD 8570.01-M , DFARS

252.239.7001 and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. J-6 CSO will review baseline and Computing Environment certifications for applicability based on labor category and tasks vendor employees are to perform. All certification as stipulated in DoD 8570.01-M must be completed upon contract award.

1.6.7.2 AT Level I Training. All contractor employees, to include subcontractor employees, requiring access Army installations, facilities, and controlled access areas shall complete AT Level I awareness training within 20 business days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR within five business days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following websites: http://jko.jten.mil or Contractor Training and http://www.mepcom.army.mil/Home/Contractors.aspx.

1.6.7.3 Access and General Protection/Security Policy and Procedures.

Contractor and all associated sub-contractors employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.6.7.3.1 Verification Access Roster/Visit Access Request provided a minimum of five business days prior date for which access is sought.

1.6.7.3.2 The contractor shall ensure compliance with Department of Defense Information Assurance Certification and Accreditation Process (DIACAP) and when applicable its successor Risk Management Framework (RMF) process and Department of Defense Directive Number 8500.1 and 8500.2.

1.6.7.3.3 The contractor shall ensure compliance with DTM 08-027 “Security of Unclassified DoD Information on Non-DoD Information Systems.”

1.6.7.3.4 All vendors/contractors shall sign an Acceptable Use Agreement or a Privileged Level Use Agreement and a Non-Disclosure Agreement (NDA) regardless of work location. These documents shall be signed prior to execution of the contract or the beginning of work and submitted to the COR.

1.6.7.3.5 The contractor, in the performance of this contract, may receive or have access to "non-public information.” The contractor personnel shall sign non-disclosure statements, to be filed in the COR’s contract file, and agrees to use and examine this information exclusively in the performance of this contract and to take the necessary steps in accordance with government regulations to prevent disclosure of such information to any party outside the government. "Non-public information", as used herein, includes trade secrets, confidential or proprietary business information (as defined for government employees in 18 USC 1905); advance procurement information (future requirements, statements of work, budget/program/planning data, etc.); information protected by the Privacy Act (social security numbers, home addresses, etc.); sensitive information protected from release under the Freedom of Information Act (pre-decisional deliberations, litigation materials, privileged material, etc.); and information that has not been released to the general public and has not been authorized for such release (as defined for government employees in 5 CFR 2635.703). The contractor shall exercise good faith and reasonable judgment in deciding whether information regarding other contractors is to be considered privileged or confidential. When in doubt, such information shall be considered privileged and confidential, and not disclosed, except as required to perform the contracts.

1.6.7.4 iWATCH Training. The contractor and all subcontractors shall brief all employees on the local iWATCH program (training shall be completed within 20 business days of contract start date and within 2 business days of new employees commencing performance with the results forwarded to the COR NLT 20 business days after contract award. awardhttp://www.mepcom.army.mil/Home/Contractors.aspx.

1.6.7.5 Army Training Certification Tracking System (ATCTS) registration for contractor employees who require access to government information systems. All contractor employees with access to a government info system shall be registered in the ATCTS (Army Training Certification Tracking System) https://atc.us.army.mil/iastar/index.php at commencement of services, and shall successfully complete the DOD Information Assurance Awareness prior to access to the information systems and then annually thereafter.

1.6.7.6 Global Address Listing (GAL). All contract employees who require access to Government Information Systems shall update their profile and Global Address Listing (GAL) information:

https://www.dmdc.osd.mil/milconnect within ten business days of being granted IT access. Assigned telephone extensions shall be provided and recorded in MilConnect in such a manner so the extension is displayed in the GAL.

1.6.7.7 OPSEC Training. Per AR 530-1, Operations Security, new contractor employees shall complete Level I

OPSEC training within 20 business days of their reporting for duty. All contractor employees shall complete annual OPSEC awareness training. All contractor employees shall abide by USMEPCOM OPSEC Policies. http://www.mepcom.army.mil/Home/Contractors.aspx

1.6.7.7.1 For contracts that require a formal OPSEC program. The contractor shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer. This plan will include a process to identify critical information, where it is located, who is responsible for it, how to protect it and why it needs to be protected. The contractor shall implement OPSEC measures as ordered by the commander. In addition, the contractor shall have an identified certified Level II OPSEC coordinator per AR 530-1.

1.6.7.8 Threat Awareness and Reporting Program (TARP). IAW AR 381-12, 1-10 all DA contract employees possessing a security clearance shall receive annual TARP training instructed by a Criminal Investigation agent or other trainer as specified in AR381-12,2-4b. Training shall be accomplished annually during the organization's scheduled TARP training session. In those instances where live training is not possible, such as in deployed theaters of operation, CI units may, in coordination with appropriate commanders, develop alternative means to conduct threat awareness training and meet the requirements of this AR 381-12.

1.6.7.9 Information Assurance (IA) Information Technology (IT) Training. All contractor employees and associated sub-contractor shall complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions shall comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2 PRIOR to starting employment. All contractor employees shall in process through the USMEPCOM J-6 Cyber Security Office on the first day of on boarding.

1.6.7.10 Annual Cyber Awareness Training. All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities and controlled access areas shall complete the Annual Cyber Awareness Training located at the US Army IA Training Center web site. Link:

https://ia.signal.army.mil/DoDIAA/default.asp

1.6.7.11 Acceptable Use Policy. All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities and controlled access areas shall complete a new Acceptable Use Policy (Annual Requirement) at the same web site: Link: https://ia.signal.army.mil/DoDIAA/default.asp.

(Click “Login,” Log in with CAC, confirm information on page, click on “View and Sign AUP.”

1.6.7.12 Security Investigation Requirements. In accordance with Army Regulation 25-2, Army Regulation 380-

67, and DoD Directive 5200.8, there are certain categories of positions or duties, which, although not requiring access to classified information, if performed by unworthy persons, could enable them to jeopardize the security of USMEPCOM or otherwise endanger the national security. The investigative requirements for personnel occupying Information Systems Positions designated IT-I, IT-II and IT-III are as follows: IT-I: T5 IT-II: T3 or T3R and IT-III: T1. All contractors performing tasks under this contract are required to complete and pass a background investigation commensurate with level IT-II for T3 or T3R.

1.6.7.12.1 USMEPCOM is a Confidentiality, Integrity, and Availability Moderate environment. The information is Non-Critical SENSITIVE. Required background investigation documentation and baseline/computing environment certifications are to be provided to the J-6 MEIT Plans and Resources Office COR to facilitate on boarding of vendor employees. USMEPCOM J-1 will submit requests for investigation documents and provide authorization for CAC issuance.

1.6.7.12.2 All contractors or subcontractors working on this contract must obtain a CAC and have an appropriate security check. To begin the security investigation required in 1.6.7.17 contractors shall submit the following completed documents to the designated COR for each contract employee:

a. OPM OF306

b. UMF 380-1-3-E

c. Proof of citizenship (passport or birth certificate)

d. Resume (verifying individual has not had a gap in performance of work supporting the Federal Government in excess of two years)

e. TASS form

f. DD2875

1.6.7.12.3 CAC issuance. Contractor employee requires a favorably adjudicated T3/T3R Non- Critical Sensitive investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following:

(1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely;

(2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or

(3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled T3/T3R at the Office of Personnel Management.

1.6.7.12.4 For Contractors that do not require CAC, but require access to DoD facility or installation.

Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

1.6.8 Special Qualifications. Contractors shall meet the appropriate qualifications for the task or subtask being performed. Contractors shall possess and maintain these qualifications in addition to any Information Assurance workforce certification requirements. All certificates shall be provided to the COR, via email, within five business days of employee hire. Baseline and computing environment certificates will be reviewed and approved by the J-6 Cyber Security Office prior to individual contractors being vetted to enter the facility.

1.6.9 Post Award Conference/Periodic Progress Meetings: The Contractor shall attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5. The contracting officer, Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings, the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor shall apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.6.9.1 Within two business days after contract award, the contractor shall coordinate with the COR a post award conference with the government. The meeting shall take place at HQ USMEPCOM, 2834 Green Bay Road, North Chicago, IL 60064-3094 as soon as possible but, no later than 10 business days after contract award. The meeting attendees shall include, but not be limited to, the COR, the Quality Assurance Evaluator(s) and contractor management. The KO may be available by phone for contract questions.

1.6.10 Contracting Officer Representative (COR): The (COR) will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance:

maintain written and oral communications with the Contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the KO and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.11 Key Personnel: The following personnel are considered key personnel by the government: On-site contract manager and Alternate On-site contract manager. The contractor shall provide a contract manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the contractor when the manager is absent shall be designated in writing to the KO. The contract manager or alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The contract manager or alternate shall be available on-site between 0600 and 1800 (local time), Monday thru Friday except Federal holidays or when the government facility is closed for administrative reasons. Contract manager or alternate shall be available via telephone to respond to urgent or emergency situations during non-business hours to include weekends and holidays.

1.6.12 Identification of Contractor Employees: All contract personnel attending meetings, answering

Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They shall also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Contract personnel shall obtain a Common Access Card (CAC) that is to be worn at all times in the building, except when in use for computer, or door access.

Contractor personnel shall maintain possession of their issued CAC at all times.

1.6.13 Contractor Travel: Contractor personnel may be required to travel during the performance of this contract. Travel will be directed as needed and approved by the COR. Travel requests shall be sent to the COR for approval no later than two weeks prior to the travel. The contractor shall be reimbursed for actual expenses for COR approved travel in accordance with FAR 31.205-46 for allowable and reasonableness of travel expenses. The contractor shall provide receipts for all lodging, rental cars, mileage, and any miscellaneous expenses with the next invoice after travel is completed. General and Administrative expenses or profit will not allowed on travel. Contractor shall be authorized travel expenses consistent with the substantive provisions of the Joint Travel Regulation (JTR) and the limitation of funds specified in this contract. All travel requires Government approval/authorization and notification to the COR.

1.6.14 Other Direct Costs This category includes travel (outlined in 1.6.13).

1.6.15 Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the Contracting Officer. All materials supplied to the Government will be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.16 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The Contractor’s mitigation plan shall be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.17 Phase-In Period: The contractor shall submit its phase-in plan at proposal submission. The contractor shall ensure there will be minimum service disruption to vital Government business and no service degradation during and after the phase-in period. During the phase in period, the contractor shall become familiar with performance requirements in order to commence full performance of services on 1 April 2018. The contractor shall develop comprehensive procedures for phasing-in performance to the level prescribed and within the time allowed under the contract’s terms and conditions, at a minimum, to:

Certifications are required for desktop access, system access and for elevated privileges on systems (system admin rights). The contractor shall ensure that its employees have obtained required security clearances prior to beginning transition activities. The contractor shall develop comprehensive procedures for phasing-in performance to the level prescribed and within the time allowed under the contract’s terms and conditions, at a minimum, to:

1. Establish its Project Management Office (PMO)

2. Recruit and hire necessary personnel

3. Obtain all required personnel certifications and clearances

4. Develop and submit any required deliverables

5. Attend post-award meetings as required

6. If subsequent, phase-in period meetings are required, the COR will coordinate and schedule with the KO and contractor’s APM and PM

7. Accomplish any necessary training and obtain any required certifications

8. Prepare to assume full responsibility for all areas of operation IAW the terms and conditions of this contract

9. Ensure expiring contractor’s deliverables are recompiled to validate/verify working condition prior to phase-in period’s end

10. Participate in joint inventories and sign for Government Furnished Property (GFP) to include transfer of property and documentation, as agreed to between the parties (e.g., Appropriate Federal, DoD, and/or Army regulations)

The contractor shall identify and provide support services coordinated with the outgoing contractor personnel, and Government personnel, to transfer knowledge and total system support requirements as they are identified and being performed in the PWS. During the transition period, the contractor shall convene weekly status meetings to maintain effective communication with the outgoing contractor and Government personnel.

1.6.18 Phase-Out Period. The phase-out period occurs at contract’s termination or during the final option period at no additional cost to the government. The written plan shall be submitted to the KO and the COR No Later Than (NLT) forty (40) business days prior to the end of the contract, and proposed changes/revisions within ten (10) business days of proposed implementation date. The contractor’s recommended changes or revisions shall be electronically submitted within ten (10) workdays in MS WORD format to the KO and COR for review. KO acceptance is required prior to implementation of the contractor’s phase- out period plan changes or revisions, and proposed changes/revisions within ten (10) workdays of proposed implementation date. The contractor's phase-out plan shall include the following:

1. The contractor shall establish and implement plans for an orderly phase-out of its contracted operations and not disrupt or adversely influence the day-to-day conduct of government business during its phase-out period.

2. The contractor shall develop a phase-out period plan to effect a smooth and orderly transfer of contract responsibility to its successor fully describing its approach to the following issues.

3. Notify employees.

4. Turn-over of work-in-progress.

5. Remove the contractor’s property.

6. Transfer all data and information.

7. Ensure continuity of operations.

8. Reconcile all requisitions, and work-in-progress.

9. Clean-up building is within the contractor work areas.

10. Provide for transitioning and training successor’s personnel on GFE used in performance of: this contract, specialized equipment, utilities systems and ongoing work its successor shall be required to complete; and identify its personnel holding government-issued badges/CACs, keys and GFEs.

11. The contract shall submit its phase-out period plan electronically NLT forty (40) business days before end of contract MS WORD format to the COR and KO for review. The KO’s approval is required prior to implementation of the contractor’s phase-out period plan.

12. After KO approval of the phase-out period plan, the contractor’s recommended changes or revisions shall be electronically submitted within 10 workdays in MS WORD format to the COR and KO for review. KO approval is required prior to implementation of the contractor’s phase- out period plan changes or revisions.

13. During the succeeding contractor’s phase-in period, an observation period shall occur at which time personnel of the incoming contractor’s workforce may observe operations and performance methods of the incumbent contractor. This will allow not only for continuity of services pursuant to FAR Clause 52.237-3 (Continuity of Services), but also an orderly turnover of facilities, and records. The incumbent contractor shall not defer any requirements for the purpose of avoiding responsibility or of transferring such responsibility to the succeeding contractor; and fully cooperate with the succeeding contractor and the government so as not to interfere with mission requirements.

14. Inventory GFP.

15. Participate in a physical GFP inventory with its successor and to be observed by the COR.

16. The contractor shall identify how it will coordinate with the incoming contractor and/or Government personnel to transfer knowledge.

17. The contractor shall also establish and maintain effective communication with the incoming contractor/Government personnel for the period of the transition via weekly status meetings.

1.7 Requirements & Qualifications. Contractor personnel shall at a minimum possess the qualifications and certifications for the tasks below. Additionally, the contractor shall not receive payment from USMEPCOM for its employees performing the tasks below (described in detail in part 5 of this PWS), who do not possess the qualifications and certifications below.

1.7.1 Requirements & Qualifications for Task 1 – Adobe Support. Contract personnel will have a minimum

Adobe AEM Solution architect computing environment certification. The contractor shall have a minimum of seven (7) years’ experience providing solutions and executing multiple AEM/CQ5 based projects. Additionally, at least three (3) years of specialized experience strategically installing, configuring, implementing, and integrating AEM/CQ5 software at the enterprise level and providing associated knowledge transfer. In addition, the contractor shall have documented success working with AEM architecture, experience in using AEM administration and development tools. The contractor shall be proficient in designing, developing, supporting, providing maintenance and administrating solutions using AEMA, Java, SQL (Oracle), Service Oriented Architecture (SOA), WebLogic, Simple Object Access Protocol (SOAP), PDF, Department of Defense Architecture Framework (DoDAF) and CompTIA Security + Certified. Additionally, contractor shall be CompTIA Security + Certified and pass an IT-II: T3/T3R. NACLC (National Agency Check with Local Credit Check) investigation with

IAT-II.

1.7.2 Requirements & Qualifications for Task 2 – Oracle Forms Maintenance, Management, and Migration Support. Qualifications: Oracle Forms Maintenance, Management and Migration Support - Oracle 11g Certified Database Administrator with a minimum of five years’ experience in Oracle Database Administration including migrations from older to newer database versions, for example 9i to 10g, 10g to 11g, or 11g to 12c. Minimum two years' Certified Computing Environment experience in development and maintenance of Oracle Forms on the Oracle Forms & Reports product platform.

Additionally, contractor shall be CompTIA Security +Certified and pass an IT-II: T3/T3R.

1.7.3 Requirements & Qualifications for Task 3 – Business Analysis. Qualifications: 5 years of work experience in 80% of the tasks outlined in Part 5.4, task section, and a Master’s degree.

OR 7 years of work experience in 80% of the tasks outlined in Part 5.4, task section, and a Bachelor's degree.

1.7.4 Requirements & Qualifications for Task 4 – WebLogic Application Server Administration Support Function.

Qualifications: Oracle WebLogic/Fusion Middleware Engineering Support – Possess Oracle Fusion Middleware on WebLogic Server - System Certified Computing Environment Certification AND Oracle Fusion Middleware on WebLogic Server - Web Servers Certified Computing Environment Certification AND Oracle Fusion Middleware on WebLogic Server - Identity and Access Management Certified Computing Environment Certification with a minimum of five years’ experience with Oracle WebLogic/Fusion Middleware Engineering Support. Additionally, contractor shall be CompTIA Security + Certified and pass an IT-II: T3/T3R.

1.8 Common Access Card: Common Access Card (CAC) shall be turned in to the COR at the end of the contract task.

1.9 Equipment Inventory: Prior to commencement of services, annually, and upon change of the property custodian/hand receipt holder, and prior to the termination of the contract, the contractor, in conjunction with the government, shall conduct a joint inventory of all GFP / GFE/ GFI and shall receipt for all property provided by the government. The contractor and the government will jointly determine the working order and condition of all GFP / GFE / GFI, identify excess or obsolete items, record items of property missing or not in working order and certify their agreement of working order and defectiveness in accordance with AR 735-5. The contractor shall reimburse the government for loss or damage to GFP / GFE other than normal wear and tear. The contractor shall return all GFP / GFE to the government upon expiration of the contract or request of USMEPCOM in the same condition as received except for fair wear and tear. The government reserves the right to modify, update, substitute, move, or replace any GFP / GFE during the contract term. The contractor shall provide copies of all executed hand receipts to the COR.

1.10 Disposal of Government Equipment: The government will dispose of excess or unserviceable GFP / GFE that the contractor has identified to the COR. The contractor shall identify equipment by nomenclature, serial number, stock number, and line item number as reflected on the hand receipt.

1.11 Non-Government Furnished Equipment: The contractor shall ensure that its personnel do not possess or utilize Non-GFE personal computers, monitors, external computer equipment, storage devices or machines without proper authorization from the government.

1.12 Liability for Government Equipment: Contractor companies shall be held liable for loss of government equipment by contractor employees and shall reimburse the government accordingly.

1.13 Reference Documents: The government will provide reference material/documents, upon request.

USMEPCOM shall provide access to technical and software manuals for all computer systems as required.

1.14 Telephones: The use of government telephones by the contractor shall be permitted in direct support of the contract and for official government use only. Any use of government telephone facilities that is not in direct support of this contract or for official government use, shall be at the expense of the contractor via credit card, third-party billing, etc.

1.15 Laptop Issuance: The contractor shall, prior to the kick-off meeting, email the number of laptops needed for their contractor personnel. The email shall be sent to the COR and the KO shall be copied on the email as well.

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1 DEFINITIONS:

2.1.1 CONTRACTOR: A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2 CONTRACTING OFFICER (KO): A person with authority to enter into, administer, and/or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.3 CONTRACTING OFFICER'S REPRESENTATIVE (COR): An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms or conditions of the contract.

2.1.4 DEFECTIVE SERVICE: A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5 DELIVERABLE: Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

2.1.6 KEY PERSONNEL: Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.7 PHYSICAL SECURITY: Actions that prevent the loss or damage of government property.

2.1.8 QUALITY ASSURANCE: The government procedures to verify that services being performed by the contractor are performed according to acceptable standards.

2.1.9 QUALITY ASSURANCE Surveillance Plan (QASP): An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.10 QUALITY CONTROL. All necessary measures taken by the contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.11 SUBCONTRACTOR: One that enters into a contract with a prime contractor. The government does not have privity of contract with the subcontractor.

2.1.12 WORK DAY: The number of hours per day the contractor provides services in accordance with the contract.

2.1.13 WORK WEEK: Monday through Friday, unless specified otherwise.

2.2 ACRONYMS:

AEM - Adobe Experience Manager AEMA - Adobe Experience Manager Assets AR - Army Regulation

ATCTS - Army Training Certification Tracking System BA- Business Analyst CAC - Common Access Card CFR - Code of Federal Regulations CI - Criminal Investigation CMR - Contractor Management Reporting CoN - Certificate of Networthiness CONOPS – Concept of Operations COR - Contracting Officer Representative CPU - Central Processing Unit

CQ5

CSO - Cyber Security Office DA - Department of Army DADSIWG - Defense Accession Data Systems Integration Working Group DFARS - Defense Federal Acquisition Regulation Supplement

DFSX -

DIACAP - Department of Defense Information Assurance Certification and Accreditation Process DoD - Department of Defense DoDAF - Department of Defense Architecture Framework DoDD - Department of Defense Directive DTM - Directive Type Memorandum FAR - Federal Acquisition Regulation FPCON - Force Protection Condition FY - Fiscal Year GAL - Global Address Listing GE - Government Equipment GFE - Government Furnished Equipment GFI - Government Furnished Information GFP - Government Furnished Property GPM - Government Program Manager HQ - Headquarters HQDA - Headquarters, Department of Army IA - Information Assurance IAW - In Accordance With ID - Identification IT - Information Technology J1 - USMEPCOM Human Resources Directorate J3 - USMEPCOM Operations Directorate J4 - USMEPCOM Logistics/Supply Directorate J6 - USMEPCOM Information Technology Directorate JTR - Joint Travel Regulation KO - Contracting Officer MEPS - Military Entrance Processing Stations MIRS MEPCOM Integrated Processing System MIRSDBA2 - MEPCOM Integrated Resource System, aDobe, and Business Analysis MS - MicroSoft NDA Non-Disclosure Agreement NLT - No Later Than OCI - Organizational Conflict of Interest OF - Optional Form OPM - Office of Personnel Management OPSEC - Operations Security OS - Operating System

PDF – Portable Document Format PII - Personally Identifiable Information PM - Project Manager PMO - Project Management Office PRS - Performance Requirements Summary PWS - Performance Work Statement QAB - Quality Assurance Branch QASP - Quality Assurance Surveillance Plan QCP - Quality Control Plan RMF - Risk Management Framework SOA - Service Oriented Architecture SOA - System Oriented Architecture SOAP - Simple Object Access Protocol SOP - Standard Operating Procedure SPF - Service Processed For SQL - Structured Query Language SSN - Social Security Number STIP - Army Security Technical Implementation Guidelines SW - Software TARP - Threat Awareness and Reporting Program TASS - Trusted Agent Security System UMF - USMEPCOM Form USC - United States Code USMEPCOM - United States Military Entrance Processing Command WS - Web Service

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1 Facilities: The Government will provide office space at HQ USMEPCOM 2834 Green Bay Road North

Chicago, Illinois 60064.

3.2 Utilities: The Government will provide typical office utilities at HQ USMEPCOM. The Contractor shall instruct employees in utilities conservation practices. The contractor shall be responsible for operating under conditions that preclude the waste of utilities.

3.3 Equipment: The Government will provide computer systems, software and telephone for individual use, Multi-function devices for printing/scanning/faxing are provided for mass usage.

3.3.1 Prior to commencement of services, annually, and upon change of the property custodian/hand receipt holder, and prior to the termination of the contract, the contractor, in conjunction with the government, shall conduct a joint inventory of all GFP / GFE / GFI and shall receipt for all property provided by the government, excluding typical office space, furnishings and equipment. The contractor and the government will jointly determine the working order and condition of all GFP / GFE / GFI, identify excess or obsolete items, record items of property missing or not in working order and certify their agreement of working order and defectiveness in accordance with AR 735-5. The contractor shall reimburse the government for any and all loss or damage to GFP / GFE other than normal wear and tear.

The contractor shall return all GFP / GFE / GFI to the government upon expiration of the contract or request of USMEPCOM in the same condition as received except for fair wear and tear. The government reserves the right to modify, update, substitute, move, or replace any GFP / GFE / GFI during the contract term. The contractor shall provide copies of all executed hand receipts to the COR.

3.3.2 Contractor shall be held liable for loss of government equipment by contractor employees and shall reimburse the government in accordance with FAR 52.245-1 Alternate 1.

3.3.3 Materials: The government will provide materials it deems necessary to complete this contract, which is not the responsibility of the contractor to provide.

3.3.4 GFP Accountability. The contractor shall be directly responsible and accountable for all GFP upon delivery of such GFP into its custody / control. The contractor’s on‐site employee(s) and a representative designated by the COR shall conduct a joint inventory of all government furnished property upon receipt.

The COR in conjunction with the on‐site government representative will assess the level of GFP accountability necessary to protect the government’s property as follows:

For inventoried GFP Property Book sensitive items (i.e.: laptop or desktop computers, specialty tools or equipment not readily available to the contractor, etc.), the contractor shall utilize the forms specified in the Awards Implementation of Government Furnished…