PWS.pdf

PERFORMANCE WORK STATEMENT (PWS)

G6, Army Medical Department Center and School (AMEDDCS)

1. GENERAL: This is a non-personal services contract to provide information technology and information management services. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction: The AMEDDC&S G6 requires support for information technology and information management functions. At the direction of the Army and Medical Command, AMEDDC&S G-6 requires a contract for services to support and sustain end user devices and servers.

1.2. Background: The AMEDDC&S is where the Army educates and trains all of its medical personnel.

Additionally, it formulates its medical organization, tactics, doctrine and equipment. The AMEDDC&S G-6/Chief Information Officer (CIO) provides Information Management (IM)/Information Technology (IT) (IM/IT) strategy, plans, and policy, business technology solutions, and IM/IT operations support services for the AMEDDC&S. The Strategy Plans, and Policy Division develops policies and strategies to achieve long-term objectives, conducts portfolio management, and information assurance management functions. The Business Technology Solutions Division conducts requirements analysis, software development, software management, and configuration management. The Operations Management Division provides customer support services, serves as liaison between Fort Sam Houston (FSH) Network Enterprise Center (NEC), Defense Healthcare Agency - Health Information Technology, and AMEDDC&S users.

With the current operations of AMEDDC&S G6 supporting over 9000 end user devices, 96 servers, and a storage area network the AMEDDC&S G6 cannot meet the Army’s Suspense for guarding Operating systems to our customers and continue to fight and defend our Operational Domain from those that wish to do harm to the Government.

The purpose of the PWS is to compliment the current technical staff to transition 100% of AMEDDC&S end user devices to the Windows 10 operating systems, catch up the back log created, and maintain a secure operational domain.

1.3 Objectives: Tasks are to be performed in accordance with the terms of this contract as guided by AR 25-1 and AMEDDC&S G6. Provide hands on, touch labor, and remote IM/IT technical support in accordance with the terms of this contract and as guided by AMEDDC&S G6.

1.4 Scope:

1.4.1 The Contractor shall provide experienced personnel to perform the required services. The Government and the Contractor understand and agree that the services to be delivered are non-personal services and both parties recognize and agree that no employer-employee relationships exist between the Government and the Contractor and/or between the Government and the Contractor’s employees.

1.4.2. Contractor personnel shall conform to standards of conduct and code of ethics, which are consistent with those applicable to Government employees as provided in the Joint Ethics Regulation 5500.7.R.

Contractor personnel shall present a neat professional appearance and be easily identified. This shall be accomplished by wearing distinctive clothing bearing the company name or by wearing appropriate badges that contain the company name and employee’ name.

1.4.3. The Contractor shall comply with all applicable laws, rules and regulations, including but not limited to those included in Section 6 of the PWS.

1.4.4. Contractor personnel will obtain a vehicle pass for access to Ft. Sam Houston and Common Access Cards (CAC) for computer access.

1.4.5. Background Checks. All DoD Contractor employees must submit a Questionnaire for National Security Positions (SF 86) to the AMEDDC&S G2 Personnel Security Manager. A favorable SF 86 is required before gaining access to a U.S. Government LAN. Each Facility Security Officer (FSO) must setup a profile in the Joint Personnel Adjudicative System (JPAS) for each Contractor employee within 5 working days of employment. The Contractor, when notified of an unfavorable determination by the Government, shall withdraw the employee from consideration from working under the contract.

1.4.6. All Contractor employees must be fluent in spoken and written English.

1.4.7. The Contracting Officer may require the Contractor to remove from the job site any employee who is identified as a potential threat to the health, safety, security, general wellbeing or operational mission of the installation and its population.

1.5 Period of Performance:

Base year 15 Mar 17 – 14 Mar 18 Option Year I 15 Mar 18 – 14 Mar 19 Option Year II 15 Mar 19 – 14 Mar 20 Option year III 15 Mar 20 - 14 Mar 21 Option Year IV 15 Mar 21 – 14 Mar 22

1.6 GENERAL INFORMATION:

1.6.1 Federal Observed Holidays: Contractor is or is not required to perform services on holidays.

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day

1.6.2 Hours of Operation: The Contractor is responsible for conducting business, between the hours of 0730 to 1630, not to exceed 40 hrs/week Monday through Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons.

1.6.3 Place of Performance: The work to be performed under this contract will be performed at Fort Sam Houston, TX.

1.6.4 Quality Control Program (QCP): The Contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The QCP shall initially identify potential problem areas and evolve over the life of the contract to incorporate identified problem areas based upon experience to develop an optimal QCP. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services.

The Contractor’s quality control program is the means by which he assures himself that his work complies with the requirement of the contract. The plan shall include an inspection system covering all the performance evaluation attributes. It must specify the areas to be inspected on a scheduled and unscheduled basis, how often inspections shall be accomplished, and the title of the individual(s) who shall perform the inspection. The methods for identifying and preventing defects in the quality of service performed before the level of performance becomes unacceptable. On site records of all inspections conducted by the Contractor and necessary corrective action taken shall be made available to the Government during the term of the contract. The Contractor shall update the QCP as required and provide copies to the KO and COR.

The Quality Control Plan shall be delivered to the COR for delivery to the KO within 30 days of contract award. In the event revisions are required the Contractor shall return the revised QCP within five (5) working days of receipt of notification to revise. After acceptance of the quality control plan the Contractor shall receive the contracting officer’s acceptance in writing of any proposed change to his QC system.

1.6.5 Quality Assurance: The Government will monitor the Contractor’s performance under this contract.

The Government has the right to perform inspections and performance evaluation at any time. The COR shall submit a monthly surveillance schedule to the KO no later than the 25th of each month.

If any aspect of the performance is not in conformance with the requirements of the contract, the KO and COR will have the right to issue to the Contractor a Contract Discrepancy Report (CDR). The Contractor shall explain in writing why performance was not in conformance with the requirements of the contract, how performance will be returned to conformance, and how recurrence of the problem will be prevented in the future. The Contractor shall complete and return the CDR to the COR within five workdays after receipt of the CDR. The contractor shall maintain copies of all inspection and evaluation reports.

1.6.6 Type of Contract: The Government will award a single Firm Fixed Price (FFP) commercial services contract award to perform the services as described.

1.6.7 Security Requirements:

1.6.7.1. Identification of Privacy Act. This contract requires the development of a system of records in accordance with the Privacy Act of 1974.

1.6.7.2. Neither the Contractor nor any of its contract service providers shall disclose or cause to disseminate any information concerning operations of military activities. Such action(s) could result in violation of the contract and possible legal actions.

1.6.7.3. All inquiries, comments or complaints arising from any matter observed, experienced, or learned of as a result of or in connection with the performance of this contract, the resolution of which may require the dissemination of official information, shall be directed to the COR and the Contracting Officer (KO).

1.6.7.4. The Contractor shall only conduct business with designated government personnel listed as points of contact (POCs). Names of authorized personnel shall be provided to the Contractor by the government, in writing, and updated as necessary throughout the contract period.

1.6.7.5 U.S. Government records, copies of original results and reports, verified original data, corrected data, and corrected supporting final reports are maintained by the Contractor, but remain the property of the U.S. Government. These files/results must be surrendered to the COR.

1.6.7.6. Work under this task order is Unclassified. The Contractor shall comply with all applicable Department of Defense (DoD) security regulations and procedures during the performance of this contract. The Contractor shall not disclose and must safeguard procurement sensitive information, computer systems and data, Privacy Act data, and Government personnel work products that are obtained or generated in the performance of this contract. This includes dissemination of protocols and papers not generally available through the public literature.

1.6.7.7. Information Technology and Telecommunications (ITT) and Information Assurance (IA).

All DoD Contractor employees whose duties are in the Information Technology and Telecommunications (ITT) and Information Assurance (IA) areas will be assigned a position sensitivity of IT-I or IT-II.

Personnel designated as an IT-1 must obtain and maintain a Single Scope Background Investigation (SSBI). Personnel designated as an IT-II must obtain and maintain a National Agency Check with Local Agency and Credit Check (NACLC). Each FSO will forward the requests for background investigations to the Office of Personnel Management (OPM) within 3 working days of receipt of all required paperwork. If contract becomes classified the AMEDDC&S G2 must be notified. All Contractor personnel requiring elevated network privileges (e.g. administrator, super user, etc) must comply with training and certification requirements set forth in DoD 8570.01-M, December 19, 2005 Information Assurance Workforce Improvement Program Incorporating Change 1, May 15, 2008. All personnel requiring network access must sign an acceptable use policy (AUP) and accomplish user training prior to being granted a network account. The Contracting Officer and COR reserve the right to review the qualifications of all Contractor personnel.

1.6.7.8 The COR will coordinate the issuance of required installation passes to Contractor personnel, if applicable. Contract personnel shall wear a badge that clearly identifies them as a contract employee. The badge will contain a personal picture, name of employee, and Contractor’s name. Badges shall be worn on the outer garment in full view at all times, attached to the outer shirt or jacket pocket by a button or clip or worn around the neck secured by an appropriate identification card lanyard.

1.6.7.9. Contractor personnel performing work under this contract must have a SECRET security clearance at the time of the proposal submission, and must maintain the level of security required for the life of the contract. The security requirements are in accordance with DD Form 254 prepared by G2, AMEDDCS. Work under this PWS is Unclassified and a security clearance will be required. Contractor personnel shall comply with all applicable Department of Defense (DoD) security regulations and procedures during the performance of work. Contractor personnel shall not disclose and must safeguard computer systems and data, Privacy Act data, and other Government documents and work products that are obtained or generated in the performance of this PWS. This includes dissemination of protocols and papers not generally available through the public literature. The Contractor shall not disclose or disseminate any information concerning operations of military activities. Such action(s) could result in violation of the contract and possible legal actions. Contractor personnel shall present a neat, professional appearance and be easily identifiable. This shall be accomplished by the wearing of distinctive clothing bearing the company name or by wearing appropriate badges that contain the company name and employee's name.

1.6.7.10. Physical Security: The Contractor shall comply with all applicable federal, state and local laws and ensure performance is secure while protecting material, equipment, and supplies from damage and loss. Government security personnel shall have the express right to inspect for security violations at any time during the term of the contract.

1.6.7.11. The Contractor shall be responsible for safeguarding all government equipment, information and property provided for Contractor use. At the close of each work period, government facilities, equipment and materials shall be secured.

1.6.7.12. Key Control: The Contractor shall be responsible for safeguarding all keys issued to them according to AMEDDC&S Memo 190-1, Key and Lock Control Program.

1.6.8. Special Qualifications: The Contractor shall ensure employees have all required professional certifications/licenses (current and valid) for the specified occupation category before commencement of work.

1.6.9 Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation (FAR) Subpart 42.5. The KO and Contracting Officer’s Representative (COR) shall meet periodically with the contractor to review the contractor's performance.

At these meetings the KO will apprise the Contractor of how the Government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced.

Appropriate action shall be taken to resolve outstanding issues.

1.6.10 Contracting Officer’s Representative (COR): The COR Management System Tool (Virtual Contracting Enterprise (VCE)-Acquisition Resource Center (ARC) https://arc.army.mil/COR) for nomination, tracking, documentation, and management of CORs will be used. The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration The COR is authorized to perform the following functions: Assure that the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, and specifications; monitor Contractor's performance and notifies both the KO and Contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.11 Key Personnel: N/A

1.6.12 Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their Contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by Contractors are suitably marked as Contractor products or that Contractor participation is appropriately disclosed.

1.6.13 Contractor Travel:

1.6.13.1 Local Vicinity: Travel within the local vicinity is required. Travel reimbursements for local travel are not authorized, nor are use of a government vehicle.

1.6.13.2 Distance Travel: Travel outside the local vicinity is not required. Costs incurred by Contractor personnel for travel, including costs of lodging, other subsistence, and incidental expenses, shall be considered to be reasonable and allowable only to the extent that they do not exceed the rates and amounts set by the Federal Travel Regulations. See FAR 31.205-46 (a) (2) (i). However, cost shall not exceed the amount indicated in Schedule B Travel CLIN. All travel requests shall be submitted for approval at least two weeks prior to travel date. Vendor shall submit a travel request containing the following information: names, reason travel required, cost breakdown of travel, lodging, daily allowances. All travel must be preapproved by the KO in writing. Contractor shall submit receipts to the COR for expenses being claimed within 5 business days from travel completion for verification by the COR. Receipts for expenses greater than $25.00 must be submitted.

1.6.14 Contractor Personnel Conduct: Contractor personnel’s conduct shall not reflect discredit upon the Government. The Contractor shall ensure that personnel present a professional appearance. The Contractor’s employees shall observe and comply with all local policies and procedures concerning fire, safety, environmental protection, sanitation, security, and possession of firearms or other lethal or illegal weapons or substance. The Contractor is responsible for ensuring that any contractor employees providing services under this contract conduct themselves and perform services in a professional, safe, and responsible manner. The Contractor shall remove from the job site any employee for reasons of misconduct or security. In accordance with DOD Directive 5500.7-R, “Joint Ethics Regulation”, Contractor employees must avoid improperly influenced in the execution of their duties under the contract. Particular attention should be paid to acceptance of gifts/ gratuities, and on non-disclosure of sensitive or classified information. The Contractor shall ensure employee conduct complies with 41 U.S.

C 423 relative to release of acquisition related information or actions or discussions which may prejudice future competitions. The Contractor shall ensure no contractor employees conduct political related activities or events on the USAR Facilities.

1.6.15. Other Direct Costs: N/A

1.6.16. Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.17 Organizational Conflict of Interest: Contractor and sub-Contractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.18 Antiterrorism (AT) and Operations Security (OPSEC)

1.6.18.1 AT Level I Training: This provision/contract text is for contractor employees with an area of performance within an Army controlled installation, facility, or area. All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities, and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR or to the KO, if a COR is not assigned within [15] calendar days after completion of training by all employees and subcontractor personnel.

1.6.18.2 Access and General Protection/Security Policy and Procedures: This standard language text is for contractor employees with an area of performance within an Army controlled installation, facility, or area. Contractor and all associated sub-contractors’ employees shall comply with applicable installation, facility, and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshall Office, Director of Emergency Services, or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DOD, HQDA, and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.6.18.4 iWATCH Training: This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within XX calendar days of contract award and within YY calendar days of new employees commencing performance with the results reported to the COR NLT [insert number of calendar days] calendar days after contract award.

1.6.18.5 Contractor Employees Who Require Access to Government Information Systems (IS): All contractor employees with access to a government IS must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the IS and then annually thereafter.

1.6.18.6 For Contracts that Require an OPSEC Standing Operating Procedure (SOP)/Plan: The contractor shall develop an OPSEC SOP/Plan within 90 calendar days of contract award, to be reviewed and approved by the responsible Government OPSEC officer, per AR 530-1, Operations Security. This SOP/Plan will include the government's critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. In addition, the contractor shall identify an individual who will be an OPSEC Coordinator. The contractor will ensure this individual becomes OPSEC Level II certified per AR 530-1.

1.6.18.7 For Contracts that Require OPSEC Training: Per AR 530-1, Operations Security, new contractor employees must complete Level I OPSEC training within 30 calendar days of their reporting for duty. All contractor employees must complete annual OPSEC awareness training.

1.6.18.8 For Information Assurance (IA)/Information Technology (IT) Training: All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25- 2 within six months of employment.

1.6.18.9 For Information Assurance (IA)/Information Technology (IT) Certification: Per DoD 8570.01- M, DFARS 252.239.7001, and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

1.6.18.12 For Contracts That Require Handling or Access to Classified Information: Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with— (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); any revisions to DOD 5220.22-M, notice of which has been furnished to the contractor.

1.6.19 Emergency Services

1.6.19.1 The Contractor shall have competent personnel trained and capable of dealing with minor personnel injuries. The Contractor of their employees shall immediately notify their supervisor of any accident requiring emergency medical treatment. The Contractor will, in turn, notify the KO or COR within 30 minutes of the incident.

1.6.19.2 Emergency medical treatment and services for Contractor personnel is the responsibility of the Contractor.

Part 2

DEFINITIONS AND ACRONYMS

2. DEFINITIONS AND ACRONYMS. List pertinent Acronyms used in the PWS and the definition.

2.1. DEFINITIONS:

2.1.1. CONTRACTOR. A supplier or vendor having a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER. A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5. DELIVERABLE. Anything that can be physically delivered but may include non-physical things such as meeting minutes.

2.1.6. KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS.

When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.7. PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.8. QUALITY ASSURANCE. The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.9. QUALITY ASSURANCE Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of Contractor performance.

2.1.10. QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.11. SUBCONTRACTOR. One that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subContractor.

2.1.12. WORK DAY. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.13. WORK WEEK. Is defined as Monday through Friday, unless specified otherwise.

2.2. ACRONYMS:

AFARS Army Federal Acquisition Regulation Supplement

AMEDDC&S Army Medical Department Center and School

AR Army Regulation

CFR Code of Federal Regulations

CIO Chief Information Officer

CONUS Continental United States (excludes Alaska and Hawaii)

COR Contracting Officer Representative

COTR Contracting Officer's Technical Representative

COTS Commercial Off the Shelf

DA Department of the Army

DD250 Department of Defense Form 250 (Receiving Report)

DD254 Department of Defense Contract Security Requirement List

DFARS Defense Federal Acquisition Regulation Supplement

DMDC Defense Manpower Data Center

DOD Department of Defense

FAR Federal Acquisition Regulation

FSH Fort Sam Houston

FSO Facility Security Officer

GTF Grow the Force

IA Information Assurance

IM Information Management

IT Information Technology

ITT Information Technology and Telecommunications

JPAS Joint Personnel Adjudicative System

KO Contracting Officer

LRC Learning Resource Center

NACLC National Agency Check with Local Agency and Credit Check

NEC Network Enterprise Center

NLT No Later Than

OCI Organizational Conflict of Interest

OCONUS Outside Continental United States (includes Alaska and Hawaii)

ODC Other Direct Costs

PIPO Phase In/Phase Out

POC Point of Contact

POP Period of Performance

PRS Performance Requirements Summary

PWS Performance Work Statement

QA Quality Assurance

QAP Quality Assurance Program

QASP Quality Assurance Surveillance Plan

QC Quality Control

QCP Quality Control Program

SSBI Single Scope Background Investigation

TE Technical Exhibit

Part 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES: All GFE shall be utilized in strict performance of task related duties and the Contractor shall maintain policies that prohibit fraud and abuse.

3.1. The Government will provide the vendor with all of the relevant data required to accomplish development of specific requirements and objectives described in PWS.

3.2. The Government will provide workspace, computers, utilities, electric power hook-up, and access to copiers, and telephone services, to include local and overseas calls through standard Government assets.

3.3. The Government will provide all government specific training to Contractor employees.

3.4. The Government shall provide the Contractor authority to access all information required to perform the required duties.

Part 4

CONTRACTOR FURNISHED ITEMS AND SERVICES

4.0. CONTRACTOR FURNISHED ITEMS AND RESPONSIBILITIES: N/A

Part 5

SPECIFIC TASKS

5.0 SPECIFIC TASKS:

5.1. Computer Tech (IT-II): Contractor shall provide one (1) computer technician and have the capability to increase to four (4) computer technicians to provide services to support the AMEDDCS, which includes but not limited to, operate and maintain the IT infrastructure; install, configure, troubleshoot , scan and repair computer workstations, thin client workstations, personal digitals assistant (PDA) devices, printers, and current operating systems (WIN 10). Load, configure, and troubleshoot software applications unique to the installation and/or customers. Perform administrative tasks in support of deployment services such as equipment documentation, inventory changes, customer contact updates, service issue processing, resolution of system troubles encountered with problems and deployment efforts, documentation of assessment, and timely closeout of service orders. Administer network port security. Lock systems out of the network that are not authorized or moved without coordination through the AMEDDC&S IAM, and NEC, and report associated incidents. Enforces the Information Systems (IS) security guidance policies as provided by the Information Assurance Management (IAM), and perform Cyber Security/Information Assurance duties. Enforces system access, operation, maintenance, and disposition requirements. Ensures that personnel meet required security investigation clearance, authorization, mission requirement, and supervisory approval before granting access to the IS. Report security violations and incidents to the servicing Regional Computer Emergency Response Team (RCERT) in accordance with Section VIII, Incident and Intrusion Reporting. Remediates vulnerabilities associated with the Information Assurance Vulnerability Management (IAVM) program as required upon notification from AMEDDCS G6 management staff or authorized NEC personnel. Ensures systems are maintained with current anti-virus (AV) engines and definitions on all Information Systems. Submits, reviews, and verifies currency of user accounts accesses and logins. Remove departing users’ accounts before departure. Terminate inactive accounts verified as no longer required that exceed 45 days. Suspend user accounts for the following types of actions: actions that knowingly threaten, damage or harm the IS, network or communications security; revocation, suspension, or denial of security clearance or interim security clearance investigations; or unauthorized use of IS and networks. Maintain and use at least 2 separate accounts for access to network resources, 1 for their privileged level access and a separate general user, non-privileged level account for routine procedures. Monitor IS performance to ensure that recovery processes, security features, and procedures are properly restored after an IS has been rebooted.

Monitor IS performance to ensure that processes and security features, and operating system configurations are unaltered. Perform equipment custodian duties as necessary. Notify the IAM when a system is no longer used to process sensitive information, or when changes occur that might affect Certification & Accreditation (C&A), to obtain disposition or resolution instructions. Ensure Configuration Management (CM) for security-relevant IS software, (including IS warning banners) and hardware is maintained and documented. Implement and test IS and data backup procedures for integrity.

Prohibit attempts to strain or test security mechanisms or to perform network-line or keystroke monitoring without authorization. Establish audit trails, conduct reviews and create archives as direct by the Chief of IT Operations or the IAM. All IT level II positions must be COMPTIA security plus certified prior to providing services of this contract. Will sign a Privilege-level Access Agreement (PAA) and Non-Disclosure Agreement (NDA) as a prerequisite to maintaining their positions. The contractor shall provide all training to ensure contractor personnel maintain technical proficiency for the O&M of the systems, software, and hardware outlined in DoD 8570.01-M, dated 19 December 2005, and incorporating change 3, 24 January 2012 DoD Information Assurance Workforce Improvement Program, Chapter 3 (three) and other specified training described in this PWS. All IT level II positions must be CompTIA Security Plus certified prior to providing services of this contract. Training for existing hardware and software shall be provided at no additional cost to the Government. The Government will not provide or fund training to obtain certification for new contract employees.

5.2. Systems Administrator (IT-II). Contractor shall provide one (1) server administration to the AMEDDCS mission servers located on Fort Sam Houston, TX to ensure optimal functioning and security for the installed client workstations. (1) Performs the maintenance of client and server files, databases, and server installed software. Responds to system failures caused by software and hardware deficiencies.

Performs diagnostic testing and using various analysis techniques, isolates the source of problems. (2) Maintains control and access of data storage, space allocation and device usage for authorized users of management information systems and unique systems. (3) Analyzes file organization and database structure taking action as required to eliminate deficiencies, i.e., contiguous file allocation, file reorganization, space shortages, etc. (4) Performs pre-tests and post-tests of new/revised software. (5) Performs upgrades to software via a standalone or desktop management systems located on the Windows based servers and virtual servers, including security updates, virus updates, vendor-related software fixes and patches. (6) Provides customization to meet the various needs of different software application packages, hardware connectivity, disk space management, and operating system adjustments. (7) Monitors and analyzes system performance and corrects deficiencies. (8) Performs hardware interface modifications when required. (9) Manages system activity logs, and/or removes file systems. Manages user IDs, passwords, log-on points and access rights. Provides system administration support for the AMEDDCS G6 WINDOWS based systems. (10) Resolves hardware problems which may require replacing internal parts of servers (e.g., memory boards, hard drives, etc.). (11) Implements procedures to meet AMEDDCS, NEC, and DHA-HIT requirements by configuring the computers, subsystems and peripherals involved. (12) On a proactive basis, optimizes overall system configuration to achieve the best system performance. This requires strict attentiveness over the computer system performance as it interfaces with various peripherals. (13) Makes recommendations for short- and long-term system improvements. (14) Makes recommendations as to the validity of the requirements and the optimal approach of the design, development, implementation, and selection of appropriate hardware, and Windows and WINDOWS server software for automated data processing systems. (15) Sets alarms and reports unauthorized access attempts and intrusions into the file structures to the Lead Server Administrator/AMEDDCS IAM. Corrects any weaknesses in the system in the event of an intrusion.

Documents and logs any alarms for permission violations at the local or global group level. (16) Applies patches and sets configurations recommended by the Security Technical Implementation Guide used by the Department of Defense.

5.3 Web Developer. Contractor shall have the ability to provide a web developer for the Solutions Division if needed. (1) Contractor shall design and implement office automation tools, applications and websites. (2) Analyzes and interprets business practices recommending methods for automation using accessible office software applications. (3) Shall solutions as it applies to technical knowledge of office automation tools, Internet systems, and automation technologies in support of business operations. (4) Evaluates and recommends commercially available software applications and web technologies, administers and troubleshoots automation tools and websites to ensure proper functionality and responds to requests for technical assistance. (5) Develops or uses existing requirements documents, analyzes/establishes criteria for user access, system interrelationships, and recovery. (6) Conducts testing of websites and prepares documentation for those sites. Keeps abreast of trends in the World Wide Web and Internet industry. (7) Shall Plan, design, develop, test, implement, and manage developed solutions within the G6’s Internet, Intranet, and Extranet including application development and database administration and management of Web sites and software. (8) Shall be proficient in a variety of software (Adobe Creative Suite, Microsoft SharePoint Designer, Dreamweaver, and Visual Studio) and internet browsers (Explorer, Firefox, Safari and Chrome) document management tools such as MS SharePoint and the installations and configuration of the same. (9) Manages security aspects of the web sites, including analysis of appropriate log file entries and implementation of security countermeasures.

5.4. Contractor Management Reporting (CMR): The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the Contractor shall report ALL Contractor manpower (including subcontractor manpower) required for performance of this contract. The Contractor shall completely fill in all the information in the format using the following web address https://Contractormanpower.army.pentagon.mil. The required information includes: (1) Contracting Office, Contracting Officer, Contracting Officer’s Technical Representative (COTR) or also known as the Contracting Officer’s Representative (COR); (2) Contract number, including task and delivery order number; (3) Beginning and ending dates covered by reporting period; (4) Contractor’s name, address, phone number, e-mail address, identity of Contractor employee entering data; (5) Estimated direct labor hours (including sub-Contractors); (6) Estimated direct labor dollars paid this reporting period (including sub-Contractors); (7) Total payments (including sub- Contractors); (8) Predominant Federal Service Code (FSC) reflecting services provided by Contractor (and separate predominant FSC for each sub-Contractor if different); (9) Estimated data collection cost;

(10) Organizational title associated with the Unit Identification Code (UIC) for the Army Requiring Activity (the Army Requiring Activity is responsible for providing the Contractor with its UIC for the purposes of reporting this information); (11) Locations where Contractor and sub-Contractors perform the work (specified by zip code in the United States and nearest city, country, when in an overseas location, using standardized nomenclature provided on website); (12) Presence of deployment or contingency contract language; and (13) Number of Contractor and sub-Contractor employees deployed in theater this reporting period (by country). As part of its submission, the Contractor shall provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period shall be the period of performance not to exceed 12 months from date of contract award. Contractors may use a direct XML data transfer to the database server or fill in the fields on the website. The XML direct transfer is a format for transferring files from a Contractor’s system to the secure website without the need for separate data entries for each required data element at the website. The specific formats for the XML direct transfer may be downloaded from the website.

PART 6

APPLICABLE PUBLICATIONS

6. APPLICABLE PUBLICATIONS (CURRENT EDITIONS)

ARMY Regulations:

AR 25-1, Army Knowledge Management and Information Technology

AR 25-2, Army Information Assurance

Army CIO/G6 Networthiness Certification Guidance; enforcement mandated by CIO/G6 Policy memorandum, Army Networthiness Certification

DoD Regulations:

DoD Instruction Number 8500.01, Cybersecurity

DoD Instruction Number 8510.01, Risk Management framework (RMF) for DoD Information Technology (IT)

DoD Security Technical Implementation Guides

AMEDDCS Regulations:

AMEDDC&S Memo 190-1, Key and Lock Control Program, 31 March 1994 and Change 1.

PART 7

ATTACHMENT/TECHNICAL EXHIBIT LISTING

7. ATTACHEMENT/TECHNICAL EXHIBIT LIST:

7.1 Attachment 1/Technical Exhibit 1 – Performance Requirements Summary

7.2 Attachment 2/Technical Exhibit 2 – Deliverables Schedule

TECHNICAL EXHIBIT 1

Performance Requirements Summary The contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

PERFORMANCE

OBJECTIVE

STANDARD

PERFORMANCE

THRESHOLD

Remedies

Perform Software Assurance (PWS 5.1, 5.2, and 5.3).

Comply with all DOD directives.

Maintain 100% compliance with hosting services ATO.

100% Inspection. Negative Contractor Performance Assessment System Reporting

Maintain the installation at an operational availability (PWS 5.1 and 5.2).

Maintain the installation at an operational availability of 99.9%.

Operational availability is based upon 8-hour-day, 5 days per week, and 52 weeks per year for all areas. For the purpose of this contract, this shall mean all (software and hardware to 350 end user devices) in aggregate will be operational 99.9% of the time.

100% Inspection.

Negative Contractor Performance Assessment System Reporting

Ensure WIN 10 operating systems are installed and systems remain IAVA compliant

(PWS 5.1).

No more than 5 systems quarantined per quarter

Monitoring of systems entered into active directory quarantine reports submitted by the contractor

100% Inspection. Negative Contractor Performance Assessment System Reporting

Ensure code is to standard (PWS 5.3)

Zero major conflicts and not more than five (5) minor

Monitoring of code, language, or scripting

100% Inspection Negative Contractor Performance Assessment System Reporting

Troubleshoot and complete incidents reported (PWS 5.1, 5.2, and 5.3).

Troubleshoot and complete incidents reported within 5 working days incident reported.

Monitoring of the incident work order queue for 94% of scheduled incidents completed within the 5 working days with a maximum average rate of 4

100% Inspection. Negative Contractor Performance Assessment System Reporting for less than 94% completion rate or less than

OBJECTIVE

STANDARD

PERFORMANCE

THRESHOLD

Remedies incidents per day per two week period.

TECHNICAL EXHIBIT 2

DELIVERABLES SCHEDULE

Deliverable Frequency # of Copies Medium/Format Submit To Work order processing to resolution Analysis/Weekly Progress Reports Documents (PWS

5.1 and 5.2

Due no later than the required due date of each week

Electronic copy MS Word, Excel Spreadsheet and Electronic version

Contracting Officer Representative

Weekly Project Status Report

(PWS 5.1, 5.2,

5.3)

Due no later than required due date of each week

Electronic copy MS Word, Excel Spreadsheet and Electronic version

Contracting Officer Representative

Weekly code/language sample review

(PWS 5.3)

Due no later than required due date of each week

Electronic copy Ms Word, Excel Spreadsheet and electronic version

Chief Business Technology Solutions/ Contracting Officers Representative

CMR Reporting Reporting period shall be period of performance not to exceed 12 months ending Sep of each government fiscal year and must be reported by 31 Oct of each calendar year

Electronic copy Ms Word, Excel Spreadsheet and electronic version

Contracting Officers Representative