Attachment_1_-_Draft_CIMS_III_IDIQ_PWS.pdf

Attachment 1 - PWS

PERFORMANCE WORK STATEMENT (PWS)

FOR

COMMAND INFORMATION MANAGEMENT SYSTEM III (CIMS III)

SERVICES

7 August 2017

CONTENTS

Paragraph Page

1.0 SCOPE: …………..………………………………………………………………... 1

1.3 Non-Personal Services …………...…………………………………………………... 1

2.0 GENERAL INFORMATION: …………………………………………………….. 2

2.1 Performance Work Statement ……………………………………………..……….. 2

2.2 Periods of Performance (PoP).……………………………………………………….. 2

2.3 Contracting Officer’s Representative (COR) and Task Order CORs (TO COR) …… 2

2.4 Core Hours of Operation …………………………………………..……………….. 3

2.5 Federal Holidays ……………………………………………………..…………….. 3

2.6 Service Support During an Emergency ……………………..….………………….. 3

2.7 Continuation of Essential Contractor Services ………………………..…………… 3

2.8 Contractor Personnel ……………………………………………………………….. 4

2.9 Security ………………………………………………………….………………….. 7

2.10 Training ………………………………………………………..………………….. 10

2.11 Quality Control (QC) …………………………………………..………………….. 12

2.12 Safety Requirements and Precautions …………………………………………….. 13

2.13 Travel ……………………………………………………………..……………….. 13

2.14 Phase-In Effort ……………………………………..…………………………….. 14

2.15 Phase-Out Effort ………………………………………………….……………….. 14

2.16 Contractor Manpower Reporting …………………..…………………………….. 14

2.17 Compliance with Agency Mandates ……………….…………………………….. 14

2.18 Intellectual Property/Data Rights …………………..…………………………….. 15

3.0 DESCRIPTION OF SERVICES: ……………………………..………………….. 19

3.1 Program Management …………..…………………………………………….…….. 19

3.2 Operations Management and Support ……………………………………………… 20

3.3 Network Administration (Network Operations) ……………………………………. 20

3.4 Systems Administration (Computer Operations) ……………..…………………… 20

3.5 Technical Support ………………………………………………………………..… 20

3.6 Help Desk Operations …………………………………………..………………….. 20

3.7 Video Teleconference (VTC) Operations .………………………………………….. 21

3.8 Telecommunications ……………………………………………………………….. 21

3.9 Integration and Restoration …………………………………………..………….…. 21

3.10 Maintenance Requirements …………………………………………………….…. 21

3.11 Configuration Control/Management ………..……………………………………. 22

3.12 Cybersecurity Operations ……………………………………………………….…..22

3.13 Special Project Support ………………….………………….………………….….. 22

3.14 Software Engineering ……..……………………………………………………….. 22

3.15 Software Development/Management …………………………………………..…. 22

3.16 Web Portals and Special Software Requirements ……………...…………………. 22

3.17 Electronic Security Systems (ESS) …………………………….………………….. 22

3.18 Contractor Purchases ……………………………………………………………… 23

4.0 DELIVERABLES: ………………………………………………..……………….. 23

5.0 PERFORMANCE ASSESSMENT: ……………………………..……………….. 26

6.0 GOVERNMENT QUALITY ASSURANCE (QA):……………...……………….. 28

7.0 GOVERNMENT FURNISHED EQUIPMENT (GFE), PROPERTY, MATERIALS,

SERVICES & INFORMATION: …………….………………………………….. 28

APPENDICES

APPENDIX A …….. ACRONYMS

1.0 SCOPE: The Basic Contract will provide Department of Defense (DoD) agencies with non-commercial integrated Information Technology (IT) solutions. Integrated solutions are comprised of some or all components described in this PWS, and may be tailored to meet agencies’ mission needs. Work may be performed on-site or off-site as specified in each Task

Order (TO), to provide a variety of IT solutions and support services, including new and emerging technologies that will evolve over the life of the Basic Contract. This PWS provides a general depiction of the types and kinds of non-personal services that may be ordered. Specific services required will be further detailed in individual TO’s, as requirements are defined. This contract will be an Indefinite Delivery/Indefinite Quantity (IDIQ) contract.

1.1 The U.S. Army Space and Missile Defense Command/Army Forces Strategic Command

(USASMDC/ARSTRAT) serves as the Army Service Component to United States Strategic

Command (USSTRATCOM), conducts space operations and provides planning, integration, control and coordination of Army forces and capabilities in support of USSTRATCOM missions. It serves as proponent for Space and Ground based Midcourse Defense (GMD); is the

Army operational integrator for global missile defense; and conducts mission related research, development, and acquisition in support of Army Title 10 responsibilities.

1.2 The G6 is responsible for providing Information Management (IM) support to all USASMDC/

ARSTRAT elements. The G6 functions as the staff advisor to the USASMDC/ARSTRAT for all

Information Mission Area (IMA) disciplines and is the person charged with planning, engineering, operation, sustainment, and life cycle management of the IMA resources. IM Support Services

(IMSS) includes automation, telecommunications, visual information, and sustaining base network infrastructure.

1.3 Non-Personal Services: The contractor shall provide all personnel, supplies, materials, facilities, and equipment (other than that which is stated as Government Furnished). The contractor shall support all functional areas to include, but not limited to: Program Management, Engineering and Development Operations, Help Desk, Video Teleconference Operations, Telecommunications, Network Administration Operations (Infrastructure), Systems

Administration Operations (Computer Ops), Configuration Management, Cybersecurity Planning and Operations, Software Development/Management, Maintenance, Systems Integration and

Maintenance, Electronic Security Systems/Monitoring and Special Projects. In particular, these efforts will require proficiency with VMware (virtualization and cloud computing software)/Zero

Client architecture, and CISCO networking technologies. These efforts will require a professionally skilled, well-trained, and retainable workforce. TOs may be written for any area, or all areas, or new emerging IT technology.

1.4 The primary place of performance for this effort shall be USASMDC/ARSTRAT facilities located on Redstone Arsenal, Huntsville, Alabama, Peterson AFB, Colorado and elements in the

Colorado Springs, Colorado area, and other CONUS and OCONUS elements on an as needed temporary basis. Sites may include, but not limited to the following:

http://searchservervirtualization.techtarget.com/definition/virtualization http://searchcloudcomputing.techtarget.com/definition/cloud-computing

a. USASMDC/ARSTRAT, Von Braun Bldg. 5220, Redstone Arsenal, AL.

b. US Army Kwajalein Atoll/Reagan Test Site (USAKA-RTS) Operations Center –

Huntsville (ROC-H), Bldg. 6000 Technology Drive, Huntsville, AL.

c. USASMDC/ARSTRAT, 350 Vandenberg St. Bldg. 3, Peterson AFB, CO.

d. USASMDC Battle Lab, 2525 Aviation Way (Bldg. 20,000), Colorado Springs, CO.

e. Future Warfare Center/Directorate of Combat Development (FWC/DCD), 1330

Inverness Drive, Colorado Springs, CO.

f. Any future organizational elements falling under USASMDC/ARSTRAT not currently contemplated.

1.5 All efforts and support shall follow guidelines, regulations, and policies specified in individual TOs. In the event of conflict between the documents referenced and the contents of this PWS, or of the TO PWS, the contents of the TO PWS(s) shall take precedence. Clarification and guidance shall be the responsibility of the contractor in understanding what is requested in this PWS and associated documents. The contractor shall seek clarification from the Contracting

Officer (KO) or COR in areas not understood. In disputes between the contractor and the

Government involving interpretation of the PWS, only the KO has the authority to render a final interpretation. CORs and TO CORs do not have authority to interpret the PWS.

2.0 GENERAL INFORMATION:

2.1 Performance Work Statement: The PWS describes a performance based work environment in terms of “what” the required service output is, rather than “how” the work is to be performed. The contractor shall be part of a quality customer-focused multifunctional team that meets all IT needs identified in a TO. The contractor shall provide all supervision, personnel, equipment, supplies, transportation, tools, materials and other items and non-personnel services, not provided by the customer necessary to perform all tasks and functions as defined in the PWS and TO. The contractor is required to manage the quality of the services delivered using their internal management structure. The PWS strives to create a government-contractor relationship that promotes a professional partnership environment to achievement mutually beneficial goals.

2.1.1 Specific performance requirements will be set forth and funded on individual TO’s issued under the basic IDIQ contract. The CIMS III contract will be managed by USASMDC/ARSTRAT

G6 via a contract-level COR. Individual TO CORs (within, or external to USASMDC/ARSTRAT

G6) will be assigned under individual TO’s.

2.2 Periods of Performance (PoP): The Ordering PoP for the Basic Contract shall begin ____ and continue up to ____. Each TO issued under the Basic Contract shall specify the TO PoP, to include any options.

2.3 Contracting Officer’s Representative (COR) and Task Order COR (TO COR):

Contracting Officer (KO) will delegate, in writing, by an Appointment Letter all COR/s and TO

COR/s with the authority for inspection and acceptance of services for each TO. Each COR, or

TO COR change will require a Termination Letter of the previous COR, or TO COR and an

Appointment Letter for new COR, or TO COR. A copy of these letters will be furnished to the

Contractor upon completion for their records.

2.4 Core Hours of Operation: Unless otherwise specified in individual TO’s, the contractor shall ensure adequate technical expertise is available to provide responses to specific tasks based on a normal 40-hour work week, Monday-Friday, 0700-1730 local time. During key events and operational missions, contractor services may be required for up to 24 hours per day, 7 days per week (including holidays). All support personnel scheduled to work shall be present and actively providing support during the hours specified. The Government will not require the contractor to work over their regular 40-hour work week. Some personnel may need to work flex time to ensure coverage during core hours of operation. Overtime will not be authorized on a routine basis, rather predicated on specific merits of the situation. If a situation arises where the contractor feels overtime may be necessary, this shall be discussed with and approved by the KO and TO COR.

2.5 Federal Holidays: The following Federal Holidays are observed by

USASMDC/ARSTRAT and authorized for contractors during performance of the contract:

New Year’s Day

Martin Luther King’s Birthday

Presidents Day

Memorial Day

Independence Day

Labor Day

Columbus Day

Veterans Day

Thanksgiving Day

Christmas Day

2.6 Service Support During an Emergency: In addition to routine operational support, the contractor may be required to respond to emergency work requests in support of contingency operations. In certain instances, special emergency contact lists may be required as requested by the COR (i.e., after hours support list, essentials listing, etc.)

2.7 Continuation of Essential Contractor Services: The contractor may be required to perform services during a crisis per the contractual requirements in support of a specific TO. If the contractor is required to perform the contractual requirements on a modified schedule, the modified schedule will be provided by the KO and TO COR. Services shall continue unless otherwise directed by the KO.

2.7.1 Mission Essential Personnel: The contractor may be required to ensure personnel necessary to accomplish tasks designated as “mission essential” report to assigned work locations (or Government Continuity of Operations Plan (COOP) designated facilities) and perform required tasks, regardless of weather or security conditions. The Government will identify tasks qualifying performers as essential personnel in TO language, and the contractor shall provide a list of essential personnel required to perform those tasks to TO COR’s. TO

COR’s will be responsible for providing Government security personnel with the list of contractor “mission essential personnel” to enable continued access to Government facilities when “non-essential” personnel are barred. The contractor shall operate in accordance with

(IAW) DoD Instruction (DoDI) 3020.37, Continuation of Essential DoD Contractor Services

During Crisis.

2.7.2 Non-Essential Personnel: All personnel not specifically designated as “mission essential personnel” are considered “non-essential” personnel. During periods of inclement weather, or other emergencies when Government-provided office space is closed by the

Government for non-essential personnel, contractor employees may direct/authorize non-essential contractor personnel to work at company-provided locations, or telecommute if duties allow, and they are directly charged to the contract. In the event written contractor policy is to provide administrative leave, instead, such time shall not be directly chargeable to the contract, but may be included in overall labor rates as an employee benefit.

2.8 Contractor Personnel: The contractor shall not employ people for work on the contract who are potential threats to the health, safety, security, general well-being, or operational mission of the installation and its population. All contract employees shall be United States

(U.S.) citizens, hold United States government security clearances, and possess local designated access approvals per the direction of the customers’ security and Cybersecurity guidelines. The contractor shall not use non-U.S. citizens to perform any work under this contract. All employees shall be able to understand, read, write, and fluently speak the English language.

2.8.1 Employee Identification: All contractor personnel shall be required to wear company identification badges so as to distinguish themselves from Government employees. Where available, contractor employees shall wear Government-issued access badges with coloration that distinguishes contractors from Government employees and “contractor” designation clearly displayed on the badge. These badges must be visible at all times when working within

Government facilities. In order to obtain a contractor badge, the contractor shall ensure coordination takes place with the proper agency office. When conversing with Government personnel during business meetings, over the telephone, or via electronic mail, support contractor personnel shall identify themselves as such to avoid any perception that they may be

Government employees and to avoid situations arising where sensitive topics might be better discussed solely between government employees. Electronic mail signature blocks shall identify contractor/company affiliation. Documents, or reports produced by contractors shall be suitably marked as contractor produced products, or contractor participation appropriately disclosed.

Contractor personnel occupying collocated space in a Government facility shall identify their workspace area with their name and company/contractor affiliation.

2.8.2 Supervision of Employees: The contractor shall not allow Government employees to supervise contractor employees, or direct work outside the limits of this contract, or TO.

Likewise, the contractor shall not supervise, or otherwise direct government employees, nor shall the contractor supervise, or direct employees of other contractors outside the contractors’ own subcontracting/teaming arrangements. The contractor shall ensure that all support provided to the Government is coordinated, approved, and directed by contractor task leads and that their subordinate employees do not work directly, or constructively for Government employees in an

“employee-like” relationship that could result in personal services.

2.8.3 Third Party Contractors: The contractor is expected to cooperate with third party contractors in the capacity of their duties under this contract.

2.8.4 Key Personnel: The contractor's key personnel shall demonstrate adequate levels of recent and relevant expertise for the functional areas identified. Each TO shall provide special requirements if needed. The contractor shall furnish in writing to the KO and COR the cell phone numbers and/or telephone numbers of key management personnel such as the Contract Manager, Program Manager, alternate(s) and any other applicable personnel no later than fifteen (15) business days prior to contract start. The contractor may be required to furnish in writing to the

KO and COR the names, position, labor category, and phone numbers of all key personnel as specified in the TO. The KO and COR shall be notified in writing immediately whenever changes are made to key personnel.

2.8.4.1 Prior to permanently reassigning any key personnel, the contractor shall provide the KO not less than thirty (30) days advance notice and shall submit justification (including proposed substitutions) in sufficient details to permit evaluation of the impact on the contract. No reassignment shall be made by the contractor without written consent of the KO. The “Key

Personnel” list may be amended from time to time during the course of the contract to either add or delete personnel, as appropriate.

2.8.5 Program Management: A Program Management system should exist to oversee, direct, and coordinate all contract and TO support activities. The contractor shall provide a senior-level point of contact (POC) i.e. Program Manager with a professional background in all aspects of IT who shall be responsible for the performance of the work specified in this contract and applicable TO’s. An alternate is required to act for the contractor when the POC is absent.

Program Managers shall be Project Management Professional (PMP) certified. The POC provides overall management of TO’s, projects, cost and budgets, personnel, planning, quality control, direction, coordination, deliverable submissions, effort proposals, and reviews necessary to assure effective contract performance and acts as single POC for the KO and COR on these and related issues. The POC shall be required to possess a TOP SECRET (TS) clearance or be eligible for immediate adjudication by the cognizant security authority upon award of the contract. The POC may eventually require a Sensitive Compartmented Information (SCI) clearance to provide Sensitive Compartmented Information Facility (SCIF) Operations Support.

The POC shall control contractor personnel and monitor support to ensure employees are not performing Inherently Governmental Functions (IGF) or personal services on any effort, reporting such taskings to the KO and COR for clarification and validation prior to acceptance or accomplishment of such work.

2.8.5.1 Authority: The POC and alternate shall have full authority to commit the contractor on all matters relating to the performance of the contract.

2.8.5.2 Availability: The POC or alternate shall be available within two hours (by phone, Video Teleconference (VTC), or in person) for any contract-level issues. Availability requirements may vary among individual TO’s and will be specified in the TO if different from this paragraph.

2.8.6 Specialized Experience:

2.8.6.1 The contractor shall ensure their personnel are fully qualified and trained. The contractor shall provide personnel with the requisite knowledge, skills and abilities to successfully support this requirement to include formal education levels, proper certifications, additional certified training, hands-on training, and past job experience necessary to satisfy their assigned area(s) of responsibility. The technical as well as management personnel shall be fully qualified with requisite certificates, degrees, courses, education, expertise and/or work experience that apply directly to work being performed. Additional training necessary to improve the knowledge, skills and abilities of personnel designated by the contractor to support this effort is the responsibility of the contractor and shall not take place during core hours or at a cost to the Government.

2.8.6.2 Cyber Information Assurance (IA)/IT) Certification: Cyber Information Assurance

(IA)/IT) Certification: Per DoD 8570.01-M, Defense Federal Acquisition Regulation (DFARS)

252.239-7001 and Army Regulation (AR) 25-2, the contractor shall ensure that personnel accessing information systems have the proper and current information assurance certification to perform information assurance functions IAW DoD 8570.01-M, Information Assurance

Workforce Improvement Program. The Contractor shall meet the applicable information assurance certification requirements, including:

(1) DoD-approved information assurance workforce baseline certification appropriate for each category and level as listed in the current version of DoD 8570.01-M; and,

(2) Appropriate operating system certification for information assurance technical positions as required by DoD 8570.01-M.

2.8.6.2.1 Upon request by the Government, the Contractor shall provide documentation supporting the information assurance certification status of personnel performing information assurance functions.

2.8.6.2.2 Contractor personnel who do not have proper and current certifications shall be denied access to DoD information systems for the purpose of performing information assurance functions.

2.8.7 Employment of Government Employees: The contractor shall not employ any person who is an employee of the United States Government if the employment of that person would create a conflict of interest, or the appearance of a conflict of interest. Furthermore, the contractor shall not employ any person who is an employee of the Department of the Army, either military or civilian, unless such person seeks and receives proper approval. The contractor is prohibited from employing off-duty Government personnel who are managing any contracts or subcontracts awarded to the contractor.

2.8.8 Hiring Military Personnel: Prior to offering a position to a member of our active duty personnel, the contractor shall provide the KO not less than thirty (30) days advance notice to permit evaluation of the impact of this assignment. No reassignment of this type shall be made by the contractor without written consent of the KO.

2.8.9 Off-Duty Active Duty Military: The contractor is cautioned that off-duty active military personnel hired for the contract/TO may be subject to permanent change of station, change in duty hours, or deployment. Military Reservists and National Guard members may be subject to recall to active duty. The abrupt absence of these personnel could adversely affect the contractor’s ability to perform; however, their absence at any time shall not constitute an excuse for non-performance.

2.9 Security:

2.9.1 Facility Clearance: IAW the Contract Security Classification Specification (DD Form

254), the Prime contractor (and all potential subcontractors that will support this effort) must possess a TOP SECRET facility clearance and UNCLASSIFIED safeguarding capability at the time of award.

2.9.2 Security Clearance: Personnel employed by the contractor in support of this effort shall be required to have a minimum of a SECRET security clearance, unless KO approves interim

SECRET security clearance. In some instances, the contractor shall be required to obtain a TS clearance (or be eligible for immediate adjudication by the cognizant security authority upon award of the TO) and obtain Sensitive Compartmented Information (SCI) access, as specified by the TO. The contractor shall also maintain full accountability and tracking of all clearances and shall work with the COR, TO CORs and applicable government security personnel in maintaining such status.

2.9.2.1 Contractor and all associated sub-contractor employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification

Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-

13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or at Outside the

Continental United States (OCONUS) locations, IAW status of forces agreements and other theater regulations.

2.9.3 General Protection/Security Policy and Procedures: Contractor and all associated subcontractor employees shall comply with applicable installation, facility and local area commander security policies and procedures, (provided by government representative), and as identified in each TO. The contractor and all associated subcontractor employees shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, or

Security Office. The contractor workforce must comply with all personal identity verification requirements as directed by DoD, Department of the Army Headquarters (HQDA) and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

2.9.4 Access Control: Upon TO start and hiring of new contract employees, the employee may be required to obtain applicable credential card, token, or badge to access various

Government work locations and DoD Information Systems. Specific contractor security access requirements will be outlined in the Contract Security Classification Specification, DD Form 254 for the TO. Access to Government-controlled locations and information systems will be required for most contractor employees. The contractor is subject to all statutory federal laws at all times when on a government installation or in a government facility, and takes precedence over all local state, county, or city ordinances, or laws. The Government will not provide access to any

Government facilities on Government holidays, except when Government employees associated with contractor work are also required to work.

2.9.5 Common Access Card (CAC): Contractor employees requiring access to DoD

Installations, and DoD Information Systems may be issued a CAC at the discretion of the sponsoring activity based on the following conditions:

(1) The contractor employee has a favorably adjudicated National Agency Check with

Inquiries (NACI), or equivalent, or higher investigation IAW DOD and Army Policy and;

(2) Both physical access to a DoD Installation on a recurring basis for a period of 6 months or more, and access, via logon, to an on-site DoD Information System are required, or;

(3) Physical access to a DoD Installation is not required, and remote access, via logon, to a

DoD website, or Information System using DoD-approved remote access procedures is required.

2.9.6 Base Access Badge: Contractor employees requiring access to a DoD Installation on a periodic basis, and does not require access to a DoD website, or Information, System may be issued a Base Access Badge in lieu of a CAC. A Base Access Badge provides the bearer the same (but, limited to only) DoD Installation access privileges as the CAC, and are most commonly issued to contractor, and sub-contractor employees performing a support function, such as systems engineers and administrative staff. Base Access Badges are issued at the discretion of the sponsoring activity, IAW the local installation access procedures, at the request of the contractor, or sub-contractor employee’s Facility Security Officer (FSO).

2.9.7 Restricted Area Badge: Contractor employees requiring unescorted access to a

USASMDC/ARSTRAT facility on a recurring, daily basis, may be issued a Restricted Area

Badge. Restricted Area Badge are issued by the controlling installation at the request and discretion of the sponsoring activity, and are typically unique to a specific area, or facility. A single Badge alone may not be sufficient to access all USASMDC/ARSTRAT facilities supported on this contract.

2.9.8 Information Systems: Contractor employees requiring access to DoD Information

Systems (IS) shall comply with the following:

(1) Have a favorable suitability/fitness determination at the appropriate level security clearance of the IS, or computer systems to be accessed. Need to know is required for access to SCI.

(2) The employing contractor shall ensure individuals complete the appropriate access request forms.

(3) Be registered in the Army Training Certification Tracking System ATCTS at commencement of services, and must successfully complete annual DoD Cybersecurity

Awareness Challenge training (2.10.6) prior to access to the IS.

(4) Sign a “DOD STANDARD MANDATORY NOTICE AND CONSENT” form to acknowledge and consent to access a DOD IS, and maintained in the contractor’s registered ATCTS profile.

(5) Obtain a CAC (2.9.5) to access the Non-Classified Internet Protocol Router Network

(NIPRNET).

(6) Obtain a Token card to access the Secret Internet Protocol Router Network (SIPRNET).

2.9.8.1 Privileged Access: In addition to Information Systems (2.9.8) requirements, personnel designated with privileged/elevated access must comply with DoD 8570.01-M, Information

Assurance Workforce Improvement Program requirements.

2.9.9 Information Assurance: Contractor shall ensure that information assurance is provided for information technology IAW current policies, procedures, and statutes, to include:

The National Security Act

The Clinger-Cohen Act

National Security Telecommunications and Information Systems Security Policy No. 11

Federal Information Processing Standards

DoD Directive 8500.1, Information Assurance

DoD Instruction 8500.2, Information Assurance Implementation

DoD Directive 8140.01, Cyberspace Workforce Management; and DoD Manual

8570.01-M, Information Assurance Workforce Improvement Program

2.9.10 Handling, or Access to Classified Information: Contractor personnel, in performance of assigned duties, may have access to classified documentation, networks and discussions. The contractor shall be responsible for the proper handling of such information in all forms, and shall comply with Federal Acquisition Regulation (FAR) 52.204-2, Security

Requirements. This clause involves access to information classified “CONFIDENTIAL,”

“SECRET,” or “TOP SECRET” and requires contractors to comply with; The Security

Agreement (DD Form 441), including the National Industrial Security Program Operating

Manual (DoD 5220.22-M); and any revisions to DoD 5220.22-M, notice of which has been furnished to the contractor.

2.9.11 Courier Service: Contractor may be required to transport (Secret) classified material from one location to another via secure means in support of Task Order requirements.

Contractors transporting classified material must obtain the appropriate courier training prior to transporting classified Information. In most cases, the information will be transported via digital media such as, hard drive or Compact Disk (CD), but may include printed material and will be protected and secured in a Government approved container. Courier Service shall be conducted

IAW: DoD 5220.22, and designated couriers:

(1) Be properly briefed on courier responsibility to safeguard classified information.

(2) Possess an identification card, or badge, which contains the contractor's name and the name and a photograph of the employee.

(3) Ensure all classified material being transported will remain in their possession at all times throughout the travel. If necessary, arrangements shall be made in advance of departure for overnight storage at a U.S. Government installation or at a cleared contractor's facility that has appropriate storage capability.

(4) Ensure all hand carried classified material is inventoried by a Government official prior to departure and a copy of the inventory shall be carried by the designated courier. Upon return of the courier to the originating facility, an inventory of the classified material shall again be made, as confirmation and receipt of classified material the courier was charged.

2.9.12 Physical Security: The contractor shall safeguard all government property and controlled forms. At the close of each work day/period, facilities, support equipment, and materials shall be secured. The contractor shall immediately report all thefts, vandalism, or destruction of government-owned property and/or equipment to the COR upon discovery.

2.10 Training:

2.10.1 Government-Mandated Training: Contractor employees may be required by the

Government to attend Government-mandated training in order to work on this contract. If required, such training shall be accomplished during normal duty hours and charged to the contract as part of performance of normal duties. Attendance at training sessions does not relieve the contractor from providing support as required by the TO. If any government approved costs are incurred by the contractor for government-mandated conferences/training, actual costs may be reimbursed on a case-by-case basis at the discretion of the KO.

2.10.2 Anti-Terrorism (AT) Level I Training: All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after performance start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR and TO COR, within 10 calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at the following website: https://atlevel1.dtic.mil/at.

2.10.3 AT Awareness Training for Contractor Personnel Traveling Overseas: All US based contractor employees and associated sub-contractor employees to make available and to receive government provided area of responsibility (AOR) specific AT awareness training as directed by AR 525-13. Specific AOR training content is directed by the combatant commander with the unit Anti-Terrorism Office (ATO) being the local point of contact.

https://atlevel1.dtic.mil/at

2.10.4 iWATCH Training: The contractor and all associated subcontractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity

ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR or TO COR. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance. Report results to the COR No Later Than

(NLT) 30 calendar days after completion of training. This training is also required on all TOs.

2.10.5 Operations Security (OPSEC) Training: Per AR 530-1 Operations Security, all contractor employees must complete Level I OPSEC Awareness training. New employees must be trained within 30 calendar days of their reporting for duty and annually thereafter. OPSEC

Awareness training is available to Contractors at the following website:

http://cdsetrain.dtic.mil/opsec/index.htm.

2.10.6 Cyber Awareness (IA/IT) Training: All contractor employees and associated sub-contractor employees must complete the DoD Cybersecurity Awareness Challenge training before issuance of network access and annually thereafter. All contractor employees working

IA/IT functions must comply with DoD and Army training requirements in DoD Directive

(DoDD) 8570.01, DoD 8570.01-M and AR 25-2 within six months of appointment to IA/IT functions. DoD Cyber Awareness Challenge Training is available at the following website:

https://ia.signal.army.mil/DoDIAA/

2.10.7 Threat Awareness Reporting Program (TARP): For all contractors with security clearances. Per AR 381-12 TARP, contractor employees must receive annual TARP training by a counterintelligence (CI) agent or other trainers as specified in 2-4b of AR 381-12.

2.10.8 Personal Identifiable Information (PII) Training: All contractor employees and associated sub-contractor employees must complete the PII/DoD Component Privacy Act

Training annually IAW DoD 5400.11-R – DoD Privacy Program. Training results shall be reported in the Monthly Status Report (MSR) (refer to paragraph 4.1.2 in this PWS).

2.10.9 Contractor Maintained Qualifications and Training: It is the responsibility of the contractor to provide properly trained, skilled employees. The contractor shall ensure that contractor employees maintain suitable and adequate qualifications. Individual employees may also require special technical training to achieve skills needed to accomplish assigned tasks.

Skills advancement training will be at contractor expense and does not relieve the contractor from providing ongoing support required by the PWS. The government will not reimburse the contractor for normal and necessary training required to perform work under the PWS.

2.11 Quality Control (QC):

http://cdsetrain.dtic.mil/opsec/index.htm

2.11.1 Quality Control Plan (QCP): The contractor shall be responsible for overall responsiveness, cost control, adherence to schedules, technical quality of work, management of contractor’s team efforts and commitment to customer satisfaction. The contractor shall establish a process to provide an accurate assessment of performance in all areas of the contract and implement a quality program through the QCP.

2.11.2 Contractor personnel assigned to maintain the QC program shall perform independently of personnel assigned to other TO deliverables.

2.11.2.1 QC personnel shall have sufficiently well-defined responsibility, authority, and the organizational freedom to identify and evaluate quality problems in order to initiate, recommend, and/or provide solutions.

2.11.2.2 QC personnel shall maintain adequate records of any audits, inspections, and tests to support the conformance to the requirements and effective operation of the quality program.

2.11.2.3 QC personnel shall ensure timely and effective corrective action is obtained for all deficiencies identified by the contractor or by the Government. All deficiency responses shall include the cause of the deficiency to preclude recurrence and an analysis of the quality program’s effectiveness in the area of the deficiency.

2.11.3 The QCP shall be submitted to the KO for acceptance no later than fifteen (15) business days after contract award, and within five (5) business days of any changes.

2.11.3.1 The QCP shall include the methods that the contractor will utilize in order to ensure their internal quality control is implemented and followed so that each of the requirements of the

PWS are met.

2.11.3.2 Address the methods to be used by the contractor for identifying and preventing defects in the quality of service.

2.11.3.3 Describe the records to be kept to document inspections and corrective or preventive actions taken.

2.11.3.4 Describe the comprehensive management program used by the contractor to address customer service, corrective actions, employee standards of dress, conduct/behavior and efforts that foster a healthy working relationship between the government and the contractor.

2.12 Safety Requirements and Precautions: Contract activities will be conducted in a safe and healthful manner that minimizes accidents as well as impacts on Army operations and members of the public. Contractors must comply with applicable Federal, State, and local codes, standards, and laws.

2.12.1 Incident/Mishap Reporting: In the event of a safety incident/mishap, immediately report the incident to the COR and TO COR. If the government elects to conduct an investigation, the contractor shall cooperate fully and assist government personnel until completed.

2.12.2 The contractor shall comply with the Department of Labor Occupational Safety and

Health Act standards, Title 29, Code of Federal Regulations (CFR), Part 1910, Life Safety Code, and agency policies and regulations.

2.12.3 The government provided facilities shall be made available for government safety inspections upon request.

2.13 Travel: The contractor shall perform temporary duty (TDY) non-local travel

(Continental United States [CONUS] and OCONUS), as required by the contract, and as stated in individual TO’s during the performance of this PWS.

2.13.1 The Government will not reimburse the contractor for local travel performed within 50 miles of the usual place of performance of the work against a particular PWS requirement.

2.13.2 If travel is required, the contractor shall submit all travel requests and security clearance information to the Government TO COR for review and approval, at least two weeks prior to the date the required travel is to begin. A copy of the request and approval will be sent to the KO. Emergency (last minute) travel requirements shall be coordinated as above by telephone or fax, if necessary. All travel costs shall be charged to the reimbursable Travel

Contract Line Item Number (CLIN), and the contractor shall verify sufficient funds are loaded in that CLIN when requesting approvals.

2.13.3 The government will reimburse the contractor for government required pre-approved travel necessary for the performance of the contract. Per Diem and other travel costs will be reimbursed IAW FAR Part 31. Reimbursement for contractor travel shall be limited to entitlements listed in the Joint Federal Travel Regulation (JFTR). Cost for delays in route

(excluding government caused delays) will not be reimbursed.

2.13.4 All supporting documents for reimbursement shall be submitted into Wide Area

Workflow (WAWF) for submission with the invoices for the respective travel.

2.14 Phase-In Effort: The contractor may be required to perform phase-in efforts on TO’s, and maintain continuity of operations during transition of performance from incumbent contractors. If phase-in is required, the contractor shall take all actions necessary to ensure smooth transition of responsibilities/operations support from the incumbent contractor to the

CIMS III contractor. The contractor shall be provided access to the functional area to observe, interface, and work with the existing work force prior to TO start date without disruption of work and operations in progress as specified by the TO. The contractor may be required to coordinate and execute a transition plan ensuring a well-organized and systematic approach.

2.15 Phase-Out Effort: At the end of contract or TO performance, the contractor may be required to phase out the existing contract or TO turning over total contract control to the new contractor in a well-organized, systematic, and planned manner. If required by the TO, the contractor may be requested to provide familiarization to any follow-on contractor. During the phase-out familiarization period, the incumbent contractor shall be fully responsible for operation of all IT services as outlined in the PWS. In the event the follow-on is not awarded to the incumbent, the contractor shall interface and fully cooperate with other contractors and government personnel to the extent required to permit an orderly changeover to the follow-on contractor. The contractor shall not commit any act that will interfere with the performance of work by any other contractor or Government employee. The contractor shall comply with government equipment disposition instructions.

2.16 Contractor Manpower Reporting: The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the Department of Army via a secure data collection site. The contractor is required to completely fill in all required data fields using the following web address:

http://www.ecmra.mil/.

2.16.1 Reporting inputs will be for labor executed during the period of performance during each Government Fiscal Year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year, beginning with 2018. If the Government approves an extension of the report due date, all data shall be reported no later than (NLT) the extension date. Contractors may direct questions to the help desk at: http://www.ecmra.mil/.

2.17 Compliance with Agency Mandates: It is the responsibility of the contractor to stay abreast of and in compliance with changes, including supplements and amendments. It is the contractor's responsibility to insure that all mandatory publications are accessible to applicable employees and kept up to date. Unless a specific issue date is indicated, the issue in effect on the date of this PWS shall apply. In the event of conflict between this PWS and any mandatory publication document referred to herein, the requirements explicitly stated in this PWS take precedence.

2.18 Intellectual Property/Data Rights:

2.18.1 Intellectual Property: In the event that the contractor, while supporting the TO requirements, seeks ownership, copyright, or patent of inventions, computer software, computer documentation, technical data or other contractor-developed innovations and initiatives under the http://www.ecmra.mil/ http://www.ecmra.mil/ applicable intellectual property laws and regulations, the Contactor will promptly notify the KO in writing. Further, if the contractor determines to use technical data, copyrighted, or patented items protected by intellectual property rights in performance and to be delivered to the

Government, the contractor shall notify the KO as soon as possible.

2.18.2 Distribution Control of Technical Information:

2.18.2.1 The following terms applicable to this clause are defined as follows:

(1) Technical Document: Any recorded information that conveys scientific and technical information or technical data. This includes such informal documents as working papers, memoranda, and preliminary reports when such documents have utility beyond the immediate mission requirement or will become part of the historical record of technical achievements.

(2) Scientific and Technical Information: Communicable knowledge or information resulting from or pertaining to conducting and managing a scientific or engineering research effort.

(3) Technical Data: Recorded information, regardless of form or method of the recording, of a scientific or technical nature (including computer software documentation) as defined in DFARS 252.227-7013(a)(14), 7015(a)(5), and 7018(a)(20). The term does not include computer software or data incidental to contract administration, such as financial and/or management information.

2.18.2.2 The distribution of any technical document prepared under this contract, in any stage of development or completion, is prohibited without the approval of the KO and all technical documents prepared under this contract shall initially be marked with the following distribution statement, warning, and destruction notice:

(1) DISTRIBUTION STATEMENT F – Further dissemination only as directed by

USASMDC/ARSTRAT KO (date of determination) or higher DoD authority.

(2) WARNING – This document contains technical data whose export is restricted by the

Arms Export Control Act (22 U.S.C.§2751 et seq.) or the Export Administration Act of

1979 (Title 50, U.S.C., App. 2401 et seq), as amended. Violation of these export laws are subject to severe criminal penalties. Disseminate IAW provisions of DoDD 5230.25.

(3) DESTRUCTION NOTICE – For classified documents, follow the procedures in DoD

5200.22-M, National Industrial Security Manual, Chapter 5, Section 7, or DoD 5200.1-R, Information Security Program Regulation, Chapter IX. For unclassified, limited documents, destroy by any method that will prevent disclosure of contents or reconstruction of the document.

2.18.2.3 As a part of the review of preliminary or working draft technical documents, the

Government will determine if a distribution statement less restrictive than Statement F specified above would provide adequate protection. If so, the Government's approval/comments will provide specific instructions on the distribution statement to be marked on the final technical documents before primary distribution.

2.18.2.3.1 The contractor shall place distribution statement conspicuously on all technical documents regardless of media or format. For standard written or printed material, the distribution statement shall appear on the front cover, title page, and Standard Form (SF) 298, “Report Documentation Page,” where applicable. The SF 298 is available at http://www.dtic.mil/whs/directives/forms/index.htm. If the technical information is not prepared in paper form but is prepared digitally or is in any medium that does not have a cover or title page, the applicable distribution statement shall be affixed to all physical and digital items by other means in a conspicuous position for ready recognition. Distribution Statements apply to both Classified and Unclassified technical information.

2.18.2.3.2 The contractor shall use the seven authorized distribution statements providing options ranging from unlimited distribution to no secondary distribution without specific authority of the controlling DoD office. In selecting and applying the appropriate statement, the contractor shall consider the information contained in the document and the audience for which it is intended.

2.18.2.3.3 Below the list of distribution statements is a list of reasons that the contractor shall use with its corresponding distribution statement. (See example below).

DISTRIBUTION STATEMENT A. Approved for public release: distribution unlimited.

DISTRIBUTION STATEMENT B. Distribution authorized to U.S. Government agencies only

(reason) (date of determination). Other requests for this document shall be referred to

(controlling DoD office).

DISTRIBUTION STATEMENT C. Distribution authorized to U.S. Government agencies and their contractors (reason) (date of determination). Other requests for this document shall be referred to (controlling DoD office).

DISTRIBUTION STATEMENT D.