W912CN-16-R-0002_Amendment_3.pdf

W912CN-16-R-0002

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

This amendment is issued as follow s:

a. To update the numbering of sections in the PWS.

b. To update the numbering of PWS sections in Attachment J.2 Performance Requirements Summary (PRS).

c. To update the numbering of PWS sections in Attachment J.3 Deliverable Schedule

d. To update the Service Contract Act Wage Determination No. 05-2153, ver. 21, dated 12/28/2015.

e. Remove duplicate clause 52.233-2 Service or Protest from Section "I" of this solicitation.

f. To update Clause 52.216-1 w ith correct Contract Line Item Numbers

g. All other terms and conditions remain unchanged.

1. CONTRACT ID CODE PAGE OF PAGES

S 1 54

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 01-Feb-2016

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X W912CN-16-R-0002

X 9B. DATED (SEE ITEM 11)

13-Jan-2016

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

01-Feb-2016

CODE

EXPEDITIONARY CONTRACTING COMMAND

413 CSB, RCO-HAWAII,

742 SANTOS DUMONT AVENUE

BLDG 108, 3RD FLOOR (WAAF)

SCHOFIELD BARRACKS HI 96857

W912CN 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION C - DESCRIPTIONS AND SPECIFICATIONS

The following have been modified:

PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS)

9th Mission Support Command (MSC) Command, Control, Communications, Computers and Information Management (C4IM)

Service and Support

Part 1

General Information

1. GENERAL: This is a non-personal services contract to provide Command, Control, Communications, Computers and Information Management (C4IM) Service and Support to 9th Mission Support Command (MSC).

The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction: The contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform C4IM Service and Support to 9th MSC as defined in this Performance Work Statement except for those items specified as government furnished property and services. The contractor shall perform to the standards in this contract.

1.2 Background: The 9th MSC G6 manages all C4IM missions for the US Army Reserve (USAR) in the Pacific.

The 9th MSC G6 provides direct support to the 9th MSC Headquarters and staff elements on all functions pertaining to Operations and Plans, Network Operations, and Unified Communications. Strategic, tactical, and base sustaining C4IM support during peace-time and contingent operations are executed in support of USAR in the Pacific. The 9th MSC provides mission command sustainment through the Pacific LandWarNet (PLWN) of assigned and attached USAR units and personnel as a Direct Reporting Unit (DRU) and senior USAR Headquarters to the Commander, US Army Pacific (USARPAC). Any loss of access to the PLWN or its critical applications and services will severely degrade operations and lead to mission failure to the 9th MSC Mission and the Pacific Theater of Operations (PTO). All work is related to C4IM and Information Technology (IT) has transformed traditional battlefield functions. Emerging applications of IT will result in full realization of net-centric warfare. This net-centric environment has caused the Global Information Grid (GIG) to evolve into a complex web, which makes it challenging for 9th MSC to maintain cognizance over its C4IM networks. The number of complexity of its C4IM systems capable of providing information to the Commander to support his decision making is rapidly outgrowing our ability to manage those networks, protect them against intrusions and attacks and effectively manage the available bandwidth. As a result, a robust infrastructure is fundamental to achieve the 9th MSC mission and objectives, and allow for Network Centric Operations.

1.3 Objectives: The scope of all specified tasks to be performed encompasses the 9th MSC owned and/or operated Information Systems assets (network enclaves, workstations, servers, printers, and other peripheral C4IM equipment). Personnel assigned to this contract provide C4IM services and recommendations to the 9th

MSC G6.

1.4 Scope: This Performance Work Statement (PWS) addresses C4IM capabilities providing architecture and engineering of the 9th MSC C4IM networks and associated systems. The C4IM service and support requirements consists of installing, operating, administering, and maintaining various network management and security monitoring systems, operating systems, and network application systems installed, maintained, monitored and/or coordinated by the 9th MSC G6 on multiple networks PLWN, Korea LandWarNet (KLWN), Army Reserve Network (ARNET), and Retention/ Education/ Family (REF). The 9th MSC G6 is responsible to extend ARNET, manage/administer PLWN and coordinate KLWN for all USAR units including Active Component (AC) units located at remote sites within the PTO and Korea Theater of Operations (KTO). The 9th MSC G6 is also responsible to provide TIER II support and manage/administer ARNET for all Multi-Compo and USAR units within the PTO and KTO. All work performed under this PWS must adhere to Department of Defense Architectural Framework (DoDAF), Department of the Army (DA) and local command regulations, policies, standards and guidelines. The Contractor shall perform necessary tasks which fall into these broad functional areas: Architecture, Multi-domain Network Interoperability, Engineering, Integration, Installation, Testing, Program/Project Management, C4IM systems, Web Development Service Support, Cyber Security, COMSEC support, Telephone/VOIP, and Frequency/SATCOM Management. These broad areas do not represent sequential steps and may over-lap during execution. Personnel assigned to this contract provide all C4IM services internal to the USAR Pacific, 9th MSC Command and Staff, and promulgate C4IM policy that is adhered to by all 9th MSC personnel. Contractors provide key and essential support to the Government representatives but by no means are they to officially represent the Government or their positions.

1.4.1 Contractor employees performing services under this contract shall be controlled, directed and supervised at all times by management of the contractor. The contractor’s management shall ensure all employees properly comply the performance standards outlined in this PWS and as required by the Contracting Officer (KO) or the Contracting Officer’s Representative (COR). Contractor employees shall perform independent of and without supervision of any Government official. Actions of contractor employees may not be interpreted or implemented in any manner that results in any contractor employee creating or modifying Federal policy, obligating the appropriated funds of the U.S. Government, overseeing the work of Federal employees, providing direct personal services to any Federal employee or otherwise violating the prohibitions set forth in Parts 7.5 and 37.1 of the Federal Acquisition Regulation (FAR). The Government shall control access to the facility and shall perform the inspection and acceptance of completed work and tasks.

1.4.2 Network Operations Service Support (NETOPS): Contractor shall provide a combination of 24/7/365 dedicated on-site and off- site network service support for NIPRNet, SIPRNet and CENTRIXS of approximately 2,097 systems owned by the 9th MSC and its supported users 24 hours per day, seven days per week, including federal and state holidays. Remote support is authorized with COR approval. Network service support shall consist of engineering, installing, operating, administering and maintaining various network management and security monitoring systems, approved OS and network infrastructure equipment installed and maintained by the 9th MSC G6 on various PLWN, KLWN, ARNET, and REF sites. Contractor shall provide personnel with requisite training, experience, skills and certification(s) to perform monitoring, surveillance and management IAW DoD DIACAP of assigned information systems.

1.4.3 NETOPS - Engineering/ Integration/ Installation/ Testing: Provide network and systems engineering support, as well as integration, installation and testing of engineering solutions as identified in individual tasking either via Capabilities Requirements Request (CAPR) process or as identified in the Help Desk trouble ticket database system. Development of engineering solutions shall include multiple projects within the PLWN, KLWN, ARNET, and REF environment as well as numerous project activities in support of 9th MSC Campaign Strategy.

Efforts include:

1.4.3.1 Designing and developing C4IM with integration of workstations, network and IA products and concepts.

1.4.3.2 Providing recommendations for modifications and improvements to existing systems.

1.4.3.3 Conducting site visits for product implementation, problem solving/correction, and installation of hardware and software products.

1.4.3.4 Participating in technical reviews such as Configuration Control Boards (CCB) during selection, development, and testing of network hardware and software components.

1.4.3.5 Assessing and testing of technology and providing technical support in assessing the function, security vulnerability, usefulness, and potential applications of current and future technology available from commercial, government or other sources.

1.4.3.6 Contractor shall perform installation and configuration of C2 network hardware, software and firmware IAW instructions/directions contained in an Engineering Solution and Life Cycle Management Plan which has been approved by the Government. Installation includes resolution of any hardware, software and firmware compatibility problems or issues between existing C4IM networks and C4IM systems and the new hardware, and software and firmware to remove old/existing hardware and software (if required), establishing network connections, or any other activities deemed necessary per the Engineering Solution.

1.4.3.7 Contractor shall provide technical support in testing and evaluation of products and system and recommend/developed technical solutions. The contractor shall develop and deliver fully developed test plans. Functional testing shall assess form, fit, functions and features of products and systems, ease of operator use, training requirements, and other appropriate areas in support of integration and certification.

Testing efforts may also be used to validate DII COE and other standards (to include security standards) compliance. Security testing and evaluation shall assess security features, requirements, conformance to design and security policy, and risks involved with products and systems, including the risks posed by connections to other systems.

1.4.3.8 Contractor shall adhere to engineering principles that include life-cycle configuration management, interoperability, scalability, produce-ability, maintainability, fault tolerance and redundancy in providing capabilities. The contractor shall perform these functions and deliver products in cooperation with other organizations (both public and private) which are performing other engineering work, operating other networks and systems which interconnect and/or interoperate with PLWN, KLWN, and ARNET networks and systems.

1.4.3.9 Contractor shall provide general engineering capabilities and services per the G6 CAPR process.

General support includes requirements documentation and development, developing project and implementation plans, technical solutions with detailed parts list and Bill of Material (BOM), participating in CCB, working group meetings, design reviews, specific project meetings, providing minutes of technical meetings, providing recommendations, responding to action items and requests for information, reviewing technical documents, providing comments, providing informal consultation, providing engineering briefings at meetings or to specific audiences and supporting other regular Engineering program activities.

1.4.3.10 Contractor shall accept both G6 Project Management milestones and tasking from the CAPR process and review, coordinate, and recommend engineering solutions for C4IM requirements.

1.4.3.11 Contractor shall ensure compliance with the DII COE, DA, local Designated Approving Authority (DAA), and 9th MSC/USARPAC policies and guidance.

1.4.3.12 Contractor shall provide technical data to allow other organizations and other contractors performing work for the Government under separate contracts to complete Certification and Accreditation (C&A) packages for solutions which the Contractor develops, recommends, and demonstrates under this task order.

1.4.3.13 Installation includes taking control of and accounting for installation material, parts and tools.

Installation shall be deemed complete once the Engineering Solution is tested by the installation team and deemed operational by the Government and all supporting C&A documentation (to include any required C&A testing) is completed, configuration, topology and related Configuration Management data is properly recorded, and all work areas are returned to the state of origin as found prior to on-site arrival.

1.4.3.14 Performance Verification Test (PVT) and final acceptance of installation shall be obtained in writing by the Government prior to Contractor turning O&M responsibility over to the Government

1.4.4 Systems Administration: Provide general systems administration support for new and existing information systems, services and projects in support of the 9th MSC and USAR Pacific. Systems administration efforts include but not limited to the following:

1.4.4.1 Engineer, Install, Operate, and Maintain (EIOM) all 9th MSC and USAR Pacific network infrastructure within a virtualized environment implemented in VMware VI3 using ESX.

1.4.4.2 Install, operate and maintain servers, SAN, NAS, switches, and automated data backups to include hardware and software upgrades.

1.4.4.3 Provide all System Administration services, including authentication, messaging, application, collaboration, data storage, file/print, anti-virus, Windows update, and back-up and recovery services.

Contractor shall document service delivery procedures in the C4IM System Administration SOP.

1.4.4.4 Provide authentication services on Unclassified and Secret communications networks. C4IM authentication services currently include Domain Controller, Active Directory and Group Policy services.

1.4.4.5 Provide data storage services on Unclassified and Secret networks. Data storage services include data storage, Storage Area Network (SAN) and Network-Attached Storage (NAS) services. Free disk space shall be greater than 30% of disk capacity. Perform weekly backup outside of normal business hours: Perform weekly scan.

1.4.4.6 Provide file/print services on Unclassified and Secret communications networks.

1.4.4.7 Provide anti-virus services on Unclassified and Secret communications networks.

1.4.4.8 Provide and push all critical Windows Updates to the enterprise within 48 hours of release.

1.4.4.9 Provide EIOM and management of mobile and wireless handheld device services, Tier 2 support for systems, user or network problems which cannot be resolved by Help desk personnel.

1.4.5 Web Development Support Services: Provide web hosting operations and management services, and operate and maintain web proxy servers. The Contractor shall EIOM web services and associated government provided web servers in support of 9th MSC web based information distribution requirements and plans.

Provide Knowledge Management (KM) functions of capturing, developing, and focus on organizational objectives such as improved performance, competitive advantage, innovation, integration and continuous improvement of 9th MSC organization.

1.4.5.1 Provide assistance and web development support to the 9th MSC Knowledge Management (KM

1.4.5.2 Provide support to KM initiatives through use of 9th MSC share point portals, intranets, databases and update as needed.

1.4.5.3 Contractor shall manage and maintain Command INTRANET, EXTRANET, public websites and services, and associated applications.

1.4.5.4 Contractor shall develop, implement and maintain web-based information support structure for routine and contingency operations.

1.4.5.5 Contractor shall train and support departmental and unit organizational web authors throughout the Command as requested.

1.4.6 Help Desk Management Services: Contractor shall operate a customer service ITIL-based help desk to support approximately 2,097 users and 1,877 workstations/ laptops throughout the 9th MSC and USAR Pacific. The customer service help desk availability is on call 24/7/365, but will be staffed 0800-1700 Monday through Friday (excluding Federal holidays) at locations indicated at PWS section 1.6.3 as required per COR approval. Weekend availability Saturday and Sunday is required upon request to support local and remote site assistance and will be staffed 0730-1630 at locations indicated at PWS section 1.6.3 as required per COR approval. Systems and user problems shall be reported via an online help desk system and may also be received via e-mail, telephone and/or walk-in basis. Average time for resolution of service orders shall be no more than 48 hours. Trouble tickets or service orders which cannot be resolved in 48 hours shall be reported to the COR identifying reason for delay, mitigation plan, and projected completion date. Help Desk personnel shall provide expert Tier-1 and Tier-2 C4IM system and network troubleshooting service, Authorized Service Interruption (ASI) management, and security incident response. Contractor shall document service delivery procedures in Technical Support SOP. Help Desk efforts include but not limited to the following:

1.4.6.1 Receive, delegate, manage, respond to and resolve user service requests.

1.4.6.2 Create/manage user accounts in active directory.

1.4.6.3 Create/manage workstation accounts in active directory.

1.4.6.4 Image and configure new and existing workstations, as required.

1.4.6.5 Install/configure software.

1.4.6.6 Support Life-Cycle Management – IOM workstations at multiple locations.

1.4.6.7 Submit customer satisfaction survey after completion of work for final trouble-ticket close-out.

1.4.6.8 Submit weekly trouble ticket status reports to Chief, NETOPS and the COR.

1.4.6.9 The contractor shall maintain a centralized database in Altiris for the Government to track and manage: trouble tickets categorized by routine, emergency, and GO service orders, configuration baselines on existing systems, warranty information, logs of each task, mean times between failures (MTBF), and life cycle management of the equipment. The contents of this database shall be provided on a monthly basis to the Government.

1.4.6.10 Password and Designs – The contractor shall provide a copy of all design, schematics, and passwords to the COR and shall forfeit all items to the same upon completion of the contract. Passwords must be controlled and handled by approximately indoctrinated personnel IAW DoD 269.

1.4.7 Help Desk Services – Service Orders: Service orders will be received via the G6 help desk trouble ticket system. The help desk will answer all service orders within two (2) working days and accomplish the actions as identified in paragraphs 1.4.4 thru 1.4.6.10 as applicable or conduct other actions as necessary to restore services. Overriding prioritization of service orders will be determined by the COR as required.

Any service orders received outside of specified routine criteria shall be forwarded to the COR and G6 Chief, Network Operations (NETOPS). The contractor shall restore systems or equipment to Full Mission Capability (FMC) status within two (2) working days upon notification. Contractor shall notify the COR and Chief, NETOPS if the repairs cannot be accomplished within two (2) working days upon arriving on-site. Upon repair/restoral the applicable work order will be closed.

1.4.8 Current Support Environment: 9th MSC G6 is responsible for providing mission and base sustaining C4IM support to all USAR facilities and service based locations to include Hawaii (Oahu, Hilo, Maui), Alaska, Guam, Saipan, American Samoa, Korea, and Japan. Managed hardware is summarized in the following and detailed further in Annex A-C:

Pacific LandWarNet (PLWN)

Active Directory Accounts 1292

Server Accounts 56

Network Appliance 1

STAMIS Computer Accounts 106

Printers/ Copiers 96

VTC Suites 15

Mobile Carts 5

VTC Admin Endpoint 1

Jabber Soft Clients 35

VTC Management Server 1

Communications Control Server 1

Firewall Traversal Server 1

VTC Bridge 1

ISDN Networking PRI 2

Router 126

Switch 126

Korea LandWarNet (KLWN)

Workstation/ Laptops 60

Active Directory Accounts 85

Printers/ Copiers 10

Digital Senders 3

VTC Suites 2

Mobile Carts 1

CENTRIXS-K

Workstation/ Laptops 10

Active Directory Accounts 85

TACLANES 3

Router 3

Switch 3

Army Reserve Network (ARNET)

Workstation/ Laptops 459

Active Directory Accounts 529

Printers/ Copiers 10

Recreation Education and Family (REF) Network

Workstation/ Laptops 56

Printers 8

Scanner (not digital sender) 8

1.4.9 Managed network infrastructure includes access to ARNET, NIPR, SIPR, CENTRIX and Commercial services (REF). 9th MSC G6 at Fort Shafter Flats serves as the main Customer Service Center responding to Altiris generated work tickets as requested and approved by the COR.

1.4.10 Cyber Security (formerly known as Information Assurance – IA): Contractor shall provide necessary infrastructure and management services to protect information systems from unauthorized access and to protect the data within systems. Contractor shall support the command’s Cyber Security/CND program through active implementation of DOD, Cyber Security and Theater Cyber Security Program directives and policies. Contractor shall implement a patch management and vulnerability mitigation program in order to ensure compliance with current Information Assurance Vulnerability Alert (IAVA) directives.

1.4.10.1 Contractor shall develop security training plans and packages to facilitate the training of all 9th MSC and US Army Reserve Pacific personnel in accordance with public law and DoD instructions. These plans will include requirements for new user training and annual refresher training. Contractor is encouraged to make use of existing training resources in developing training plans. The contractor shall develop training materials based upon local policies that might not otherwise be covered in regulatory requirements. The security curriculum shall be delivered in a classroom setting and shall cover topics in Information Security (INFOSEC), Personnel Security, Physical Security, and Operations Security (OPSEC). The contractor shall ensure Cyber Security training requirements are met and has the authority to deny user access to any prospective user who does not complete the mandatory IA awareness training.

1.4.10.2 Contractor shall conduct weekly vulnerability assessment of all 9th MSC and US Army Reserve Pacific managed assets (to include web applications, Operating Systems, wireless devices and business application software) using an IAM or DoD approved vulnerability assessment tool. The vulnerability assessments shall be conducted IAW the DoDI 8500.2 and/or best practices issued by the Designated Approval Authority (DAA) or DoD. The contractor shall report the results to the 9th MSC Information Systems Security Manager (ISSM) using the built-in reporting features of the vulnerability assessment tool, and will manage and track mitigation actions for the vulnerabilities identified in the report generated by the vulnerability assessment scan. Contractor shall submit vulnerability reports to the 9th MSC G6 to have all identified vulnerabilities mitigated by having vulnerable workstations patched with the appropriate security patches. The contractor shall monitor G6 progress and will ensure that all mitigating actions are completed within three (3) working days. If mitigating actions cannot be accomplished within seven (7) days, the contractor shall report to the ISSM the following information:

� Vulnerability identified � Number of vulnerable systems � Plan to mitigate vulnerabilities and estimated time to resolution � A daily status report detailing the progress made toward mitigating the vulnerabilities identified the week vulnerability scan

1.4.10.3 Contractor shall conduct weekly vulnerability scans and manage the actions necessary to mitigate vulnerabilities revealed by the scan to ensure that all mitigating actions are completed within seven (7) working days.

1.4.10.4 Contractor shall conduct weekly malware defense assessments of all 9th MSC managed workstation and laptop assets using McAfee Antivirus included in the Host-Based Security System (HBSS) tool. Weekly malware defense assessments of all 9th MSC managed servers shall be conducted using Symantec Antivirus.

Patch management for workstations are utilized by Altiris Management Platform and servers are completed manually.

1.4.10.5 Contractor shall manage all actions necessary to implement Strategic Command Directive SD 527- 1 (DoD Information Operations Conditions – INFOCON System Procedures. Compliance to this directive is mandatory for all DoD entities. SD 527-1 delineates tasks that must be performed IAW each INFOCON level designation. The contractor must be constantly aware of the prevailing INFOCON level and the tasks performed IAW that level. The DoD-approved HBSS tool will be used to facilitate INFOCON level compliance. INFOCON implementation tasks will be tracked as a project and the contractor shall submit updated project status reports to the 9th MSC ISSM on a weekly basis.

1.4.10.6 Contractor shall ensure all 9th MSC managed servers, workstations and printers are compliant to all IAVM notices issued by the PLWN, KLWN, and ARNET. IAVM notices include alerts, bulletins, and tech tips.

1.4.10.7 Contractor shall utilize DAA or DoD approved scanner software to verify all 9th MSC managed servers, workstations, printers, and network appliances (routers, switches, firewalls, and intrusion detection systems) conform to the security requirements mandated in 9th MSC IAVM notices by their respective due date.

1.4.10.8 Contractor shall establish 100 percent IAVA compliance to at least 90 percent of the total number of assets used as the basis for a given scan. The 90 percent figure represents a satisfactory figure for the number of available assets (as a percentage of the number of total assets).

1.4.10.9 Contractor shall submit current, accurate, and complete reports on weekly basis to the 9th MSC G6 IAM. Scan data must be no more than seven (7) days old in the weekly IAVM compliance report. Data must reflect actual IAVA compliance for each and every asset reported. To be complete, data must reflect 100 percent of all assets actually scanned.

1.4.10.10 Contractor shall prepare and submit and acceptable Plan of Action and Milestones (POA&M) to the 9th MSC Army Reserve Network Operations Center (ARNOC) for all IAVM alerts for which compliance is not yet attained. All POA&Ms must state at a minimum:

a. Reason why the assets are non-compliant.

b. When the assets will become compliant.

c. The work-around solutions and defense mechanisms in place to reduce the risk of non-compliance.

1.4.10.11 Contractor shall provide situational awareness for adversary cyber capabilities and intensions;

builds and manages Indications and Warning (IW) to support the 9th MSC Commander’s Critical Information Requirements (CCIRs) and operational decision points.

1.4.10.12 Contractor shall provide the resolution of all security incidents reported against 9th MSC managed assets. Support requires possession of Secret security clearance. Government requires use of a wide variety of Attack Warning and Sensing (ASW) data. This data can come from the cyber security personnel, IDS logs, IPS logs, firewall logs, CYBERCOM Situational Awareness Reports (SARs), DISA security briefings, and other pertinent sources.

1.4.10.13 The Contractor shall collect forensic computer evidence related to the security incident and of any other suspect activity uncovered while investigating the security incident, in responding to computer security incidents when tasked.

1.4.10.14 Contractor shall perform DIACAP requirements when preparing System Security Authorization Agreements (SSAAs) for 9th MSC-managed information systems.

1.4.10.15 Contractor shall perform a risk analysis and ensure all requisite certification tasks are performed as required. The SSAA is to be embodied in a DoD-approved certification and accreditation tool (such as eMASS).

1.4.10.16 Contractor shall provide technical expertise on all TEMPEST, Red/Black separation, and PDS installations, certifications, and maintenance requirements.

1.4.10.17 Contractor shall provide consultative support to the government on an ad hoc basis. The 9th MSC G6 is often called upon to render an expert opinion, evaluation, or decision related to the security considerations surrounding a product or a process. Most opinions and/or evaluations are easily provided with a minimal amount of research; other evaluations may take a substantial amount of research to formulate.

1.4.10.18 Contractor shall establish audit trails, conduct reviews, and create archives as tasked by the 9th

MSC ISSM.

1.4.11 COMSEC Assistance and Technical Support: Provide assistance to COMSEC technical services to the 9th MSC and US Army Reserve Pacific in the areas of development and review of documentation, policy, technical support, and coordination of 9th MSC COMSEC services.

1.4.11.1 Contractor must be familiar with all applicable DoD policies and procedures required to request, receive, and distribute COMSEC products as described in AR 380-40, TB 380-41 and other applicable regulations and policies.

1.4.11.2 Contractor shall provide technical support and assistance in the development of a key management plan for newly acquired cryptographic equipment. The Contractor’s employees performing this function requires possession of a Secret security clearance.

1.4.11.3 As the COMSEC hand-receipt holder, the Contractor shall assist in the management of all COMSEC keying material and equipment.

1.4.11.4 Contractor shall provide assistance to the Command Authority for 9th MSC and prepare forms for submission to the National Security Agency to update information on all supported User Representatives.

1.4.11.5 Contractor shall assist in development and update COMSEC SOP.

1.4.11.6 Contractor shall also provide assistance in ordering COMSEC KEYMAT in support of the Command’s requirements.

1.4.11.7 Contractor shall support and maintain secure voice assets within the command to include STE, Iridium, SECTERA Wire Line, SECTERA vIPer, INMARSAT, OMNIxi, and conduct monthly communication inspections to validate and report operational status.

1.4.12 Unified Communications Systems Support: Contractor shall provide services and support in Tactical Satellite Communication, Telecommunication, Video Teleconference (VTC), Audio Visual (A/V) and Blackberry and other mobile devices for personnel throughout the command locally on site and all extended installations.

1.4.13 Unified Communications – Telephone and Data Infrastructure: The Contractor shall manage the enterprise telephone network throughout the 9th MSC and Army Reserve Pacific. Current telephone network consists of a Nortel 81C switch at the Fort Shafter Flats campus and Nortel 11C switches at the remote sites. The 9th MSC will transition and convert to the digital Voice-over-IP (VoIP) and Voice over Secure Internet Protocol (VoSIP) technology by 2016. The Contractor shall be familiar and assist with the VoIP and VoSIP migration including management services. Training to be done on existing personnel for VoIP and VoSIP if not certified within 90 days after installation.

1.4.13.1 Contractor shall operate and maintain telephone switches, remote switches, nodes and PBXs and keep an inventory of the PBX phone lines on the Fort Shafter Flats campus.

1.4.13.2 Contractor shall support upgrades and modify telephone switches, remote switches, nodes, and PBXs.

1.4.13.3 Contractor shall perform enterprise level management of the Nortel 81C switch, to include startup/shutdown procedures, backup and restore procedures, and operation of the PUELO battery system.

1.4.13.4 Contractor shall perform voice mail box service for Calegra Call Pilot system (voice mail and directory services) and Integrated Voice Messaging System (IVMS)/Call Management system.

1.4.13.5 Contractor shall support, manage, and maintain common-user infrastructure supporting voice, video and data (i.e. cabling, equipment, and components).

1.4.13.6 Contractor shall support, manage, and maintain installation and maintenance services for mission-specific requirements. Contractor shall inspect, manage, and maintain Telecom closets.

1.4.13.7 Contractor shall manage and maintain all Blackberry, iPhones, IRIDIUM Phones and other mobile devices, to including managing the Blackberry Enterprise Server for 9th MSC customers at all locations throughout the Pacific Theater.

1.4.14 Unified Communications - Tactical Satellite Communications Support: Contractor shall support and maintain operational SATCOM activities and resources supporting the 9th MSC and its remote locations in Saipan, Guam, and American Samoa. The Deployable Digital Training Campus (DDTC) provides an alternate means of communications during a natural disaster or civil emergency that causes cellular and land line communications to be disabled. The DDTC is primarily a training method for soldiers in remote locations, as well as allow the 9th MSC to provide command and control with a stable line of communication in the USPACOM AOR.

1.4.14.1 Contractor shall provide operation and maintenance of SATCOM activities including the operation of DDTC.

1.4.14.2 Contractor shall receive, review, and process Satellite Access Request/ Ground Access Request

(SAR/GAR).

1.4.14.3 Contractor shall provide SAR/GAR account training to new subscribers as requested.

1.4.14.4 Contractor shall provide SATCOM management SME during contingency, exercise and day-to-day operations. Provide administration and technical support for military operations.

1.4.14.5 Contractor shall maintain, manage, and operate DDTC satellite terminal to include configuration of SATCOM frequencies.

1.4.14.6 Contractor shall provide situational awareness monitoring and shortfall awareness of all SATCOM resources by utilizing Collaboration Tools and monitoring Satellite Databases.

1.4.14.7 Contractor shall provide current status and shortfall reports as requested within pre-established timelines and advise staff on operational status of SATCOM system/networks.

1.4.14.8 Contractor shall maintain, review and validate all applicable satellite databases (SDBs).

1.4.15 Video Teleconference (VTC) Services: The Contractor shall schedule, facilitate, operate, and maintain a Sensitive But Unclassified (SBU) and SECRET common-user VTC Studio; provide interface access for VTC and secure telephone equipment; provide design and installation advice and technical support. The Contractor shall manage and support the ISDN and IP based secure and non-Secure VTC facilities and equipment for the 9th MSC and Army Reserve Pacific. Contractor shall coordinate, schedule and provide technical assistance to requesting units requiring secure or non-secure VTC services. Contractor shall ensure maximum availability of total systems (maximum availability is defined as a minimum of 98 percent availability of total systems). The systems shall be maintained in accordance with the manufacturer’s specific manuals and maintenance routines.

1.4.15.1 The Contractor shall support, operate, and maintain a VTC Bridge (switch) to allow multiple sessions and multiple users per session as requested per help desk trouble tickets.

1.4.15.2 The Contractor shall provide design, installation advice, and technical support for VTC.

1.4.15.3 The Contractor shall operate the SVTC capability on a highly restricted basis in support of critical collaborative efforts involving GO/SES personnel, either locally or as part of interconnected collaboration event.

1.4.16 Audio Visual (A/V) Systems Support: The Contractor shall manage and support all A/V systems under the 9th MSC and Army Reserve Pacific.

1.4.16.1 Contractor shall install, configure, operate, and maintain A/V systems.

1.4.16.2 Contractor shall coordinate with appropriate internal and external agencies to schedule and establish requested A/V usage.

1.4.16.3 Contractor shall prepare and test A/V systems’ functionality prior to each scheduled A/V usage.

1.4.16.4 Contractor shall perform fault analysis and diagnostics on A/V systems on a weekly basis.

1.4.16.5 Contractor shall provide technical support for A/V equipment located at Fort Shafter Flats campus and all remote site locations under the support of the Army Reserve Pacific. Support shall include preventive maintenance of equipment, troubleshooting and resolution of operational issues, and development and coordination of upgrade plans to A/V systems.

1.4.17 Operations and Plans Support: Contractor shall provide support to the 9th MSC C4IM strategy, policy, Operations and Plans. The 9th MSC G6 Operations and Plans branch provides policy, guidance and management of the 9th MSC communication requirements for all network layers, including top secret and higher levels of security. Contractor shall assist in development of IM strategy, policies, and guidance that are in compliance with laws, regulations, and standards.

1.4.18 Operations and Plans – Project Management: The Contractor shall develop and maintain project management products such as schedules and milestone charts to support CAPR and 9th MSC G6 accepted projects as it pertains to Integration and Installation of Engineering and Technical Solutions. The Contractor shall participate in Configuration Control Boards (CCB), Project Management, and managerial and technical meetings as required to support each assigned projects. Under government supervision, Contractor shall coordinate with the responsible 9th MSC G6 Point-of-Contact (POC) to collect information from 9th MSC staff elements, subordinate organizations and other Contractors to accomplish this task. Contractor shall provide weekly status reports and produce performance metrics for each assigned program/project for government review and acceptance. Contractor shall provide weekly, monthly and quarterly performance metrics with regard to meeting timelines established for responsive to meeting the milestones for project tasking.

1.4.18.1 Contractor shall provide a weekly, monthly, and quarterly breakout of the number of projects assigned from the government for the past five (5) work days, 30 calendar days and three (3) months.

1.4.18.2 Contractor shall provide a completion status and a record of whether the products generated were delivered within the performance delivery time requirements as defined in the project plan.

1.4.18.3 Contractor shall participate in CCBs and other technical and management meetings to assist with planning for, integrating and installing engineering solutions; new technologies or configuration changes to C2 network and systems. Documentation shall be provided in support of the CCB and the contractor shall accomplish a non-disclosure statement for each CCB.

1.4.18.4 Contractor shall develop background information on current 9th MSC and US Army Reserve Pacific networks and systems. Contractor shall provide baseline configuration and topology documentation and other technical information (in the form of written technical papers and staff papers) about 9th MSC’s C2 Systems. The baseline configuration shall be used in coordinating efforts of the CCB, other Contractors, other government agencies, or outside organizations in developing engineering solutions, resolving configuration and security issues (to include assistance with providing configuration management data for use in DIACAP and other DoD Certification and Accreditation processes) and other technical matters.

1.4.18.5 Contractor shall participate in CCB and provide configuration management information and products to support the convening authority or DAA.

1.4.18.6 Contractor shall develop and maintain a Project Plan for each Engineering Solution (when deemed necessary by the government). All products shall be delivered by the Contractor in accordance with the program/project schedule with no impacts to program/project completions.

1.4.18.7 Contractor shall update the Microsoft Project Server as necessary for all projects. Contractor shall maintain the Work Breakdown Schedule (WBS), track progress and identify key tasks.

1.4.18.8 Contractor shall lead weekly performance progress briefs identifying work accomplished, scheduled milestone achievement/delays and projected future work milestones. The Contractor shall brief weekly performance to the G6 Chief, Operations and Plans.

1.4.19 Contingency Operation Plan (COOP) Support: The Contractor shall assist in development and implementation of network operations COOP plan. The Contractor shall define, develop and maintain functions and capabilities through the integration of 9th MSC G6 Missions Essential Task List (METL).

1.4.19.1 Contractor shall assist in development, support, and exercise COOP plan for critical portions of the telecommunications and network infrastructure on annual basis. Development of plans to restore critical wired and wireless services in the event of disaster must also be included as part of COOP plan.

1.4.19.2 Contractor shall support the restoration of critical telecommunications network services in the event of disaster.

1.4.19.3 Contractor shall maintain and provide telecommunications and network operations planning support to the OPLAN development per established DoD DIACAP. Contractor must identify telecommunications and network requirements resulting from any surge/change in staffing due to force/equipment/supply flow and support requirements. Contractor must support the development of contingency Service Level Agreements (SLA) to implement any increases in support upon OPLAN activation at the time is required.

1.4.19.4 Contractor shall support the development of infrastructure upgrade plans to support operational surge requirements. Projected requirements driven by projected Army Transformation initiatives must be accommodated as well.

1.5 Period of Performance: The period of performance shall be for one (1) Base Year of 12-months and four (4) 12-month option years. The Period of Performance reads as follows:

Base Period: 29 March 2016 – 28 March 2017 1st Option: 29 March 2017 – 28 March 2018 2nd Option: 29 March 2018 – 28 March 2019 3rd Option: 29 March 2019 – 28 March 2020 4thOption: 29 March 2020 – 28 March 2021

1.5.1 Hours of Operation: Contractor staff other than the Help Desk shall be responsible for conducting services between normal published 9th MSC business hours, Monday thru Friday, except Federal holidays or when the government facility is closed due to local or national emergencies, administrative closings, or similar government directed facility closings. The customer service help desk availability is on call 24/7/365, and shall be staffed at on-site location (refer to PWS 1.6.3) 0800-1700 Monday through Friday (excluding Federal holidays) and 0730-1630 Saturday and Sunday. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons.

1.5.2 Travel: Contractor personnel may be required to travel in order to provide on-site technical services and support required under this contracted effort. Actual travel and specific C4IM service requirements will be determined once performance has begun. The government will reimburse the Contractor, in accordance with the Joint Travel Regulation (JTF) and Federal Acquisition Regulation (FAR) 31.205-46, for all approved travel incurred during the performance of this contract. All travel requirements shall be reviewed by the COR and approved by the Contracting Officer prior to actual travel. A trip report shall be provided to COR within three (3) working days after completion of TDY. Typical TDY activity at 9th MSC locations are as follows:

Typical TDY Activity Location of Travel Soldier Readiness Processing

(SRP)

Fairbanks, AK ( Fort Wainwright) Saipan Guam Japan Hilo

LCR/ Site Inventory Fairbanks, AK ( Fort Wainwright) Hilo Oahu Maui Saipan Japan Korea Guam

Network Site Engineering Oahu Fairbanks, AK ( Fort Wainwright) Anchorage, AK (JBER) Maui Hilo Guam Saipan Japan Korea American Samoa

VTC Site Engineering Oahu Fairbanks, AK ( Fort Wainwright) Anchorage, AK (JBER) Maui Hilo Guam Saipan Japan Korea American Samoa

Cabling and Install Oahu Fairbanks, AK ( Fort Wainwright) Anchorage, AK (JBER) Maui Hilo Guam Saipan Japan Korea American Samoa

1.5.3 Transportation: Contractor shall provide transportation for their workforce to/from the place of performance and outlying remote sites.

1.6 General Information

1.6.1 Identification of Contractor Personnel: All Contractor personnel attending meetings, answering government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression that they are government officials. They shall ensure all documents or reports produced by Contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. The Contractor shall be required to obtain and wear identification badges in the performance of this PWS.

1.6.2 Quality Assurance: The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.3 Place of Performance: The place of performance for this contact will be at the following 9th MSC sites and remote locations:

Location Facility Address

OAHU

9th MSC – Fort Shafter Flats

1557 Pass Street

Honolulu, HI 96819

HILO

9th MSC

1304 B Kekuanaoa Street

Hilo, HI 96720

MAUI

US Army Reserve Center

1686 Kaahumanu Ave.

Wailuku, HI 96793

FORT RICHARDSON

Building 45580 Otter Lake Road

Fort Richardson, AK 99505-2000

FORT WAINWRIGHT

Building 3470 Chippewa Ave.

Fort Wainwright, AK 99703-2100

KOREA

USAG-Yongsan South Post TMP Motorpool

Building S-5735

APO, AP 96205

JAPAN

Camp Zama - Building 101

W6CY USAG Japan

APO, AP 96343

AMERICAN SAMOA

US Army Reserve Center #2508

Tafuna, American Samoa 96799

GUAM

MSG Dydasco-Army Reserve Center

Building 61 Annon Ave.

Barrigada, Guam 96913-2208

SAIPAN

Building E Industrial Dr. Tanapag

Saipan, MP 96950

1.6.4 Security Requirements: Contractor personnel performing work under this contract will be required to have a…