Attachment_J-1_PWS_QASP__Seed_Task_Order_1_IT_Telecomm_Support.pdf

Performance Work Statement and

Quality Assurance Surveillance Plan

(HITS-R) 2

Task Order 1: IT / Telecom Engineering Support

For: HPCMP

November 26, 2018

February 25, 2019

1.0 Acronyms.

ACRONYMS DEFINITIONS

ADC Allocated Distributed Center

AFARS Army Federal Acquisition Regulation Supplement

ARL Army Research Laboratory

AASD Assisted Acquisition Services Division

AQL Acceptable Quality Level

ASC Aeronautical Systems Center

C&A Certification and Accreditation

CISSP Certified Information Systems Security Professional

CPCM Certified Professional Contracts Manager

CPSM Certified Professional In Supply Management

CCNP Cisco Certified Network Professional

CARD Cost Analysis Requirements Document

CERT Computer Emergency Response Team

CND Computer Network Defense

CSA Comprehensive Security Assessment

CSSP CyberSecurity Service Provider

COEA Cost and Operational Effectiveness Analysis

COR Contracting Officer’s Representative

CREATE Computational Research and Engineering Acquisition Tools and Environments

Environments

CTA Computational Technology Areas

CTO Command Task Orders

DHPIs Dedicated HPC Investments

DFAR Defense Acquisition FAR Supplement

DOD Department of Defense

DREN Defense Research & Engineer Network

DSRC DOD Supercomputing Resource Center

DIACAP DOD Information Assurance Certification & Accreditation Process

DIARMF DOD Information Assurance Risk Management Framework

DTS Defense Transportation System

ERDC Engineer Research Development Center

FAR Federal Acquisition Regulations

FAS Federal Acquisition Service

HBSS Host Based Security System

HPC High Performance Computing

HPCMP High Performance Computing Modernization Program

HPCMPO High Performance Computing Modernization Program Office

IAM Information Assurance Manager

IMS Integrative Master Schedule

IT Information Technology

ITIL Information Technology Infrastructure Library

IPT Integrated Product Teams

IAVA Information Assurance Vulnerability Alerts

IAVM Information Assurance Vulnerability Management

INFOCON/CYBERCON Information Operations Condition

JPAS Joint Personnel Adjudication System

KO Contracting Officer

LAN Local Area Network

MCSE Microsoft Certified Systems Engineer

MCSD Microsoft Certified Software Developer

MIPR Military Interdepartmental Purchase Request

MOA Memorandum of Agreement

NAVO Naval Oceanographic Office

OR Operational Requirements

OSD Office of the Secretary of Defense

POC Point of Contact

PWS Performance Work Statement

PMP Project Management Professional

QAP Quality Assurance Program

QCP Quality Control Plan

R & D Research and Development

RDT&E Research, Development, Test, and Evaluation

RMF Risk Management Framework

S&T Science and Technology

SAR Situational Awareness Report

SAV Site Assistance Visits

SDP Service Delivery Point

SDREN Secret Defense Research & Engineer Network

ST&E Security, Test and Evaluations

Security Detection, delay and response

Section 508 Section 508 of the Rehabilitation Act of 1973

SOPs Standard Operating Procedures

Specification Technical characteristics or parameters that describe the operational characteristics of a system or product

T&E Test and Evaluation

Timeliness Within the time specified by the performance objective

UAG User Advisory Group

VMS Vulnerability Management System

VPN Virtual Private Network

VS Vulnerability Scanning

WAP or AP Wireless Access Points

WNC Wireless Network Access

2.0 Assumptions:

2.1 Objective. The Contractor shall provide office telecommunications and computer systems support to the High Performance Computing Modernization Program

(HPCMP)by providing engineering and technical resources to perform a broad assortment of system Local Area Network (LAN)engineering and integration functions necessary to accomplish project technical goals such as: LAN engineering and integration, works station configuration and fielding, LAN and workstation security and installation of hardware systems and equipment to The Department of Defense (DoD)

High Performance Computing Program (HPCMP) to achieve mission objectives.

2.2 Background. The Department of Defense (DoD) High Performance Computing

Program (HPCMP) is a technology-led, innovation-focused program committed to extending High Performance Computing to address the DoD’s most significant challenges. The HPCMP accomplishes this goal my developing and maintaining the

Defense Research and Engineering Network (DREN) and its Secret overlay (SDREN), as part of the HPCMP ecosystem consisting of DoD Supercomputing Resource Centers, networking and security, and software applications.

2.3 Place of Performance. The Government anticipates the primary place of performance is

Lorton Support Office, 10501 Furnace Road, Lorton, VA 22079. While any or all of these locations are subject to change, the contractor will be required to provide support for these requirements regardless of location.

The contractor may be required to perform duties at an alternate work location, as designated by the Government. Situations and conditions requiring alternate work locations include, but are not limited to, contingency operations, emergency shutdowns and a declared designated alternate work site. Additionally, the Government anticipates that some work may require travel to the HPC’s subscriber sites.

Tasks may be performed at any of the facilities within the HPCMP footprint, such as

Engineer Research and Development Center (ERDC) in Vicksburg, MS. Support availability shall be 0700-1700 local time on non-holiday workdays.

2.4 Key Personnel. The contractor shall identify a Project Manager/Technical Advisor who will provide management support to this task order and ensure that all requirements that affect integration efforts are made known to the program manager and his/her alternate for coordination (referenced in the base PWS). The Project Manager/Technical Advisor shall be available during normal working hours to meet at the HPCMPO with

Government personnel designated by the Contracting Officer (KO), HPC Program

Manager (PM) or Contracting Officer's Representative (COR) within two hours of notification.

3.0 Applicable Documents. The following documents apply along with any subsequent updates:

DoDI 8530.01, “Cybersecurity Activities Support to DoD Information Network Operations”

Change 1, July 25, 2017DOD Instruction 5000.2, Defense Acquisition Management Policies and Procedures

CJCSM 6510.01B, “Cyber Incident Handling Program,” July 10, 2012

DoDI 8582.01, “Security of Unclassified DoD Information on Non-DoD Information

Systems” of June 6, 2012

DoDM 5200.01, Volume 4, “DoD Information Security Program: Controlled Unclassified

Information” February, 2012

FAR (48 CFR) Subpart 4.19, “Basic Safeguarding of Contractor Information Systems” (see also FAR Subparts 7, 12, & 52)

DoDI 5000.02, Enclosure 14, “Cybersecurity in the Defense Acquisition System” January 7, DoDD 8140.01, Change 1, “Cyberspace Workforce Management,” 31 July 2017

4.0 Tasks Requirements. In accordance with the HPCMP Integrative Technical Services –

Restricted (HITS-R) Contract, the contractor, as an independent contractor and not as an agent of the Government, shall provide the necessary resources (except for those identified as Government

Furnished Property) to support the following tasks:

4.1 HPCMP Office Telecommunications and Computer Systems Planning Support. The

Contractor shall provide office telecommunications and computer systems support to the

HPCMP. The contractor may be required to obtain contract related materials and services, e.g.., supplies, equipment, training, to support the overall requirement. Those materials and/or services must be associated with the overall functions being performed through this task order. The Contractor shall abide by the requirements of the FAR and other DOD Mandatory sources/contractual vehicles when acquiring supplies, services and/or materials. It is the contractors’ responsibility to purchase and maintain equipment from mandatory sources as per section 10.3 of this PWS. This activity will include, but not be limited to, the following tasks:

4.2 Engineer, implement and maintain a Local Area Network (LAN), including appropriate network servers, printers and other network devices; Wireless Access Points (WAP or

AP); and infrastructure, e.g. network cabling and drops, patch panels, cross-connect cabling, etc.; and remote access, i.e., Virtual Private Network (VPN), for authorized users to provide an effective and stable office environment at the HPCMP, enabling office personnel to share data electronically.

4.3 Engineer, implement and maintain a set of networked office workstations and mobile devices that allows personnel at the HPCMP to perform their duties involving electronic documentation and other activities efficiently and effectively.

4.4 Perform system and network administration for the LAN and networked work stations, including timely solution to user problems and secure Wireless Network Access (WNC).

4.5 Perform research on new systems, methods, and capabilities and make recommendations to HPCMP management on upgrades to office workstations, mobile devices, WAP, and

LAN configurations.

4.6 Perform HPCMP Webmaster functions, including maintenance of a program Web page accessible to the public and restricted pages accessible to authorized program participants. Construct program Web pages, including interactive pages for providing and accessing information from authorized program participants. Ensure the security and currency of information on program Web pages by providing secure authentication mechanisms and periodic review of its content.

4.7 Perform non-windows system, (e.g., UNIX), administration duties for non-window workstations residing at the HPCMP.

4.8 Perform configuration control and inventory of HPCMP network equipment, workstations, mobile devices, and software.

4.9 Propose and implement all HPCMP management approved telecommunications services to the HPCMPO staff. This includes, but is not limited to, phone service, mobile, pager service, voice mail service, and fax capability.

4.10 In conjunction with the HPCMP Information Assurance Manager (IAM) and the HPCMP

Network Directorate, examine, propose, implement and maintain network and information systems configurations that meet DoD requirements for Information

Assurance and in accordance with all applicable DoD policies.

4.11 Address potential vulnerabilities on the HPCMP LAN, identified by the HPCMP security staff or through discovery.

4.12 Schedule and execute network security activities, including, restricting unauthorized access to HPCMP network resources; coordinating with individual end-users to ensure anti-virus software and personal firewalls are installed and operational on individual

HPCMP workstations, laptops or mobile devices, installation, maintenance and operation of anti-virus applications on network resources, servers, and individual workstations, laptops or mobile devices.

4.13 Install, operate and maintain HPCMP VPN, ensuring only authorized personnel are able to access the network via the HPCMP VPN; monitoring network security logs to identify potential unauthorized access to or use of the HPCMP resources.

4.14 Provide data back to the HPCMP IAM to enable timely reporting of compliance with

Information Assurance Vulnerability Management (IAVMs) and Directives.

4.15 Provide support to ensure all HPCMP computer hardware and software conforms to the latest security updates and regulations. Use the DoD provided system to review and identify Information Assurance Vulnerability Alerts (IAVAs) for both classified and unclassified HPCMP assets that need to be implemented by the HPCMP IT section.

Install and maintain the Host Based Security System (HBSS) agents for both classified and unclassified HPCMP assets and required modules as directed by the HPC CSSP and

USCYBERCOM. Maintain safe practices for SIPRNET terminals.

4.16 Manage HPCMPO GAL mail distribution list management access as required by the

Government (accurate distribution is dependent upon accurate DREN/SDREN/CSSP

POC data).

5.0 Deliverables. The contractor will be required to prepare and provide updates to, or initial documentation as required. The deliverable products are:

Deliverable CDRL # Transmittal Form and

Quantity

Schedule

Trip Reports A001 Electronic copy To Government POC

NLT five (5) business days after return and

Consolidated Monthly

Consolidated Trip

Report

Briefing Material A002 Electronic copy As necessary

Weekly SAR A003 Electronic copy Two (2) business days after the end of reported week.

Monthly Status Report A004 Electronic copy NLT the 10th day of each month

Trend Analysis Reports A005 Electronic copy As necessary

Comments and

Recommendations Base on

Engineering Studies and

Assessments

A007 Electronic copy As necessary

Configuration management plans

A008 Electronic copy As necessary

Test & Evaluation Plans, Procedures, and Test Reports including Data

A009 Electronic copy As necessary

Risk Management Framework

(RMF)

A010 Electronic copy As necessary

Monthly Inventory A011 Electronic copy Five (5) business days after the end of the reported month.

Program Management Plan /

Task Order Management Plan

A012 Electronic copy Sixty (60) calendar days after task order award. Thirty (30) calendar days after the start of each exercised option period.

Phase out Plan A013 Electronic copy No later than nine (9) months after task order award and updated annually thereafter.

Any final report(s) due within ten (10) calendar days after the last month of performance.

Monthly Financial Report A014 Electronic copy Ten (10) business days after the end of the reported month.

Initial Kickoff Meeting Minutes A015 Electronic copy No later than ten (10) calendar days after the meeting.

Specifications A016 Electronic copy As necessary

Concept of Operations A017 Electronic copy As necessary

Accreditation Documentation A018 Electronic copy As necessary

User Guides A019 Electronic copy As necessary

Plans of Action and Milestones A020 Electronic copy As requested by the government POC

Product Evaluation/Study

Reports

A021 Electronic copy As necessary

Prototype ancillary hardware, drawings, and preliminary technical manuals

A022 Electronic copy As necessary

Standard Operating Procedures A023 Electronic copy As necessary

Network Diagrams A024 Electronic copy As necessary

Regression Test Plans and

Reports

A025 Electronic copy As necessary

After Action / Lessons Learned

Reports

A026 Electronic copy As necessary

Annual Maintenance Renewal A027 Electronic copy As necessary

6.0 Government Furnished Property.

6.1 Government Property (GP) will be provided to the Contractor and it will be addressed and justified at the Base and Task Order level and these items will be listed in each individual task order RFP. The Contractor shall have a system of internal controls to manage (control, use, preserve, protect, repair and maintain) Government property in its possession in accordance with FAR

Clause 52.245-1, 52.245-9, Defense Federal Acquisition Regulation

Supplement (DFARS) 252.211-7003, 252.211-7007, 252.242-7005, 252.245-

7001, 7002, 7003, 7004 and sound business practice to control, protect, preserve and maintain all Government property specified in the contract.

6.2 The contractor shall establish and implement property management plans, systems, and procedures at the contract, program, site or entity level to enable the outcomes outlined in

FAR 52.245-1(f). Failure to maintain an acceptable property management system, as defined in DFARS 252.245-7003, may result in disapproval of the system by the

Contracting Officer and/or withholding of payments.

6.3 The Contractor shall provide for the maintenance and repair of all GP in their possession unless otherwise specified in the contract.

6.4 The Contractor shall maintain a purchasing and distribution system at the Administrative

Office to provide the GP/ Contractor Acquired Property (CAP) to other sites and associated areas.

6.5 The Contractor shall designate a Property Manager who shall, in conjunction with designated Government representatives, be required to maintain up-to-date Government property records and inventory of property for all GP/CAP. The Contractor Property

Manager shall maintain accounting documentation regarding the issuance of GP/CAP to all Contractor employees or subcontractors in accordance with FAR 52.245-1, 52.245-9, DFARS 252.211-7003, 252.211-7007, 252.242-7005, 252.245-7001, 7002, 7003, 7004, and the contractor’s Property Management System. The Contractor Property Manager shall coordinate with other program contractor property personnel, and designated

Government representatives, as applicable, regarding the management and accounting of

GP. The Property Manager who shall, in conjunction with designated Government representatives, be required to maintain up-to-date Government property records and inventory of property for all GP and CAP. The Contractor’s Property Manager shall maintain accounting documentation regarding the issuance of GP/CAP to all Contractor employees or subcontractors in accordance with FAR Clause 52.245-1 and 52.245-9. The

Contractor’s Property Manager shall coordinate with other Contractor property personnel, and designated Government representatives, as applicable, regarding the management and accounting of GP/CAP. The Contractor’s Property Manager shall at a minimum be a

Certified Professional Property Administrator (CPPA); however, a Certified Professional

Property Manager (CPPM) is preferred.

6.6 The Contractor shall provide property accounting and material management services to include providing accounting for and controlling personal property (contractor owned property); providing inspection and inventory support; providing special program management for, and maintenance and repair for GP.

6.7 The Contractor shall maintain up-to-date Government property records for all GP. All maintenance parts are accountable on the property listing. The Contractor shall maintain a receipt and issue listing, in accordance with FAR Clause 52.245-1 and approval from the Contracting Officer.

6.8 The Contractor shall process lateral transfers and change document lateral transfers as directed and approved by the PCO and/or Government Property Administrator (GPA) by the use of an SF 30 (Amendment of Solicitation/Modification of Contract).

6.9 The Contractor shall process turn-ins of GP/CAP, to include any excess during the life of this contract through the use of the Plant Clearance Automated Reutilization Screening

System (PCARSS) IAW DFARS 252.245-7004. In addition the Contractor shall also report any loss of Government Property through Defense Contract Management Agency

(DCMA) E-Tools IAW DFARS 252.211-7002.

6.10 The Contractor shall conduct inventories/inspections of GP/CAP as directed by the COR and GPA. The Contractor shall conduct inventories/inspections IAW FAR Clause

52.245-1.

6.11 The Contractor shall perform annual and periodic inventories in accordance with FAR

Clause 52.245-1, and the Contractor’s Property Management Plan. The Contractor shall post current inventory data to the master property database. Inventory results will be prepared per FAR Clause 52.245-1. The Contractor shall adjust data elements provided as directed by the COR/GPA.

6.12 The Contractor shall prepare all reports and necessary documents on contract closeout

IAW FAR Clause 52.245-1.

6.13 If property will be procured under this contract and said procurement is reimbursed to the contractor these items will become Government Property upon delivery or reimbursement to the Contractor whichever occurs first and what is outlined under 6.1.1 through 6.6.11 applies with the addition of 6.1.13 and 6.1.14 below.

6.14 The Contractor shall process expendable/durable and non-expendable property item requisitions as needed. The Contractor shall review and verify that the requisitions are completed with required information. The Contractor shall have the COR and the designated representatives sign all property requisitions. The Contractor shall establish a hard-copy supporting document file for each document register entry. The Contractor shall process the requisition in accordance with their established Property Management

System.

6.15 The Contractor shall process receipts of complete and partial shipments, and prepare material receiving reports to be provided to the Property Manager and forwarded to the

GPA and the COR.

6.16 The Government Property Administrator and Plant Clearance Officer is:

Monty A. Spicer

Monty.Spicer@usace.army.mil

256-895-1211

7.0 PATENTS, DATA AND COPYRIGHTS. The Government, from time to time, may make certain software acquired under license available to the Contractor solely for its use in the performance of this task order. The Contractor recognizes and acknowledges that such software or data contained therein may be proprietary and confidential to a third party.

In addition to US Government use, ERDC CERL's ESMS software is being pulled into the commercial sector through technology transfer programs. Both the method patents (CERL inventions) and the noncommercial software developed in-house and by contract (with copyright assignments) are being licensed to the private sector. Consequently, this contract requires both

DFARS 252.227-7014 ("7014") for unlimited rights to software and data developed under the contract with a copyright assignment to the Army. Furthermore, with the 7014 and 252.227-7020

("7020") clauses allowing the Contractor to retain certain rights in software it develops even after assigning the copyright to the government, a special agreement is required to terminate those enumerated rights for the contractor under this contract. Upon conclusion of the contract, the

Contractor will not retain any rights in the software being developed. The effect of this special agreement is that the Government is the only entity with the ability to control distribution, dissemination, modification, making derivatives of and making public the ESMS developed under the contract unless specifically retained as a right provided by DFARS 252.227-7014

(“7014”) and 252-227-7020 (“7020”).

8.0 Identification of Contractor Employee(s).

The contractor shall provide each employee an identification (ID) badge on contract start or employment start date. The ID badge shall be made of nonmetallic material, easily readable and include employee’s name, Contractor’s name, functional area of assignment and color photograph.

8.1 Display of ID Badges. Contractor personnel shall wear the ID badge at all times when performing work under this contract to include attending Government meetings and conferences. Unless otherwise specified in the contract, each Contractor employee shall wear the ID badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit such placement.

8.2 Answering Telephones. Contractor personnel shall identify themselves as Contractor employees when answering Government telephones.

8.3 Utilizing Electronic Mail. When prime Contractor or subcontractor personnel send e-mail messages as a part of contract performance (or otherwise relating to contract matters), each sender shall include his/her name (both first and last names), e-mail address and the name of the individual’s employer).

9.0 Task Order Terms and Conditions.

9.1 Period of Performance. The period of performance for this task order will be one year from date of award with four 12 month option periods. Option years are subject to availability of funds.

9.2 Contracting Officer’s Representative (COR) Designation. The Contracting Officer will appoint a COR and issue a COR Designation Letter stating the authority of the COR.

9.2.1 Management of this task will primarily be performed by the COR. The COR will participate in project meetings, represent the KO in the technical phases of the work, and receive task order deliverables. The COR will provide technical assistance and clarification required for the performance of this task. The COR will not provide any supervision or instructional assistance to Contractor personnel. The COR is not authorized to change any terms or conditions of the task order. Changes in the task order requirements, price or terms and conditions shall only be made by the KO via properly executed modifications to the task order.

9.3 Subcontractor Terms and Conditions. All task order terms and conditions associated with this task order shall be applicable to all subcontracts. The prime Contractor shall include all applicable terms and conditions in all subcontracting agreements.

10.0 Reimbursable Costs. All reimbursable costs shall be authorized by the COR or KO and be in conformance with task order requirements.

10.1 Travel. Travel is anticipated during the performance of this requirement. Since the anticipated travel cannot be accurately forecast, it shall be awarded on a reimbursable basis for actual allowable costs that apply over the life of the Task Order. All travel shall be in accordance with the Federal Travel Regulations (FTR) and the Joint Travel

Regulations (JTR); Travel will be reimbursed at actual cost in accordance with the limitation set forth in FAR 31.205-46. There will be no profit allowed on Travel or Other

Direct Costs. Only a G&A or Material Handling Fee will be authorized. The Offeror shall propose its G&A or Material Handling Fee to be assessed for the Travel and ODC

CLINs. The Contractor shall ensure that the requested travel costs will not exceed the obligated amount of this task order. Travel shall be submitted through the agency’s reporting system for client approval. A completed Travel Expense Worksheet must be submitted in advance for anticipated travel.

10.2 Prior Approval. Request for travel approval via the Travel Expense Worksheet shall be submitted in advance of the travel with sufficient time to permit review and approval and shall include:

Traveler’s name

Purpose of the trip to include justification as it benefits the government.

Travel dates

Location

Estimated cost (lodging, lodging tax, M&IE, transportation (i.e., air fare, train, bus, rental car, fuel for rental car, private car mileage, tolls, parking, other related expenses))

Identify the task order and CLIN

All travel shall be pre-approved in advance by the COR and be in compliance with the task order and all other applicable requirements.

The contractor shall use only the minimum number of travelers and rental cars needed to accomplish the trip purpose. Travel shall be scheduled during normal duty hours whenever possible. Airfare will be reimbursed for actual common carrier fares which are obtained by the most reasonable and economical means.

10.2.1 Contractor will not be reimbursed for local travel under 50 miles of the established place of work under this task order.

10.2.2 The contractor shall provide the government POC requesting travel a Trip

Report, within five (5) calendar days or as specified after completion, for each trip associated with a travel approval. The contractor shall maintain a summary of all approved travel, to include at a minimum, the name of the traveler, receipts, location of travel, duration of trip, total cost of trip.

10.3 Materials, Equipment and Other Services. The contractor may be required to obtain contract related materials, i.e., supplies, equipment, reproduction, mailing, to support the overall requirement. Those materials must be associated with the overall functions being performed through this task order. The Contractor shall abide by the requirements of the

FAR and other DOD Mandatory sources/contractual vehicles when acquiring supplies and/or materials. The Contractor shall obtain three (3) quotes in accordance with the FAR from suppliers. The contractor shall include documentation of these quotes and submit for approval by the KO. Documentation of purchases will be input into the agency’s reporting system in order for the Government to review them upon request and to ensure compliance with federal procurement regulations. All supplies must be authorized by the

COR or KO and be in compliance with this task order and all other applicable requirements.

10.4 The contractor will be required to use Army Computer Hardware, Enterprise Software and Solutions (CHESS) contracts/blanket purchase agreements IAW AFARS 5139.101-

90 when purchasing hardware and software. The following statements/clauses from

CHESS contracts will apply:

10.4.1 IT Equipment/Software Solutions. All materials required for performance of the task order, which are not Government-furnished, shall be furnished by the contractor. Materials acquired by the contractor with Government funds, for performance of this contract, are the property of the Government. The contractor shall utilize Enterprise Software Initiative (ESI) source software and Computer

Hardware, Enterprise Software and Solutions (CHESS) contract source equipment in accordance with applicable provisions. In addition to any other equipment, the contractor shall separately identify ESI source software items and

CHESS contract source equipment in their proposal. For ESI source software, the contractor shall request approval to order from the Government supply sources.

For proposed materials that are not from the identified Government supply sources for ESI source software or CHESS contract source equipment, the contractor shall provide a justification why those sources are not being utilized to support approval by the Contracting Officer.

10.5 Mail Services. The following mandatory contracts, to provide domestic express package delivery (next day and second-day delivery) services for DOD, shall be utilized before any other sources are acquired.

CONTRACT # CONTRACTOR ADMINISTRATIVE

CONTRACTING OFFICE

PERIOD OF

PERFORMANCE

HTC711-11-A-R001 FEDEX GROUND

PACKAGE SYSTEMS,

INC

USTRANSCOM-AQ-

HTC711- Scott AFB, IL

1 Oct 2011 – 30 Sep 2021

Htc711-12-A-R001 UNITED PARCEL

SERVICE, Inc

USTRANSCOM-AQ-

HTC711- Scott AFB, IL

1 Oct 2011 – 30 Sep 2021

The contractor must follow the procedures within the respective DOMEX BPA when requesting authorization to participate in the contracts. Contractor shall submit their written request to participate, by completing the Contractor’s Request to Use the BPA form at https://private.amc.af.mil/A4/domexpress/spsindex.html to the KO within 30 days of task order award. A request for exemptions shall be submitted to the designated approval authorities/KO before other sources can be utilized.

11.0 Performance Requirements.

PWS Ref Deliverable or Services

Required

Performance

Standard (s)

Acceptable

Quality Level

(AQL)

Method of

Surveillance

4.2 & 4.3 Telecom and

Computer Systems Support

Adequate telecom/computer systems engineering and technical resources are provided.

Infrastructure work is delivered timely or installed with reasonable skill, care and diligence; the work is performed in a workmanlike manner; and the work, when completed, will be reasonably fit for its intended use.

Functionality defined in task order specification is achieved.

Support Availability

0700-1700 daily on non-holiday workdays

Acceptable quality level is 100%. Any deficiencies identified by client are resolved promptly but always accomplished on or before 5 calendar days.

As needed and/or

Government inspections and acceptance.

4.2 Telecom and

Computer Systems

Support

Maintain customer access to all network equipment i.e. LAN, servers, printers, WAPs, VPN, and other network devices.

Services must not be unavailable to customers more than

30 minutes per month unless a higher level outage exists.

Support Availability

0700-1700 daily on level is 98.5%

Random inspections

Review contractor reports

4.4 Telecom and

Adequate System and

Network

Administration

Deliverables are compliant with applicable regulations/ directives, timely, accurate, complete, clear, and well-organized in requested format.

Support Availability

0700-1700 daily on level is 100% unless otherwise specified in the deliverables section. Any deficiencies identified by client are resolved promptly but always accomplished on or before 5 calendar days, or as required by directive, regulation or security guidance.

As needed and/or

Government inspection and acceptance

4.10 - 4.15 Telecom and

Adequate cyber security implementation

Cyber security work is delivered timely or installed with reasonable skill, care and diligence; the work is performed in a workmanlike manner; and the work, when completed, will be reasonably fit for its intended use.

Support Availability

0700-1700 daily on

No more than 2 instances of quality deviation requiring re- performance or re-installation.

Completed no more than 3 days late.

As needed

4.8 Telecom and

Computer Systems

CDRL A008 and A011

Configuration control

& Inventory control

Input should be separate and presented with

Monthly Activity

Reports

No more than 2 deliverable late and no more than two deliverables requiring re-work.

Five (5) business days after the end of the reported month.

5.0 Deliverables Deliver required

reports

Legible, detailed and professional quality

No more than 3% of the reports to appropriate government contact may be later than the specified time period

Review reports

6.0 Government

Property

Property Management FAR Clause 52.245-1 and 52.245-9, DFARS Clauses

252.211-7007, 252.245-7001, 252.245-7002, 252.245-7003, and

252.245-7004.

Pass all 10 outcomes to include the five subsystems of a

Property

Management System

Audit.

10% Monthly

Audits

6.0 Government

Property

Sensitive Items

Accountability, if applicable

AR 190-11 (Sep 13), AR 710-2, DA Pam

710-2-2, and AR

740-26.

100% Inventory and accountability of

Sensitive Items

(weapons and other designated items).

100% Physical

Accountability

Daily, Monthly and

Quarterly

Reporting

Requirement

10.0 Reimbursable Costs

Travel Travel shall be submitted through the agency’s reporting system for client approval. A completed Travel

Expense Worksheet must be submitted in advance for anticipated travel.

100% pre- approval obtained.

As needed

13.0 Personnel Security Security and Privacy Accordance with AT

OPSEC QASP

Accordance with AT

OPSEC QASP

As needed

12.0 Privacy Act. Performance under this task order may require personnel to have access to Privacy

Information. Personnel shall adhere to the Privacy Act, Title 5 of the U. S. Code Section 552a and applicable agency rules and regulations.

13.0 Personnel Security. Employees selected by the contractor for this performance work statement must be able to pass all security requirements IAW the local base policy in order to gain access to the installation. This effort involves the contractor having access to FOUO, Confidential and classified information/material. The contractor shall possess and maintain a top secret facility clearance. The contractor shall provide personnel with clearances up to the “TOP SECRET” for some tasks which are identified and SECRET for all others. The Contractor may require handling/access of classified up to the “Secret” level as well as “Sensitive” Government information including “Acquisition Sensitive” information. Published material may also be unclassified or for official use only.

PWS

Clearance Level

Required

Exceptions personnel/Clearance

Level

Telecomm and Computer Support TOP SECRET/SSBI

13.1 The Contractor will abide by the requirements set forth in the DD Form 254, Contract

Security Classification Specifications. The Contractor will also abide by the National

Industrial Security Program Operating Manual (NISPOM) for the protection of classified information at its cleared facility, if applicable, as directed by the Defense Security

Service. Reimbursement of all applicable costs associated with obtaining necessary security clearances shall be an indirect cost and not direct billed.

13.2 Security Management. The Contractor shall appoint an individual to serve as a Security

Officer who shall interface with the Government Security Office through the COR on all security matters under this task order. The COR and the Government Security Office shall inspect all procedures and facilities utilized by the Contractor to assure compliance with the security requirements under this task order. Should the COR or the Government

Security Office determine the Contractor is not in compliance with the security requirements of the task order, the KO shall notify the Contractor in writing of the appropriate action that must be taken to rectify this non-compliance (Ref the DoD

National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22m).

Failure to comply with the security requirements of the task order could result in the task order termination action by the KO.

13.3 Termination. The Government Security Office shall be notified of the termination of all personnel on this task order within one (1) day of occurrence. The Contractor shall return to the COR all Government issued identification cards and building passes and equipment and software from terminated employee(s) or that have expired. If an identification card or building pass cannot be returned, a report must be submitted to the COR noting the card or pass number, the name of the employee to whom the card or pass was issued, and their last known location or disposition.

13.4 Employment Eligibility. Subject to existing law, regulations, and/or other provisions of this task order, illegal or undocumented aliens shall not be employed in any subcontract or subordinate agreement issued in support of this task order. All employees shall be U. S.

Citizens.

13.5 Continued Eligibility. The Government reserves the right to deny and/or restrict entrance to Government facilities, prohibit employees from assigned work under the task order, and deny and/or restrict the handling of classified and/or sensitive documents and/or materials to any Contractor employee who the Government determines may present a risk to classified and/or sensitive Government information. The Contractor shall report to the Government Security Office any and all adverse information brought to its attention concerning employees performing under this task order. The subsequent termination of employment of any employee does not preclude the requirement to submit this report.

13.6 Suitability Determination. The Government shall exercise full control over granting, denying, withholding, or terminating unescorted facility access and/or the handling of classified or sensitive Government information to Contractor employees. The

Government may appropriate, authorize, and grant a favorable entry on duty (EOD) based on a preliminary security investigation that would allow employees to start work under this contract prior to the completion of a full security investigation. No Contractor employee shall be allowed unescorted access to a facility without a favorable EOD decision or suitability determination by the Government Security Office. Contractor employees assigned to the task order not required access to classified or sensitive

Government information or requiring access to Government facilities will not be subject to security suitability screening. Contractor employees waiting for an EOD decision may work on the task order provided they do not have access to sensitive Government information. Limited access to Government buildings is allowable prior to the EOD decision if the Contractor employee is escorted by a Government employee or an authorized cleared Contractor employee.

13.7 Information Technology Security Training and Oversight. All managed systems must meet DoD 8500.1 Information Assurance requirements and all support personnel must meet and maintain DoD 8570 baseline certification requirements commensurate with their abilities and administrative position. All Contractor employees using Government automated systems or processing sensitive information shall be required to receive

Security Awareness Training at least annually. Contractor employees with significant security responsibilities shall annually receive other specialized training specific to their responsibilities. The level of training shall be certified to be commensurate with the employees’ duties and responsibilities. All personnel certifications and training must be entered into the Army Training and Certification Tracking System (ATCTS).

13.8 Antiterrorism/Operations Security (AT/OPSEC) Requirements. The following paragraphs are included to meet AT/ OPSEC contract review requirements.

13.8.1 Anti-Terrorism (AT)

13.8.2 Contractor employees and all associated sub-contractors employees requiring access to Army installations, facilities and controlled access areas shall complete

AT Level I awareness training within 14 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. AT Level I awareness training is available at the following website:

https://atlevel1.dtic.mil/at. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR within seven (7) calendar days after completion of training by all employees and subcontractor personnel. This includes new contractor employees as they are assigned.

13.8.3 Contractor employees and all associated sub-contractor employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by the COR as

Government Furnished Information {GFI} at contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable) such as wearing of ID Badges etc. The contractor shall also provide all information locally required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by the COR based on DOD, HQDA and/or local policy. In addition should the Force Protection

Condition (FPCON) at any individual facility or installation change, the COR may require changes in contractor security matters or processes. During FPCON

Charlie and Delta and other required postures such a Lockdown, Shelter In Place or Evacuation contractor employees will resume work as soon as possible after the FPCON has been lowered or the posture returned to normal operations. This pertains to real situations and exercises.

13.8.4 The Contractor and all associated sub-contractors shall insure that all their employees participate in local training as required by the COR based on the local

ATO (Anti-Terrorism Officer) requirements, such as local iWatch training, to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR.

13.8.5 The Contractor and all associated sub-contractors shall insure that all local clearance procedures (i.e. return of ID badges etc. provided by the COR as

Government Furnished Information {GFI} at contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable) are followed for departing contractor employees and sub-contractor employees.

13.8.6 Operational Security (OPSEC). Contractors and all associated sub-contractors who must meet OPSEC requirements as stated on the DD Form 254 shall develop an OPSEC Standing Operating Procedure (SOP)/Plan within 90 calendar days of contract award, to the COR to be reviewed and approved by the responsible Government OPSEC officer per AR 530-1, Operations Security. This

SOP/Plan will include the government's critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. In addition, the contractor shall identify an individual who shall be an OPSEC

Coordinator. The contractor will ensure this individual becomes OPSEC Level II certified per AR 530-1.

13.8.7 Contractors and all associated sub-contractors who must meet OPSEC requirements as stated on the DD Form 254 shall insure that all contractor employees including new contractors starting after implementation of the contract must complete Annual Security Awareness and OPSEC Training (Level I

OPSEC training) within 30 calendar days of their reporting for duty. This information is provided by the COR as Government Furnished Information

{GFI} at contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The COR will ensure that initial and annual training requirements are met.

13.8.8 Contractors and all associated sub-contractors who will handle or have access to

Classified Information are directed to analyze FAR 52.204-2, Security

Requirements. This clause involves access to information classified

“Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with— (1) The Security Agreement (DD Form 441), including the National

Industrial Security Program Operating Manual (DoD 5220.22-M); any revisions to DOD 5220.22-M, notice of which has been provided by the COR as

Government Furnished Information {GFI} at contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable.

14.0 Task Order Funding. It is anticipated that the task order will be incrementally funded IAW

DFARS 252.232-7007, “Limitation of Government’s Obligation”.

14.1 Incremental Funding. The task order may be incrementally funded. If incrementally funded, funds shall be added to the task order via a unilateral modification as the funds become available. The Contractor shall not perform work resulting in charges to the

Government that exceed obligated funds.

14.2 The Government is not obligated to reimburse the Contractor for charges in excess of the order funded amount, and the Contractor is not obligated to continue performance or otherwise incur costs that could result in charges to the Government in excess of the obligated amount under the contract/order.

15.0 Enterprise Contractor Manpower Reporting Application.

Accounting for Contractor Services:

The Office of the Assistant Secretary of the Army (Manpower & Reserve Affairs) operates and maintains a secure Army data collection site where the contractor will report ALL contractor manpower (including subcontractor manpower) required for performance of this contract. The contractor is required to completely fill in all the information in the format using the following web address:

https://www.ecmra.mil

The information to be reported is as follows:

Contracting Office, Contracting Officer, Contracting Officer’s Technical Representative;

Contract number, including task and delivery order number;

Beginning and ending dates covered by reporting period;

Contractor name, address, phone number, e-mail address, identity of contractor employee entering data;

Estimated direct labor hours (including sub-contractors);

Estimated direct labor dollars paid this reporting period (including sub-contractors);

Total payments (including sub-contractors);

Predominant Federal Service Code (FSC) reflecting services provided by contractor (and separate predominant FSC for each sub-contractor if different);

Estimated data collection cost;

Organizational title associated with the Unit Identification Code (UIC) for the Army

Requiring Activity (the Army Requiring Activity is responsible for providing the contractor with its UIC for the purposes of reporting this information);

Locations where contractor and sub-contractors perform the work

As part of its submission, the contractor will also provide the estimated total cost (if any) incurred to comply with this reporting requirement. Reporting period will be the period of performance not to exceed 12 months ending 30 September of each government fiscal year and must be reported by 31 October of each calendar year. If contract performance is completed before 30 September, the data can be entered upon contract completion rather than waiting for the end of the fiscal year.

https://www.ecmra.mil/

15.1 Uses and Safeguarding of Information. Information from the secure web site is considered to be proprietary in nature when the contract number and contractor identity are associated with the direct labor hours and direct labor dollars. At no time will any data be released to the public with the contractor name and contract number associated with the data.

15.2 Subcontract Data. The contractor shall ensure that all reportable subcontract data is timely reported to this data collection web site (citing this contract/order number). At the discretion of the prime contractor, this reporting may be done directly by subcontractors to the data collection site; or by the prime contractor after consolidating and rationalizing all significant data from the subcontractors.

15.3 Reporting Flexibility. Contractors are encouraged to communicate with the Help Desk identified at the data collection web site to resolve reporting difficulties. Changes to facilitate reporting may be authorized by the contracting officer or the Help Desk (under

HQDA policy direction and oversight).

16.0 Personal Service. The COR has been briefed on the avoidance of personal services and those actions that represent personal services. The HPCMP has determined that use of this task order to satisfy this requirement is in the best interest of the Government, economic and other factors considered, and this contract is not being used to procure personal services prohibited by the

Federal Acquisition Regulation (FAR) Part 37.104 titled “Personal Services Contract”. To counter the circumstances that infer personal services and to preserve the non-personal nature of the contract, the Contractor shall adhere to the following guidelines in the performance of the task:

Contractor provides for direct supervision of all contract employees assigned to the task.

Refrain from discussing the issues such as skill levels and hours, salaries, cost and funding data, or administrative and personnel matters affecting Contractor employees, with the client.

Ensure close communication/coordination with the KO and COR, reporting problems to the COR as they occur (not waiting for a monthly report).

Do not permit Government officials to interview potential Contractor employees, discuss individual…