W912HZ-15-R-0004_CONFORMED_COPY4.pdf

W912HZ-15-R-0004

SEE ADDENDUM

(No Collect Calls)

W912HZ-15-R-0004 26-May-2015

b. TELEPHONE NUMBER

601-634-5234

8. OFFER DUE DATE/LOCAL TIME

04:00 PM 17 Jun 2015

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.

W912HZ9. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

VINCENT DURMAN

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

0 27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS:

. YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN

% FOR:SET ASIDE:UNRESTRICTED OR X

SMALL BUSINESS

WOMEN-OWNED SMALL

BUSINESS (WOSB)

17a.CONTRACTOR/ CODE FACILITY

OFFEROR CODE

ERDC CONTRACTING OFFICE

3909 HALLS FERRY ROAD

VICKSBURG MS 39180-6199

18a. PAYMENT WILL BE MADE BY CODE

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE15. DELIVER TO CODE 16. ADMINISTERED BY

SEE SCHEDULE

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

FAX:

TEL: SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

X 8(A)

HUBZONE SMALL

BUSINESS

ECONOMICALLY DISADVANTAGED

WOMEN-OWNED SMALL BUSINESS

(EDWOSB)

SIZE STANDARD:

$25.5 mil

NAICS:

541513

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

EMAIL:

TEL:

31c. DATE SIGNED

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF93

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT 41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

Section B - Supplies or Services and Prices

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 Labor $ $

FFP

0002 T&M Labor 651,900.86 Hours $1.00 $651,900.86 T&M

0003 Other Direct Costs 21,000 Lump Sum $1.00 $21,000.00

COST

0004 Training 22,000 Lump Sum $1.00 $22,000.00

0005 Travel 100,000 Lump Sum $1.00 $100,000.00

0006 Contractor Manpower

FFP

The contractor shall complete Contractor Manpower Reporting (CMR) in accordance with Section H of the Contract.

FOB: Destination

TOTAL $________________

NSP______

Section C - Descriptions and Specifications

PERFORMANCE WORK STATEMENT

Performance Work Statement (PWS) OCIO Service Contract

5/20/2015 Version 2.0

Performance Work Statement (PWS)

ERDC Office of the Chief Information Officer (OCIO) Service Contract

1 Introduction The U. S. Army Corps of Engineers (USACE) Engineer Research and Development Center (ERDC) has responsibility for investigating, developing and maintaining the nation's water and related environmental resources;

constructing and operating projects for navigation, flood control, major drainage, shore and beach restoration and protection, related hydro power development, water supply, water quality control, fish and wildlife conservation and enhancement, and outdoor recreation; responding to emergency relief activities directed by other federal agencies;

and administering laws for the protection and preservation of navigable waters, emergency flood control and shore protection.

1.1 Mission

The U.S. Army Corps of Engineers' (USACE) Engineer Research and Development Center (ERDC) helps solve our Nation’s most challenging problems in civil and military engineering, geospatial sciences, water resources, and environmental sciences for the Army, Department of Defense, civilian agencies, and our Nation’s public good.

1.2 Background

The ERDC Information Technology Laboratory (ITL) is responsible for building, staffing and maintaining the computer communications network in support of the Research &Development activities of ERDC. The ERDC Office of the Chief Information Officer (OCIO) provides advanced Scientific and Technology-centric computing environments supporting the broad Information Technology needs of ERDC researchers to include support of non-standard platforms, Testing & Evaluation (T&E), evaluating commercial off-the-shelf software, and T&E seamless connectivity to high performance computing and ability to adapt to changing technologies. The Government established functional service areas of operations: Computing Services, Configuration Management, CyberSecurity, and Network Services. The Research and Development Environment (RDE) is a wide variety of computational and network resources designed to support the ERDC researcher. Resources may include desktop workstations, laptop computers, departmental file and application servers, computer clusters, storage appliances or storage area network (SAN)s, leading edge technology devices, virtual server/desktop environments, sensors arrays, World Wide Web technologies, physical process models, network equipment, and cybersecurity. The Cloud Computing Environment (CCE) is the Research and Development (R&D) computing backbone serving virtualized IT to the ERDC researcher R&D mission requirements. The CCE provides ERDC scientists and engineers with capabilities to rapidly deploy unique computing environments (servers, operating systems, storage, database, and systems analyst support) and high bandwidth access to supercomputer resources. The network is operational 24 hours a day, seven days a week, 365 days a year (24x7x365). ERDC consist of seven laboratories at four main geographical sites located in Champaign, IL; Hanover, NH; Alexandria, VA; and Vicksburg, MS. The estimated number of managed network devices at all sites is 260. The estimated current number of operating system platforms at each location is provided below in Table 1.

Location Windows Unix/Linux Apple/Mac Vicksburg, MS 1548 189 388 Hanover, NH 231 17 80 Champaign, IL 134 61 11 Alexandria, VA 121 32 7

Government Directed Actions (GDAs) may only be issued by the ERDC OCIO or Deputy OCIO through the Contracting Officer. GDAs are defined as operational guidance from the Government to the Contractor(s) to provide guidance that involves specific situational actions, which must be taken immediately, or on short notice, within the existing technical capabilities of the network and accompanying systems.

Government Directed Action is given when time is critical and delay or inaction may adversely affect mission accomplishment, threaten the safety of personnel, cause damage or destruction of Government property, or the loss or compromise of sensitive information.

1.3 Scope

The ERDC OCIO requires computer facilities management services for its mission-critical activities.

The Government will retain key services as identified above in Background, which encompass the overall IT strategy and design related to functional service areas. The Government will also retain authority for all demand management, governance, and approval functions associated with contractors. Management of the contract will be carried out by the Contracting Officer (KO) and Contracting Officer’s Representative (COR).

The contractor shall provide all personnel, supervision, and services necessary to provide services and related activities for the ERDC OCIO as defined herein and in task order Performance Work Statements (PWS). This will be an indefinite delivery indefinite quantity (IDIQ) contract. The scope is defined as general requirements as outlined below in terms of areas of responsibility or operational mission. Specific requirements will be detailed in individual task orders issued throughout the term of the contract.

The contractor shall perform services related to the following service areas: Computing Services, Configuration Management, CyberSecurity, and Network Services.

2 General Requirements This section describes the general requirements the contractor needs to accomplish. The following sub-sections provide details of various considerations on this effort.

2.1 Non-Personal Services

The Government shall neither supervise contractor employees nor control the method by which the contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual contractor employees. It shall be the responsibility of the contractor to manage its employees and to guard against any actions that are of the nature of personal services, or give the perception of personal services. If the contractor believes that any actions constitute, or are perceived to constitute personal services, it shall be the contractor's responsibility to notify the Procuring Contracting Officer (PCO) immediately.

2.2 Business Relations

The contractor shall successfully integrate and coordinate all activity needed to execute the requirement. The contractor shall manage the timeliness, completeness, and quality of problem identification. The contractor shall provide corrective action plans, proposal submittals, timely identification and remediation of issues, and effective management of subcontractors. The contractor shall seek to ensure customer satisfaction and professional and ethical behavior of all contractor personnel.

2.3 Contract Administration and Management

The following subsections specify requirements for contract, management, and personnel administration.

2.3.1 Contract Management

The contractor shall establish clear organizational lines of authority and responsibility to ensure effective management of the resources assigned to the requirement. When operating onsite, the contractor shall maintain continuity between ongoing activities at Vicksburg, MS, Alexandria, VA, Champaign, IL, and Hanover, NH and the contractor's corporate offices.

2.3.2 Contract Administration

The contractor shall establish processes and assign appropriate resources to effectively administer the requirement.

The contractor shall respond to Government requests for contractual actions in a timely fashion. The contractor shall have a single point of contact onsite in Vicksburg, MS between the Government and Contractor personnel assigned to support daily operations under executed task orders. The contractor shall assign work effort and maintain proper and accurate timekeeping records of personnel assigned to work on the requirement.

2.3.3 Personnel Administration

The Contractor(s) shall provide experienced and qualified personnel with all the skills necessary to perform the work identified. Some Contractor(s) personnel must have and maintain certain valid Licenses and Certifications to perform the work and will be identified at the task order level. Various required training, qualifications, licenses, security clearances, or certifications must be obtained prior to commencement of work at Contractor(s) expense.

Contractor(s) employees required to perform tasks must meet certification requirements as defined in Army and DoD Regulations. All contractor personnel shall be able to read, write, speak, and understand English, shall possess good written and verbal communications skills, and shall have sufficient knowledge of proper English grammar, spelling, capitalization, and punctuation rules to identify errors and make corrections.

The contractor shall provide the following management and support as required. The contractor shall provide for employees during designated Government non-work days or other periods where Government offices are closed due to weather or security conditions. The contractor shall maintain the currency of their employees by providing initial and refresher training as required to meet the PWS requirements. The contractor shall make necessary travel arrangements for employees. The contractor shall provide necessary infrastructure for services performed at the contractor's site(s).The contractor shall provide administrative support to employees in a timely fashion (time keeping, leave processing, pay, emergency needs).

2.4 Subcontract Management

The contractor shall be responsible for any subcontract management necessary to integrate work performed on this requirement and shall be responsible and accountable for subcontractor performance on this requirement. The prime contractor will manage work distribution to ensure there are no Organizational Conflict of Interest (OCI) considerations. Contractors may add subcontractors to their team after notification to the Procuring Contracting Officer (PCO) or Contracting Officer Representative (COR). Cross teaming may or may not be permitted.

2.5 Contractor Personnel, Disciplines, and Specialties

The contractor shall accomplish the assigned work by employing and utilizing qualified personnel with appropriate combinations of education, training, and experience. The contractor shall match personnel skills to the work or task with a minimum of under/over employment of resources. The contractor shall ensure the labor categories as defined in the Labor Categories document utilized in the performance of each Task Order issued hereunder will be the minimum necessary to accomplish the task. The Contractor shall provide the necessary resources and infrastructure to manage, perform, and administer the contract.

2.5.1 Contractor Employee Conduct

The contractors employees shall observe and comply with all applicable departmental and agency regulations, policies, and procedures (e.g., fire, safety, sanitation, environmental protection, security, etc.). The contractor shall ensure that all contractor employees represent a professional appearance at all times, and that their conduct does not reflect discredit on the United States Government.

When contractor employees are working on Government facilities or participating at Government meetings, they shall wear identification badges distinguishing themselves as such. The badges at a minimum must have the employee name and word "contractor” displayed. Ideally, the company name will appear on the badge. Additionally, not withstanding any other provisions in the PWS, the contractor shall identify themselves as a contractor in meetings, telephone conversations, all written communications and work situations so that their actions cannot be construed as acts of a Government official. The contractor shall take no actions that bind the government to a final decision or results in the exercise of governmental discretion.

2.5.2 Removal of Contractor Employees for Misconduct or Security Reasons

The Government may, at its sole discretion, direct the contractor to remove any contractor employee from Government facilities for misconduct or security reasons. Such removal does not relieve the contractor of the responsibility to provide sufficient qualified personnel for adequate and timely service. The Contracting Officer will provide the contractor with an immediate rationale for removal of contractor employee.

Conflict of Interest. Neither the contractor nor its on-site employees shall utilize their knowledge of access to information, sensitive or otherwise, for individual or company gain.

2.6 Location and Hours of Work

The headquarters site of the U.S. Army Corps of Engineers, ERDC is 3909 Halls Ferry Road, Vicksburg, MS 39180-6199. ERDC satellite laboratory sites are located in Alexandria, VA, Champaign, IL, Hanover, NH, and other Government facilities.

Core Working Hours. Government core working hours are from 0700 to 1730 local time Monday through Friday except US Federal Holidays. Government workers typically work eight (8) hours per day, 40 hours per week.

Government Facility Closure. In case of government facility closure as directed by the government, contractor employees shall be excused from work at no cost to the government.

2.7 Travel

Travel to other government facilities or other contractor facilities may be required and will be specified in the PWS.

All travel requirements (including plans, agenda, itinerary, or dates) shall be pre-approved by the government (subject to local policy procedures), and is on a strictly cost reimbursable basis. Costs for travel shall be billed in accordance with the regulatory implementation of Public Law 99-234 and FAR 31.205-46 Travel Costs (subject to local policy and procedures; may reference FAR).

3 Performance Requirements The following section specifies the Performance Objectives and Performance Elements for the contract.

3.1 Cybersecurity

3.1.1 The Contractor shall perform activities relative to the ERDC RDE Cybersecurity.

This consists of vulnerability scanning of assets and remediation, Host Based Security System (HBSS) configuration and management, incident response, training and certification compliance tracking, secure configuration management, identity and access management services, network access control or comply to connect methods, audit log review, web content filtering, and Risk Management Framework (RMF) documentation and process for the certification of the RDE.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

e) STD: Responsive

AQL: 95%

3.1.2 The Contractor shall perform activities relative to the ERDC Agent of the Certification Authority Cybersecurity.

This consists of Risk Management Framework (RMF) assessments for enclaves and major applications throughout the Army. This requires knowledge of the NIST SP 800-53 controls, as well as DISA STIGs, DoD vulnerability assessment techniques, and applicable DoD and Army cybersecurity regulations.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

e) STD: Responsive

AQL: 95%

3.2 Network Management

3.2.1 The Contractor shall perform activities relative to ERDC RDE Network Management.

Management of ERDC’s RDE network resources, providing services for wired and wireless Local Area Network (LAN) and Wide Area Network (WAN), demilitarized zone (DMZ), virtual private networks (VPN), firewalls, switches, routers, network access control (NAC), domain name services (DNS), dynamic host control protocol (DHCP), IP addressing, network dashboard operations including but not limited to configuration, availability monitoring, customer support, design, implementation, audit logging, and maintenance. This requires troubleshooting and problem resolution of network operation interruptions.

Major performance objectives include: Network Uptime and Availability, Enterprise and Laboratory Network Management, Audio Visual Support Management, and Incident Response and Resolution. A 2-hour response time resolution during normal weekly business hours is expected. After normal weekly business hours, a 4-hour response time resolution is expected. Saturday and Sunday, an 8-hour response time resolution is expected.

Performance Standards

a) STD: Accurate

AQL: 98%

b) STD: Identifies deficiencies

AQL: 98%

c) STD: Identifies corrective actions, when applicable

AQL: 98%

d) STD: Deliverables are made in accordance with schedule

AQL: 98%

AQL: 98%

3.3 Computing Services

Corporate computing resource operations including but not limited to desktop and virtual workstations, laptop computers, file servers, virtual servers, computer clusters, storage appliances or storage area networks, leading edge technology devices, tablets, cellular phones, sensors and sensor arrays of various types, etc., used in supporting software code development for hardware and software technologies, World Wide Web technologies, and R&D network protocols.

Operate, implement, and maintain the ERDC Research and Development Environment corporate computing systems. Major performance objectives include the uptime and availability of corporate enterprise management services: Email, Backup, Restoration, and Storage Management, Active Directory Services (ADS), Corporate Computing Systems Patch Management, Apple Corporate Management, UNIX / Linux Corporate Management, Baseline Computing Systems Image Management, Test and Evaluation Management, Mobile Device Management, Database Management, Corporate Desktop Support, and cloud services to include Virtualization Management for servers, desktop, and storage. A 2-hour response time resolution during normal weekly business hours is expected.

After normal weekly business hours, a 4-hour response time resolution is expected. Saturday and Sunday, an 8-hour response time resolution is expected.

3.3.1 The Contractor shall perform activities relative to the Uptime and Availability of Electronic mail (Email) system.

Provide a fully operational system. Provide software and hardware maintenance services to include troubleshooting and problem resolution for the ERDC Research and Development Environment (RDE) Microsoft Exchange Electronic mail system, antispam and malware protection, monitoring, in accordance to DoDI 8520.02 Public Key Infrastructure and Public Key Enabling May 24, 2011. A 2-hour response time resolution during normal weekly business hours is expected. After normal weekly business hours, a 4-hour response time resolution is expected.

Saturday and Sunday, an 8-hour response time resolution is expected.

Performance Standards

a) STD: Accurate

AQL: 98%

b) STD: Identifies deficiencies

AQL: 98%

c) STD: Identifies corrective actions, when applicable

AQL: 98%

d) STD: Deliverables are made in accordance with schedule

AQL: 98%

3.3.2 The Contractor shall perform activities relative to the Research and Development Environment (RDE) Backup and Storage Management.

Provide operational services to include troubleshooting, problem resolution, and monitoring for corporate enterprise systems, and related projects. A 2-hour response time resolution during normal weekly business hours is expected.

After normal weekly business hours, a 4-hour response time resolution is expected. Saturday and Sunday, an 8-hour response time resolution is expected.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.3.3 The Contractor shall perform activities relative to the Research and Development Environment (RDE) Active Directory (AD) Services.

Provide daily operational management of the ERDC Active Directory Domain Services to include group policy management and development, site replication, data integrity, Dynamic DNS, ADS Servers, Forests, Domain trees, naming contexts and directory partitions, object names and identities, containers and leaves, groups, and object attributes.

Major performance objectives include: creation of new user, resource and AD object accounts, management, maintenance, and troubleshooting of user, resource accounts and AD objects, and problem resolution. A 2-hour response time resolution during normal weekly business hours is expected. After normal weekly business hours, a 4-hour response time resolution is expected. Saturday and Sunday, an 8-hour response time resolution is expected.

Performance Standards

a) STD: Accurate

AQL: 98%

b) STD: Identifies deficiencies

AQL: 98%

c) STD: Identifies corrective actions, when applicable

AQL: 98%

d) STD: Deliverables are made in accordance with schedule

AQL: 98%

3.3.4 The Contractor shall perform activities relative to the Research and Development Environment (RDE) Corporate Computing Systems Patch Management.

Provide operational computing system patch management for ERDC computing systems. Provide troubleshooting and problem resolution management.

Major performance objectives include patching of computing systems: server, virtual server, desktop, virtual desktop utilizing patches identified as critical high and Information Assurance Vulnerability Alert (IAVA) using Microsoft Windows Server Update Service, Lumension, Casper, Apple, RedHat and other software tools. A 2-hour response time resolution during normal weekly business hours is expected. After normal weekly business hours, a 4-hour response time resolution is expected. Saturday and Sunday, an 8-hour response time resolution is expected.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.3.5 The Contractor shall perform activities relative to the Research and Development Environment (RDE) Corporate Desktop Support.

Provide operational services to include troubleshooting and problem resolution for computer desktops and peripherals connected to the Research and Development Environment (RDE). A 2-hour response time resolution during normal weekly business hours is expected. After normal weekly business hours, a 4-hour response time resolution is expected. Saturday and Sunday, an 8-hour response time resolution is expected.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

d) STD: Deliverables are made in accordance with schedule

3.3.6 The Contractor shall perform activities relative to the Research and Development Environment (RDE) Mobile Computing.

Provide management of ERDC Mobile Devices. Major performance objectives include: Operate and support Mobile Device Management system in accordance to OCIO policy and Standard Operating Procedures, and provide asset accountability. Provide troubleshooting, implementation, and problem resolution management.

Major performance objectives include activation and management of new and lost mobile devices, customer survey, and mobile device accountability. A 2-hour response time resolution during normal weekly business hours is expected. After normal weekly business hours, a 4-hour response time resolution is expected. Saturday and Sunday, an 8-hour response time resolution is expected.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.3.7 The Contractor shall perform activities relative to the UNIX / Linux Corporate Management.

Operate, implement, and maintain the ERDC Research and Development Environment (RDE) cybersecurity compliance standards for UNIX/Linux corporate computing systems. Provide troubleshooting, implementation, and problem resolution management for UNIX/Linux applications.

Major performance objectives include cybersecurity management of UNIX/Linux computing systems utilizing the VMWare VCenter Compliance management suite, DOD Host Based Security System (HBSS), High Performance Computing Modernization Program (HPCMP), Comprehensive Security Assessment (CSA) Tools, and upload resulting assessments. A 2-hour response time resolution during normal weekly business hours is expected. After normal weekly business hours, a 4-hour response time resolution is expected. Saturday and Sunday, an 8-hour response time resolution is expected.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.3.8 The Contractor shall perform activities relative to the Baseline Computing Systems Image Management Design, test and evaluate, operate, implement, and maintain the ERDC Research and Development Environment standard corporate computing operating systems. Provide standard research and development (R&D) operating system images for use by ERDC in accordance with the ERDC OCIO policy standards.

Major performance objectives include design, development, implementation, deployment (e.g., Windows Deployment Service, CASPER, and RedHat) and sustainment of standard R&D operating systems for Microsoft, Apple, and UNIX/Linux systems. A 2-hour response time resolution during normal weekly business hours is expected. After normal weekly business hours, a 4-hour response time resolution is expected. Saturday and Sunday, an 8-hour response time resolution is expected.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.3.9 The Contractor shall perform activities relative to Database and Operations Management Initialize, operate and maintain ERDC Research and Development Environment (RDE) corporate databases.

Major performance objectives include design, development, implementation, deployment and sustainment and backup operations for corporate and project initiated database use. Database types may include but are not limited to Microsoft SQL, MySQL, and Oracle. A 2-hour response time resolution during normal weekly business hours is expected. After normal weekly business hours, a 4-hour response time resolution is expected. Saturday and Sunday, an 8-hour response time resolution is expected.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.3.10 The Contractor shall perform activities relative to Virtualization Management to include Server, Desktop, Storage and Cloud Operate, implement, and maintain the ERDC Research and Development Environment (RDE) cloud computing systems for local and other federal cloud based computing.

Major performance objectives include design, development, implementation, deployment, sustainment and backup and recovery operations. A 2-hour response time resolution during normal weekly business hours is expected. After normal weekly business hours, a 4-hour response time resolution is expected. Saturday and Sunday, an 8-hour response time resolution is expected.

Performance Standards

AQL: 98%

b) STD: Identifies deficiencies

AQL: 98%

c) STD: Identifies corrective actions, when applicable

AQL: 98%

d) STD: Deliverables are made in accordance with schedule

AQL: 98%

3.4 Configuration Management

3.4.1 The Contractor shall perform activities relative to the overall ERDC Configuration Management (CM) Program Management.

Develop, document, install, and implement a CM Program Management System.

Major performance objectives include: prepare, document, categorize, track, and monitor system configuration items for audit in the CMDB.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.4.2 The Contractor shall perform activities relative to the Configuration Management Baseline Establish and maintain the Configuration Management Database (CMDB) to assure all hardware, software, and associated infrastructure is accurately reflected in the CMDB.

Major performance objectives include: maintain Standard Operating Procedures (SOP), and naming conventions, baseline version control, system logging procedures, maintain systems logs, maintain training requirements, license management, design, modify, and sustain Configuration Management Database (CMDB).

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.4.3 The Contractor shall perform activities relative to the Configuration Control Board (CCB).

Develop and submit for Government CCB approval changes in enterprise service or data requests for enterprise computing. This activity will reduce risks and minimize disruption of IT services by ensuring changes are captured, evaluated, authorized, prioritized, planned, tested, and documented prior to implementation.

Major performance objectives include: develop service or change requests, evaluate proposed changes, track the status of changes, and maintain an inventory of system and supporting documents as the system changes.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.4.4 The Contractor shall perform activities relative to Configuration Status Accounting.

Provide a process of recording and reporting configuration item descriptions (e.g., hardware, software, firmware, etc.) and all departures from the baseline during design and production. In case of suspected problems, the verification of baseline configuration and approved modifications can be quickly determined.

Major performance objectives include: develop service or change requests, evaluate proposed changes, track the status of changes, and maintain an inventory of system and supporting documents as the system changes

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.4.5 The Contractor shall perform activities relative to Configuration Verification and Audit.

An independent review of hardware and software for the purpose of assessing compliance with established performance requirements, commercial and appropriate military standards, and functional, allocated, and product baselines. Configuration audits verify the system and subsystem configuration documentation complies with their functional and physical performance characteristics before acceptance into an architectural baseline.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

c) STD: Identifies corrective actions, when applicable

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

4 Special Requirements This section describes the special requirements for this effort. The following sub-sections provide details of various considerations on this effort.

4.1 Security and Safety

4.1.1 All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 5 calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at the following website:

Error! Hyperlink reference not valid. .

4.1.2 All contractor and all associated sub-contractors employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

4.1.3 The contractor and all associated sub-contractors shall brief all employees on the local iWATCH, Corps Watch, or See Something, Say Something program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT 5 calendar days after contract award.

4.1.4 All contractor employees with access to a government info system must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the information systems and then annually thereafter IAW AR 380-67 (Personnel Security Program) and Homeland Security Presidential Directive 12 (Policy for a Common Identification Standard for Federal Employees and Contractors).

4.1.5 The Contractor shall develop an OPSEC SOP/Plan within 90 days of contract award. The OPSEC SOP/Plan must be reviewed and approved by the RA OPSEC Officer. The SOP/Plan will include the government's critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. In addition, the contractor shall identify an individual who will be an OPSEC Coordinator.

4.1.6 All new contractor employees will complete Level I OPSEC training within 30 calendar days of their reporting for duty. Additionally, all contractor employees must complete annual OPSEC awareness training.

4.1.7 All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2 within six months of employment.

4.1.8 All contractor employees supporting IA/IT functions shall be appropriately certified upon contract IAW DoD 8570.01-M, DFARS 252.239-7001 and AR 25-2. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

4.1.9 All contractor employees shall ensure the following AT/OPSEC requirements are meet prior to deploying personnel authorized to accompany U.S. Armed Forces outside the United States: required compliance with laws and regulations, pre-deployment requirements, required training (per combatant command guidance), and personnel data required.

4.1.10 The Contractor shall comply with the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M), any revisions to DOD 5220.22-M and Army Regulation 380-49, Industrial Security. The DD254 will be attached with the contract.

4.1.11 All contract employees, including subcontractor employees who are not in possession of the appropriate security clearance, will be escorted in areas where they may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas.

The Prime Contractor Company must have (or will have) a Facility Clearance (FCL) at the appropriate level (IAW the NISPOM DOD 5220.22-M and AR 380-49) prior to the start of the contract awarded period of performance.

Contractor personnel performing work under this contract must have the required security clearance, per AR 380-67, at the appropriate level at the start of the period of performance. Security Clearances and FCL requirements are required to be maintained for the life of the contract IAW the DD254 attached to the contract. If no FCL, the supporting Government Contracting Activity will sponsor the prime contract company in obtaining the FCL.

DD Forms 254: Overarching security requirements and Contractor access to classified information shall be as specified in the basic DD Form 254, which will be further identified in the DD Form 254 for each TO, as required.

All contractor personnel with access to unclassified information systems, including e-mail, shall have at a minimum a favorable National Agency Check (NAC).

Visitor Group Security Agreement. The contractor shall sign a Contractor Visitor Group Security Agreement to protect classified information involved in performance under this contract or Task Order. The Agreement will outline responsibilities in the following areas: Contractor security supervision; Standard Practice Procedures; access, accountability, storage, and transmission of classified material; marking requirements; security education; personnel security clearances; reports; security checks; security guidance; emergency protection; protection of government resources; DD Forms 254; periodic security reviews; and other responsibilities, as required.

4.2 Transition

The contractor shall follow the transition plan submitted as part of the proposal and keep the Government fully informed of status throughout the transition period. Throughout the phase-in/phase-out periods, it is essential that attention be given to minimize interruptions or delays to work in progress that would impact the mission. The contractor must plan for the transfer of work control, delineating the method for processing and assigning tasks during the phase-in/phase-out periods. The contractor shall include the status of the transitioning of control of work as a deliverable in the monthly status report.

4.3 Government Furnished Materials

Government furnished materials will be specified in each Task Order. Unless otherwise indicated in a particular task order, the Government will provide all facilities, utilities, equipment and materials necessary to accomplish the work for "on-site employees:

Desk Chair Access to copy machine Access to facsimile machine Telephone, including long distance and voicemail Desktop computer (PC) with access to printer Cell Phone as determined necessary by the COR Government furnished computers may be hand-receipted to the Contractor. The liability for the repair of damaged Government property shall be subject to the terms of the "Government Property clause set forth in Section I of the solicitation and resulting contract. When Government property is furnished to the Contractor, a Government property control receipt will be completed and signed by the Contractor. The property control receipt will indicate the assigned location for use of the property by the Contractor. A copy of the property control receipt will be furnished to the Contractor. Upon return of the Government property to the Government, the Government property control receipt will be completed indicating the return of the property by the Contractor. A copy of the returned property control receipt will be furnished to the Contractor. All Government property furnished to the Contractor shall be accomplished in accordance with this procedure. The Contractor shall establish a property control system for the use, control, protection, and preservation of Government property assigned to the Contractor.

4.4 Environmental Requirements

Not Applicable.

4.5 Applicable Directives

The contractor shall comply with all documents referenced under paragraph 3.0, Performance Requirements and as identified at the task order level.

4.6 Quality

This section describes the Quality Control components for this effort. The following sub-sections provide details of various considerations on this effort.

4.6.1 Quality Control

The Contractor shall develop an Order Quality Control Plan (QCP) for the base and maintain an effective quality control program to ensure services are performed in accordance with the IDIQ contract and this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractors QCP is the means by which he assures himself that his work complies with the requirement of the contract.

The finalized QCP will be accepted by the Government at the time of the award of the contract. The Contracting Officer may notify the Contractor of required modifications to the plan during the period of performance. The Contractor then shall coordinate suggested modifications and obtain acceptance of the plan by the Contracting Officer. Any modifications to the program during the period of performance shall be provided to the Contracting Officer for review no later than 10 working days prior to effective date of the change. The QCP shall be subject to the Governments review and approval. The Government may find the QCP "unacceptable" whenever the Contractors procedures do not accomplish quality control objective(s). The Contractor shall revise the QCP within 10 working days from receipt of notice that QCP is found "unacceptable."

4.6.2 Quality Assurance Surveillance Plan (QASP)

The Government shall monitor the Contractors performance under this contract in accordance with the Governments QASP. The Government reserves the right to utilize other methods, as necessary, to assure the Contractor's compliance with the terms and conditions of this contract. The Government may inspect services provided by the Contractor both during and/or after performance is complete. If the Government identifies any performance deficiency, the Contractor will be advised of the deficiency as soon as possible. All such notifications will be confirmed in writing with the Contractor by the Government. Such notification will be made only to the Contractor or his/her designated onsite superintendent and not to any other agents, employees, or subcontractors. Upon receipt of such notification, the Contractor shall correct the deficiency within the time specified by the COR. However, in the event that the deficiency represents a hazard to health or safety or it serves to jeopardize operational continuity, then corrective action shall proceed immediately and continue uninterrupted until the correction is affected. In all cases, the correction of performance deficiencies shall not in any way adversely affect other contract performance.

5 Deliverables The contractor shall provide deliverables as described in subsequent task orders. Deliverables shall be specified by the government. Format and delivery schedule for deliverables shall be outlined in CDRLs and/or other means TBD at the task order level. Deliverables will typically fall within the listing below and be specified in individual task orders.

Identifier Name Description A001 Task Completion A002 Daily Report A003 Monthly Report A004 Status Report A005 Technical Report A006 Incident Report

A007 Trouble Ticket Report A008 Dashboard Report A009 Repository

6 Related Documents The following Documents are related to this project: NA

Performance Requirement Summary (PRS)

Statements Standards/AQLs Methods of Surveillance

Incentive/ Disincentive

3.1 Cybersecurity

3.1.1 The Contractor shall

perform activities relative to the ERDC RDE Cybersecurity.

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

Periodic Inspections

Performance Rating according to Rating Criteria in Table 1.

3.1.2 The Contractor shall

provide Monthly Report of activities conducted relative to the ERDC Agent of Certification Authority Cybersecurity.

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

Inspections

Performance

Statements Standards/AQLs Methods of

Surveillance Incentive/Remedy

3.2 Network

Management

3.2.1 The Contractor shall

perform activities relative to ERDC Network Management.

a) STD: Accurate

AQL: 98%

b) STD: Identifies deficiencies

AQL: 98%

c) STD: Identifies corrective actions, when applicable

AQL: 98%

d) STD: Deliverables are made in accordance with schedule

AQL: 98%

Inspection/Customer Complaints

Performance

Statements Standards/AQLs Incentive/Remedy

3.3 Computing

Services

3.3.1 The Contractor

shall perform activities relative to the Uptime and Availability of Electronic mail (Email) system

a) STD: Accurate

AQL: 98%

b) STD: Identifies deficiencies

AQL: 98%

c) STD: Identifies corrective actions, when applicable

AQL: 98%

d) STD: Deliverables are made in accordance with schedule

AQL: 98%

Criteria in Table 1.

3.3.2 The Contractor

shall perform activities relative to the Research and Development Environment (RDE) Backup and Storage Management

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c)…