A07.23_W912HZ-16-R-0034-0004.pdf

W912HZ-16-R-0034

AMENDMENT OF SOLICITATION/MODIFICATION OF CONTRACT

Except as provided herein, all terms and conditions of the document referenced in Item 9A or 10A, as heretofore changed, remains unchanged and in full force and effect.

15A. NAME AND TITLE OF SIGNER (Type or print)

30-105-04EXCEPTION TO SF 30

APPROVED BY OIRM 11-84

STANDARD FORM 30 (Rev. 10-83) Prescribed by GSA

FAR (48 CFR) 53.243

Provide a Question and Answ er and revise the PWS and Section L.

1. CONTRACT ID CODE PAGE OF PAGES

S 1 48

16A. NAME AND TITLE OF CONTRACTING OFFICER (Type or print)

16C. DATE SIGNED

BY 24-Oct-2016

16B. UNITED STATES OF AMERICA15C. DATE SIGNED15B. CONTRACTOR/OFFEROR

(Signature of Contracting Officer)(Signature of person authorized to sign)

8. NAME AND ADDRESS OF CONTRACTOR (No., Street, County, State and Zip Code) X W912HZ-16-R-0034

X 9B. DATED (SEE ITEM 11)

30-Sep-2016

10B. DATED (SEE ITEM 13)

9A. AMENDMENT OF SOLICITATION NO.

11. THIS ITEM ONLY APPLIES TO AMENDMENTS OF SOLICITATIONS

X The above numbered solicitation is amended as set forth in Item 14. The hour and date specified for receipt of Offer is extended, X is not extended.

Offer must acknowledge receipt of this amendment prior to the hour and date specified in the solicitation or as amended by one of the following methods:

(a) By completing Items 8 and 15, and returning 1 copies of the amendment; (b) By acknowledging receipt of this amendment on each copy of the offer submitted;

or (c) By separate letter or telegram which includes a reference to the solicitation and amendment numbers. FAILURE OF YOUR ACKNOWLEDGMENT TO BE RECEIVED AT THE PLACE DESIGNATED FOR THE RECEIPT OF OFFERS PRIOR TO THE HOUR AND DATE SPECIFIED MAY RESULT IN

REJECTION OF YOUR OFFER. If by virtue of this amendment you desire to change an offer already submitted, such change may be made by telegram or letter, provided each telegram or letter makes reference to the solicitation and this amendment, and is received prior to the opening hour and date specified.

12. ACCOUNTING AND APPROPRIATION DATA (If required)

13. THIS ITEM APPLIES ONLY TO MODIFICATIONS OF CONTRACTS/ORDERS.

IT MODIFIES THE CONTRACT/ORDER NO. AS DESCRIBED IN ITEM 14.

A. THIS CHANGE ORDER IS ISSUED PURSUANT TO: (Specify authority) THE CHANGES SET FORTH IN ITEM 14 ARE MADE IN THE

CONTRACT ORDER NO. IN ITEM 10A.

B. THE ABOVE NUMBERED CONTRACT/ORDER IS MODIFIED TO REFLECT THE ADMINISTRATIVE CHANGES (such as changes in paying office, appropriation date, etc.) SET FORTH IN ITEM 14, PURSUANT TO THE AUTHORITY OF FAR 43.103(B).

C. THIS SUPPLEMENTAL AGREEMENT IS ENTERED INTO PURSUANT TO AUTHORITY OF:

D. OTHER (Specify type of modification and authority)

E. IMPORTANT: Contractor is not, is required to sign this document and return copies to the issuing office.

14. DESCRIPTION OF AMENDMENT/MODIFICATION (Organized by UCF section headings, including solicitation/contract subject matter where feasible.)

10A. MOD. OF CONTRACT/ORDER NO.

2. AMENDMENT/MODIFICATION NO. 5. PROJECT NO.(If applicable)

6. ISSUED BY

3. EFFECTIVE DATE

24-Oct-2016

CODE

ERDC CONTRACTING OFFICE

3909 HALLS FERRY ROAD

VICKSBURG MS 39180-6199

W912HZ 7. ADMINISTERED BY (If other than item 6)

4. REQUISITION/PURCHASE REQ. NO.

CODE

See Item 6

FACILITY CODECODE

EMAIL:TEL:

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 30 - BLOCK 14 CONTINUATION PAGE

The following have been modified:

QUESTION AND ANSWERS

The following questions and answers are provided for informational purposes only:

Question 1: Can you tell me if these services are currently being performed by a contractor? If so, could you please provide the incumbent name as well as the contract number?

Answer: This requirement has been satisfied through the use of Indefinite Delivery Indefinite Quantity (IDIQ) contract W912HZ-15-D-0007 ($9,900,000.00, SES Partners, LLC).

Question 2: Who is the incumbent on the above referenced pre-solicitation?

Answer: Please see question 1.

Question 3: Does the Combined Synopsis/Solicitation under solicitation number W912HZ16R0034 contain requirements similar to a current contract? If possible, please provide the current contract number. Or, is this a new requirement for the government?

Answer: Please see question 1.

Question 4: We don’t have Top Secret Facility Clearance. Can you waive this requirement for us and us one of our Teaming Partners Top Secret Facility Clearance to conduct this project?

Answer: No.

Question 5: According to the SBA rule, in order for a JV to claim past performance and experiences, it must be SBA approved JV prior proposal submission. Could you please confirm?

Answer: Yes.

Question 6: Would the government please confirm the offeror is required to have a Top Secret Facility Clearance (FCL), prior to proposal submission?

Answer: Yes.

Question 7: Please clarify whether the facility clearance (FCL) is required for the 8A set aside program?

Answer: Yes, it is required.

Question 8: Will the Government sponsor the prime contractor in obtaining the FLC after contract award?

Answer: No. Please see revised PWS.

Question 9: May we hand-deliver the proposal? If so, to what address?

Answer: Yes.

Engineer Research and Development Center (ERDC) Contracting Office, Building 1003 ATTN: Allison Hudson 3909 Halls Ferry Road Vicksburg, MS 39180

Question 10: Should the time the proposal is due be 12:00PM vs. 12:00AM?

Answer: Please see Amendment 0001.

Question 11: Is the SF33 included in the RFP to be used instead of the SF1449 as stated in RFP Section 3.10?

Answer: Please see Amendment 0004.

Question 12: Is there a preferred format for the Sample Task Order Pricing?

Answer: It is up to the vendor on how to propose the sample task order.

Question 13: Are the cover page, table of contents, introduction, and resumes excluded from the page limit?

Answer: Please see Amendment 0004.

Question 14: If our references choose to submit the PPQ directly to the Govt. may we include the first page of the PPQ in Volume IV as a placeholder for the completed PPQ?

Answer: Yes. Please see section L, paragraph 3.9.

Question 15: Will the Govt. extend the proposal due date by one week (to 11/8/2016) to allow offerors to incorporate answers to questions that are due 5 days before the proposal due date (which is 11/27/2016) because any answers will be provided very close to the proposal due date?

Answer: No. Please see Amendment 0004.

SECTION C - DESCRIPTIONS AND SPECIFICATIONS

PERFORMANCE WORK STATEMENT

Performance Work Statement (PWS) OCIO Service Contract

06/28/2016

1 Introduction

1.1 Mission

1.2 Background

1.3 Scope

2 General Requirements

2.1 Non‐Personal Services

2.2 Business Relations

2.3 Contract Administration and Management

2.3.1 Contract Management

2.3.2 Contract Administration

2.3.3 Personnel Administration

2.4 Subcontract Management

2.5 Contractor Personnel, Disciplines, and Specialties

2.6 Location and Hours of Work

2.7 Travel

2.8 Veterans Employment Emphasis for U.S. Army Corps of Engineers Contracts

3 Performance Requirements

3.1 Cybersecurity

3.2 Network Management

3.4 Configuration Management

4 Special Requirements

4.1 Security and Safety

4.2 Response/Resolution Time

4.2 Transition

4.3 Government Furnished Materials

4.4 Environmental Requirements

4.5 Applicable Directives

4.6 Quality

4.6.1 Quality Control

4.6.2 Quality Assurance Surveillance Plan (QASP)

5 Deliverables

6 Related Documents

Performance Work Statement (PWS)

ERDC Office of the Chief Information Officer (OCIO) Service Contract

1 Introduction

The U. S. Army Corps of Engineers (USACE) Engineer Research and Development Center (ERDC) has responsibility for investigating, developing and maintaining the nation's water and related environmental resources; constructing and operating projects for navigation, flood control, major drainage, shore and beach restoration and protection, related hydro power development, water supply, water quality control, fish and wildlife conservation and enhancement, and outdoor recreation; responding to emergency relief activities directed by other federal agencies; and administering laws for the protection and preservation of navigable waters, emergency flood control and shore protection.

1.1 Mission

The U.S. Army Corps of Engineers' (USACE) Engineer Research and Development Center (ERDC) helps solve our Nation’s most challenging problems in civil and military engineering, geospatial sciences, water resources, and environmental sciences for the Army, Department of Defense, civilian agencies, and our Nation’s public good.

1.2 Background

The ERDC Information Technology Laboratory (ITL) is responsible for building, staffing and maintaining the computer communications network in support of the Research &Development activities of ERDC. The ERDC Office of the Chief Information Officer (OCIO) provides advanced Scientific and Technology-centric computing environments supporting the broad Information Technology needs of ERDC researchers to include support of non-standard platforms, Testing & Evaluation (T&E), evaluating commercial off-the-shelf software, and T&E seamless connectivity to high performance computing and ability to adapt to changing technologies. The Government established functional service areas of operations: Computing Services, Configuration Management, CyberSecurity, and Network Services. The Research and Development Environment (RDE) is a wide variety of computational and network resources designed to support the ERDC researcher. Resources may include desktop workstations, laptop computers, departmental file and application servers, computer clusters, storage appliances or storage area network (SAN)s, leading edge technology devices, virtual server/desktop environments, sensors arrays, World Wide Web technologies, physical process models, network equipment, and cybersecurity. The Cloud Computing Environment (CCE) is the Research and Development (R&D) computing backbone serving virtualized IT to the ERDC researcher R&D mission requirements. The CCE provides ERDC scientists and engineers with capabilities to rapidly deploy unique computing environments (servers, operating systems, storage, database, and systems analyst support) and high bandwidth access to supercomputer resources. The network is operational 24 hours a day, seven days a week, 365 days a year (24x7x365). ERDC consist of seven laboratories at four main geographical sites located in Champaign, IL; Hanover, NH;

Alexandria, VA; and Vicksburg, MS. The estimated number of managed network devices at all sites is 400. The estimated current number of operating system platforms at each location is provided below in Table 1.

Location Windows Unix/Linux Apple/Mac Vicksburg, MS 1520 189 513 Hanover, NH 198 17 64 Champaign, IL 150 61 14 Alexandria, VA 150 32 12

Government Directed Actions (GDAs) may only be issued by the ERDC OCIO or Deputy OCIO through the Program Contracting Office. GDAs are defined as operational direction from the Government to the Contractor(s) to provide specific direction or amplification to an existing approved solution.

The Government requires the ability to direct the Contractor's work in certain areas related to security and daily operations. In particular, the COR may direct the Contractors to implement Information Assurance Vulnerability Advisories (IAVAs), Information Assurance Vulnerability Bulletins (IAVBs), CTOs, without obtaining prior approval from the PCO, but may not change the terms and conditions of the contract, including price, schedule or deliveries.

Operational direction involves specifying situation dependent actions, which must be taken immediately, or on short notice, within the existing technical capabilities of the network and accompanying systems. Operational direction is given when time is critical and delay or inaction may adversely affect mission accomplishment, threaten the safety of personnel, cause damage or destruction of Government property, or the loss or compromise of sensitive information.

1.3 Scope

The ERDC OCIO requires computer facilities management services for its mission-critical activities.

The Government will retain key services as identified above in Background, which encompass the overall IT strategy and design related to functional service areas. The Government will also retain authority for all demand management, governance, and approval functions associated with contractors. Management of the contract will be carried out by the Contracting Officer (KO) and Contracting Officer’s Representative

(COR).

The contractor shall provide all personnel, supervision, and services necessary to provide services and related activities for the ERDC OCIO as defined herein and in task order Performance Work Statements (PWS). This will be an indefinite delivery indefinite quantity (IDIQ) contract. The scope is defined as general requirements as outlined below in terms of areas of responsibility or operational mission. Specific requirements will be detailed in individual task orders issued throughout the term of the contract.

The contractor shall perform services related to the following service areas: Computing Services, Configuration Management, CyberSecurity, and Network Services.

2 General Requirements

This section describes the general requirements the contractor needs to accomplish.

The following sub-sections provide details of various considerations on this effort.

2.1 Non‐Personal Services

The Government shall neither supervise contractor employees nor control the method by which the contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual contractor employees. It shall be the responsibility of the contractor to manage its employees and to guard against any actions that are of the nature of personal services, or give the perception of personal services. If the contractor believes that any actions constitute, or are perceived to constitute personal services, it shall be the contractor's responsibility to notify the Procuring Contracting Officer (PCO) immediately.

2.2 Business Relations

The contractor shall successfully integrate and coordinate all activity needed to execute the requirement. The contractor shall manage the timeliness, completeness, and quality of problem identification. The contractor shall provide corrective action plans, proposal submittals, timely identification and remediation of issues, and effective management of subcontractors. The contractor shall seek to ensure customer satisfaction and professional and ethical behavior of all contractor personnel.

2.3 Contract Administration and Management

The following subsections specify requirements for contract, management, and personnel administration.

2.3.1 Contract Management

The contractor shall establish clear organizational lines of authority and responsibility to ensure effective management of the resources assigned to the requirement. When operating onsite, the contractor shall maintain continuity between ongoing activities at Vicksburg, MS, Alexandria, VA, Champaign, IL, and Hanover, NH and the contractor's corporate offices.

2.3.2 Contract Administration

The contractor shall establish processes and assign appropriate resources to effectively administer the requirement. The contractor shall respond to Government requests for contractual actions in a timely fashion. The contractor shall have a single point of contact onsite in Vicksburg, MS between the Government and Contractor personnel assigned to support daily operations under executed task orders. The contractor shall assign work effort and maintain proper and accurate timekeeping records of personnel assigned to work on the requirement.

2.3.3 Personnel Administration

The Contractor(s) shall provide experienced and qualified personnel with all the skills necessary to perform the work identified. Some Contractor(s) personnel must have and maintain certain valid Licenses and Certifications to perform the work and will be identified at the task order level. Various required training, qualifications, licenses, security clearances, or certifications must be obtained prior to commencement of work at Contractor(s) expense. Contractor(s) employees required to perform tasks must meet certification requirements as defined in Army and DoD Regulations. All contractor personnel shall be able to read, write, speak, and understand English, shall possess good written and verbal communications skills, and shall have sufficient knowledge of proper English grammar, spelling, capitalization, and punctuation rules to identify errors and make corrections.

The contractor shall provide the following management and support as required. The contractor shall provide for employees during designated Government non-work days or other periods where Government offices are closed due to weather or security conditions. The contractor shall maintain the currency of their employees by providing initial and refresher training as required to meet the PWS requirements. The contractor shall make necessary travel arrangements for employees. The contractor shall provide necessary infrastructure for services performed at the contractor's site(s).The contractor shall provide administrative support to employees in a timely fashion (time keeping, leave processing, pay, emergency needs).

2.4 Subcontract Management

The contractor shall be responsible for any subcontract management necessary to integrate work performed on this requirement and shall be responsible and accountable for subcontractor performance on this requirement. The prime contractor will manage work distribution to ensure there are no Organizational Conflict of Interest (OCI) considerations. Contractors may add subcontractors to their team after notification to the Procuring Contracting Officer (PCO) or Contracting Officer Representative (COR).

Cross teaming may or may not be permitted.

2.5 Contractor Personnel, Disciplines, and Specialties

The contractor shall accomplish the assigned work by employing and utilizing qualified personnel with appropriate combinations of education, training, and experience. The contractor shall match personnel skills to the work or task with a minimum of under/over employment of resources. The contractor shall ensure the labor categories as defined in the Labor Categories document utilized in the performance of each Task Order issued hereunder will be the minimum necessary to accomplish the task. The Contractor shall provide the necessary resources and infrastructure to manage, perform, and administer the contract.

2.5.1 Contractor Employee Conduct

The contractors employees shall observe and comply with all applicable departmental and agency regulations, policies, and procedures (e.g., fire, safety, sanitation, environmental protection, security, etc.). The contractor shall ensure that all contractor employees represent a professional appearance at all times, and that their conduct does not reflect discredit on the United States Government.

When contractor employees are working on Government facilities or participating at Government meetings, they shall wear identification badges distinguishing themselves as such. The badges at a minimum must have the employee name and word "contractor” displayed. Ideally, the company name will appear on the badge.

Additionally, not withstanding any other provisions in the PWS, the contractor shall identify themselves as a contractor in meetings, telephone conversations, all written communications and work situations so that their actions cannot be construed as acts of a Government official. The contractor shall take no actions that bind the government to a final decision or results in the exercise of governmental discretion.

2.5.2 Removal of Contractor Employees for Misconduct or Security Reasons The Government may, at its sole discretion, direct the contractor to remove any contractor employee from Government facilities for misconduct or security reasons.

Such removal does not relieve the contractor of the responsibility to provide sufficient qualified personnel for adequate and timely service. The Contracting Officer will provide the contractor with an immediate rationale for removal of contractor employee.

Conflict of Interest. Neither the contractor nor its on-site employees shall utilize their knowledge of access to information, sensitive or otherwise, for individual or company gain.

2.6 Location and Hours of Work

The headquarters site of the U.S. Army Corps of Engineers, ERDC is 3909 Halls Ferry Road, Vicksburg, MS 39180-6199. ERDC satellite laboratory sites are located in Alexandria, VA, Champaign, IL, Hanover, NH, and other Government facilities.

Core Working Hours. Government core working hours are from 0700 to 1730 local time Monday through Friday except US Federal Holidays. Government workers typically work eight (8) hours per day, 40 hours per week.

Government Facility Closure. In case of government facility closure as directed by the government, contractor employees shall be excused from work at no cost to the government.

2.7 Travel

Travel to other government facilities or other contractor facilities may be required and will be specified in the PWS. All travel requirements (including plans, agenda, itinerary, or dates) shall be pre-approved by the government (subject to local policy procedures), and is on a strictly cost reimbursable basis. Costs for travel shall be billed in accordance with the regulatory implementation of Public Law 99-234 and FAR 31.205-46 Travel Costs (subject to local policy and procedures; may reference FAR).

2.8 Veterans Employment Emphasis for U.S. Army Corps of Engineers Contracts

In addition to complying with the requirements outlined in FAR Part 22.13, FAR Provision 52.222-38, FAR Clause 52.222-35, FAR Clause 52.222-37, DFARS 222.13 and Department of Labor regulations, U.S. Army Corps of Engineers (USACE) contractors and subcontractors at all tiers are encouraged to promote the training and employment of U.S. veterans while performing under a USACE contract. While no set-aside, evaluation preference, or incentive applies to the solicitation or performance under the resultant contract, USACE contractors are encouraged to seek out highly qualified veterans to perform services under this contract. The following resources are available to assist USACE contractors in their outreach efforts:

Federal Veteran employment information at http://www.fedshirevets.gov/index.aspx Department of Labor Veterans Employment Assistance http://www.dol.gov/vets/ Department of Veterans Affairs–VOW to Hire Heros Act http://benefits.va.gov/vow/ Army Wounded Warrior Program – http://wtc.army.mil/modules/employers/index.html U.S. Chamber of Commerce Foundation–Hiring Our Heros http://www.hiringourheroes.org/ Guide to Hiring Veterans – Reference Material http://www.whitehouse.gov/sites/default/files/docs/white_house_business_council_- _guide_to_hiring_veterans_0.pdf

3 Performance Requirements

The following section specifies the Performance Objectives and Performance Elements for the contract.

3.1 Cybersecurity

3.1.1 The Contractor shall perform activities relative to the ERDC RDE Cybersecurity.

This consists of vulnerability scanning of assets and remediation, Host Based Security System (HBSS) configuration and management, incident response and forensics, training and certification compliance tracking, secure configuration management, identity and access management services, network access control or comply to connect methods, audit log review, web content filtering, and Risk Management Framework (RMF) documentation and process for the certification of the RDE.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

e) STD: Responsive

AQL: 95%

3.2 Network Management

3.2.1 The Contractor shall perform activities relative to ERDC Network Management.

The Contractor shall perform activities relative to ERDC Network Management.

Management of ERDC's RDE network resources, providing services for wired and wireless Local Area Network (LAN) and Wide Area Network (WAN), demilitarized zone (DMZ), virtual private networks (VPN), Voice Over Internet Protocol telephone systems (VOIP), firewalls, switches, routers, network access control (NAC), domain name services (DNS), dynamic host control protocol (DHCP), IP addressing, network dashboard operations including but not limited to configuration, availability monitoring, customer support, design, implementation, audit logging, and maintenance. This requires troubleshooting and problem resolution of network operation interruptions.

Support connectivity to other networks utilized by ERDC such as the Army NIPRNET and the Mississippi Optical Network (MissiON).

The Contractor shall update and maintain LAN/WAN topology statistics and documentation detailing cabling, numbers of nodes, numbers and types of communication devices, etc., on the LAN/WAN. The topology statistics and documentation shall be updated with each network change. The LAN/WAN topology documentation shall show the location of all communications devices such as bridges, routers, gateways, etc., used to support the LAN infrastructure and shall show the communications connections to the WAN. The Contractor shall audit all LAN nodes and segments to ensure the current LAN topology documentation is accurate.

Major performance objectives include: Network Uptime and Availability, Enterprise and Laboratory Network Management, Audio Visual Support Management, and Incident Response and Resolution.

Performance Standards

a) STD: Accurate

AQL: 98%

b) STD: Identifies deficiencies

AQL: 98%

c) STD: Identifies corrective actions, when applicable

AQL: 98%

d) STD: Deliverables are made in accordance with schedule

AQL: 98%

e) STD: Responsive

AQL: 98%

3.3 Computing Services

Corporate computing resource operations including but not limited to desktop and virtual workstations, laptop computers, file servers, virtual servers, computer clusters, storage appliances or storage area networks, leading edge technology devices, tablets, cellular phones, sensors and sensor arrays of various types, etc., used in supporting software code development for hardware and software technologies, World Wide Web technologies, and R&D network protocols.

Operate, implement, and maintain the ERDC Research and Development Environment corporate computing systems. Major performance objectives include the uptime and availability of corporate enterprise management services: Email, Backup, Restoration, and Storage Management, Active Directory Services (ADS), Corporate Computing Systems Patch Management, Apple Corporate Management, UNIX / Linux Corporate Management, Windows Corporate Management, Baseline Computing Systems Image Management, Test and Evaluation Management, Mobile Device Management, Database Management, Corporate Desktop Support, and cloud services to include Virtualization Management for servers, desktop, and storage.

3.3.1 The Contractor shall perform activities relative to the Uptime and Availability of Electronic mail (Email) system.

Provide a fully operational system. Provide software and hardware maintenance services to include troubleshooting and problem resolution for the ERDC Research and Development Environment (RDE) Microsoft Exchange Electronic mail system, antispam and malware protection, monitoring, in accordance to DoDI 8520.02 Public Key Infrastructure and Public Key Enabling May 24, 2011.

Performance Standards

a) STD: Accurate

AQL: 98%

b) STD: Identifies deficiencies

AQL: 98%

c) STD: Identifies corrective actions, when applicable

AQL: 98%

d) STD: Deliverables are made in accordance with schedule

AQL: 98%

e) STD: Responsive

AQL: 98%

3.3.2 The Contractor shall perform activities relative to Backup and Storage Management.

Provide operational services to include troubleshooting, problem resolution, and monitoring for corporate enterprise systems, and related projects.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

e) STD: Responsive

AQL: 95%

3.3.3 The Contractor shall perform activities relative to Active Directory (AD) Services.

Provide daily operational management of the ERDC Active Directory Domain Services to include group policy management and development, site replication, data integrity, Dynamic DNS, ADS Servers, Forests, Domain trees, naming contexts and directory partitions, object names and identities, containers and leaves, groups, and object attributes.

Major performance objectives include: creation of new user, resource and AD object accounts, management, maintenance, and troubleshooting of user, resource accounts and AD objects, and problem resolution.

Performance Standards

a) STD: Accurate

AQL: 98%

b) STD: Identifies deficiencies

AQL: 98%

c) STD: Identifies corrective actions, when applicable

AQL: 98%

d) STD: Deliverables are made in accordance with schedule

AQL: 98%

e) STD: Responsive

AQL: 98%

3.3.4 The Contractor shall perform activities relative to Corporate Computing Systems Patch Management.

Provide operational computing system patch management for ERDC computing systems. Provide troubleshooting and problem resolution management.

Major performance objectives include patching of computing systems: server, virtual server, desktop, virtual desktop utilizing patches identified as critical and high and Information Assurance Vulnerability Alert (IAVA) using Microsoft Windows Server Update Service, Heat, Casper, Apple, RedHat and other software tools

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.3.5 The Contractor shall perform activities relative to the Corporate Desktop Support.

Provide operational services to include troubleshooting and problem resolution for computer desktops and peripherals.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

e) STD: Responsive

AQL: 95%

3.3.6 The Contractor shall perform activities relative to Mobile Computing.

Provide management of ERDC Mobile Devices. Major performance objectives include:

Operate and support Mobile Device Management system in accordance to OCIO policy and Standard Operating Procedures, and provide asset accountability. Provide troubleshooting, implementation, and problem resolution management.

Major performance objectives include activation and management of new and lost mobile devices, customer survey, and mobile device accountability.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

e) STD: Responsive

AQL: 95%

3.3.7 The Contractor shall perform activities relative to the UNIX / Linux Corporate Management.

Operate, implement, and maintain the ERDC cybersecurity compliance standards for UNIX/Linux corporate computing systems. Provide troubleshooting, implementation, and problem resolution management for UNIX/Linux applications.

Major performance objectives include cybersecurity management of UNIX/Linux computing systems utilizing the VMWare VCenter Compliance management suite, DOD Host Based Security System (HBSS), High Performance Computing Modernization Program (HPCMP), Comprehensive Security Assessment (CSA) Tools, and upload resulting assessments.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.3.8 The Contractor shall perform activities relative to the Baseline Computing Systems Image Management Design, test and evaluate, operate, implement, and maintain the ERDC standard corporate computing operating systems. Provide standard research and development (R&D) operating system images for use by ERDC in accordance with the ERDC OCIO policy standards.

Major performance objectives include design, development, implementation, deployment (e.g., Windows Deployment Service, CASPER, and RedHat) and sustainment of standard R&D operating systems for Microsoft, Apple, and UNIX/Linux systems.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

e) STD: Responsive

AQL: 95%

3.3.9 The Contractor shall perform activities relative to Database and Operations Management Initialize, operate and maintain ERDC corporate databases.

Major performance objectives include design, development, implementation, deployment and sustainment and backup operations for corporate and project initiated database use. Database types may include but are not limited to Microsoft SQL, MySQL, and Oracle.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

e) STD: Responsive

AQL: 95%

3.3.10 The Contractor shall perform activities relative to Virtualization Management to include Server, Desktop, Storage and Cloud Operate, implement, and maintain the ERDC cloud computing systems for local and other federal cloud based computing.

Major performance objectives include design, development, implementation, deployment, sustainment and backup and recovery operations.

Performance Standards

a) STD: Accurate

AQL: 98%

b) STD: Identifies deficiencies

AQL: 98%

c) STD: Identifies corrective actions, when applicable

AQL: 98%

d) STD: Deliverables are made in accordance with schedule

AQL: 98%

e) STD: Responsive

AQL: 98%

3.4 Configuration Management

3.4.1 The Contractor shall perform activities relative to the overall ERDC Configuration Management (CM) Program Management.

Develop, document, install, and implement a CM Program Management System.

Major performance objectives include: prepare, document, categorize, track, and monitor system configuration items for audit in the CMDB.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.4.2 The Contractor shall perform activities relative to the Configuration Management Baseline Establish and maintain the Configuration Management Database (CMDB) to assure all hardware, software, and associated infrastructure is accurately reflected in the CMDB.

Major performance objectives include: maintain Standard Operating Procedures (SOP), and naming conventions, baseline version control, system logging procedures, maintain systems logs, maintain training requirements, license management, design, modify, and sustain Configuration Management Database (CMDB).

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.4.3 The Contractor shall perform activities relative to the Configuration Control Board (CCB).

Develop and submit for Government CCB approval changes in enterprise service or data requests for enterprise computing. This activity will reduce risks and minimize disruption of IT services by ensuring changes are captured, evaluated, authorized, prioritized, planned, tested, and documented prior to implementation.

Major performance objectives include: develop service or change requests, evaluate proposed changes, track the status of changes, and maintain an inventory of system and supporting documents as the system changes.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

3.4.4 The Contractor shall perform activities relative to Configuration Status Accounting.

Provide a process of recording and reporting configuration item descriptions (e.g., hardware, software, firmware, etc.) and all departures from the baseline during design and production. In case of suspected problems, the verification of baseline configuration and approved modifications can be quickly determined.

Major performance objectives include: develop service or change requests, evaluate proposed changes, track the status of changes, and maintain an inventory of system and supporting documents as the system changes

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

e) STD: Responsive

AQL: 95%

3.4.5 The Contractor shall perform activities relative to Configuration Verification and Audit.

An independent review of hardware and software for the purpose of assessing compliance with established performance requirements, commercial and appropriate military standards, and functional, allocated, and product baselines. Configuration audits verify the system and subsystem configuration documentation complies with their functional and physical performance characteristics before acceptance into an architectural baseline.

Performance Standards

a) STD: Accurate

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

AQL: 95%

d) STD: Deliverables are made in accordance with schedule

AQL: 95%

e) STD: Responsive

AQL: 95%

3.5 SCHEDULED/ROUTINE AFTER HOURS SUPPORT.

The Contractor shall provide required LAN/WAN support during network or server outages and downtime, to include scheduled outages and outages related to facilities maintenance and services, during the scheduled After Hours Maintenance Window, from 1800 to 2200 hours. The Contractor shall perform major server, hardware, software and peripheral upgrades that would adversely affect end users if performed during normal duty hours, during this established maintenance window. The Contractor shall perform non-routine maintenance on desktop, laptop and notebook software, including operating system, office automation, and commercial off-the- shelf (COTS), etc. The Contractor shall resolve all conflicts and performance problems at this time.

The Contractor shall support major desktop roll-outs (large number of users or long periods of time) where end users would be adversely affected by duty-hour LAN outages. The Contractor shall record and update system profiles, security permissions, trustee information and similar system operating information that would adversely disrupt end users if performed during regular duty hours. The Contractor shall perform any and all Systems Administration duties (add/delete users, maintain passwords, access control, etc.) that would adversely disrupt end users if performed during regular duty hours.

Performance Standards

AQL: 95%

b) STD: Identifies deficiencies

AQL: 95%

c) STD: Identifies corrective actions, when applicable

d) STD: Deliverables are made in accordance with schedule

4 Special Requirements

This section describes the special requirements for this effort. The following sub-sections provide details of various considerations on this effort.

4.1 Security and Safety

4.1.1 At. Level 1 Training: All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities, controlled access areas, or require network access, shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. Upon request, the contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at the following website: http://jko.jten.mil/courses/atl1/launch.html; or it can be provided by the RA ATO in presentation form which will be documented via memorandum.

4.1.2 Access and General Protection/Security Policy and Procedures: All contractor and all associated sub-contractors employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation/facility access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any installation or facility change, the Government may require changes in contractor security matters or processes.

4.1.3 For Contractors requiring Common Access Card (CAC): The contractor and all sub-contractors employees will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely;

(2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an interim CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

4.1.4 For contractors who do not require CAC, but require access to a DoD facility or installation: Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05 / AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative, as NCIC and TSDB are available), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

4.1.5 Suspicious Activity Reporting Training: The contractor and all associated sub-contractors shall receive a brief/training (provided by the RA) on the local suspicious activity reporting program. This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the project manager, security representative or law enforcement entity. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT 5 calendar days after the completion of the training.

4.1.6 Contractor Employees Who require Access to Government Information System: All contractor employees with access to a government info system must be registered in the Army Training Certification Tracking System (ATCTS) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the information systems and then annually thereafter in accordance with personnel security standards listed in AR 25-2 (Information Assurance), an appropriate background investigation will be conducted prior to accessing the government information systems.

4.1.7 For Contracts that Require an OPSEC Standing Operating Procedure/Plan:

The Contractor shall develop an OPSEC SOP/Plan within 90 days of contract award.

The OPSEC SOP/Plan must be reviewed and approved by the RA OPSEC Officer. The SOP/Plan will include the government's critical information, why it needs to be protected, where it is located, who is responsible for it and how to protect it. In addition, the contractor shall identify an individual who will be an OPSEC Coordinator.

4.1.8 For Contracts that Require OPSEC Training: All new contractor employees will complete Level I OPSEC Training within 30 calendar days of their reporting for duty.

Additionally, all contractor employees must complete annual OPSEC awareness training. The contractor shall submit certificates of completion for each affected contractor and subcontractor employee, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training. OPSEC awareness training is available at the following websites: https://www.iad.gov/ioss/ or http://www.cdse.edu/catalog/operations-security.html; or it can be provided by the RA OPSEC Officer in presentation form which will be documented via memorandum.

4.1.9 For Information assurance (IA)/information technology (IT) training: All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter.

All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2 within six months of employment.

4.1.10 For information assurance (IA)/information technology (IT) certification: All contractor employees supporting IA/IT functions shall be appropriately certified upon contract IAW DoD 8570.01-M, DFARS 252.239-7001 and AR 25-2. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award.

4.1.11 For Contracts that require handling or access to classified information:

Contractor shall comply with AR 380-67 (Personnel Security Program) and Homeland Security Presidential Directive 12 (Policy for a Common Identification Standard for Federal Employees and Contractors) as well as FAR 52.204-2, Security Requirements.

Additionally, Contractors must comply with - (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); any revisions to DOD 5220.22- M, notice of which has been furnished to the contractor. For classified contracts, the DD Form 254 will be attached with the contract.

4.1.12 Will be escorted in areas where they may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas: All contract employees, including subcontractor employees who are not in possession of the appropriate security clearance or access privileges, will be escorted in areas where they may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas.

4.1.13 Contractor company to obtain a facility clearance and individual clearances at the appropriate level: The Prime Contractor Company must have a Facility Clearance (FCL) at the appropriate level (IAW the NISPOM DOD 5220.22-M and AR 380-49) prior to the start of the contract awarded period of performance. Contractor personnel performing work under this contract must have the required security clearance, per AR 380-67, at the appropriate level at the start of the period of performance. Security Clearances and FCL requirements are required to be maintained for the life of the contract IAW the DD Form 254 attached to the contract.

4.1.14 Threat awareness reporting program: All new contractor employees will complete annual Threat Awareness and Reporting Program (TARP) Training provided by a Counterintelligence Agent, IAW AR 381-12. The contractor shall submit certificates of completion for each affected contractor and subcontractor employee(s) or a memorandum for the record, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training. Authorized webbased

TARP training for CAC card holders is available at the following website:

https://www.us.army.mil/suite/page/655474

The Prime Contractor Company must have (or will have) a Facility Clearance (FCL) at the appropriate level (IAW the NISPOM DOD 5220.22-M and AR 380-49) prior to the start of the contract awarded period of performance. Contractor personnel performing work under this contract must have the required security clearance, per AR 380-67, at the appropriate level at the start of the period of performance. Security Clearances and FCL requirements are required to be maintained for the life of the contract IAW the DD254 attached to the contract.

DD Forms 254: Overarching security requirements and Contractor access to classified information shall be as specified in the basic DD Form 254, which will be further identified in the DD Form 254 for each TO, as required. All contractor personnel with access to unclassified information systems, including e-mail, shall have at a minimum a favorable National Agency Check (NAC).

Visitor Group Security Agreement. The contractor shall sign a Contractor Visitor Group Security Agreement to protect classified information involved in performance under this contract or Task Order. The Agreement will outline responsibilities in the following areas: Contractor security supervision; Standard Practice Procedures; access, accountability, storage, and transmission of classified material; marking requirements;

security education; personnel security clearances; reports; security checks; security guidance; emergency protection; protection of government resources; DD Forms 254;

periodic security reviews; and other responsibilities, as required.

4.2 Response/Resolution Time

The contractor shall follow the…