A07.23_Attachment_B_-_Sample_Task_Order_PWS.pdf

Performance Work Statement (PWS) Sample Task order

1 Introduction The Department of Defense (DoD) High Performance Computing Modernization Program (HPCMP) is a joint program that serves the Research, Development, Test, and Evaluation (RDT&E) community of the Department of Defense. The HPCMP is managed on behalf of the Department of Defense by the US Army Engineer Research and Development Center (ERDC). The HPCMP is a technology-led, innovation-focused program committed to extending high performance computing to address the DOD’s most significant challenges in the Science & Technology and Test & Evaluation (S&T and T&E) communities and in acquisition programs for new and modified defense systems in a timely fashion.

HPCMP accomplishes its mission through a technology-led, innovation-focused program committed to extending high performance computing (HPC) to address the Department of Defence’s (DoD’s) most significant challenges: 1) high performance computing shared resource centers in research, where HPC enables DoD to explore new theories and evaluate them well beyond what is practical using experiment alone; 2) in acquisition of national research and engineering network, through the use of validated applications in design and testing, which significantly reduce the time and cost of developing weapon systems, and improve the quality of their designs; 3) and in DoD-leading software applications operations, where real-time calculations produce just-in-time information for decision makers on the battlefield. In addition, the program has extensive activities in user requirements analysis, utilization and other system performance metrics analysis, business management support, congressional liaison, outreach, oversight, and security. Execution of the program includes development and implementation of plans developed for all program initiatives and activities.

High performance computing amplifies the creativity, productivity, and impact of the DoD Research, Development, Test and Evaluation (RDT&E) community by giving them access to insight about the physical world, and human actions within it, that would otherwise be too costly, too dangerous, or too time-intensive to obtain through observation and experiment alone.

1.1 Mission

The mission of the Department of Defense (DoD) High Performance Computing Modernization Program (HPCMP) is to accelerate technology development and transition into superior defense capabilities through the strategic application of high performance computing, networking and computational expertise.

1.2 Scope

The purpose of this task order is to provide the DoD High Performance Computing Modernization Program (HPCMP) with Cybersecurity advisory support. This includes support in the areas of the DoD Risk Management Framework (RMF), and in specialized High Performance Computing policies and procedures. A multitude of HPCMP customer sites have experience in using the RMF process for accreditation. The services sought by this SOW will further strengthen the delivery of this requirement by including additional cybersecurity related services to maintain RMF accreditation and establish Configuration Control Board (CCB) policies across the HPCMP program and Enterprise System Management (ESM) Systems as required.

The HPCMP Security area applies security intelligently to ensure proactive protection while promoting a productive environment for the RDT&E community. It provides policy and guidance, performs cyber defense activities, and evaluates emerging technologies for managing secure authentication and other security tools.

2 General Requirements This section describes the general requirements the contractor needs to accomplish. The following sub-sections provide details of various considerations on this effort.

2.1 Non-Personal Services

The Government shall neither supervise contractor employees nor control the method by which the contractor performs the required tasks. Under no circumstances shall the Government assign tasks to, or prepare work schedules for, individual contractor employees. It shall be the responsibility of the contractor to manage its employees and to guard against any actions that are of the nature of personal services, or give the perception of personal services. If the contractor believes that any actions constitute, or are perceived to constitute personal services, it shall be the contractor's responsibility to notify the Procuring Contracting Officer (PCO) immediately.

2.2 Business Relations

The contractor shall successfully integrate and coordinate all activity needed to execute the requirement. The contractor shall manage the timeliness, completeness, and quality of problem identification. The contractor shall provide corrective action plans, proposal submittals, timely identification and remediation of issues, and effective management of subcontractors. The contractor shall seek to ensure customer satisfaction and professional and ethical behavior of all contractor personnel.

2.3 Contract Administration and Management

The following subsections specify requirements for contract, management, and personnel administration.

2.3.1 Contract Management

The contractor shall establish clear organizational lines of authority and responsibility to ensure effective management of the resources assigned to the requirement. When operating onsite, the contractor shall maintain continuity between ongoing activities at Vicksburg, MS, Alexandria, VA, and the contractor's corporate offices.

2.3.2 Contract Administration

The contractor shall establish processes and assign appropriate resources to effectively administer the requirement.

The contractor shall respond to Government requests for contractual actions in a timely fashion. The contractor shall have a single point of contact between the Government and Contractor personnel assigned to support operations under executed this task order. The contractor shall assign work effort and maintain proper and accurate timekeeping records of personnel assigned to work on the requirement.

2.3.3 Personnel Administration

The Contractor(s) shall provide experienced and qualified personnel with all the skills necessary to perform the work identified. Some Contractor(s) personnel must have and maintain certain valid Licenses and Certifications to perform the work. Various required training, qualifications, licenses, security clearances, or certifications must be obtained prior to commencement of work at Contractor(s) expense. Contractor(s) employees required to perform tasks must meet certification requirements as defined in Army and DoD Regulations. All contractor personnel shall be able to read, write, speak, and understand English, shall possess good written and verbal communications skills, and shall have sufficient knowledge of proper English grammar, spelling, capitalization, and punctuation rules to identify errors and make corrections.

The contractor shall provide the following management and support as required. The contractor shall provide for employees during designated Government non-work days or other periods where Government offices are closed due to weather or security conditions. The contractor shall maintain the currency of their employees by providing initial and refresher training as required to meet the PWS requirements. The contractor shall make necessary travel arrangements for employees. The contractor shall provide necessary infrastructure for services performed at the contractor's site(s).

2.4 Subcontract Management

The contractor shall be responsible for any subcontract management necessary to integrate work performed on this requirement and shall be responsible and accountable for subcontractor performance on this requirement. The prime contractor will manage work distribution to ensure there are no Organizational Conflict of Interest (OCI) considerations. Contractors may add subcontractors to their team after notification to the Procuring Contracting Officer (PCO) or Contracting Officer Representative (COR). Cross teaming may or may not be permitted.

2.5 Contractor Personnel, Disciplines, and Specialties

The contractor shall accomplish the assigned work by employing and utilizing qualified personnel with appropriate combinations of education, training, and experience. The contractor shall match personnel skills to the work or task with a minimum of under/over employment of resources. The contractor shall ensure the personnel utilized in the performance of this Task Order will be the minimum necessary to accomplish the task. The Contractor shall provide the necessary resources and infrastructure to manage, perform, and administer the task order.

2.5.1 Contractor Employee Conduct

The contractors employees shall observe and comply with all applicable departmental and agency regulations, policies, and procedures (e.g., fire, safety, sanitation, environmental protection, security, etc.). The contractor shall ensure that all contractor employees represent a professional appearance at all times, and that their conduct does not reflect discredit on the United States Government.

When contractor employees are working on Government facilities or participating at Government meetings, they shall wear identification badges distinguishing themselves as such. The badges at a minimum must have the employee name and word "contractor” displayed. Ideally, the company name will appear on the badge. Additionally, not withstanding any other provisions in the PWS, the contractor shall identify themselves as a contractor in meetings, telephone conversations, all written communications and work situations so that their actions cannot be construed as acts of a Government official. The contractor shall take no actions that bind the government to a final decision or results in the exercise of governmental discretion.

2.5.2 Removal of Contractor Employees for Misconduct or Security Reasons The Government may, at its sole discretion, direct the contractor to remove any contractor employee from Government facilities for misconduct or security reasons. Such removal does not relieve the contractor of the responsibility to provide sufficient qualified personnel for adequate and timely service. The Contracting Officer will provide the contractor with an immediate rationale for removal of contractor employee.

Conflict of Interest. Neither the contractor nor its on-site employees shall utilize their knowledge of access to information, sensitive or otherwise, for individual or company gain.

2.6 Location and Hours of Work

Work may be performed at the Contractor’s facility or the Government’s facility. The majority of the work related to this project may be conducted remotely. Travel to customer sites is required, as described below, to support accreditation and review activities.

Core Working Hours. Government core working hours are from 0700 to 1730 local time Monday through Friday except US Federal Holidays. Government workers typically work eight (8) hours per day, 40 hours per week.

Government Facility Closure. In case of government facility closure as directed by the government, contractor employees shall be excused from work at no cost to the government.

2.7 Travel

Cyber advisory, RMF Accreditation, and CCB Policy services may require travel to prospective and existing customer organizations to provide support and to meet with HPCMP staff.

Initial forecasted travel requirements are as follows:

Trips: 16 Trips to government and contractor facilities, such as DSRCs at Wright-Patterson; and ERDC, Vicksburg, MS, and DREN sites such as San Diego, CA. Specific locations will be identified by HPCMP Senior Leadership as requirements arise.

Travel to prospective and existing customer organizations to allow discussion and cultivate meaningful relationships in pursuit of goals for the strategic plan. It is estimated that 16 trips will be required to areas to be identified by HPCMP Senior Leadership as requirement arises over the course of performance.

All travel requirements (including plans, agenda, itinerary, or dates) shall be pre-approved by the government and is on a strictly cost reimbursable basis. Costs for travel shall be billed in accordance with the regulatory implementation of Public Law 99-234 and FAR 31.205-46 Travel Costs.

3 Performance Requirements The following section specifies the Performance Objectives and Performance Elements for the contract.

3.1 Cyber and RMF Accreditation Services

3.1.1 Provide expert services to responsible government employees in preparation of accreditation documentation for HPCMP systems and DREN-connected enclaves.

3.1.2 Provide technical reviews and support to the HPCMP Information Assurance Program Manager (IAPM), as well as eMASS configuration support for the HPCMP instances.

3.1.3 Provide technical reviews of HPCMP Security projects in support of the HPCMP Associate Director for Security.

3.1.4 Provide Information Systems Security Manager (ISSM) support for Software and Enterprise Systems in the HPCMP program portfolio.

3.1.5 Develop and maintain HPCMP policy documentation governing Enterprise System Management (ESM) accreditation and Configuration Control Board (CCB) policy as required for key HPCMP Cyber Security capabilities to include, but not limited to the following:

a. Yubikey

b. Light Weight Directory Access Protocol (LDAP)

c. OpenID

d. Kerberos (KDCs)

e. HPCMP Utility Server

f. Center Wide File System (CWFS)

g. HPC Help Desk Ticket System

h. Portal to the Information Environment (pIE)

i. Advance Reservation Service (ARS)

j. Online Knowledge Center (OKC)

k. HPCMP web portal developed by MHPCC

l. Centralized User Account Management (CUAM)

m. Shared License Buffer (SLB)

n. Visual Queue

o. Incident Response Tracker (IRT)

p. Splunk Servers

3.1.6 Develop and provide technical reports and presentations as required.

Deliverables

1. Document templates and samples for accreditation of RDT&E enclaves to support customer requests. Subject-area briefings on RMF accreditation and transition activities. (A001)

2. Policy documentation drafts and input for HPCMP accredited systems. (A002)

3. eMASS configurations and supporting documentation for HPCMP instances. (A003)

4. White paper identifying technical reviews of HPCMP Security projects in support of the HPCMP Associate

Director for Security. (A004)

5. Activity and trip reports as required by contract. (A005)

6. Technical reports and presentations. (A006)

4 Special Requirements This section describes the special requirements for this effort. The following sub-sections provide details of various considerations on this effort.

Antiterrorism (AT) Level I Training: All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities, controlled access areas, or require network access, shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. Upon request, the contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training by all employees and subcontractor personnel. AT Level I awareness training is available at the following website:

http://jko.jten.mil/courses/atl1/launch.html.

Access and General Protection/Security Policy and Procedures: All contractor and all associated sub-contractors employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation/facility access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identify Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any installation or facility change, the Government may require changes in contractor security matters or processes.

For Contractors who do not require CAC, but require access to a DoD facility or installation: Contractor and all associated sub-contractors employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate

Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05 / AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative, as NCIC and TSDB are available), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations.

Suspicious Activity Reporting Training: The contractor and all associated sub-contractors shall receive a brief/training (provided by the RA) on the local suspicious activity reporting program. This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the project manager, security representative or law enforcement entity. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT 5 calendar days after the completion of the training.

Contractor Employees Who Require Access to Government Information Systems: All contractor employees with access to a government info system must be registered in the Army Training Certification Tracking System (ATCTS) at commencement of services, and must successfully complete the DOD Information Assurance Awareness prior to access to the information systems and then annually thereafter in accordance with personnel security standards listed in AR 25-2 (Information Assurance), an appropriate background investigation will be conducted prior to accessing the government information systems.

For Contracts that Require OPSEC Training: All new contractor employees will complete Level I OPSEC Training within 30 calendar days of their reporting for duty. Additionally, all contractor employees must complete annual OPSEC awareness training. The contractor shall submit certificates of completion for each affected contractor and subcontractor employee, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training. OPSEC awareness training is available at the following websites:

https://www.iad.gov/ioss/ or http://www.cdse.edu/catalog/operations-security.html; or it can be provided by the RA OPSEC Officer in presentation form which will be documented via memorandum.

Information Assurance (IA) / Information Technology (IT) Training: All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contract employees working IA/IT functions must comply with DoD training requirements in DoD 8570.01, DoD 8570.01-M within 6 months of employment.

For Contracts That Require Handling or Access to Classified Information: The Contractor shall comply with Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22.M), any revisions to DOD 5220.22-M and Industrial Security. The DD254 will be attached with the contract. All contract employees, including subcontractor employees who are not in possession of the appropriate security clearance, will be escorted in areas where they may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas. Contractor shall comply with AR 380-67 (Personnel Security Program) and Homeland Security Presidential Directive 12 (Policy for a Common Identification Standard for Federal Employees and Contractors) as well as FAR 52.204-2, Security Requirements. Additionally, Contractors must comply with - (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M); any revisions to DOD 5220.22-M, notice of which has been furnished to the contractor. For classified contracts, the DD Form 254 will be attached with the contract.

Will be escorted in areas where they may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas: All contract employees, including subcontractor employees who are not in possession of the appropriate security clearance or access privileges, will be escorted in areas where they may be exposed to classified and/or sensitive materials and/or sensitive or restricted areas.

Contractor Company to obtain a Facility Clearance and individual clearances at the appropriate level: The Prime Contractor Company must have (or will have) a Facility Clearance (FCL) at the appropriate level (IAW the NISPOM DOD 5220.22‐M and AR 380‐49) prior to the start of the contract awarded period of performance.

Contractor personnel performing work under this contract must have the required security clearance, per AR 380‐67, at the appropriate level at the start of the period of performance. Security Clearances and FCL requirements are required to be maintained for the life of the contract IAW the DD254 attached to the contract. The contractor shall provide physical security for all material, equipment, data and information handled during contract performance, in accordance with AR 190-13, The Army Physical Security Program, AR 190-51, Security of Unclassified Army Property (Sensitive and Non-sensitive), and command policies, procedures and regulations.

Pre-screen candidates using E-Verify Program: The Contractor must pre-screen Candidates using the E-verify Program (http://www.uscis.gov/e-verify) website to meet the established employment eligibility requirements. The Vendor must ensure that the Candidate has two valid forms of Government issued identification prior to enrollment to ensure the correct information is entered into the E-verify system. An initial list of verified/eligible Candidates must be provided to the COR no later than 3 business days after the initial contract award.

Threat Awareness Reporting Program: All new contractor employees will complete annual Threat Awareness and Reporting Program (TARP) Training provided by a Counterintelligence Agent, IAW AR 381-12 . The contractor shall submit certificates of completion for each affected contractor and subcontractor employee(s) or a memorandum for the record, to the COR or to the contracting officer (if a COR is not assigned), within 5 calendar days after completion of training. Authorized web based TARP training for CAC card holders is available at the following website: https://www.us.army.mil/suite/page/655474

DD Forms 254: Overarching security requirements and Contractor access to classified information shall be as specified in the basic DD Form 254, which will be further identified in the DD Form 254 for each TO, as required.

All contractor personnel with access to unclassified information systems, including e-mail, shall have at a minimum a favorable National Agency Check (NAC).

Visitor Group Security Agreement. The contractor shall sign a Contractor Visitor Group Security Agreement to protect classified information involved in performance under this contract or Task Order. The Agreement will outline responsibilities in the following areas: Contractor security supervision; Standard Practice Procedures; access, accountability, storage, and transmission of classified material; marking requirements; security education; personnel security clearances; reports; security checks; security guidance; emergency protection; protection of government resources; DD Forms 254; periodic security reviews; and other responsibilities, as required.

4.2 Government Furnished Materials

Unless otherwise indicated in a particular task order, the Government will provide all facilities, utilities, equipment and materials necessary to accomplish the work:

Laptop computer (PC)

Government furnished computers may be hand-receipted to the Contractor. The liability for the repair of damaged Government property shall be subject to the terms of the "Government Property clause set forth in Section I of the solicitation and resulting contract. When Government property is furnished to the Contractor, a Government property control receipt will be completed and signed by the Contractor. The property control receipt will indicate the assigned location for use of the property by the Contractor. A copy of the property control receipt will be furnished to the Contractor. Upon return of the Government property to the Government, the Government property control receipt will be completed indicating the return of the property by the Contractor. A copy of the returned property control receipt will be furnished to the Contractor. All Government property furnished to the Contractor shall be accomplished in accordance with this procedure. The Contractor shall establish a property control system for the use, control, protection, and preservation of Government property assigned to the Contractor.

4.3 Environmental Requirements

Not Applicable.

4.4 Applicable Directives

The contractor shall comply with all documents referenced under paragraph 3.0, Performance Requirements and as identified at the task order level.

4.5 Quality

This section describes the Quality Control components for this effort. The following sub-sections provide details of various considerations on this effort.

4.5.1 Quality Control

The Contractor shall develop an Order Quality Control Plan (QCP) for the base and maintain an effective quality control program to ensure services are performed in accordance with the IDIQ contract and this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractors QCP is the means by which he assures himself that his work complies with the requirement of the contract.

The finalized QCP will be accepted by the Government at the time of the award of the contract. The Contracting Officer may notify the Contractor of required modifications to the plan during the period of performance. The Contractor then shall coordinate suggested modifications and obtain acceptance of the plan by the Contracting Officer. Any modifications to the program during the period of performance shall be provided to the Contracting Officer for review no later than 10 working days prior to effective date of the change. The QCP shall be subject to the Governments review and approval. The Government may find the QCP "unacceptable" whenever the Contractors procedures do not accomplish quality control objective(s). The Contractor shall revise the QCP within 10 working days from receipt of notice that QCP is found "unacceptable."

4.5.2 Quality Assurance Surveillance Plan (QASP)

The Government shall monitor the Contractors performance under this contract in accordance with the Governments QASP. The Government reserves the right to utilize other methods, as necessary, to assure the Contractor's compliance with the terms and conditions of this contract. The Government may inspect services provided by the Contractor both during and/or after performance is complete. If the Government identifies any performance deficiency, the Contractor will be advised of the deficiency as soon as possible. All such notifications will be confirmed in writing with the Contractor by the Government. Such notification will be made only to the Contractor or his/her designated onsite superintendent and not to any other agents, employees, or subcontractors. Upon receipt of such notification, the Contractor shall correct the deficiency within the time specified by the COR. However, in the event that the deficiency represents a hazard to health or safety or it serves to jeopardize operational continuity, then corrective action shall proceed immediately and continue uninterrupted until the correction is affected. In all cases, the correction of performance deficiencies shall not in any way adversely affect other contract performance.

5 Deliverables The contractor shall prepare reports describing the progress achieved during the period reporting and services provided in accordance with Section 3.0 of the Performance Work Statement, plans for the forthcoming time period, any anticipated problems, and any action required by the Government. The contractor is required to submit the assessment report as specified below, allowing customers to review contractor performance in a timely manner without delaying prompt payment of invoices. An approval of the deliverable by the customer agency is considered an acceptance of the contractor’s performance including expenditures for the month.

The following table lists all required deliverables applicable to this task:

CDRL # Deliverable Description

PWS

Reference Paragraph

Date Due Submit To

A001

Document templates and samples for accreditation of RDT&E enclaves to support customer requests. Subject-area briefings on RMF accreditation and transition activities.

3.1.1 Fifth Business Day of

Every Month

COR

A002 Policy documentation drafts and input for HPCMP accredited systems. 3.1.5

Fifth Business Day of Every Month

COR

A003 eMASS configurations and supporting documentation for HPCMP instances. 3.1.2

Fifth Business Day of Every Month

COR

A004

White paper identifying technical reviews of HPCMP Security projects in support of the HPCMP Associate Director for Security.

3.1.3 Fifth Business Day of

Every Month

COR

A005 Activity and trip reports. 3.1.4 Fifth Business Day of

Every Month

COR

A006 Technical reports and presentations 3.1.6 As Required COR

Performance Requirement Summary (PRS)

Performance Requirement PWS Para

Standard Performance Threshold

Method/Frequency of Surveillance

PRS

#1

Provide expert services to responsible government employees in preparation of accreditation documentation for HPCMP systems and DREN-connected enclaves.

3.1.1

Document templates and samples for accreditation of RDT&E enclaves to support customer requests. Subject-area briefings on RMF accreditation and transition activities.

(A001)

Acceptable quality level is 100%. Any deficiencies identified by client are resolved promptly but always accomplished on or before 1 week.

Method: Monthly document submittals and briefs

Frequency: Monthly

PRS

#2

Provide technical reviews and support to the HPCMP Information Assurance Program Manager (IAPM), as well as eMASS configuration support for the HPCMP instances.

3.1.2 eMASS configurations and supporting documentation for HPCMP instances (A003)

Acceptable quality level is 100%. Any deficiencies identified by client are resolved promptly but always accomplished on or before 1 week.

Method: Monthly submittals of eMASS configurations and supporting documentation

Frequency: Monthly

PRS

#3

Provide technical reviews of HPCMP Security projects in support of the HPCMP Associate Director for Security.

3.1.3 White papers

identifying technical reviews of HPCMP Security projects in support of the HPCMP Associate Director for Security (A004)

Acceptable quality level is 100%. Any deficiencies identified by client are resolved promptly but always accomplished on or before 1 week.

Method: Monthly White Papers, Customer Feedback

Frequency: Monthly

PRS#

Provide Information Systems Security Manager (ISSM) support for Software and Enterprise Systems in the HPCMP program portfolio.

3.1.4 Monthly activity and

trip reports. (A005)

Acceptable quality level is 100%. Any deficiencies

Method: Monthly Activity and Trip Reports, Customer Feedback identified by client are resolved promptly but always accomplished on or before 1 week.

Frequency: Monthly

PRS#

Develop and maintain HPCMP policy documentation governing Enterprise System Management (ESM) accreditation and Configuration Control Board (CCB) policy as required for key HPCMP Cyber Security capabilities to include, but not limited to the following:

q. Yubikey

r. Light Weight

Directory Access Protocol (LDAP)

s. OpenID

t. Kerberos (KDCs)

u. HPCMP Utility

Server

v. Center Wide File

System (CWFS)

w. HPC Help Desk

Ticket System

x. Portal to the

Information Environment (pIE)

y. Advance Reservation Service (ARS)

z. Online Knowledge Center (OKC)

aa. HPCMP web portal developed by

MHPCC

bb. Centralized User Account Management

(CUAM)

cc. Shared License Buffer (SLB)

dd. Visual Queue

ee. Incident Response

Tracker (IRT)

ff. Splunk Servers

3.1.5 Monthly submittal of

policy documentation drafts and input for HPCMP accredited systems. (A002)

Acceptable quality level is 100%. Any deficiencies identified by client are resolved promptly but always accomplished on or before 1 week.

Method: Monthly submittals, customer feedback

Frequency: Monthly

PRS#

Develop and provide technical reports and presentations as required.

3.1.6 Technical reports and

presentations as required (A006)

Acceptable quality level is 100%. Any deficiencies identified by

Method: Technical reports and presentations submitted, Customer client are resolved promptly but always accomplished on or before 1 week.

Feedback

Frequency: As required