ATCH_1_PWS.pdf

Performance Work Statement (PWS)

Technical Instructor Services for

Cellebrite Training & Certification

1.0 General:

1.1 Background: Midwest Counterdrug Training Center (MCTC) Overview. The Midwest Counterdrug Training Center (MCTC) is one of five (5) National Guard Counterdrug training programs that provides relevant curriculum focused on counternarcotics and counter transnational organized crime (CTOC). MCTC is located at the Camp Dodge Joint Maneuver Training Center (CDJMTC) in Johnston, Iowa, and features state of the art classrooms and tactical training environments. With a training region that encompasses major international trafficking routes and national border ports of entry, MCTC’s courses strive to impact the illicit flow of drugs throughout the nation.

MCTC provides courses that support National Drug Control Strategies and positively impact the performance of Federal, state, and local law enforcement agencies (LEA), community based organizations (CBO), and military professionals directly involved in counternarcotics missions. MCTC’s emphasis remains state and local law enforcement officers. Course curriculum focuses on illicit narcotics interdiction, disruption of drug trafficking organizations, intelligence and analysis, narco-terrorism, homeland security, civil operations, and anti-drug coalition fundamentals. Each course is designed to support the objectives of the DASD-CN, Office of National Drug Control Policy (ONDCP), National Northern Border, National Southwest Border, and Caribbean Border counternarcotics strategies and to increase national security. MCTC supports federal, state, and local agencies with current and relevant training, maximized by the experiences of subject matter experts in their fields. All training events are designed to not only offer world class instruction, but to break down jurisdictional barriers and offer a unique opportunity for officials across the law enforcement and prevention spectrum to network and share ideas in person.

1.2 Scope: The Contractor shall provide all labor, materials, equipment, and transportation necessary to design, develop and instruct the Cellebrite Training and Certification courses for the MCTC, in accordance with this performance work statement (PWS).

1.3 Periods/Places of Performance:

1.3.1 One base period running from award date through 31 May 2019 that will include four (4) iterations with dates and locations to be determined by MCTC.

1.3.2 One (1) 12-month option period that will run 1 June 2019 through 31 May 2020.

Option period will include up to two (2) course iterations, dependent on funding and need determined by MCTC.

1.3.3 The MCTC service area covers the 54 states and territories, and class iterations may be conducted at any location within this area. Approximately 1/3 of course iterations are conducted at the MCTC main campus at Camp Dodge, Johnston, Iowa;

and the remainder are conducted at other locations within the United States and territories.

1.4 General Requirements:

1.4.1 Quality Assurance (QA): The Government will evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). The Government Facilitator for the course will provide students with an end of course evaluation. The evaluation, along with the COR observations will be used to evaluate the quality of the course presentation/deliverable.

1.4.2 Place and Performance of Services: The contractor shall, with some exceptions, provide services between the hours of 0700-1700 on Monday through Friday, except on recognized US holidays or when the Government facility/installation is closed due to local or national emergencies, administrative closings, or similar Government-directed facility/installation closings.

1.4.2.1 Unscheduled gate closures by the Security Police may occur at any time, causing all personnel entering or exiting a closed installation to experience a delay. This cannot be predicted or prevented. Contractors are not compensated for unexpected closures or delays. Vehicles operated by contractor personnel are subject to search pursuant to applicable regulations. Any moving violation of any applicable motor vehicle regulation may result in the termination of the contractor employee’s installation driving privileges.

1.4.2.2 The contractor’s employees shall become familiar with and obey the regulations of the installation; including fire, traffic, safety and security regulations while on the installation. Contractor employees should only enter restricted areas when required to do so and only upon prior approval. All contractor employees shall carry proper identification with them at all times. The contractor shall ensure compliance with all regulations and orders of the installation which may affect performance.

1.4.3 Security Requirements. The contractor shall comply with all applicable installation/facility access and local security policies and procedures, which may be obtained from the Contracting Officer’s Representative (COR). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. The contractor shall ensure compliance with all personal identity verification requirements as directed by DOD, HQDA and/or local policy. Should the Force Protection Condition (FPCON) change, the Government may require changes in contractor security matters or processes.

1.4.4 Homeland Security Presidential Directive-12 (HSPD-12) Considerations:

1.4.4.1 Routine access to Government-controlled facilities is not required.

1.4.4.2 Routine access to Government Information Systems (IS) is not required.

1.4.4.3 NACI or other security check is not required.

1.4.4.4 Government-issued identification and/or building passes are not required.

1.4.4.5 Contractor personnel do not require Government escort while performing work on a Government installation.

1.4.4.6 Contractor is not required to provide employee and/or vehicle information for an Entry Authorization List (EAL).

1.4.6 Combating Trafficking in Persons: The United States Government has adopted a zero tolerance policy regarding trafficking in persons. Contractors and contractor employees shall not engage in severe forms of trafficking in persons during the period of performance of the contract; procure commercial sex acts during the period of performance of the contract; or use forced labor in the performance of the contract. The Contractor shall notify its employees of the United States Government’s zero tolerance policy, the actions that will be taken against employees for violations of this policy. Such actions may include, but are not limited to, removal from the contract, reduction in benefits, or termination of employment. The contractor shall take appropriate action, up to and including termination, against employees or subcontractors that violate the US Government policy as described at FAR 22.17.

2.0 Definitions and Acronyms:

2.1 Definitions:

2.1.1 CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2 CONTRACTING OFFICER (KO). A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.3 CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government designated by the KO to monitor contractor performance. Such appointment will be in writing and will state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4 DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5 DELIVERABLE. Anything that can be physically delivered and includes non-manufactured things such as meeting minutes or reports.

2.1.6 ITERATION. Each repetition of the course is considered an iteration.

2.1.7 QUALITY ASSURANCE. The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.8 QUALITY ASSURANCE SURVEILLANCE PLAN (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.9 SUBCONTRACTOR. One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.2 Acronyms:

2.2.1 AQL Acceptable Quality Level

2.2.2 CFP/M/E Contractor Furnished Property, Materials, and Equipment

2.2.3 COR Contracting Officer’s Representative

2.2.4 KO Contracting Officer

2.2.5 GFP/M/E/S Government Furnished Property, Material, Equipment and Services

2.2.6 PWS Performance Work Statement

2.2.7 QASP Quality Assurance Surveillance Plan

2.2.8 QA Quality Assurance

2.2.9 TE Technical Exhibit

3.0 Government Furnished Property, Material, Equipment and Services (GFP/M/E/S):

3.1 Property: The MCTC will provide a classroom of adequate size to accommodate the number of students registered for each iteration of the course.

3.2 Equipment: Classroom will be equipped with Audio-Visual Equipment.

4.0 Contractor Furnished Property, Materials, and Equipment (CFP/M/E): Except for those items specifically stated to be Government-furnished in paragraph 3.0, the contractor shall furnish all property, material, equipment and services required to conduct the training.

4.1 Minimum Materials and Equipment to be provided by Contractor:

4.1.1 Student manual outlining specific course content. Student manual is intended to be a reference/resource for students to use after completing the course, and must be provided in hard copy to each student. Student manual shall be:

4.1.1.1 Professionally and thoroughly researched and developed

4.1.1.2 Comprehensive, current, and relevant

4.1.1.3 Professionally organized, assembled and securely bound (hard copy student manual is required)

4.1.2 Any additional materials or equipment required to conduct the course, except those specifically indicated as provided by MCTC in paragraph 3.0 shall be provided by the contractor

4.1.3 Expenses: All expenses, including but not limited to the following, shall be incurred by the contractor and shall be included in the firm fixed price.

4.1.3.1 Travel, lodging and meal expenses

4.1.3.2 Printing of student handbooks

4.1.3.3 Purchase and delivery of all materials and/or equipment required to conduct the course

5.0 The contractor shall provide a seven (7) day all-inclusive Cellebrite Course that will include the one-day Cellebrite Mobile Forensic Fundamentals (CMFF) course, the two-day Cellebrite Certified Operator (CCO) course, the three-day Cellebrite Certified Physical Analyst (CCPA) course and one day for the Cellebrite Certified Mobile Examiner (CCME) examination. Contractor shall provide multiple iterations of the course, at dates and locations to be coordinated with MCTC, during the contract performance period. Dates/locations for each course iteration are selected based on training requests submitted law enforcement agencies.

Intent of Course: The course shall deepen criminal analysts’ understanding of the Cellebrite Universal Forensic Extraction Device (UFED) and provide them with the necessary tools and skills needed to detect illegal drug trafficking criminal activities through their most common methods of communication by use of their cellular telephones. The purpose of the Cellebrite course is to train analysts in advanced analytic techniques so they can determine the vulnerabilities of DTOs and TCOs and identify opportunities to disrupt their activities.

This course should focus on enhancing their ability to develop forensic investigative methods through the use of the Cellebrite device, and present analytic findings through the use of link analysis to various audiences. Upon completion of this course analysts should have a more in-depth understanding of the Cellebrite UFED, functions, and legal ramifications concerning cell phone forensics.

5.1 MCTC requires four blocks of instruction conducted over seven days that will include the official Cellebrite Mobile Forensic Fundamentals (CMFF) course, the official Cellebrite Certified Operator (CCO) course, the official Cellebrite Certified Physical Operator (CCPA) course, and the official Certified Mobile Examiner Certification (CCME) examination.

5.2 Course Content: The course of instruction shall cover the following the official Cellebrite approved topics (learning objectives), at a minimum:

5.2.1.1 The Cellebrite Mobile Forensic Fundamentals (CMFF) Course: provides the fundamental knowledge to comprehend and investigate incidents involving mobile devices. Students will be introduced to baseline concepts to ensure they gain the prerequisite knowledge to understand issues surrounding the handling of mobile devices as evidence and to attend the next in the series of the Cellebrite’s UFED Certification Training Series. The CMFF course is the starting point for first responders, investigators and CSI staff tasked with identifying and seizing mobile devices for data acquisition.

5.2.1.2 Cellebrite Certified Operator (CCO) Course: CCO is a mobile forensic certification that certifies participants who have gained the knowledge and practical skills required to handle mobile devices in a forensically sound manner, use the Cellebrite UFED Touch, UFED Touch2 and UFED 4PC, conduct extractions, basic analysis, and reports on extracted data. It must build on the concepts imparted in the CMFF course and expose students to the fundamentals of mobile device investigations, logical extraction of user data, and analysis of mobile devices. Operation of the Cellebrite UFED product to perform a number of hands-on logical extractions on various mobile devices with a variety of operating systems is required. Skill sets will include creating Safety Subscriber Identity Module (SIM) and extracting evidentiary data from SIM cards. Students will be taught to create reports on findings and get exposed to the UFED Reader and how to use that to multiply investigative efforts.

5.2.1.3 Cellebrite Certified Physical Analyst (CCPA): CCPA is an advanced level certification that certifies participants have gained knowledge and practical skills using UFED Physical Analyzer software conduct advanced analysis on mobile devices, including advanced search and analysis techniques to verify and validate findings. This class will also introduce students how to generate reports on technical findings. CCPA focuses on the use of Cellebrite’s UFED to perform file system extractions, physical extractions, password bypasses and the advanced analysis of evidentiary items using the UFED Physical Analyzer software.

5.2.1.4 The Cellebrite Certified Mobile Examiner (CCME) exam: CCME is a certification process designed to assess student’s comprehensive knowledge and practical skills. Students who successfully complete the CMFF, CCO and CCPA become eligible to take the certification as a Cellebrite Certified Mobile Examiner (CCME). The CCME will include a review and preparation workshop to assist the students in preparing to successfully complete the CCME examination.

5.3 If a slide presentation is to be used; all slides must display the MCTC logo.

5.4 Target Audience: Up to 20 law enforcement officers and military personnel directly involved in counternarcotics missions; with an emphasis on National Guard Criminal Analysts to include civilian local, state, and federal law enforcement officers.

5.5 Contractor Manpower Reporting Application (CMRA):

5.5.1 The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract for the Iowa Army National Guard via a secure data collection site.

5.5.2 The contractor shall completely fill in all required data fields using the following web address: http://www.ecmra.mil/. Reporting inputs shall be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year.

Contractors may direct questions to the help desk at http://www.ecmra.mil.

6.0 Offeror Qualifications. The offeror (contractor) must meet the following minimum qualifications.

6.1 The offeror (contractor) shall have prior experience in the design, development, and/or delivery of law enforcement courses to military and/or law enforcement personnel at the local, state, or federal level.

6.2 The offeror (contractor) shall be a Cellebrite-authorized training reseller.

7.0 Instructor Qualifications. Offerors shall determine the appropriate number of instructors required to teach the course, based on their instruction methodology and class size. Each proposed instructor must meet the minimum qualifications.

7.1 Instructor(s) shall be professional internal forensic training staff that have successfully completed the rigorous screening and instructor development process and have achieved the credential of Cellebrite Certified Instructor from Cellebrite.

http://www.ecmra.mil/

TECHNICAL EXHIBIT 1

Performance Requirements Summary

This Performance Requirements Summary indicates the performance standards the Government will use to determine contractor performance. The Government COR will compare the course evaluation for each iteration to the Acceptable Quality Level (AQL) indicated below.

PWS

Paragraph

Task Performance Standard

Acceptable Quality Level (AQL)

Method Used/ Frequency

5.0 Provide Cellebrite

Training Courses in accordance with the PWS

75% average or above “Agree” or “Strongly Agree” ratings on each question of Student Course Evaluations*

Failure to achieve 75% average or above “Agree” or “Strongly Agree” ratings on each question of Student Course Evaluations*

Course Evaluation / Each course iteration

5.0 Provide Cellebrite

Training Courses in accordance with the PWS

95% pass rate for students taking the CCME at the end of the course

5% fail rate for students taking the CCME at the end of the course

Examination Results / Each course iteration

*Student Course Evaluations will be completed by each student attending the course, and will ask students to rate the following:

1. Instructor presentation of information

2. Instructor knowledge of subject matter

3. Hands on training of materials

4. Textbook & handout materials presented to the students

5. Instruction’s strong points of course

6. Overall course rating

TECHNICAL EXHIBIT 2

Deliverables Schedule

PWS Reference / Deliverable Title

Frequency Number of Copies

Medium/Format Submit To

4.1.1. Student Manual First day of class 1 Hard copy Students

5.5 CMR Reporting Annually, within 30

days after end of performance period or 30 October, whichever is earlier

1 Electronic http://www.ecmra.mil