A02 - ARD SMS PWS Future.docx

PERFORMANCE OF WORK STATEMENT

FOR

Directorate of Prevention, Resilience and Readiness

CONTRACT

ARMY OFFICE OF BUSINESS TRANSFORMATION / STRATEGIC MANAGEMENT SYSTEM (SMS) SUPPORT

TABLE OF CONTENTS

1.0 REQUIREMENTS BACKGROUND

1.0.1 Background – The mission of the Directorate of Prevention, Resilience and Readiness (DPRR) is to provide policy, resources and capabilities for individuals and leaders in order to increase resilience and readiness. DPRR employs proactive strategies to enable individual readiness and unit cohesion. DPRR provides awareness, education, training and prevention for soldiers in the matters of programs to provide data analysis and trends to drive solider education and prevention. Sexual Harassment/Assault, Suicide, and Substance Abuse. SMS collects data from these programs to provide data analysis and trends to drive solider education and prevention. The Army Sexual Harassment/Assault Response and Prevention (SHARP) Program supports commanders at all levels to prevent sexual harassment and sexual assault from occurring in the Army and meet their SHARP responsibilities in training, manning and response. Commanders are responsible for building a positive command climate throughout their entire command to ensure all Soldiers uphold the Army values, intervene to correct misconduct at the earliest opportunity and trust their command to take appropriate action if a report of sexual harassment or sexual assault is made in the unit. SHARP personnel including Sexual Assault Response Coordinators and Victim Advocates support the commander with unit training requirements, program management, incident response procedures and case coordination. In 2019, the Army SHARP Program merged with the Army Ready and Resilient Program within the Directorate of Prevention, Resilience and Readiness (DPRR). As Headquarters Department of the Army (HQDA) implements the Secretary of Defense directed Independent Review Commission recommendations, the integrated Prevention Workforce looks at Army Resiliency programs such as SHARP, suicide prevention, substance abuse, and Equal Opportunity. To support this effort, other data sets or SHARP Data Management Systems (DMS) may be introduced into the SMS for analysis in a similar manner as SHARP data. As such, under this updated performance of work statement, the vendor shall have the scope to support the Army G9, Directorate of Prevention, Resilience and Readiness.

1.0.2 DPRR Program Office Reporting Requirement - DPRR is the proponent for Army wide reporting in support of the Secretary of the Army’s commitment to the Directorate of Prevention, Resilience and Readiness (DPRR) Program Offices. The DPRR Program Office acknowledges technology enhancements and version controls to the SMS Common Operating Picture (COP) for DPRR Program Office as part of performance management and data tracking requirements. The purpose of the COPs is to collect and report extensive data through both command and installation based hierarchical structures using the Army’s Strategic Management System (SMS). Data distribution to the commanders aligns with managed and approved user provides through the DPRR Program Office. Success of the Army DPRR SMS program requires commanders at all echelons of command having the ability to view their data and “see themselves” according to their structure and roles. The SMS user requests will have an approval schema through system administrators, user training, and associated and applied standards and SMS user interface workflows. The SMS software arranges UIC, affiliation of victim, subject, and staff by location, command, installation, operational command, and organized against a complex collection of base architectures. As a Commander’s Program, the SHARP data must be assessed from both an Installation View and an Operational Command View, and then mapped against complex aggregation facilitating views based on UIC affiliation of victim, subject and staff by location and command.

1.0.3 Scope - The scope of work for the DPRR Programs includes the administration of performance management software, the Information Technology (IT) Vulnerability Fixes, System Security, and program changes for Army Owners and users of the Integrated Case Reporting System (SHARP ICRS), the Army Level Help Desk for all SHARP DMS, and supporting subject matter expertise in:

· Data modeling and management for the SHARP systems to be used to define and analyze data requirements needed to support the SHARP, SHARP Ready & Resilient (SR2), business processes within the scope of the contract and to make technical adjustments and/or system modification to the SHARP IT and production system.

· DPRR Program Office (PO) data collection, reporting, integration, and automation.

· Technical support services toward review, assessment, migration, and setup of DPRR Program Office data reporting within SMS.

· Subject Matter Expertise in data analysis, formatting, and reporting capabilities.

· Support to the DPRR Program Office in analyzing Suicide, Drug Tests, and Measurability Framework Assessments (MFA) reports, creating, applicable analysis, and briefing products.

· Support to the DPRR Program Office in analyzing Defense Sexual Assault Incident Database (DSAID) and Incident Case Reporting System (ICRS) reports, creating, applicable analysis and briefing products.

· Perform studies, analysis, system management, subject matter proficiency, administrative support, information assurance and cyber security support, and system administration, maintenance, and modification to G-9 DPRR SHARP Program office.

· Provide support to the DPRR Program Office in fusing information from available Army resiliency and SHARP data in order to support command decisions.

· Support to Army G9 Prevention Activity Monitoring Tool (PAMT) in coordination with SHARP Program Office.

· Support to Army G9 for data collection, formatting, analysis, and reporting for DoD and Army Executive Orders (EXORDs) related to G9 and DPRR programs and mission.

· Man the SHARP Army Level Help Desk with appropriate personnel.

· Provide functional subject matter and program analysis to facilitate new policy and/or strategies, revised business rules, and/or process changes.

· Support the Information Assurance team (separate contractor) with the risk management framework (RMF) implementing a robust cyber survivability requirement for the SHARP CLOUD environment.

· Modify as appropriate SMS software to facilitate the DPRR Program requirements for additional Common Operating Pictures (COPs) and related products. Facilitating automated data connections where possible to reduce the need for manual entry of data and speed the reporting time cycle.

At present, SHARP makes use of the Army’s SMS software for reporting. SMS is funded by the Army Office of Enterprise Management and hosted in DoD approved Cloud Service Providers in both unclassified and classified environments.

1.0.4 Objectives - The Contractor shall provide technical support services to the SHARP / Ready and Resilient (SR2) Program Office in performance management consulting, build and maintenance of SHARP Data Management Systems (DMS), SMS generated dashboards and related products, training, configuration control, data automation, system enhancement and web services.

1.0.5 Standard Data Collection – DPRR and SHARP performance management is highly integrated across multiple organizations (SHARP, SR2, CID, JAG, MEDCOM, MEO, Chaplain, Command’s) and programs (SHARP, Suicide, Drug Testing, MFA) and required data points are pulled from systems of record into standard dashboard displays. The force has been trained on the DPRR COP to include system access and administration, data sources, data quality standards, performance thresholds, weighting and indexing methodology and local customization capabilities. In addition, contractor will work with the R2 programs to collect and report on R2 datasets, creating repeatable data collection and reporting processes where feasible.

1.0.6 Transparent Data Display - Standard strategic-level dashboards composed of a common core set of key performance metrics (with drill-down capability into specific metrics and into the UIC structure) will cascade from the All Army View down through both Operational and Installation Views to the Battalion-Level (at minimum) across the entire Force.

1.1 GENERAL REQUIREMENTS

Hours of Operation - Unless otherwise specified, the regular duty hours shall be 0800 through 1630 EDT/EST, Monday through Friday. However, the contractor is cautioned that operating hours may vary per functional area based on mission requirements.

Contractors will follow Office of Personnel Management policy regarding Washington, DC, Area Dismissal and Closure Procedures: https://www.opm.gov/policy-data-oversight/pay- leave/reference-materials/handbooks/dcdismissal.pdf. For situations which require Federal offices to close, contractors may provide SMS support with unscheduled telework for continuity of operations. A telework plan will be addressed in the contractor’s management plan.

1.1.1 Place of Performance - Work will be primarily conducted on-site in Government-provided facilities in the Pentagon, Crystal City, National Capital Region (NCR), and other offices as designated throughout Northern Virginia. Contractors are also permitted to perform duties at contractor provided work locations. Remote or off-site work may be authorized at the discretion of the Government, and/or COR. The need to conduct on-site training on SMS software, however, may necessitate contractor travel wherever Army units are located world-wide.

1.1.2 Period of Performance - The base period of performance shall be twelve (12) months from the date of the award, with an anticipated Period of Performance of 3 Jul 2023 – 2 Jul 2024.

1.1.3 Federal Holidays - Federal Holidays are established by Federal Law and are currently as follows:

New Year’s Day - 1 January Martin Luther King Jr. Day - 3rd Monday in January Presidents Day - 3rd Monday in February Memorial Day - Last Monday in May Juneteenth – 19 June Independence Day - 4 July Labor Day - 1st Monday in September Columbus Day - 2nd Monday in October Veterans Day - 11 November Thanksgiving Day - 4th Thursday in November Christmas Day - 25 December

Any Federal Holidays declared by the Government subsequent to the issuance of this task order shall be automatically incorporated into this list. Installation commands have historically granted military personnel (enlisted and officers) training holidays (i.e. Friday after Thanksgiving) in addition to the ten federal holidays listed above. Training holidays are not considered a day of excused absence for contractor personnel.

1.1.4 Attendance at Meetings - Personnel shall attend and participate in scheduled and unscheduled meetings as required. Meetings may be on-site within the National Capital Region (NCR) or through MS teams as required to meet mission requirements under each of the task areas identified below.

1.1.5 Marking Proprietary Information - All records, files, reports, and data deemed proprietary or classified shall be clearly marked accordingly and properly stored based on level of classification of the information. If necessary, the KO makes final determination of the appropriateness of proprietary claims by the contractor.

1.1.6 Contractor Manpower Reporting (CMR) The contractor shall report all contractor and subcontractor labor hours required for performance of services provided under this contract via a secure data collection site. The contractor is required to complete all required data fields using the following web address: https://www.sam.gov, and then click on “Department of the Army CMRA” or the icon of the DoD organization that is receiving or benefitting from the contracted services.

Reporting inputs will be for the labor executed during the period of performance by each Government fiscal year (FY), which runs 01 October through 30 September. While inputs may be reported anytime during the FY, all data shall be reported no later than 31 October of each calendar year. Contractors may direct questions to the help desk by clicking on “Send an email” which is located under the Help Resources ribbon on the right side of the login page of the applicable Service/Component’s Contractor Manpower Reporting website.

1.1.7 Communication Items - Only Government issued computers and laptops will be utilized in the performance of this contract. A Government Smartphone may be made available at the discretion of the government for the purposes of having access to government email for those personnel required to travel away from the government workspace. Contractor owned equipment is prohibited from being installed on any Army Network. The contractor shall provide any pagers and cellular phones they deem necessary for internal operations.

1.1.8 Contract Data Requirements List (CDRL) - The contractor shall provide all periodic and intermittent documentation, reports, and statistics as required by the COR and established guidelines.

1.1.9 Contracting Officer’s Authority: The Contracting Officer is the only person authorized to direct changes in any requirements under this task order. In the event the contractor effects any change at the direction of any person other than the Contracting Officer, the change will be considered to have been made without authority and solely at the risk of the contractor.

1.1.10 COR: The COR is the government’s technical expert and will be appointed by the Contracting Officer. Within the limitations of the appointment, the COR is authorized to perform the functions as identified in the appointment letter. These functions may include: perform or cause to be performed inspections necessary in connection with task order performance and verify that the contractor has corrected all deficiencies; monitor contractor's performance and notify the Contracting Officer and contractor of any deficiencies; coordinate availability of government furnished property; and provide site entry for contractor personnel. The COR will participate in “Interim Progress Reviews” (IPRs) with the contractor. A letter of appointment issued to the COR, a copy of which is provided to the contractor, states the responsibilities and limitations of the COR. The COR is not authorized to change any of the terms and conditions of the resulting contract.

1.2 PERSONNEL

1.2.1 Contractor Personnel - For the purposes of this contract, the term “Contractor Employees” applies to all contractor employees and subcontractor employees performing work in support of this contract. The Contractor shall retain personnel with management and technical knowledge, skills, abilities, expertise, training and experience needed to accomplish performance of work under this contract. Contractor employees working under this contract shall be able to fluently speak, read, understand and write the English language. The Contractor shall maintain records of employees’ qualifications, certifications and licenses. Contractor personnel must meet the conditions contained in AR 25-2 and AR 380-67 in relationship to obtaining access to Automated Information Systems (AIS) processing of classified information to fulfill their duties.

1.2.2 Attire - Acceptable dress standards for the work assigned. The contractor shall ensure personnel attire IAW office standards across the required functional areas.

1.2.3 E-mail Addresses - Employees shall include a signature block on all emails that includes their name, title (to include contractor), company name, desk phone and contact information.

1.2.4 Language Qualifications - The contractor shall employ only persons able to speak read, write, and understand English.

1.3 SECURITY REQUIREMENTS

1.3.1 Contract Security Classification Specification - The security requirements are defined in the attached DD Form 254, Contract Security Classification Specification.

· AT Level I Training - This provision/contract text is for contractor employees with an area of performance within an Army controlled installation, facility or area. All contractor employees, to include subcontractor employees, requiring access Army installaions, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 30 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website: https://atlevel1.dtic.mil/at.

· Access and General Protection/Security Policy and Procedures - This standard language text is for contractor employees with an area of performance within an Army controlled installation, facility or area. Contractor and all associated sub-contractors employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

· AT Awareness Training for Contractor Personnel Traveling Overseas - This standard language text required US based contractor employees and associated sub-contractor employees to make available and to receive government provided area of responsibility (AOR) specific AT awareness training as directed by AR 525-13. Specific AOR training content is directed by the combatant commander with the unit ATO being the local point of contact.

· iWATCH Training - This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 15 calendar days of new employees commencing performance with the results reported to the COR NLT 30 calendar days after contract award.

· For Information assurance (IA)/information technology (IT) training - All contractor employees and associated sub-contractor employees must complete the DoD IA (“Cyber Awareness”, Army Training & Certification Tracking System Link is https://atc.us.army.mil/iastar/index.php), awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoD 8570.01, DoD 8570.01-M and AR 25-2 within six months of employment.For information assurance (IA)/information technology (IT) cortication - Per DoD 8570.01-M, DFARS 252.239.7001 and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DOD 8570.01-M must be completed upon contract award. For Contracts That Require Handling or Access to Classified Information - Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires contractors to comply with— (1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DOD 5220.22-M); any revisions to DOD 5220.22-M, notice of which has been furnished to the contractor.

· OPSEC Training - Contracts that Require OPSEC Training. Per AR 530-1, Operations Security, new contractor employees must complete Level I OPSEC training within 30 calendar days of their reporting for duty. All contractor employees must complete annual OPSEC awareness training and adhere to organization’s security program.”

· PII Training - All contractor employees and associated sub-contractor employees that require access to Personally Identifiable Information (PII) must complete PII training within 30 calendar days of their reporting for duty. The training is accessible from any computer and is available at the following URL: https://ia.signal.army.mil/a/pii_module/pii_module/. The contract staff will provide completed training certificate to COR when training is complete.

1.3.2 Clearance Requirement - Contractor personnel performing work under this contract must have a SECRET clearance. The Contractor is responsible for obtaining the necessary clearances and ensuring contract personnel have the appropriate clearances at time of contract award. The security requirements are in accordance with the attached DD 254. Interim Secret clearance is unacceptable.

1.3.3 CAC Card Access to Government Computers/Systems - The Government will provide building access badges as necessary. All Contractor personnel are required to acquire and maintain a Common Access Card (CAC). The COR will be the Trusted Agent for validating CAC issuance using the Contractor Verification System. Contractor eligibility remains in force during employment under the contract for those employees who have a valid and recurring requirement for access to Army facilities or automation systems to perform those duties stipulated in the contract. The CACs and building access badges shall be returned to the COR when the Contractor employee’s employment is terminated or upon expiration of the contract. The CACs expire when Contractor eligibility terminates or three years from the issuance date, whichever occurs first.

1.3.4 Security Related Training - All contractor personnel shall attend training/briefings, provided by the Government, for Information Assurance (IA) and any additional training as required annually. The Government will provide the contractor personnel with information on when and where training will be held.

1.3.5 Conflicts of Interest - The contractor shall not hire for this contract, any person whose employment would result in an appearance of a conflict of interest as defined in 5 CFR 2635.502. The contractor shall notify the KO in writing, five (5) working days prior to employing any active civilian Government or military personnel.

1.4 TRAVEL

1.4.1 Travel Requirements - The Contractor may provide support at CONUS locations to meet mission requirements and undergo training. Limited travel may be required to military installations and related locations throughout the Continental United States (CONUS). Based on historical data travel is estimated to be seven trips per quarter with an approximate duration of two to five days per trip. All travel shall be in accordance with the Federal Acquisition Regulations (FAR), and should follow all required travel documentation and authorization processes established by the COR.

1.4.2 TRAVEL FUNDING - The Government will reimburse the Contractor for costs incurred for Government- directed travel, in accordance with the Joint Travel Regulation and Federal Acquisition Regulation (FAR) Part 31.205-46, Travel. If the Contractor identifies a requirement for travel within the scope of this contract, the Contractor shall submit a written request to the COR for approval. This request shall identify the number of persons in the party, names of travelers, labor categories, destination, dates and duration of stay, purpose, and estimated cost. The Contracting Officer’s Representative (COR) shall approve all travel prior to performance, in writing.

1.5 TRAINING - Contractor personnel shall have job-appropriate education, training, experience, certifications, and licensing as applicable prior to performing work under the contract. The contractor shall, without additional expense to the Government, be responsible for obtaining any necessary licenses and permits, and for complying with any Federal, State, and municipal laws, codes, and regulations applicable to the performance of work. All training is the responsibility of the contractor unless specified as Government Unique training to ensure training is accomplished prior to the individual performing work. The contractor shall maintain records of all scheduled and accomplished training.

1.6 REQUIRED OPERATIONAL PLANS - The contractor shall maintain and implement each plan identified below during the period of performance, and shall propose revisions, as warranted. The initial plans shall be submitted to the KO for review and approval no later than thirty (30) calendar days after award. All revisions shall be subject to written approval by the KO, upon which the contractor shall document and record the plan number, distribute revised plans and communicate changes to affected contractor and Government personnel. The contractor shall furnish all changes to the KO and the appropriate COR at least three (3) working days prior to the effective date of the change.

1.6.1 Management Plan - The Contractor shall submit a plan containing the Contractor’s standard management practices and procedures within this PWS and the Contract Data Requirement List DD Form 1423, Data Item A001, DI-MGMT-80004A, entitled Management Plan. This plan at a minimum shall address the following:

· The management techniques or procedures to be utilized to accomplish the basic functions of planning, organizing, and controlling for each function depicted on the organizational structure, to include the proposed interface and relationships between major functional areas for management and administration.

· An organizational line and block chart from top level management to and including personnel in the Government workplace.

· Plans for replacement staffing, recruiting and maintaining adequately experienced and trained personnel.

· The methods planned for controlling costs, specifically, any innovative methods and basis for confidence in these methods.

· The authority that will be granted to the Project/Program Manager to identify type and extent of support to be provided by corporate activities to satisfy the proposal.

· The management plan shall also identify to what extent subcontracting shall be used to satisfy requirements in the solicitation and describe the controls management will have to ensure timeliness and quality of all subcontracted efforts and how this work will be coordinated.

2.0 GOVERNMENT EQUIPMENT / FACILITIES / DATA

2.1 Government Furnished Equipment/Facilities/Data - The Government will make available utilities, equipment, office furniture, and supplies to support Contractor operations in Government facilities on the same basis as made available to Government employees performing similar functions. The materials and information provided to the Contractor by the Government or to which the Contractor had access in completing work under the contract, to include keys, communication devices (for DBAs), and access badges, are the exclusive property of the Government. The Government will also provide expendable supplies for use by the contractor personnel at the work site.

2.2 Maintenance of Government Equipment - Exercise responsibility and accountability for Government property dedicated to its employees’ use in performance of contract requirements. This responsibility includes the obligation to properly use, care for, and safeguard all Government property in their personal possession. Any property or resources so provided shall be used only for contract performance-related purposes.

2.3 Access to Systems Containing Personally Identifiable Information (PII). The contractor shall comply with the Privacy Act and all applicable agency regulations on individual privacy, to include DoD Directive 5400.11 “Department of Defense Privacy Program” and DoD 5400.11-R, Department of Defense Privacy Program.

2.4 Systems Access. When requested by the Government, the contractor shall provide access to and information regarding the systems that the contractor operates or maintains on behalf of the Government under this task order. Requests for waivers to access automated systems shall be forwarded to the COR. Any contractor personnel operating a government-provided computer shall possess a favorable suitability investigation or an approved waiver pending investigation and have completed the following Government provided online courses: All Required Government course needed for access to the needed systems to include, Cyber Awareness Training, Portable Electronic Devices and Removable Storage Media, Phishing Awareness, Safe Home Computing, and PII prior to gaining access or use of any computer/ computerized device. Failure to maintain suitability standards set forth therein will subject contractor personnel to suspension of access to government automated systems. If a contract employee is suspended from system access, the contractor remains responsible for the performance of services.

2.5 Systems Security. The contractor shall encrypt all contractor-owned laptops or other portable media storage devices that process or store PII, in accordance with NIST FIPS 140-2 (or successor). The contractor shall require FIPS 140-2 (or successor) encryption of any sensitive PII when transmitted electronically across the internet or other public networks.

2.6 Data Security. The contractor, unless otherwise authorized by the Government, shall limit access to PII to those employees and subcontractors who require the information in order to perform their official duties under this task order. The contractor, contractor employees, and subcontractors shall physically or electronically protect PII when not in use and/or under the control of an authorized individual. During task order performance, when PII is no longer needed or required to be retained under applicable Government records retention policies, the contractor shall coordinate with the contracting officer to either turn over the PII to the Government or destroy it through means that will make the PII irretrievable (i.e., permanently unavailable for access by any person). The contractor shall only use PII obtained under this task order for purposes of the task order and shall not collect or use such information for any other purpose without the prior written approval of the Contracting Officer. At expiration or termination of this task order, the contractor shall coordinate with the Contracting Officer to either turn over all PII managed under the task order that is in its possession to the Government or successor contractor, or if the Government so directs, destroy the PII.

2.7 Data Breach Response and Notification. The contractor shall adhere to the reporting and response requirements for PII set forth in Memorandum, office of the Secretary of Defense, Subject: Safeguarding Against and Responding to the Breach of Personally Identifiable Information (PII), June 5, 2009, ALARACT 050/2009, DoD 5400.11-R, and any amendments. The contractor (or on behalf of its subcontractor(s)) shall notify the COR immediately/NLT one hour after discovery that a suspected or actual breach of PII has occurred. The notification shall include, to the greatest extent possible, the identification of everyone who’s PII has been or possibly has been breached. In addition, the contractor or its subcontractor shall provide the COR with any other available information that must be included in required breach reporting and notifications. The contractor shall provide this information at the time of the initial notification to the Government or promptly thereafter as information becomes available. The Government will determine whether a breach of PII has occurred, and whether breach notification to affected individuals is required. If breach notification to affected individuals is required, the Government will determine if the contractor shall make the required notification. If the contractor is to notify the impacted population, it shall submit the notification letters to the COR for review and approval.

2.8 Communications Security (COMSEC). All communications with DoD organizations are subject to COMSEC review. The contractor shall be aware that telephone communications, and IT networks are continually subject to intercept by unfriendly intelligence organizations. DoD has authorized the military department to conduct COMSEC monitoring and recording of telephone calls originating from, or terminating at, DoD organizations. Therefore, the contractor is advised that any time it places a call or receives a call it is subject to COMSEC procedures. The contractor shall ensure wide and frequent dissemination of the above information to all employees dealing with DoD information. The contractor shall be aware of, and abide by, all Government regulations concerning the authorized use of the Government’s computer network as well as improper network use (e.g., viewing pornographic material or restricted/subversive sites on the web), including the restriction against using the network to recruit Government personnel or advertise job openings.

2.9 SHARP Data Management System (DMS) INFORMATION SYSTEMS SECURITY REQUIREMENTS. The contractor shall comply with DFARS 252.204-7012 (http://farsite.hill.af.mil/vmdfara.htm), Safeguarding Covered Defense Information and Cyber Incident Reporting. The contractor shall implement applicable security controls listed in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, "Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations" to safeguard covered defense information that is processed or stored on their internal information system or network. The contractor shall provide "adequate security" (as defined by DFARS 252.204-7012) for covered defense information that is processed, stored, or transmitted on the contractor's internal information system or network. The NIST SP 800-171 is available via the internet at https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-171r1.pdf.

3.0 TASK AREAS

3.1 DPRR PROGRAM OFFICE COMMON OPERATING PICTURE(COP) DESIGN/REFINE/

MAINTENANCE - Support the HQDA G9 DPRR Program Office with the refinement of the Dashboard Templates to display key performance indicators and metrics in dashboards/Common Operating Pictures (COP)s as determined by the HQDA DPRR Program Office and Army Senior Leader guidance. This includes refinement and maintenance of Defense Sexual Assault Incident Database (DSAID) code-based hierarchy to display groupings of DSAID codes by installation as well as individual DSAID code assigned units and a UIC- based code hierarchy to facilitate dashboard views for each commander from ACOM, DRU, and ASCC through Brigade level. Dashboards/ COPs in place to be maintained and/or refined during this Task Order period, as directed:

· DPRR Consolidated COP

· Sexual Assault COP

· Sexual Harassment COP

· MEDCOM SAFE Kit COP

· SHARP Enterprise Staffing/Caseload COP

· Health of the Force COP

· Suicide COP

· Drug Test COP

· MFA COP

· Prevention Activity Monitoring Tool (PAMT)

· Other SR2 COPs as identified and requested by the government

Each COP will display counts of incident reports by a range of applicable metrics such as numbers of incidents, locations of incidents, service component, pay grade, gender, duty status and selected demographics information for both subjects and victims in the operational and installation command as determined by the G-9 DPRR Program Office staff. DPRR Program Office Specific COPS to display data at ACOM, ASCC, DRU, by command, by Installation, by case load, down to Brigade levels or lower if requested and in some case by a Tree like structure or formatting.

3.2 DPRR PROGRAM OFFICE – Data Management Systems (DMS) USER ADMINISTRATION

3.2.1 User Accounts - Add users, delete users, modify users, add groups, delete groups, and modify groups, establish organization workspaces, add organizations, and exercise quality control of users and groups and view-based permissions. This includes all SHARP DMS systems. The anticipated count of users is expected to be as high as 2,500 with MACOM, Program Management staff, Installation Lead SARCs and Staff, Supervisory SARCs, as well as every Sexual Assault Response Coordinator (SARC), and DPRR Program Management staff.

3.2.2 SMS System Associations - Migrate organizations from the SMS workspace which is developed for the customer in a standalone mode to develop their requirements, to production in which the organization is visible to all SMS users across the Army formation.

3.2.3 Ad-Hoc Reporting - Conduct ad-Hoc report queries to the SMS database to create and preserve individual and aggregated data metrics within SMS to provide required information for discrete users and organizational requirements.

3.3 SHARP DMS TRAINING

3.3.1 Training Models – Provide system enhancements through DMS testing and training models making available up-to-date materials for users on the operation of the DMS software. Users include local administrators, standard and advanced users. User actions and operations include basic site entry and accessing prepared dashboards and related products up to cutting-edge customized views and dashboards.

3.3.2 Training Resources – Materials are in electronic format and paper format as identified by Contract Data Requirements List (CDRL) DD Form 1423, Data Item B003, Functional Category PRF, Performance Specifications, MIL-PRF-32216, entitled Manuals, Technical. Post training materials to the appropriate Web pages..

3.3.3 DPRR Program Office Customer Services - Train Program customers on specific functional role positions including local administrators on the use of all the DMS software and how to control their organizational workspace. Training will be provided in person, by telephone, or by MS Teams. as appropriate. Training is provided primarily to local SHARP Program Managers, Staff, and SHARP SARCs.

3.3.4 DPRR Program Office Specific Training - Train DPRR Program Office and SHARP Program users on specific capabilities in DMS to include accessing existing centrally developed metric hierarchies and dashboards/ COPs as well as customized reports, dashboards, views and related products within SMS. Additional training will be offered and conducted for users defined as Owners, Updaters, or Local Administrators. Synchronize with the SHARP Program Office on new functionality, training concepts, and best practices and relay that information across the DPRR Program Office and SHARP community as appropriate.

3.3.5 Training Supplementations - Provide recommendations on training concepts and coordinate these recommendations with the SMS Program Office in order to facilitate a uniform best practice across SMS. Recommendations can be presented face-to-face, on the phone, by email, or working together on MS Teams in the SMS application. There is no required format.

3.4 DPRR PROGRAM OFFICE-DMS CUSTOMER SUPPORT SERVICES / Help Desk

3.4.1 Customer support - may be provided by email, by telephone, MS Teams, or in person. Customer engagement is by email, telephone, MS Teams, and in person depending on the geographical location and customer preference. Provide quality assurance of users’ employment of SMS. Provide recommendations to organizations on their reporting methodology, data structure, and management of user accounts and group accounts so that they are developed in accordance with the standards set by the SHARP Program Office. Quality assurance is the systematic monitoring and evaluation of how SMS is being used to maximize the probability that minimum standards of quality are being maintained in its intended use. This service is ongoing as customers enter information into SMS. Recommendations be presented face-to-face, on the phone, by email, or working together on MS Teams. There is no required format.

3.4.2 Key Performance Indicators - As required, assist customers with Key Performance Indicator weighting based on SMS customer’s definition of relative importance of cost, schedule, and performance measures.

3.4.3 Customer Report Requests - As required, assist customers in creating reports, dashboards, and briefing books within SMS. All metrics, reports, dashboards, and briefing books should be constructed to the standards defined by the SHARP Program Office so that they create a Common Operating Picture.

3.4.4 Data Uploads - Assist customers uploading data files and background images.

3.4.5 Performance Management - Assist customers in establishing a performance management review using the data, reports, briefing books, and dashboards within SMS.

3.4.6 SMS Data Sets - Assist customers in the use of “SMS Datasets” for reporting on unstructured data as part of the SMS software upgrade to Version 3 within the DPRR Program.

3.5 DPRR PROGRAM OFFICE-SMS HELP DESK - Help desk inquiries involve access to the system, permissions, assistance in navigating through the system, functionality of the system, and reporting bugs. The contractor will provide technical and functional assistance to users by phone, web, and in person. Systematically test, track, and provide technical assistance, in the form of documentation, trouble shooting, and SMS software development/bug resolution, by means of a multi-tiered help desk that leverages lessons learned, best practices, and technical expertise to enable developers to create a functional and efficient system. Each tier of the helpdesk should be comprised of a detailed method for tracking and recommending for corrective action any technical issues, weaknesses, developmental flaws, or areas for improvement that may need to be escalated to the next higher tier of the helpdesk.

3.6 WEB-SERVICES

3.6.1 WEB SERVICES INTERFACES - Coordinate with Army organizations to establish database to database connectivity for the purposes of automated data transactions using web services. Web services require front-end software which communicates with the organization’s source database, formats the database information, and exchanges the database information with an IT system which is also web service enabled. The web service interface may be used as either a provider or consumer of database information.

3.6.2 DATA REPOSITORY - Provide subject matter expertise in designing, developing, and standing-up a centralized data repository for SHARP data points reported either manually or though database-to-database connections. This repository will allow for the collection and aggregation of data, reporting of data, and transfer of data from the repository to the Army Strategic Management System by use of either a database-to-database connection and/or use of SMS Connect.

3.6.3 TECHNICAL ASSISTANCE - Provide technical assistance to customers in uploading hierarchies, data, and users and groups using Scoreboard® a COTS product licensed by the OBT for use as the Army Strategic Management System.

3.7 DPRR PROGRAM OFFICE-DMS SYSTEM ENHANCEMENTS

3.7.1 DMS Enhancements for DPRR

Addition of any enhancements to SMS for the Army SHARP functions should be discussed in Person or over MS Teams prior to the start of each Contracting Year. This will be confirmed with the KO with proper funding allocated from the SHARP Program Office.

3.8 PROGRAM/PROJECT SUPPORT

3.8.1.1 Project Reviews - The Contractor shall attend and participate in formal and informal project reviews and management meetings to review program schedule and milestones, project status and expenditures, and to resolve open technical, integration and other issues as identified as it relates to the DPRR Program Office and other related projects. Other related projects may include verbal and written input to Army and DoD Documents relating to DPRR Program Office.

3.8.1.2 Special Qualifications: Due to the information sensitivity and database access requirements under this task order, all personnel hired under this task order shall require a secret security clearance. All Contractor personnel shall have a minimum of three years’ experience in conducting and handling/safekeeping PII. Contractor personnel shall have experience/understanding of the Army structure, Army Command (ACOM), Army Service Component Command (ASCC), Direct Reporting Unit (DRU), Army National Guard, and Army Reserves components and how they relate to SHARP DMS ICRS Systems. Technical Exhibit (TE) 3 includes a list of DoD 8570.1 Baseline Approved Certifications for performance of PWS tasks. In order to obtain access to the DoD Global Information Grid (GIG), the contractor shall have a certification of DoD Information Assurance Technical (IAT)/Information Assurance Management (IAM) Level I-III depending on their assigned duties as defined in Directive 8570.1M. The contractor’s demonstrated experience and education shall make the SHARP systems less vulnerable through the correction of flaws and implementing controls in the hardware or software. Contractor shall have or equivalent certifications that are approved (as published on the Defense Information Systems Agency (DISA) IASE website, http://iase.disa.mil/) by the office of the Assistant Secretary of Defense for Networks and Information Integration/DoD Chief Information Officer (ASD(NII)/DoD CIO) to meet the minimum IA baseline certification requirements.

3.8.1.3 LEAD IT Specialist: The contractor shall provide a Lead IT Specialist (Lead) who shall be responsible for the oversight and guidance for the IT portion of the contract. The Lead shall have the ability to manage SHARP IT operations, plan and execute all activities within this contract. The Lead shall have a minimum BA/BS degree from an accredited institution, a minimum of ten years’ experience in IT experience, and leadership experience managing at the HQDA (or equivalent other Service Headquarters or DoD level). The Lead shall have a minimum of five years’ experience with Government contracting and processes to include subcontract management, managing budgets, and overseeing invoice processes. A Lead IT Specialist typically requires a combination of technical expertise, leadership skills, and relevant qualifications. Other qualifications commonly sought after for this role:

· Educational Background: A bachelor's degree in computer science, information technology, or a related field is required.

· Technical Skills: Proficiency in various IT domains such as networking, system administration, database management, cybersecurity, and software development is essential. Specific skills may vary depending on the organization's needs, but expertise in relevant technologies and platforms is crucial.

· Leadership Experience: Experience in leading IT teams or projects is highly valued. This includes skills in team management, task delegation, conflict resolution, and fostering a collaborative work environment.

· Communication Skills: Strong verbal and written communication skills are necessary for effectively liaising with team members, other departments, and stakeholders. The ability to convey technical concepts to non-technical audiences is also important.

· Problem-Solving Abilities: IT specialists often encounter complex technical challenges that require analytical thinking and problem-solving skills. The ability to troubleshoot issues efficiently and implement effective solutions is vital.

· Project Management: Familiarity with project management methodologies such as Agile or Scrum is beneficial for coordinating IT projects, allocating resources, and meeting deadlines.

· Certifications: Relevant certifications can demonstrate expertise and enhance credibility. Common certifications for IT specialists include CompTIA A+, Network+, Security+, Cisco Certified Network Associate (CCNA), Microsoft Certified Solutions Expert (MCSE), Certified Information Systems Security Professional (CISSP), and Project Management Professional (PMP).

· Industry Knowledge: Keeping up-to-date with the latest developments and trends in the IT industry is essential for staying competitive and effectively addressing evolving challenges.

· Soft Skills: In addition to technical abilities, soft skills such as leadership, teamwork, adaptability, and attention to detail are crucial for success in a lead IT specialist role.

· Experience: Previous experience in IT roles, preferably with progressively increasing responsibilities, is typically required for a lead position. This experience provides valuable insights into the practical aspects of IT operations and management.

3.8.1.4 Database System Programmer: Focuses on developing and maintaining the ICRS software systems that interact with the ICRS databases, including writing code to query databases, manage data, and build applications that utilize database functionality.