20150910_PWS_Rev_Attach_13_6_month_extension.doc

Multi-Source Assessment and Feedback (MSAF) Information Technology Support

Performance Work Statement

22 July 2015

1. Project Title: Multi-Source Assessment and Feedback (MSAF) Information Technology Support

2. BACKGROUND. The U.S. Army’s Combined Arms Center - Center for Army Leadership (CAL) is the action agent for Leader Development, Leadership Research, Leadership Doctrine, and Professional Military Educational systems to sustain excellence in the Army’s core competency of growing leaders. The mission of CAL includes the identification of training and leader development trends and concepts to improve leader development across the Army.

The Commanding General, Training and Doctrine Command (TRADOC) approved implementation of MSAF on 30 April 2007. The program was implemented in a phased manner in all domains (operational, institutional, and self development) to military leaders , E-5 to E-9, W-1 to W-5, O-1 to O-7, and civilian leaders in the General Schedule, National Security Personnel System, and Senior Executive Services.

This support contract enables CAL to execute the Center’s designated functions of executing the MSAF program and serving as the Army lead for leadership doctrine and leadership development. It will identify leader development trends, requirements, training and education strategies, leadership management and leader development products and services in accordance with TRADOC Regulation 10-5-4. CAL’s Leadership Research Assessment and Doctrine Division (LRADD) has implemented the MSAF program and manages the operations of the program on a daily basis. Key objectives of MSAF are to provide:

· A leader development program focused on increasing self-awareness.

· Assessment instruments consistent with Army leadership doctrine and regulations.

· MSAF products for event planning, training, assessment instruments, and feedback.

· Web-based access from an Army website https://msaf.army.mil.

· Products for use in developmental coaching and self-study.

· Capabilities to assist with interpreting results and planning developmental actions and improvements.

· Training materials for individuals to understand the purpose and process of the MSAF program.

· Privacy and data integrity to ensure leaders their assessment results remain confidential. Executing unit assessments and providing commanders with trend reporting.

Features of the MSAF program are shown in the following diagram.

The MSAF program is operated by government personnel and contract functions and products. The current operating concept includes a) government personnel for oversight and management of the MSAF program and for evaluation functions, b) information technology support, and c) support operations and coaching.

The MSAF IT program incorporates the following elements:

1) The objective Army MSAF program is provided as a leader development program that is focused on increasing self-awareness.

2) The MSAF program uses assessment instruments that are consistent with leadership regulations and doctrine.

3) The MSAF program provides capabilities in accordance with an Army MSAF policy in AR 350-1. The timing of MSAF applications is determined by units and organizations and the MSAF IT capabilities support “on-demand” use. The upper limit of MSAF assessments is projected to be less than 10 across each uniformed leader’s career. The upper limit of MSAF assessments for Army Civilians is comparable, based on length of career.

4) The MSAF planning, training, assessment instruments, and feedback products are provided through web-based delivery.

5) The IT support for the MSAF program will be sustained into the foreseeable future to provide a continuous capability.

6) The MSAF program provides products for use in developmental coaching. Target leaders can take their assessment feedback to those they trust to help them interpret the results and to plan developmental actions. The MSAF program provides training materials for individuals to improve their developmental coaching skills.

7) The system has the following general capabilities.

a. System has multi-capacity server with accessibility using CAC authentication. The web-accessed system provides simultaneous access by multiple participants to meet the estimated needs of Army-wide use and other services and governmental agencies.

b. System is website accessible from high speed and dial up connections.

c. System server uses government furnished servers located at Ft Leavenworth or at a comparable government facility.

d. System complies with all applicable DOD/DA regulations for operations security (OPSEC) and web security (WEBSEC).

e. System is compliant with CTO 07-15.

f. System was built with the goal of a ‘turn-key’ operation for CAL designated administrators, including all features to perform all the required functions.

g. System incorporates mechanisms to provide capabilities to match the following different types of MSAF applications, including uniformed personnel and Army civilians:

i. Personnel assigned to organizations under a modified table of organization and equipment (MTOE). Personnel assigned to organizations under a table of distributed allowances (TDA).

ii. Students or personnel entering Army education system courses.

iii. Individuals who have not had an MSAF opportunity or received a rating and who meet Army policy qualifications to do so.

8) The system has the capability to prepare assessment instruments for administration.

9) The system has the capability to prepare assessment groupings and assignments.

10) The system has the capability to provide assessment assignments upon log-in to the system or to send emails that identify the assessment assignments. Provide assignment notification or invitation to participate based on an administrator’s selection for a given instance.

11) The system supports completion of assessments.

12) The system tracks completion of assessments.

13) The system checks data and prepares feedback.

14) The system provides feedback for presentation to the target leader.

15) The system provides portfolio storage.

16) The system provides the capability for follow-up and evaluation with the target leaders.

17) The system provides the capability for storing, aggregating and analyzing data to support program management and instrument validation and tracking.

3. SCOPE. The contractor shall provide information technology support to operate and maintain the hardware and software components of the MSAF program. This program also allows other than Army personnel to participate in the 360 assessment process due to the Joint nature of Army and DoD operations. MSAF IT also supports all functions described in paragraph 2 above.

4. Applicable documents AND EXHIBITS (CURRENT VERSIONS OF EACH, available through open source)

Army Regulation 25-1. Army Knowledge Management and Information Technology Army Regulation 25-2. Information Assurance Army Regulation 340-21, The Army Privacy Program. Headquarters, Department of the Army: Washington, DC

Army Regulation 350-1, Army Training and Leader Development. Headquarters, Department of the Army: Washington, DC

DA Pam 25-1-1. Information technology support and services DoD Directive 8500.2, Information Assurance (IA) Implementation

DoD Directive 8910.1. Management and control of information requirements DoD Website Administration Policy and Procedures

DoD Directive 5400.11, DOD Privacy Program

DoD 8570.1-M, DoD Information Assurance Workforce Improvement Program

DA PAM 350-58, Leader Development for America’s Army. Headquarters, Department of the Army Washington, DC

DA PAM 600-3, Commissioned Officer Professional Development and Career Management. Headquarters, Department of the Army: Washington, DC

DA PAM 600-25, U.S. Army Noncommissioned Officer Professional Development Guide. Headquarters, Department of the Army: Washington, DC

Field Manual (FM) 6-22, Army Leadership. Headquarters, Department of the Army: Washington, DC

Section 508 of the Rehabilitation Act (29 U.S.C. 794d), as amended by the Workforce Investment Act of 1998 (P.L. 105-220) TRADOC Regulation 350-10. Institutional Leader Training and Education. Headquarters, TRADOC, Fort Monroe, VA

All contractor personnel shall read AR 25-2, Information Assurance, chapters 4-7, in order to familiarize themselves with the government’s guidance on security. They shall also read and understand AR 25-1, Army Knowledge Management & Information Technology, Chapter 5, and Chapter 6, Sections 6-1 and 6-2. Contractor personnel shall protect privacy data that are required in the performance of work in accordance with the Privacy Act of 1974. All contractors shall complete the required annual IA training in order to gain access to the MSAF website and servers.

5. Performance Requirements. The contractor shall perform the following tasks:

5.1 Task 1: Operate, sustain and maintain the program. The contractor shall conduct operation, sustainment, and maintenance of the MSAF information technology capability during the period of the contract. The contractor shall ensure that the MSAF programs can be accessed by users. The contractor shall maintain program-related servers, software, network systems, and data bases. The contractor shall provide technical instructions and documentation on system operation and maintenance. The contractor shall provide all necessary network, system administration, and database administration support to operate the MSAF program. The Contractor shall ensure system connectivity, performance throughout, security validation, availability, data integrity and data recovery. This task includes but is not limited to performing system configurations, establishing network addresses and connections, monitoring system performance, adding and removing users, establishing shared file and print systems, performing hardware and software maintenance and upgrades, conducting system and data backups and recovery, restructuring existing data repositories, executing data loading, establishing batch processes, performing security checks, maintaining certificates of net worthiness when required obtaining and maintaining special software licenses, performing resource management and providing general system IT support required to ensure reliable system operation.

5.1.1 Subtask 1: Maintain MSAF hardware, software, operating system, networking, and security system interoperability. Support IT management including system reviews and approvals. This includes performing system configurations, establishing network addresses and connections, monitoring and analyzing performance of the system, adding and removing users, establishing shared file and print systems, recommending and performing hardware and software maintenance and upgrades paid for by CAL, conducting system and data backups and recovery, restructuring existing data repositories, executing data loading, hosting and linking to software designated by CAL to address developmental improvement training and creating a portal for leader access to the training known as the Virtual Improvement Center (VIC). The MSAF website operates using a SharePoint 2010 environment.

Deliverable: Monthly report of current operational status of all MSAF IT components. See enclosure one.

Minimum Acceptable Standard (MAS): Contractors shall make daily checks on the functionality of the website. Website must maintain an operational status of 98% with an offline status of no more than 2% of the time.

5.1.2 Subtask 2: Design, update, operate, maintain, and administer databases. These databases include ones used to generate and present MSAF capabilities to users, data that is inputted by the user, feedback reports for users, trend reports for unit MSAF assessments, and others designed to address the operability of the MSAF program and perform duties as a System Administrator in accordance with(IAW) AR 25-2 paragraph 3-3. Formal raters of OER/NCOER/TAPES need a lookup capability to confirm to MSAF participation by the rated leader IAW AR 350-1 without being allowed any access to specific feedback on the rated leader. The COR uses reports on system usage including demographics of participants and usage of various MSAF site features (training materials, documents, on-line MSAF program training, and so on). Data bases shall be optimized for accessibility, security, and accuracy. Data bases shall be structured in a relational format to allow grouping of data for 1) calculation and presentation of comparisons and norms in feedback reports, 2) aggregation in unit and institutional roll-up reports and 3) evaluation of instrument measurement qualities and use of system features. The contractor shall maintain documentation on the structure and history of data.

Deliverable: Data structure and history documentation in the form of a log identifying what was changed, when and by whom in MS Excel format and included in report. See enclosure 2 .

MAS: Database 100% accurate.

5.1.3 Subtask 3: Database Administration: Ensure that the databases function properly by having the latest versions of database software installed, databases are properly backed-up, configured and tuned for optimal performance (i.e. appropriate relational table design, field types and lengths, data entry constraints, indexes, etc.). The database schema shall be reviewed and revised as necessary without loss of data as new features/functions are added to the MSAF program. Identified database errors shall be corrected based on the guidance given by the government.

Deliverable: Database schema.

MAS: Contractor shall troubleshoot/resolve technical issues no later than three hours from identification of an incident. In the event of a technical problem that the contractor cannot resolve, the contractor shall provide a written notice to the COR on the same day which, provides details of the nature of the problem and steps that the contractor took to resolve the problem. This downtime does not include events beyond the contractor’s control such as power failure or government-planned downtime.

5.1.4 Subtask 4: Application Operation- Run batch software applications and monitor the execution of software applications identifying software bugs, troubleshooting and providing solutions. Maintain MSAF programmed software with debugs and programmed improvements.

Deliverable: Monthly report identifying all MSAF application improvements. See enclosure one.

MAS: Written report of correction delivered monthly, in MS Office format, which includes all of the information cited in the task. See enclosure 1.

5.1.5 Subtask 5: Maintenance tasks:

Defect identification and analysis - Identify defects so that they can be fixed and avoided in the future and understand how to correct the defect, the cause of the defect, the frequency of the defect and the impact risk associated with the defect.

Defect Correction - Correct defects to improve the quality of the work products.

Defect Status Reporting - Provide quality and effective metrics for the work products and the maintenance team.

Deliverable: MSAF application changes to correct defects. See enclosure 2.

MAS: 100% of defects identified and corrected for the biweekly code push. Those defects that cannot be corrected within the two week code push will be reported to the government with a projected date for correction. The government will determine if the timeline for correction is an acceptable risk.

5.1.6 Subtask 6: Network Administration: Ensure the network hardware components are functioning properly, the correct (i.e. latest) versions of the network software components are installed, route data to their proper destinations, have the required performance, have the required operational availability, and have the required levels of security IAW with the references listed above and any changes to Army or DoD policy that may occur during the contract. Ensure the networks have adequate hardware components and are available when needed to meet scalability requirements. Ensure the data center environments support all relevant, Operational availability, Performance and Scalability requirements. Ensure the server operating systems and the associated client operating systems function properly and that these operating systems function properly together.

Deliverable: Ensure the network hardware components are functioning properly. The system alerts the on call representative when a failure occurs.

MAS: The servers are located at the Fort Leavenworth Network Enterprise Center (NEC) and will require the Contractor to travel to the server location to start the diagnosis and correction of server problems within a nominal response time once on site of no more than 2 hours. Network related hardware and applications available 98% of time, downtime not to exceed 2 hours per occurrence (excludes scheduled downtime for maintenance/upgrades) backup and restore completed successfully 100% of the time with no loss of data within the established time frame for that application or data set.

5.1.7 Subtask 7: Conduct quarterly web site reviews in conjunction with the CAC G6 to ensure that web pages are up to date and do not contain any sensitive information IAW AR 25-1 Chapter 6, Section 6-7, paragraph C.

Deliverable: Conduct quarterly web site reviews in conjunction with the CAC G6 MAS: Identified deficiencies are corrected with 48 hours of identification. See enclosure 2.

5.1.8 Subtask 8: The contractor shall maintain web-based and installed programs on 3 PowerEdge 2950’s, 1 PowerEdge R300, 1 laptop and 3 non-rack-mountable IBM x236, stacked 2 side by side and one sideways across the top. These eight servers for the MSAF system are currently located at the Fort Leavenworth’s Network Enterprise Center (NEC) providing the following functions: 4 WEB( IIS), 1 (ITAP MQ), and 3 SQL( Primary, Mirror, and Witness backup repository). The servers have the the following current software. Microsoft Windows Server 2008 Enterprise Edition; Microsoft SQL Server 2005 Standard Edition; CommVault Backup Software; McAfee Anti-Virus; Visual Studio 2005ServeRAID Manager; Winzip; ActivIdentity; IIS Diagnostics; IIS Resources; Microsoft ASP.NET 2.0 AJAX Extensions; SiteMinder; IBM WebsphereMQ; Metastorm PM4Data; and LogParser 2.2.

Ensure the infrastructure software (e.g., file systems, print services, e-mail systems), middleware (e.g., Web server, application server) software, and browsers function properly.

Deliverable: Install updates as identified and provided by the Fort Leavenworth NEC.

MAS: 100% of all required software installation and updates shall be completed. There shall be, no more than three occurrences in a quarter where updates are completed later than 5 work days beyond scheduled events. The system performance shall not be degraded below 90% of capability because of late or incomplete installation.

5.1.9 Subtask 9: Assess the adequacy of these applications and this hardware for continued supportability, efficiency and effective operation. Recommend upgrades or replacements to the government. Assist the government in providing technical specifications of new applications. Upon government approval install, integrate, maintain, operate and configure new upgrade packages for both the web server operating systems and all application packages as appropriate. The government will provide the appropriate software.

Deliverable: Upgrade and replacement recommendations provided every three months via e-mail and verbal discussions. MSAF 2.0 up a running on CAC-E server farm NLT 1 Oct 2015, MSAF 2.0, CDR360, and Joint360 final architecture, up and running on CAC G-6 server farm NLT 31 Jan 2016 and MSAF 1.0 retired NLT 15 Feb 2016.

MAS: Quarterly report provided to government on last business day of the quarter.

5.1.10 Subtask 10: Non-Network Hardware: Ensure the non-network data center hardware components (e.g., servers, boards, memory, libraries, devices, and peripherals) function properly and adequate hardware components (e.g., tape or disk libraries) will be available when needed.

Deliverable: Upgrade and replacement recommendations provided every three months.

MAS: Monthly report provided to government on last business day of the month. Contractor shall track increased usage and report when participation rates will exceed capacities and projected to cause system outages. See enclosure one.

5.1.11 Subtask 11: Coordination: Ensure the work of the database administrators, network administrators, and operators are coordinated. Systems administration steps shall be properly logged. Contractors shall gather and provide data to assist with program evaluation, which will be conducted by Government personnel to assess program effectiveness. Data shall be derived primarily from system data bases.

Deliverable: Provide monthly report of work items and changes to the database.

MAS: 100% reporting of work items providing status as proposed, active and closed.

5.2 Task 2: The contractor shall operate a helpdesk with a projected demand of 75 help tickets a day. Helpdesk functions include: answering user community questions about their operation of MSAF, maintaining a routine tracking and record-keeping system for help requests. Questions about the operation of MSAF may include questions about the assessment process that are not tied directly to system operation, like planning an assessment, conducting assessments, use of portfolios and feedback, and follow-up.

5.2.1 Subtask 1: The contractor shall operate a helpdesk with a projected demand of 75 help tickets a day. Helpdesk functions include: answering user community questions about their operation of MSAF, maintaining a routine tracking and record-keeping system for help requests.

Deliverable-Helpdesk responses to users about MSAF access, input & reports, event planning, conduct, feedback and follow-up and report in reports manager Service Desk Information

· Hours: Monday through Friday, 0830 to 1630, central

· Phone: 913-563-7239, with voicemail available 24/7

· Holidays: The helpdesk will not be manned on the following holidays:

· New Year's

· Fourth of July

· Memorial Day

· Labor Day

· Thanksgiving and the day after

· Christmas

MAS: The contractor shall provide customer service in a professional, courteous and timely manner and shall respond to 100% of requests. Indications of acceptable performance shall include the absence of negative reports from customers to the government about non-responsive, slow or discourteous help. With helpdesk requests of below 10 per day, the contractor shall initiate assistance no longer than 1 hour after the request is made. When requests are between 10 and 75 a day, the contractor shall initiate assistance no longer than 4 hours after a request is submitted. No more than 1% of customer service requests per month result in valid customer complaints. [Note: a valid customer complaint is concerned with the timeliness, professionalism and courtesy of the customer support staff.] Helpdesk tickets will be logged and tracked under the report manager page at the Administrative Tab of the website.

5.2.2 Subtask 2: Helpdesk shall record and report any program deficiencies identified by users. Summary reports of trends in helpdesk requests and resolution shall be delivered monthly.

Deliverable- Helpdesk summary report in reports manager and monthly report. See enclosure 1.

MAS: Summary reports of trends in helpdesk requests and resolution shall be updated daily in the reports manager section of the administrative website page.

5.3 Task 3: The Contractor shall perform technical security reviews and network analysis to include scanning, testing, and auditing to determine system vulnerability. IAW AR 25-2 and the Army’s IA Training and Certification Best Business Practices, appoint an Information Assurance System Administrator (SA) to enforce the IS security guidance policies as provided by the IAM and perform IASO duties. Enforce system access, operation, maintenance, and disposition requirements. Ensure that personnel meet required security investigation, clearance, authorization, mission requirement, and supervisory approval before granting access to the IS IAW DoDD 8570.1M, IAT/IAM Level II certifications. Conduct required Information Assurance Vulnerability Management scanning and vulnerability assessments with approved software as required by the NEC. Ensure Configuration Management includes all pertinent patches and fixes by routinely reviewing vendor sites, bulletins, and notifications and proactively updating systems with fixes, patches, definitions, and service packs with IAM or IAPM approval. Ensure asset data is entered in the Asset and Vulnerability Tracking Resource (A&VTR) database. Maintain current anti-virus (AV) engines and definitions on all ISs. Provide the government recommendations on suspending user accounts for the following types of actions: actions that knowingly threaten, damage, or harm the IS, network or communications security; revocation, suspension, or denial of security clearance or interim security clearance investigations; or unauthorized use of IS and networks per AR 25-2 paragraph 4–5.s. The appointee shall update his or her user profile in the Army Training and Certification Tracking System at https://atc.us.army.mil with current training and related certifications as outlined in the Army’s IA Training and Certification Best Business Practices, https://informationassurance.us.army.mil). The contractor shall provide NEC with DIACAP network accreditation documentation as requested and IAW NEC accreditation timeline provided by the government.

5.3.1 Subtask 1: The Contractor shall perform technical security reviews and network analysis to include scanning, testing, and auditing to determine system vulnerability.

Deliverables – Complete scans as required by NEC.

MAS: 100% of available systems are reviewed and analyzed every 30 days and reported to MSAF Program Manager in a monthly report. Intrusion detection and protection in accordance with applicable industry standards. See enclosure one.

5.3.2 Subtask 2: Appoint a primary and alternate certified Information Assurance System Administrator (SA) to enforce the IS security guidance policies as provided by the IAM and perform IASO duties.

Deliverable: Two certified SA’s. Certified SA’s will comply with DoDD 8570.1-M, IAT/IAM Level II certifications.

MAS: Certified SA’s must remain current IAW DoDD 8570.1-M and DoD Directive 8500.2, Information Assurance (IA) Implementation.

5.3.3 Subtask 3: Provide the government recommendations on suspending user accounts for the following types of actions: actions that knowingly threaten, damage, or harm the IS, network or communications security; revocation, suspension, or denial of security clearance or interim security clearance investigations; or unauthorized use of IS and networks per AR 25-2 para 4–5.

Deliverable: Report on occurrence when incidents that meet AR 25-2 criteria for removal.

MAS: 100% of reported users that violate AR 25-2 within 24 hours of identification of at risk user. Monthly report provided only on occurrence in memorandum of record format identifying the individual and reason for removal.

5.3.4 Subtask 4: Provide NEC with Department of Defense (DoD) Information Assurance Certification and Accreditation Process (DIACAP) network accreditation documentation as requested and IAW NEC accreditation timeline.

Deliverable: Provide NEC with DIACAP network accreditation documentation as requested.

MAS: 100% complete and accurate. DIACAP network accreditation documentation will be completed and submitted semiannually on April 15th and October 15th to the NEC or dates established by NEC.

5.4 Task 4: The Contractor shall provide ongoing support and recommendations to ensure that the design, layout, and organization of the MSAF site are intuitive and user-friendly, enhance navigation of the MSAF website based on current industry standards, maintain and create new additions and/or changes based on input from MSAF Team. Other user interface upgrades include event statistics capability, preparing a data mining warehouse, Section 508 compliance and developing an MSAF mobile application. Upgrades shall be tested and installed once approved. The contractor shall only use widely implemented languages, standards, and tools in the upgrade and maintenance of the website. The contractor shall avoid proprietary standards, and tools in the upgrade of the website. In instances where an open standards-based solution is not available, the contractor shall adopt the most widely adopted de facto standard consistent with industry best practices. All content delivered by the web server to the client shall be capable of being rendered by the current versions of Internet Explorer and operate in the SharePoint 2010 environment. The contractor shall create the capability to incorporate trends from individual feedback reports for any unit or organization into a Unit Rollup Report while maintaining individual privacy.* *(The contractor shall continue to use the method of entering unit collective event relationship data into the MSAF system using a template created by the unit and imported into the MSAF unit event system by the contractor. (i.e., For Targeted Leader, enter the 3 superiors, 5 peers and 5 subordinates designated to conduct the assessment by the appropriate commander). This method will be used until and automated means of simplifying user interface is developed.)

5.4.1 Subtask 1: MSAF user interface reviews & upgrades.

Deliverables – The Contractor shall provide ongoing support and recommendations to ensure that the design, layout, and organization of the MSAF site are intuitive and user-friendly and enhance navigation of the MSAF website. User interface upgrades include event statistics capability, preparing a data mining warehouse database, Section 508 compliance and developing an MSAF mobile application. See enclosure 1.

MAS: 100 % of website changes which include ease-of-use, user efficiency (ability for a user to get a task accomplished more efficiently and/or quickly without sacrificing accuracy, and performance support (how well the system supports its stakeholder’s goals). This is for both Self-Initiated and Unit MSAF Events. Changes can only be approved by CAL-LRADD. Acceptance by government of recommended user interface upgrades at 6 months and 9 months of all contract years. And within 120 days of receipt of new survey tools and feedback report designs. Upgrades shall be tested before going into production and installed once approved.

5.4.2 Subtask 2: Develop automated means to create a Rollup Report from individual feedback report data.

Deliverables – The contractor shall create the capability to incorporate trends from individual feedback reports (IFR) for any unit or organization into a Unit Rollup Report while maintaining individual privacy.

MAS: Integrate IFR’s previously completed within the last 36 months before the launching of the Unit event. These IFR’s will be the result of a self-initiated or PME/CES individual event conducted prior to the initiation of the MSAF Unit event. These individual results shall be integrated into the new unit event creating an aggregated rollup report of the two datasets, ie. Existing IFR’s and new IFR’s as a result of the unit event. This capability shall be provided NLT month 3 of base year.

5.5 Task 5: The contractor shall implement website changes to host (on the government servers) other Army 360 and non-360 assessments and surveys developed by the government (e.g., multi-source information for command selection boards [e.g., Commander Assessment Tool]; attitude and opinion surveys for CAC; and 360 surveys created by other services and agencies of the federal government). In doing so the contractor shall create access to data and feedback reports in accordance with guidelines provided by the government.

Deliverable – The contractor shall implement website changes to host up to two other 360 and non-360 surveys MAS: The resultant feedback reports properly coded to allow for correct display of responses to survey. Different URL’s associated with each survey instrument and custom designed website skins to reflect different service products and survey instruments (e.g., a website for personnel evaluation will look different than the MSAF website for self awareness and self development). The surveys and website skins shall be fully functional NLT 6 months after receipt of new survey tool.

5.6 Task 6: Maintain system architecture and design for growth in usage and records file management. The Contractor shall stay abreast of new technologies and shall recommend their use to the Contracting Officer Representative to improve capacity as use of MSAF across the Army and DoD increases. The Contractor shall study, test, and investigate new information technologies, and evaluate the feasibility of implementing them to enhance system performance as the MSAF program changes. Contractor shall track MSAF processes and make recommendations to the Government for improving the efficiency and effectiveness of program issues and hardware infrastructure changes. Bi-monthly progress meetings shall be conducted to review recommendations. The government anticipates that these meetings will be in-person at the government’s site, Ft. Leavenworth KS, VTC or online. The government estimate 2 per year in person meetings.

Deliverable – MSAF user data storage review & upgrade report incorporated in monthly report. See enclosure 1.

MAS : Contractor shall ensure the MSAF website is fully operational with no more than 2% down time. If system outages are caused by insufficient capabilities due to increased participation, the contractor shall provide a recommendation on hardware and software changes needed to maintain the integrity of the system. This is intended to avoid obsolescence and associated sustainment problems; accommodate future growth potential to take advantage of greater efficiencies, lower costs, and other benefits provided by newer technology. This will be a quarterly review provided to the government on the last business day of each quarter. If system outage was caused by other reasons, corrections shall be made to resolve the problem, i.e. coding corrections, debugging.

5.7 Task 7. Maintain and update training and educational products for the Virtual Improvement Center (VIC) tab on the website. Maintain on-line help on system-specific operations controls for users. The government will provide training and educational materials to be posted by the contractor to the VIC.

Deliverable- Maintain and update training and educational products for the Virtual Improvement Center (VIC) tab on the website provided by the government.

MAS: Updated materials shall be posted and available for customer use 30 days after receipt from the government. Materials shall be tested in the staging server before put into production. See VIC tab on MSAF website to understand type of materials that are found there.

5.8 Task 8. Host a 360 degree assessment for use by G/FOs assigned to the Joint Staff and Combatant Commands.

Deliverable- The contractor shall implement website changes to host (on the government servers) the JCS 360 assessment and survey developed by the government. In doing so the contractor shall create access to data and feedback reports in accordance with guidelines provided by the government.

MAS: The resultant feedback reports properly coded to allow for correct display of responses to survey. Contractor shall design a custom "splash" page that identifies the assessments for the JCS specific application. Designed website skin to reflect different service products and survey instruments (e.g., a website for personnel evaluation will look different than the MSAF website for self awareness and self development). The surveys and website skins shall be fully functional NLT 31 May 2014.

5.9. Task 9: Transition Plan for Phase Out: The Contractor shall prepare a Transition Plan to minimize any decreases in productivity and to prevent negative impacts on service due to contract transition. The Contractor shall have personnel on board during the thirty (30) calendar day phase out period. A Transition Plan shall be developed to focus on the following Tasks and Subtasks as stated above:

Task 5.1., Subtasks 1,2,4 and 5.

Task 5.2., Subtask 1.

Task 5.3., Subtask 1.

The Contractor shall review and revise the transition plan as processes change.

5.9.1. Deliverable: A transition plan delivered in MS Word format with an associated MS Excel file with project data and identifies milestones and critical tasks, addressing each of the required tasks listed above.

5.9.2. Standard: The transition plan shall be delivered to the COR and KO, via e-mail, no later than 15 October 2015. The Government will have five business days to review the deliverable and provide comments back to the Contractor. The Contractor shall submit the final deliverable within five business days of receiving the Government’s comments.

5.10. Task10.5, Execute Phase Out.

5.10.1 Deliverable: Upon notification from the KO, via modification to exercise this period, the contractor shall execute the phase out plan accepted under Task 5.4, above.

5.10.2. Standard: In accordance with the accepted Transition Plan.

5.11. Task 11: Create an MSAF/CDR/Joint360 testing and development environment and configure MSAF/CDR/Joint360 MSAF 2.0 production servers end state by repurposing MSAF 1.0 servers.

5.11.1. Deliverable. A development and testing environment for MSAF/CDR/Joint360.

5.11.2. Standard. Development and testing environment that mirrors the MSAF/CDR/Joint360 production environment functionality with all DoD required security IVAM’s and STIG’s NLT 15 FEB 2016.

6. SECURITY. The information on the MSAF servers will be unclassified, but sensitive. The individual assessment data and reports will be treated as personal, For Official Use Only. Unit Rollup Report data are For Official Use Only. Programmers and all contract personnel with access to system data and records shall sign non-disclosure statements to ensure information about each participant is kept confidential.

6.1. AT Level I Training. This provision/contract text is for contractor employees with an area of performance within an Army controlled installation, facility or area. All contractor employees, to include subcontractor employees, requiring access Army installations, facilities and controlled access areas shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee, to the COR or to the contracting officer, if a COR is not assigned, within 30 calendar days after completion of training by all employees and subcontractor personnel. AT level I awareness training is available at the following website: https://atlevel1.dtic.mil/at.

6.2. Access and General Protection/Security Policy and Procedures. This standard language text is for contractor employees with an area of performance within an Army controlled installation, facility or area. Contractor and all associated sub-contractors employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DoD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

6.3. iWATCH Training. This standard language is for contractor employees with an area of performance within an Army controlled installation, facility or area. The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employees commencing performance with the results reported to the COR NLT 15 calendar days after completion of training.

6.4. Contractor Employees Who Require Access to Government Information Systems. All contractor employees with access to a government info system must be registered in the ATCTS (Army Training Certification Tracking System), and must successfully complete the DoD Information Assurance Awareness prior to access to the IS and then annually thereafter.

6.5. Level I OPSEC Training. Per AR 530-1, Operations Security, new contractor employees must complete Level I OPSEC training within 30 calendar days of their reporting for duty. All contractor employees must complete annual OPSEC awareness training.

6.6. Information assurance (IA)/information technology (IT) training. All contractor employees and associated sub-contractor employees must complete the DoD IA awareness training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M and AR 25-2.

6.7 Information assurance (IA)/information technology (IT) certification. Per DoD 8570.01-M , DFARS 252.239.7001 and AR 25-2, the contractor employees supporting IA/IT functions shall be appropriately certified upon contract award. Contractor personnel must be certified at the IA Technical Level II as stipulated in DoD 8570.01-M. The applicable Computing Environment (CE) or Operating System (OS) is Windows Server 2008. The contractor must provide proof of all applicable certifications for performance under this contract at the Post Award Conference (PAC). Additionally, contractor personnel must meet the requirements of AR 25-2 for IT Level II functions, which includes a favorable National Agency Check with Local Agency and Credit Checks (NACLC) investigation.

7. Government-furnished equipment and information (GFE/GFI).

Software and host server system will be provided by the government. Additional government server(s) will be provided as requested by the contractor and validated by the government. The government will also provide up to five laptop or desktop computers for the purposes of development, testing and access to the website.

8. PLACE OF PERFORMANCE. The work shall be performed at the contractor’s site and at Fort Leavenworth, KS. All web staging and preproduction IT activities will be performed at the contractors site. All physical maintenance of production servers will be on the servers located at Fort Leavenworth, NEC. Coordination meetings will occur at CAL, Fort Leavenworth. Server operation and maintenance will be co-located at the server location or from secure, remote access.

9. PERIOD OF PERFORMANCE. The period of performance will begin with the start date specified by the delivery order and ending twelve (12) months thereafter with 2 one year option periods.

� EMBED Visio.Drawing.11 ���

PAGE

Leader

Superiors

Others

Peers

Subordinates

360 Assessment

Valid Measurement

Protected Portfolio

Virtual Improvement Center/ Coaching

Personalized Feedback

All Cohorts www Accessibility

All LD Domains

Cadre Coaching dL Training

Self-Aware Leader

Roll-up Reports

MSAF Features

OER Box Check

United States Army Combined Arms Center image9.wmf image10.png image11.wmf image12.wmf image13.wmf image14.emf image15.png image16.jpeg image1.wmf image2.jpeg image3.wmf image4.jpeg image5.png image6.png image7.wmf image8.wmf

_1402744984.vsd

Internet�

LEAVC2CALWEB01

192.33.8.200/201