W91RUS-09-R-0030_Amend05.doc

SECTION SF 30 BLOCK 14 CONTINUATION PAGE

SUMMARY OF CHANGES

SECTION SF 30 - BLOCK 14 CONTINUATION PAGE

The following have been added by full text:

BLOCK 14 CONT- AMEND 05

The purpose of this Amendment is to revise the following areas of solicitation W91RUS-09-R-0030:

1. Section C, Performance Work Statement (PWS):

a. Revise Paragraph C.3.8.8.1.

b. Revise Paragraph C.3.8.4.4.6.

c. Revise Paragraph 3.10.2.6.6.

d. Revise Paragraphs C.4.5.4 and C.4.5.5 by deleting original verbiage and change to Reserved.

e. Replace Paragraphs C.4.15 to C.4.15.4 with Paragraphs C.4.15; C.14.5.1 – C.14.5.1.1; C.14.5.2

– C.14.5.2.3; C.14.5.3; and C.4.15.4.

2. Section J, Technical Exhibit 2 -- TE2 Supported Locations

a. Revise the Requirement Column for C.3.2.3.13, Exchange Senior Systems Engineer to Exchange Systems Engineer.

b. Revise the Requirement Column for C.3.2.3.14, ESM Senior Systems Engineer to ESM Systems Engineer.

c. An updated Technical Exhibit 2 -- TE2 Supported Locations is provided under separate cover.

3. Section M, Evaluation Factors for Award

a. Section M.1A- Basis for Award: Delete “…a rating of no less than “Relevant” under the Past Performance Relevancy Ratings and…”

b. Section M.1C- Evaluation Approach: Paragraph M.1C(5)b.4.- Small Business Participation Factor. Delete original verbiage and change to Reserved.

4. All revisions are indicated by a vertical line in the left margin of the applicable page.

5. See Summary of Changes.

SECTION C - DESCRIPTIONS AND SPECIFICATIONS

The following have been added by full text:

PWS UPDATED 11 OCT 2012

SECTION C

PERFORMANCE WORK STATEMENT (PWS)

OPERATIONS, MAINTENANCE, AND DEFENSE OF ARMY COMMUNICATIONS IN SOUTHWEST ASIA AND CENTRAL ASIA

(OMDAC-SWACA)

11 October 2012

PERFORMANCE WORK STATEMENT

Table of Contents

C.1.0 Introduction and Background

C.2.0 Scope

C.3.0 Technical Requirements

C.3.1 Project Management

C.3.2 Southwest Asia (SWA) Theater Network Operations and Security Center (TNOSC) (Option)

C.3.2.1 TNOSC Background

C.3.2.2 TNOSC Management

C.3.2.3 Network Engineering

C.3.2.4 Network Information Assurance (IA)/Computer Network Defense

C.3.2.5 Enterprise Systems Operations (SysOps)

C.3.3 Regional Network Operations and Security Center (RNOSC)

C.3.3.1 RNOSC Background

C.3.3.2 RNOSC Management

C.3.3.3 Service Desk/Network Control

C.3.3.4 Network Management

C.3.3.5 Network Information Assurance

C.3.4 Post/Camp/Station (P/C/S) Support

C.3.4.1 P/C/S Background

C.3.4.2 P/C/S Management

C.3.4.3 P/C/S Network Administration

C.3.4.4 P/C/S Systems Administration

C.3.4.5 Information Assurance Vulnerability Management (IAVM)

C.3.5 Coalition Military Network (CMN HUB)

C.3.5.1 CMN Hub Satellite System

C.3.5.2 CMN NOC

C.3.5.3 CMN remote Satellite Terminal/Sites

C.3.6 Communications Support Services

C.3.6.1 Technical Control Facility (TCF)

C.3.6.2 Video Teleconferencing (VTC)

C.3.6.3 Area Processing Center (APC)

C.3.7 Telephone, Inside Plant, Outside Plant, and Cable

C.3.7.1 Inside Plant (ISP)

C.3.7.2 Outside Plant (OSP)

C.3.7.3 Telephone Poles and Pedestals

C.3.7.4 Manholes

C.3.7.5 Switchboard Operations

C.3.7.6 Telephone Support Operations

C.3.7.7 Billing Services

C.3.7.8 Command and Control Switching Systems (CCSS) Defense Red Switch Network (DRSN)

C.3.7.9 Installation Public Address Systems

C.3.7.10 Cable Television (CATV)

C.3.8 Transmission Systems

C.3.8.1 Earth Terminal Complex (ETC)

C.3.8.2 Defense Satellite Communications Systems (DSCS)

C.3.8.3 DSCS/Standardized Tactical Entry Point (STEP)

C.3.8.4 Regional Hub Node (RHN)

C.3.8.5 Tactical Satellite (TACSAT) Radios

C.3.8.6 Frequency Modulated (FM) Radio Systems

C.3.8.7 Portable Radios

C.3.8.8 Microwave Radios

C.3.9 Facilities

C.3.9.1 Uninterruptible Power Supplies (UPS)

C.3.9.2 Generators

C.3.9.3 Heating, Ventilation, and Air Conditioning (HVAC) Equipment

C.3.9.4 Electrical Distribution Systems C.3.10 Theater Logistics Support Facility (TLSF)

C.3.10.1 General

C.3.10.2 Maintenance

C.3.10.3 Supply

C.3.10.4 Warehouse Operations

C.3.11 Configuration Management (CM)

C.3.11.1 Configuration Management

C.3.11.2 Drawing Maintenance

C.4.0 Administrative Requirements

C.4.1 Phase-In/Out

C.4.2 Government Property

C.4.3 Contractor Provided Equipment and Material

C.4.4 Hours of Operation and Call-Out (Overtime) Hours

C.4.5 Training

C.4.6 Travel

C.4.7 Security

C.4.8 Exercises and Contingency Missions

C.4.9 Contractor Tasking Procedures

C.4.10 Conflicting Guidance

C.4.11 Records/Data Management

C.4.12 Common Access Card (CAC)

C.4.13 Access to Protected Information

C.4.14 Personnel Requirements

C.4.15 Information Assurance (IA)

C.4.16 Safety

C.4.17 Workload Data

C.4.18 Quality Control Plan (QCP)

C.4.19 Quality Assurance (QA)

C.4.20 Accounting for Contractor Support

C.4.21 Information Technology Infrastructure Library (ITIL)

C.4.22 In Process Reviews (IPR)

C.4.23 Program Management Reviews

C.4.24 Contractor Identification Requirement

C.5.0 Deliverables

C.5.1 Plans and Reports

C.5.2 Trip Reports

C.5.3 Estimate to Complete Report

C.5.4 Force Protection Reporting

C.5.5 Personnel Data Report

Applicable Documents

Technical Exhibit 1 TE1, Government Furnished Property Listing

Technical Exhibit 2 TE2, Supported Locations

Technical Exhibit 3 TE3, Government Furnished Housing

Technical Exhibit 4 TE4, Operation and Maintenance Equipment Listing

Technical Exhibit 5 TE5, Tower Listing

Attachment 1

Manuals, Forms, and Publications

Attachment 2

Plans and Reports

Attachment 3

Glossary of Acronyms and Abbreviations

Attachment 4

Performance Metrics

C.1.0 Introduction and Background. The mission of the 160th Signal Brigade is to maintain a forward-stationed, theater strategic signal brigade for the Operation, Maintenance, and Defense of Army Communications (OMDAC), which supports the Army Operational Base Communications Information Systems and infrastructure in support of USCENTCOM forces. The contract supports the 160th Signal Brigade and its subordinate battalions' missions in support of the U.S. Army Forces, US Central (ARCENT) and U.S. Central Command (CENTCOM) mission for their areas of responsibility. This contract facilitates the 160th Signal Brigade’s responsibilities and provides for more efficient operations in the Area of Responsibility (AOR). The overall flexibility of the contract has allowed the 160th Signal Brigade and NETCOM to meet communications requirements that may have been undefined at the time the contract was awarded.

C.2.0 Scope. The Contractor shall provide technically qualified personnel that understand, speak, read, and write the English language and provide operation and maintenance (O&M) support of Title X communications equipment and information systems under the purview of the Network Enterprise Technology Command/9th Signal Command (Army) (NETCOM/9th SC (A)), 160th Signal Brigade and its subordinate units in the Southwest Asia (SWA) Theater Network Operations Security Center (TNOSC (Optional)). While communications services are currently provided in Afghanistan, Iraq, Kuwait, and Qatar, the possibility exists that the 160th Signal Brigade mission could expand into other Southwest Asia or Central Asia locations. The Contractor shall provide all management, project management, administration, personnel, services, parts, supplies, tools, leased vehicles (quantity approved by the Government), overtime, travel, training, and equipment (except for Government-Furnished Property (GFP), and Government-provided services as stated herein) required to perform the O&M, and repair of communication equipment, systems and equipment supported in Technical Exhibit (TE2) locations. Locations may change depending on the mission requirements of the 160th Signal Brigade and its subordinate units. The Contractor shall perform O&M of Information Technology (IT) environment, which includes any hardware, software, application, tool, system, or network used by the Government, whether developed, leased, or commercially purchased. The Government requires ITIL-compliant Contractor performance on tasks employing agency-specific or unique hardware and software in both classified and unclassified network environments. Work shall include legacy, current, and new systems at various lifecycle stages. The Contractor shall perform O&M services to support the Theater Network Operations Security Center (TNOSC), Regional Network Operation Security Centers (RNOSC), Technical Control Facilities (TCF), Earth Terminal Complex (ETC), Defense Satellite Communications Systems (DSCS), Standardized Tactical Entry Point (STEP), Regional Hub Node, (RHN), Defense Red Switch Network (DRSN), facilities, and future requirements identified in this Performance Work Statement (PWS). The O&M responsibility includes all communications hardware, software and Network Operations tools (NETOPS), Computer Network Defense (CND), Information Assurance (IA), Enterprise System Operations (SysOps), Network Management, and Configuration Management (CM) currently being used, developed and implemented by the Government for the duration of the contract. The Contractor shall also perform Inside Plant (ISP) and Outside Plant (OSP) O&M, installation and de-installation of communications equipment, O&M of Cable Television (CATV), and public address systems. The Contractor shall perform work required to move equipment in Government-provided transportation. The Contractor shall provide Network engineering; operate Help Desks, Service Desks, Facilities Control Office (FCO), and the Theater Logistics Supply Facility (TLSF); perform supply functions; and provide logistics support. Current locations and systems to be supported are specified in TE1, TE2, and TE4. This contract provides hands-on operations, maintenance and repair type services for communications facilities (RNOSC, TNOSC, TCF, Satellite Terminals, etc.) only. Staff support services are provided under another contract and shall not be duplicated under this contract. Operations, maintenance, and repair service for facilities other than communications facilities (barracks, warehouses, etc) is provided by the local Department or Public Works and shall not be duplicated under this contract. The Contractor shall be required to continue performance during peace, crisis, hostilities, and war operations.

C.3.0 Technical Requirements.

C.3.1 Project Management. The Contractor shall provide Project Managers (PM) that are knowledgeable and experienced in all aspects of project operations defined in this PWS. The Contractor shall have one PM physically co-located with the 160th Signal Brigade Headquarters (currently located at Camp Arifjan, Kuwait). The PM shall perform overall managerial duties necessary for the successful performance of the contract. The Contractor shall provide Country Managers for Afghanistan, Kuwait and Iraq knowledgeable and experienced in management of all aspects of communications within their designated Area of Responsibility (AOR). Countries that do not have a Country Manager shall have Site Managers or Site Lead Technicians, all of which shall be certified in Security+. Site Managers or Site Lead Technicians, who shall be responsible for the overall operations of the their sites, shall be the Government’s primary point of contact for the designated Government Contracting Officer’s Representative (COR) for the day-to-day operation and maintenance (O&M) of each requirement and installation (site) where Contractor personnel are located. Designations shall be submitted to the KO and COR by e-mail, ten calendar days prior to contract performance. Site Managers or Site Leads shall receive and execute technical taskings from the designated installation (site) COR. The Site Managers or Site Leads shall report information as required by this performance work statement, appropriate regulations and guidelines, or as tasked by the COR to the local Government representative on outages and equipment status. Site Manager and Site Lead positions that are also in an Information Technology/Information Assurance (IT/IA) position must meet the requirements outlined in the DD 254, paragraph C.4.15 of the PWS, and Technical Exhibit 2. Site Manager and Site Lead positions that are not providing IT/IA services fall under management and are considered a General User with no elevated privileges required. The PM, Country Manager, and Site Managers or Site Lead Technicians, or their designated representative, shall be able to be contacted by the COR at all times. The PM shall maintain an accurate listing of all country managers, site managers, and site leads with contact information and provide it to the COR as changes occur. The Contractor shall designate an individual authorized to act in the manager's absence, for each site identified in TE 2. This individual shall be authorized to act on the Contractor’s behalf 24 hours a day, 7 days a week, 365 days per year. The Contractor shall be responsible for full performance of services during any absence of employees.

C.3.2 Southwest Asia (SWA) Theater Network Operations and Security Center (TNOSC) (Option).

C.3.2.1 TNOSC Background. The TNOSC located in Kuwait is responsible for management of subordinate U.S. Army Command, Control, Communications, and Computers (C4) units providing O&M support to the 160th Signal Brigade and its units. The TNOSC is responsible for monitoring and managing Theater-wide Army network assets, Installation Information Assurance Architecture (I2A2) security elements, and critical systems and services within the 160th AOR. The TNOSC conducts and supports Network Operations (NETOPS) for assigned portions of the Global Information Grid (GIG) in the 160th Signal Brigade Area of Responsibility (AOR). The TNOSC is the central hub in theater for information and activities of the Army portions of the GIG. The TNOSC provides management and control to ensure reliable and seamless communications support to the Warfighter. The TNOSC provides a single point of coordination for end-to-end connectivity for strategic communications in the AOR network GIG. The TNOSC assists in securing networks and reports the status of any global network outage that has the potential to impact the theater organizations. The TNOSC is responsible for providing assured network access, assured information and network protection, and assured information delivery from a theater-level perspective for all networks in peace, crisis, and war 24 hours a day, 7 days a week, shift work is required. Although the TNOSC is currently located in Kuwait, the possibility exists that the TNOSC may have to provide forward support elements into other Southwest Asia or Central Asia locations.

C.3.2.2 TNOSC Management. The Contractor shall provide daily operational guidance and support within the SWA TNOSC Theater of Operations. The Contractor shall oversee, develop, and recommend improvements to current common practices and procedures for monitoring and notification of outage reporting, configuration management, proactive maintenance processes, leading restoration activities, and implementation of new elements and services. The Contractor shall ensure compliance with the approved Standard Operating Procedures (SOP) across all functional areas which includes, but is not limited to Network and Systems Operations, Network Management, Information Assurance/Computer Network Defense (IA/CND), and Service Desk requirements, which include incident, problem, configuration, and change management. The Contractor shall maintain situational awareness on all major projects and personnel and develop and recommend new management tools and processes to improve operation capabilities. The Contractor shall provide guidance, direction, and support for the resolution of difficult and complex issues as they arise. The Contractor shall inform and update the COR and TNOSC Director on all major issues and concerns on the day to day operation of the TNOSC.

C.3.2.3 Network Engineering.

C.3.2.3.1 Wide Area Network (WAN) Engineering. The Contractor shall design and troubleshoot Wide Area Networks (WAN) and Local Area Networks (LAN) as tasked. The Contractor shall use the best commercial engineering disciplines as well as current information technology to support the TNOSC mission. The Contractor shall have expert knowledge with layer 2 and layer 3 technologies with a focus on Cisco networking equipment (or future NETOPS tools), specifically routers, switches, firewalls, Intrusion Detection System/Intrusion Prevention System (IDS/IPS), etc. The Contractor shall possess a detailed knowledge and experience with Open Short Path First (OSPF), Enhanced Interior Gateway Routing Protocol (EIGRP), and Border Gateway Protocol (BGP). The Contractor shall evaluate network performance and make adjustments to the network infrastructure hardware and software to include, but not limited to, routers, switches, firewalls, and intrusion detection/prevention devices, in order to improve and maintain network performance. The Contractor shall have expert networking experience as well as LAN/WAN optimization experience. The Contractor shall create and verify the existence of detailed requirements definitions, fully developed project plans with milestones and timelines, the identification of necessary resources and the successful completion of the project within budget and on time. The Contractor shall execute best communication engineering practices in network builds, integration, testing and packaging of infrastructure documentation and application solutions, IAW DOD, Army, CENTCOM, DISA, TNOSC, 335th Sig Cmd, and 160th Sig Bde regulations, bulletins, manuals, pamphlets, circulars, standards and other applicable directives to include, (DISA) Security Technical Implementation Guide (STIG), which come out quarterly or as needed from the Information Assurance Support Environment website, http://iase.disa.mil/. DISA STIG, Network Infrastructure Technology Overview, Version 8, Release 3, 27 August 2010, DISA STIG, Enclave, Version 4, Release 3, 28 January 2011, DISA STIG, DoD Internet-NIPRNet Demilitarized Zone (DMZ) Increment 1, Phase 1, Version 1, Release 2, 26 February 2010, DISA STIG, REL LAN Embedded Security Technical Implementation Guide, Version 1, Release 2 , 25 Jun 2010, DISA STIG, Access Control in Support of Information Systems, Version 2, Release 3, 29 October 2010, AR 25-1 Army Knowledge Management and Information Technology, AR 25-2 Information Assurance, DA PAM 25-1-1 Information Technology Support and Services. (See Attachment 1)

C.3.2.3.2 WAN Security Engineering. The Contractor shall provide network security policy recommendations, project planning, change control, firewall management/release updates, and routing Access Control List (ACL) management. The WAN Security Engineers are responsible for configuration policy enforcement, routine maintenance, Virtual Private Network (VPN) policy recommendations, routing policies for Active Directory (AD) domain controllers, IDS, Exchange, and system maintenance.

C.3.2.3.3 Network Management Engineering. The Contractor shall provide network management (currently Spectrum and eHealth) Enterprise Management support to all levels of the network. The Contractor is responsible for mapping and maintaining current configurations from the Tier zero to Tier one connections. The Contractor is responsible for installations, upgrades, support, and problem determination for the UNIX and latest Windows operating systems and the appropriate licensed software products. The Contractor shall maintain Spectrum and any other theater-wide network management application to include installing firmware, software distribution, monitoring, and remote control within UNIX, Windows-based, and Active Directory environments. The Contractor shall provide answers to general and detailed technical questions on all supported systems. The Contractor shall install, setup and maintain Spectrum, eHealth, and other network management tools as required by the Government. The Contractor shall configure and update the domain name server on existing workstations. The Contractor shall also work with the Action Request Center (ARC) to provide monitoring support for all of the networks in the theater of operations. The Contractor shall identify potential problems based on information provided by their management systems and report the issues to the Action Request Center (ARC). The Contractor shall ensure that Spectrum and eHealth are accurate representations of the actual network.

C.3.2.3.4 Service Desk. The Contractor shall manage, monitor, and maintain situational awareness of all network and system entities under the responsibility of the TNOSC. The Contractor shall act as a single point of contact for all communications needs and perform Enterprise services as required. The Contractor shall be the focal point for reporting all incidents (disruptions or potential disruptions in service availability or quality) and user POC for Service Requests (routine requests for services). The Contractor shall facilitate problem resolution by monitoring and reviewing tickets, gathering information on outages, and updating service tickets throughout the resolution process in order to provide the customer with feedback and/or resolution information as needed. The Contractor is responsible for the incident (currently Remedy) tickets from start until resolution, confirmation and closure of ticket once escalated to the TNOSC, while keeping the customer informed of progress IAW with the timelines set forth in paragraph C.3.4.3.4 of the PWS. The Contractor shall work closely with all entities to ensure tickets are updated accurately and with the current information and provide technical and operational support to functional users by managing, monitoring, and maintaining situational awareness of networks and systems under the responsibility of the TNOSC. The Contractor shall provide initial response to outage, degradation, or other events affecting systems and networks under the responsibility of the TNOSC in assigning trouble tickets to the appropriate section.

C.3.2.3.5 Circuit Engineering. The Contractor shall support the Government with the overall management of the theater Enterprise transport layer (long haul) communications systems, i.e., microwave, multiplexer (Promina/Asynchronous Transfer Mode(ATM) or future NETOPS tools) and circuit/cable backbone for the theater. The Contractor shall serve as the Subject Matter Expert (SME) for all multiplexer (MUX) based equipment within the assigned theater and have an in-depth knowledge of various types of MUX equipment. The Contractor shall regulate Theater traffic (load balance) in order to obtain high network utilization and avoid congestion through traffic shaping, congestion control, bandwidth allocation and flow control. The Contractor shall provide analysis of maintenance failures, research trends and causes of failures, and recommend solutions to avert future failures. The Contactor shall support the Government in managing and working with vendors for all physical aspects of system expansion or system upgrades and troubleshooting. The Contractor shall conduct diagnosis and recommend solutions to assure all hardware and network related problems are resolved. The Contractor shall work with engineers from the 160th Signal Brigade, 335th Theater Signal Command, and DISA to engineer new circuit requirements and manipulate the existing circuit environment to ensure the most efficient use of our communications resources. The Contractor shall maintain accurate theater and regional level transport diagrams as well as site level rack elevations for all transport equipment.

C.3.2.3.6 Circuit Action Support. The Contractor shall manage, monitor and maintain situational awareness of all circuit activations and deactivations under the responsibility of the TNOSC. The Contractor shall provide direct support to the ARC and Network Operations section for all circuit and trunk activations and deactivations. The Contractor shall provide operational status reporting (IAW DISAC 310-130-2) to the appropriate operations center as directed by the COR/TPOC relating to network operations, and participate in inter-TNOSC information dissemination IAW DISAC 310-130-2. The Contractor shall provide support in preparing and presenting activation and deactivation reports for the ARC and provide technical and operational support to functional users. The Contractor shall receive feeder request for service requests from customers, gain validation and submit the Request for Service (RFS) to DISA. The Contractor shall maintain an RFS tracking database that displays the current status of all circuits and RFS actions in theater and coordinate implementation and installation of circuits with DISA, RNOSCs, Army Technical Control Facilities (TCF), and using units until the circuit is accepted. The Contractor shall coordinate circuit implementation troubleshooting as required, ensure the Circuit Control Office submits In-Effect Reports in accordance with DISA directives when the circuit is accepted, and coordinate with the DISA-CENT Field Office for additional Tier 0 services for 160th AOR sites as required.

C.3.2.3.7 Authorized Service Interruptions/Hazardous Conditions (ASI/HAZCON). The Contractor shall monitor and maintain situational awareness of all ASIs and equipment placed in HAZCON status under the responsibility of the TNOSC and provide direct support and current ASI and HAZCON information to the ARC. The Contractor shall provide technical and operational support to functional users, support in preparing and presenting HAZCON/outage reports for the ARC, monitor HAZCON outages, and compile outage trend analysis reports for the ARC. The Contractor shall provide support in operational status reporting (IAW DISAC 310-130-2) to the appropriate operations center as directed by the COR/TPOC, participate in inter-TNOSC information dissemination, provide initial response to events detected, and assign trouble tickets to the appropriate TNOSC division or team for further analysis and resolution.

C.3.2.3.8 Voice Systems Engineering. The Contractor shall provide expertise centered on an in-depth knowledge of voice switching communications equipment and networking devices. The Contractor shall set up and configure major voice systems employed throughout the AOR and perform repairs down to the Lowest Replaceable Unit, i.e., circuit cards, wiring harnesses, or mounted components. The Contractor shall provide an expert level knowledge of system interfaces and how each component or switching device is integrated into the military communication network; provide analysis of maintenance failures, research trends and causes of failures; and recommend solutions to avert future failures. The Contractor shall provide hardware and software expertise and resolve problems at field locations as required; provide a working knowledge of basic electronics, including analog and digital logic, multiplexing, modulation techniques, and switching; and provide working knowledge of specialized Test, Measurement, and Diagnostic Equipment, (TMDE) (i.e., power meters, oscilloscopes, digital data analyzers, transmission test sets, frequency counters, and signal generators) as well as design tools for troubleshooting, identifying and repairing equipment. The Contractor shall operate and troubleshoot Communications Security (COMSEC) equipment (i.e., KG-95, KIV-7, KIV-19, KG-175) and provide operational assessments of networks. The Contractor shall update and consolidate network diagrams for the SWA theatre using Microsoft (MS) Visio or the current drafting tool.

C.3.2.3.9 Voice Over IP (VoIP) Engineering. The Contractor shall work with the Government to provide implementation of new, existing, and future VoIP (to include Voice Over Secure Internet Protocol (VoSIP)) technology utilizing the current industry best practice implementation to include, but not limited to, Cisco Call Manager and Unified Communications systems. The Contractor shall provide expert technical support for existing and growing VoIP networks, System upgrades, and equipment purchases. The Contractor shall manage and maintain the Tier 1 Cisco Call Managers, Gatekeepers and Gateway equipment, if applicable, on all networks. The Contractor shall monitor and identify capacity, quality and performance issues for VoIP traffic to ensure continued, uninterrupted operation of telephony systems. The Contractor shall collaborate with all sections within the Network Operations Security Centers (NOSC) to ensure that VoIP traffic does not interfere with or hinder network data traffic. The Contractor shall provide 24/7 support for all VoIP operations and maintenance requirements. The Contractor shall prepare, maintain, and review circuit level voice IP drawings according to CENTCOM Standards. The Contractor shall coordinate with Government representatives to develop VoIP Tactics, Techniques, and Procedures (TTP) for VoIP implementation within the theater. The Contractor shall perform analysis of VoIP degradations and failures, and then provide trend analysis and recommendations to the NOSC director to avert future issues. The Contractor shall provide the IA section with completed and accurate VoIP Diagrams. The Contractor shall possess a Cisco Certified Voice Professional (CCVP) certification.

C.3.2.3.10 Transmission Engineering. The Contractor shall support the Government with the overall management of the theater Enterprise transport layer (long haul) communications systems, i.e., microwave, multiplexer (Promina/ATM) and circuit/cable backbone for the 160th AOR. The Contractor shall serve as a subject matter expert (SME) for all MUX based equipment within the AOR and have an in-depth knowledge of various types of MUX equipment. The Contractor shall be responsible to balance traffic load in order to obtain high network utilization and avoid congestion through traffic shaping, congestion control, bandwidth allocation and flow control. The Contractor shall analyze maintenance failures, research trends and causes of failure and recommend solutions to avert future failures. The Contractor shall operate and troubleshoot Communications Security (COMSEC) equipment (i.e., KG-95, KIV-7, KIV-19, KG-175) and provide operational assessments of networks. The Contractor shall diagnosis and recommend solutions to ensure all hardware and network related problems are resolved. The Contractor shall also work with the engineers from the 160th Signal Brigade, theater signal command, and DISA to engineer new circuit requirements and manipulate the existing circuit environment to ensure the most efficient use of our communications resources and maintain accurate theater and regional level transport diagrams as well as site level rack elevations for all transport equipment.

C.3.2.3.11 Facilities Control Office (FCO). The Contractor shall operate an FCO, which shall be the single point of contact for all strategic communications in the theater. The Contractor shall perform all requirements in accordance with DISA Circular (DISAC) 310-70-1 and DISAC 310-55-1, or applicable regulations, policies and directives. The Contractor shall coordinate for all tactical communications interfaces to the strategic network. The Contractor shall coordinate with DISA-CENT as required to identify and report outages, restorals, adds, changes, and deletions as appropriate and in accordance with regulation, policy, and directives. The Contractor shall report any imminent system failure to the ARC and provide a recommended course of action to mitigate the problem and provide repair solutions. The report shall be in accordance with FCO standing operating procedure guidelines. If substandard conditions exist, the Contractor shall report them to the ARC or personnel designated by the COR. The Facility Control Office shall provide the 160th Signal Brigade, a single POC to report, process and follow up on all circuit actions, such as scheduled ASIs or unscheduled outages. The FCO shall act as the single POC interfacing with all subordinate TCF and DISA to affect repairs and direct the maintenance actions for subordinate TCFs. The FCO shall provide hourly updates for all critically defined circuits, theater-wide, to the 160th Signal Brigade when such circuits fail. The FCO shall prepare required DISA reports (daily or otherwise) in accordance with DISAC 310-70-1 and DISAC 310-55-1. The reports shall be provided to the COR and DISA (as required by the COR). The FCO shall maintain a copy of all circuit history files, which shall be provided by the respective TCF.

C.3.2.3.12 AD System Engineering. The Contractor shall develop new site, stand-up and cross-forest trusts with land component tactical AD Forest units in 160th Signal Brigades AOR. The Contractor shall provide Tier III AD support to all subordinate units throughout the 160th AOR. The Contractor shall also plan and execute AD projects and implementation as well as the training and professional development of the AD staff.

C.3.2.3.13 Exchange Systems Engineering. The Contractor shall be responsible for providing the day-to-day maintenance of the theater exchange mail services. The Contractor shall be responsible for inter-forest connection agreements, routing for all theater Exchange organization sites, and shall maintain all site Exchange bridgehead server configurations. The Contractor shall provide Tier III Exchange troubleshooting and problem resolution; maintain email security settings, mailbox management, repair of failed or corrupted exchange servers; and determine proper maintenance intervals and capacity planning and storage requirements.

C.3.2.3.14 Enterprise Systems Management (ESM) Systems Engineering. The Contractor shall engineer and manage ESM systems, NETIQ, NETPRO, HBSS, Symantec AV, Microsoft Operations Manager (MOM), Short Message Service (SMS), System Center Configuration Manager (SCCM), System Center Operations Manager (SCOM), eEye Retina, Citadel Hercules, etc., including software and patch package development, future NETOPS tools, and Tier II troubleshooting. The Contractor shall research and maintain working knowledge of the latest revisions for each of the current systems.

C.3.2.4 Network Information Assurance (IA)/Computer Network Defense (CND).

C.3.2.4.1 Network Information Assurance. The Contractor shall ensure the availability, integrity, identification, authentication, confidentiality, and non-repudiation of friendly information and information systems while denying the adversaries access to the same information and information systems. The Contractor shall provide technical and operational support to protect systems under the responsibility of the TNOSC against unauthorized access and inadvertent damage or modification. Provide matrix support to the Action Request Center (ARC) by providing input and decision support to the Watch Officer and Battle Captain at the ARC in terms of alerts from the sensor grid and situational awareness of IA or CND incidents in theater (poor security practices, virus/worm outbreaks, etc.). The Contractor shall support the Government in the management and enforcement of IA in accordance with AR 25-2, AR 25-1, and applicable Army and Department of Defense regulations, directives and policies. The Contractor shall ensure all users receive required initial and annual refresher DoD IA User Awareness Training, read and acknowledge applicable Acceptable User Policies (AUPs). The Contractor shall ensure IA personnel and IA support are trained and sign required Privileged Access AUPs and other documents required by AR 25-2, DoD 8570.01-M and local guidance. The Contractor shall develop TNOSC physical network security practices and submit to the Government representative for approval. The Contractor shall support all aspects of TNOSC automated information security to include accreditations and establishment of local security policies. The Contractor shall enforce Information Assurance Vulnerability Alert (IAVA) compliance and reporting, and coordinate with intelligence and judicial agencies. The Contractor shall forward information regarding suspicious activities to appropriate agencies as directed by the COR. The Contractor shall develop policies and procedures to evaluate suspicious activity. The Contractor shall perform blocking of Internet protocol (IP) networks when directed by the Government. The Contractor shall monitor, operate, and maintain network and host-based Intrusion Detection or Prevention System (IDS/IPS) sensors. The Contractor shall provide host-based security system (HBSS) management service. In coordination with the TNOSC IA team, test and evaluate tools and techniques to facilitate recognition of potential security problems, and conduct evaluation of security events and provide findings to the Government. The Contractor shall investigate possible network and Automated Information System (AIS) security events. The Contractor shall perform user account management to include Common Access Card (CAC), Biometrics, and Public Key Identification (PKI). The Contractor shall oversee server-based security, and ensure security and accreditation requirements are met and maintained for customer connections. The Contractor shall provide network security administration, install, operate, and maintain security management software. The Contractor shall generate reports and update trouble tickets as required. The Contractor shall ensure devices and assets under respective responsibility are configured, installed and operated IAW current and applicable Army Golden Master (AGM) guidelines and applicable Defense Information Systems Agency (DISA) Security Technical Implementation Guidelines (STIGS).

C.3.2.4.2 Computer Network Defense (CND). The Contractor shall provide technical expertise and advice to the Army IA/CND Officer in Charge (OIC) and the TNOSC Director as required. The Contractor shall plan, monitor, conduct, and track required training for Information Assurance/Computer Network Defense (IA/CND) staff. The Contractor shall ensure personnel meet all training requirements IAW DoDI 8510.01, DoD 8570-01-M IA Training and Certification designations (IAT-I through IAT III or IAM-1 through IAM-III in this list. AR 25-2 paragraph 4-14 personnel suitability designations (IT-I through IT-III, which address concerns different from IA Training in this list) and other appropriate requirements. The Contractor shall ensure at least one of its personnel is a Global Information Assurance Certification (GIAC) GIAC Certified Intrusion Analyst (GCIA). The Contractor shall manage and track training and credential status for all TNOSC employees in the Army Training and Certification Tracking System (ATCTS) or other designated platform. The Contractor shall research and recommend external Information Assurance/Computer Network Defense training for military, civilian and Contractor employees. The Contractor shall monitor Information Operations Condition (INFOCON) and other compliance metrics for TNOSC networks and ensure all vulnerabilities on TNOSC equipment are identified and propose remediation approach for brigade consideration. The Contractor shall utilize automated compliance assessment and reporting tools, DISA’s Vulnerability Management System (VMS), Army’s Asset &Vulnerability Tracking Resource (A&VTR) and Retina Enterprise Module (REM) to ensure TNOSC Information Assurance Vulnerability Management (IAVM) tracking is being conducted, reported and remediated for all networked assets in all areas of responsibility. The Contractor shall report security violations and incidents to the Regional Computer Emergency Response Team (RCERT) IAW Section VIII of AR 25-2. The Contractor shall prepare TNOSC Information Assurance Vulnerability Alert (IAVA) impact statements, IAVA extension requests, and compliance reporting and verification reports. The Contractor shall provide support to the TNOSC Information Assurance Security Officer (IASO). The Contractor shall maintain accreditation packages for all systems managed by the TNOSC. The Contractor shall have a high level of knowledge of the Defense Information Assurance Certification and Accreditation Process (DIACAP) to support the Government with the development of DIACAP packages. The Contractor shall verify that all systems under the direct control of the TNOSC are properly certified and accredited in accordance with the DIACAP and configuration management policies and report non-compliance to the 160th Signal Brigade. The Contractor shall support the Information Assurance Manager (IAM) in semi-annual reviews of Certification and Accreditation (C&A) support documentation packages of information systems on network are accurate and complete, and that they meet minimal risk acceptance standards. The Contractor shall develop, update and submit draft TNOSC security SOPs to ensure compliance with Army regulations and guidance. The Contractor shall perform and oversee the performance and execution of duties of IA and CND personnel as appropriate and ensure reports are generated and presented as directed.

C.3.2.4.3 Vulnerability Analyst/INFOCON Administration. The Contractor shall plan, coordinate, review, analyze and provide feedback to customers on periodic (i.e., weekly, monthly, quarterly) vulnerability scans (i.e., Retina coordinator/analyst, REM server administrator). The Contractor shall survey network diagrams and other artifacts, collaborate with WAN Engineers and WAN Security Engineers to utilize network visualization tools in determining if vulnerability scans are being conducted on all network assets. The Contractor shall provide support to identify means of overcoming gaps in vulnerability scanning, support the preparation of vulnerability scanning reports to commanders and higher headquarters and liaison with IAVM manager and Information Assurance Program Manager (IAPM) regarding vulnerability and remediation issues. The Contractor shall monitor and maintain INFOCON status and requirements, and then assess current architecture and computer assets for INFOCON compliance. The Contractor shall develop reporting mechanisms for current INFOCON requirements and compliance of all subordinate elements and customer equipment on all networks. The Contractor shall generate and update reports for all areas of responsibility, interact with Host Base Security System (HBSS) and System Center Configuration Manager (SCCM) and other CND/Systems Operations (SysOps) administrators in order to leverage INFOCON enforcement and compliance capabilities. The Contractor shall provide support to the TNOSC content manager, as required, for all IA/CND reporting tools.

C.3.2.4.4 ArcSight Management/Analysis. The Contractor shall perform ArcSight Configuration & Syslog Management/Analysis support to include analyzing all existing network configurations, to include network diagrams, server and network device baseline configurations, network architecture and topology. The Contractor shall organize repositories for configuration information and develop mechanisms to record and track network configuration changes. The Contractor shall review proposed configuration changes and sit on Technical Review Team/Configuration Management Board as a non-voting advisor to assess requests for change by customers or command elements. The Contractor shall advise and support customers with secure configuration requirements, and support with DIACAP process in all areas of responsibility to includes supporting customers in the DIACAP accreditation process as required. The Contractor shall support the Government in engineering functions, plan, implement and sustain enterprise syslog system and ensure logging is enabled on all equipment capable of providing logging data. The Contractor shall monitor, analyze and audit enterprise logs for all enclaves providing analysis to determine if anomalous activity, intrusion attempts, unauthorized activity or abuse of privilege or unauthorized network access is occurring. The Contractor shall generate reports, as required, concerning results of audits, scheduled audits and descriptions of analytical techniques used in order to detect activity. The Contractor shall operate and administer Storage Area Network (SAN) or similar backing store for syslog systems. The Contractor shall identify shortcomings in log data requirements or data storage capability and advise Government on required additional capabilities.

C.3.2.4.5 IAVM Compliance. The Contractor shall utilize automated compliance assessment and reporting tools, like DISA’s Vulnerability Management System (VMS), Army’s Asset & Vulnerability Tracking Resource (A&VTR) and Retina Enterprise Module (REM) to ensure IAVM tracking is being conducted, reported and remediated for all networked assets in all areas of responsibility. The Contractor shall develop draft IAVM plans, policies and procedures in conjunction with the IAPM for each theater of operation for the Governments approval. The Contractor shall develop plans and policies to ensure that subordinate elements and customers submit reports using specified tools and methodologies. The Contractor shall draft and track all theater IAVA reporting requirements to ensure compliance with IAVA requirements.

C.3.2.5 Enterprise Systems Operations (SysOps).

C.3.2.5.1 Active Directory (AD) Overview. The Contractor shall provide administrative and operational support within the SWA TNOSC for AD. The Contractor shall be responsible for Schema and Enterprise administration of the Forest. The Contractor shall provide administrative and operational support within the SWA TNOSC AOR for AD. The Contractor shall provide operational status data and provide TNOSC with regional operations capability. The Contractor shall manage IP-related services of their AOR except for those enterprise level devices directly controlled by NETCOM/9th SC (A). The Contractor shall provide “Tier 2 level” POC and problem resolution services for all AOR base camps and provide all information related to reliability and availability of all resources managed within the AOR. The Contractor shall maintain a current or future Windows Server AD environment that includes Windows Server and AD implementation and coordination necessary for implementation actions. The Contractor shall maintain local print servers, local file servers, and local WINS Server for legacy systems interaction. The Contractor shall ensure non-critical member servers provided by the installation meet the minimum server requirements to join the enterprise. The Contractor shall provide troubleshooting support for critical core AD servers in support of the TNOSC O&M responsibilities. The Contractor shall perform necessary hands-on maintenance of AD assets. The Contractor shall manage user accounts within their AOR installation and region based on the AD policies and administrative capabilities. The Contractor shall maintain the approved configuration of core AD equipment on the installation and region as tasked by SWA TNOSC, related to the initialization or termination of operations and to the establishment or maintenance of configuration. The Contractor shall manage and create Domain Local Groups. The Contractor shall populate and manage top-level Operational Units (OU) provided as part of the installation resources and delegation authority for subordinate level OUs. The Contractor shall validate all configuration change requests from local organizations. The Contractor shall maintain installation member servers and applications. The Contractor shall identify and apply security measures necessary to prevent unauthorized individuals any physical access to enterprise resources located within the AOR. The Contractor shall detect, report, and mitigate physical security compromises of any system according to established guidance, policy, and regulation. The Contractor shall provide services required include, but are not limited to: authentication topology, systems performance monitoring, replication, schedule initialization, replication maintenance, Dynamic Domain Naming System (DDNS) management, top level OU management, security management, security patches and IAVA compliance, vendor hot fixes, audit/event log reviews, WINS Servers, Dynamic Host Configuration Protocol (DHCP) Servers, migration issues, remote access, groups and GPO, anti-virus management, security scans, and Certificate Administration at the TNOSC.

C.3.2.5.2 AD Systems Administration. The Contractor shall monitor Tier II network operations and performance using MOM, SMS, SCCM, SCOM, NETIQ, NETPRO, future NETOPS tools, and other software applications. The Contractor shall be the Helpdesk POC for all theater SIPR, NIPR, CENTRIXS enterprise systems issues under the purview of the 160th Signal Brigade, the SWA TNOSC, and its subordinate units. The Contractor shall create and/or manage trouble tickets, and monitor status and report outages.

C.3.2.5.3 REMEDY Administration. The Contractor shall be a subject matter expert on the concepts, capabilities, administration, database management, and use of Remedy Action Request (AR) System. The Contractor shall be proficient in the administration of an enterprise level deployment of the Remedy application. The Contractor shall be proficient in extending access to the database information by joining two or more forms, running database queries, generating standard and customize reports. The Contractor shall build AR System active links and automate system responses to a user’s actions and/or input from other network management systems such as Spectrum and the Joint Network Management System (JNMS). The Contractor shall be proficient in building and customizing AR System filters with automated system responses to certain transactions.

C.3.2.5.4 Oracle Data Base Administration. The Contractor shall be responsible for installing, maintaining, and operating of various Oracle Databases by conducting database performance audits, pre-implementation design…