SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 4 of 50 SECTION 2 - PERFORMANCE WORK STATEMENT 1. Contracting Officer’s Representative (CORs). a. Primary COR. Name: Karen White Organization: J613A Phone Number: 703-767-9149 Fax Number: E-Mail Address: Karen.White@dla.mil b. Alternate COR. Name: Phone Number: Fax Number: E-Mail Address: 2. Task Order Title. DLA Information Operations J6 Enterprise IT Contractor Support 3. Background The Defense Logistics Agency (DLA) Information Operations, J6, is the Agency’s knowledge broker, providing comprehensive, best practice Information Technology (IT) support to the Department of Defense (DoD) and DLA Business Community resulting in high quality information systems, customer support, efficient and economical computing, data management, and telecommunication services. DLA J6 Enterprise has the responsibility to support local DLA activities, (DLA Land and Maritime) as well as some non-DLA customers, and all of the DLA J6 Enterprise Service Areas located conus and oconus. Some of the services provided in this contract include, providing the customers with effective and reliable Information Technology for and desktop applications; functional analysis of materiel management;; systems development; wireless technologies; business support; data integrity; Level II desktop support; environment control; data storage and management; performance planning; and analysis administration; DLA legacy systems programming; administration of a Local Area Network (LAN); business process reengineering; electronic document management; corporate web portal support; the development of integrated solutions for business needs using enterprise business/logistics applications; and future technology. IT Environment Desktops/Laptops: DLA J6 employs a standard image produced by the J6 Desktop/Laptop Enterprise working group. The image consists of all baseline Security settings and Software needed for the Enterprise Baseline Client image. Users receive a Personal Computer (PC) or laptop, monitor, mouse and keyboard. User access to the “C” drive is restricted on all client PCs/Laptops and all applications are loaded via Microsoft System Center Configuration Management (MSCM) servers. Software not on the image is made available via Citrix or Package installs located on the Central SCCM server. Networked User data is backed up daily. Printing and scanning is done from Network based devices. The desktop provides end-users with a consistent and reliable computing environment, while providing system administrators and developers a common desktop computing environment. System Integrators & Application SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 5 of 50 Developers are able to update software quickly and efficiently to all desktops via network installations. The desktop is closed to user modifications, ensuring that a reliable and uniform computing network is consistently available to the DLA Land and Maritime Columbus end-user population. Because of the initiative to provide DLA J6 Enterprise customers with the freedom to telework and to travel with a method to stay connected to the job-site, laptops are provided to the associates. The laptop base image contains all drivers to account for the hardware being used. The teleworkers are expected to communicate via Broadband. DLA, Information Operations Enterprise (DLA J6) currently manages over 4000 plus laptops throughout DLA J6. The DLA J6 personnel provide expertise for the desktop/laptop, which is comprised of the following integral components: • Desktop Devices, which includes hardware, computers, laptops, SIPR printers and other peripherals. − Latest Microsoft Windows Operating Systems (OS) Enterprise Base Image − HBSS Administration, MacAfee and Symantec Antivirus − System Center Configuration Manager Server (SCCM) − Patch Management of all Client workstations − Remote Client support, Virtual Private Network (VPN) Juniper support − Lenel − CITRIX Administration/Support/Application installs and troubleshooting • Desktop support, which is supported by information technology specialists, and desktop specialists, SIPR desktop support specialist. • Mitigation and vulnerabilities support specialist for 4000 workstations. Printers and Other Network Based Devices: Networked printers and scanners range from desktop devices to large multifunctional devices including color printers and plotters. The majority of these devices may be accessed from individual desktops based on need and utilized by loading the correct driver software. They provide great flexibility to the user on the type of devices available to support almost any application requirement for hardcopy output. Telecommunications: DLA J6 has the responsibility for program management of all telecommunications devices such as: cell phones, pagers, Aircard configuration and installation, Blackberries, and Personal Digital Assistants (PDAs), used by DLA Land and Maritime Columbus associates. Management of telecommunication devices includes: market survey of services and equipment; disbursement of units; oversight of usage, and client software. 5. Scope The Contractor shall provide the full range of IT services, technical and management expertise, and solutionrelated enabling products. IT Solutions include those capabilities, applications, software, hardware, and systems across the DLA IT J6 Enterprise. Support shall be provided for information technology solutions, technical support, maintenance and sustainment; operations support; application development; maintenance and technical support; and lifecycle management. Additionally, travel and performance may be required to support the various DLA Centers such as but not limited to those in Fort Belvoir, VA; Richmond, VA; Dayton, OH; Mechanicsburg, PA; New Cumberland, PA; Philadelphia, PA; Battle creek, MI; Ogden, UT; Tracy, CA; Honolulu, HI; Kaiserslautern, Germany; and the CENTCOM and PACOM Areas of Responsibility. Contractor will consult and receive approval from COR/COTR for any contractor personnel assignment or replacements. SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 6 of 50 6. Specific Tasks 5.1 Task 1 – Task Order Management Plan (TOMP): Task Order Management Plan (TOMP): The contractor shall prepare a Task Order Management Plan describing the technical approach, organizational resources and management controls to be employed to meet cost, performance and schedule requirements throughout contract execution. This will be delivered to the COR/ACOR within 10 days after contract award. 5.2 Task 2 – Local End User Support 5.2.1 Subtask 1 – End User Support for Special Needs Personnel: The contractor shall provide technical support for users with special needs by doing the following: • Reviewing requests for hardware/software to support the visually or hearing impaired for possible use in the desktop environment • Administering the Sorenson Relay for the hearing impaired, including account maintenance 5.2.2 Subtask 2 – End User Training: The contractor shall provide training to end-users to ensure the full integration of the desktop IT environment. The training shall include: • Assistance in user skill level assessments • Defining quantifiable training objectives • Developing appropriate curricula • Coordinating training delivery • Classroom and one-on-one instruction. • Teleworker Training The contractor shall provide user training/orientation on the desktop environment which includes: • • • • • • • Training on the desktop Operating System (currently Windows 7) Microsoft Office, and other COTS that are available to all users in the desktop environment Training on peripheral items (network scanners, network printers) used within the desktop environment Assisting users in utilizing features in the desktop to help perform their jobs more effectively Training on applications developed as part of the desktop Developing User Guides on the features of the desktop Providing new employees with orientation on the desktop to include using shared data and data storage on the users’ Home Drive, use of peripherals, how to install applications • Training provided on a one to one basis at the users’ workstation, and providing classroom training where and when necessary to large groups. 5.2.3 Subtask 3 –Laptop Maintenance Support: The contractor shall provide technical expertise to maintain the current DLA J6 hardware inventory management systems, to include: • • • • • 5.2.4 Laptop repair and schedules/dates Service agreements for each item in the laptop inventory Physical management of laptop hardware inventories which includes: unpacking/packing of equipment and issuance of equipment hand receipts. IMAC Support for move/install of hardware. Coordination with end user for mass center wide moves. Network printer configuration and setup Subtask 4 – Telecommunications: SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 7 of 50 The contractor shall provide technical guidance and expertise for the DLA Columbus telecommunication program, which includes: • Requirements determination • Market surveys • Documentation and analysis of usage • Software and server administration All documentation shall be delivered to the COTR or the Government Lead. Reporting and Status Reports 6.1 Task 1 – Daily Task Reporting: At the direction of the COR, the contractor shall input hours and task worked daily into the Eagle reporting system. 6.2 Task 2 – Weekly Status Meeting: The contractor shall attend a weekly status meeting with the COR, ACOR, COTR and any other appropriate personnel. At each weekly status meeting, the contractor shall discuss/address on going task, risk, issues and problems. 6.3 Task 3 – Weekly Status Report: The Contractor shall submit a written weekly status report for work associated with PWS tasks 5.1 through 5.5 and all related Subtasks to the DLA J6 COR/ACOR. The weekly status report shall be delivered to the DLA J6 COR/ACOR on Tuesday of each week. The weekly status reports must be submitted on the prime Contractors letterhead. The weekly status report shall include: • • • Brief task description A narrative review of work accomplished during the reporting period and/or significant events. Identification of any problems or delays and recommended solutions 6.4 Task 4 – Monthly Status Report: The Contractor shall submit written monthly status reports to the DLA J6 COR/ACOR beginning 30 days after contract award and every 30 days thereafter. Each monthly report shall be delivered to the DLA J6 COR/ACOR by the seventh (7th) working day of the next month. Work associated with every active task documented in this PWS is to be accounted for in the report. Status reports must be submitted on the prime Contractors letterhead and be accompanied by a copy of that month’s invoice. Failure to provide reports correctly shall cause resubmission by the Contractor. The monthly Progress Report shall include, but is not limited to: • • • • • • • • Brief task description A narrative review of work accomplished during the reporting period and/or significant events. Status of major tasks and projects Identification of any problems or delays and recommended solutions Anticipated activity for the next reporting period Description of any travel or unique services provided Status of resources expended to date (hours, dollars, labor category and name) and remaining balances Projected 100% funds depletion date. 6.5 Task 5 – In Process Reviews: The contractor shall conduct In Process Reviews (IPR) at the discretion of the Government. The Government COR reserves the right to schedule IPRs after coordination with the Contractor. The Contractor shall provide DLA with a draft copy of the IPR briefing prior to the scheduled IPR SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 8 of 50 for review. At a minimum, the IPR shall report any current or anticipated problems, resolution of existing problems, and solutions implemented. 6.6 Task 6 – Problem Notification: The Contractor Project Manager shall bring problems or potential problems affecting performance to the attention of the DLA J6 Contracting Officer’s Representative (DLA J6 COR/ACOR) as soon as possible. The Contractor Project Manager shall notify the Government team leads and the DLA-J6 COR/ACOR immediately upon identification of any problem(s) that would delay the completion of a task or deliverable. The Contractor shall make such notifications verbally during normal working hours or at the beginning of the next Government workday. Within 24 hours after identification of the problem, the Contractor shall furnish a Problem Notification Report (PNR) to the DLA J6 COR/ACOR. Deliverables 7.1 All deliverables shall meet the professional standards, quality measures and requirements set forth in this PWS. 7.2 All document outputs shall be delivered in hardcopy and electronic softcopy utilizing MS Office products or other COTS Project Management tools as approved by the COR/COTR. 7.3 All deliverables are subject to acceptance by the COR/COTR. If unacceptable, the Contractor shall correct the deliverable based upon the feedback from the COR/COTR. The Government will have ten (10) working days following delivery to the COR/COTR to review and accept or reject each deliverable. If the Government does not notify the Contractor of rejection of a deliverable within a specified time, the Contractor may assume the deliverable has been accepted. In the event that a deliverable is rejected, the Contractor shall have five (5) working days to correct the deficiencies to the Government’s satisfaction. 7.4 All deliverables shall adhere to the general quality measures set forth below: 7.4.1 Accuracy: Work products shall be accurate in presentation, technical content, and adherence to accepted elements of style. 7.4.2 Clarity: Work products shall be clear and concise. Any/all diagrams shall be easy to understand and be relevant to the supporting narrative. Any/all references supporting information not included in the work product shall be provided as an appendix to the work product and referenced accordingly in the work product. 7.4.3 Consistency to Requirements: Work products must satisfy all of the requirements laid out in this PWS. 7.4.4 Files Accessible/Editable: Work products shall be delivered in an electronic editable format. Electronic documents shall be provided in the appropriate format (e.g. MS Word, MS Excel, MS PowerPoint, MS Project, MS Visio, etc.) without encryption or password protection unless requested to be protected by the Government. 7.4.5 Timeliness: Work products shall be submitted on or before the due dates identified in Table 1. Due dates in Table 1 can be adjusted by COR/COTR and submitted in accordance with later scheduled date determined by the Government when unforeseen obstacles will delay the deliverable. All deliverable shall be delivered to the COR and COTR no later than the date specified in the PWS or as directed in writing by the Government for tasking identified within the scope of the PWS. Hardcopies of document deliverables are to be submitted with a cover letter, on the prime Contractor’s letterhead, describing the contents. Table 1: Deliverables Page 9 of 50 SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Table 1 identifies the Deliverables associated with the specific tasks outlined in Section 5 of this PWS. Deliverables for PWS Tasks as outlined in Section 5: Description PWS Paragraph Deliver to 5.1 COR/ACOR Task Order Management Plan (TOMP) Frequency 10 days after contract award End User Training 5.2.2 As needed Weekly Status Report 6.3 DLA J6 Government Personnel COR/ACOR Monthly Status Report 6.4 COR/ACOR In Process Review Report 6.5 COR/ACOR QASP 9.0 COR/COTR Phase-In Plan 14.8.3 CO Tuesday of each week. 30 days after contract award and every 30 days thereafter. By 7th working day of the next month As needed-at COR discretion 30 days after contract award Within 10 calendar days of contract award 7. Performance Review Below are the Performance Standards that will be used in evaluating performance on a monthly basis and in determining the amount of payment owed to the contractor. The Government will make objective and subjective assessment of the Contractor’s performance to determine whether contract performance is acceptable. Progress will be tracked based on the milestone event when the Contractor receives a specific tasking. Highly Acceptable – Meets or exceeds task order requirements in terms of timeliness and quality. COR will make a determination to pay the contractor 100% of the monthly invoice amount. Acceptable-Meets all deliverable requirements of the PWS with only minor revisions necessary and the revisions do not adversely impact the mission of the Agency. Performance is satisfactory. The COR will make a determination to pay the contractor 95% of the monthly invoice amount. Marginally Acceptable-Has two or more issues that were not minor such as missed milestones, missed project due dates; two or more serious complaints by the J6 customer. The COR will make a determination to pay the contractor 85% of the monthly invoice. Unacceptable-Performance has been Marginally Acceptable for more than one month or at a level where the Contracting Officer has had to issue one or more cure notices regarding performance. Payment for the month will be withheld pending resolution of cure notice(s). Upon satisfactory resolution of issues related to the cure notice(s), payment for the month in question will be made at the Marginally Acceptable rate. If issues are not resolved, No payment will be made. Continually monthly performance at the unacceptable level will be at a level where a termination SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 10 of 50 will be considered if the performance is not improved. The performance of each task will be rated each month by the Information Operations Columbus COR. These finding will be the basis for the amount paid for the task for that month. The tasks will be rated on the performance of the Contractor on the timeliness and quality of the services provided using the numeric ratings for each criterion show below. These scores assigned for the task will be averaged to determine the amount to be paid for that task for that month. • • • • An average greater than 4.5 is rated Highly Acceptable An average equal to or greater than 3.0 but less than or equal to 4.5 is rated Acceptable An average greater than 1.5 but less than to 3.0 is rated Marginally Acceptable An average less than or equal to 1.5 is rated Unacceptable Timeliness Highly Acceptable = 5 Acceptable = 3 Marginally Acceptable =2 Unacceptable=0 Quality Highly Acceptable = 5 Acceptable = 3 Marginally Acceptable = 2 Unacceptable = 0 Meets or exceeds PWS requirements in terms of timeliness of delivery Meets delivery requirements of the PWS with only minor revisions necessary and the revisions do not adversely impact the mission of the Agency Has two or more issues that were not minor such as missed milestones, missed project due dates. Timeliness is at a level where one or more cure notices have been issued by the Contracting Officer. Meets or exceeds PWS requirements in terms of timeliness of delivery Meets delivery requirements of the PWS with only minor revisions necessary and the revisions do not adversely impact the mission of the Agency Has two or more issues that were not minor such as missed milestones, missed project due dates. Quality of Performance is at a level where one or more cure notices have been issued by the Contracting Officer. 8. Quality Assurance Surveillance Plan (QASP) AND PERFORMANCE STANDARDS The Vendor will provide, thirty days (30) after award of the Twelve Month Period, a Quality Assurance Surveillance Plan to ensure the Vendor is compliant with the tasks and performance requirements/outcomes specified in the PWS for the IT Support services. The QASP should specify all work requiring surveillance and SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 11 of 50 the meth of surveillance for Vendor resources performing on the effort. The QASP will be submitted to the COR and/or COTR and the DLA CO for review and approval. If the QASP is not acceptable to the COR and/or COTR or the DLA CO, the Vendor will have five (5) working days from the receipt of notification from the DLA CO to complete the required revisions. Final approval of the QASP will be provided by the DLA CO. Upon approval, the Vendor is required to furnish an approved copy of the QASP to the COR and/or COTR for this effort. In fulfillment of this effort, the Vendor shall provide the deliverables identified in Table 1. All deliverables shall be submitted to the COR and/or COTR or Government Lead and the DLA CO where stated in Table 1. The Government will have a maximum of five (5) working days from the day the draft deliverable is received to review the document, and provide comments back to the Vendor either approve or disapprove the deliverable. The Vendor will have a maximum of five (5) working days from the day comments are received to incorporate all changes and submit the final deliverable to the Government. All days identified below are intended to be calendar days unless otherwise specified. Final inspection and acceptance of all work performed, reports, and other deliverables will be performed at the place of delivery by the COR and/or COTR. The format for the individual deliverables will be determined through consultation between the COR and/or COTR and the Vendor. The deliverables that reflect the Vendor’s analysis and assessment (e.g. studies or analyses) may be in Vendor format. All documents will be provided in the appropriate Microsoft Office format (e.g. Word or PowerPoint). If appropriate, the Government may ask that they be provided in compressed or PDF format. 9.1 Performance Standards: The standard set for all tasks in support of this effort is 100% Satisfactory Completion. The deliverable for all tasks will be pursuant to a performance measurement that ties performance goals and acceptable quality levels to a numerical score: 5, 3, 2 or 0. Performance measurement is further defined in Section 8.0 of this PWS. 9.2 Method of Surveillance: The Government will ensure quality assurance of all tasks with 100% inspections performed by the COR and/or COTR. During the inspections, the COR and/or COTR will review the deliverables to ensure the completion of tasks prior to certifying the invoice for payment. 9.2.1 Inspection and Acceptance Criteria: Final inspection and acceptance of all work – in support of this effort will be performed by the COR and/or COTR. 9.2.2 Surveillance Schedule: Government oversight for the proposed effort will be performed by the COR and/or COTR and contract responsibility will reside with the DLA CO in accordance with the performance measurement criteria identified in Table 2 of the PWS. Table 2 –Performance Metrics PWS # 5.1 Description TOMP Quality Rating 100% Compliance with section 5.1 Timeliness Rating 100% Compliance with section 5.1 Remedy Compliance of less than 100% will be subjected to ratings of 3, 2, or 1. COR will decide what % of invoice will be paid. SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support 5.2.2 Tier II Desktop Support Provided by Enterprise Help Desk (EHD) N/A 5 days for incidents 5.2.1 Monthly Customer Satisfaction Scores Satisfaction score of 4.0 and above = 100% compliance NA Page 12 of 50 Compliance of less than 100% (resolution within 5 days) will be subjected to ratings of 3, 2, or 1. COR will decide what % of invoice will be paid Average overall score < 4.0 will be subjected to ratings of 3, 2, or 1. COR will decide what % of invoice will be paid. 9. Place of Performance. The primary place of performance will be at the Government’s site; Defense Supply Center, Columbus, located at 3990 E. Broad Street, Columbus, Ohio 43218. The DLA Land and Maritime site shall be used for day-to-day operations. Temporary Duty Station assignments will be at the request of the Government and will not become permanent duty stations. 10.1 Alternate Worksite Locations: Vendor employees may work from an alternate worksite only if requested to do so with explicit authorization from the COR. Without the explicit authorization of the COR to work from an alternate worksite location, employees will perform their duties at their assigned workstations. If requested by the contractor, authorization to work at an alternate worksite under the subject contract can only be approved by the Contracting Officer. Authorization will state when the contractor can begin working at the alternate worksite and indicate whether all or some of the contractor employees will be impacted by the authorization. Existing contract performance outcomes/ metrics, deliverables and all contract term and conditions will remain in effect except for the principal place of performance. Working at an alternate worksite shall only be authorized if the Contracting Officer can adequately determine that the following conditions exist for the Contractor: a. The Contractor shall be able to complete the task(s) without the use of any Government Furnished Equipment (i.e., laptops, cell phones, etc.). b. There must be a predefined need, in keeping with the organization’s mission, for the Contractor to work at an alternate worksite. For example, in case of inclement weather or Federal Government closure, contractor employees may be authorized to perform tasks under this contract from their alternate worksite. c. If the Contractor needs remote access to DLA or DOD networks, systems, applications, or databases, the Contractor shall establish remote access through the DLA approved remote access system using Contractor Furnished Equipment (CFE) that meets the DLA IA computer standards specified in paragraph 10.1..3 CONTRACTOR ALTERNATE WORKSITE REMOTE ACCESS REQUIREMENTS. d. The contractor shall provide the Contract Officer Representative (COR) a status report summarizing any issues encountered in meeting contract performance outcomes/metrics due to the change in location to the alternate worksite. The report must be provided within 5 days from the date the contractor begins working at the alternate worksite and be included in the monthly status report as a separate item. SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 13 of 50 e. The Contractor must have an approved Corporate Alternate Worksite plan on file with the COR and Contracting Officer prior to any work being performed at the Contractors alternate worksite. 10.1.2 Contractor COOP Alternate Worksite Authorization: The Contractor may be authorized to perform tasks under this contract at a Contractor alternate worksite, upon declaration of a COOP or Pandemic situation by the Director of the Defense Logistics Agency. a. Authorization for the contractor to work at an alternate worksite under the contract will be provided by the Contracting Officer. Authorization will state when the contractor can begin working at the alternate worksite and indicate whether all or some of the contractor employees will be impacted by the authorization. Existing contract performance outcomes/ metrics, deliverables and all contract terms and conditions will remain in effect except for the principal place of performance. b. The principal place of performance is the Government facilities outlined in this contract. c. The Government will not issue Government Furnished Equipment (GFE) for performance of this contract at a contractor alternate worksite. The Government shall not incur any additional cost nor provide additional equipment for contract performance as a result of the Contractor's implementation of an alternative worksite plan. d. The Contractor shall use Contractor Furnished Equipment (CFE) that meets the DLA Government Furnished Equipment (GFE) Information Assurance (IA) approved computer standards for access to DLA networks, systems, and databases to perform the tasks of this contract from the contractor alternate worksite, as specified in paragraph 10.1..3 CONTRACTOR ALTERNATE WORKSITE REMOTE ACCESS REQUIREMENTS. e. Alternate worksites may be authorized by the Contracting Officer, upon declaration of a COOP or Pandemic situation by the DLA Director. An alternative worksite can be a contractor facility, personal residence, or a telecommuting center. A telecommuting center is a geographically convenient office setting established as an alternative to an employee's main office, or residence. f. Regardless of work location, all contract terms and conditions, including security requirements and labor laws, remain in effect. 10.1.3 Contractor Alternate Worksite Remote Access Requirements: The Contractor shall ensure that all CFE (hardware and software) employed to access DLA networks, systems, applications, and databases meet the following minimum DLA IA requirements and provide periodic certification of compliance as a pre-requisite to being granted network access:. a. Utilize only those operating systems (OS) capable of joining an Active Directory domain (e.g., Windows XP Professional). Employment of “home use” operating systems is prohibited; b. Operating systems, databases, and applications must be configured for compliance with the DISA Gold Disk and the applicable Security Technical Implementation Guides (STIGs) / checklists. The DLA Information Assurance Manager (IAM) will provide a listing of applicable STIGS upon request; c. Employ DOD approved Anti-virus and Anti-Spyware software must be installed and signatures must be updated in accordance with DLA IA policy. Updates must be pushed from a trusted source using a centrally managed server; SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 14 of 50 d. Install a DOD approved PC-based firewall with it configured to permit traffic by exception only, and dropping all other traffic. If the host-based firewall provides intrusion detection or prevention; the signatures or rules must be updated at the same intervals as the anti-virus software and pushed from a trusted source; e. Computers must be scanned by the contractor with the appropriate DLA vulnerability scanner (or current approved DOD scanner solution) at a minimum of every 30 days. All vulnerabilities must be remediated and reported to the cognizant IAM; f. Ensure Contractor employees possess a current Government issued Common Access Card (CAC) and install Government approved CAC readers and middleware, provided their assignments require access to Government networks; g. Contractor shall verify compliance with the above requirements and provide this information on a monthly basis to the IAM and Contract Officer Representative (COR); h. Install Government approved Juniper VPN or CITRIX clients from a trusted source; i. The Contractor shall coordinate with the cognizant IAM for establishment of employee Active Directory (AD) Group membership. j. Network access accounts for Contractors using CFE who have not had verified scans performed within the past 30 days will be disabled until the required scans and remediation is performed; k. Full Disk Encryption: Employ DoD approved disk encryption software on all Mobile computing devices and removable storage media. Product must be NIST FIPS 140-2 compliant and NIAP certified. l. The Government is not responsible for any costs associated with meeting the above requirements. 11. Period of Performance The period of performance of this delivery order shall be 6 months with two (2) three month option periods. 12. Security Position Sensitivity: DOD 5200.2-R, DOD Personnel Security Program, requires DOD military and civilian personnel, as well as DOD consultant and Contractor personnel, who perform work on sensitive automated information systems (AIS), to be assigned to positions which are designated at one of three sensitivity levels (IT-I, IT-Il, IT-Ill). These designations equate to Critical Sensitive, Non-critical Sensitive, and Non-sensitive. DLA has implemented the DOD policy in paragraph 3101 of DLAR 5200.1 1, DLA Personnel Security Program. The Contractor shall assure that individuals assigned to the following sensitive positions, as determined by the Government, have completed the appropriate forms. The investigative requirement for IT-I is Single Scope Background Investigation (SSBI). The investigative requirement for IT-II is National Agency Check w/Inquiries (NACI). For IT-I and IT-Il positions, the required investigation will be completed prior to the assignment of individuals to sensitive duties associated with the position. The provisions outlined above apply to the prime Contractor and any sub-Contractors the prime Contractor may employ during the course of this contract. No Contractor personnel performing sensitive duties will be allowed to commence work on this effort until his or her trustworthiness has been favorably adjudicated. DLA retains the right to request removal of Contractor personnel, regardless of prior SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 15 of 50 clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interests of the Government. The reason for removal shall be fully documented in writing by the Contracting Officer. Personnel occupying IT-III positions require a National Agency Check, but may be assigned prior to completion of the investigation. Personnel designated, as IT-III shall submit, within three (3) days after the start of the contrac t, a completed SF 85-P Form, National Agency Check Request and two DD Forms 258 (Fingerprint cards). 12.1 Personnel Security Procedures: The Contractor shall conform to all security requirements set forth in this Section. The procedure to be used by the Contractor to ensure that all Contractor employees meet DLA J6 security requirements is as follows: The Contractor’s Project Manager shall provide the name, social security number and date of birth to the DLA-J6 COR/ACOR for each new potential contractor employee being considered for employment on this delivery order. The DLA J6 COR/ACOR will forward the contractor name, social security number, date of birth and other information to the DLA Enterprise Support (DES-I) Personnel Security office to determine whether the potential employee has a completed, favorably adjudicated National Agency Check (NAC). If the NAC is completed and favorably adjudicated, the potential employee is eligible to commence work on the delivery order performing ITIl level work. If the NAC is not completed and/or favorably adjudicated, the potential employee shall complete forms SF-85P and DLA Form 1270. Upon completion of the forms, the DLA J6 COR/ACOR will arrange with DES-I for fingerprinting of the potential employee. If the potential employee’s assignment is not mission critical, the employee cannot commence work on the delivery order until a favorable NAC is reported. If the potential contractor employee’s assignment is mission critical, DLA J6 will determine if the individual can be granted a waiver. A waiver letter will be submitted to Command for signature. Upon signing, the individual can commence work on this contract at DLA J6. If DLA J6 determines the potential contractor employee is not waiverable and the assignment is mission critical, the potential contractor employee will be released from his/her assignment and will not be further considered for the contract. When the potential contractor employee is cleared for work, the DLA J6 COR/ACOR will notify all interested parties. 12.2 Security Safety and Fire Provisions (Section 01301, dated 4/05/06): Section 01301 provides requirements for standard hours of operation, identification (badge), vehicle registration, security, safety and fire provisions. 13. Government-Furnished Equipment (GFE)/Government-Furnished Information (GFI). The Government will provide all necessary workspace and routine office supplies, to include phones, workstations, access to fax machines and copiers, voice mail and email access. The Government will provide security access to all necessary computer systems. 14. Other Pertinent Information or Special Considerations. 14.1 Language All contractor personnel shall be fluent in speaking, reading and writing English. 14.1.1 Personnel Expertise The contractor shall certify candidates are capable of performing in the position recommended. The contractor shall be responsible for providing personnel with expertise in systems, software and hardware. Contractor SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 16 of 50 personnel assigned to this task shall keep current on the technologies associated with this contract, including stateof-the-art work and commercial systems in the technology areas associated with the performance of this contract. It shall be incumbent upon the contractor to upgrade technical skills via training should new technology become necessary for existing personnel to successfully complete their tasks. The costs of maintaining these skills shall be the sole responsibility of the contractor. There may be occasions in the dynamic DESKTOP environment in which the Government provides specific technical training. This possibility shall be at the discretion of the DLA J6 COR/ACOR or COTR/ACOTR. The contractor shall provide technical personnel to assess, analyze, and advise on the latest relevant industry information on computing technology, products, and system enhancements, which may be available to increase/enhance DLA J6 Enterprise operating effectiveness. The contractor shall stay current with new technologies and make recommendations to improve the current technical environment, applications, processes and databases through technical enhancements, operations’ support, integration services, implementation of improved processes and procedures, system performance and tuning efforts and the implementation of standards. The contractor shall certify that all personnel assigned to this contract are capable of working independently and with the demonstrated knowledge, skills and expertise in their respective areas, necessary to perform all assigned duties. 14.2.1 Key Personnel: Upon award, the Contractor shall identify key personnel, by name. The DLA J6 COR/ACOR is to be notified of periods of unavailability of all key Contractor personnel during normal duty hours. The Contractor shall notify the DLA J6 COR/ACOR of the expected duration of absence prior to the absence and in as much advance notice as is practicable. The notification shall also include the assignment of the Contractor employee assuming the responsibilities of the key person during his/her absence. NOTE: Key personnel may not be added nor removed from the task without express approval of the DLA J6 COR/ACOR. 14.2.2 Essential Personnel: During the period of performance of the delivery order, certain tasks, during hazardous weather and other emergency situations, performed by Contractor personnel may be designated by the Government as “essential” to the mission operations of DLA J6 Enterprise. An essential employee shall report to work as required, before, during or after regular business hours, and/or remain at work until relieved by proper authority. The Government will provide an acknowledgement letter to the Contractor management to be signed by each Contractor personnel whose tasks have been determined to be essential. Contractor personnel shall not be removed, replaced, or moved within the project, without the express approval of the DLA J6 COR/ACOR and the Government Contracting Officer. Where the Government has requested removal of contractor personnel, the contractor shall provide an appropriately trained replacement. Individuals removed from this contract are removed for the duration of the contract. The contractor shall notify the DLA J6 COR/ACOR within 24 hours when for reasons of personnel resignations, reassignments, terminations, or completion of portions of the contract, named contractor personnel no longer require access to Government computers. 14.3 Hours of Work: SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 17 of 50 14.3.1 Normal Work Hours: The Government defines a normal workday as being of eight hours duration and occurring between the hours of 0630 to 1700 hours, Monday through Friday, excluding Federal Holidays observed by the DLA J6 Enterprise. Except as otherwise specified or approved by the DLA J6 COR/ACOR, the contractor shall be present for hours defined as core operating hours, 9:00 AM to 11:00 and 1:00 PM to 3:00 PM daily. Full 8-hour workdays require a mandatory, minimum 30-minute lunch break. Lunch will occur between the hours of 11:00AM and 1:00 PM. Personnel assigned to the help desk shall conform to the normal duty hours and days of its operation, with specific shifts outlined by the client. Shifts for the help desk will occur for a 24/7 operation. Mission completion may require contractor personnel to occasionally work outside normal agency operating hours. When work is to be performed during other than normal work hours, the contractor shall obtain approval in advance. Request shall be submitted to the Government lead and coordinated through the DLA J6 COR/ACOR. The DLA J6 COR/ACOR shall approve the request prior to work commencement. In the case of an emergency situation in which the contractor employee shall work outside normal duty hours and/or results in work hours greater than forty hours, documentation shall be provided to both a DLA J6 Enterprise Service Area Branch Chief and the DLA J6 COR/ACOR by close of business the next business day. 14.3.2 Normal Work Week: The government defines a normal workweek as forty (40) hours. However, if work demands the contractor to exceed the 40 hour work week, the contractor is required to obtain written approval from the government lead and the COR/ACOR prior to work commencement. Contractors must not exceed the allowable work hours in the calendar month without written prior approval from a government lead and the COR/ACOR. If the maximum allowable hours for the month are exceeded, the contractor will be required to take compensatory time. 14.4 Classified Information: The contractor shall know how to handle, process, and safeguard classified information during the life of the contract. For classified information, the requirement for handling and safeguarding classified information shall be articulated via the DD Form 254, Department of Defense Contract Security Classification Specification. The DD Form 254 conveys to the contractor the applicable security classification, downgrading and classification requirements in the contract. For sensitive unclassified information, the PWS shall articulate the protection requirements to safeguard DLA sensitive information. The Contractor shall protect the classified information described in the Form 254, in accordance with DOD 5220.22-M, Industrial Security Material for Safeguarding Classified Information. Requests for deviations from security practices specified in DOD 5220.22-M for the protection of classified information will not be accepted. 14.5 Ownership of Intellectual Property: All products, source code, technical data, collected and/or created by the contractor at the direction of the Government throughout the life of this delivery order shall remain the sole property of the Government. Any unauthorized use of this Government Property may result in punitive actions. 14.6 Non-Disclosure Statement: Each Contractor employee shall be required to sign a Government generated Certificate of Non-Disclosure certifying that the employee understands that he/she may be exposed to or gain knowledge of Source Selection Information, Proprietary Information, Privacy Act Protected Information, and Limited Rights Data while performing tasks under this award. The Contractor employee further certifies that he/she shall not communicate, transmit, disclose, or otherwise divulge any and all such information. After signing, a copy of the Non-Disclosure Statement will be filed in the Contractor employee’s folder kept in the COR’s office. SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 18 of 50 14.7 Privacy Act: Work on this project requires that personnel have access to Privacy Information. Personnel shall adhere to the Privacy Act, Title 5 of the U.S. Code, Section 552a and applicable agency rules and regulations. 15. Phase-in/Phase-out Services 15.1 In order to allow for a smooth and orderly transfer of responsibility from the incumbent (Contractor 1) to a subsequent (Contractor 2) contractor, the incumbent shall participate in a period of phase-in during which the current workforce will continue to perform the services. Contractor 2 shall complete the necessary steps to prepare for assumption of all operations following the phase-in period. The CO will determine the start of the phase-in period by issuing a “Notice to Proceed”, the phase-in period shall not exceed 30 calendar days. 15.2 Contractor 2 shall assume full operational responsibility for all tasks upon successful completion of all phase-in tasks and approval by CO or COR/COTR. When operational responsibilities are assumed, Contractor 2 shall immediately begin operations in accordance with the PWS requirements. 15.3 Contractor 2 shall provide a Phase-In Plan as part of the quote. The approved Phase-In Plan of the successful offeror will be incorporated into and become part of the resulting contract. 15.4 Phase-out services will be handled in accordance with FAR 52.237-3, Continuity of Services. 16.Knowledge Transfer: Knowledge Transfer will require the contractor and designated government personnel to collaborate. The contractor shall transfer knowledge to designated government personnel via documented reports. 17.DoD 8570.91-M Requirements: DoD 8570.01-M, the DoD Information Assurance Workforce Improvement Program (IA Training) provides guidance and procedures for the training, certification, and management of the DoD workforce conducting Information Assurance functions in assigned duty positions. DoD 8570.1 M specifies that “Contractor personnel supporting IA functions shall be appropriately certified prior to being engaged. The contracting officer will ensure that the contracting personnel are appropriately certified”. In addition to the baseline IA certification requirement for their level, contracting personnel with privileged access must obtain appropriate computing environment (CE) certification for the operating system(s) they support. All contractor employees shall adhere to the DoD Directive 8570.1 to maintain compliance. DISCLOSURE OF ORGANIZATIONAL CONFLICT OF INTEREST AFTER CONTRACT AWARD (a) If the Contractor identifies an actual or potential organizational conflict of interest that has not already been adequately disclosed and resolved (or waived in accordance with FAR 9.503), the Contractor shall make a prompt and full disclosure in writing to the Contracting Officer. This disclosure shall include a description of the action the Contractor has taken or proposes to take in order or resolve the conflict. This reporting requirement also includes subcontractors’ actual or potential organizational conflicts of interest not adequately disclosed and resolved prior to award. (b) Mitigation plan. If there is a mitigation plan in the contract, the Contractor shall periodically update the plan, based on changes such as changes to the legal entity, the overall structure of the organization, subcontractor arrangements, contractor management, ownership, ownership relationships, or modification of the work scope. SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 19 of 50 (End of clause) NOTICE OF POTENTIAL ORGANIZATIONAL CONFLICTS OF INTEREST (a) Notice. The Contracting Officer has determined that this acquisition may give rise to an organizational conflict of interest (OCI). Accordingly, the attention of prospective Offerors is invited to FAR Subpart 9.5 --Organizational Conflicts of Interest. The Contracting Officer shall not award a contract until the Government determines any conflict of interest is reasonably resolved. The Contracting Officer has the sole authority to determine whether an organizational conflict of interest exists and to determine whether the organizational conflict of interest has been reasonably resolved. The OCI plan will not be evaluated as part of mission suitability. However, before being eligible to receive an award, the Offeror shall submit an acceptable OCI plan (including mitigation plans for any identified OCIs). As such, the Government may communicate with any Offeror at any time during the evaluation process concerning its OCI plan. (b) Description of Potential Conflict. The nature of this potential organizational conflict of interest is the existence of conflicting roles that might bias a contractor’s judgment or the existence of an unfair competitive advantage. Because the contractor will be performing program management support, and may have access to financial information, there is a potential for organizational conflict of interest. (c) Responsibility of Offeror. 1) Applying the principles of FAR Subpart 9.5, each Offeror shall assess whether there is an organizational conflict of interest associated with the proposal it submits. The Offeror must explain the actions it intends to use to resolve any organizational conflicts of interest it finds in the Government‘s assessment and its own assessment. If its proposed resolution involves a proposed limitation on future contracting, the Offeror shall include the limitation in its proposal. If the proposed resolution involves use of mitigation techniques, the Offeror shall include the mitigation techniques in its proposal. Offerors may include the limitation of future contracting as well as a mitigation plan when their proposed resolution involves both techniques to address conflicts. 2) Offerors are encouraged to inform the Contracting Officer of any potential conflicts of interest, including those involving contracts with other Government organizations, in their proposal. The contracting officer will use this information to determine whether resolution of those conflicts will be required. 3) If the Offeror‘s proposed action to resolve an organizational conflict of interest is not acceptable, the Contracting Officer will notify the Offeror, providing the reasons why its proposed resolution is not considered acceptable and allow the Offeror a reasonable opportunity to respond before making a final decision on the organizational conflict of interest. (d) Representation. By submission of its offer, the Offeror represents, to the best of its knowledge and belief, that – 1) there are no relevant facts that could give rise to an OCI, as defined in FAR Part 2; or 2) the Offeror has disclosed all relevant information regarding any actual or potential conflicts of interest. SP4701-15-C-0014 DLA Information Operations J6 Enterprise IT Contractor Support Page 20 of 50 (e) Termination for default. If the successful Offeror was aware, or should have been aware, of an OCI before award of this contract and did not fully disclose that conflict to the Contracting Officer, the Government may terminate the contract for default. (f) Waiver. The agency reserves the right to waive the requirements of FAR 9.5, in accordance with FAR 9.503