Program Protection Plan Support

SOURCES SOUGHT ANNOUNCEMENT FOR PREPARATION AND DELIVERY OF PROGRAM PROTECTION PLANS The Army Contracting Command-Aberdeen Proving Ground (ACC-APG), MD is issuing this sources sought synopsis as a means of conducting market research to identify parties having an interest in and the resources to provide non-personal services of primarily drafting and delivering Program Protection Plans (PPPs) for multiple Programs of Record (POR), non-PORs and Mid-Tier Acquisition products and systems. The services to be provided are in support of the Requiring Activity, Project Manager Tactical Radios (PM TR). Per DoD Instruction 5000.02, Incorporating Change 4, dated 31 August 2018 Army Regulation (AR) 70-77, dated 8 June 2018; and the PEO C3T PPP Policy Memorandum, dated 2 April 2019; all acquisition category (ACAT) PORs are required to complete PPPs. As part of this process, PORs will evaluate for critical program information (CPI) and develop measures for its protection. While some programs may not have CPI, every acquisition program (including those with special access content), will perform a critical function analysis (CFA) to identify information communications technology (ICT) components that require supply chain risk management (SCRM) to protect warfighting capabilities, capturing the protection measures in a PPP. Per the PEO C3T PPP Policy Memorandum, all non-PORs (not meeting ACAT requirements) and Mid-Tier Acquisition products and systems are required to complete a PPP. REQUIREMENTS A) Coordination, as needed, with organizations external to PM TR for assistance to complete PPPs. These external organizations include, but are not limited to, the PEO C3T Technology Protection Manager and the Army Research and Technology Protection Center (ARTPC). B) Coordination and completion of all PPP-related activities with PM TR C) OTHER TASKS - to include but not limited to the following: - Complete for staffing two PPPs (one for Leader Radio and one for Manpack Radio) in 12 months, and potentially complete PPPs for other non-Programs of Record and Mid-Tier Acquisition (MTA) programs thereafter. - Assist the PM to make a CPI determination based upon a formal CPI Assessment facilitated by the Army Research and Technology Protection Center (ARTPC). - Complete a Critical Functionality Analysis (CFA) of all information communications technology (ICT) (i.e., critical components) and assign a criticality level per Army and DoD guidance. - Incorporate all information relating to the CFA into the PPP. - Schedule and conduct a Critical Program Information Assessment to occur after completion of the CFA. Document the results in the PPP as applicable. - Perform a vulnerability analysis and risk assessment, after which it will update and complete the PPP, to include final CMs for implementation. - Conduct Supply Chain Risk Management Process. - Conduct reviews of Statements of Work, Requests For Proposal, etc., to ensure that all PPP requirements are properly captured. - Conduct follow-up reviews to ensure that protection guidance stipulated in a PPP has been successfully implemented. - Review PM plans for exportability and foreign involvement to ensure these requirements are captured within the PPP. REQUIRED CAPABILITIES: Interested Sources should have performed the following task within the last five years: - Write (from start to finish) Program Protection Plans following Army Regulation 70-77. - Conduct all required research and coordination with necessary government organizations and agencies without guidance from government lead. - Written CDRLs to ensure that the correct information is requested of and received from the vendor for input into PPPs. - Provide PPP development schedules. - Evaluate critical components and CPI using an Internal Control Evaluation Checklist. - Make a CPI determination based upon a formal CPI Assessment facilitated by the Army Research and Technology Protection Center (ARTPC). - Complete a Critical Functionality Analysis (CFA) of all information communications technology (ICT) (i.e., critical components) and assign a criticality level per Army and DoD guidance. - Incorporate all information relating to the CFA into the PPP. - Schedule and conduct a Critical Program Information Assessment to occur after completion of the CFA. Document the results in the PPP as applicable. - Perform a vulnerability analysis and risk assessment, after which it will update and complete the PPP, to include final CMs for implementation. - Conduct Supply Chain Risk Management Process. - Conduct Critical Functionality Analysis (CFA) Process. - Conduct Critical Program Information Determination (CPI) Process - Have a current SECRET-level (or higher) security clearance, have an active SIPR token, SIPRNET access (physical), and an active SIPRNET email account. - Be able to work independently, with government providing organization POCs and program information, but no guidance. The Government is considering a firm fixed price contract based on delivery of PPP. The estimated period of performance will consist of one-year base and four one-year option periods. The Government is requesting interested sources to submit a statement addressing your ability to meet the stated - required capabilities' in this synopsis. The Government will assess the market information to determine if there is competition. Be advised that the U.S. Government will not be able to set aside this requirement if 2 or more small businesses do not respond with information to support the set-aside. We encourage all small businesses, in all socioeconomic categories (including, 8(a) Business Development Program, Small Disadvantage Business, Historically Underutilized Business Zone, Service-Disabled Veteran-Owned, Women-Owned Small Business concerns), to identify their capabilities in meeting the requirement at a fair market price. This notice is issued solely for information and planning purposes - it does not constitute a Request for Quote (RFQ)/Invitation for Bid (IFB)/Request for Proposal (RFP) or a promise to issue an RFQ, IFB or RFP in the future. This notice does not commit the U.S. Government to contract for any supply or service. Further, the U.S. Government is not seeking quotes, bids or proposals at this time and will not accept unsolicited proposals in response to this sources sought notice. The U.S. Government will not pay for any information or administrative costs incurred in response to this notice. Submittals will not be returned to the responder. Not responding to this notice does not preclude participation in any future RFQ or IFB or RFP, if any is issued. The anticipated NAICS code(s) is: 541330 (Engineering Services). The size standard is $38.5 Million. All responses to this sources sought synopsis shall be submitted no later than 5pm (Eastern Time) 6 August 2019.