1.05 Performance Work Statement.pdf

Performance Work Statement (PWS) Naval Information Warfighting Development Center (NIWDC)

SPECIAL SECURITY OFFICER (SSO) ASSISTANT

CREQ 23-17

1. GENERAL: This is a non-personnel services contract to provide general security administrative support. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

2. Description of Services/Introduction: The Contractor shall perform general security administration duties necessary to meet the needs of NIWDC. The Contractor shall assist with performing a wide variety of complex security duties as defined in this Performance Work Statement.

3. Objectives: In support of the Performance Work Statement (PWS), the contractor shall provide qualified personnel to support the NIWDC security mission by providing support in the following areas General Security duties, Information Security, Physical Security, assist in Special Security Administrative tasks and Access/Visitor Control Support.

4. Scope: To provide support to the Special Security Officer (SSO) and Special Security Representative to include but not limited to: answering routine customer questions with accurate and complete information; provide support at meetings; report incidents; assist with training, walkthroughs, inspections, surveys, badging and submitting work request/ trouble tickets; assist with LENELSystem; assist with accountable material and Sensitive Compartmented Information Facility (SCIF) visits; maintain electronic and hard copy records; assist department with annual personnel scrub list and maintain access lists; forward all correspondents received from department Sensitive Compartmented Information (SCI) cleared employees to the Special Security Officer (SSO) and Assistant Special Security Officer (ASSO); assist personnel/police officers with alarm drills and documentation; assist with conducting Administrative Inspections and providing documentation; other related duties as assigned by the SSO, ASSO or Special Security Representative (SSR); verify clearances levels of visitors and tenants; assist with escorting visitors;

issue appropriate badges to all visitors entering building; complete end-of-day security checks; maintain control and inventory of all NIWDC visitor badges.

5. Period of Performance: The period of performance shall be for one (1) Base Year of 12 months and four (4) 12-month option years, inclusive of the potential FAR 52.217-8 six (6) month extension. The Period of Performance reads as follows:

Base Year 5 September 2023 – 4 September 2024 Option Year I 5 September 2024 – 4 September 2025 Option Year II 5 September 2025 – 4 September 2026 Option Year III 5 September 2026 – 4 September 2027 Option Year IV 5 September 2027 – 4 September 2028 FAR 52.217-8 5 September 2028 – 4 March 2029

6. Place of Performance: NIWDC Headquarters, Joint Reserve Intelligence Center, 7941 Blandy Road, BLDG NH- 139, Norfolk, VA 23511.

7. Recognized Holidays: The contractor is generally not required to provide services on these days New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Independence Day Christmas Day Juneteenth

8. Hours of Operation: The contractor is responsible for conducting business, between the hours of 0630 and 1730 local time. Monday thru Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. For other than firm fixed price contracts, the contractor will not be reimbursed when the government facility is closed for the above reasons. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential.

9. Quality Assurance: The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

10. Security Requirements:

10.1. General Information: The Contractor shall be responsible for adhering to all Department of Defense (DOD), DON, and specific NIWDC command instructions, guidance, orders, directives, and supplements relative to performing tasks set forth in this Performance Work Statement (PWS). The Contractor shall not disclose and must safeguard procurement sensitive information, computer systems and data, Privacy Act data, and Government personnel work products that are obtained or generated in the performance of this contract. This includes dissemination of protocols and papers not generally available through the public literature. Neither the Contractor nor any of its contract service providers shall disclose or cause to disseminate any information concerning operations of military activities. Such action(s) could result in violation of the contract and possible legal actions.

10.2. Operations Security. All work is to be performed in accordance with DOD and Navy Operations Security (OPSEC) requirements and in accordance with the OPSEC attachment to the DD254.

10.3. Clearance: Contractor personnel performing work under this contract must have a TOP SECRET/ SENSITIVE COMPARTMENTED INFORMATION (TS/SCI). The contractor is responsible for acquiring and maintaining security clearances at the level(s) required under this contract. Contractor personnel shall possess a TS/SCI security clearance as designated on the Contract Security Classifications Specifications (DD254). The contractor shall pre-clear new employees prior to starting on the contract and must obtain clearance validation from the command security office in order to obtain a security badge. The following shall be considered before assigning any/all proposed Contractor staff as a part of any contract:

• Personnel who possess TS/SCI clearance SHALL currently be fully adjudicated, and eligible for transfer in status, as of proposal date.

• The Contractor’s Program Manager(s), and/or Facility Security Officer’s SHALL initiate contact to work with the COR, to develop DD-254 forms, NLT 48 hours before Contractor personnel arrive on-site to start work.

• The Contractor’s Program Manager(s), and/or Facility Security Officer’s SHALL ensure that all incoming Contractor personnel have had their Common Access Cards (CAC) from their last job revoked, NLT 48 hours before directing them to contact NAVIFOR Trusted Agents (TA) for issuance of new CAC credentials.

10.4. Branding. The Contractor SHALL not brand (or make any references to award) on their corporate (private or public facing) web site(s), any information that references any of the following information:

- Award of Contract

- Location(s) of performance

- Duration of performance

- Type(s) of work performed

- Government customer name(s)

- Contract or Contractor personnel end strength(s)

11. Identification/Badging:

11.1. Identification. For all services provided under this PWS, the contract employees shall identify themselves as contractor personnel by introducing themselves or being introduced as contractor personnel and displaying distinguishing badges or other visible identification for meetings with Government personnel. Additionally, contractor personnel shall identify themselves as contract employees in telephone conversations and in formal and informal written correspondence.

11.2. Common Access Card. The Government CAC card serves as the primary method of identification for the Contractor employees, as well as providing the basis of Public Key Infrastructure (PKI) access to the Navy/Marine Corps Intranet (NMCI), and numerous Navy web sites, which may also require PKI access. The COR will assist in providing the Contractor the appropriate documentation for obtaining CAC cards.

11.3. Facility Badging. Contract personnel shall wear a badge that clearly identifies them as a Contractor employee.

The badge will be issued by the COR, via the Special Security Office (SSO), and will contain a personal picture, name of employee, and Contractor’s name. While working on the Government site, Contractor employee badges shall be worn on the outer garment, above the waist, in full view at all times, attached to the outer shirt or jacket pocket by a button or clip or worn around the neck secured by an appropriate identification card lanyard.

11.4 Return Requirements. All building security identification badges shall be turned into the SSO that issued the credential, and all CAC cards shall be turned into the COR that issued the credential during normal working hours.

In the event that the Contractor employee checks out at the end of an evening, or mid shift, then both the building security badge, and the CAC credential, shall be turned over to the Contractor’s Government lead before final departure, as the Contractor shall be required to “read out/be debriefed” regarding their clearance, by the servicing SSO, before their final departure. If the contractor does not “read out/be debrief before final departure the same day the contractor SHALL physically come in during normal working hours on the next SSO work day which is Monday through Friday 0730-1600 (7:30 to 4:00). Ultimately, the Contractor shall be responsible for obtaining any Government issued identification cards from employees who are no longer authorized or no longer have a requirement for access to Government facilities and systems, to include employees whose access has been terminated off of the Government site. Identification cards shall be collected immediately (within one hour) of change of employee status and must be turned over to the respective Command Security Officer COR within two (2) business days.

11.5. Government Furnished Information (GFI). GFI will be provided to Contractor employees as needed to complete the tasks set forth in this PWS. Access to classified information must be granted in accordance with the terms and conditions contained in DOD Manual 5220.22-M and DD Form 254 (Contract Security Classification Specification). The Contractor shall comply with all current information assurance awareness, information security policies, procedures, and statutes applicable to DOD information technology; including the July 3, 2007 DOD CIO Policy Memorandum on Encryption of Sensitive Unclassified Data at Rest on Mobile Computing Devices and Removable Storage.

11.6 Government Furnished Equipment (GFE). The Government will provide office space, desk, chair, and common office supplies. In addition to office space, each Contractor employee shall be provided with access to government computers and telephones, but not cellular phones, for official use only. Contractor personnel shall comply with all DOD and Navy IT regulations, policies and procedures including those concerning internet usage and cybersecurity. Specific restrictions Include:

• Under no circumstances will Contractor-provided personal computers, or any personal electronic devices (e.g., cell phones, tablets, Fitbits), be connected to any Government IT system, including but not limited to the Navy/Marine Corps Intranet (NMCI).

• Contractor personnel Contractor personal shall not, at any time, access or attempt to access the following from Government IT assets:

- Corporate Email Accounts

- Personal Email Accounts

- Corporate Portals

- Any Social Networking Site

- Any Web Based News Site

- Any Music Streaming Media Site

- Any Web Based site, that does not directly relate to the assigned job, task, or mission

12. Onboarding Personnel. Contractor awarded this effort shall deliver onboarding Contractor employee/personnel information to the Contracting Officer’s Representative (COR) NLT 48 hours before reporting to place of performance. The Contractor information shall be sent via Signed and Encrypted email, and shall contain the following information, at a minimum, on each incoming Contractor employee/personnel:

• Company Name

• Full Name

• Date of Birth

• Position assigned

• Social Security Number

• Level of Clearance

• Email Address

• Phone Number

13. Government Resources/Facility Access. Access will be granted to Government facilities as required in support of the tasking. Contractor personnel performing work under this contract shall meet all requirements for gaining access to US Government installations. The Contractor shall:

• Conform to all DoD, DoN, and local (base/installation) security instructions (refer to Contractor Unclassified Access to Federally Controlled Facilities, Sensitive Information, Information Technology (IT) Systems or Protected Health Information (July 2013) provided below);

• Comply with all applicable federal, state and local laws and ensure performance is secure while protecting material, equipment, and supplies from damage and loss; and

• Be responsible for safeguarding all government equipment, information, and property provided for Contractor use.

At the close of each work period, Government facilities, equipment and materials shall be secured. Government security personnel will have the express right to inspect work spaces, email accounts, and operating systems, for security violations at any time during the term of the contract.

14. Privacy Act Compliance: The Contractor may be in contact with data and information subject to the Privacy Act of 1974 (Title 5 of the U.S. Code Section 552a). The Contractor shall ensure that its employees assigned to this effort understand and adhere to the requirements of the Privacy Act and to Department of Defense and Department of the Navy regulations that implement the Privacy Act. Department of Navy policy and procedures implementing the Privacy Act are detailed in SECNAVINST 5211.5E (Department of the Navy Privacy Act (PA) Program). The Contractor shall identify and safeguard data, information and reports accordingly. In addition, the Contractor shall ensure that Contractor employees assigned to the contract are trained on properly identifying and handling data and information subject to the Privacy Act prior to commencing work.

15. Data Rights: The government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. U.S. Government records, copies of original results and reports, verified original data, corrected data, and corrected supporting final reports are maintained by the Contractor, but remain the property of the U.S. Government. These files/results must be surrendered to the COR immediately upon demand. All information / documentation provided to or developed by a contractor to assist in the performance of their task shall be considered the property of the Government and will be returned to the designated representative or COR upon completion of the task. This right does not abrogate any other Government rights.

16. General/Administrative Matters:

16.1. Working Hours. 06:30 – 17:30 Monday – Friday, variable schedule, except federal holidays.

16.2. Contract Manager. The Contractor shall designate a Contract Manager who shall serve as the Contractor’s central point of contact to the Government. The name of this person and an alternate who shall act for the Contractor when the Contract Manager is unavailable shall be designated in writing to the COR, Technical Assistant (TA), the COR, and the Task Order Manager (TOM) if applicable. The Contract Manager or alternate shall have full authority to act for the Contractor on all contract matters relating to daily operation of this contract. The Contract Manager shall direct the effort of the contractor personnel and shall report and monitor progress to the COR and TA through direct communication and the contract deliverables. The contractor’s Program Manager may act as the Contract Manager. In addition, Contractor shall submit contact information to the COR for the following:

• Facilities Security Officer phone number, and email address

• Contractor’s Program Manager Phone number, and email address

16.3. Coordination Outside NIWDC. This position shall be able to independently participate in conferences, working groups, meetings, war games and other forums. In no case, however, shall the Contractor imply they are “representing” NIWDC or the Government. All inquiries, comments or complaints arising from any matter observed, experienced, or learned of as a result of or in connection with the performance of this contract, the resolution of which may require the dissemination of official information, shall be directed to the COR and the Contracting Officer (KO).

17. Support Service/Qualifications:

17.1. Labor Categories. The following labor category and number of personnel are estimated to accomplish the scope identified in this Performance Work Statement. Refer to Section 19 (Personnel Requirements) and Section 20 (Labor Category) for details on the expected qualifications for all positions associated with this PWS.

Labor Categories Clearance Location Number of Personnel

Administrative Assistant TS/SCI Government 2

17.2. Placement of Personnel. During the first 90 days of performance, the Contractor shall make no substitutions of SME unless the substitution is necessitated by illness, death, or termination of employment. The Contractor shall notify the COR within 15 calendar days after the occurrence of any of these events and provide any necessary information. Due to the integrated nature of the work and the TS/SCI security clearance requirement, the Contractor shall advise the Government on all changes to personnel during the performance of this effort. Ideally, a minimum of two-week notice shall be given prior to personnel changes being made by the Contractor and emphasis will be placed on a thorough and complete turnover from one member to the other whenever possible. A face-to-face turnover is optimal.

17.3. Resumes. Resumes shall be provided to the Contracting Officer for Contractor personnel.

18. REQUIRED DUTIES/DELIVERABLES: The Contractor shall perform general security administration duties necessary to meet the needs of NIWDC. Deliverables shall be provided to the COR. All final deliverable submissions shall remain the property of the U.S. Government. All revisions will be due in the specified timeframe as identified by the Government. All methodologies and recommendations SHALL be reviewed and approved by the Government prior to submission/implementation. The Contractor shall assist with performing a wide variety of complex security duties. The technical requirements described in this SOW shall require the Contractor to provide support to the special security officer and special security representative to include the following:

18.1 General Security.

- Answer routine customer questions providing customer support and personally respond and take for action any call related to security. The Contractor shall maintain telephone contact with appropriate personnel in support of the work area being supported.

- Provide staff and customers with accurate and complete information on security processes, procedures, and documentation requirements.

- Provide security support at meetings.

- Report security incidents immediately to the Special Security Officer and Special Security

Representative. Provide statements if requested.

18.2 Information Security.

- Assist with providing security education and training to all NIWDC personnel, Contractor support personnel and visitors.

18.3 Physical Security.

- Participate and perform walkthroughs, inspections and surveys. Provide findings of inspections to the Special Security Officer.

- Sanitize spaces for foreign national visits when required.

- Assist with conducting annual department physical security surveys as needed.

- Assist with badging for the LENEL

- Submit security related work requests/trouble tickets in facility service request.

- Perform combination changes for various secure locks and coordinate with facilities trouble tickets for lock issues.

- Control access to classified areas via the LENEL System.

- Instruct department personnel in security practices and procedures pertaining to classified spaces.

- Notify the Special Security Officer of any alarm issues with Sensitive Compartmented Information Facility

(SCIF).

- Assist with instructing department personnel in security practices and procedures pertaining to classified spaces, including opening and closing, visitor control, classified meetings, and courier procedures.

18.4. Special Security Administrative Assistant.

- Assist with performing annual self-inspections per the DoDM 5105.21 and report findings to the Special Security Officer (SSO) and Assistant SSO (ASSO).

- Assist with ensuring all SCI accountable material and all media, regardless of classification located within the SCIF is properly marked and entered into the SSO media tracker.

- Assist with verifying all SCI level visits in SCIF using DISS level 3.

- Maintain electronic SCIF folders, as well as assisting the SSR with the compilation of hard copy records when required.

- Maintain physical, personnel, and information security requirements for SCIFs through administrative inspections and spot checks.

- Assist department employees with annual SCI personnel scrub list.

- Assign SCIF badge accesses and coordinate with space custodians to maintain SCIF access lists.

- Perform combination changes of SCIFs and SCI safes, ensuring the SF-700 and SF-700 continuation sheet

(if required) is fully and accurately completed and delivered to the SSO Office.

- Promptly forward all correspondents received from department SCI cleared employees to the SSO and

ASSO.

- Assist personnel/police officers with quarterly alarm drills and forward all applicable documentation to

SSO office.

- Assist with conducting quarterly bag checks (Administrative Inspections) and monthly unannounced inspections for the SCIF, providing documentation to SSO Office.

- All other SCIF related duties as assigned by the SSO, ASSO or SSR.

18.5. Access/Visitor Control Support. The Contractor shall perform the following for Access/Visitor Control:

- Verify clearances levels of visitors and tenants using DISS levels 3 and 4.

- Respectfully greet visitors, verify clearances and notify point of contact (POC).

- Assist meeting coordinators by receiving list of visitors and verifying their clearances in advance to have badges prepared.

- Utilize sufficient personnel to ensure escort services are provided and have appropriate coverage when needed.

- Assist with escorting visitors without clearances within accredited secure spaces. If the visitor has a

NIWDC sponsor, civilian or Contractor, the Contractor shall notify the point of contact that the visitor is on site. Sign visitor into all secure spaces annotating all fields on visitor log. Maintain a visual on visitor at all time while within the facility. Escort the visitor to the exit at the end of the visit. Sign visitor out of secure spaces annotating time of departure.

- Issue appropriate badges to all visitors entering buildings.

- The Contractor shall assist with the Outlook calendar used for the scheduling appointments, INDOC and all other security related meetings.

- Ensure tenants and visitors are adhering to the Portable Electronic Device Policy.

- Maintain a daily log/database documenting visitors’ names (Visitor, Contractor or Government personnel), Points of Contact (POC), date and time of arrival/departure, employer, and the visitor badge number assigned.

- Maintain authorized personnel list and enable badge access for those personnel meeting established Security and Program requirements.

- Complete end-of-day security checks and annotate as appropriate on the SF701.

- Maintain control of all NIWDC visitor badges and conduct daily inventories to verify badges have been returned. Report any lost badges to the Special SSO and SSR.

- Before visitors arrive, escorts should make sure their own workspace is sanitized of all information that is classified, CUI, and PII.

- When entering other areas, escorts should announce that un-cleared visitors are in the area; ensure co-workers turn over, cover, or store classified, CUI, or PII; walk with the visitors under escort; and visually observe the visitors under escort until they leave NIWDC or another escort assumes the duty. Where it is possible, escorts should turn the “red light” on when un-cleared visitors are in the area.

- All classified, Controlled Unclassified Information (CUI), or PII information displayed on computer screens must be sanitized.

- The escort is required to maintain constant visual contact on personnel escorting.

18.6. Progress Report.

- The Contractor shall submit a Contracting Officer’s Management Report (CDRL A001).

18.7. In Process Reviews (IPR)

- The Contractor shall conduct In-Process Reviews (IPRs) with the Government on a quarterly basis but shall be scheduled as needed with the Contracting Officers Representative (COR).

19. Personnel Requirements: The contractor shall provide personnel with the position-dependent education, experience, qualifications, certification(s), sufficient technical expertise and experience as identified in paragraph 20 below. High School (HS) degree or General Educational Development (GED) plus an additional 4 years of experience beyond the stated minimum experience for each billet will be considered as equivalent for an Associate’s Degree (AA). HS degree or GED plus an additional 8 years of experience beyond the stated minimum experience will be considered as equivalent for a Bachelor’s degree (includes Bachelor of Science (BS) and Bachelor of Arts (BA)). An AA plus 4 years of additional experience will be equivalent to a Bachelor’s degree.

20. Labor Category/Personnel Requirements. Based upon the estimated annual hours for each labor category, a total of 2 person is recommended.

Labor Categories Clearance Location Number of Personnel

Administrative Assistant TS/SCI Government 2

21. Travel Requirements:

a. There is a minimal amount of travel required in support of this task order. All travel costs incurred will be separately priced and executed in accordance with the Federal Travel Regulations (FTR). This directive can be accessed at http://www.gsa.gov/portal/ext/public/site/FTR/file/FTRTOC.html/category/21865/hostUri/portal.

b. A copy of this travel request shall be routed to the COR. Upon validation of the travel requirement, the COR will forward the travel request to the CONTRACTOR with Government approval. Any travel not directly related to this requirement, and validated by the COR, is not chargeable to the Government. Upon return from travel, the CONTRACTOR shall prepare a Travel/Trip Report providing the accomplishments of the travel.

TRAVEL REQUIREMENTS Anticipated: (one person each)

Location # Trips # Days (per trip)

San Diego, CA 2 5

Fort Gordon, GA 1 5

c. Trip Report. The CONTRACTOR SHALL require his/her employees to provide a trip report to the COR within 5 days of return from any periods of travel. The trip report SHALL be in a format prescribed by the CONTRACTOR, but at a minimum, SHALL address the objectives of the travel and whether those objectives were or were not achieved. If not achieved, the circumstances preventing the accomplishment of the objective SHALL also be provided.

21. Definitions.

Clearance: TS/SCI clearance required to work in HQ building.