1.1.6- Attachment A- SOO_Region 6 Upper Level Watch Rennovation.pdf

DEPARTMENT OF HOMELAND SECURITY (DHS)

June 2021 1

Federal Emergency Management Agency

STATEMENT OF OBJECTIVE (SOO) FOR:

FEMA Region 6, Mission Support Division, Upper-Level Watch Renovation

(NAICS 236220)

Neddra Tucker, Contracting Officer

PROCUREMENT SENSITIVE

INFORMATION

This document contains non-public information intended for use on a need-to-know basis within FEMA only.

Please protect this document as procurement sensitive and handle accordingly.

DEPARTMENT OF HOMELAND SECURITY (DHS)

DHS Statement of Objectives (SOO)

Learn more at fema.gov June 2021 2

Statement of Objectives (SOO) For

Upper-Level Watch Renovation

Purpose

The purpose of this project is to construct, renovate, and maintain the Regional Watch Center (RWC) and associated spaces within FEMA Region 6 at the Federal Regional Center, 800 N Loop 288, Denton, TX. This effort is critical to ensuring sustained, reliable operability and interoperability for incident support, Lifeline stabilization, and operational coordination. The project directly supports the statutory responsibilities of the Regional Administrator as outlined in 6 USC 317, Section 507(c)(2), which require effective, coordinated, and integrated regional preparedness, protection, response, recovery, and mitigation for all hazards, including natural disasters, terrorism, and other man-made incidents.

This build-out fulfills the intent of HSPD-5 and the National Incident Management System (NIMS) by providing a standardized structure and mechanism for Federal, State, and local governments to work together to prepare for, respond to, and recover from domestic incidents, regardless of cause, size, or complexity. The project also implements the requirements of FEMA Directive #104-21-0009, ensuring standardization and operational readiness across the Agency, and expands the successful

RWC/RRCC capability established in other FEMA Regions since 2009.

Project location: Federal Regional Center (FRC), 800 N Loop 288, Denton, TX 76209.

Scope / Installation

This project is developed into two (2) phases to include Phase 1 as the Watch and Conference Room buildout and Phase 2 as the LOG/MAM wall removal and door installation

Phase 1 of the FEMA Region 6 Upper-Level Renovation focuses on converting the existing space into an open Watch Center area, except for approximately 215 square feet located in Room 231B, which will remain as an enclosed secure conference room space. This includes reconfiguring the R6 Watch

Center layout, removing walls as identified in Objective 3. The scope also covers all necessary IT and network infrastructure for up to 8 users, integration of unclassified power, communications, and life safety systems, and the completion of all required documentation for the enclosed secure space located in Room 231B.

Phase 2 addresses Logistics and Mission Assignment Management (MAM) need by removing the wall between Rooms 217 and 218 and designated hallway walls, as well as replacing and installing new doors and frames in Room 231 and other specified locations. This phase includes relocating affected utilities, restoring finishes, and ensuring all work is performed in compliance with applicable safety, security, and environmental standards, while minimizing disruption to ongoing operations.

Learn more at fema.gov June 2021 3

Background

Constructed in 1964, the facility has undergone multiple upgrades over the years. This project is intended to further enhance operational capabilities by removing designated upper-level walls and installing a specialized door to connect with the Regional Response Coordination Center (RRCC), thereby ensuring compliance with current safety and environmental standards.

To address these requirements, the contractor shall provide comprehensive management, labor, materials, tools, and equipment necessary to complete the Upper-Level Wall Removal RM 217, 218, & Watch +RRCC Door as well as perform all required inspections. The contractor is also responsible for cleaning all work areas to preserve the facility’s appearance.

All work shall be performed in accordance with applicable laws, regulations, instructions, and recognized best commercial practices.

General Compliance

• Ensure all design, construction, and installation activities comply with the latest editions of:

o National Electrical Code (NEC) o National Fire Protection Association (NFPA) standards o Occupational Safety and Health Administration (OSHA) regulations (29 CFR 1910 and

1926) o Ensure Secure Space requirements are included o General Services Administration (GSA) facility and space standards o National Environmental Policy Act (NEPA) requirements o Building Owners and Managers Institute (BOMI) standards for facility management o American Society of Heating, Refrigerating and Air-Conditioning Engineers (ASHRAE) standards o All applicable federal, state, and local building codes

Performance Requirements

• Performance Work Statement (PWS) Submission o Submit a detailed Performance Work Statement (PWS) outlining all tasks, schedules, and resource requirements. The PWS shall include a comprehensive project schedule presented as a Gantt chart—identifying key milestones such as planning, demolition/removal, installation, connections, cleanup, and final review/inspection.

o Ensure that all waste and disposable materials generated during wall removal and installation are disposed of off-site in accordance with all applicable federal, state, and local environmental regulations.

• Minimizing Disruptions o Implement provisions to control and mitigate noise, dust, and debris during work hours.

o Coordinate with facility management to minimize operational impacts and avoid interference with critical functions.

o See operating

• Physical Oversight and Management

Learn more at fema.gov June 2021 4 o Provide Skilled on-site supervision during all phases of work.

o Submit regular progress reports to the Project Officer.

o Immediately notify the Project Officer of any issues affecting project schedule or quality.

• Compliance with Build America, Buy America Act (BABAA) o Comply with Federal Government’s Build America, Buy America Act (BABAA) requirements for materials and products.

o Obtain written approval for any waivers prior to procurement.

o Hazardous Materials Handling o Immediately report discovery of hazardous materials (such as asbestos or lead-based paint) to the COR.

o COR will communicate with Safety Officer.

o Await directions for additional testing or protective measures.

o Follow all applicable safety and environmental regulations for handling and disposal.

Period of Performance The Period of Performance (POP) for this project shall begin September 28, 2026 up to 250 federal workdays or if an official contract modification is issued by the Contracting Officer. The

POP includes all phases: planning, design, demolition, construction, installation, inspections, accreditation, and final acceptance. No work shall be performed on weekends or federal holidays without prior written approval.

Place of Performance The primary place of performance will be FEMA Region 6, 800 N. Loop 288, Denton, Texas

76209.

Objectives Objective 1: Planning and Preparation o Conduct site surveys and submit personnel rosters.

o Deliver detailed PWS and Quality Assurance Plan (QASP).

o Coordinate with FEMA to develop a comprehensive project plan and schedule.

o As-built drawings identifying relocated electrical circuits and receptacles.

o Electrical panel directory updates.

o Test results for electrical modifications.

o Warranty information for all installed materials and workmanship (minimum one year unless manufacturer warranty is longer.

o Security zoning capability o Controlled entry sequence o Visitor processing capability o Access authorization capability o Include alarm monitoring o Install classified storage capability o Separation of secure and non-secure spaces o Accreditation documentation strategy

Learn more at fema.gov June 2021 5

Objective 2: Demolition and Removal o Conduct asbestos and hazardous materials testing and abatement as required by

OSHA and NEPA.

o Install protective barriers and implement dust and noise control measures per OSHA and local codes.

o Relocate, disconnect, and cap all affected utilities (power, data, HVAC, fire protection) in accordance with NEC, NFPA, and local codes.

o Dispose of all demolition debris in compliance with environmental regulations and

NEPA.

o Promptly remove and dispose of all waste and debris off government property.

Objective 3: Installation/Connections (Phase 1 & 2) o Phase 1: Watch Center Renovation o Remove the wall between Room 231E and Room 236 to expand the footprint.

▪ Approximately 25x10 linear feet of aluminum wall o Reinforce walls in Room 231B for acoustic protection/soundproof in effort to reach a secret accreditation.

o Remove the wall in the adjacent hallway to facilitate access and egress.

o Remove 20x10 linear feet of aluminum wall from Room 231D o Remove 20x10 linear feet of aluminum wall from Roon 231C o Remove 14x10 linear feet of aluminum wall from Room 231B o Remove existing wall between Rooms 231C/D and hallway approx. 20 ft o Change main entrance on East hall door to right end swing inward

▪ Use existing hardware and door since it’s undamaged o Build a wall with acoustic protection/soundproof in Room 231B, 3 feet South of original location o Build a 17x10 linear foot wall from South to North o Room 231B installs soundproof ceiling tiles for the conference room o Remove 936 sq ft of ceiling tile, ceiling tile grids, existing light fixtures, and abandoned wire o Reconfigure all HVAC ductwork and test and balance when complete o Include additional airflow at the video wall location o Ensure Fire protection, and life safety systems are compliant with BOMI/ASHRAE codes (NEC, NFPA, ASHRAE, OSHA, local) o Create an invisible or "black box" space by using flat black acoustic or thermal spray insulation on the ceilings and side walls in effort to hide pipes, wires, and structural beams by removing all light reflections (9ft from floor up to ceiling) o Install intrusion detection, access control, and alarm monitoring systems for

Conference Room 231B to support federal accredited secret space.

o Complete all work in accordance with GSA, NEPA, BOMI, and all applicable building codes.

o Remove all asbestos which is equivalent to 90 linear feet within the construction area.

o Deliver all as-built drawings, warranties, and user documentation upon completion.

o Deliver as-built documentation and warranty information for all installed equipment and furnishings.

Learn more at fema.gov June 2021 6 o Phase 2: Logistics (LOG) Wall Removal and MAM Door Installation o Safely remove the wall between Rooms 217 and 218 to create a larger, unified office or functional area.

o Remove the designated wall in the hallway to improve circulation and access.

o Remove the wall between Room 231E and Room 236 (if not already completed under Phase 1).

o Replace the door and frame in Room 231 with a new, code-compliant assembly.

o Insert a new door and frame at the specified location to support MAM operations, ensuring proper field measurements and fit.

o Relocate any affected power, data, and life safety systems (sprinklers, HVAC, lighting) as required by the new layout.

o Repair and restore all adjacent finishes, including ceiling grid and tile, wall surfaces, and flooring.

o Ensure all work areas are cleaned daily and upon completion, with responsible disposal of all debris and surplus materials.

o Conduct all work in accordance with NEC, NFPA, OSHA, ADA, GSA, NEPA, BOMI, ASHRAE, and local building codes.

o Implement dust and noise control measures to minimize disruption to ongoing operations.

o Coordinate with facility management to schedule disruptive activities.

Objective 4: Cleanup o Remove all construction debris, dust, and waste materials from work areas at the end of each workday.

o Sweep, vacuum, or mop floors and surfaces in all affected areas to maintain a clean and safe environment.

o Collect and properly dispose of all trash, packaging, and surplus materials in accordance with federal, state, and local environmental regulations.

o Store tools, equipment, and materials in designated areas to prevent obstruction of walkways, exits, and emergency routes.

o Wipe down and clean all high-touch surfaces (e.g., door handles, switches, workstations) to minimize dust and contamination.

o Inspect work areas for any hazards, spills, or obstructions and address them immediately to maintain OSHA safety compliance.

o Restore all occupied or common areas (hallways, restrooms, break rooms) affected by construction to their original condition and usability at the end of each day.

o Secure all hazardous materials and ensure proper labeling and storage per OSHA and facility requirements.

o Ensure all temporary barriers, signage, and safety controls are in place and clearly visible at the end of each shift.

o Submit daily cleanup verification or checklist to the Project Officer or designated facility representative for review and approval.

Objective 5: Final Review and Inspection o Remove all construction debris, dust, and waste materials from work areas at the end of each workday.

Learn more at fema.gov June 2021 7 o Sweep, vacuum, or mop floors and surfaces in all affected areas to maintain a clean and safe environment.

o Collect and properly dispose of all trash, packaging, and surplus materials in accordance with federal, state, and local environmental regulations.

o Store tools, equipment, and materials in designated areas to prevent obstruction of walkways, exits, and emergency routes.

o Wipe down and clean all high-touch surfaces (e.g., door handles, switches, workstations) to minimize dust and contamination.

o Inspect work areas for any hazards, spills, or obstructions and address them immediately to maintain OSHA safety compliance.

o Restore all occupied or common areas (hallways, restrooms, break rooms) affected by construction to their original condition and usability at the end of each day.

o Secure all hazardous materials and ensure proper labeling and storage per OSHA and facility requirements.

o Ensure all temporary barriers, signage, and safety controls are in place and clearly visible at the end of each shift.

o Submit daily cleanup verification or checklist to the Project Officer or designated facility representative for review and approval.

Objective 6: Crew Competence and Accountability All personnel are provided by the contractor and must possess the appropriate certifications, clearances, and demonstrated experience for their roles, and maintain accountability through regular reporting, supervision, and compliance with all safety and security protocols.

o Ensure all personnel possess appropriate clearances and demonstrate competence.

o Maintain accountability, safety, and quality throughout the project.

o Project Manager: Oversees all phases of the project, ensures compliance with scope, schedule, and quality standards, and serves as the primary point of accountability.

o Architect/Designer: Develops compliant design documents, ensures adherence to building codes, Secure space and project requirements.

o Structural Engineer: Provides calculations and oversight for wall removals, reinforcements, and modifications to ensure structural integrity.

o Mechanical, Electrical, and Plumbing (MEP) Engineers: Design and oversee HVAC, electrical, and plumbing systems in compliance with NEC, NFPA, ASHRAE, and local codes.

o General Construction Crew: Skilled laborers, carpenters, and finishers responsible for demolition, framing, drywall, and general buildout.

o Certified Electricians: Install and test all electrical systems, power distribution, and communications infrastructure per NEC.

o HVAC Technicians: Install, modify, and balance heating, ventilation, and air conditioning systems per ASHRAE and Secure space requirements.

o Fire Protection Specialist: Installs and tests fire detection, suppression, and life safety systems per NFPA and local fire codes.

o IT/Communications Technicians: Install and configure network, telecommunications, and AV systems in compliance with FEMA TRM and GSA standards.

o Environmental/Hazardous Materials Specialist: Conducts hazardous materials testing, abatement, and ensures compliance with OSHA and NEPA.

o Quality Assurance/Quality Control (QA/QC) Inspector: Conducts regular inspections to verify workmanship, code compliance, and adherence to project specifications.

Learn more at fema.gov June 2021 8 o Safety Officer (Contractor): Monitors all work for compliance with OSHA standards, enforces use of PPE, and manages site safety documentation and training.

Operating Constraints o Work hours are limited to Monday–Friday, 08:00–16:00; no work on weekends or federal holidays without prior written approval.

o Facilities may be occupied during working hours; schedule work activities to minimize disruption to ongoing operations.

o High-noise or utility disruption tasks must be coordinated with facility management at least one week in advance.

o All materials delivered to the site must be inventoried and reported to the Contracting

Officer’s Representative (COR).

o Comply with OSHA safety standards, including the use of appropriate personal protective equipment (PPE) at all times.

o Site storage is limited; coordinates just-in-time delivery of materials and ensure daily removal of debris and surplus materials.

o Adhere strictly to facility access and security protocols, including badging, sign-in/out procedures, and escort requirements where applicable.

o Immediately report the discovery of any hazardous materials (e.g., asbestos, lead-based paint) to the COR and await further instructions.

o Coordinate parking, loading, and equipment staging with facility management to avoid congestion and maintain emergency access routes.

o All labor must comply with federal wage standards (e.g., Davis-Bacon Act, Service

Contract Act).

o Maintain clear and unobstructed egress routes and emergency exits at all times.

o Temporary barriers, signage, and safety controls must be installed and maintained as required.

o All contractor personnel must possess appropriate security clearances and background checks as required by FEMA and DHS policy.

o Any deviation from the approved work plan or schedule must be communicated to and approved by the COR.

o No smoking, vaping, or use of open flames is permitted within the facility or designated work areas.

o Use of radios, music, or other non-essential electronic devices is prohibited unless authorized by facility management.

o All deliveries and waste removal must be scheduled to avoid peak facility traffic hours and minimize operational impact.

o Maintain a clean and orderly worksite at all times, with daily cleanup and restoration of affected areas.

Deliverable Schedule TASK DELIVERABLES Completion

Timeframe

Planning and

Preparation (Site Survey and PWS approval)

The plan shall include detailed project schedule, drawings, noise impacts, schematics, impacts on employees. Plans to detail how Contractor will manage health and safety of crew on site.

5 days after award date

Learn more at fema.gov June 2021 9

Roster Submission Upon award, provide a list of employees on an NCIC form that will need access to the facility during the Period of Performance of the contract.

Ensure a supervisor is onsite throughout the duration of the project.

2 days after award date

Design and order equipment

Finalized designs, equipment orders, arrival notifications 2 days after award date

Phase 1: Watch

Construction

Wall removal, Secure Conference Room buildout, security systems, infrastructure installation

Within 90 days after NTP

Phase 2: LOG/MAM

Buildout

Wall removal, door installation, utility relocation, finish restoration Within 60 days after Phase 1 complete

Phase 3: Workstation

Install

Install 13 workstations, IT/comm setup, testing Within 30 days after Phase 2 complete

Daily Cleanup Daily removal of debris, cleaning, safety checks Ongoing, daily throughout project

Final Cleanup Complete removal of all waste, site restoration 1 day after project completion

Review and Inspection Reports, as-builts, secure space accreditation, user training, acceptance Within 5 days after cleanup

Safety

1. Providing Safety Data Sheets (SDS)

• Requirement: Contractors must provide Safety Data Sheets for all hazardous materials used or brought onsite.

• Coordination: Contracting Officers or COR must ensure that SDS are submitted, reviewed, and accessible to all relevant personnel before materials are approved for use.

• Reference: The Safety and Occupational Health Specialist reviews compliance with OSHA and

DHS/FEMA safety program manuals.

2. Safety Approval of Materials

• Requirement: All materials, especially those with potential hazards (chemicals, equipment, etc.), must be approved by the Safety and Occupational Health Specialist prior to use.

• Coordination: Contracting Officers or COR must coordinate with the Safety Specialist to verify materials that meet safety standards and regulatory requirements (OSHA, EPA, DHS directives).

• Reference: The specialist inspects equipment and materials, reviews contracts, and provides technical input on safety and occupational health matters.

3. Wearing Proper Protective Equipment (PPE)

• Requirement: Contractors and their employees must wear appropriate PPE as specified by OSHA standards and site-specific safety guidelines.

Learn more at fema.gov June 2021 10

• Coordination: Contracting Officers or COR must ensure contract language requires PPE use and verify compliance during site visits and inspections.

• Reference: The Safety Specialist advises supervisors and employees on safety measures, inspects work practices, and ensures compliance with protective device requirements.

4. Working Based on OSHA Requirements

• Requirement: All contractor activities must comply with OSHA regulations (29 CFR 1910 and

1926) and any additional DHS/FEMA safety requirements.

• Coordination: Contracting Officers or COR must include OSHA compliance clauses in contracts, facilitate training, and coordinate with the Safety Specialist for inspections and mishap investigations.

• Reference: The Safety Specialist develops and implements Occupancy Emergency Plan (OEP) program guidelines, investigates accidents, and reviews safety activities for compliance.

Summary Table

Safety Need Contracting Officer Coordination Requirement Reference from Position

Description

Safety Data Sheets

(SDS)

Ensure contractors submit SDS for all hazardous materials; review and make accessible before approval.

Engineering/contract review, OSHA/DHS/FEMA manuals

Safety Approval of

Materials

Coordinate approval of all materials with Safety

Specialist; verify compliance with safety standards and regulations.

Inspections, contract reviews, technical input

Proper Protective

Equipment

Require PPE in contracts; verify use during site visits and inspections.

Advising, inspecting, compliance with protective devices

OSHA

Requirements

Include OSHA compliance in contracts; facilitate training; coordinate inspections and mishap investigations.

Program guidelines, accident investigations, compliance

*Additional Notes*

• Ensure all safety requirements are clearly stated in contracts and communicated to contractors.

• Facilitate access to safety resources and training as needed.

• Coordinate with the Safety and Occupational Health Specialist for technical guidance, inspections, and mishap investigations.

• Maintain documentation of compliance and corrective actions.

Security

All personnel require access to unclassified information only. Contractors must ensure contractor employees receive a favorably background investigation prior to entry on duty (EOD). All individuals will be U.S. citizens. The contractor shall follow the standards established within DHS and FEMA policy.

Unauthorized Disclosure of Classified or Unclassified Information:

Learn more at fema.gov June 2021 11

Contractors and Subcontractors who are working on this contract shall receive Unauthorized

Disclosure of Classified or Unclassified Information training. Access to the training can be obtained at:https://securityawareness.usalearning.gov/unauthorizedrefresher/index.htm

Send the certificate of completion to the FEMA Contracting Officer Representative no later than 30 calendar days after awarded contract. New employees entering the contract must receive the briefing within ten (10) business days of joining the contract.

For Official Use Only (FOUO) Information:

In accordance with DHS Management Directive 11042.1 contractors, consultants and others to whom access is granted will abide by 11042.1; DHS policy regarding the identification and safeguarding of sensitive but unclassified information originated within DHS. It also applies to other sensitive but unclassified information received by DHS from other government and non-governmental activities.

The contractor will: Be aware of and comply with the safeguarding requirements for “For Official

Use Only” (FOUO) information as outlined in this directive.

Participate in formal classroom or computer-based training sessions presented to communicate the requirements for safeguarding FOUO and other sensitive but unclassified information.

Be aware that divulging information without proper authority could result in administrative or disciplinary action.

Contractors and Consultants shall execute a DHS Form 11000-6, Sensitive but Unclassified

Information Non Disclosure Agreement (NDA), as a condition of access to such information. Other individuals not assigned to or contractually obligated to DHS, but to whom access to information will be granted, may be requested to execute an NDA as determined by the applicable program manager. Execution of the NDA shall be effective upon date of the DHS Policy and not applied retroactively.

Unauthorized Disclosure of Classified or Unclassified Information

Contractors and Subcontractors who are working on this contract shall receive the Unauthorized

Disclosure of Classified or Unclassified Information training.

Access to the training can be obtained at:

https://securityawareness.usalearning.gov/unauthorizedrefresher/index.htm

Send the certificate of completion to the FEMA Contracting Officer Representative no later than 30 calendar days after awarded contract. New employees entering the contract must receive the briefing within ten (10) business days of joining the contract.

Other Clauses https://securityawareness.usalearning.gov/unauthorizedrefresher/index.htm https://securityawareness.usalearning.gov/unauthorizedrefresher/index.htm

Learn more at fema.gov June 2021 12

3052.204-71 Contractor employee access.

As prescribed in (HSAR) 48 CFR 3004.470-4(a), insert the following clause with appropriate alternates:

CONTRACTOR EMPLOYEE ACCESS (JULY 2023)

(a) Controlled Unclassified Information (CUI) is any information the Government creates or possesses, or an entity creates or possesses for or on behalf of the Government (other than classified information) that a law, regulation, or Governmentwide policy requires or permits an agency to handle using safeguarding or dissemination controls. This definition includes the following CUI categories and subcategories of information:

(1) Chemical-terrorism Vulnerability Information (CVI) as defined in 6 CFR part 27, “Chemical

Facility Anti-Terrorism Standards,” and as further described in supplementary guidance issued by an authorized official of the Department of Homeland Security (including the Revised Procedural

Manual “Safeguarding Information Designated as Chemical-Terrorism Vulnerability Information” dated September 2008);

(2) Protected Critical Infrastructure Information (PCII) as set out in the Critical Infrastructure

Information Act of 2002 (title XXII, subtitle B of the Homeland Security Act of 2002 as amended through Pub. L. 116–283), PCII’s implementing regulations (6 CFR part 29), the PCII Program

Procedures Manual, and any supplementary guidance officially communicated by an authorized official of the Department of Homeland Security, the PCII Program Manager, or a PCII Program

Manager Designee;

(3) Sensitive Security Information (SSI) as defined in 49 CFR part 1520, “Protection of Sensitive

Security Information,” as amended, and any supplementary guidance officially communicated by an authorized official of the Department of Homeland Security (including the Assistant Secretary for the Transportation Security Administration or designee), including Department of Homeland

Security MD 11056.1, “Sensitive Security Information (SSI)” and, within the Transportation Security

Administration, TSA MD 2810.1, “SSI Program”;

(4) Homeland Security Agreement Information means information the Department of Homeland

Security receives pursuant to an agreement with State, local, Tribal, territorial, or private sector partners that is required to be protected by that agreement. The Department receives this information in furtherance of the missions of the Department, including, but not limited to, support of the Fusion Center Initiative and activities for cyber information sharing consistent with the

Cybersecurity Information Sharing Act of 2015;

(5) Homeland Security Enforcement Information means unclassified information of a sensitive nature lawfully created, possessed, or transmitted by the Department of Homeland Security in furtherance of its immigration, customs, and other civil and criminal enforcement missions, the unauthorized disclosure of which could adversely impact the mission of the Department;

Learn more at fema.gov June 2021 13

(6) International Agreement Information means information the Department of Homeland Security receives that is required to be protected by an information sharing agreement or arrangement with a foreign government, an international organization of governments or any element thereof, an international or foreign public or judicial body, or an international or foreign private or non-governmental organization;

(7) Information Systems Vulnerability Information (ISVI) means:

(i) Department of Homeland Security information technology (IT) systems data revealing infrastructure used for servers, desktops, and networks; applications name, version, and release;

switching, router, and gateway information; interconnections and access methods; and mission or business use/need. Examples of ISVI are systems inventories and enterprise architecture models.

Information pertaining to national security systems and eligible for classification under Executive

Order 13526 will be classified as appropriate; and/or

(ii) Information regarding developing or current technology, the release of which could hinder the objectives of the Department, compromise a technological advantage or countermeasure, cause a denial of service, or provide an adversary with sufficient information to clone, counterfeit, or circumvent a process or system;

(8) Operations Security Information means Department of Homeland Security information that could be collected, analyzed, and exploited by a foreign adversary to identify intentions, capabilities, operations, and vulnerabilities that threaten operational security for the missions of the Department;

(9) Personnel Security Information means information that could result in physical risk to

Department of Homeland Security personnel or other individuals whom the Department is responsible for protecting;

(10) Physical Security Information means reviews or reports illustrating or disclosing facility infrastructure or security vulnerabilities related to the protection of Federal buildings, grounds, or property. For example, threat assessments, system security plans, contingency plans, risk management plans, business impact analysis studies, and certification and accreditation documentation;

(11) Privacy Information includes both Personally Identifiable Information (PII) and Sensitive

Personally Identifiable Information (SPII). PII refers to information that can be used to distinguish or trace an individual’s identity, either alone, or when combined with other information that is linked or linkable to a specific individual; and SPII is a subset of PII that if lost, compromised, or disclosed without authorization could result in substantial harm, embarrassment, inconvenience, or unfairness to an individual. To determine whether information is PII, DHS will perform an assessment of the specific risk that an individual can be identified using the information with other information that is linked or linkable to the individual. In performing this assessment, it is important to recognize that information that is not PII can become PII whenever additional information

Learn more at fema.gov June 2021 14 becomes available, in any medium or from any source, that would make it possible to identify an individual. Certain data elements are particularly sensitive and may alone present an increased risk of harm to the individual.

(i) Examples of stand-alone PII that are particularly sensitive include: Social Security numbers

(SSNs), driver’s license or State identification numbers, Alien Registration Numbers (A-numbers), financial account numbers, and biometric identifiers.

(ii) Multiple pieces of information may present an increased risk of harm to the individual when combined, posing an increased risk of harm to the individual. SPII may also consist of any grouping of information that contains an individual’s name or other unique identifier plus one or more of the following elements:

(A) Truncated SSN (such as last 4 digits);

(B) Date of birth (month, day, and year);

(C) Citizenship or immigration status;

(D) Ethnic or religious affiliation;

(E) Sexual orientation;

(F) Criminal history;

(G) Medical information; and

(H) System authentication information, such as mother’s birth name, account passwords, or personal identification numbers (PINs).

(iii) Other PII that may present an increased risk of harm to the individual depending on its context, such as a list of employees and their performance ratings or an unlisted home address or phone number. The context includes the purpose for which the PII was collected, maintained, and used.

This assessment is critical because the same information in different contexts can reveal additional information about the impacted individual.

(b) Information Resources means information and related resources, such as personnel, equipment, funds, and information technology.

(c) Contractor employees working on this contract must complete such forms as may be necessary for security or other reasons, including the conduct of background investigations to determine suitability. Completed forms shall be submitted as directed by the Contracting Officer. Upon the

Contracting Officer’s request, the Contractor’s employees shall be fingerprinted or subject to other investigations as required. All Contractor employees requiring recurring access to government facilities or access to CUI or information resources are required to have a favorably adjudicated background investigation prior to commencing work on this contract unless this requirement is waived under Departmental procedures.

Learn more at fema.gov June 2021 15

(d) The Contracting Officer may require the Contractor to prohibit individuals from working on the contract if the Government deems their initial or continued employment contrary to the public interest for any reason, including, but not limited to, carelessness, insubordination, incompetence, or security concerns.

(e) Work under this contract may involve access to CUI. The Contractor shall access and use CUI only for the purpose of furnishing advice or assistance directly to the Government in support of the

Government’s activities, and shall not disclose, orally or in writing, CUI for any other purpose to any person unless authorized in writing by the Contracting Officer. For those Contractor employees authorized to access CUI, the Contractor shall ensure that these persons receive initial and refresher training concerning the protection and disclosure of CUI. Initial training shall be completed within 60 days of contract award and refresher training shall be completed every 2 years thereafter.

(f) The Contractor shall include this clause in all subcontracts at any tier where the subcontractor may have access to government facilities, CUI, or information resources.

(End of clause)

ALTERNATE I (JULY 2023)

When the contract will require Contractor employees to have access to information resources, add the following paragraphs:

(g) Before receiving access to information resources under this contract, the individual must complete a security briefing; additional training for specific categories of CUI, if identified in the contract; and any nondisclosure agreement furnished by DHS. The Contracting Officer’s

Representative (COR) will arrange the security briefing and any additional training required for specific categories of CUI.

(h) The Contractor shall have access only to those areas of DHS information resources explicitly stated in this contract or approved by the COR in writing as necessary for performance of the work under this contract. Any attempts by Contractor personnel to gain access to any information resources not expressly authorized by the terms and conditions in this contract, or as approved in writing by the COR, are strictly prohibited. In the event of violation of this provision, DHS will take appropriate actions with regard to the contract and the individual(s) involved.

(i) Contractor access to DHS networks from a remote location is a temporary privilege for mutual convenience while the Contractor performs business for DHS. It is not a right, a guarantee of access, a condition of the contract, or government-furnished equipment (GFE).

(j) Contractor access will be terminated for unauthorized use. The Contractor agrees to hold and save DHS harmless from any unauthorized use and agrees not to request additional time or money under the contract for any delays resulting from unauthorized use or access.

Learn more at fema.gov June 2021 16

(k) Non-U.S. citizens shall not be authorized to access or assist in the development, operation, management, or maintenance of Department IT systems under the contract, unless a waiver has been granted by the Head of the Component or designee, with the concurrence of both the

Department’s Chief Security Officer (CSO) and the Chief Information Officer (CIO) or their designees.

Within DHS Headquarters, the waiver may be granted only with the approval of both the CSO and the CIO or their designees. In order for a waiver to be granted:

(1) There must be a compelling reason for using this individual as opposed to a U.S. citizen; and

(2) The waiver must be in the best interest of the Government.

(l) Contractors shall identify in their proposals the names and citizenship of all non-U.S. citizens proposed to work under the contract. Any additions or deletions of non-U.S. citizens after contract award shall also be reported to the Contracting Officer.

(End of clause)

Alternate II (JULY 2023)

When the Department has determined contract employee access to controlled unclassified information or Government facilities must be limited to U.S. citizens and lawful permanent residents, but the contract will not require access to information resources, add the following paragraphs:

(g) Each individual employed under the contract shall be a citizen of the United States of America, or an alien who has been lawfully admitted for permanent residence as evidenced by a Permanent

Resident Card (USCIS I-551). Any exceptions must be approved by the Department's Chief Security

Officer or designee.

(h) Contractors shall identify in their proposals, the names and citizenship of all non-U.S. citizens proposed to work under the contract. Any additions or deletions of non-U.S. citizens after contract award shall also be reported to the Contracting Officer.

(End of clause)

Alternate II (JUN 2006) When the Department has determined contract employee access to sensitive information or Government facilities must be limited to U.S. citizens and lawful permanent residents, but the contract will not require access to IT resources, add the following paragraphs:

(g) Each individual employed under the contract shall be a citizen of the United States of America, or an alien who has been lawfully admitted for permanent residence as evidenced by a Permanent

Resident Card (USCIS I-551). Any exceptions must be approved by the Department's Chief Security

Officer or designee.

Learn more at fema.gov June 2021 17

(h) Contractors shall identify in their proposals, the names and citizenship of all non-U.S. citizens proposed to work under the contract. Any additions or deletions of non-U.S. citizens after contract award shall also be reported to the Contracting Officer.

Foreign Travel and Government-Issued Equipment

Per DHS and FEMA IT policy, FEMA employees and contractors are not authorized to take government-issued equipment, including cell phones, computers, or tablets such as iPads, outside of the United States regardless of the reason for travel. If government-issued equipment is required for official foreign travel, FEMA government employees may request a temporary loaner device through the Mobility Service Center.Office of the Chief Information Officer, Service Center for the duration of their trip. FEMA contractors must contact their contracting officer’s representative

(COR) for further guidance.

If your device is detected as operating outside of the United States and its territories it will be disabled, and your information will be forwarded to the Office of Professional Responsibility for review.

Background Investigations

All contractor personnel who require access to DHS or FEMA information systems, routine access to DHS or FEMA facilities, or access to sensitive information, including but not limited to Personally

Identifiable Information (PII), shall be subject to a full background investigation commensurate with the level of the risk associated with the job function or work being performed. FEMA’s Personnel

Security Division (PSD) will determine the risk designation for each contractor position by comparing the functions and duties of the position against those of a same or similar federal position, applying the same standard for evaluating the associated potential for impact on the integrity and efficiency of federal service.

Low Risk without Information System Access

Contractor personnel occupying positions or performing functions with a Low-Risk designation and who do not require access to DHS or FEMA information systems may undergo a Tier 1 investigation with a credit check and must receive a favorable adjudication thereof from FEMA PSD prior to performing work under this contract. (also reference Facility Access).

Low Risk with Information System Access

Contractor personnel occupying positions or performing functions with a Low-Risk designation and who require access to DHS or FEMA information systems shall undergo a Tier 2 Suitability

Background Investigation (T2) and must receive a favorable adjudication thereof from FEMA PSD prior to performing work under this contract.

Moderate Risk https://usfema.sharepoint.com/teams/FEMAET/it_tools/tsc/Pages/default.aspx

Learn more at fema.gov June 2021 18

Contractor personnel occupying positions or performing functions with a Moderate Risk designation shall undergo a Tier 2 Suitability Background Investigation (T2) and must receive a favorable adjudication thereof from FEMA PSD prior to performing work under this contract.

High Risk

Contractor personnel occupying positions or performing functions with a High-Risk designation shall undergo a Tier 4 Suitability Background Investigation (T4) and must receive a favorable adjudication thereof from FEMA PSD prior to performing work under this contract.

Background Investigation Process

To initiate the request to process contractor personnel, the Contractor shall provide the FEMA

Contracting Officer’s Representative (COR) with all required information and comply with all necessary instructions to complete Section II of the FEMA Form 121-3-1-6, “Contract

Fitness/Security Screening Request.” The FEMA COR shall ensure that all other applicable sections of the FEMA Form 121-3-1-6 are complete prior to submitting the form to FEMA PSD for processing.

The Contractor shall also provide the FEMA COR with completed OF 306, “Declaration for Federal

Employment,” forms for all contractor personnel.

Contractor personnel who already have a favorably adjudicated background investigation, may be eligible to perform work under this contract without further processing by FEMA PSD if: the investigation was completed within the last five years, it meets or exceeds the minimum requirement for the position they will occupy or functions they will perform on this contract, the contractor personnel have not had a break in employment since the prior favorable adjudication, and, FEMA PSD has verified the investigation and confirmed that no new derogatory information has been disclosed which may require a reinvestigation.

FEMA PSD will notify the COR of the names of the contractor personnel eligible to work based on prior, favorable adjudication. The COR will, in turn, notify the Contractor of the names of the favorably adjudicated contractor personnel, at which time the favorably adjudicated contractor personnel will be eligible to begin work under this contract.

For those contractor personnel who do not have an acceptable, prior, favorable adjudication or who otherwise require reinvestigation, FEMA PSD will issue an electronic notification via email directly to the contractor applicant/personnel that contains the following documents, which are incorporated into this contract by reference, along with a link to the National Background

Investigation Services (NBIS) e-Application (eAPP) online system and instructions for submitting the necessary information:

Standard Form 85P, “Questionnaire for Public Trust Positions”

Optional Form 306, “Declaration for Federal Employment”

SF 87, “Fingerprint Card” (2 copies)

Learn more at fema.gov June 2021 19

DHS Form 11000-6, “Non-Disclosure Agreement”

DHS Form 11000-9, “Disclosure and Authorization Pertaining to Consumer Reports Pursuant to the Fair Credit Reporting Act”

FEMA PSD will only accept complete packages consisting of all of the above document and

Standard Form 85P, which must be completed electronically through the National Background

Investigation Services (NBIS) e-Application (eAPP) online system. The Contractor is responsible for ensuring that all contractor personnel timely and properly submit all required background information.

Once contractor personnel have properly submitted the complete package of all required background information, FEMA’s Personnel Security Division, at its sole discretion, may grant contractor personnel temporary eligibility to perform work under this contract prior to completion of the full background investigation if the Personnel Security Division’s initial review of the contractor personnel’s background information reveals no issues of concern. In such cases, FEMA’s Personnel Security Division will provide notice of such temporary eligibility to the COR who will then notify the Prime Contractor, at which time the identified contractor personnel will be temporarily eligible to begin work under this contract. Neither the Prime Contractor nor the contractor personnel have any right to such a grant of temporary eligibility. The grant of such temporary eligibility shall not be considered as assurance that the contactor personnel will remain eligible to perform work under this contract upon completion of and final adjudication of the full background investigation.

Upon favorable adjudication of the full background investigation, FEMA’s Personnel Security

Division will update the contractor personnel’s security file and take no further action. In any instance where the final adjudication results in an unfavorable determination, FEMA’s Personnel

Security Division will notify the contractor personnel directly, in writing, of the decision and will provide the COR with the name(s) of the contractor personnel whose adjudication was unfavorable.

The COR will then forward that information to the Contractor. Contractor personnel who receive an unfavorable adjudication shall be ineligible to perform work under this contract. Unfavorable adjudications are final and not subject to review or appeal.

Continued Eligibility and Reinvestigation

Eligibility determinations based on a Low Risk T1, Moderate Risk T2S or High Risk T4 are valid for five years from the date that the investigation was completed and closed. Contractor personnel required to undergo a background investigation to perform work under this contract shall be ineligible to perform work under this contract upon the expiration of the background investigation unless and until the contractor personnel have undergone a reinvestigation and FEMA’s Personnel

Security Division has renewed their eligibility to perform work under this contract.

Exclusion by Contracting Officer

Learn more at fema.gov June 2021 20

The Contracting Officer, independent of FEMA’s Personnel Security Division, may direct the

Contractor be excluded from working on this contract. Any contractor found or deemed to be unfit or whose continued employment on the contract is deemed contrary to public interest or inconsistent with the best interest of the agency may be removed.

Facility Access

The Contractor shall comply with FEMA Directive 121-1 “FEMA Personal Identity Verification

Guidance,” FEMA Directive 121-3 “Facility Access,” and FEMA Manual 121-3-1 “FEMA

Credentialing Access Manual,” to arrange for contractor personnel’s access to FEMA facilities, which includes, but is not limited to, arrangements to obtain any necessary identity badges for contractor personnel.

Contractor personnel working within any FEMA facility who do not require access to DHS or FEMA

IT systems and do not qualify for a PIV Card may be issued a Facility Access Card (FAC).