4.03 - N6883623P0077 - IT Consulting.pdf

SEE ADDENDUM

(No Collect Calls)

N6883623Q0094 21-Feb-2023

b. TELEPHONE NUMBER 8. OFFER DUE DATE/LOCAL TIME

02:00 PM 21 Feb 2023

5. SOLICITATION NUMBER 6. SOLICITATION ISSUE DATE

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

STANDARD FORM 1449 (REV. 2/2012)

Prescribed by GSA – FAR (48 CFR) 53.212

(TYPE OR PRINT)

(SIGNATURE OF CONTRACTING OFFICER)

ADDENDA ARE

X

26. TOTAL AWARD AMOUNT (For Gov t. Use Only )

23.

CODE 10. THIS ACQUISITION IS

SUCH ADDRESS IN OFFER

17b. CHECK IF REMITTANCE IS DIFFERENT AND PUT

BELOW IS CHECKED

TELEPHONE NO.703-957-0298

N688369. ISSUED BY

18b. SUBMIT INVOICES TO ADDRESS SHOWN IN BLOCK 18a. UNLESS BLOCK

N6883623P0077 22-Feb-2023

7. FOR SOLICITATION

INFORMATION CALL:

a. NAME

DEAUNDRAE L. ROGERS

2. CONTRACT NO. 3. AWARD/EFFECTIVE DATE 4. ORDER NUMBER

(TYPE OR PRINT)

30b. NAME AND TITLE OF SIGNER 30c. DATE SIGNED 31b. NAME OF CONTRACTING OFFICER

30a. SIGNATURE OF OFFEROR/CONTRACTOR 31a.UNITED STATES OF AMERICA

27a. SOLICITATION INCORPORATES BY REFERENCE FAR 52.212-1. 52.212-4. FAR 52.212-3. 52.212-5 ARE ATTACHED.

X

25. ACCOUNTING AND APPROPRIATION DATA

1. REQUISITION NUMBER

20.

ADDITIONAL SHEETS SUBJECT TO THE TERMS AND CONDITIONS SPECIFIED.

OFFEROR TO COMPLETE BLOCKS 12, 17, 23, 24, AND 30

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

N3146B23RC0011Z

ARE NOT ATTACHED

27b. CONTRACT/PURCHASE ORDER INCORPORATES BY REFERENCE FAR 52.212-4. FAR 52.212-5 IS ATTACHED. ADDENDA ARE ARE NOT ATTACHED

Gary B. Hall / Contract Specialist

See Schedule $82,618.10

(BLOCK 5), INCLUDING ANY ADDITIONS OR CHANGES WHICH ARE

SET FORTH HEREIN, IS ACCEPTED AS TO ITEMS: SEE SCHEDULE

.21-Feb-2023 YOUR OFFER ON SOLICITATION

28. CONTRACTOR IS REQUIRED TO SIGN THIS DOCUMENT AND RETURN N6883623Q0094

% FOR:SET ASIDE:UNRESTRICTED ORX

SMALL BUSINESS

17a.CONTRACTOR/ CODE 3BJZ6 FACILITY

OFFEROR CODE

NAVSUP FLC JACKSONVILLE CONTRACTS DIV

DEAUNDRAE ROGERS

110 YORKTOWN AVE 3RD FLOOR

JACKSONVILLE FL 32212-0097

CONTINUITY GLOBAL SOLUTIONS LLC

JOHN VILLANO

14901 BOGLE DRIVE, SUITE 205

CHANTILLY VA 20151-1736

DFAS CLEVELAND

NORFOLK ACCOUNT PAYABLE

P O BOX 998022

CLEVELAND OH 44199

18a. PAYMENT WILL BE MADE BY CODE N68732

RATED ORDER UNDER

DPAS (15 CFR 700)

13a. THIS CONTRACT IS A

13b. RATING

CODE

SEE ITEM 9

15. DELIVER TO CODE N57061 16. ADMINISTERED BY

12. DISCOUNT TERMS11. DELIVERY FOR FOB DESTINA-

TION UNLESS BLOCK IS

MARKED

SEE SCHEDULE

14. METHOD OF SOLICITATION

RFQ IFB RFPX

U S NAVAL FORCES SOUTHERN COMMAND

VICTOR BARBA

NAVAL STATION MAYPORT

USNAVSO/FOURTHFLT,

MADDOX AVE., BLDG. 3

JACKSONVILLE FL 32208

904-542-1095FAX:

TEL: 904-383-7310 SERVICE-DISABLED

VETERAN-OWNED

SMALL BUSINESS

8(A)

HUBZONE SMALL

BUSINESS

SIZE STANDARD:

$30,000,000

NAICS:

541512

OFFER DATED

29. AWARD OF CONTRACT: REF.

DELIVER ALL ITEMS SET FORTH OR OTHERWISE IDENTIFIED ABOVE AND ON ANY

COPIES TO ISSUING OFFICE. CONTRACTOR AGREES TO FURNISH AND

X

EMAIL: gary.b.hall.civ@us.navy.mil

904-800-8596TEL:

31c. DATE SIGNED

22-Feb-2023

SEE SCHEDULE

SCHEDULE OF SUPPLIES/ SERVICESITEM NO. QUANTITY UNIT UNIT PRICE AMOUNT

24.22.21.19.

WOMEN-OWNED SMALL BUSINESS (WOSB)

ELIGIBLE UNDER THE WOMEN-OWNED

SMALL BUSINESS PROGRAM

EDWOSB

22 Feb 2022Tauqeer Khalid - CFO

32g. E-MAIL OF AUTHORIZED GOVERNMENT REPRESENTATIVE

SOLICITATION/CONTRACT/ORDER FOR COMMERCIAL ITEMS

(CONTINUED)

PAGE 2 OF46

ACCEPTED, AND CONFORMS TO THE CONTRACT, EXCEPT AS NOTED: ______________________________________________________

32a. QUANTITY IN COLUMN 21 HAS BEEN

RECEIVED INSPECTED

32b. SIGNATURE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32c. DATE 32d. PRINTED NAME AND TITLE OF AUTHORIZED GOVERNMENT

REPRESENTATIVE

32e. MAILING ADDRESS OF AUTHORIZED GOVERNMENT REPRESENTATIVE 32f . TELEPHONE NUMBER OF AUTHORIZED GOVERNMENT REPRESENTATIVE

37. CHECK NUMBER

FINALPARTIALCOMPLETE

36. PAYMENT35. AMOUNT VERIFIED

CORRECT FOR

34. VOUCHER NUMBER

FINAL

33. SHIP NUMBER

PARTIAL

38. S/R ACCOUNT NUMBER 39. S/R VOUCHER NUMBER 40. PAID BY

41a. I CERTIFY THIS ACCOUNT IS CORRECT AND PROPER FOR PAYMENT

41b. SIGNATURE AND TITLE OF CERTIFYING OFFICER 41c. DATE

42a. RECEIVED BY (Print)

42b. RECEIVED AT (Location)

42c. DATE REC'D (YY/MM/DD) 42d. TOTAL CONTAINERS

STANDARD FORM 1449 (REV. 2/2012) BACK

Prescribed by GSA – FAR (48 CFR) 53.212

AUTHORIZED FOR LOCAL REPRODUCTION

PREVIOUS EDITION IS NOT USABLE

SEE SCHEDULE

20.

SCHEDULE OF SUPPLIES/ SERVICES

21.

QUANTITY UNIT

22. 23.

UNIT PRICE

24.

AMOUNT

19.

ITEM NO.

N6883623P0077

Section SF 1449 - CONTINUATION SHEET

ITEM NO SUPPLIES/SERVICES QUANTITY UNIT UNIT PRICE AMOUNT

0001 2 Months $41,309.05 $82,618.10 IT Consulting Services

FFP

Contractor shall provide IT Consulting Service in support of Command Risk Management Framework Audit and Deficiency Remediation in accordance with the Performance Work Statement. Period of Performance 22 February 2023 through 21 April 2023.

FOB: Destination

MILSTRIP: N3146B23RC0011Z

PURCHASE REQUEST NUMBER: N3146B23RC0011Z

PSC CD: DJ01

NET AMT $82,618.10

ACRN AA

CIN: N3146B23RC0011Z0001

$82,618.10

PERFORMANCE WORK STATEMENT

PERFORMANCE WORK STATEMENT (PWS)

Network Authority to Operate – Risk Management Framework

Cooperative Security Location, El Salvador (CSL)

PART 1

GENERAL INFORMATION

1. General. This is a contract to obtain contractor support services for Information Technology (IT) (Cybersecurity) preparedness and IT vulnerability management support, specifically to address current critical cyber vulnerabilities.

1.1 Introduction. Cooperative Security Location, El Salvador (CSL) is US SOUTHERN

COMMAND’s (USSOUTHCOM) air service facility in the Central American Area of Responsibility (AOR). CSL is a general logistics air-support ramp for all U.S.

Government aircraft in the AOR. CSL is located at the Saint Oscar Romero International Airport in the municipality of Comalapa, El Salvador and also hosts tenant air units that support the Joint Inter-Agency Task Force (JIATF) counter narcotics missions. As a tenant itself of the airport, CSL does not participate in U.S.

government IT networks including Navy/Marine Corps Intranet (NMCI). CSL maintains its own excepted network enclave (ENE) locally, which includes Non- Classified Internet Protocol Router Network (NIPR). A combination of satellite links and commercial telephony services are employed. Operation of an OCONUS ENE requires compliance with U.S Cyber Command, Defense Information Systems Agency, and U.S Navy Cyber Command directives. The Contractor shall perform to the standards in this contract.

1.2 Background. Cooperative Security Location (CSL) Comalapa, El Salvador Secure Internet Protocol Router Network (SIPRNET) and Non-Classified Internet Protocol Router Network (NIPRNET) provides the communications link in combating transnational organized crime. These networks supports aviation assets and personnel in the detection, monitoring and tracking of illicit trade and trafficking.

1.3 Objectives. The objective of this contract is to obtain Contractor support services to provide for IT (cybersecurity) preparedness and IT vulnerability management support, specifically to address current critical cyber vulnerabilities. This builds on previously achieved progress where both SIPR and NIPR RMF packages passed Step 3 and are now in progress with step 4.

For reference, vendor CGS initiated the Risk Management Framework process under service contract N68836-21-P-0249 and N68836-22-P-0221.

1.4 Scope. The primary scope of this contract includes the CSL’s NIPR and SIPR ENE’s.

All devices associated and residing on SIPR and NIPR are in scope. Remediation, planning and procedures for future device expansion and shall include NIPR and SIPR networks and related telephony. Specifically required is support in the completion of Steps 4 and 5 of the Risk Management Framework (RMF) process for Cooperative Security Location (CSL), El Salvador and associated deliverables. The documentation deliverables include: Completion and submission to CSL N6 of both NIPR and SIPR Risk Assessment packages, daily email progress reports, delivery of draft risk assessments at least weekly, and incorporation of requested changes to the risk assessments from CSL N6 or from the RMF approval authorities.

1.5 Period of Performance. The Period of Performance shall read as follows:

Base Period: 22 February 2023 – 21 April 2023 FAR 52.217-8, if applicable: 22 April 2023 – 21 May 2023

1.6 Hours of Operation.

1.6.1 Normal Duty Hours. The Contractor is responsible for providing performance/service, between the hours of 0800 to 1600 EDT Monday through Friday except on Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor shall at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this DOR when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential. The Contractor shall conduct operations to ensure the least possible interference with normal operations of the activity, and shall coordinate work with Government personnel in the affected area to minimize disruption to production.

1.6.2 Federal Government Holidays.

New Year’s Day 1st day of January Martin Luther King Jr.'s Birthday 3rd Monday of January Presidents Day 3rd Monday of February Memorial Day Last Monday of May Juneteenth 19th day of June Independence Day 4th day of July Labor Day 1st Monday of September Columbus Day 2nd Monday of October Veterans Day 11th day of November Thanksgiving Day 4th Thursday of November Christmas Day 25th day of December

When one of the above designated legal holidays falls on a Sunday, the following Monday shall be observed as a legal holiday. When a legal holiday falls on a Saturday, the proceeding Friday is observed as a legal holiday. This list of holidays relates to Government duty days and is not intended to supplement or otherwise alter the provisions of any Wage Determination regarding applicable paid holidays.

1.6.3 Inclement Weather Operations. In cases of severe weather, the CO may authorize exceptions. When exceptions are granted, the Contractor shall make up all missed requirements within 24 hours after the severe weather has terminated, unless the CO authorizes additional time. Rescheduling to provide make-up requirements shall not be a basis for a claim by the Contractor for additional compensation.

1.5 Place of Performance. The work to be provided under this contract shall be performed at the following locations:

U.S.Naval Forces Southern Command Naval Station Mayport Mayport, FL 32228

U.S. Southern Command Cooperative Security Location 2nd Aero Brigada (2nd Air Brigada) La Paz, Comalapa, El Salvador o Contractor’s own facility or alternate locations (Upon approval by CSL Commanding Officer CO or their Designee)

1.6 Type of Contract. The Government will award a Firm Fixed Price (FFP) Contract.

1.7 Quality Control. Quality Control is the responsibility of the Contractor. The Contractor is responsible for the delivery of quality services to the Government in accordance with (IAW) the terms and conditions contained in Federal Acquisition Regulation (FAR) Subpart 52.212-4 entitled, “Contract Terms and Conditions - Commercial Items” and applicable sub- clauses pertaining to quality control.

1.8 Government Representative. The Government Representative monitors all technical aspects of the contract and assists in contract administration. The Government Representative is authorized to perform the following functions: Assure that the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, and specifications; monitor Contractor's performance and notify both the CO and Contractor of any deficiencies; coordinate availability of Government furnished property;

and provide site entry of Contractor personnel. The Government Representative is not authorized to change any of the terms and conditions of the resulting contract. The Contractor shall coordinate and obtain prior approval from the Government Representative for all delivery, truck loading and unloading, the positioning and use of any heavy equipment, commencing any work, and all other issues. The Government Representative is responsible for the scheduling and coordination of all work to be accomplished as required per this specification.

Contract POC: Commander Barba, Victor Commanding Officer (CO) CSL Comalapa

+503 7886 1448 victor.m.barba.mil@us.navy.mil

Technical POC: CPO Darris Watkins

(619) 545-3177 darris.a.watkins.mil@us.navy.mil

IT1 Jeremy Royer +503 7874-7318 jeremy.d.royer.mil@us.navy.mil

1.9 Method of Payment: Wide Area WorkFlow (WAWF)

Name: Lori Cochrane.

Email: lori.L.cochran6.civ@us.navy.mil Phone: (904) 804-1186

1.10 Corrective Actions. At any time it is determined by the CO that the quality control system, personnel, instructions, controls, tests, or records are not providing results which conform to contract requirements, action shall be taken by the Contractor to correct the deficiency. If a Contract Discrepancy Report (CDR) is issued the Contractor shall develop a Corrective Action Plan (CAP) which identifies the root cause, Corrective Action (CA) for the root cause, CA for the specific non-conformance and CA to the root cause to prevent recurrence and a corrective action including the timeline for completion.

1.11 Security Access. The contractor shall make all arrangements necessary to obtain access to buildings, facilities and other work areas included secure or classified spaces, and when necessary arrange for them to be opened and closed by the controlling authority. The contractor shall make all facility access requests through the Defense Information System for Security (DISS) or have the customer submit the request.

1.12 Defense Biometric Identification System (DBIDS). Defense Biometric Identification System (DBIDS) increases installation security and communications by receiving frequent database updates on changes to personnel/credential status, law enforcement warrants, lost/stolen cards, and force protection conditions. The system provides a continuous vetting anytime the DBIDS card is scanned at an installation entry point.

If you currently have a Navy Commercial Access Control System (NCACS) card, the following is required to get a DBIDS credential:

Present your NCACS Card and a completed copy of the SECNAV FORM 5512/1 to the base Visitor Control Center representative.

The VCC will pull up your information in the computer, ensuring all information is current and correct.

Once your information is validated, a temporary DBIDS credential is provided.

Your temporary credential will have an expiration date, prior to which you will need to obtain your permanent DBIDS credential (~ 180 days).

For each additional U.S. Navy installation to which you need access, the first time you visit you only need to bring your DBIDS credential and statement of purpose for base access when arriving at the Visitor Control Center.

The representative will enter base access authorization and then you may proceed to work.

If you do NOT have an NCACS Card, the following is required to obtain a DBIDS credential:

Present a letter or official document from my government sponsoring organization that provides the purpose for your access.

Present valid identification, such as a passport or Real ID Act-compliant state driver's license.

1.13 5237.102-90 Inventory of Contracted Services

DOD contracting activities awarding or administering contracts shall incorporate the following standard language into all contracts which include services, provided the organization that is receiving or benefiting from the contracted service is a Department of Defense organization, including reimbursable appropriated funding sources from non- DOD executive agencies where the Defense Component requiring activity is the executive agent for the function performed. The reporting requirement does not apply to situations where a Defense Component is merely a contracting agent for another executive agency. Contracted services excluded from reporting are based on Product Service Codes (PSCs) and below the micro-purchase threshold. The excluded PSCs are:

W, Lease/Rental of Equipment;

X, Lease/Rental of Facilities;

Y, Construction of Structures and Facilities;

D, Automatic Data Processing and Telecommunications, IT and Telecom- Telecommunications Transmission (D304) and Internet (D322) ONLY;

S, Utilities ONLY;

V, Freight and Shipping ONLY.

The DON is aware of the conflict between the latest issued guidance on the sam.gov website and what is above. An update will be issued once OSD provides the details.

The contractor is required to completely fill in all required data fields using the following web address: https://sam.gov/SAM/.

Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30.

While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year.

Contractors may direct questions to the help desk, linked at https://sam.gov/SAM/

1.14 Safety. The Contractor shall establish and maintain a safety plan.

In order to provide safety control for protection to the life and health of employees and other persons; for prevention of damage to property, materials, supplies, and equipment;

and for avoidance of work interruptions in the performance of this contract, the Contractor shall comply with 29 CFR 1910, Occupational Safety and Health Standards.

The Contractor shall comply with the above and all other applicable DoD, Navy, Federal, State and Local safety and health requirements.

1.15 Environment and OSHA. The Contractor shall comply with all local, State, and Federal environmental and occupational safety laws, rules, and regulations. Any apparent conflict between compliance with such local, State, and Federal environmental and occupational safety laws, rules, regulations, and compliance with the requirements of the contract shall be immediately brought to the attention of the CO or authorized representative for final resolution. The Contractor shall notify the CO or authorized representative in writing in addition to any verbal notification of such conflict. The Contractor shall be liable for all fines, penalties, and costs which result from violations of, or failure to comply with, all such local State, or Federal laws, rules, and regulations.

All unsafe acts or conditions fostered by the Contractor or Contractor personnel may be grounds for the CO or authorized representative to halt any and all Contractor performance with a commensurate deduction of monies due to the Contractor until such unsafe conditions are corrected. The Contractor shall take due caution not to endanger personnel during performance of this contract. Upon discovery of a serious hazard such as, but not limited to, fire, or large fuel spill, the Contractor shall notify the CO or designated representative.

1.16 Reporting Mishaps. The Contractor shall train personnel to recognize fire and safety hazards and encourage personnel in the performance of their duties to report fire and safety hazards and unsafe conditions to their supervisor. The Contactor shall take corrective action to remedy reported deficiencies IAW the terms of this contract. The COR shall be notified of deficiencies beyond the terms of this contract. The Contractor shall adhere to reporting of mishaps IAW OPNAVINST 5102.1D MCO P5102.1B, hereby incorporated by reference, Navy & Marine Corps Mishap and Safety Investigation, Reporting, And Record Keeping Manual. In addition, the Contractor shall report injury or occupational illness to on-duty Contractors and Contractor accidents involving Navy property and personnel.

1.17 Emergency Services.

The Contractor shall have competent personnel trained and capable of dealing with minor personnel injuries. The Contractor of their employees shall immediately notify their supervisor of any accident requiring emergency medical treatment. The Contractor shall, in turn, notify the CO or Government Representative within 30 minutes of the incident.

Emergency medical treatment and services for Contractor personnel is the responsibility of the Contractor.

1.18 Personnel Safety. The Contractor shall immediately correct all safety deficiencies upon notification of the deficiencies by the CO or designated representative and shall notify the CO of the corrective action to be taken.

1.19 Personnel. Contractor personnel shall present a clean, neat and professional appearance. The Contractor shall ensure that employees meet all applicable federal, state, local, and installation certification, licensing, medical requirements, and qualifications to perform all assigned tasks and functions as defined in this contract prior to commencement of work. The Contractor shall not permit any personnel to work under this contract if such person is identified by a Government authorized representative to the Contractor as a potential threat to the health, safety, security, general well-being, or operational mission of the Navy and CSL Comalapa, El Salvador. All Contractors’ personnel shall comply with installation security and access procedures and the Contractor’s final Safety Plan.

1.20 Motor Vehicle Operators. Contractor’s personnel, whose tasks involve operation of any vehicles, shall possess a valid U.S. state driver’s license, certificates and permits, applicable for the type and class of vehicle being operated.

1.21 Speaking, Reading, and Understanding English. Contractor shall hire and staff personnel who can communicate with Government representatives and where reading, understanding, and discussing environmental, health, and safety warnings are an integral part of an employee’s duties, Contractor’s employee shall be able to understand, read, write, and speak the English language fluently. English shall be the only language used with regard to this contract for written correspondence, discussions and other business transactions.

1.22 Conduct of Employees. Contractor personnel’s conduct shall not reflect discredit upon the Government. The Contractor shall ensure that personnel present a professional appearance. The Contractor’s employees shall observe and comply with all local policies and procedures concerning fire, safety, environmental protection, sanitation, security, and possession of firearms or other lethal or illegal weapons or substance. The Contractor is responsible for ensuring that any Contractor employees providing services under this contract conduct themselves and perform services in a professional, safe, and responsible manner. The Contractor shall remove from the job site any employee for reasons of misconduct or security. In accordance with Department of Defense (DOD) Directive 5500.7-R, “Joint Ethics Regulation”, Contractor employees shall avoid being improperly influenced in the execution of their duties under the contract. Particular attention should be paid to acceptance of gifts/ gratuities, and on non- disclosure of sensitive or classified information. The Contractor shall ensure employee conduct complies with 41 U.S. C 423 relative to release of acquisition related information or actions or discussions which may prejudice future competitions. The Contractor shall ensure no contractor employees conduct political related activities or events on United States of America (USA) Facilities.

1.23 Identification of Contractor Employees. The Government will issue ID badges to all Contractor personnel for the duration of the contract. ID Badges shall be worn at all times during which the employee is performing work under this contract. Each Contractor (to include subcontractors) employee shall wear the ID Badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit.

1.24 Contractor Vehicles. All Contractor vehicles shall be readily identifiable.

Identification shall include displaying Contractor’s name in a clear and unobstructed location on the vehicle. Motor vehicles entering CSL, El Salvador shall be properly licensed, insured, and registered with the Installation Access Pass Office.

1.25 Contractor Advertising. The Contractor shall not place or display advertising of any kind on Government property.

1.26 Supervision of Contractor Employees. The Government will not exercise any supervision or control over Contractor or Subcontractor employees while performing work under the contract. Such employees shall be accountable solely to the Contractor, not the Government. The Contractor, in turn, shall be accountable to the Government for Contractor or Subcontractor employees.

1.27 Safety. The Contractor is solely responsible for compliance of all safety regulations of employees while working on government owned facilities. All accidents which may arise out of, or in connection with, performance of services required herein which result in injury, death, or property damage, shall be reported in writing to the Contracting Officer, CSL CO, and Designated Government Representative within twenty- four hours of such occurrence. Reports shall provide full details of the accident, including statements from witnesses. The fore-going procedures shall also apply to any claim made by a third party against the contractor as a result of any accident that occurs in connection with performance under this contract.

PART 2

DEFINITIONS, ACRONYMS & ABBREVIATIONS

2. Definitions and Acronyms.

2.1 Definitions.

Contract Administrator. The official Government representative delegated authority by the Contracting Officer to administer a contract. This individual is normally a member of the appropriate Contracting/Procurement career field and advises on all technical contractual matters.

Contractor. A supplier or vendor awarded a contract to provide specific supplies or services to the Government. The term used in this contract refers to the prime.

Contractor Acquired Property. Property acquired, fabricated, or otherwise provided by the contractor for performing a contract and to which the Government has title.

Commanding Officer (CO) CSL Comalapa. Primary Customer of this contract and who provides feedback on satisfactory contract performance and authorization of execution options.

Contracting Officer (KO). A person with authority to enter into, administer, and/or terminate contracts, and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

Defective Service. A service output that does not meet the standard of performance associated with the DOR.

Deliverable. Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

Loss of Government Property. Unintended, unforeseen or accidental loss, damage, or destruction of Government property that reduces the Government’s expected economic benefits of the property. Loss of Government property does not include occurrences such as purposeful destructive testing, obsolescence, normal wear and tear, or manufacturing defects. Loss of Government property includes, but is not limited to:

Items that cannot be found after a reasonable search;

Theft;

Damage resulting in unexpected harm to property requiring repair to restore the item to usable condition; or Destruction resulting from incidents that render the item useless for its intended purpose or beyond economical repair.

Material. Property that may be consumed or expended during the performance of a contract, component parts of a higher assembly, or items that lose their individual identity through incorporation into an end-item. Material does not include equipment, special tooling, and special test equipment or real property.

Non-Personal Services. The personnel rendering the services are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the Government and its employees. Non personal service contracts are authorized by the Government in accordance with FAR 37.012, under general contracting authority, and do not require specific statutory authorization.

Procurement Integrated Enterprise Environment (PIEE). A secure web based system for electronic invoicing, receipt, and acceptance. PIEE allows Government vendors to submit and track invoices and receipt/acceptance documents over the web and allows Government personnel to process those invoices in a real-time, paperless environment.

Property. All tangible property, both real and personal.

Quality Assurance. The Government procedures to verify that services being performed by the Contractor are acceptable IAW established standards and requirements of this contract.

Quality Assurance Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of Contractor performance.

Quality Control. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

Subcontractor. One that enters into a contract with a prime Contractor. The Government does not have privy of contract with the subcontractor.

Work Day. The number of hours per day the Contractor provides services IAW the contract.

Work Week. Monday through Friday, except for Federal holidays unless specified otherwise.

2.2 Acronyms.

AOR Area of Responsibility ATO Authority to Operate CAP Corrective Action Plan CO Commanding Officer (CSL Comalapa) CSL Cooperative Security Location, El Salvador CDR Contract Discrepancy Report CFR Code of Federal Regulations DBIDS Defense Biometric Identification System DoD Department of Defense DoN Department of the Navy DOR Description of Requirement ENE Excepted Network Enclave FAR Federal Acquisition Regulation FFP Firm-Fixed Price

FLKSPD FLANKSPEED, US Navy’s version of Microsoft Office Network and cloud management service GFP Government-Furnished Property IT Information Technology JER Joint Ethics Regulations JI-ATF Joint Inter-Agency Task Force KO Contracting Officer ODC Other Direct Costs NMCI Navy/Marine Corps Intranet NIPRNET Non-Classified Internet Protocol Router Network OCONUS Outside Continental United States PIEE Procurement Integrated Enterprise Environment QA Quality Assurance QASP Quality Assurance Surveillance Plan QC Quality Control RMF Risk Management Framework Compliance SDN Secured Data Network (replaced by ENE) SIPRNET Secured Internet Protocol Router Network USNAVSO US Naval Forces Southern Command USSOUTHCOM US Southern Command

PART 3

GOVERNMENT FURNISHED EQUIPMENT AND SERVICES

3. Government Furnished Items and Services.

3.1 Services. The Government will provide services to facilitate Contractor access to: US Naval Forces Southern Command, Naval Station Mayport, Mayport, FL 32228, U.S. Southern Command Cooperative Security Location, 2nd Aero Brigada (2nd Air brigade) La Paz, Comalapa, El Salvador.

3.2 Facilities. The Government will provide facilities for the Contractor’s use in support of this contract. Any alterations to facilities shall be approved prior in writing and property shall be returned to its original condition prior to completion of this contract.

Contractor shall be responsible for any damages or loss of use due to their negligence.

Any signage shall conform to standard Navy/Installation signs/format and shall be approved by the CO and Government Representative in writing prior to placement and may not be permanently affixed to any Government property or structure.

Utilities. The Government will provide all utilities in the facility and will be available for the Contractor’s use in performance of tasks outlined in this DOR to include power, unclassified and classified network outlets as required. The Contractor shall instruct employees in utilities conservation practices. The Contractor shall be responsible for operating under conditions that preclude the waste of utilities.

PART 4

CONTRACTOR FURNISHED ITEMS

4. Contractor Furnished Items and Responsibilities.

4.1 Contractor Furnished Items. Everything included in this paragraph and its subparagraphs is basic to the contract and should be included in the contract price.

4.1.1. The Contractor shall provide all labor, supervision, transportation, vehicles, supplies, PPE, equipment, materials, facilities and services required to perform work under this contract that are not listed under Section 3 of this PWS.

4.1.2. The Contractor shall provide contact info for CGS manager over the CGS contractor(s) executing the work. A status phone call between CGS management and CSL CO or his designee to occur at least once a week unless waived by CSL

CO.

4.2 Facility Clearance. The Contractor shall possess and maintain access to Cooperative Security Location, El Salvador at the time of proposal and throughout the life of the contract.

4.3 Materials. The Contractor shall provide administrative office supplies and personal protective equipment including protective masks required to support this requirement.

4.4 Responsibilities of the Contractor. The Contractor shall be responsible for all materials delivered and work performed until completion and acceptance of the entire work, except for any completed unit of work which may have been accepted under the contract.

It is also the responsibility of the contractor to ensure they are keeping themselves and the government safe from communicable diseases by proper handwashing techniques and the proper wearing of the facial mask anytime while within the facility and during any instance that social distancing is not possible.

4.5 Contractor shall exercise extreme caution to protect building finishes, private property, military property, etc., from damage during the performance of these contract requirements. Contractor shall be responsible for all loss or damage or whatsoever kind and nature to all Government property, while in the performance of these contract requirements, which result in whole or in part from the negligence or omissions of Contractor, any of his Subcontractors or any employee, agent or any representative of the Contractor or Subcontractor(s).

PART 5

SPECIFIC TASKS AND REQUIREMENTS

5. General. The Contractor shall provide all skilled personnel, equipment, supplies, tools, materials, supervision, and other items necessary to perform this prescribed project as defined in this PWS to meet the performance requirements, except for those items specified as Government furnished equipment and services. The Contractor shall provide all service as defined below and elsewhere in this Performance Work Statement.

5.1 The contractor shall be required to obtain from OPNAV N2/N6 a permanent Authority to Operate (ATO) and Risk Management Framework Compliance (RMF) on behalf of CSL’s ENE (formerly SDN). ATO and RMF shall include both NIPRNET and SIPRNET as well as telephony devices and switches. The US Navy migrated to Microsoft Office 365, internally branded as Flank Speed (FLKSPD). This should not pose a problem other than short outages and conversion timing delays. Contractor shall work within that environment. Specifically required is support in completion of the RMF process with a focus on Steps 4 and 5, and obtaining full ATOs for NIPR and SIPR Networks for Cooperative Security Location (CSL), El Salvador and associated deliverables. Specific documentation deliverables include: Completion and submission to CSL N6 of both NIPR and SIPR Risk Assessment packages, daily email progress reports, delivery of draft risk assessments at least weekly, and incorporation of requested changes to the risk assessments from CSL N6 or from the RMF approval authorities. In the case of contractor(s) being unavailable to support work for personal appointments/vacation/sickness/weather during 0800 to 1600 EDT Monday through Friday except on Federal holidays or when Government facility is closed will be made up after hours and on weekends.

5.2 The Contractor shall provide all skilled personnel, equipment, tools, supervision, and other items necessary to perform this prescribed project as defined in this Performance Work Statement to meet the requirements.

5.3 Contractor shall support CSL and USNAVSO in both the ATO and RMF process up to but not to exceed two (2) calendar months from contract award date. Additional extensions for period of performance may be authorized by the CSL CO. If tasks are complete prior to end of period of performance, the contract may terminate at the direction of the Government.

5.4 Contractor shall have current and active Secret level security clearance adjudicated by US Office of Personnel Management.

5.5 Contractor shall complete work in accordance with Secretary of the Navy Instruction (SECNAVINST) 3052.2 - Cyberspace Policy and Administration within the Department of the Navy.

5.6 Contractor shall complete work in accordance with Chairman of Joint Chiefs of Staff Instruction (CJCSI) 6510.01F - Assurance (IA) and Computer Network Defense (CND).

5.7 Contractor shall complete work in accordance with Department of Defense Directive (DoDD) 8140.01 - Cyberspace Workforce Management.

5.8 Contractor shall complete work in accordance with Commander, Navy Cyber Force Instruction (COMNAVCYBERFORINST) 5239.2A - Cyber Security and Information Assurance.

5.9 Contractor shall complete work in accordance with Department of Defense Instruction (DoDI) 8510.01 - Risk Management Framework (RMF) for DoD Information Technology.

5.10 Contractor shall possess current ANSI/ASIS – PSC.1-2012 QMS Certification.

5.11 Contractor shall possess current ANSI/ASIS/RIMS.RA.1 Risk Management Certification.

5.12 Contractor may complete, if directed by the Government, SIPRNET requirements at Commander US 4th Fleet/US NAVSO N6 spaces at Naval Station Mayport, Jacksonville, Florida.

5.13 Contractor shall travel to and perform on site services for 2 weeks per month unless waived by the CSL CO or designated representative. On site locations are CSL Comalapa El Salvador or USNAVSO, Naval Station Mayport, Florida at the discretion of the CSL CO or designated representative to ensure progress and compliance unless otherwise directed.

5.14 Contractor shall assist CSL and USNAVSO IT staffs with drafting requirements and instructions to maintain the ATO and stay compliant with RMF including provisions to conduct periodic reviews, draft checklists for audit, device and software addition and future network expansion.

5.15 If ATO and RMF requirements are met prior to expiration of performance period, Contractor shall assist with other similar functions including advising best practices, training, instruction writing and auditing. If tasks are completed prior to end of period of performance, contract may also terminate at direction of the Government.

5.16 Contractor shall comply with U.S. Naval Forces Southern Command, U.S. DoD COVID and Health Protection Conditions.

5.17 Contractor shall be in compliance with El Salvador labor and immigration laws.

5.18 Contractor shall have a valid passport and ability to obtain entry into El Salvador.

5.19 The Contractor shall be responsible for all cost of damages, repairs, or replacement of Government property before final invoicing.

5.20 The Contractor shall ensure work area is clean, neat, and in an orderly condition at the end of each workday.

5.21 The Contractor shall notify the Government Representative at the end of each workday prior to leaving the work site.

5.22 Inspection Requirements. The Contractor shall provide services IAW this contract.

When the Contractor’s performance is unsatisfactory; a Contract Discrepancy Report (CDR) shall be issued. If a CDR has to be issued, the Contractor shall reply in writing, giving the reason for the unsatisfactory condition, and what corrective action has been taken; and procedures to prevent recurrence.

PART 6

APPLICABLE PUBLICATIONS AND FORMS

6. Applicable Publications (Current Editions).

6.1 The Contractor (to include Subcontractors) shall abide by all applicable regulations, publications, manuals, and local policies and procedures hereby incorporated by reference.

a. 29 CFR 1910, Occupational Health and Safety

b. DoD 5500.7-R Joint Ethics Regulations (JER)

c. OPNAVINST 5530.14E CH-2, Navy Physical Security and Law Enforcement

Program

d. OPNAVINST 5102.1E MCO P5102.1B, Navy & Marine Corps Mishap and Safety Investigation, Reporting, And Record Keeping Manual

CLAUSES INCORPORATED BY FULL TEXT

THE FOLLOWING NAVSUP LOCAL TEXT IS HEREBY MADE PART OF THE STATEMENT OF

WORK/PERFORMANCE WORK STATEMENT.

AUTHORIZED CHANGES ONLY BY THE CONTRACTING OFFICER

(a) Except as specified in paragraph (b) below, no order, statement, or conduct of Government personnel who visit the Contractor's facilities or in any other manner communicate with Contractor personnel during the performance of this contract shall constitute a change under the "Changes" clause of this contract.

(b) The Contractor shall not comply with any order, direction or request of Government personnel unless it is issued in writing and signed by the Contracting Officer, or is pursuant to specific authority otherwise included as a part of this contract.

(c) The Contracting Officer is the only person authorized to approve changes in any of the requirements of this contract and notwithstanding provisions contained elsewhere in this contract, the said authority remains solely with the Contracting Officer. In the event the Contractor effects any change at the direction of any person other than the Contracting Officer, the change will be considered to have been made without authority and no adjustment will be made in the contract price to cover any increase in charges incurred as a result thereof. The address and telephone number of the Contracting Officer is:

NAME: Contracting Officer ADDRESS: 110 Yorktown Ave, Bldg. 110, Jacksonville, FL 32212

TELEPHONE: (904) 800-8596

SUPTXT204-9400(4-22) CONTRACTOR UNCLASSIFIED ACCESS TO FEDERALLY CONTROLLED

FACILITIES, SENSITIVE INFORMATION, INFORMATION TECHNOLOGY SYSTEMS OR PROTECTED

HEALTH INFORMATION

The following shall be inserted in full text in all solicitations and contracts (including commercial acquisitions) which require contractor unclassified access to federally controlled facilities, sensitive information, Information Technology (IT) systems or protected health information. For commercial acquisitions, this text shall be incorporated into either the SOW or PWS.

The security text does not apply in cases where the contractor/vendor does not have access to Navy Marine Corps Intranet (NMCI) computers, is not issued a Common Access Card (CAC) and is involved in training or other short term duties of less than 30 days duration that allow for the use of a visitor request. In these cases, the government employee must submit a Visitor Access Request (VAR) to the main gate or applicable processing entity for your facility and assume responsibility to escort those without CAC Credentials.

This local text does not apply to non-United States (U.S.) Nationals (foreign nationals) who are contactor employees performing work overseas. The local text is applicable to the U.S. Nationals living in the U.S. or overseas who are performing work on a Navy contract.

The investigation of a non-U.S. national at a foreign location must be consistent with a National Agency Check with Written Inquiries (NACI), to the extent possible and include a fingerprint check against the Federal Bureau of Investigation (FBI) criminal history database, an FBI investigations file (name check) search and a name check against the terrorist screening database. Also, the above cited reference notes that Foreign Nationals may not be granted CAC credentials until completion of their investigation and not in the interim.

Per Department of Defense Memorandum (DoDM) 5200.2, Department of Defense (DoD) components must initiate and ensure completion of a background investigation before applying the credentialing standards to a non-U.S.

national at a foreign location. The background investigation must be favorably adjudicated before a CAC can be issued to a non-U.S. national at a foreign location. The type of background investigation may vary based on standing reciprocity treaties concerning identity assurance and information exchanges that exist between the U.S. and its allies or agency agreements with the host country.

CONTRACTOR UNCLASSIFIED ACCESS TO FEDERALLY CONTROLLED FACILITIES, SENSITIVE

INFORMATION, IT SYSTEMS OR PROTECTED HEALTH INFORMATION

Executive Order 13467, Reforming Processes Related to Suitability for Government Employee, Fitness for Contractor Employees and Eligibility for Access to Classified National Security Information, Homeland Security Presidential Directive (HSPD)-12, requires government agencies to develop and implement Federal security standards for Federal employees and contractors. The 5 CFR 32 Part 157 in concert with DoD Manual 1000.13, Vol 1, implements the Federal Standards.

APPLICABILITY

This text applies to all DoD sponsored individuals who require CAC eligibility (or login and P/W if acceptable per contract) for: Physical access to DoD facilities or non-DoD facilities on behalf of DoD; Logical access to information systems (whether on site or remotely); or remote access to DoD networks that use only the CAC logon for user authentication, or access to sensitive and protected information. This applies to the Office of the Secretary of Defense (OSD), the Military Departments, the Office of the Chairman of the Joint Chiefs of Staff and the Joint Staff, the Combatant Commands, the Office of the Inspector General of the DoD, the Defense Agencies, the DoD Field Activities and all other organizational entities within the DoD (hereinafter referred to collectively as the "DoD Components").

Each contractor employee providing services at a Navy command under this contract is required to obtain a DoD CAC. Additionally, depending on the level of computer/network access, the contract employee will require a successful investigation as detailed below.

ACCESS TO FEDERAL FACILITIES

Per HSPD-12 and implementing guidance, all contractor employees working at a federally controlled base, facility or activity under this clause will require a DoD CAC. When access to a base, facility or activity is required contractor employees shall in-process with the Command's Security Manager (CSM) upon arrival to the command and shall out-process prior to their departure at the completion of the individual's performance under the contract.

START-UP PERIOD

All contractor resource onboarding documents must be submitted via the prime contractor. The prime contractor shall make all necessary preparations to assume full responsibility for productive performance as of the performance start date.

Definition of "productive":

a. Visit Authorization Request (VAR)

b. Contractor Information Sheet (CIS)

c. FD-258 Fingerprint Card

d. Completed Electronic Investigation (EQIP)

e. All contractor resource(s) must have an active Joint Personnel Adjudication System (JPAS) profile

f. Common Access Card(CAC)

Note (1): Invoicing by the contractor will begin as of the commencement of the performance period of services and no reimbursement will be paid by the government for efforts expended during the start-up period.

Note (2): Foreign Nationals are not allowed access to the functional/system side of Enterprise Resource Planning

(ERP).

ACCESS TO DOD INFORMATION TECHNOLOGY (IT) SYSTEM

In Accordance With (IAW) Secretary of the Navy (SECNAV) M-5510.30, contractor employees who require access to Department of the Navy (DoN) or DoD networks are categorized as IT-I, IT-II, or IT-III. The IT-II level, defined in detail in SECNAV M-5510.30, includes positions which require access to sensitive information. Sensitive information includes information protected under the Privacy Act, to include PHI. All contractor employees under this contract who require access to Privacy Act protected information are therefore categorized no lower than IT- II. IT Levels are determined by the requiring activity's Command Information System Security Manager (ISSM)/Information Assurance Manager (IAM).

Contractor employees requiring privileged or IT-I level access, (when specified by the terms of the contract) require a Single Scope Background Investigation (SSBI) or T5 or T5R equivalent investigation, which is a higher level investigation than the National Agency Check (NAC) with Law and Credit (NACLC)/T3/T3R described below. Due to the privileged system access, an investigation suitable for High Risk national security positions is required.

Individuals who have access to system control, monitoring, or administration functions (e.g. system administrator, database administrator) require training and certification to Information Assurance (IA) Technical Level 1, and must be trained and certified on the Operating System (OS) or Computing Environment (CE) they are required to maintain.

Access to sensitive IT systems is contingent upon a favorably adjudicated background investigation. When access to IT systems is required for performance of the contractor employee's duties, such employees shall in-process with the Navy CSM and ISSM/IAM manager upon arrival to the Navy command and shall out-process prior to their departure at the completion of the individual's performance under the contract. Completion and approval of a System Authorization Access Request Navy (SAAR-N) form is required for all individuals accessing Navy IT resources. The decision to authorize access to a government IT system/network is inherently governmental.