A15 - 25RE012_RFI Attachment 1 DRAFT PWS 4.8.25.doc

DRAFT

Performance Work Statement

Personnel Security Support Services

Defense Counterintelligence and Security Agency

Adjudication and Vetting Services

DRAFT

Performance Work Statement Defense Counterintelligence and Security Agency Adjudication and Vetting Services Personnel Security Support Services Part 1

General Information

1. General: This procurement is for a non-personal service requirement supporting the Personnel Security Support Services (PS3) to the Defense Counterintelligence and Security Agency (DCSA) Adjudication and Vetting Services (AVS). The Government will not exercise direct supervision or control over the contract service providers performing the services herein. Such service providers must be accountable solely to the Contractor who, in turn, is responsible to the Government.

1.1. Description of Services/Introduction: The Contractor must provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and services necessary to perform PS3 as defined in this Performance Work Statement (PWS), except for those items specified as Government furnished property and services. The Contractor must perform to the standards in this contract.

1.2. Background: Per Section 925 of the Fiscal Year (FY) 2018 National Defense Authorization Act (NDAA), DCSA was given the authority by the Secretary of Defense, to conduct security, suitability, credentialing Background Investigations (BIs), and adjudications for Department of Defense (DoD) personnel. To successfully execute the vetting mission, DCSA must integrate and incorporate data, tools, and capabilities into the personnel lifecycle. This entails an end-to-end vetting process for the detection, deterrence and mitigation of insider risk threat. This process is critical to preserving DoD mission readiness.

AVS is a centralized entity within the DCSA, which seamlessly vets personnel for access, continuously preserves the adjudicative decision, and integrates/shares information developed to immediately identify and mitigate risk as it pertains to personnel, facilities and equities. DoD recognizes that personnel vetting does not end at adjudication, and a robust lifecycle monitoring approach will allow vetting to be continuous and consistent to ensure personnel meet the suitability and security standards required to gain and maintain access to information and equities pertinent to national security.

AVS conducts BIs and processes the adjudication of DoD personnel. These adjudicative determinations involve the application of national adjudicative guidelines to all military service members, applicants, civilian employees, and consultants affiliated with the DoD to include DoD personnel at the White House and Contractor personnel under the National Industrial Security Program (NISP). Specifically, case processing that encompasses counterintelligence (CI), risk to industry and high priority flagged cases. AVS adjudicates security clearance eligibility for the staff of the United States Senate, House of Representatives, Congressional Budget Office, United States Capitol Police, and the Supreme Court of the United States. AVS also renders favorable adjudicative determinations for employment suitability of DoD civilian employees and Common Access Card (CAC) or fitness eligibility of non-cleared DoD Contractors.

Additionally, AVS determines security clearance eligibility of non-Intelligence Agency DoD personnel occupying sensitive positions and/or requiring access to classified material including Sensitive Compartmented Information (SCI). These determinations involve all military service members, applicants, civilian employees, and consultants affiliated with the DoD, to include DoD personnel at the White House and Contractor personnel under NISP.

1.3. Objectives: This PWS provides operational PS3 to assist AVS in accomplishing the mission by reviewing and processing personnel security documentation and other related functions on behalf of DCSA and DoD. This PWS obtains analytic support services for the purpose of reviewing, validating and coordinating information and generated alerts. The analysts supporting the vetting mission will use supporting systems to receive information, conduct identity resolution, determine if information meet established business rule criteria and coordinate the use of information with other organizations if it is adjudicative-relevant and/or actionable.

1.4. Scope: The Contractor will be responsible for providing operational support to assist in the personnel clearance oversight and management as prescribed by the DoD Personnel Security Program, Industrial Security Program and National Industrial Security Program Operating Manual (NISPOM) and support to the holistic vetting and adjudication mission, to ensure protection of National Security, DoD Readiness and Military Operations. The Contractor will provide the personnel to support the accurate and timely analysis and coordination of information in support of the evolving Defense Vetting and Continuous Evaluation (CE) mission as directed by the Secretary of Defense’s February 21, 2014, memorandum and in accordance with (IAW) the Office of Management and Budget, “Report to the President.” Efforts include, but are not limited to, developing processes and procedures, assessing and validating information, developing business rules, drafting research reports, collecting metrics, and developing future requirements.

The Contractor will provide the following support services:

1.4.1. Lifecycle End-to-End Vetting Process: The Contractor will support the current business activities of AVS to provide the capability for lifecycle end-to-end vetting processes. These business activities include Continuous Vetting (CV), * robust incident report monitoring, foundational/front end BI risk analysis, timely information sharing, monitoring of Personnel Security Investigations for Industry (PSI-I) cost and budget execution, eligibility and access oversight, and guidance, outreach, and education.

1.4.2. Robust Incident Report Monitoring: Robust incident report monitoring provides a centralized rapid review, dissemination, and mitigation of potentially adverse information reported or identified between investigation periodicity, by trained personnel utilizing standardized vetting criteria and communication strategies.

1.4.3. Foundational/Front End BI Risk Analysis (Initial and Periodic Reinvestigation (PR) submittals): Foundational BI Risk analysis is pre-investigative analysis of the investigative request package (SF86) to ensure the respective adjudicative criteria are in place to make an interim eligibility or to preserve a current eligibility, prior to scheduling an investigation or to make a determination of PR deferment into CE.

1.4.4. Timely Information Sharing: Timely information sharing is the sharing of information across the vetting enterprise quickly and efficiently to ensure the detection, deterrence, and mitigation of Insider Risk Threat throughout the DoD/Federal Enterprise.

1.4.5. High-Risk Handling to Industry: The Contractor will Identify risk and/or threat and transfer to other organization(s) for the mitigation and elimination of the threat.

1.4.6. Basic Adjudication Support: The Contractor will review and process personnel security documentation and provide accurate and timely personnel security information. The Contractor will be responsible for ensuring that documentation and information necessary to facilitate the adjudications of personnel security eligibility and trustworthy determinations are processed in a timely manner. The Contractor will provide support services utilizing Government systems inclusive of but not limited to of the Central Verification System (CVS), Defense Clearance and Investigation Index (DCII), DoD Employee Interactive Data System (DEIDS), Information Security Management System (ISMS), Joint Worldwide Intelligence Communications System (JWICS), Personnel Investigations Processing System-Reporting (PIPS-R) and the Defense Information System for Security (DISS).

1.4.7. Case Processing: The Contractor will assist the Government in performing all tasks associated with case processing to facilitate the adjudications of personnel security eligibility and trustworthy determinations. Assistance will include receiving and routing electronic and hard copy documents to the appropriate files in the agency database system.

1.4.8. Special Programs: The Contractor will assist the Government in performing all tasks, documentation, and data analysis associated with case processing of special programs to facilitate the adjudications of personnel security eligibility and trustworthy determinations. Special programs include but are not limited to Military Accessions Vital to National Interest (MAVNI), Lawful Permanent Resident (LPR), and Linguist Processing (LP).

1.4.9. Call Center Support: The Contractor will assist the Government in performing all tasks associated with operating a responsive, courteous, and professional call center to address inquiries from the customer base regarding case status and program information IAW policies and procedures.

* CE/CV: Per Executive Order (EO) 13467, as amended, "CE means a vetting process to review the background of an individual who has been determined to be eligible for access to classified information or to hold a sensitive position at any time during the period of eligibility.” The goal of CE is to enhance the personnel security investigative processes by detecting relevant adjudicative information prior to the standard PR. This is done by using automated record checks, queries, and integrated reporting in near real-time while managing risk to its lowest levels of the cleared population. CE leverages a set of automated record checks and business rules to assist in the on-going assessment of an individual's continued eligibility. CV is the evolution of the CE concept. CE data sources, originally intended to supplement periods between reinvestigations, have become a fundamental basis for CV. A fully compliant CV program includes the required CE data sources as well as agency-specific data sources, such as user activity monitoring where appropriate, that permit agencies, when fully compliant, to cease conducting PRs.

1.5. Period of Performance (PoP): The PoP is for one, twelve-month base period and four, one-year option periods, with a potential six-month extension of support services IAW FAR 52.217-8, Option to Extend Services, as applicable.

Base Year:

01/05/2026 – 01/04/2027 Option Year 1:

01/05/2027 – 01/04/2028 Option Year 2:

01/05/2028 – 01/04/2029 Option Year 3:

01/05/2029 – 01/04/2030 Option Year 4:

01/05/2030 – 01/04/2031 Final Period of Performance Dates will be reflected in the Contract Award Document.

1.6. General Information:

1.6.1. Quality Control: The Contractor will develop and maintain an effective quality control program, including a Quality Control Plan (QCP), to ensure services are performed IAW this PWS. The Contractor will develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control program is how the Contractor assures itself that the work complies with the requirements of the contract. One (1) copy of a comprehensive written QCP will be submitted to the Contracting Officer’s Representative (COR), Contracting Officer (KO), and Contract Specialist (CS) within thirty (30) business days after contract award and within five (5) business days when changes are made thereafter and throughout the life of the contract. Upon acceptance of the QCP, the Contractor will receive the Contracting Officer’s (KO)’s acceptance in writing of the proposed changes to the Contractor’s quality control plan. (CDRL A001)

1.6.1.1. The QCP will contain at a minimum the following information: Information relevant to the periodic monitoring of Contractor staff with feedback to the Government regarding quality, consistency, and timeliness of service delivery; Information relevant to identifying training needs and conducting initial and periodic refresher training of Contractor staff to ensure consistent delivery of services; Information relevant to identifying mechanisms for initiating requests or responding to government requests for suggestions about potential service enhancement and/or improvement opportunities.

1.6.1.2. A review of the QCP will include the identification of potential errors and respective timeliness of the appropriate business activities. Errors are defined as any action taken or response given that is incorrect or inaccurate based on the given guidelines of the action and deviations from the respective training curriculum. Errors include but are not limited to national security implications and budgetary implications to the DCSA. Errors that are recognized, corrected, and reported to the COR by the Contractor before being recognized and processed by the Quality Control team will not be counted or documented as an error. Errors will be classified in the categories labeled "Low Risk", "High Risk", and "National Security Risk" to determine the level of risk toward the agency, industry's capability to fulfill contractual requirements, budget, timeliness, National Security, and resource management.

1.6.1.3. As part of the Quality Control process, the Contractor will determine and share with the Government what percentage(s) of the deliverables they will subject to quality review. This percentage will be used as a statistical sample of the total cases produced by the Contractor.

1.6.1.4. Quality Control Status Report: The Contractor will provide a Quality Control Status Report that entails the details of errors, and its significance as indicated above and a summary of corrective measures. (CDRL A002)

1.6.1.5. The Quality Control team will provide an opportunity for the Program Manager (PM) and Site Lead to validate, refute, and correct the potential error. The Quality Control process is documented in Standard Operating Manuals (SOM), Standard Operating Procedures (SOP), and best practices. These documents will be provided to the Contractor in support of mission success.

1.6.1.6 Quality Assurance: The Government will evaluate the Contractor’s performance under this contract IAW the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government must do to ensure that the Contractor has performed IAW the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.2. On-Site Working Conditions, Holidays and other Closures:

1.6.2.1. DCSA facilities are smoking restricted workplaces. Due to the nature of the work, facilities, and requirements, Contractor staff may only smoke outside in designated smoking areas.

1.6.2.2. The Contractor must establish normal operating hours under this contract between 6:30 a.m. to 6:00 p.m. Eastern Time (ET) Monday through Friday in coordination with the COR. The Contractor’s PM and the Governments COR will consult and coordinate on any proposed alternate work schedules that may be arranged depending on the operational tempo/needs of the mission. The Contractor must always maintain an adequate workforce for the uninterrupted performance of all tasks identified in the PWS when the Government facility is closed.

1.6.2.3.

The Contractor will have a point of contact available during hours of operation. When hiring personnel, the Contractor will keep in mind that the stability and continuity of the workforce are essential when coordinating with Government personnel to accomplish the desired tasks.

1.6.2.4.

Inclement weather delays and closure will be based on the Fort George G. Meade Army installation’s operational status.

1.6.2.5. Government personnel observe the following days as holidays and the Government facilities will be closed and unavailable to Contractor personnel on the following days:

New Year’s Day

January 1st*

Martin Luther King’s Birthday

Third Monday in January

President’s Day

Third Monday in February

Memorial Day

Last Monday in May

Independence Day

July 4th*

Juneteenth National Independence Day

June 19*

Labor Day

First Monday in September

Columbus Day

Second Monday in October

Veterans Day

November 11th*

Thanksgiving Day

Fourth Thursday in November

Christmas Day

December 25th*

*If the date falls on a Saturday, the Government holiday is the preceding Friday. If the date falls on a Sunday, the Government holiday is the following Monday.

The Contractor is responsible for knowing the details of the federal holidays and when the holiday is observed (https://www.opm.gov/policy-data-oversight/pay-leave/federal-holidays/). Federal law (5 U.S.C. 6103) establishes the public holidays for Federal employees. Please note that most Federal employees work on a Monday through Friday schedule.

1.6.2.6. In addition to the days designated as holidays, the Government observes the following days:

• Any other day designated by Federal Statute

• Any other day designated by Executive Order

• Any other day designated by the President’s Proclamation

· Presidential Inauguration Day*

*Government personnel in the Washington, D.C. area are entitled to a holiday on the day a President is inaugurated (January 20 following a Presidential election). Government personnel are entitled to this holiday if they are employed in:

· The District of Columbia.

· Montgomery and Prince Georges Counties in Maryland.

· Arlington and Fairfax Counties in Virginia; and

· The cities of Alexandria and Fall Church in Virginia

When Inauguration Day is moved to January 21st because January 20th falls on Sunday, Government personnel in the Washington, D.C. area who would otherwise work on Monday, January 21st, are entitled to a holiday on that day.

1.6.2.7. It is understood and agreed between the Government and the Contractor that observance of such days by Government personnel will not otherwise be a reason for an additional period of performance, or entitlement of compensation except as set forth within the contract. In the event the Contractor's personnel work during the holiday, they may be reimbursed by the Contractor, however, no form of holiday or other premium compensation will be reimbursed either as a direct or indirect cost, other than their normal compensation for the time worked.

1.6.2.8. When the Federal, State, Local or other Governmental entity grants excused absence to its employees, assigned Contractor personnel may also be dismissed. The Contractor agrees to continue to provide sufficient personnel to perform critical tasks already in operation or scheduled, and must be guided by the instructions issued by the KO or COR.

1.6.2.9. If Government personnel are unavailable due to furlough or any other reason, the Contractor must contact the KO or the COR to receive direction. It is the Government's decision as to whether the contract price/cost will be affected. Generally, the following situations apply:

· Contractor personnel who can continue contract performance (either on-site or at a site other than their normal workstation), must continue to work and the contract price will not be reduced or increased.

· Contractor personnel who are not able to continue contract performance (e.g., support functions) may be asked to cease their work effort. This may result in a reduction to the contract price.

1.6.2.10. It is understood and agreed between the Government and the Contractor that in the event Contractor personnel wish to attend DCSA social events, such as the annual picnic, holiday parties, etc., they must coordinate their work schedules with the COR and obtain approval of their company’s supervisor prior to the event. The Government is not responsible for reimbursing any expenses to the Contractor for attending any DCSA social event. However, when Contractor personnel are invited to Director (or Leadership) led events (e.g. Town Halls, All-Hands, EEO, etc.) to address the mission and vision of the agency, they may attend as part of their normal duties.

1.6.2.11. Hours of Operation: The Contractor is responsible for conducting business, between the hours of 6:30 a.m. to 6:00 p.m. ET Monday through Friday except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor must always maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor will keep in mind that the stability and continuity of the workforce are essential.

1.6.2.12. Place of Performance: The work to be performed under this contract will be performed at:

· 7556 Teague Road, Hanover, MD 21076

· 7740 Milestone Parkway, Hanover, MD 21076

· 600 10th Street, Ft. Meade, MD 20755

· Alternate location (including telework) approved by the KO. Telework may be authorized based on the proposed approach for this effort, as required and/or as mandated during emergencies, natural disasters, and pandemic(s).

1.6.2.13. Should the Government determine the need for a new facility for these functions, the Contractor will transition its personnel to the new facility under the terms of this contract if said facility is within a 50-mile radius of the existing locations.

1.6.2.14 Contractor Travel: The Government does not anticipate the Contractor incurring any travel costs during performance of this requirement. Funding for travel requirements is not currently included under this contract and if travel is required, funding will be added by the KO through a modification to the contract. If travel is added, reimbursement of transportation, lodging, meals, and incidental expenses are allowable subject to the limitations contained in FAR 31.205-46 and the limitation of funds specified in this contract. All travel requires prior Government approval/authorization and notification to the COR.

1.6.2.15 Onboarding: The Contractor shall ensure all personnel complete onboarding requirements prior to the commencement of work, including:

Background investigations and security clearances

Submission of required form and documentations as directed by the Government

Completion of Government-provided training or orientation IAW Section 1.7 of this PWS The Contractor shall coordinate with the Government’s designated representative to ensure timely onboarding and access to necessary systems and facilities. The Contractor shall provide the Government with list of all personnel assigned to the contract, including updates on personnel changes throughout the life of the contract. (CDRL A003)

1.6.2.16. Resignation and Termination: The Contractor shall notify the Government of any personnel resignation’s terminations, or planned departures at least thirty (30) days in advance. In case where 30 days advance notice is not available the Contractor will notify the government within 2 business days of the Contractor having knowledge of the departure. The Contractor is responsible for ensuring the immediate return of all Government-furnished equipment, badges, and credentials upon the departure of personnel. The Contractor shall provide a Phase-Out Transition plan to mitigate the impact of personnel departures, including proposed replacements and continuity of work. The Contractor must remove terminated personnel from all Government systems and facilities immediately following their termination and provide written confirmation of access revocation.

1.6.2.17. Type of Contract: The Government anticipates a single award Firm-Fixed-Price contract.

1.6.3. Security Requirements:

· The Contractor shall possess and maintain a TOP SECRET facility clearance granted by the Defense Counterintelligence and Security Agency (DCSA). The Contractor's employees, performing work in support of this contract must be US Persons and require a SECRET security clearance/eligibility determination based on a favorably adjudicated T3 or T3R, or a TOP SECRET security clearance/eligibility determination based on a favorably adjudicated T5 or T5R; or TOP SECRET security clearance/eligibility with SCI eligibility determination based on a favorably adjudicated T5 or T5R with SCI eligibility; based on the positions listed within this PWS. All must be within investigation scope and/or currently enrolled in Continuous Evaluation (CE) / Continuous Vetting (CV) prior to contract performance and throughout the life of the contract to include all potential option years identified in this PWS.

· The DD 254 shall be completed within the Defense Counterintelligence and Security Agency National Industrial Security Program (NISP) Contracts Classification System (NCCS) (https://tesseract.cloud.dcsa.mil/nccs) at contract award. The DD 254 will be housed within the NCCS through the life of the contract. The Contractor shall be required to be registered within NCCS at time of award to gain access to the DD 254. It is incumbent upon the Contractor to ensure that the necessary security paperwork is submitted in sufficient time to enable each individual to be cleared prior to beginning work on this contract. In the event that the NCCS is superseded by another System Of Record, the same requirements apply. The DCSA KO will maintain the DD254 in the Official DCSA Contracts Records. The Contractor is required to maintain a copy in their records and to ensure distribution to their Cognizant Security Office. Subcontracting on this effort requires an approved Subcontracting Plan and if approved, contractor shall provide copies of all Subcontract DD254s to the GCA and Contracting Officer. For accesses which require prior written authorization from the GCA, Contracting Officer (KO), the contractor shall submit a DRAFT SUBCONTRACT DD254 to the GCA and Contracting Officer for review and concurrence with coordination of the DCSA Industrial Security Program Manager.

· Contractor personnel performing or assigned under this contract must be U.S. persons. Security Classification Guide requests should be presented to the Government Sponsor, if required, subsequent to contract award. All classified information received or generated under this contract is the property of the U. S. Government. The U. S. Government shall provide disposition instructions. No release of classified information or controlled unclassified information under this contract is authorized. All requirements for control and accounting of original documentation and copies apply. All applicable provisions of the NISPOM and its supplements and 32 CFR, part 117 apply. Any classified information shall be transmitted IAW DOD Manual 5200.01, Volumes 1-3. DOD Information Security Program Regulations. The contractor shall adhere to 32 CFR Part 117.18 (NISPOM), which applies to non-DoD IT systems.

· Within 10 days of contract award, prime contractor shall submit a Visit Authorization Request (VAR) to DCSA Security Office to validate that all management, supervisory, and other personnel assigned to this contract meet the clearance requirements. Failure to provide security eligibility information shall delay and/or deny the individual access to DCSA, and DoD facilities and information. It is the responsibility of the Prime Contractor to maintain either an owning or servicing relationship in DISS with all personnel supporting this contract, this includes Prime contractor personnel, subcontractor personnel, and any consultants. All Visit Authorization Requests (VARs) submitted to the host government locations must be sent via the Defense Industrial System for Security (DISS) and *must* come from the Prime Contractor's SMO in DISS. For visits to DCSA, Collateral and SCI Visit Authorization Requests should be sent to SMO DCSAHQSEC.

· In accordance with Security Executive Agent Directive (SEAD) 3 all covered individuals who have been granted eligibility or hold a sensitive position shall report as required in this directive to DCSA and must be favorably adjudicated, by Adjudication and Vetting Services (AVS) formerly known as DoD CAS.

· Contractor is not authorized to subcontract on this effort without an approved subcontracting plan with written GCA/COR authorization.

· All Common Access Cards (CACs), building access badges, and parking passes must be returned immediately at the end of the period of performance date.

· The Contractor shall comply with (1) Security Agreement (DD Form 441/DD Form 441-1), including the National Industrial Security Program Operating Manual (NISPOM), DoD 5220.22-M and any revisions and (2) 32 CFR, Part 117.Provisions of the Privacy Act apply to all records and reports maintained by the contractors.

· All programs and materials developed at government expense during the performance period of this contract are the property of the US Government.

· Prior to granting an employee access to classified information and/or materials, the contractor shall brief employees with regard to their obligation to comply with the NISPOM, to include any changes and/or amendments, and 32 CFR, Part 117. The contractor’s employees shall be debriefed when access to the material is no longer needed or is terminated. A list of all employees who have had access to classified information during the period of this contract shall be maintained by the contractor company and be available for Defense Counterintelligence and Security Agency inspection.

· Access to General Protection/Security Policies and Procedures. All contractor employees, including subcontractor employees stationed or assigned on a US Government facility shall comply with applicable installation, facility access procedures and local security policies (provided by the US Government security personnel). The contractor workforce shall comply with all personal identification verification requirements as directed by DCSA and/or local policy. In addition to the changes otherwise authorized by the changes clause in this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the US Government may require changes in the contractor security processes or procedures.

· Contractors requiring access to US Government Information Technology (IT) systems must adhere to all US Government requirements. All contractor employees and any associated subcontractor employees shall annually complete the DoD Information Assurance Training and sign an Acceptable Use Policy (AUP). The training certificate and AUP must be provided to the designated personnel at US Government facilities before issuance of network access and annually thereafter.

· Contactor employees shall abide by US Government Security Regulations and Security Standard Operating Procedures when working on-site at US Government facilities/installations and shall annually attend Government mandatory training including Operational Security, Security Awareness, Subversion and Espionage, Ethics and Prevention of Sexual Harassment, and any/all other training as directed by the US Government.

· Common Access Cards (CACs) are authorized for contractor employees that work on-site at DCSA Government facility. CACs are the property of the US Government and shall be giving to the Contractor Facility Security Officer upon termination of employment with the company, expiration of the CAC, replacement of a CAC, or upon contract completion. The FSO shall immediately return the CACs to the DCSA Government Contracting Officer or Contracting Officer Representative. The loss of a CAC shall be reported on the first business day following the discovery of the lost CAC to your chain of command and to the issuing agency. Unauthorized possession of a CAC can be prosecuted criminally under section 701, title 18, United States Code. Photocopying of US Government Identification (CAC) is a violation of Title 18, US Code Part 1, Chapter 33, Section 01 and punishable by both fine and imprisonment. Although the asking for military/government identification is totally permissible by commercial establishments, there is a prohibition on duplication of government identification. A state issued driver license or other form of photo identification should be provided to be photocopied if an establishment insists on a photocopy of the traveler’s identification. Contractor is required to ensure that all employees are aware of this law.

· Contractor personnel shall utilize US Government or official company e-mail for transmitting official US Government business. Official US Government business shall NOT be transmitted via personal, private, and/or commercial e-mail accounts, i.e., YAHOO, HOTMAIL, GMAIL, JUNO, AOL, COMCAST, KNOLOGY, VERIZON, etc.

· Contractor is prohibited from using reference to this contract, classification, clearances, accesses (collateral and/or SCI), even by unclassified acronyms, in advertisements, websites, capabilities fliers, promotional efforts, or recruitment of employees.

1.6.3.1. Facility Clearance: The Contractor must possess and maintain a TOP SECRET facility clearance granted by DCSA. The Contractor's employees, performing work in support of this contract must be US Persons and will require TOP SECRET security clearance/eligibility determination based on a favorably adjudicated T5 or T5R with SCI eligibility; be within investigation scope and/or currently enrolled in CE / CV at the time of at time of the proposal submission, and must maintain the level of security required for the life of the contract, to include all potential option years identified. The DD Form 254 must be completed within the NISP Contracts Classification System (NCCS) at contract award. The DD Form 254 will be housed within the NCCS through the life of the contract. The Contractor must be registered within NCCS at time of award to gain access to the DD Form 254. It is incumbent upon the Contractor to ensure that the necessary security paperwork is submitted in sufficient time to enable everyone to be cleared prior to beginning work on this task order. If the NCCS is superseded by another System of Record, the same requirements apply. The DCSA KO will maintain the DD Form 254 in the official contract records.

All cleared commercial Contractors supporting the DoD or select Executive Branch departments and agencies, and operating under the auspices of DoDD 5105.42, the NISP and Title 32 CFR, Part 117, are required to report possible threats and vulnerabilities identified in the National Industrial Security Program Operating Manual (NISPOM) and Title 32 CFR, Part 117; the reportable incident must be entered into the Defense Information System for Security (DISS).

Contractor personnel performing or assigned under this contract must be U.S. persons. Security Classification Guide requests should be presented to the Government sponsor, if required, after contract award. All classified information received or generated under this contract is the property of the U. S. Government. The U. S. Government must provide disposition instructions. No release of classified information or CUI under this contract is authorized. All requirements for control and accounting of original documentation and copies apply. All applicable provisions of the NISPOM and its supplements and 32 CFR, part 117 apply. Any classified information must be transmitted IAW DODM 5200.01, Volumes 1-3. DOD Information Security Program Regulations. The Contractor must adhere to 32 CFR Part 117.18 (NISPOM), which applies to non-DoD IT systems.

Within one (1) business day of contract award, the prime Contractor must submit a VAR to the DCSA Security Office to validate that all management, supervisory, and other personnel assigned to this contract meet the clearance requirements. Failure to provide security eligibility information will delay and/or deny the individual access to DCSA, and DoD facilities and information. It is the responsibility of the prime Contractor to maintain either an owning or servicing relationship in DISS with all personnel supporting this contract, this includes Prime Contractor personnel, subcontractor personnel, and any consultants. All VARs submitted to the host Government locations must be sent via the DISS and *must* come from the prime Contractor's Security Management Officer (SMO) in DISS. For visits to DCSA, all VARs should be sent to SMO DCSA Headquarters Security Office (DCSAHQSEC). will

1.6.3.2. All Contractor personnel (including subcontractors) entering any Government facility or property will abide by all security rules and regulations.

1.6.3.3.

Some of the workload for the tasks in Part 5 will need to be conducted by employees cleared for access to SCI.

1.6.3.4. Physical Security: The Contractor must be responsible for safeguarding all classified and Controlled Unclassified Information (CUI), Government equipment, information, and property to which they obtain access to. At the close of each work period, Government facilities equipment, and materials must be appropriately secured. The Contractor must safeguard and secure the identified equipment, information, property, facilities, and materials IAW the Department of Defense Instruction (DoDI) 5220.22-M “National Industrial Security Program (NISP),” the DoDI 5200.48 “Controlled Unclassified Information (CUI)”; and 32 Code of Federal Regulation Part 117 (32CFR, Part 117) “National Industrial Security Program Operating Manual (NISPOM).”

1.6.3.5. Key Control (if applicable). The Contractor will establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. Keys issued to the Contractor by the Government must not be duplicated. The Contractor must include procedures for covering key control in the QCP. Such procedures will include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor will immediately report any occurrences of lost or duplicate keys/key cards to the COR and KO.

1.6.3.6. In the event keys, other than master keys, are lost or duplicated, the Contractor will, upon direction of the COR, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks will be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system will be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.6.3.7. The Contractor will prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor will prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the COR and/or KO. Under no circumstances will Contractors be permitted to open/close sensitive compartmented information facility (SCIF) spaces.

1.6.3.8.

Lock Combinations: The Contractor will establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor will ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures will be included in the Contractor’s QCP.

1.7. Training: All Contractor employees, to include subcontractor employees, must complete DCSA annual training within the mandated timelines within the Security Training Education and Professionalization Portal (STEPP). The following table represents required training for Contractor personnel:

Course Length Intended Delivery Method

/DesktopHome.jsf

for Contractors. The training will be completed annually.

ensure compliance with DCSAI 08-14, Contractor personnel should complete Prevention of Sexual Harassment training IAW DoDI 1020.04.

1.7.1. The Contractor will submit certificates of completion for each Contractor employee and Subcontractor employee (as applicable), to the COR. This training will be completed and reported to the COR within 30 calendar days after contract award. Certificates of completion for annual training will be submitted on an annual basis throughout the life of the contract. The Contractor must maintain a training record and be able to provide it to the Government at any time and in support of Government engagements, assistance visits, and inspections. (CDRL A004)

1.8. Personnel Requirements: All personnel assigned to the project will be required to adhere to the guidelines prescribed under the Freedom of Information Act (FOIA) and the Privacy Act. Records that contain PII and Personal Health Information (PHI) will be handled as sensitive in nature. Non-disclosure agreements will need to be signed by those involved in the project and provided to the Government. All data and copies will be retained by any Contractor or Subcontractor working on this requirement and provided to the COR.

1.8.1. Contractor employees whose duties require access to a DoD unclassified computer/network, working with sensitive unclassified information (either at a Government or Contractor facility) or information protected by the Privacy Act of 1974, or physical access to a DoD facility must be a US citizen and possess an eligibility determination prior to installation/network access, or other requirements. The work for this effort is anticipated to be up to the TS/SCI clearance level.

1.8.2. The requirements above, requiring Contractor personnel to possess a favorable eligibility determination, will be processed utilizing the National Background Investigation Services (NBIS) eApp, which can be accessed at https://eapp.nbis.mil. Failure to provide the required documentation at least five days prior to start date of new personnel will result in a delay of start date. The Contractor's Security Representative will be responsible for initiating investigations as required.

1.9. Post Award Meetings:

1.9.1. Post Award Orientation Meeting: At a minimum, the Contractor, KO and COR will attend a post award orientation meeting via teleconference within five (5) business days of contract award. The meeting will be convened by the contracting activity IAW FAR 42.5. Names of additional Contractor attendees must be submitted to the COR and the KO via email prior to the post award orientation meeting.

1.9.2. Monthly Program and Meetings Review: The KO, COR, and other Government personnel (as determined appropriate by the KO and the COR) will meet monthly at the primary place of performance (or by using other approved teleconference capabilities) with the Contractor’s PM to review the Contractor's performance. Other Contractor personnel are permitted to attend but attendance must be coordinated with the COR. The Contractor must coordinate and schedule the meeting for all required/approved attendees. The Contractor must be prepared to present on topics related to performance, achievements, and issues associated with the work performed under this effort. The Contractor must present their performance as compared against the performance standards established in the contract. The COR, in conjunction with the KO (or assigned CS), will apprise the Contractor of how the Government views the Contractor's performance and the Contractor must apprise the Government of problems, if any, being experienced. Material the Contractor plans to present or discuss during the meeting must be submitted to the COR at least five (5) business days in advance of the meeting. The Government may request additional reports independent of the meetings to address issues. The Contractor must provide meeting minutes within five (5) business days after the conclusion of the scheduled meeting. To the extent practical, the meeting minutes should be a recap of the meeting, discussion, and include any attachments. These quarterly program review meetings will be at no additional cost to the Government.

1.9.3. Monthly In Progress Review: This brief and presentation must include, at minimum, the following tasks (CDRL A005):

· Detailed brief on topics related to performance, achievements, and issues associated with the work performed under this effort.

· Provide all the data normally provided for within the Monthly Status Report as compared against the performance standards established in the contract. Each performance standard should be reported.

· Reconciliation of deliverables required against deliverables received

· Summary of current priorities and future tasks

· Meeting minutes to include a list of attendees, topics discussed, actions agreed to, open items and the date of the next meeting.

1.10. Contracting Officer’s Representative: The COR will be identified by a separate, appointment letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance: maintain written and oral communications with the Contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the KO and Contractor of any deficiencies; coordinate availability of Government furnished property, and provide site entry…