Att 1 Statement of Work.pdf

70Z08425QHONO0002 AƩachment 1

STATEMENT OF WORK (SOW)

United States Coast Guard District Fourteen

Special Security Officer PJKK Federal Building, Honolulu, Hawaii

1. General InformaƟon:

1.1. Purpose. The purpose of this SOW is to provide a Special Security Officer (SSO) to provide SensiƟve Compartmented InformaƟon (SCI) security management for the CG District 14 shore-side SensiƟve Compartmented InformaƟon Facility (SCIF) in Honolulu, HI, In-Accordance-With (IAW) the Intelligence Community DirecƟve (ICD) 705; COMDTINST M5500.27, Coast Guard SensiƟve Compartmented InformaƟon Security AdministraƟon Manual; and Department of Defense Policies (DoD).

1.2. Project size, scope, complexity. The site of performance is 5,716 sq/Ō suite that includes a command center/watch floor, conference room, kitchen, lavatories, server room, EKMS vault, storage, and intelligence workspaces. The SSO is responsible for the maintenance and physical accreditaƟon of the 1100 sq/Ō intelligence workspaces (SCIF) IAW ICD 705 to aƩain a final facility accreditaƟon to ICD/ICS 705 Technical SpecificaƟons; accreditaƟon is comprised of Physical, TEMPEST, and AIS standards.

1.3. The SSO is the single point of contact regarding the Special Compartmented

InformaƟon Facility (SCIF) at the project site. The SSO will coordinate with the ContracƟng Officer RepresentaƟve (COR) and will forward informaƟon to the Supervisory Security Specialist at Coast Guard MariƟme Intelligence Fusion Center Pacific (MIFC PAC) on behalf of the AccrediƟng Officer (AO). All security acƟons shall be approved by the SSO, and IAW the terms and condiƟons of the contract.

1.4. The SSO is the appropriate enƟty who will use such info to ensure the maintenance and accreditaƟon of the SCIF (intelligence workspaces) is not compromised, and that the SCIF is operaƟng in compliance with accreditaƟon approvals. The Supervisory Security Specialist and/or AO will visit the site to review SSOs compliance as required. Concerns idenƟfied by the AO will be provided to the Supervisory Security Specialist and the SSO, who will be available to address any quesƟons posed by the AO and include the COR and ContracƟng Officer (CO) in the dialog (so any areas affecƟng the terms and condiƟons of the contract are duly considered in any acƟons).

2. Background: U.S. Government Intelligence Community sponsored SCIFs are subject to overarching and unique program consideraƟons. The infrastructure, equipment, and services acquired will be criƟcal to ensuring that this SCIF complies with the requirements defined in the ICD 705, “Physical and Technical Security Standards for SensiƟve

Compartmented InformaƟon FaciliƟes”, and the DoD 5105.21-M-Volumes, 1-3, “SensiƟve Compartmented InformaƟon AdministraƟve Manual”, dated October 2012. In addiƟon, the ICD 705 has several implemenƟng documents to include ICS 705-I, ICS 705-2 and the “IC Technical SpecificaƟons for ConstrucƟon and Management of SensiƟve Compartmented InformaƟon FaciliƟes (SCIF), IC Tech Spec for ICD/ICS 705 (series). Documents available at www.odni.gov.

3. Scope: The Security Contractor shall provide an SSO to provide SensiƟve Compartmented InformaƟon (SCI) Security Management for the CG District 14 SCIF, which shall include all aspects of physical, personnel, technical, and procedural security as required for supported secure projects to full comply with ICD 705 and COMDTINST M5500.27, to ensure successful accreditaƟon and maintenance of the secure facility. Successful compleƟon of the secure project is conƟngent on a mutual partnership between the SSM/Staff, USCG SSO/AO, and the USCG ContracƟng Officer/COR. For OperaƟonal Security (OPSEC) purposes, contract documents will refer to projects under the purview of ICD 705 as Secure Areas (SA) in lieu of SCIF, but the terms shall be interchangeable. The contract scope shall include an SSM who can manage a construcƟon security program, administraƟve, construcƟon surveillance operaƟons, and provide the necessary documentaƟon for accreditaƟon.

4. Management and Oversight of the CG District 14 SCIF: provide a SSO who can manage the

SCIF and ensure the SCIF is operaƟng in compliance with accreditaƟon approvals.

4.1. Personnel:

SSO Key Personnel, SSO Staff Qty: 1

The SSO is idenƟfied as key personnel on this contract. AŌer contract award, the

Contractor shall noƟfy the COR prior to replacing Government approved key personnel and shall demonstrate that the qualificaƟons of the proposed replacement personnel are equal to or beƩer than the qualificaƟons of the personnel being replaced. Key personnel changes shall not be allowed without Government approval. The Contractor shall submit a resume and training cerƟficaƟon IAW posiƟon descripƟon below, to the Government with their iniƟal proposal. Resumes submiƩed must be for current employees of the Contractor and who the Contractor intends to use on this project. If the resumes submiƩed are not for current employees of the submiƫng company, they will not be considered for use on this project. Key personnel must meet the following requirements to be considered technically qualified to perform on this contract.

4.2. SSO:

4.2.1. Must have acƟve U.S. Top Secret security clearance with SCI eligibility and be a U.S. CiƟzen.

4.2.2. Must have substanƟal security experience related to SCIF construcƟon and maintenance, Intelligence and Counter-Intelligence OperaƟons, Technical

Surveillance Countermeasures, Physical Security, or a combinaƟon of these experiences.

4.2.3. Must have direct experience working as a Physical Security Special Security Officer (SSO). Must have knowledge of a wide range of security concepts, principles, requirements, technology, program relaƟonships, and proficiency in InformaƟon and Personnel security to effecƟvely implement and administer applicable security programs and/or coordinate with other specialized security programs; apply policy direcƟon to contractors, government, and military officials.

4.2.4. Must have a good understanding of the ICD/ICS 705 as demonstrated by experience working on at least three (3) separate ICD 705 projects.

4.2.5. Preferably have the Department of Defense Security Fundamentals Professional CerƟficaƟon (SFPC) and Security Asset ProtecƟon Professional CerƟficaƟon (SAPPC) conferrals are required within 2 years of the established employee EOD or iniƟal assignment date to this posiƟon in accordance with DOD 3305.13-M, DoD Security AccreditaƟon and CerƟficaƟon.

4.2.6. Preferably have a bachelor’s degree from an accredited university, in security of intelligence field.

4.2.7. Must have a CerƟfied Professional cerƟficate from ASIS InternaƟonal or equivalent.

4.3. SupporƟng DocumentaƟon: SupporƟng documentaƟon for required training/cerƟficates for the key personnel posiƟons will be requested. AŌer contract award, the Contractor shall noƟfy the ContracƟng Officer RepresentaƟve (COR) prior to replacing Government approved key personnel and shall demonstrate equal or greater qualificaƟons of the personnel being replaced. Key personnel changes shall not be allowed without government approval.

4.4. Overall SCI Security Program Management & CG PorƟon of the DODIIS ExecuƟon:

The Contractor shall be capable of providing an SSO who can manage a SCI Security Program and execute the CG porƟons of the DoDIII InformaƟon Security program within CG District 14 to fully comply with DoD and CG RegulaƟons.

4.5. The Contractor shall maintain strict compliance with this statement of work and other terms and condiƟons contained herein to ensure management of the District 14 SCI security program. The Contractor shall furnish the SSO with equipment, training, and supplies required.

4.5.1. The Contractor shall be required to comply with all training requirements, as required for contract performance. The Contractor shall provide its employees and any sub-contractors the support infrastructure to meet the requirements of this contract.

4.6. OrganizaƟonal Conflict of Interest: Contractor of sub-contractor personnel performing work under this contract may receive, have access to or parƟcipate in the development of proprietary or source selecƟon informaƟon (e.g., cost or pricing informaƟon, budget informaƟon or analyses, specificaƟons, or work statements, etc.) or perform evaluaƟon services which may create a current of subsequent OrganizaƟon Conflict of Interest (OCI) as defined in FAR Subpart 9.5. The Contractor shall noƟfy the ContracƟng Officer immediately whenever it becomes aware that such access or parƟcipaƟon may result in any actual or potenƟal OCI and shall promptly submit a plan to the ContracƟng Officer to avoid or miƟgate any such OCI.

The Contractor’s miƟgaƟon plan will be determined to be acceptable solely at the discreƟon of the ContracƟng Officer and in the event the ContracƟng Officer unilaterally determines that any such OCI cannot be saƟsfactorily avoided or miƟgated, the ContracƟng Officer may affect other remedies as he or she deems necessary, including prohibiƟng the Contractor from parƟcipaƟon in subsequent contracted requirements which may be affected by the OCI.

4.7. The Contractor shall provide an SSO to support the U.S. Coast Guard District

Fourteen SCIF at the PJKK Federal Building, Honolulu, Hawaii throughout the duraƟon of the contract.

4.8. Security Requirements: The minimum required security clearance is, U.S. Top Secret

(TS) with SCI eligibility and be a U.S. CiƟzen.

4.9. OperaƟons: The Contractor provided SSO will be the SCI security point of contact for the duraƟon of the contract. He/She shall adhere to the security policies outlined in ICD 704 and ICD 705, ensuring comprehensive security measures. The SSO will also integrate Coast Guard and unit specific security guidelines. The SSO will work a 40-hour work week.

4.10. SSO OperaƟons will include:

4.10.1. Manage the SCI Security program and oversee SCI security funcƟons to include validaƟng access requirements and serving as the official channel for cerƟfying and receiving SCI visitor clearances and accesses.

4.10.2. Establish D14-specific, and maintain applicable, SCI direcƟves, regulaƟons, manuals, and guidelines to adequately discharge their duƟes and responsibiliƟes.

4.10.3. Develops and performs SCI indoctrinaƟons and conƟnuing educaƟon briefings for qualified individuals or acƟviƟes served, their reserve units, and associated contractors. Provide debriefs when members no longer have need to know.

4.10.4. Administers the Industrial Security Program for D14. Reviews solicitaƟon and contract documents to ensure they include the appropriate security clauses and language.

4.10.5. Properly account for, control, transmit, transport, package, safeguard, and destroy SCI material(s).

4.10.6. Operate and produce badges to be issued to all personnel requiring site access.

4.10.7. Resolving Intrusion DetecƟon System (IDS) alarms, conduct alarm and response Ɵme tests, coordinaƟng with vendors as necessary.

4.10.8. Track and update GSA containers and SCIF doors for serviceability and manage/change combos and paperwork.

4.10.9. Maintain the SSO records within the Integrated Security Management System (ISMS) to accurately reflect the SCI status of all personnel under their cognizance.

4.10.10. When applicable, provide guidance and assistance for all SCI-related quesƟons.

4.10.11. Establish wriƩen SOPs and EAPs as required for their operaƟonal environments and maintain appropriate accreditaƟon documentaƟon for the SCIF, communicaƟons system, and InformaƟon Security under their cognizance.

4.10.12. Comply with security assistance visits, security compliance reviews, and/or security inspecƟons.

4.11. The Government reserves the right to reject, at any Ɵme and without noƟce, any employee proposed for use on this project, or already assigned to this project, who does not meet the service requirements of this statement of work or is unable/unwilling to perform assigned work. The Contractor shall be responsible for the correcƟon of any unacceptable performance, including, but not limited to, unprofessional behavior, disorderly conduct, ineffecƟve or improper communicaƟon with others, inappropriate dress, etc. The Contractor shall not deploy the rejected employee to the project locaƟon of if already deployed will immediately instruct the rejected employee to leave the Government premises. The Contractor shall provide a subsƟtute/replacement. The replacement shall take place at no addiƟonal cost to the Government.

4.12. TransportaƟon: The Security Contractor will be responsible for self-transport to and from the PJKK Federal Building located at 300 Ala Moana Boulevard, Honolulu, Hawaii 96850. No parking will be available at the work locaƟon. Refer to map below.

IllustraƟon 1. PJKK Federal Building, Honolulu, Hawaii.

5. Service Contract ReporƟng (SCR):

5.1. The Security Contractor shall report total dollar amount invoiced and all contractor labor hours (including sub-contractor labor hours) required for performance of services provided under this contract via secure data collecƟon site. The Security Contractor is required to fill in all required data fields using the following web address: hƩps://www.sam.gov.

5.2. ReporƟng inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs from October 1st through September 30th. While inputs may be reported any Ɵme during the FY, all data shall be reported no later than October 31st of each calendar year. Contractors may direct any quesƟons to the help desk, linked at hƩps://www.sam.gov.

6. Contractor Unclassified Access to Federally Controlled FaciliƟes, SensiƟve InformaƟon of

Protected Health InformaƟon.

6.1. Homeland Security PresidenƟal DirecƟve-12 (HSPD-12) requires Government agencies to develop and implement Federal security standards for Federal employees and Contractors. Homeland Security PresidenƟal DirecƟve-12 (HSPD-12), “Policy for a Common IdenƟficaƟon Standard for Federal Employees and Contractors,” August 27, 2004.

6.2. Applicability:

6.2.1. This text applies to Contractor employees requiring physical access to any area of a federally controlled base, facility, or acƟvity. This clause also applies to Contractor employees who require access to Privacy Act and Protected Health InformaƟon, provide support associated with fiduciary duƟes, or perform duƟes that have been idenƟfied as NaƟonal Security PosiƟon, as advised by the command security manager. It is the responsibility of the responsible security officer of the command/facility where the work is performed to ensure compliance.

6.2.2. Each Contractor employee providing services at a U.S. Coast Guard District Fourteen Command located within the PJKK Federal Building, GSA-controlled facility under this contract is required to have Department of Defense Common Access Card (DoD CAC).

6.3. Access to Federal FaciliƟes:

6.3.1. Per HSPD-12 and implemenƟng guidance, all Contractor employees working at a federally controlled base, facility, or acƟvity under this clause will require a DoD CAC. When access to a base, facility, or acƟvity is required the Contractor shall in-process with the Command’s Security Manager upon arrival to the Command and shall out-process prior to their departure at the compleƟon of the individual’s performance under the contract.

6.4. Contractors Security RepresentaƟve:

6.4.1. The Contractor shall designate an employee to serve as the Contractors Security RepresentaƟve. Within three workdays aŌer contract award, the Contractor shall provide to the requiring acƟvity’s Command Security Manager and the ContracƟng Officer, in wriƟng, the name, Ɵtle, address and phone number for the Contractors Security RepresentaƟve. The Contractors Security RepresentaƟve shall not be replaced or removed without prior noƟce to the ContracƟng Officer and Command Security Manager.