Attachment 0001_IDIQ - INSCOM G-2 ACES_Performance Work Statement_FINAL.pdf

PERFORMANCE WORK STATEMENT

US Army Intelligence and Security Command (INSCOM)

Access Control Officer and Escort Support Services

Part 1

General Information

1. General: This is a non-personal services contract to provide unarmed Access Control Officers and Escort personnel support services. The Government will not exercise any supervision or control over the contract service providers performing the services herein. Contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction: The Contractor shall furnish all required labor, supervision, uniforms, equipment, licenses, certifications, and state and local permits as non-personal services necessary to perform the services as defined in the Performance Work Statement (PWS) except for those items specified as government furnished property and services. This PWS provides security support services for Access Control Officers and Escorts for the Head Quarters (HQs) INSCOM and all subordinate commands within the United States. Services include controlling and monitoring access of personnel and equipment for all the INSCOM Sensitive Compartmented Information Facility (SCIF) as it relates to ensuring personnel have the required clearance and equipment/materials are marked properly.

Additionally, services include providing escort services for personnel without security clearances. The Contractor shall perform to the standards in this single award Indefinite Delivery Indefinite Quantity

(IDIQ).

1.1.1 Exemption to Services: In accordance with the National Capital Region statutory exception for Access Control functions, approved new locations may be identified in individual Task Orders at no additional cost to the Government.

1.2 Background: Headquartered at Fort Belvoir, Virginia, with 17,500 Soldiers, Department of the Army (DA) civilians and Contractors, located at 180 locations in 45 countries, INSCOM executes mission command of operational intelligence forces; conducts worldwide multidiscipline and all source intelligence operations; delivers advanced skills training, linguist support, specialized quick reaction capabilities, and intelligence-related logistics, contracting, and communications in support of Army, Joint, and Coalition commands and the National Intelligence Community. INSCOM is a global command with multiple major subordinate commands (MSCs). INSCOM’s units are located worldwide to provide tailored intelligence support. All further references to INSCOM throughout this document include its (MSCs) and other subordinate units located in the United States and abroad.

1.3 Objectives: The objective of the acquisition is to provide Access Control Officers and Escort support services that process authorized visitors for entry, provide a deterrent to the unauthorized removal of classified materials, prevent unauthorized entry into facilities by personnel not having a proper clearance or access, and provide a deterrent against the unauthorized entry of prohibited items in violation of local Standard Operating Procedure (SOP) and Army policy within the HQ INSCOM and Major Subordinate Commands (MSC) buildings in the United States.

1.4 Scope: The scope of this acquisition is to provide Access Control Officer and Escort Support Services to HQ INSCOM and all MSCs within the United States, to include the following outlined tasks:

A. Control access of personnel and equipment into and out of the facility B. Use Government provided security equipment, systems, and databases C. Conduct face to face identification (ID) checks for building access D. Conduct entry-exit inspections and form validation for all items into and out of the facility E. Escort non-cleared personnel as required F. Document security related activities and results

1.5 Ordering Period: The Ordering Period shall be for 60-month ordering period (1) 12-month Base Year, which includes a 30-day Transition Period (also referred to as the Phase-In Period), followed by four (4) available 12-month ordering periods.

1.5.1 Period of Performance: Period of Performance will be identified at the Task Order level.

1.6 General Information:

1.6.1 Quality Control Plan (QCP): The Contractor shall develop and maintain an effective QCP to ensure services are performed IAW this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s QCP shall set forth the staffing and procedures for self- inspecting the quality, timeliness, responsiveness, customer satisfaction, and other performance requirements in the PWS. The Contractor will develop and implement a performance management system with processes to assess and report their performance to the Contracting Officer’s Representative (COR) and the Alternative Contracting Officer’s Representative (ACOR). IAW CDRL A001, the Contractor shall submit the QCP to the Contracting Officer (KO), COR, and ACOR within fifteen (15) workdays following contract award. Thereafter, if corrective actions are required or if otherwise necessary, the Contractor shall submit a revised QCP within five workdays following any changes to the plan. The revised QCP shall provide the inspection timeline and findings and the status of all open corrective action plans until the action plan is closed (i.e., the discrepancy is under control), if applicable. The Contractor shall update the QCP annually. After Government approval of the QCP, the Contractor shall receive the KO acceptance in writing of any proposed changes to the

QCP.

1.6.2 Quality Assurance Surveillance Plan (QASP): The Contractor’s performance will be evaluated IAW the Government’s Quality Assurance Surveillance Plan and shall be used as the objective basis for determining the Contractor’s performance during any established reporting period. The QASP is a living document that the Government may review and revise on a regular basis. The intent of the QASP is to ensure performance IAW the metrics set forth in the contract documents, so the Government receives the quality of services specified and only pays for the acceptable level of services it receives. This plan aligns with the Performance Requirements Standards, Technical Exhibit 1, which outlines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.2.1 Methods of Surveillance: Examples of methods of surveillance that may be used in the administration of this QASP are:

A. Customer Feedback: Customer feedback may be obtained either from the results of formal customer satisfaction surveys conducted yearly or from random customer complaints. Customer complaints, to be considered valid, must set forth clearly and in writing the detailed nature of the complaint and must be forward to the COR.

B. Random Inspection: Random inspection shall be used to ensure compliance with task order quality objectives.

C. Random Monitoring: Random monitoring shall be performed by the COR, and results shall be entered into the QASP List by the COR.

1.6.3 Recognized Holidays: Access Control Officers will be required to perform duty on listed holidays and Security Escorts will not be required to perform duty on listed holidays unless otherwise directed by government. (Location and Mission Dependent)

New Year’s Day Labor Day Martin Luther King Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Juneteenth National Independence Day Christmas Day Independence Day

1.6.4 Hours of Operation: The contractor is responsible for conducting business, as identified below, except when the Government facilities are closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. For other than firm fixed price contracts, the contractor will not be reimbursed when the government facility is closed for the above reasons. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce is essential. When the site supervisor is off duty, the Contractor shall designate an access control officer with collateral responsibility as the site/location Supervisor. The contractor shall provide a shift schedule to the COR for awareness, ensuring it meets the coverage requirements outlined in the PWS. The contractor shall provide access control and security support services as specified as follows:

Access Control Officers: The Contractor shall be responsible for conducting business, 24/7/365 except as specified for each Task Order.

Escort Personnel: The Contractor shall be responsible for conducting business, during the core hours of 0730-1630 Monday to Friday, except as specified for each Task Order.

1.6.4.1 For Access Control Officers, the Contractor shall be responsible for conducting business, 24/7/365 except as specified for each task order location, or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. Access Control Officers will report 5 minutes prior to each shift change to receive sufficient turnover.

1.6.4.2 For Security Escorts, the Contractor shall be responsible for conducting business, during the core hours of 0730-1630 Monday through Friday, except as specified for each Task Order location, excluding Federal Holidays identified in paragraph 1.6.3, or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings.

Occasionally, Security Escorts may be needed outside the core hours of 0730-1630 Monday through Friday. The COR will coordinate these requirements with the Contractor designated representative.

1.6.5 Place of Performance: The work to be performed under this contract will be performed at the following government facilities:

Augusta, GA Aberdeen Proving Ground, Maryland Alexandria, Virginia

Fort Meade, Maryland Fort Belvoir, Virginia Charlottesville, Virginia Killeen, TX

1.6.5.1 Tour of Duty: The first day a Contractor is assigned to a position and reports to work under this contract shall be considered the beginning date for new personnel. Any Contractor personnel leaving the contract are expected to follow all out-processing and security requirements IAW their local site.

1.6.5.2 The Government reserves the right to deny or revoke access to its facilities for any contractor personnel for reasons of security, misconduct, or failure to comply with regulations. The contractor shall be responsible for providing a suitable replacement.

1.6.6 Type of Contract: The Government anticipates the award of mixed contract types: Firm Fixed Price (FFP) and Labor Hour (LH) Task Orders for the accomplishment of the tasks in this PWS. For the purposes of this IDIQ contract and its corresponding task orders, the required level of effort is based on one FTE equating to 1,912 labor hours. The IDIQ contract will issue non-personal services task orders.

1.6.7 Security Requirement: The Contractor shall possess and maintain a Top Secret (TS) facility clearance at contract award and for the life of the contract. An interim TS Facility Security Clearance (FCL) is not authorized. All Contractor personnel performing under any task order under this IDIQ shall be United States Citizens, have an active Department of Defense (DOD) Top Secret/SCI security clearance with Single Scope Background Investigation (SSBI)/ Tier 5 (T5), Continuous Evaluation/ Continuous Vetting (CE/CV) dates and shall be eligible for indoctrination to the SCI level. All Army SCI contracts will be processed through the Army Centralized Contract System (ACCS) portal, which is overseen by the INSCOM Contractor Support Element (CSE). Some positions may require HUMINT Control System - Product (HCS-P), Special Intelligence (SI), Talent Keyhole (TK), and Gamma (G) access and/or CI Polygraph. Contractors shall maintain their Top Secret with Sensitive Compartmented Information (TS/SCI) access for the life of the contract and must have completed Virtual Access Request System (VARS) for worksites throughout the contract duration. All personnel assigned to perform Access Control duties must sign a Non-Disclosure Agreement (NDA). The Government will exercise complete control of the granting, denial, suspension, or termination of security clearances or SCI access for Access Control Officers and Escorts Services assigned under any awarded task order. Contractors requiring access to Privacy and other sensitive information shall adhere to the Privacy Act of 1974, Title 5 of the USC Section 552a and applicable client agency rules and regulations. The security requirements are in accordance with Technical Exhibit 3, DD254. The Contractor shall comply with FAR 52.204-2, Security Requirements, and the security guidance of AR 381-10. Contractors must be willing to complete a CI Polygraph examination if required for the position.

1.6.7(a) The Contractor shall not publish or disclose in any manner, without the Contracting Officer's written consent, the details of any safeguards either designed or developed by the Contractor under this contract or otherwise provided by the Government. To the extent required to carry out a program of inspection to safeguard against threats and hazards to the security, integrity, and confidentiality of Government data, the Contractor shall afford the Government access to the Contractor's facilities, installations, technical capabilities, operations, documentation, records, and databases. 1.6.7(b) The Contractor shall maintain and administer a security program in accordance with the National Industrial Security Program Operations Manual (NISPOM) DoD 5220.22M. Applicable security regulations are specified in the DD Form 254 and the SCI addendum as shown in the Request for Proposal (RFP). Loss or suspension of required security clearance as set forth on the DD Form 254, “Contract Security Classification Specifications,” would result in the Contractor’s inability to perform in accordance with the terms and conditions of this contract. As a result of this failure to perform, the Contractor is subject to termination under the appropriate termination clause herein.

1.6.7(c) The Contractor’s Facility Security Officer (FSO) shall act as the primary liaison between the Contractor, the COR, and INSCOM Special Security Officer (SSO) on all matters pertaining to security.

1.6.7.1 Physical Security: The Contractor shall be responsible for safeguarding all government equipment, information and property provided for Contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured IAW Army, INSCOM, or local policies or regulations. The Contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. In addition to the changes otherwise authorized by the clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in Contractor security matters or processes. The Contractor employees and vehicles are subject to checks before entering or exiting INSCOM facilities. The Contractor shall coordinate clearance issues for personnel supporting this task order with Contract Support Element (CSE) and Special Security Officer (SSO). The Contractor is responsible for safeguarding all Government equipment, information and property provided for Contractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured. The following personal items are prohibited inside classified workspaces at all times: cell phones/ Blackberries, portable Universal Serial Bus (USB) memory drives, other portable USB devices, external hard drives, cameras, Music Audio Visual File Format -level 3 (MP3) players, scanning devices, digital flash cards/disks, personal laptop computers, camera/USB watches, and wireless transmitters. This list is not all inclusive, personnel will refer to the SSO/Special Security Representative (SSR) for a more detailed list.

1.6.7.2 Key Control: Shall be in accordance with AR 190-51, Appendix D, will be identified at the Task Order level.

1.6.7.3 Lock Combinations: The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s QCP.

1.6.7.4 Contractor Access/ Security Procedures: The Contractor and all associated sub-contractor employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The Contractor shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in Contractor security matters or processes.

1.6.7.5 Restricted Access: The Contractor shall comply with local base procedures for entry to Army controlled/restricted areas where Contractor personnel work. An Unescorted Entry Authorization Certificate must be completed and signed by the sponsoring agencies Security Manager before a Restricted Area Badge will be issued.

1.6.7.6 Incident Reporting: The Contractor shall report all incidents involving any person sustaining injury or illness resulting from Contractor operations and all incidents involving government property or equipment damaged by the Contractor to the COR immediately. A written report shall be submitted to the COR within five (5) workdays (CDRL A002).

1.6.7.6(a) The Government has the authority to conduct investigations of all incidents (including vehicular) involving Contractor personnel, government property, facilities, or equipment or to participate in the contractor’s investigation of Contractor incidents. The Contractor shall participate in, and cooperate with, government mishap investigations related to work performed in support of each task order.

1.6.7.7 Traffic Laws: Contractor personnel shall comply with all base traffic regulations.

1.6.7.8 Weapons, Firearms, and Ammunition: Contractor personnel are prohibited from possessing weapons, firearms, or ammunition, on themselves or privately-owned contract while on duty at any Government installation or within any Government facility.

1.6.8 Special Qualifications:

1.6.8.1 Badging: The Contractor shall be eligible to receive a Common Access Card (CAC). The contract/task order COR will provide instructions and assistance on how to obtain a CAC as needed. Prior to the arrival of the personnel, the Defense Information System for Security (DISS) or following system of record information must be provided to the COR. Prior to working at the site, all contractor personnel must schedule and complete in processing/out-processing with the SSO.

1.6.8.2 Handling or Access to Classified Information: For Contracts That Require Handling or Access to Classified Information: Contractor shall comply with FAR 52.204-2, Security Requirements. This clause involves access to information classified “Confidential,” “Secret,” or “Top Secret” and requires Contractors to comply with The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M Change 4); any revisions to DoD 5220.22-M Change 4, notice of which has been furnished to the Contractor. As prescribed in 4.404(a), insert the following clause the Contractor shall comply with:

(1) The Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (32 Code of Federal Regulations (CFR) part 117).

(2) Any revisions to that manual, notice of which has been furnished to the Contractor.

(3) If, subsequent to the date of this contract, the security classification or security requirements under this contract are changed by the Government and if the changes cause an increase or decrease in security costs or otherwise affect any other term or condition of this contract, the contract shall be subject to an equitable adjustment as if the changes were directed under the Changes clause of this contract.

(4) The Contractor agrees to insert terms that conform substantially to the language of this clause, including this paragraph (4) but excluding any reference to the Changes clause of this contract, in all subcontracts under this contract that involve access to classified information.

1.6.8.2(a) In performance of this contract, the Contractor may have access to Controlled Unclassified Information (CUI) and other sensitive, non-public information. The Contractor agrees:

(1) To use and protect such information from unauthorized disclosure in accordance with Department of Defense Instruction 8582.01, Security of Unclassified DOD Information on Non-

DOD Information Systems, June 6, 2012;

(2) To use and disclose such information only for the purpose of performing this contract and to not use or disclose such information for any personal or commercial purpose;

(3) To obtain permission of the Government Project Manager before disclosing/discussing such information with a third party; (d) to return and/or electronically purge, upon Government request, any non-public, sensitive information no longer required for Offeror performance; and

(4) To advise the Government Project Manager of any unauthorized release of such information.

The Contractor shall have its employees assigned to this contract execute a non-disclosure agreement for delivery to the Government. The Government will require Contractor personnel to sign a non-disclosure statement to protect non-public information in the possession of the Government. The Contractor and its personnel may have access to Personally Identifiable Information (PII), Classified Information, and other CUI that is not releasable to the general public. The Contractor or its personnel shall not release any information or documents that they are provided during performance of the contract without the express written permission of the KO through coordination with the COR. All products produced and their associated work papers are to be considered the property of the Government. All materials supplied to the Government shall be used as the sole property of the Government and may not be used for any other purpose beyond the scope of this contract.

1.6.8.3 Security Clauses/Language to Address the Protection of Classified Information: Contractor personnel performing work under this contract must have a Top Secret with Sensitive Compartmented Information (TS/SCI) security clearance in accordance with DoDM 5200.02 at time of the proposal submission and must maintain the level of security required for the life of the contract except for the FTE’s located at Warren, MI, which only requires a secret classification. Future work related to this contract may require a TS/SCI with Counterintelligence Polygraph (TS/SCI w/CI Poly) clearance. The security requirements are in accordance with the attached DD254. Personnel must perform within the security limitations of AR 381-10, USSID 18, and other security regulations.

1.6.8.4 Security Classification Guidance or Guides: Contractors shall, to the extent practicable, advise and assist in the development of the original Contract Security Classification Specification. It is the Contractor’s responsibility to understand and apply all aspects of the classification guidance. Users of classification guides are also encouraged to notify the originator of the guide when they acquire information that suggests the need for change in the instructions contained in the guide. Classification guidance is, notwithstanding the Contractor’s input, the exclusive responsibility of the GCA, and the final determination of the appropriate classification for the information rests with that activity. The Contract Security Classification Specification is a contractual specification necessary for performance on a classified contract. If a classified contract is received without a Contract Security Classification Specification, the Contractor shall advise the Government Contracting Agency (GCA).

1.6.9 Post Award Conference (CDRL A003)/Periodic Progress Meetings (CDRL A004): The Contractor agrees to attend a post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation Subpart 42.5 to be scheduled between 7 and 10 workdays following contract and subsequent task order award. The KO, Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings the KO or the COR will apprise the Contractor of how the government views the Contractor's performance and the Contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government. The Contractor shall document meeting notes and provide written minutes to any and all meetings with the government and submit them to the KO, COR and Government Program Manager within seven (7) workdays.

1.6.9.1 DD 254 (Solicitation, Award, and/or Modification): DD Form 254 (Solicitation, Award, and/or Modification). The Federal Acquisition Regulation (FAR) and the National Industrial Security Program Operating Manual (NIPSOM, 32 CFR Part 117) requires that a DD Form 254, Contract Security Classification Specification, be integrated into a classified contract, Request for Proposal (RFP), Request for Quotation (RFQ), or other solicitation. The DD Form 254 is the method used to convey security requirements, classification guidance and provide handling procedures for classified material received and/or generated on a classified contract. The DD Form 254 is a contractual specification therefore; it is as important as any other specification in a contract. The DD Form 254, with its attachments and addendums identifies which security classification guidance to use, who has oversight, and where. The form should be kept unclassified, if possible (referenced in HQ, INSCOM, DD Form 254 Standard Operating Procedures).

1.6.9.2 Staff Management Plan: The Contractor shall prepare a staffing plan (CDRL A007) for each task order award that will include the scope of the effort, list of personnel required (task orders only), detailed transition plan and schedule, and cost breakdown. The Contractor shall present the Staffing Plan at the Kickoff Meeting and updated as needed on an annual basis. Updates will be delivered to the KO/COR within 10 workdays of the end of each period of performance.

1.6.9.2.1 Subcontract Management under the 8(a) Business Development program: The Prime Contractor shall comply with all applicable limitations on subcontracting, including FAR 52.219-14. Specifically, the Prime Contractor shall perform at least 50 percent of the cost of contract performance incurred for personnel with its own employees. The Government will actively monitor subcontracting execution over the life of the contract to ensure strict compliance. To facilitate this oversight, the Contractor shall accurately track and report its subcontracting percentages and labor cost distribution in accordance with Subcontracting Status Report (CDRL A015).

1.6.9.3 Meetings and Correspondence: The Government reserves the right to establish regular and or unscheduled meetings to address unforeseen issues or challenges. All contract personnel attending meetings, answering Government telephones, and working in other situations where their contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression that they are Government employees. They must also ensure that all documents or reports produced by Contractors are suitably marked as Contractor products or that Contractor participation is appropriately disclosed. The Contractor shall produce meeting minutes delivered to the KO, COR and the Government Program Manger within seven (7) calendar days of any scheduled or unscheduled meetings.

1.6.9.4 Contracting Officer’s Representative (COR): The contracting officer will issue a letter of designation assigning the COR (a copy of which will be provided to the Contractor) stating the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR monitors all technical aspects of the contract/task order and assists in its’ administration. The COR is authorized to perform the following functions: ensure that the Contractor performs the technical requirements of the contract/task order; perform inspections necessary in connection with contract/task order performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract/task order; issue written interpretations of technical requirements; monitor Contractor's performance and notifies both the contracting officer and Contractor of any deficiencies; coordinate availability of government furnished property; and provide site entry of Contractor personnel. The COR is not authorized to change any of the terms or conditions of this contract or subsequent Task Orders written against this contract. The COR may direct the Contractor, in writing, to remove any employee when retention of such employee endangers life, property, security, or where such an employee violates reasonable and necessary base regulations.

1.6.9.5 Service Contract Reporting (SCR): The Contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract via the System for Award Management (SAM) at https://www.sam.gov. Reporting inputs shall reflect labor executed during the period of performance for each Government fiscal year (FY), covering October 1 through September 30. All data shall be reported no later than (NLT) October 31 of each calendar year for the preceding fiscal year. This requirement is conducted in accordance with FAR 52.204-14, FAR 52.204-15, and DFARS 252.204-7023. Technical assistance is available through the Federal Service Desk at https://www.fsd.gov.

1.6.9.6 Key Personnel: The Contractor shall notify the COR prior to making any change in key personnel.

Prior to directing any of the proposed key personnel to other programs or functional areas, the Contractor shall submit justification to substitute key personnel at least fifteen calendar days prior to the substitution.

Justification shall be in sufficient detail, to include any applicable information needed to permit evaluation of the impact of the proposed change the program and its schedule. The Contractor shall not substitute or change the Key Personnel without prior written consent of the KO. The Contractor shall demonstrate to the satisfaction of the COR that the qualifications of the prospective personnel are equal to or better than the qualifications of the personnel being replaced.

1.6.9.6(a) Substitution or Replacement of Personnel: Contractor shall only substitute or replace an employee with one who has security clearance and technical qualifications equal to or higher than those of the person being replaced.

1.6.9.6(b) Site Supervisor: Site Supervisors shall be U.S. Citizens and be a minimum of 25 years of age.

Candidates must possess an active DoD TS/SCI clearance, a high school diploma or equivalent, and a minimum of 4 years’ experience as an Access Control Officer, utilizing security systems such as DISS.

Additionally, two years of being an access control supervisor, CPR and Automated External Defibrillator certifications are required.

1.6.9.6(c) Additional Personnel Qualifications:

1.6.9.6(d) Access Control Officers: Access Control Officers shall be U.S. Citizens and be a minimum of 21 years of age. Candidates must possess an active DOD TS/SCI clearance, a high school diploma or equivalent, and a minimum of 2 years’ experience utilizing security systems such as DISS or Scattered Castles. Additional qualifications of Cardiopulmonary Resuscitation (CPR) and Automated External Defibrillator (AED) certifications required. Individuals shall be able to perform prolonged walking, standing, sitting and stooping for up to 12 hours, and shall be able to read, write, fluently speak and understand the English language, understand and apply printed rules, detailed orders/instructions and training materials.

1.6.9.6(d)(1) Access Control Officers are responsible for:

Access of personnel and equipment into and out of the facility

Use Government provided security equipment, systems, and databases Conduct face to identification (ID) checks for building access Conduct entry-exit inspections and form validation for all items into and out of the facility Document security related activities and results

1.6.9.6(d)(2) Escorts: Escorts shall be U.S. Citizens and be a minimum of 21 years of age. Candidates must possess an active DoD TS/SCI clearance, a high school diploma or equivalent, and a minimum of 1 years’ experience. Additional qualifications of CPR and AED certifications required. Individuals shall be able to perform prolonged walking, standing, sitting and stooping for up to 12 hours, and shall be able to read, write, fluently speak and understand the English language, understand and apply printed rules, detailed orders/instructions and training materials.

1.6.9.7 Vacancies: The Contractor shall backfill any Access Control Officer and/or Escort shortages within 14 days that the position becomes vacant. If the Contractor is unable to fill vacant position within that timeframe, the COR will be notified in writing with a plan to fill the position and how the vacant position will be covered while the position is being filled. Specific number of Contractor employees will be determined on a location by location basis.

1.6.9.7.1 Termination or Resignation: Upon termination, resignation or any other event leading to a Contractor employee leaving duty under this task order, the Contractor shall be responsible for returning all Government identification, building badges, keys, and other Government property issued to that employee. Failure to comply on the part of the Contractor may result in the Contractor's liability for all costs associated with recovering/replacing the items or correcting a resultant breach in building security.

1.6.10 Identification of Contractor Employees: The Contractor shall be responsible for ensuring that each of its employees performing work under each task order display their Government issued photo-identification badges at all times while they are present in INSCOM facilities. Refusal or repeated neglect to display the photo identification may result in confiscation of the pass and revocation of access to INSCOM facilities. Contractors shall not begin performance until the complete documentation for a Personnel Background Investigation has been submitted. An Identification (ID) badge and Common Access Card (CAC) shall not be issued until complete documentation has been submitted to the COR. The CAC card is required for access to Government computer databases and entering military installations. If a background investigation results in an unfavorable finding, the Contracting Officer will notify the Contractor and the contractor employee will not be able to perform services at the facility, and must return all identification badges, CAC cards, and other items issued previously issued by the Government. Upon award of the contract, the contractor will immediately contact the COR for processing procedures to meet the security requirements as well as in-processing forms.

1.6.10.1 Lost or Stolen Badge: The Contractor shall notify the COR in writing when employee badges are unaccounted for (lost, stolen, etc.) within 1 business day.

1.6.11 The Contractor shall obtain and maintain user accounts for Non-Secure Internet Protocol Router Network (NIPRNET), Secret Internet Protocol Router Network (SIPRNET), National Security Agency Network (NSANET), and Joint Worldwide Intelligence Communications Systems (JWICS) accounts, including email, for their personnel where the networks are available. Contractor personnel shall obtain and maintain the necessary access cards, certificates, and polygraph to access the required classified and unclassified information technology networks. A Counterintelligence (CI) Scope Polygraph Examination is required for NSANet access. The requirement for a polygraph will be determined at the Task Order level.

1.6.12 Monthly Status Report: The Contractor shall provide a monthly status report (CDRL A005) to the KO/COR/IDIQ Program Manager (PM) no later than five (5) calendar days after the end of the previous month. The market research identifies the work completed from the previous month, any significant circumstances which may pose a threat to the security of DoD personnel, Contractor personnel, resources and classified or unclassified defense information, safety incidents, on-going activities, issues and mitigation plans, forecasted future activities and any open actions/decisions since the previous monthly status report. In addition, the Monthly Status Report shall provide number of employees on duty, planned new hires, a monthly roll up of funding and, at a minimum, shall provide the following information:

funding received, funding invoiced to date, outstanding invoices, and funds remaining. This report shall be provided to the KO, COR and IDIQ PM NLT five (5) calendar days after the end of the previous month.

1.6.13 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.13 Non-Disclosure Agreement: All contract company officers, executives, participating in, or with knowledge of this mission will receive a detailed Threat Awareness and Reporting Program (TARP) and mission brief and will execute a Standard Form 312 (non-disclosure agreement) prior to commencement of work. The Contractor shall furnish the COR these signed agreements.

1.6.14 Training: This PWS requires training that is unique to HQ’s INSCOM or the Government. The Government will not pay for Contractor required training in order for Contractor employees to achieve required certification levels required by this contract or any task order. Any currency training, remedial, refresher, maintenance, or advancement to the next certification level, and all associated costs are the responsibility of the Contractor. Access Control Officers and Escorts shall receive initial training on Standard Operating Procedures (SOP) for respective task order locations. In addition, Access Control Officers and Escorts shall take annual INSCOM required training. The majority of the training can be completed via NIPRNET while on duty. INSCOM mandatory training requirements are as follows:

A. Information Assurance Related Training (Cyber Awareness) B. Intelligence Oversight and Civil Liberties C. Operations Security (OPSEC) D. Threat Awareness & Reporting Program (TARP) E. Derivative Classification F. Anti-Terrorism (AT) Training (Contractor) G. Foreign Disclosure, Rules of the Road H. Information Security (Annual Security Refresher Training – INSCOM) I. DoD Mandatory Controlled Unclassified Information (CUI) Training

J. Records Management K. Identifying and Safeguarding Personally Identifiable Information (PII) L. Combatting Trafficking in Persons (CTIP) Training

1.6.14.1 Anti-Terrorism (AT) Level I: All contractor employees, to include subcontractor employees, requiring access to Army installations, facilities and controlled access areas shall complete AT Level 1 awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever is applicable. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR/ACOR or to the contracting officer, if a COR/ACOR is not assigned, within 15 calendar days after completion of training by all employees and subcontractor personnel. AT Level 1 awareness training is available at the Joint Knowledge Online (JKO) website: https://jko.jten.mil (Course: JS-US007). Contractors without a Common Access Card (CAC) can request a sponsored non-CAC account on the JKO homepage to complete the training.:

1.6.14.2 Intelligence Oversight Training: All contractor employees, to include subcontractor employees requiring access to military installations, facilities, and controlled access areas shall complete Intelligence Oversight training. Initial training shall be completed within thirty (30) calendar days of award, within thirty (30) calendar days of new employees commencing performance, and then annually by the anniversary date thereafter. Certificates of completion for each affected contractor employee and subcontractor employee shall be made available to the COR on request. The contractor shall report all Questionable Intelligence Activities (QIA) and Significant and Highly Sensitive Matters (S/HSM) to their appropriate Government Intelligence Oversight Officer (IOO). Reporting procedures will be provided by the government Intelligence Oversight and Compliance Office (IOCO) after contract award. The contractor shall adhere to the command’s Intelligence Oversight policy.

1.6.14.3 iWatch Training: The contractor and all associated sub-contractors shall brief all employees on the local iWATCH program (training standards provided by the requiring activity Authorization to Operate (ATO). This local developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR/ACOR. This training shall be completed within 30 calendar days of contract award and within 30 calendar days of new employee’s commencing performance. iWATCH training results shall be reported to the COR/ACOR not later than 45 calendar days after contract award.

1.6.14.4 Operations Security (OPSEC): Per AR 530-1, OPSEC, new Contractor employees must complete Level I OPSEC training within 30 calendar days of their reporting for duty. All Contractor employees must also complete annual OPSEC awareness training. The Contractor shall submit training certificates of completion to the COR within thirty (30) calendar days of task order award.

1.6.14.5 Information Assurance (IA)/Cyber Awareness Training: All Contractor employees and associated sub-Contractor employees must complete the DoD Cyber Awareness training before issuance of network access and annually thereafter. Training certificates (CDRL A009) must be provided to the COR within 7 calendar days after completion of training. All Contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8140.01, DoD 8140.03-M, and AR 25-2 within thirty calendar days (30) of employment. The Contractor shall submit certificates of completion for each affected Contractor employee and sub-contractor employee to the COR or the contracting officer, within fifteen (15) calendar days after completion of training by all employees and subcontractor personnel.

1.6.14.6 Information Technology System Access: All individuals requiring access to information technology (IT) systems shall have the appropriate security clearance and will be granted access according to their security clearance, need-to-know and their position/category. Position category and investigation guidance is available in DoDM 5200.02. As referenced from AR 25-2, personnel requiring access to information systems processing classified information to fulfill their duties shall possess the required favorable security investigation, security clearance, formal access approval (DOD Directive 8140.01), and need to know.

1.6.15 Transition In/Phase Out Period: To minimize any decreases in productivity and to prevent possible negative impacts on additional services, the Contractor shall have personnel on board, during the 30 day phase in/ phase out period. The Contractor shall be responsible for transition of personnel and must plan accordingly in order to accommodate the personnel security clearance process and ensure contractor personnel meet clearance requirements before starting work. During the phase in period, the Contractor shall become familiar with performance requirements in order to commence full performance of services on the contract start date. The contractor shall begin the process of transitioning personnel in coordination with the COR and user organizations immediately following completion of all security clearance requirements. The contractor shall be required to adhere to the contractor in/out processing requirements as outlined in paragraph 1.6.15.1 below.

1.6.15.1 Transition Plan: The Contractor shall provide a detailed transition plan (CDRL A010 / A011) with associated timelines for tasks that address both phase-in and phase-out for the contract. This plan shall be submitted with the Contractor’s proposal and shall be updated as appropriate throughout the period of performance. Full Contractor performance and minimum manning levels required to support requirements shall begin upon completion of all transition activities with incumbent or within 30 calendar days of contract award, whichever comes first. The Contractor shall complete the full transition of its workforce within calendar 30 days of contract award. The Contractor shall provide staffing timeline for first week, 15 and 30 day increments detailing exact FTEs to be available. In addition, the Contractor shall provide risk mitigation plan on how the Contractor shall provide continuity of services during the first 30 calendar days of transition.

1.6.15.1(a) Transition-In Requirements (CDRL A010): The contractor shall include in its transition plan and perform, at a minimum, the following activities during the phase-in period:

a) Submit requests for physical and network access at performance locations

b) The Facility Security Officer (FSO) must provide to the COR, the following information on all

Contractor personnel performing unit missions that are direct labor, for input into the Government In/Out Processing Portal and must register for Army Centralized Contracts and Security Portal (ACCS) account.

In Processing Out Processing Contractor Employee Name Contractor Employee Name Contractor Employee Email Contractor Employee Email Contractor Employee SSN (Full) Contractor Employee SSN (Full) Contracting Employee Company Contracting Employee Company FSO Email FSO Email Employee Clearance Org/Adjudication Date Employee Clearance Org/Adjudication Date Employee In Processing in Date Employee In Processing in Date

1) All FTEs directly allocated to a Headquarters (HQ) INSCOM/ Major Subordinate Command (MSC) contract will be In/Out processed through the HQ INSCOM/MSC In/Out Processing Portal by the respective COR, with the assistance of information provided by FSO.

2) All FTEs directly allocated to a HQ INSCOM/MSC contract must be Read-On/Read-Off by an INSCOM Security Specialist at an HQ INSCOM/MSC facility.

3) FTEs will NOT be Read-On/Read-Off and facility access will NOT be granted if the required information has not been entered into the HQ INSCOM/MSC In/Out Processing Portal prior to arrival and prior to departure. In the instance of Out Processing, this may affect Contractor Performance Assessment Reporting System (CPARS) reporting on your organization. FTEs will complete Information Assurance (IA) Training (required for Government systems access) and obtain a completion Certificate prior to entry on duty (EOD). The completion Certificate will be sent to the responsible COR to confirm compliance prior to EOD.