Attachment_0006_GEN VI_PLS_Sample_Task_PWS_CAC 10 APR.docx

DOCX document 143 KB Posted

Attached to
Industry Day - Human Resource Solutions, GEN VI Indefinite Delivery Indefinite Quantity Multiple Award Contracts
Solicitation number
Not on record
Issued by

About this file

This is a sample task Performance Work Statement (PWS) for the Defense Enrollment Eligibility Reporting System (DEERS)/Real-Time Automated Personnel Identification System (RAPIDS) Military Identification Card, Common Access Card (CAC), and Public Key Infrastructure (PKI) Support Services contract. The document is dated April 10, 2026, and serves as a template for evaluation purposes only and is not subject to award.

The statement outlines a Firm Fixed Price non-personal services task order to provide identification card issuance and support services at multiple U.S. Government installations worldwide, with primary contractor personnel located at Fort Knox, Kentucky. The contract encompasses five major functional areas: program management support at the Army Project Office, CAC Mobile Assistance Team (CACMAT) management conducting site assessments across approximately 100-150 Army facilities annually, and ID card operator support at estimated 489 DEERS/RAPIDS sites. Key deliverables include monthly production reports, quarterly trend analysis reports, assessment schedules, site assessment reports, and compliance with extensive security, training, and personnel qualification requirements. The period of performance consists of a 12-month base period (including up to 60 days entrance transition) plus four optional 12-month periods. The contract requires contractor personnel to obtain Tier 1 background investigations, CAC credentials, RAPIDS certification, and compliance with DoD security standards including FIPS 201-3, HSPD-12, and AR 600-8-14. Contractor staff must include qualified Program Managers, CACMAT Team Managers, Site Security Managers with minimum experience requirements, ID card operators, and administrative support personnel, all of whom must be U.S. citizens with English proficiency and professional conduct standards. The Government furnishes facilities, utilities, equipment (laptops, DEERS/RAPIDS workstations, card stock, printers), and network access, while the contractor provides all other necessary supplies and equipment. Monthly Task Order Status Reports are required, along with submission of Service Contract Reporting data, and the contract involves multiple Contracting Officer Representatives and Government Technical Monitors for oversight and performance evaluation against established quality assurance metrics.

View the file

Other files

File Type Posted
Questions Responses from Draft RFP Incl Industry Day.xlsx XLSX spreadsheet
HRS Industry Day Presentation Gen 6 Final.pdf PDF
HRS GEN VI Industry Day Attendees.xlsx XLSX spreadsheet
Questions_Responses_1_from_Draft_RFP_15JUN26_SAMgov_Posting.pdf PDF
HRS Industry Agenda.pptx PPTX presentation
RMAS DRAFT W15QKN26RA001 For Release Rev1 8JUN2026.pdf PDF
RMAS_EXHIBIT_E_CDRL E001_CCIR_Draft.pdf PDF
RMAS_EXHIBIT_C_CDRL_C001_Quality_Control_Plan_Draft.pdf PDF
RMAS DRAFT W15QKN26RA001 For Release.pdf PDF
Attachment_0006_Sample_Task_PWS_ARNG_27_May_2026_RMAS_Draft.docx DOCX document
Attachment_0005_Consolidated_eCRAFT_Requirements_RMAS_Draft.docx DOCX document
Attachment_0003_HRS_GEN_VI _RMAS_DD254_2025_DRAFT.pdf PDF
RMAS_EXHIBIT_D_CDRL_D002_KEY_PERSONNEL_LISTING_Draft.pdf PDF
Attachment_0008_Past_Performance_Questionnaire_RMAS_Draft.docx DOCX document
Attachment_0007_Sample_Task_Matrix_PWS_ARNG_RMAS_Draft.xlsx XLSX spreadsheet
RMAS_EXHIBIT_D_CDRL_D001_Status_Report_Draft.pdf PDF
Attachment_0001_RMAS_Labor_Category_Descriptions_Draft.xlsx XLSX spreadsheet
RMAS_EXHIBIT_B_CDRL_B001_OPSEC_SOP_Draft.pdf PDF
RMAS_EXHIBIT_A_CDRL_A001_CONFERENCE_MINUTES_Draft.pdf PDF
Attachment_0004_HRS_GEN_VI _RMAS_ DD254_2025_Continuation_Sheet_Draft.pdf PDF
RMAS_EXHIBIT_D_CDRL_D003_Transition_Management_Plan_Draft.pdf PDF
Attachment_0002_RMAS_Quality_Assurance_Surveillance_ Plan_21MAY26_Draft.docx DOCX document
EXHIBIT_G_CDRL E001_CCIR_.pdf PDF
EXHIBIT_D_CDRL D001_Status Report_.pdf PDF
Attachment_0003_HRS GEN VI _PLS_ DD254_2025_.pdf PDF
Attachment_0004_HRS GEN VI _PLS_ DD254_2025_Continuation_Sheet.docx DOCX document
Attachment_0005_Consolidated_eCRAFT_Requirements_PLS.docx DOCX document
EXHIBIT_B_CDRL B001_OPSEC SOP_.pdf PDF
EXHIBIT_F_CDRL D003_Transition Management Plan_.pdf PDF
EXHIBIT_A_CDRL A001_CONFERENCE MINUTES_.pdf PDF
Attachment_0002_PLS_Quality_Assurance_Surveillance_Plan_21MAY2026.docx DOCX document
Attachment_0008_PLS_Past_Performance_Questionnaire.docx DOCX document
Attachment_0001_PLS_Labor_Category_Descriptions.xlsx XLSX spreadsheet
DRAFT W15QKN26RA016 For Release.pdf PDF
EXHIBIT_E_CDRL D002_KEY PERSONNEL LISTING_.pdf PDF
EXHIBIT_C_CDRL C001_Quality Control Plan_.pdf PDF
Attachment_0007_Sample_Task_Matrix_PWS_CAC_PKI.xlsx XLSX spreadsheet
Show all 37

On GovTribe

Work with this file

  • Download the original file
  • Contacts named in this file
  • Similar government files
  • Ask GovTribe AI about this file

Text version

DISCLAIMER: This sample task Performance Work Statement is for evaluation purposes only and is not subject to award.

PERFORMANCE WORK STATEMENT (PWS)

DEFENSE ENROLLMENT ELIGIBILITY REPORTING SYSTEM (DEERS) / REAL-TIME AUTOMATED PERSONNEL IDENTIFICATION SYSTEM (RAPIDS) MILITARY IDENTIFICATION (ID) CARD, COMMON ACCESS CARD (CAC) AND PUBLIC KEY INFRASTRUCTURE (PKI) SUPPORT SERVICES

10 April 2026

PART 1

General Information

1. General. This action is for a Firm Fixed Price (FFP) non-personal services Task Order (TO) to provide support at selected installations worldwide. The Government will not exercise any supervision or control over Contractor personnel performing the services herein. Contractor and Subcontractor personnel shall be accountable solely to the Contractor who, in turn is responsible to the U.S. Government.

1.1 Description of Services/Objective. The Contractor shall provide all personnel, supervision, and other items and non-personal services necessary to perform the services defined in this Performance Work Statement (PWS), except for those items specified as Government furnished property and services. The Contractor shall perform issuance of Identification (ID) cards and Common Access Cards (CAC), with Public Key Infrastructure (PKI), and provide program support services for the United States (U.S.) Army Project Office (APO). The Contractor shall manage site, cardstock, supplies, and equipment to ensure no interruption in services. The Contractor shall support site assessments of Army and Army Reserve ID card facilities that service Military personnel worldwide.

1.2 Background. The APO serves as the uniformed services executive agent; initiates, develops, coordinates, and publishes uniformed services procedural guidance regarding the Defense Enrollment Eligibility Reporting System (DEERS), the Real-Time Automated Personnel Identification System (RAPIDS), ID cards, and is the point of contact for the CAC for the Army Chief Information Officer (CIO)/G6. The APO also assists the U.S. Army staff with development of Army ID card policy; developing personnel procedural guidelines; and assisting in publishing AR 600-8-14, ID Cards and DEERS Policy. The APO implements DoD policy and procedures for worldwide use of the DEERS and RAPIDS programs. Furthermore, the APO responds to all Army inquiries regarding DEERS enrollment, ID card policy, and procedural interpretations. The APO provides guidance regarding DEERS/RAPIDS hardware and software issues. The APO represents the Army as a voting member of the Joint Uniformed Services Personnel Advisory Committee (JUSPAC) and serves as committee chairperson on a rotational basis with the other uniformed services.

The Department of Defense (DoD) instituted the DoD CAC/PKI program to address the increased need for higher levels of information assurance as well as addressing issues related to identity protection and management. The CAC/PKI program provides the means to achieve secure and efficient physical access to Government facilities, as well as electronic access to secure web sites and electronic mail. The DoD CAC also serves as the standard identification card for all uniformed services' active-duty members, selected reserves, DoD civilian employees, non-DoD federal eligible employees, eligible Contractors, and certain eligible “volunteers”. The CAC, with its inherent imbedded technologies, is issued and maintained in part using the DEERS/RAPIDS infrastructure.

Execution of Homeland Security Presidential Directive–12 (HSPD-12) and implementing guidance contained in Federal Information Processing Standard (FIPS) 201-3 for personal identity verification, and other DoD instructions, and directive type memorandums (DTMs), have a significant impact on supporting RAPIDS infrastructure as well as modifications to CAC issuance business processes. Compliance with these directives, standards, and instructions require a broad range of planning, analysis and coordination between Office of the Undersecretary of Defense (OUSD) - Personnel and Readiness (OUSD (P&R)) and OUSD - Intelligence (OUSD(I)), and the Defense Manpower Data Center (DMDC) to ensure efficient execution of this program.

1.3 Scope. This TO provides Contractor support services to meet the demands placed on in-house resources resulting from population increase of eligible recipients of military ID cards (military/civilian/Contractor employees, DoD and non-DoD federal agency and other eligible populations). This requirement ensures CAC/PKI related programs are successfully implemented and sustained within the Army. The Contractor shall provide management, research, and assessment services as the principal interface for the APO. The Contractor shall provide services as defined in this PWS, except for those items specified as Government furnished property and services. The Contractor shall perform to the standards in this TO.

1.4 Objectives. The Government’s primary objectives for this TO are:

· Superior quality customer service to all eligible DoD military, civilian, and Contractor employees; to include their dependents and other personnel.

· Ensure Cards issued are accurate and fully compliant with regulatory guidance.

· Ensure compliance with card issuance regulations throughout Army ID card facilities.

· Support APO programs, initiatives and ID card facilities.

· Ensure quality control evaluation of programs and efforts.

· Assist the Government with proposed policies, practices, and implications for human resources (HR) systems, and with design, equipment, and other change engineering activities.

1.5 Period of Performance. The period of performance for this TO shall consist of a 12-month base period (inclusive of an up to 60-day entrance transition) and four 12-month option periods.

1.6 Places of Performance. The Contractor shall perform services under this TO at multiple U.S. Government facilities in both Continental United States (CONUS) and Outside the Continental United States (OCONUS) locations. Contractor personnel providing program management support (PWS section 5.1) shall be located at Fort Knox, KY. Contractor personnel supporting tasks defined in PWS section 5.2, Common Access Card (CAC) Mobile Assistance Team (CACMAT) support, shall travel to locations in the “List of Army Sites Requiring Assessment” which will be provided by the Government. Technical Exhibit (TE) 3, Estimated Workload and Places of Performance provides the places of performance for Contractor personnel supporting tasks defined in PWS section 5.3.

1.7 Hours of Operation. The Contractor shall conduct business Monday through Friday during normal business hours, except Federal holidays (or any other holidays in accordance with [IAW] Department of Labor [DOL] guidance) or when the Government facility is closed/delayed due to local or national emergencies, administrative closings, or similar Government directed facility closings. Hours of operation may vary per location, but most locations are open from 7:30 a.m. to 4:00 p.m. local time. The Contractor shall coordinate with the COR-RA to obtain approval for modifying the hours of operation and business work week (reference TE 3, Estimated Workload and Places of Performance). The Contractor shall at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. The Contractor shall provide ID/CAC Operator support to sites at all times during business hours (with the exception of lunch and workday breaks). The Contractor shall staff locations to ensure stability and continuity of the workforce. Specific allowances may be made to accommodate situations to adjust operating hours in the event of adverse weather or other situations that risk personal safety and cause installation closure.

1.8 Recognized Federal Holidays. Contractor employees are not required to perform services on legal federal holidays, nor will Government facilities operate during these yearly approved days. Federal holidays include:

New Year’s Day
1st day in January
Martin Luther King Jr. Birthday
3rd Monday of January
President’s Day
3rd Monday of February
Memorial Day
Last Monday of May
Juneteenth
19th day in June
Independence Day
4th day in July
Labor Day
1st Monday of September
Columbus Day
2nd Monday of October
Veterans Day
11th day of November
Thanksgiving Day
4th Thursday in November
Christmas Day
25th day of December

Any federal holiday falling on a Saturday will be observed on the preceding Friday, and holidays falling on a Sunday will be observed on the following Monday, unless otherwise directed by the ID card facility. Any DOL wage determinations applicable to this TO may require additional holidays than those stated above. The Contractor is responsible for complying with wage determination requirements and all other appropriate DOL laws and regulations. Contractor employees that are located OCONUS are required to work on Host Nation Holidays that occur during the normal work week, unless the facility is closed. Local Host Nation Holidays occur in the region/state where performance takes place.

1.9 General Information.

1.9.1 Quality Control. The Contractor shall develop, implement, and maintain a written Quality Control Plan (QCP) specific to this TO that addresses processes and procedures that will ensure services are performed IAW this PWS. The Contractor QCP procedures shall address the areas identified in TE 1 - Performance Requirements Summary (PRS). The QCP shall also address how the Contractor will ensure proper Contractor employee ID and badging, to include employee’s name, picture, and company information. The Contractor shall submit its comprehensive written QCP for review and acceptance within 30 business days after TO award and within 5 business days of any changes made thereafter. The QCP shall contain, at a minimum:

· Contract/TO number;

· Description of plan to ensure proper badging;

· Description of plan regarding lock combinations;

· Description of processes and controls to be used to verify acceptable performance;

· Contractor-developed metrics used to verify performance level of each TO objective and how those metrics will be quantified.

1.9.2 Quality Assurance. The Government will evaluate the Contractor’s performance under this TO IAW the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government must do to ensure that the Contractor has performed IAW the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.9.3 Status of Forces Agreement (SOFA). Contractor/Subcontractor shall comply with the provisions of current SOFAs of host nations identified in the PWS.

1.9.3.1 Pre-OCONUS Travel File (PRO-FILE). PRO-FILE is the means by which Army Contractors provide data to Personnel Recovery Mission Software (PRMS) which in turn utilizes this data to create digital Isolated Personnel Report (ISOPREP) files. Individual DA Contractors shall submit their PRO - FILE Survey at https://prmsglobal.prms.af.mil/prmsconv/Login/Logon NLT 90 calendar days prior to OCONUS travel. Completion of the PRO-FILE survey is mandatory for all Department of the Army (DA) Contractors traveling OCONUS for official duty purposes. PRMS digital ISOPREP files created through the PRO-FILE survey remain valid for a maximum of one year from date of completion.

In completing the PRO-FILE Survey, DA Contractors shall utilize the following Unit of Identification Code (UIC) corresponding to the geographic area of employment (NOTE: Not all of the AORs are applicable to this requirement):

Unit Identification Code

UIC
AOR
Country
W11111
CENTCOM
AFGHANISTAN
W11112
CENTCOM
IRAQ
W11113
CENTCOM
KUWAIT
W11114
CENTCOM
HORN OF AFRICA
W11115
CENTCOM
OTHER
W22221
SOUTHCOM
ALL COUNTRIES
W33331
EUCOM
ALL EXCEPT SETAF
W33332
EUCOM
SETAF
W44441
PACOM
ALL EXCEPT SOUTH KOREA
W44442
PACOM
SOUTH KOREA
W55555
NORTHCOM
ALL COUNTRIES
W77777
AFRICOM
ALL COUNTRIES

PRO-FILE and PRMS management support for this TO will be provided by Government. The Government requiring activity Point of Contact (POC) will be identified upon award.

1.9.4 Contracting Officer (KO). The KO is the only person authorized to direct changes in any requirements under this TO. In the event that the Contractor effects any change at the direction of any person other than the KO, the change will be considered to have been made without authority and solely at the risk of the Contractor. To assist the KO in managing the TO, a minimum of two Contracting Officer Representatives (COR) will be appointed.

1.9.5 COR. At a minimum, two CORs will be identified by separate letter. The KO will appoint a COR at the requiring activity (COR- RA), usually located at the functional program office, and a COR at the enterprise-level, located at the HR Solutions program office (COR-HRS). CORs monitor all technical aspects of the TO and assist in TO administration.

1.9.5.1 COR-RA. The COR-RA is the Government’s technical expert and will be appointed by the KO identified by separate letter. Within the limitations of the appointment, the COR-RA shall provide technical assistance to the COR-HRS and is authorized to perform the functions as identified in the KO appointment letter. These functions may include perform or cause to be performed inspections necessary in connection with TO performance and verify that the Contractor has corrected all deficiencies; monitor Contractor's performance and notify the KO, COR-HRS, and Contractor of any deficiencies; coordinate availability of Government furnished property; and provide site entry of Contractor personnel. The COR-RA will participate in “Interim Progress Reviews” (IPR) with the Contractor and HR Solutions staff. A letter of designation issued to the COR-RA, a copy of which is provided to the Contractor, states the responsibilities and limitations of the COR-RA. The COR-RA is not authorized to change any of the terms and conditions of the resulting TO.

1.9.5.2 COR-HRS. The COR-HRS is appointed by the KO. Within the limitations of the appointment the COR-HRS is authorized to perform the functions as identified in the appointment letter. These functions may include: assure that the Contractor performs the technical requirements of the TO; perform or cause to be performed inspections necessary in connection with TO performance and verify that the Contractor has corrected all deficiencies; maintain written and oral communications with the Contractor concerning technical aspects of the TO; issue written interpretations of technical requirements, including Government drawings, designs, specifications; monitor Contractor's performance and notify both the KO and Contractor of any deficiencies. A letter of designation issued to the COR-HRS, a copy of which is sent to the Contractor, states the responsibilities and limitations, specifically with regard to changes in cost or price, estimates or changes in delivery dates. The COR-HRS is not authorized to change any of the terms and conditions of the resulting TO.

1.9.6 Government Technical Monitor (GTM). While a COR is the only officially appointed representative of the KO, given the scope and complexity of some service contracts, other individuals may assist the COR in monitoring the Contractor’s performance against the requirements in the TO. These individuals will be identified as GTMs and will be assigned to all facilities. The most common reason for designating additional technical monitors to support the COR is physical proximity to the Contractor’s worksite, although they may also be appointed because of special skills or knowledge necessary for effective monitoring of the Contractor’s work. The requiring activity will designate GTMs necessary to aid the APO and COR-RA in observing the Contractor’s performance and reporting discrepancies to the APO, COR-RA, and/or COR-HRS. The GTM is not empowered to make any contractual commitments or authorize any changes to the TO or in any way obligate additional funds by the Government, such authority rests solely with the KO.

1.10 Security Requirements.

1.10.1 Physical Security. The Contractor shall be responsible for safeguarding all Government equipment, information and property, including keys and key cards, provided for Contractor/Subcontractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured IAW Army Regulation (AR) 380-5 and AR 25-2. The Contractor/Subcontractor shall return all Government Furnished Material (GFM) / Government Furnished Property (GFP) to the issuer at the end of the TO period of performance or in the event of a TO termination.

1.10.1.1 Unauthorized Use. If it is found that Contractor personnel have been misusing keys to gain access, or to gain entrance to the work area during non-duty hours, holidays, or weekends and there is no written requirement for access during non- standard working hours, this will be considered an abuse of Government property security. The Contractor shall prohibit the use of Government-issued keys by any persons other than those authorized to use the keys.

1.10.1.2 Lock Combinations. The Contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons and coordinated with the GTM to assure installation compliance for lock combinations. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor/Subcontractor’s QCP.

1.10.2 Access and General Protection. The Contractor/Subcontractor employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures. The Contractor/Subcontractor shall provide all information required for background checks to meet installation access requirements. The background check will be accomplished by installation Provost Marshal Office, Director of Emergency Services, or installation Security Office. The Contractor/Subcontractor shall comply with all personal identity verification requirements as directed by DoD, Headquarters Department of the Army (HQDA) and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in Contractor/Subcontractor security measures or processes.

1.10.3 Personnel Screening & Security Requirements. The Government will initiate, and the Contractor shall comply with, requirements for a National Agency Check with written Inquiries (NACI) (Tier 1) background investigation at time of start of work for each employee by submitting required information to the Office of Personnel Management (OPM). Requirements for Tier 1 submission include: Proof of citizenship, PSIP Application Form, OF 306. Upon submission of the investigation request by the Security Office, the Contractor employee will receive email instructions with a link to access the eQIP website to complete the SF 85. Contractor staff are eligible to begin work and obtain a CAC once the NACI investigation has been opened by OPM. Contractor employees shall maintain the eligibility throughout the life of the TO. Contractors assuming roles as Site Security Managers (SSM) for the tasks outlined in PWS 5.3.11 must have a Tier 1 investigation completed and adjudicated with favorable results.

1.10.4 Operations Security (OPSEC). The Contractor shall develop an OPSEC Plan within 45 calendar days of TO award, to be reviewed and approved by the responsible Government OPSEC officer, per AR 530-1, Operations Security. This plan shall include a process to identify critical information, why it needs to be protected, where it is located, who is responsible for it, and how to protect it. In addition, the Contractor shall identify an individual who will be the Contractor's OPSEC coordinator. The Contractor shall ensure this individual is OPSEC Level II certified per AR 530-1. All Contractor employees performing services under this TO shall receive initial OPSEC training IAW AR 530-1. Contractor employees shall complete training within 30 calendar days of reporting for duty and annually thereafter. Training status shall be reported in the Task Order Status Report (TOSR) and training certificates made available upon request.

1.10.5 Common Access Card (CAC). Contractor employees under this TO who require access to DOD facilities, information systems, or networks are required to obtain a Government issued CAC. Proof of employment and security clearance / favorable background check IAW with DoD Regulation 5200.46 is required before a CAC will be issued authorizing access to the Installation and Government computer systems. CACs may not be issued to Contractor/Subcontractor employees unless a data record authorizing CAC issuance is resident in the DEERS. The Mission Partners Identity, Credential and Access Management (MP ICAM) system, or applicable system, is a secure and authorized means of entering Contractor data into DEERS in addition to automating the CAC application and approval process. In order to enter Contractor data into MP ICAM, the Contractor/Subcontractor's data must be resident in Defense Information System for Security (DISS). Personnel who are not in DISS will be required to register at a site where an equivalent background vetting will be accomplished IAW FIPS 201-3.

1.10.5.1 CAC Registration Process. Not later than (NLT) five business days after TO award, the Contractor shall begin the CAC registration process for all personnel requiring a CAC. Be advised that CAC issuance is restricted, so it should be limited to Contractor personnel directly assigned to support this TO.

1.10.5.2 The Contractor shall be aware that extensive employee background checks are time consuming; therefore, there will not be adequate time before the start of a contract to process an alternate employee if the primary fails their security screening. Consequently, it is imperative that the Contractor assign qualified personnel (with reputable backgrounds) to this TO. Delays in performance under this TO the start due to the rejection of a Contractor/Subcontractor employee’s security clearance application will be deemed the responsibility of the Contractor, not the Government.

1.10.5.3 Before departure, the Contractor shall retrieve all identification media (CAC, building electronic access cards, etc.) from their employees who depart for any reason. Reference Federal Acquisition Regulation (FAR) Clause 52.204-9 – Personal Identity Verification of Contractor Personnel – for specific guidance regarding this requirement. The Contractor shall notify the CORs and KO of all lost, stolen, or damaged CACs within 24 hours of issue occurrence.

1.10.6 Systems Access. When requested by the Government, the Contractor shall provide access to and information regarding the systems that the Contractor operates or maintains on behalf of the Government under this TO.

1.10.6.1 Contractor-Owned and Operated Information Systems. The Contractor shall comply with all requirements of AR 25-2, Cybersecurity. Installation of non-Government-owned computing systems or devices without prior authorization of the appointed Designated Approving Authority (DAA) including but not limited to universal serial bus (USB) devices, external media, personal or Contractor-owned laptops, and mobile computer devices is prohibited. All Contractor-owned and operated information systems shall meet all security requirements for Government-owned hardware and software when operating on the Army Enterprise Infostructure (AEI) or any DoD or Federal Agency network, managing, storing, or processing Army, DOD, or Federal Agency data or information, or conducting official communications or business.

1.10.6.2 Data Security. Contractor personnel shall physically or electronically protect Government data when not in use and/or under the control of an authorized individual. The Contractor is responsible to abide by, and ensure compliance with, security requirements stipulated in the DoD Verifying Official (VO) certification practice statement (CPS) and the X.509 certificate policy for the DoD. Furthermore, the Contractor should anticipate working with DoD information technology (IT) systems that require strict adherence to the DoD, and Army security investigation policies in effect at the time an employee is assigned to work on the TO. Provisions of the privacy act apply to all records and reports maintained by the Contractor. The Contractor shall only use Government data obtained under a TO for purposes of the TO and shall not collect or use such information for any other purpose without the prior written approval of the KO. At expiration or termination of a TO, the Contractor shall coordinate with the KO to either turn over all Government data managed under the TO that is in its possession to the Government or successor Contractor, or if the Government so directs, destroy the Government data.

1.10.7 Personally Identifiable Information (PII) and Protected Health Information (PHI). The Contractor shall comply with the Privacy Act and all applicable agency regulations on individual privacy, to include DoD Directive 5400.11 “DoD Privacy Program” and DoD 5400.11-R, DoD Privacy Program. Failure to safeguard information which may involve the Contractor or the Contractor’s personnel or to which they may have access may subject the Contractor and/or the Contractor’s employees to criminal liability under 5 U.S. Code § 552a. Provisions of the privacy act apply to all records and reports maintained by the Contractor IAW Heath Insurance Portability and Accountability Act of 1996 (HIPAA), PII, PHI, and AR 25-2. The Contractor shall safeguard information of a confidential or sensitive nature, also known as PII and PHI. In addition, the Contractor, unless otherwise authorized by the Government, shall limit access to PII and PHI to those employees and Subcontractors who require the information in order to perform their official duties under this TO.

1.10.7.1 PII/PHI Data Security. The Contractor/Subcontractor, unless otherwise authorized by the Government, shall limit access to PII to those employees who require the information to perform their official duties under this TO. The Contractor/Subcontractor, and their employees, shall physically or electronically protect PII/PHI when not in use and/or under the control of an authorized individual. During the course of TO performance, when PII/PHI is no longer needed or required to be retained under applicable Government records retention policies, the Contractor/Subcontractor shall coordinate to either turn over the PII to the Government or destroy it through means that will make the PII irretrievable (i.e., permanently unavailable for access by any person). The Contractor/Subcontractor shall only use PII/PHI obtained under this TO for purposes of the TO and shall not collect or use such information for any other purpose. At expiration or termination of this TO, the Contractor/Subcontractor shall coordinate to either turn over all PII/PHI managed under the TO that is in its possession to the Government or successor Contractor/Subcontractor, or if the Government so directs, destroy the PII/PHI.

1.10.7.2 PII Systems Security. The Contractor shall encrypt all Contractor-owned laptops or other portable media storage devices that process or store PII, IAW FIPS 140-3 (or successor). The Contractor shall require FIPS 140-3 (or successor) encryption of any sensitive PII when transmitted electronically across the internet or other public networks.

1.10.7.3 PII Data Breach Response and Notification. The Contractor/Subcontractor shall adhere to the reporting and response requirements for PII/PHI set forth in DoD 5400.11- R, DoD Privacy Program. The Contractor/Subcontractor shall immediately (within one hour) notify the APO upon discovery that a suspected or actual breach of PII/PHI has occurred. The notification shall include, /PHI the greatest extent possible, the identification of each individual whose PII has been or possibly has been breached. In addition, the Contractor/Subcontractor shall provide the APO with any other available information that must be included in required breach reporting and notifications. The Contractor/Subcontractor shall provide this information at the time of the initial notification to the Government or promptly thereafter as information becomes available. The Government will determine whether a breach of PII/PHI has occurred, and whether breach notification to affected individuals is required. If breach notification to affected individuals is required, the Government will determine if the Contractor shall make the required notification. If the Contractor is to notify the impacted population, it shall submit the notification letters to the APO for review and approval.

1.10.8 Communications Security (COMSEC). All communications with DoD organizations are subject to COMSEC review. The Contractor shall be aware that telephone communications, and IT networks are continually subject to intercept by unfriendly intelligence organizations. DoD has authorized the military department to conduct COMSEC monitoring and recording of telephone calls originating from, or terminating at, DoD organizations. Therefore, the Contractor is advised that any time it places a call or receives a call it is subject to COMSEC procedures. The Contractor shall assume the responsibility for ensuring wide and frequent dissemination of the above information to all employees dealing with DoD information. The Contractor shall be aware of, and abide by, all Government regulations concerning the authorized use of the Government’s computer network (i.e., viewing pornographic material or restricted/subversive sites on the web), including the restriction against using the network to recruit Government personnel or advertise job openings.

1.10.9 Cyber Incident Reporting. The Contractor shall comply with Defense Federal Acquisition Regulation Supplement (DFARS) 252.204-7012, Safeguarding Covered Defense Information and Cyber Incident Reporting. The Contractor shall implement applicable security controls listed in National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, "Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations" to safeguard covered defense information that is processed or stored on their internal information system or network. The Contractor shall provide "adequate security" (as defined by DFARS 252.204-7012) for covered defense information that is processed, stored, or transmitted on the Contractor's internal information system or network.

1.10.10 Contractor’s Security Representative. The Contractor shall designate an employee to serve as the Contractor’s Security Representative. Within three business days after TO award, the Contractor shall provide, in writing, the name, title, e-mail address and phone number for the Contractor’s Security Representative. The Contractor’s Security Representative shall be the primary point of contact on any security matter and shall not be replaced or removed without prior notice to the KO and the COR-RA.

1.11 Training Requirements. The Contractor shall track all training requirements and ensure that all employees working on this TO are compliant. If the training requirements are not met, the Government (installation or command) may refuse access to systems or work location. The Contractor shall maintain a training file for each employee (to include copies of all training certificates) and make it available for inspection upon request from the Government. The Contractor shall comply with and participate in any pertinent Army, command, and installation security training programs when performance or services occur on a Government installation and the Contractor/Subcontractor employee(s) are embedded or integrated into the Government activity or office. The Contractor shall summarize employee training status in each TOSR.

1.11.1 Contractor is responsible to ensure personnel complete the following required trainings within 30 calendar days of TO start, or 30 calendar days after a new employee(s) hire, and annually thereafter:

· Level I Antiterrorism (AT) Awareness Training (Pursuant to Department of Defense Instruction (DoDI) Number 2000.16 “DoD Antiterrorism (AT) Standards”, dated March 1, 2012)

· DoD Cyber Awareness Challenge

· Sexual Harassment/Assault Response and Prevention (SHARP) (IAW NDAA Fiscal Year 2012 sections 584 and 585)

· iWATCH (based on locally developed training)

· Combating Trafficking in Persons (CTIP)

· Threat Awareness Reporting Program (TARP) (per AR 381-12)

· Controlled Unclassified Information (CUI)

· IA/IT Training (as required) (IAW DoDD 8570.01, DoD 5270.01-M and AR 25-2) All training will be conducted at the ID card facility and will be the responsibility of the ID card facility, to include any DEERS/ID card specific requirements.

1.11.2 AT Awareness Training for Overseas Travel. The Contractor shall provide area of responsibility specific AT awareness training as directed by AR 525-13 to all Contractor and Subcontractor personnel before traveling overseas. The Contractor shall contact the COR-RA, or security office to obtain area of responsibility training content. The Contractor shall comply with all other requirements in the DFARS Clause 252.225-7043 Antiterrorism/Force Protection Policy for Defense Contractors Outside the United States.

1.11.3 SHARP. Contractor shall report all SHARP-related incidents involving Contractor employees to the APO, COR-RA, COR-HRS, and KO within two business days of occurrence.

1.11.4 CTIP Compliance Plan. The Contractor shall have a CTIP compliance plan that fulfills the requirements of FAR Clause 52.222-50(h). The Contractor’s CTIP compliance plan shall include a training/awareness program for all Contractor personnel. Within 10 business days after TO award and annually thereafter, the Contractor shall submit a written statement to the Government certifying that is has implemented the CTIP compliance plan.

IAW FAR 52.222-50 – Combatting Trafficking in Persons Alternate I (March 2015), the following directives or notices are applicable to employees performing work at the contract places of performance as indicated below:

Document Title
Document may be obtained from:
Applies to Performance in/at:
Army in Europe Regulation (AER) 190-24
http://www.aepubs.eur.army
Germany, Italy

.mil

United States Forces Korea (USFK) Regulation 700-19
http://www.usfk.mil
Republic of Korea (ROK)
United States Forces, Japan (USFJ) Instruction 64-100
http://www.usfj.mil
Japan

1.11.5 RAPIDS Training. Contractor shall ensure all personnel supporting this TO are initially certified, and re-certified annually in RAPIDS. Contractor employees shall complete RAPIDS certification within seven business days after TO start or seven business days after a new employee(s) hire. Contractor shall notify the APO of any issues with obtaining access to the RAPIDS certification site within two business days of encountering the issue. Contractor personnel shall complete RAPIDS training requirements through website link provided by Government upon award.

1.12 Contractor/Subcontractor ID. All Contractor personnel attending meetings and working in other situations where their Contractor status is not obvious to third parties are required to identify themselves as Contractor/Subcontractor employees to avoid creating an impression that they are Government officials. This includes telephone and email communication. The Contractor shall ensure that all documents or reports produced by Contractors are suitably marked as Contractor products and that Contractor participation is appropriately disclosed.

1.12.1 When Contractor personnel send e-mail messages as part of TO performance, each sender shall include his/her first and last name, e-mail address and name of employer. Email accounts shall follow guidance IAW FAR 37.114(c). Contractors/Subcontractors are prohibited from using their private company emails for Government business as defined in AR 25-2.

1.13 Key Personnel.

1.13.1 Program Manager (PM)/Alternate PM (APM). The Contractor shall provide a PM who shall be responsible for the performance of the work, TO compliance and quality control. The Contractor shall provide the name of the PM and APM to the KO, COR-HRS, COR-RA, and APO within five business days of TO award, and within five business days of replacement of the PM or APM, should that occur. The PM (or in his/her absence, the APM) shall have full authority to act for the Contractor on all matters relating to daily operation of this TO. The PM shall possess a minimum of a Bachelor’s degree and a minimum of eight years of relevant experience managing projects of similar size and scope to those tasks identified in this PWS. The APM shall possess a minimum of a Bachelor’s degree and five years of relevant experience managing projects of similar size and scope to those tasks identified in the PWS. The PM/APM shall be familiar with Government policies and procedures; possess good analytical and time management skills, and experience managing large-scale Government projects.

1.13.2 CACMAT Team Manager. The Contractor shall provide a CACMAT Team Manager who shall be responsible for the supervision and overall management of the CACMAT in support of this TO. The CACMAT Team Manager shall have previously worked as an SSM for a minimum of one year with at least one year of managerial experience. The CACMAT Team Manager shall be a subject matter expert in RAPIDS/DEERS/CAC policies and CACMAT inspection procedures. The CACMAT Team Manager shall possess excellent oral and written communication skills.

1.14 Employee Qualifications and Conduct.

1.14.1 General

1.14.1.1 All Contractor/Subcontractor employees supporting this TO shall be U.S. Citizens.

1.14.1.2 All Contractor/Subcontractor employees shall speak, read, and comprehend English to the extent that they can read and understand printed regulations, detailed written orders, operating procedures, training instructions and materials and perform the duties assigned.

1.14.1.3 The Contractor shall ensure that all employees present a professional appearance that is appropriate for their position and adhere to facility dress code. Any noted concerns shall be reported to the APO for corrective measure instruction.

1.14.1.4 Contractor/Subcontractor employees shall conduct themselves in a professional, efficient, courteous and business-like manner. The Contractor shall remove from the site any individual whose continued employment is deemed by the Government to be contrary to the public interest or inconsistent with the best interests of National Security.

1.14.1.5 Disputes. The Contractor/Subcontractor shall verbally notify the KO of unresolved disputes in receiving support from or providing support to customers or other Contractors/Subcontractor within two work hours from time of dispute. The Contractor/Subcontractor shall provide written notice of dispute resolution(s) to the COR-RA within two business days after resolution.

1.14.2 VO/ID Card Operator Qualifications. At a minimum, VO/ID Card Operators shall possess a high school diploma (or equivalent) and one year of experience in a Customer Service environment, preferably in an HR-related position. VO/ID Card Operators work under general supervision of higher-level personnel in performance of various administrative tasks and procedures and are expected to exercise discretion at all times. VO/ID Card Operators must be proficient in both oral and written communication, and must have a working knowledge of Microsoft Word, Outlook, and basic office equipment such as computers, copiers, fax machines, scanners, etc. Must successfully complete RAPIDS certification IAW PWS 1.11.5.

1.14.3 Site Lead Qualifications. Site Leads shall possess a minimum of two-years’ experience as a VO/ID Card Operator. They may provide guidance to VO/ID Card Operators and provide reports on time or attendance of other personnel. Site Leads must be proficient in both oral and written communication, and must have a working knowledge of Microsoft Word, Outlook, and basic office equipment such as computers, copiers, fax machines, scanners, etc. Must successfully complete RAPIDS certification IAW PWS 1.11.5.

1.14.4 SSM Qualifications. SSMs shall possess a minimum of one-years’ experience as a Site Lead. SSMs may perform more complex tasks and respond to routine questions regarding policy and procedures, provide guidance to VO/ID Card Operators and Site Leads, and provide reports on time or attendance of other personnel. SSMs must be proficient in both oral and written communication, and must have a working knowledge of Microsoft Word, Outlook, and basic office equipment such as computers, copiers, fax machines, scanners, etc. Must successfully complete RAPIDS certification IAW PWS 1.11.5.

1.14.5 CACMAT Inspector Qualifications. CACMAT Inspectors must meet the minimum requirements below:

· Previously worked as an SSM for a minimum of two years.

· Have the ability to brief personnel up to the rank of a General Officer.

· Have VO certification.

1.14.6 Administrative Support Qualifications. At a minimum, the administrative professional shall possess a high school diploma and five years of relevant experience supporting projects of similar size and scope to those tasks identified in the PWS.

1.5 Employee Recruitment, Training, and Retention. A qualified, stable workforce is critical to successful performance of this mission. The Contractor shall have a recruitment, training, and retention program that attracts and retains qualified individuals. The Contractor shall report vacancies, new hires, and the cumulative monthly turnover rates as part of the TOSR. The Contractor shall provide no less than 90% ID Card operator support during business hours, assessed monthly, per site.

1.16 Post Award Kick-Off Meeting. The Contractor shall conduct a project kick-off meeting within five business days of the TO award IAW FAR Subpart 42.5. During the meeting, the Contractor shall provide an orientation to their proposed support of the program, implementation milestone schedule, and discuss administrative matters. The meeting will be held at Fort Knox, KY with the APO, COR-RA, COR-HRS, and KO in attendance. The purpose of this meeting is to achieve a clear and mutual understanding of all contract requirements, and to identify and resolve any potential problems. This meeting is not a substitute for the Contractor fully understanding the work requirements at the time offers are submitted, nor is it to be used to alter the final agreement arrived at in any negotiations leading to TO award. Contractor shall e-mail the COR-RA, COR-HRS, and KO the meeting minutes and post a copy to the HRS Portal NLT five business days following completion the meeting.

1.17 Interim Progress Reviews (IPR). The KO, COR-HRS, COR-RA, and other Government personnel (as appropriate) shall meet at least quarterly with the Contractor to review the Contractors performance. Meetings will be conducted via teleconference (most efficient) or in person (only when directed). The COR-RA shall coordinate these meetings, and the KO will serve as the meeting chair. At these meetings, the Government will apprise the Contractor of how the Government views the Contractor's performance and the Contractor shall apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be conducted at no additional cost to the Government.

1.18 Other Direct Costs (ODCs). The Government will reimburse the Contractor for actual costs identified in this section through the ODC Contract Line Item Number (CLIN). The Contractor shall submit copies of receipts or any other documents necessary to ascertain the validity of costs with WAWF invoices against this TO. General and Administrative (G&A) costs, profit, and material handling fee will not be allowed on ODC’s.

1.18.1 Contractor Travel. The Government will reimburse the Contractor for actual travel costs incurred in the performance of tasks associated with policy meetings identified in PWS paragraph 5.1.3, CACMAT site inspection visits identified in PWS section 5.2, and other Government-directed travel required in connection with the performance of this TO. Contractor travel is subject to the limitations of FAR 31.205-46, Travel Costs. The Contractor shall arrange individual Contractor employee travel. Contractors are expected to utilize the most economical means available for all travel related expenses (e.g., economy cars, coach airfare, etc.) unless directed by the APO. The Government will reimburse the Contractor for all COR-RA and APO approved travel. Travel that is not approved by the COR-RA or APO in advance will not be reimbursed and will be at the Contractor’s expense. The Government will not reimburse the Contractor for Contractor personnel relocation expenses. Contractor routine travel will not be reimbursed unless otherwise directed by the KO.

1.18.2 Local Travel. Travel not normally requiring per diem and lodging shall be considered local travel.

1.18.3 Long Distance Travel. Long distance travel is any travel that requires per diem and/or lodging. The Contractor shall develop an annual travel schedule in coordination with the COR-RA. The Contractor shall submit to the COR-RA or the COR-HRS for approval NLT two calendar weeks prior to the required travel. Contractor shall utilize “Contractor Travel Request Authorization” and “Contractor Travel Expense Report” forms provided by the Government when submitting requests for reimbursement. Contractor shall provide both forms with each submitted invoice.

1.18.4 Non-Reimbursable Travel. Contractor travel required to provide services at performance locations during periods of Contractor personnel vacation, illness, disability or vacancy will not be reimbursed by the Government. Contractor travel costs associated with performance of Contractor’s quality control inspections (unless directed by the APO), Permanent Change of Station (PCS) moves to support the TO, and Contractor corporate-related travel will not be reimbursed under the ODC contract line item.

1.19 Data Rights. The Government has unlimited rights to all documents/material produced under this TO. IAW DFARS 252.227-7013, the documents and materials produced under this TO shall be Government owned and are the property of the Government with all rights and privileges of ownership / copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the KO. All materials supplied to the Government will be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights. All information (data files and hard copy) become the property of the Government, and the Contractor shall return them upon completion of the TO.

1.20 Organizational Conflict of Interest. Contractor/Subcontractor personnel performing work under this TO may perform services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the KO and the COR-HRS immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.21 Transition Management Plan. To minimize any decreases in productivity and to prevent possible negative impacts on services, the Contractor shall work collaboratively with the Government and incumbent Contractor to plan and execute an orderly, seamless transition from the existing TO to the new TO, and uninterrupted service during the designated TO transition period. The Contractor shall develop and implement a comprehensive transition plan that addresses the full range of TO entrance and exit transition activities and describes the approach to minimize disruption to ongoing operations. The Contractor shall provide staffing requirements for entrance/exit transition periods.

1.21.1 Entrance Transition. The entrance transition period shall be 60 calendar days or the period of time between TO award date and the start of the performance period, whichever is the lesser amount of time. The Contractor shall work collaboratively with the Government and the incumbent Contractor/Subcontractor to plan and execute an orderly transition and uninterrupted service during the designated TO transition period. During Entrance Transition, the Contractor shall prepare to assume full responsibility of all areas of operation IAW the terms and conditions of the TO. The Contractor shall be at full staffing and performance on the first day after the end of the Entrance Transition. At a minimum, the Contractor shall address the following activities and deliverables in its transition plan and execute those responsibilities during the entrance transition period:

· Proposed transition kickoff meeting.

· Execution of a transition plan approach with detailed schedules and high-level representation of key transition…

This is the start of the file's text. The full file is on GovTribe.

File details come from the government source that posted it. Updated .