Attachment 1.pdf

PERFORMANCE WORK STATEMENT (PWS)

For

Human Factors Support Contract

U.S. ARMY CYBER SCHOOL

FORT EISENHOWER, GA 30905-5000

Part 1

General Information

1. GENERAL: This is a non-personal services contract to provide Human Factors Support to the Cyber School, Cyber Center of Excellence (CCoE), Fort Gordon, Georgia. This effort will support the Cyber School in generating leads for the best-qualified Cyber Soldiers and placing those Soldiers in the right military jobs/roles based on assessment results within the Army’s Cyber Corps. The Government shall not exercise any supervision or control over the contract service provider performing the services herein. Such contract service provider shall be accountable solely to the contractor who, in turn is responsible to the Government.

1.1 Description of Services/Introduction: This requirement is to provide the U.S. Army Cyber School with qualified Human Factors Specialists. The Human Factors Support Contract is to acquire contracted personnel to travel to events, properly vet personnel, and generate recruiting leads to fill training seat and meet personnel shortage requirements within the Cyber Corps in all cohorts (officers, warrant officers, and enlisted personnel) at Fort Eisenhower). The Human Factors Specialists will assist with the efforts to commission and enlist Cyber officers and enlisted personnel. The Human Factors Specialists will plan, develop, and implement a comprehensive plan that identifies target markets that generates recruiting leads on a monthly basis. These contractor will be exposed to information and material up to the Secret level. The contractor shall perform to the standards in this contract.

1.2 Background: The Cyber School was established to provide trained 17 series personnel (17A, 17B, 17C, 17D, 17E, 170A, 170B, and 170D ) that support the Army’s Cyberspace and Electronic Warfare Operations across USCYBERCOM, ARCYBER, Cyber Protection Brigade, Cyber Warfare Battalion, FORSCOM, and other Army missions. “The goal of human factors is to reduce human error, increase productivity, and enhance workplace safety.” It is believed that if we can capture the right talent pools, our Cyber Warriors will make less error while increasing their productivity and avoiding violation of rules of engage while operating in the cyberspace.

1.3 Objectives: Support the personnel proponent office of the US Army Cyber School that includes: planning, developing, and implementing a comprehensive plan that evolves from month to month for all cohorts (officers, warrant officers, and enlisted branches) within the Cyber Corps. The goal is to incorporate all aspects of human factors when scouting for the best and brightest personnel to join the Cyber Corps.

1.4 Scope: The contractor shall provide Human Factors Specialists to make contact with at least 2000 candidates to generate at least 100 confirmed acceptances into the Army via enlistment contracts, acceptance into the commissioning program or approval of a WO application. Entering the military in the Cyber Corps will feed into one of the following courses: 17A-Cyber Basic Officer Leader Course (CyBOLC), 17D- Capabilities Developer Basic Officer Leader Course, 170A- Cyber Warrant Officer Basic Course (CyWOBC), 170D- Capabilities Developer Warrant Officer Basic Course, 17C- Cyber Operations Specialist Advanced Individual Training (AIT), and the Cyber Specialty Direct Commissioning Program as determined by the Army Cyber School Commandant.

The majority of these courses consist of technical cyber training validated by USCYBERCOM J7, DoD CIO, and the NSA. The contractor shall travel up to 75% of the time annually from Fort Eisenhower, Georgia to various location to include colleges/universities, magnet and STEM high schools, job/career fairs, and professional conferences in a temporary duty (TDY) status. Personnel assigned to this contract shall assist and support the CCoE personnel and shall utilize and conform to the standards within all applicable regulations and SOPs (i.e. TRADOC REG 350-70 with appendixes). The Government will own all developed products.

1.5 Period of Performance: The period of performance shall be for a 12-month base period and two (2) 12-month Option periods.

Base Year: 10 September 2024 – 09 September 2025 Option Year I: 10 September 2025 – 09 September 2026 Option Year II: 10 September 2026 – 09 September 2027

1.6. General Information

1.6.1 Quality Control: The contractor shall develop and maintain an effective quality control program to ensure services are performed IAW this PWS. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor’s quality control program is the means of assuring the work and products delivered complies with the requirement of the contract. Cyber School Human Factors Specialist: The contractor shall utilize personnel qualified to identify all aspects of human factors and possess the ability to generate potential leads or applicants to join the military in the Cyber Corps. The contractor shall utilize personnel who possess the knowledge, skills, abilities, and experience to meet the objectives listed above and support Cyberspace Operations IAW all relevant regulations, requirements, and SOPs to include TRADOC Reg.

350-70 with all appendices, USCYBERCOM J7, National Cryptologic Training System (NSA standards per DoDI 3305.09), and DoD Cybersecurity Workforce Framework (i.e. DoD 8570 or 8140) training standards. The development of a Quality Control Plan (QCP) is to ensure services are performed in accordance with this PWS. The initial QCP shall be delivered with the contractor’s proposal. After award the final QCP shall be delivered within 30 days of start date and within 5 working days when changes are made thereafter. After acceptance of the quality control plan, the contractor shall receive the contracting officer’s acceptance in writing of any proposed change to the QC system.

1.6.1.1 Revisions: Revisions to the QCP may be required at any time during performance of the contract to assure contractor compliance with requirements of the PWS and contract. The contractor shall make appropriate revisions and obtain acceptance of the revised plan from the COR.

1.6.2 Quality Assurance: The Government will evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan. This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the maximum acceptable defect rate(s).

1.6.3 Recognized Holidays: The contractor is not expected to perform services on the following federal holidays:

New Year’s Day Labor Day Martin Luther King, Jr.’s Birthday Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Juneteenth Christmas Day Independence Day

1.6.4 Hours of Operation: The contractor is responsible for conducting business, between the hours of 0800 to 1700hrs Monday through Friday except Federal holidays or when the Government facility is closed due to local or national emergencies. For other than firm fixed price contracts, the contractor will not be reimbursed when the government facility is closed for the above reasons. The contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the contractor shall keep in mind that the stability and continuity of the workforce are essential.

1.6.4.1 These operating hours and days may vary based on the requirements of the agency. Contractor personnel work schedules may be “flexed” to meet the training needs of the Cyber School for weekend and extended duty periods during regular training and exercises, while still adhering to the standard five-day workweek. Overtime will not be authorized.

1.6.5 Place of Performance: The work to be performed under this contract will be performed at various locations to include the US Army Cyber School located on Fort Eisenhower, Georgia 30905. Contractors may be required to travel to participate in conferences and briefings in support of the Cyber School’s efforts to inform people about cyber career opportunities, benefits and generate leads for recruiters to funnel soldiers into the Cyber Corps.

Contractors are authorized to work from an Alternate duty/remote location during emergency situations within the Fort Eisenhower area of operations with the approval of the Contracting Officer Representative and Contracting Officer. Contractor shall continue to meet tasks, deliverables, and current level of support in accordance with the contract. Government reserves the right to approve, disapprove, or cancel contract personnel working from an alternate duty/remote location. Working from a remote location will be at no additional expense to the government.

The Government does not authorize the use of off-site rates to accomplish alternate duty/remote location work and will not be responsible for any associated costs. Personal or company issued equipment may not be used to access the government network infrastructure unless pre-approved; examples include using VPN or a corporate network.

However, inability to access the government network infrastructure using authorized devices does not necessarily prohibit the contractor from performing off-site, whenever the work could be performed without such access.

1.6.6 Type of Contract: The Government will award a firm fixed price contract.

1.7 Security Requirements : All contractor employees performing on this contract must be U.S. citizens. At Contract start date, all contractor employees shall have a final Secret Security Clearance. All contract employees shall maintain the required security clearance throughout the life of the contract. Failure, inability, or delay in obtaining the appropriate clearance shall not relieve the contractor from performance under the terms of this contract. Additionally, all contract personnel are required to in-process the Cyber Center of Excellence (CCoE) G2 Security Office within 10 days of start of contract and out-process within the last 10 days of leaving the contract.

The security requirements are in accordance with the attached DD254.

1.7.1 The contractor is responsible for acquiring the required security clearances. The contractor shall ensure that all assigned personnel understand applicable security policies and directives found in DOD 5220.22-M, National Industry Security Program Operating Manual (NISPOM); DODM 5200.01 (Vol 4), DOD Information Security Program – Controlled Unclassified Information; AR 380-5, Information Security Program, and all other applicable policies and regulations.

1.7.2 The contractor shall provide a Visitor Access Request (VAR) via the Defense information System for Security (DISS) Web Application to the Cyber Center of Excellence (W6ZRAA5) for all contractors on contract to verify need to know. All contractors shall be added to the VAR prior to their start date and be removed on their working day on the contract. The format for the VAR shall be as follows:

a. Visit Details

i. Visit Name: Prime contract number (without dashes)

ii. Start date: Start date of contract

iii. End Date: Last day of contracts current option year

iv. Access Level: Secret

v. Reason: Other

vi. Visit Notes: Full Contract number (W91249XXXXXXX | XXXXXXXXXXXXX)

b. Point of Contract Information

i. First Name: COR First Name

ii. Last Name: COR Last Name

iii. Phone Number: COR Phone Number

iv. Email: COR Email

1.7.3 The Facility Security Officer shall provide a Contract access roster to the COR and G2 (usarmy.gordon.cyber-coe.list.g2@army.mil) at award and with monthly reports due by the last working day of each month to include:

a. Contract Number (Prime and Sub)

b. Name

c. Clearance and clearance dates.

d. Anticipates issues (start dates/departure dates, etc.).

e. Proposed resolutions to identified issues.

1.7.4 Network Access: The contractor to include subcontractors, requiring access to information systems to fulfill their duties must possess the required favorable security investigation. The IASO/IANO from the activity that the contractor employee is assigned to, will submit an electronic DD 2875 (System Authorization Access Request, SAAR), to the Cyber COE G2 for verification that the contractor employee meets the requirements of AR 25-2 for accessing the Fort Gordon network (Ref AR 25-2). This process will be completed for all contractors identified by mailto:usarmy.gordon.cyber-coe.list.g2@army.mil mailto:usarmy.gordon.cyber-coe.list.g2@army.mil Campbell, Shawn M CIV USARMY TRADOC (USA) This sounds like the Government is directing contracting personnel. That belongs solely to the contractor and not the Government.

Mckenzie, Shabazz S CIV USARMY CYBER SCHL (USA) This was verbiage that the MICC wanted in all contract due to COVID the COR to require Non-Classified Internet Protocol (IP) Router Network (NIPRNet) and/or Secret Internet Protocol (IP) Router Network (SIPRNet) accounts. The contractor will also complete and submit their Cyber Awareness training along with the SAAR network access. Contractors not listed on a valid VAR will not their DD 2875 processed until the VAR requirement is met.

1.7.5 Handling/Access to Classified Information: The contractor shall comply with FAR 52.204-2, Security Requirements. This involves access to information classified "Confidential," "Secret," and requires contractors to comply with (1) the Security Agreement (DD Form 441), including the National Industrial Security Program Operating Manual (DoD 5220.22-M), and (2) any revisions to DoD 5220.22-M. Any adverse action preventing a contractor from retaining access to classified material must be brought to the attention of the COR, Cyber Center of Excellence G2, and contractor Facility Security Officer (FSO) immediately.

1.7.6 Courier Card: Five (5) personnel must obtain and maintain courier orders to transport classified information/equipment (i.e documents, computers, hard drives, computer power and connectivity accessories, storage devices, etc.) within the immediate Fort Eisenhower area to include supported offsite events. Contractor personnel must register for and complete training, pass required exam(s) and provide a copy of the completed courier card training certificate to the COR within fourteen (14) business days of performance start date. COR will submit Courier Card Justification/Request and courier card training certificate to G2 via email. Contractor is required to set up an appointment with G2 for courier card issue within two (2) business days of COR Courier Card Justification/Request submission to G2. Courier card renewal is required annually and are set to expire at the end of the current base/option year. Contractors are responsible for always maintaining current (non-expired) Secret courier cards. A copy of the Secret courier orders will be provided to the COR.

1.7.7 The contractor shall ensure that classified data is controlled, protected, and safeguarded in accordance with AR 380-5 and current Army and DOD policy. Classified information shall be accessed and stored in government spaces only. The contractor shall agree that any data furnished by the government to the contractor shall be used only for performance under this PWS, and all copies of such data shall be returned to the government upon completion of this effort.

1.7.8 Lock Combinations: The Contractor shall establish and implement methods of ensuring that all lock/cipher lock combinations are not revealed to unauthorized persons. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s Quality Control Plan.

1.7.9 Phyical Security: The contractor shall be responsible for safeguarding all government equipment, information, and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured. In some cases, as determined by the contracting officer’s representative (COR), contractors shall be required to sign for government provided equipment.

1.7.10 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons.

1.7.11 NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the Contracting Officer.

1.7.12 In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the Contracting Officer, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

Campbell, Shawn M CIV USARMY TRADOC (USA) They are only required to have a secret clearance, how will they be able to be involved with Top Secret?

Mckenzie, Shabazz S CIV USARMY CYBER SCHL (USA) Standard Verbiage

Campbell, Shawn M CIV USARMY TRADOC (USA) Change to Fort Eisenhower changed

1.7.13 The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas or personnel authorized entrance by the Contracting Officer

1.7.14 Installation Access: All contractor employees, including subcontractors, shall comply with applicable installation and facility access security policies and procedures at all work and TDY locations. All contractors and subcontractors will be issued a Common Access Card (CAC) or an Installation Pass issued through the Automated Installation entry (AIE) Security System to access the installation. The Fort Gordon military installation is a limited access post. Unscheduled gate closures by the military police may occur at any time. In accordance with Army Regulation 525-13, paragraph 5-19, all prospective contractors will undergo a verification process by the installation Provost Marshal Office, Director of Emergency Services to determine the trustworthiness and suitability prior to being granted access to federal property. This will be accomplished using the National Crime Information Center (NCIC) Interstate Identification Index (III). This is the minimum baseline background check for entrance onto Army Installations for non-CAC holders to include entrance of visitors (Ref AR 190-13, paragraph 8-2). All personnel entering or exiting the installation may experience a delay due to vehicle inspections, registration checks, verification of seat belt use, etc. All vehicles and personnel are subject to search and seizure. The search and seizure provisions shall apply to contractor personnel while within Fort Gordon's area of jurisdiction. Contractor personnel shall comply with all entry control requirements and security policies/procedures in effect. Security procedures may change without notice.

1.7.14.1 The contractor Facility Security Officer (FSO) will ensure there is a procedure for all contractor employees to in-process and out-process the CCoE G2 Security Office (Winship Hall, Room 207). All contractors shall turn-in their Common Access Card (CAC) to the COR on their last day of employment. Compliance with DD Form 254, Department of Defense Contract Security Classification Specification, is required.

1.8 Training Requirements:

1.8.1 Information Security Program Training: All contractor employees, including subcontractors, assigned to this contract shall complete the online Information Security Program Training located on the Army Learning Management System (ALMS) site. Log into AKO, “Self Service”, “My Training”, “ALMS”, “Go To Mandatory Training”. Training must be completed within 30 days of reporting for duty and annually thereafter. The contractor shall submit certificate of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. (Ref ALARACT 207/2013, DTG 291848Z Aug 13, Subj: Army Wide Rollout and Requirement for Standardized Computer Web-Based Security Training on the Army Learning Management System (ALMS)).

1.8.2 Anti-Terrorism (AT) Level 1 Training. All contractor employees, including subcontractors, assigned to this contract shall receive an initial Antiterrorism Level I Brief by a certified ATO Level II Officer within 30 days of reporting for duty. (Monthly briefings will be offered by the Garrison Antiterrorism Officer.) Annual refresher Antiterrorism Level 1 Training shall be completed on-line at https://jkodirect.jten.mil/Atlas2/faces/page/login/Login.seam or they may attend the monthly training offered by the Garrison ATO. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. (Ref Department of the Army, US Army Contracting Agency, SFCA-CO, 5 Sep 07, subject: Incorporation of Measures into the Contracting Process and AR 525-13, Antiterrorism). Note: Contractor personnel shall receive an AOR briefing when traveling OCONUS. Briefing must be provided by a certified ATO Level II Officer within 7 working days prior to TDY departure outside the 50 United States, its territories, and possessions. This is separate from the normal annual AT Level 1 training requirement. (Ref AR 525-13).

1.8.3 iWATCH: All contractor employees, including subcontractors, assigned to this contract shall receive a brief on the local iWATCH program (provided in conjunction with the AT Level I Training). This training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 days of reporting to duty and annual refresher training with the results reported to the COR.

https://jkodirect.jten.mil/Atlas2/faces/page/login/Login.seam

1.8.4 Operation Security (OPSEC) Training. All contractor employees, including subcontractors, assigned to this contract shall complete Level I OPSEC training within 30 days of reporting for duty and then annually thereafter.

Initial Level 1 OPSEC training will be conducted monthly by the Garrison OPSEC Officer or a Level II certified OPSEC Officer. Annual refresher OPSEC training shall be completed on-line at http://cdsetrain.dtic.mil/opsec/index.htm. The contractor shall submit certificates of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. (Ref AR 530-1, Operations Security).

1.8.5 Threat Awareness and Reporting Program (TARP) Training. All contractor employees, including subcontractors, assigned to this contract shall complete face-to-face TARP training within 30 days of reporting for duty and then annually thereafter. TARP training will be conducted monthly by the 902nd MI Group. The COR will ensure contractors are notified of available training. Completion of training shall be reported to the COR and the unit/activity security manager. (Ref AR 381-12).

1.8.6 Information Assurance (IA)/Information Technology (IT) Training. All contractor employees and associated subcontractors must complete the DoD Cyber Awareness Challenge Training (https://ia.signal.army.mil/DoDIAA) before issuance of network access and annually thereafter. Certificates of successful completion, for both initial awareness training and annual refresher training shall be provided to the COR. All contractor employees will successfully complete all required IA training as specified in AR 25-2 and as directed by the Government. All contractor employees working IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M, and AR 25-2. Contractor personnel performing IT sensitive duties are subject to investigative and assignment requirements IAW AR 25-2, AR 380-67 and affiliated regulations.

1.8.7 Controlled Unclassified Information (CUI) Training: All contractor employees, including subcontractors, assigned to this contract shall complete the online DoD Mandatory Controlled Unclassified Information (CUI) Training located on the Center of Development of Security Excellence (CDSE) Security Awareness Hub. The Security Hub can be reached at https://securityawareness.usalearning.gov/cui/index.html . Training must be completed within 30 days of reporting for duty and annually thereafter. The contractor shall submit certificate of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. (IAW DoDI 5200.48, Controlled Unclassified Information (CUI), March 6, 2020, and all related policies.)

1.8.8 Derivative Classification Training: All contractor employees, including subcontractors, assigned to this contract shall complete the online Derivative Classification Training located on the Center of Development of Security Excellence (CDSE) Security Awareness Hub. The Security Hub can be reached at https://securityawareness.usalearning.gov/cui/index.html .Training must be completed within 30 days of reporting for duty and annually thereafter. The contractor shall submit certificate of completion for each affected contractor employee and subcontractor employee to the COR and unit/activity security manager. (IAW 5200.01: DoD Information Security Program: Overview, Classification, and Declassification and all related policies.)

1.9 SIPRNET and JWICS Access: N/A

1.9.1 ID Badges: The contractor shall provide each contractor employee an identification (ID) badge on contract start date or on employment start date. The ID badge shall be made of nonmetallic material, be easily readable, and shall contain the following minimum information: Employee's Name, Contract Company Name, and Employee's Photograph. Contract employees shall display proper identification at Government workplaces at all times.

1.9.1.1 Display of ID Badges: Contractor employees shall wear the ID badge at all times when performing work under this contract to include attending government meetings and conferences. Unless otherwise specified in the contract, each contract employee shall wear the ID badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit such placement.

1.9.2 Answering Telephones: Contractor employees shall identify themselves as a contract employee when answering and making calls on government telephones.

1.9.3 Utilizing Electronic Mail: When contractor employees send email messages to government personnel while http://cdsetrain.dtic.mil/opsec/index.htm https://ia.signal.army.mil/DoDIAA https://securityawareness.usalearning.gov/cui/index.html https://securityawareness.usalearning.gov/cui/index.html performing on this contract, the contractor employee's email address shall include the company name together with the person's name (ex: John Smith, Contractor, ABC Company). When contractor employees require access to a government computer, the contractor employee shall be required to obtain a Common Access Card. To do so, the contractor employee shall request a CAC Card through the COR. NOTE: The government issued CAC is the property of the U.S. Government and shall be returned to the COR upon expiration of the contract, replacement, or termination of the contract employee (CAC card must be turned in to the COR on contractor employee's last day of employment). Unauthorized possession of the CAC can be prosecuted criminally under Section 701, Title 18, United States Code. All contractor employees shall conduct official communication using Government-owned or provided email, networks, websites, systems, and devices. The use of commercial ISP e-mail accounts or personal email accounts to conduct official communication is prohibited. Remote access / telework technology may be leveraged to ensure compliance with these requirements. Contractor employees are prohibited from using Army-assigned, Enterprise E-mail, and other official e-mail addresses for unofficial business affiliations. Personnel shall not provide official email addresses to businesses, affiliated organizations, or online retailers, unless those entities are known by personnel to be legitimately engaging in official business.

1.9.4 Eligibility Verification for Employment: E-Verify is an Internet-based system that compares information from an employee's Form I-9, Employment Eligibility Verification, to data from U.S. Department of Homeland Security and Social Security Administration records to confirm employment eligibility. The U.S. Department of Homeland Security is working to stop unauthorized employment. By using E-Verify to determine the employment eligibility of their employees, companies become part of the solution in addressing this problem. All U.S.

employers must complete and retain a Form I-9 for each individual they hire for employment in the United States.

This includes citizens and noncitizens. On the form, the employer must examine the employment eligibility and identity document(s) an employee presents to determine whether the document(s) reasonably appear to be genuine and relate to the individual and record the document information on the Form I-9. The list of acceptable documents can be found on the last page of the form. E-Verify is mandatory for employers with federal contracts or subcontracts that contain the Federal Acquisition Regulation E-Verify clause.

NOTE: The government issued CAC is the property of the U.S. Government and shall be returned to the COR upon expiration of the contract, replacement or termination of the contract employee. (CAC card must be turned in to the COR on contractor’s last day of employment.) Unauthorized possession of the CAC can be prosecuted criminally under section 701, title 18, United States Code.

1.9.5 Common Access Card (CAC): Contractor must obtain a Common Access Card (CAC) for those employees whose functions require access to systems or facilities controlled by the CAC. The Contractor Representative shall notify t h e government Trusted Agent (TA) under the TASS program for new employee CAC requirements. A company representative must provide all personnel data required to process CVS applications with the TA, including security investigation requirements. Contractor employees shall obtain CACs at a DEERS/RAPIDS terminal when the application is approved. Contractor employees shall inform the Corporate Facility Security Officer (FSO)/Security Manager of approval/denial of CAC applications, and shall return CACs to the COR. upon departure or dismissal. Contractors are responsible for implementation and follow-up. Failure, inability, or delay in obtaining CACs does not relieve the contractor from performing under the terms of the contract.

Before CAC issuance, the contractor employee requires, at a minimum, a favorably adjudicated T1 or higher investigation in accordance with Army Directive 2014-05. The contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DoD facility and access, via logon, to DoD networks on-site or remotely; (2) Remote access, via logon, to a DoD network using DoD-approved remote access procedures; or (3) Physical access to multiple DoD facilities or multiple non-DoD federally controlled facilities on behalf of the DoD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled T1 at the Office of Personnel Management.

1.10 Staffing and Personnel: The contractor is responsible for the overall management and oversight of this contract. It is the contactor’s responsibility to staff and deploy qualified contractor personnel to meet all of the PWS requirements. The Contractor shall be responsible to propose and deploy the correct labor types, mix, number, and hours required to satisfactorily and professionally meet all PWS requirements:

1.10.1 Human Factors Specialist requirements:

• At contract start date, possess a final SECRET security clearance and shall maintain the required security clearance throughout the life of the contract.

• Bachelor’s Degree from an accredited college or university majoring in Business, Economics, Marketing, Mathematics, or Statistics with a GPA of 3.0 or higher

• Must understand all aspects of human factors

• At least 3 years of market analysis experience

• At least 1 year of experience assessing talent

• Ability to analyze data and make recommendation based on trends

• Track performance against agreed upon metrics with the government.

1.10.2 The Contractor shall utilize qualified personnel to meet the requirements identified in the PWS. Contract personnel shall possess the knowledge, skills, and abilities to perform the duties listed in the PWS immediately upon hire, without additional train-up time.

1.10.3 Contractor Replacement: The contractor shall replace, within ten (10) business days, any contract personnel found to be unqualified or otherwise determined unsuitable by the government. This ten-day timeframe also includes any contract personnel who submit their resignation under the current contract.

1.10.4 Contractor Certifications: Required certifications and/or training certificates shall be presented to the COR upon hire. Certification requirements that change during the life of the contract must be approved by the COR.

Contractors will be given 60 calendar days from the start date of this contract to obtain required certificate(s) of training and certification with the exception of the clearance; only 10 business days will be allotted to rectify clearance issues. Any training provided by the Government to contractor personnel, with the exception of mandatory security training listed throughout section 1.6 of this PWS, is subject to collection of reimbursement from the contractor for the full burdened cost of training. All contract employees shall possess experience with Army-standard desktop applications and configurations (i.e., daily reporting programs). The government will exercise the right, if deemed necessary, to select an appropriate method (pretest, hands on practical exercise, etc.) to determine if the contractor is qualified/suitable to perform the requirements stated in section 1.6.4 through 5.8.

1.10.5 Government Provided Training: Contractors are required to provide employees who meet all standards necessary for contract performance. Mandatory training listed in section 1.6.7 of this PWS shall be provided by the Government to contractor personnel without tuition reimbursement costs.

1.10.6 Post Award Conference/Periodic Progress Meetings: The contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with Federal Acquisition Regulation (FAR) Subpart 42.5. The Contracting Officer (KO), Contracting Officers Representative (COR), and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings the Contracting Officer will apprise the contractor of how the government views the contractor's performance and the contractor shall apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

1.10.7 Contracting Officer’s Representative (COR): The COR will be identified by separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract;

perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, and specifications; monitor Contractor's performance and notifies both the Contracting Officer and Contractor of any deficiencies; coordinate availability of government furnished property; and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates, or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.10.8 Key Personnel: All human factors personnel performing on this contract are considered key personnel by the government. Human factors requirements are listed in paragraph 1.10.1.

1.10.9 Identification of Contractor Employees: In accordance with FAR 37.114, contractor employees shall identify themselves as a contractor at all times while on the job e.g., in the workplace when attending meetings, in email, when answering government telephones, or when making phone calls.

1.10.10 Contractor Travel: Contracted personnel will be required to travel CONUS and OCONUS during the performance of this contract to visit colleges/universities, STEM and magnet high schools, job/career fairs, and professional conferences. The contractor will be authorized travel expenses consistent with the substantive provisions of the Joint Travel Regulation (JTR) and the limitation of funds specified in this contract. All travel requires Government approval/authorization and notification to the COR.

1.11 Other Direct Costs: N/A

1.12 Data Rights: The Government has unlimited rights to all documents/material produced under this contract.

All materials supplied to the Government will be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.12.1 Privacy Act: All contract personnel assigned to this task shall have access to information that may be subject to the Privacy Act of 1974. The contractor is responsible for ensuring all assigned contract personnel are briefed on Privacy Act requirements:

• The contractor shall ensure that all assigned personnel understand applicable security policies and directives. Personnel who knowingly violate security policies or directives are subject to immediate removal from any work relating to this contract.

• Contractor personnel shall have routine and unavoidable access to proprietary information which they are required to protect. Personnel applied to the tasks in this PWS may not work on other tasks for the contractor or for any other agency without a formal written request to, and written consent granted by, the contracting officer.

1.12.2 Uses and Safeguarding of Information: Information from the secure website is considered to be proprietary in nature when the contract number and contractor identity are associated with the direct labor hours and direct labor dollars. At no time will any data be released to the public with the contractor name and contract number associated with the data.

1.12.3 Subcontract Data: The contractor shall ensure that all reportable subcontract data is reported in accordance with the PWS and to this data collection website (citing this contract/order number). At the discretion of the prime contractor, this reporting may be done directly by subcontractors to the data collection site; or by the prime contractor after consolidating and rationalizing all significant data from the subcontractors.

Reporting Flexibility: Contractors are encouraged to communicate with the Help Desk identified at the data collection website to resolve reporting difficulties. Changes to facilitate reporting may be authorized by the contracting officer or the Help Desk (under HQDA policy direction and oversight).

1.12.4 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to, or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent

Campbell, Shawn M CIV USARMY TRADOC (USA) I do not see a 1.6.8.1 please advise

Changed contracted requirements which may be affected by the OCI. The contractor shall not divulge any information accessed and obtained during the course of performing this task to other contractor staff or anyone outside the government. In addition to any organizational conflict of interest provision, contractor personnel assigned to this contract shall be required, prior to beginning work, to sign a non-disclosure statement for the government agreeing not to share any information or data with other contractor personnel not assigned to the project or, if assigned to the project, who has not signed such a non-disclosure statement. Signed non-disclosure statements shall be furnished to the COR prior to contract performance. The company shall include as part of its Request for Quote (RFQ) submission, its plan to “firewall” these contract personnel and enforce this provision (i.e., internal controls, training, etc.). Failure to adhere to these non-disclosure safeguards may result in termination of this task. Final authorship and copyright (if required) of any deliverables shall reside with the government. The contractor shall not gain any unfair advantage. The contractor shall identify any organizational conflict of interest clauses they or their subcontractors are subject to, current or within three years of federal government contract services, by providing, with their offer, a copy of the clause, a description of the contract services performed, a contract number, a governmental point of contact, and a phone number for that point of contact.

1.13 PHASE IN /PHASE OUT PERIOD: N/A

PART 2

DEFINITIONS & ACRONYMS

2. DEFINITIONS AND ACRONYMS:

2.1. DEFINITIONS:

2.1.1. CONTRACTOR. A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

2.1.2. CONTRACTING OFFICER. A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

2.1.3. CONTRACTING OFFICER'S REPRESENTATIVE (COR). An employee of the U.S. Government appointed by the contracting officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. DEFECTIVE SERVICE. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5. DELIVERABLE. Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

2.1.6. KEY PERSONNEL. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.7. PHYSICAL SECURITY. Actions that prevent the loss or damage of Government property.

2.1.8. QUALITY ASSURANCE. The government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.9. QUALITY ASSURANCE Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of contractor performance.

2.1.10. QUALITY CONTROL. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.11. SUBCONTRACTOR. One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

2.1.12. WORK DAY. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.13. WORK WEEK. Monday through Friday, unless specified otherwise.

2.2. ACRONYMS:

ACOR Alternate Contracting Officer's Representative AFARS Army Federal Acquisition Regulation Supplement AR Army Regulation ARCYBER Army Cyber CCE Contracting Center of Excellence CFR Code of Federal Regulations CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTR Contracting Officer's Technical Representative COTS Commercial-Off-the-Shelf DA Department of the Army DD Form 250 Department of Defense Form 250 (Material Inspection and Receiving Report) DD Form 254 Department of Defense Form 254 (Contract Security Classification Specification) DFARS Defense Federal Acquisition Regulation Supplement DMDC Defense Manpower Data Center DOD Department of Defense FAR Federal Acquisition Regulation JQR Job Qualification Record KO Contracting Officer OCC Office Chief of Cyber OCI Organizational Conflict of Interest OCONUS Outside the Continental United States (includes Alaska and Hawaii) ODC Other Direct Costs PIPO Phase In/Phase Out POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Program TDC Training Development Capability TE Technical Exhibit TPOC Technical Point of Contact

PART 3

GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. GOVERNMENT FURNISHED ITEMS AND SERVICES:

3.1 Government-Furnished Resources: All Government-furnished property will be provided in accordance with FAR 52.245-1, and FAR 52.245-9, and may include: office/work space, office supplies, telephone service, computer access, and storage space. Government property shall be used ONLY in performance of this contract and its deliverables. The contractor shall account for all property provided by the Government, and shall be responsible for the security and condition of said property. Serialized items shall be annotated at the time of issue, with a signature of acknowledgement by the individual contractors. All GFP is the property of the US Government and shall not be transferred to any individual, or agency, public or private without the express written approval of the Contracting Officer. In some cases as determined by the COR contractors shall be required to sign for government provided equipment.

3.2 Facilities: The Government will provide the necessary workspace for the contractor staff to provide the support outlined in the PWS to include desk space, telephones, computers, and other items necessary to maintain an office environment.

3.3 Utilities: The Government will provide electricity, water, phone service, and network services (NIPRNET, Commercial Telephone Line Access, and DSN). The Contractor shall instruct employees in utilities conservation practices. The contractor shall be responsible for operating under conditions that preclude the waste of utilities, which include turning off the water faucets or valves after using the required amount to accomplish the task.

3.4 Equipment: The Government will provide contractor personnel computer equipment, other data collection equipment/software, telephones, and monitors. The contractor shall have access to printers, copy machines, scanners and fax machines, as needed. The contractor shall be responsible for any loss or destruction of or damage to items of Government property that are removed from the installation premises by the contractor – with or without Government approval.

3.5…