Attachment 1-Draft Tropic Test Support Services Performance Work Statement.docx

EXHIBIT A PERFORMANCE WORK STATEMENT

FOR

TROPIC TEST SUPPORT SERVICES

1 January 2024

Contractor Access to COVID-19 Testing………………..6

Statement of capability

1.6.17.2 Phase-out

PART 1 GENERAL INFORMATION

1. GENERAL: This is a non-personal services contract to provide Tropic Test Support Services (TTSS) for the Tropic Regions Test Center. The Government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn, is responsible to the Government.

1.1. DESCRIPTION OF SERVICES/INTRODUCTION: The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services necessary to perform Tropic Test Support Services as defined in this Performance Work Statement (PWS) except for those items specified as Government-furnished property (GFP) and services. The Contractor shall perform to the standards in this contract.

1.2. BACKGROUND:

1.2.1. UNITED STATES ARMY YUMA PROVING GROUND (USAYPG). USAYPG is a Department of Defense (DOD) Major Range & Test Facility Base (MRTFB), a major subordinate command of the U.S. Army Test and Evaluation Command (ATEC), and a member of the Federal Laboratory Consortium. As such, USAYPG facilitates testing for the U.S. Army and other DOD customers, other U.S. Government agencies, foreign governments, private industry, and others. USAYPG is the lead test center for extreme natural environment testing in desert, cold weather, and tropical environments respectively known as the Yuma Test Center (YTC), Cold Regions Test Center (CRTC) and Tropic Regions Test Center (TRTC).

1.2.2. TESTING. Under Army Regulation 70-38, the Army recognizes four Climatic Design Types: hot, basic (includes humid tropics), cold, and severe cold. Through testing at the USAYPG, system developers benefit by having systems evaluated in all the world’s climates through a single test organization, thereby achieving an efficient and cost-effective method to deploy systems that perform in a variety of locations under extreme conditions. Testing in the natural environment often exposes performance deficiencies that artificial simulation methods fail to expose. Three test centers fall under the management of USAYPG. One conducts developmental systems testing and evaluation in a natural desert environment; the second conducts developmental systems testing and evaluation in a natural cold environment. The third uses various sites such as Hawaii, Panama, Suriname, and Honduras which are characterized by hot, humid tropical climates and swampy terrain with dense vegetation. The high humidity in the tropics makes it important to the study of the susceptibility of new materials to the effects of corrosion and to assess insect and microbiological damage. Collectively these three climate test centers evaluate systems, soldiers, and equipment all to aid in ensuring the Army’s combat capability remains viable across this spectrum of distinct challenging natural environments.

1.2.3. MISSION. As far back as World War I, the Army began testing in the Panama Canal area. In 1962, the precursor to the TRTC, the Tropic Test Center (TTC) was established in Panama. It began a long period of testing: material, personnel, and systems to aid the warfighters in the jungles of Vietnam. 1977 the Carter-Torrijos Treaty established the transfer of the Canal and all US bases by December 31, 1999. As a result, YPG requested the Army Research Office (ARO) to conduct a broad review to identify ideal locations for tropical testing. To arrive at the ideal tropic test center, ARO’s panel comprised of scientists developed a decision tree of three prongs: 1. Climatologic (precipitation, temperature, and humidity), 2. Physical (elevation, slope, and local relief) and 3. Biologic (closed forest canopy, secondary forest, density, and thickness per hectare). The scientific panel concluded that staying in Panama provided the best option given all other possibilities because both the temperature and the humidity continuously remains in the optimal range that far exceeds that of other tropical sites. Presently, continuing the long legacy of the TTC the TRTC’s primary mission is to plan and conduct tropic environmental testing on a wide variety of military electronic systems, materials, human performance, weapons, and equipment of all conceivable types, sizes, configurations and uses. The unique combination of tropic microclimates available at test sites means the individual needs of each customer are flexibly met. Programs are conducted at locations appropriate for each test (see paragraph 1.6.5); where conditions are realistic and test requirements are met. Recognized as a premier Army asset, TRTC’s capabilities continue to expand, thereby increasing the need for permanent on-site personnel to support the testing created by those capabilities. The functional areas for which contract support is required are defined in Part 5.

1.2.4 AMC-LEVEL PROTEST PROGRAM: Prior to submitting an agency protest, it is preferable that you first attempt to resolve your concerns with the responsible contracting officer. However, you may also file a protest to the Headquarters (HQ), Army Materiel Command (AMC). The HQ AMC-Level Protest Program is intended to encourage interested parties to seek resolution of their concerns within AMC as an Alternative Dispute Resolution forum, rather than filing a protest with the Government Accountability Office (GAO) or another external forum. Contract award or performance is suspended during the protest to the same extent, and within the same time periods, as if filed at the GAO. The AMC protest decision goal is to resolve protests within 45 calendar days from filing. To be timely, protests must be filed within the periods specified in FAR 33.103. If you want to file a protest under the HQ AMC-Level Protest Program, the protest must request resolution under that program and be sent to the address below. Headquarters U.S. Army Materiel Command Office of Command Counsel-Deputy Command Counsel 4400 Martin Road Rm: A6SE040.001 Redstone Arsenal, AL 35898-5000 Fax: (256) 450- 8840 or email usarmy.redstone.usamc.mbx.protests@mail.mil The AMC-Level Protest procedures are found at: https://www.amc.army.mil/Connect/Legal-Resources/. If internet access is not available, contact the contracting officer or HQ, AMC to obtain the HQ AMC-Level Protest Procedures.

1.3. OBJECTIVES: The Contractor shall perform test engineering and technical analysis services, special studies, and other technical tasks in the appropriate environment/climate (see para. 1.6.5). The services to be performed include the design, planning, coordination, execution, and reporting of assigned test programs. These activities include supporting scientific, engineering, and other technical support activities related to the Research, Development, Test & Evaluation (RDT&E) of materiel systems over a wide range of engineering disciplines.

1.4. SCOPE: The Contractor shall provide non-personal services for the primary mission of the TRTC which is to plan and conduct tropic environmental testing on a wide variety of military electronic systems, materials, weapons, and equipment of all conceivable types, sizes, configurations and uses. The unique combination of tropic microclimates available at test sites means the individual needs of each customer shall be flexibly met and programs are conducted at locations appropriate for each test where conditions are realistic and test requirements are met.

1.5. PERIOD OF PERFORMANCE: The period of performance shall be for one base year consisting of a 90 day phase-in period and 9 months of full performance, and (4) four 12-month option years.

1.6. GENERAL INFORMATION:

1.6.1. QUALITY CONTROL. The Contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control program must be adequate to ensure the Government receives the contracted services meeting or exceeding the stated minimum performance requirements.

1.6.1.1. Quality Control Plan. The Contractor shall provide a Quality Control Plan to the Contracting Officer 30 calendar days after contract award date. After acceptance of the quality control plan the Contractor shall obtain the Contracting Officer’s acceptance in writing for any proposed change to the QC system prior to implementation. The Contractor must submit changes to the plan to the Contracting Officer not later than 10 workdays prior to the effective date of the change and shall not implement any change without the Contracting Officer’s written approval. As a minimum, the plan will be reviewed annually with updates submitted earlier as necessary. The plan shall:

· Be structured to assure independence from any other parts of the Contractor’s organization.

· Have direct accountability to the Contractor’s top management.

· Be a comprehensive program to plan and deliver quality services.

· Cover all services described within the contract, prioritize services, and concentrate on the most important services.

· Describe a method of identifying deficiencies and address processes for corrective action.

· Establish an inspection system covering all services.

· Require documentation of all control inspections and corrective actions.

· Verify key-process integrity via random quality assurance audit.

· Describe methods of direct and indirect communications.

1.6.1.2. Specifics. The Contractor’s Quality Control plan shall detail the Contractor’s program and the procedures by which it will ensure that employees’ work products meet the accuracy and timeliness requirements of the test customers (provided on a test-by-test basis), the Test Reporting and Test Incident Report System (ATEC Regulation 73-1, System Test and Evaluation Policy; ATEC Pamphlet 73-1, Volume I - System Test and Evaluation Procedures and Volume II - Developing, Classifying, and Reporting Test and Evaluation Documents); and the DOD Test and Evaluation Management Guide. The plan shall define how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable quality level(s). Government surveillance of Contractor performance is not limited to the Performance Objectives as outlined in this PWS and identified in the Performance Requirements Summary (PRS) (Technical Exhibit B) The Government reserves the right to conduct compliance surveillance of any contractual requirement of this PWS. Government surveillance of Contractor performance is not limited to the QASP, or the performance objectives as outlined in the PRS. The Government will perform inspections and tests in a manner that will not unduly delay the work. If any of the services performed do not conform to contract requirements, the Government may require the Contractor to perform the services again in conformity with contract requirements, at no additional cost to the Government. When the defects in services cannot be corrected by re- performance, the Government may: (1) Require the Contractor to take necessary action to ensure that future performance conforms to contract requirements; and (2) Reduce the cost payable under the contract to reflect the reduced value of the services performed. If the Contractor fails to promptly perform the services again or take the action necessary to ensure future performance in conformity with contract requirements, the Government may: (1) By contract or otherwise, perform the services and reduce the cost payable by an amount that is equitable under the circumstances; or (2) Terminate the contract for default. "Services", as used in this clause, includes services performed, workmanship, and material furnished or used in performing services.

1.6.2. QUALITY ASSURANCE. The Government will evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is a government only document primarily focused on what the Government must do to assure that the Contractor has performed in accordance with (IAW) the requirements of the contract. The PRS in this PWS defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.3. MEDICAL SUPPORT SERVICE PLAN. The Contractor shall provide a Medical Support Service plan 30 calendar days after phase-in is completed. Within 90 days of award the Contractor’s employees shall be trained to provide CPR and first aid to both Government and Contractor personnel in cases of emergencies at test sites or meeting locations. At least one first responder-type shall be a member of each test team sent to remote field sites (see paragraph 1.6.7.6.4, Safety Training) (See paragraph

1.6.23.4 DBA Insurance Instructions).

1.6.3.1. First Aid. The Contractor shall provide First Aid when deemed necessary or the situation presents itself. First aid is the provision of initial care for an illness, injury or accident. It is usually performed by a non-expert person to a sick or injured casualty until definitive medical treatment can be accessed. It generally consists of a series of simple and in some cases, potentially life-saving techniques that an individual can be trained to perform with minimal equipment.

1.6.3.2. Emergency Medical Services. The Contractor shall provide limited emergency medical services at test sites, which consist of a minimum of one contractor employee trained in CPR and first aid, a first aid bag/kit and emergency evacuation to a suitable medical facility via the most expeditious means available. The Contractor shall ensure that communication equipment or devices (e.g., satellite communication devices) are operational and available at all times to personnel conducting test operations in remote areas to support medical evacuation.

1.6.3.3. Reporting. Contractor employees shall immediately notify their supervisor of any accident requiring emergency medical treatment. The Contractor shall notify the Contracting Officer and COR within 30 minutes of discovery of the accident (see paragraph 5.2.8.3).

1.6.3.4. Contractor Personnel. Medical treatment and services for Contractor personnel, emergency or otherwise, is solely the responsibility of the Contractor.

1.6.3.5. Contractor Access to COVID-19 Testing. The contractor shall provide its employees and its subcontractors the authority to access COVID-19 testing at a designated test site to include a Military Treatment Facility (MTF). Only those contract employees or subcontractors who have been identified for testing shall be allowed to test. Such official notification shall solely be made by YTC's TEDT-YPY-G-CA through the Contracting Officer's Representative (COR) and copied to the Contracting Officer. Actual access to COVID-19 testing at a designated test site will ultimately be determined by the site personnel based on a variety of factors to include supplies and capacity. The COVID-19 testing will be at no charge to the contractor, its employees or subcontractors.

1.6.4. RECOGNIZED HOLIDAYS. Contractor employees will receive paid holidays in accordance with (IAW) Panamanian Labor Law (or local labor law as relevant) as a primary reference and with U.S. Labor Law as secondary. No US holidays are observed. Work shall not be required on the following Panamanian holidays unless specifically required by a technical requirement:

January 1 – New Year’s Day January 9 – Martyr’s Day Tuesday Before Ash Wednesday – Carnival Tuesday Friday of Holy Week – Holy Friday (Death of Christ) May 1 – Labor Day November 3 – Separation Day November 5 – Colon Day November 10 – The Uprising in the Villa de Los Santos November 28 – Independence Day December 8 – Mother’s Day December 25 – Christmas

1.6.4.1. Hours. The Contractor shall perform the services required under this contract between the hours of 0600 and 1630 Monday through Thursday and adhere to host-nation laws as close as possible. During field testing, regardless of the location, duty hours will be adjusted as required to meet test schedules and/or optimum environmental conditions for testing. Specific work hours are based on test mission requirements and will be published in the weekly and daily test schedules, and/or as directed by the Contracting Officer.

1.6.4.2. Overtime. Historically, overtime requirements have been heavy during peak field testing periods (four to six months during a period of one year) with the normal workweek being six 10-hour days, totaling 60 hours in one week, i.e. 40 regular hours and 20 overtime hours. During contract performance, overtime requirements shall be identified in test plans and shall be approved in advance by the Contracting Officer. Any change to the approved overtime shall be submitted to the Contracting Officer and the COR immediately upon identification. No overtime shall be performed without the express, prior written approval of the Contracting Officer. Failure to obtain prior approval may result in the denial of the contractor’s request for payment for those overtime hours. The contractor shall maintain copies of all approved overtime requests in the file to substantiate reimbursement.

1.6.5. PLACE OF PERFORMANCE. The Contractor shall establish an office within the Republic of Panama, properly staffed to function as a central hub for testing operations and facility management. A second “satellite” office shall be established in Suriname. TRTC’s OCONUS test sites are not serviced by nor receive support from a local US Embassy, garrison, or military installation, all services must be borne by the contractor on a continual basis. Additional government technical support not provided by the contractor due to the nature of a particular test will be sourced through Yuma Test Center. The contractor is to maintain a local permanent working cadre capable of supporting the functional areas described. The Contractor will work through the respective US Embassy MILGROUP to obtain access to ranges and sites, where applicable, to include the coordination of the shipment of all items to be tested. Preponderance of work will be performed in Panama and Suriname with potential for testing and travel to other locations to include Continental U.S., Honduras, Philippines, Chile, Australia, and Hawaii. The laws and regulations of the Republic of Panama and other locations shall apply.

1.6.6. TYPE OF CONTRACT. Cost-Plus-Fixed-Fee (CPFF).

1.6.7. SECURITY REQUIREMENTS.

1.6.7.1. Physical Security. The Contractor shall be responsible for safeguarding all Government equipment, information and property provided for Contractor use. At the close of each work period all facilities, equipment, and materials shall be secured.

1.6.7.1.1. Physical Security Plan. The Contractor shall develop and implement a Physical Security Plan IAW guidance contained in AR 190-13, The Army Physical Security Program; AR 190-51, Security of Unclassified Army Property (Sensitive and Nonsensitive); AR 25-2, Information Assurance; and DOD 5100.76, Physical Security of Sensitive Conventional Arms, Ammunition, and Explosives (AA&E). The plan shall include all government furnished property (GFP) provided for the performance of the contract and describe how the Contractor will prevent unauthorized access, vandalism, pilferage, larceny, and arson. The Government will not be responsible in any way for damage to Contractor supplies, materials, equipment, and property or to Contractor personnel personal belongings that are damaged or destroyed by fire, theft, vandalism, accidental means, or natural disaster.

1.6.7.1.1.1. Submission. The Contractor shall submit the Physical Security Plan concept to the Contracting Officer at the post-award conference and the Physical Security Plan NLT 30 calendar days after the award date. In coordination with the USAYPG Security and Property Administration offices, the Contracting Officer will review the plan for approval within 30 calendar days after submission. The Contracting Officer will provide comments and recommendations of the Physical Security Plan and any subsequent changes.

1.6.7.1.1.2. Changes. The Contractor shall submit changes to the Physical Security Plan to the Contracting Officer NLT 10 calendar days prior to the effective date of the change. The contractor shall not implement any changes without prior written approval of the Contracting Officer.

1.6.7.1.2. Key Control.

1.6.7.1.2.1. Keys. The Contractor shall be responsible for the control and accountability of all keys that allow access to or use of Government facilities, equipment, data, or documents. Keys shall not be used by unauthorized personnel or duplicated except as authorized by the Contracting Officer or COR. Procedures for safeguarding keys shall be included in the Physical Security Plan (see paragraph 1.6.7.1.1).

1.6.7.1.2.2. Loss or Duplication. The Contractor shall report any occurrence of misplaced or lost keys to the Contracting Officer and COR within two working hours after discovery of occurrence and submit a written report to the Contracting Officer by close of business the next day. The written report shall provide complete details relating to the misplaced, or lost key(s). The contactor shall not duplicate Government keys without the written approval of either the Contracting Officer or the COR.

1.6.7.1.2.3. Replacement. In the event a key is duplicated, misplaced, or lost, all keys for that system will be replaced by the Contractor. The Contractor shall bear the cost for replacement of locks or re-keying required as a result of keys being duplicated, misplaced, or lost by Contractor personnel.

1.6.7.1.3. Lock Combinations. The Contractor shall establish procedures ensuring lock combinations are securely maintained and follow Key Control reporting procedures. The Contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations. These procedures shall be included in the Contractor’s Quality Control Plan.

1.6.7.1.4. Common Access Card. Common Access Card. U.S. Contractor employees (i.e. Program manager, Deputy program manager) who may require access onto Yuma Proving Ground or other US facilities to attend meetings, planning sessions, briefings, etc., and/or may need computer access through the YPG network shall comply with the requirements to obtain and maintain a Common Access Card (CAC). All U.S. Contractor employees who may need computer access will be required to obtain a CAC through the Trusted Associates Sponsorship System to have access to the LAN. All Contractor employees requiring a CAC must have at least a National Agency Check with Inquiries (NACI) investigation (DoD Manual 1000.13 Volume 1(b).

Industrial/company background investigations are unacceptable to receive a CAC or to have access to the LAN. This only applies to US personnel under this contract. Host nation test personnel are not required to obtain a CAC card.

1.6.7.1.5. Range Passes. Permanent contractor personnel in a Temporary Duty (TDY) status must obtain a range pass to get access to a US Army Yuma Test Center (USAYTC) range. Contractor employees shall apply for a temporary pass; non-U.S. citizens must be escorted at all times by an authorized YPG employee with a permanent pass. The Contractor shall coordinate obtaining range passes with the COR. Contractor employees with issued passes shall not permit others to use their passes, nor shall the range passes be used for personal identification outside of USAYPG. Anyone allowing this may be subject to disciplinary action. The Contractor shall be held accountable for all passes issued to contractor personnel, representatives ,and subcontractors. The Contractor is responsible to inventory passes and maintain a record for inspection purposes. If a range pass is lost, a report shall be filed immediately with the COR. All passes shall be returned to the Visitor Control Center at the completion of the contract, when employees are terminated, or upon date of expiration on the pass.

1.6.7.1.6. Departing Employees. The Contractor shall ensure all employees return security photographic identification cards, permits, CAC (if provided), Government drivers licenses/permits, GFP, keys, photo passes, range passes, sensor access (slide) cards, and any other Government item, identification, or document when the employee no longer perform work under this contract. The return of these items will be completed no later than 24 hours of their departure. The CACs shall be returned to the COR upon completion or termination of employee’s last workday and the COR shall revoke the CAC no later than close of business on the last workday. The Contractor shall provide an email notification to the COR on the date employee departs that all documents have been returned.

1.6.7.1.7. Search and Seizure. Contractor personnel, representatives, or subcontractors entering U.S. military installations shall abide by all security regulations and may be subject to security checks. All property may be subject to search and seizure while on any U.S. military installation.

1.6.7.1.8. Contractor Personnel Conduct. The Contracting Officer may require the removal of any Contractor employee for the reasons of (a) misconduct, (b) security violations, or (c) being under the influence of incapacitating agents (such as alcohol, prescription medication, or illegal drugs).

1.6.7.2. Operations Security (OPSEC).

1.6.7.2.1. OPSEC Plan. The contractor shall follow the most current USAYPG OPSEC Plan as well as annexes and updates; the contractor is not required to develop their own OPSEC Plan. The Contractor shall be provided the USAYPG OPSEC Plan within 30 days of contract award. The Contractor should be able to answer the following questions after a review of the USAYPG OPSEC Plan.

· What is USAYPG’s critical information?

· What critical information am I personally responsible for protecting?

· How is the threat trying to acquire my critical information?

· What steps are we taking to protect our critical information?

· Who is my USAYPG OPSEC Officer (in order to report an OPSEC concern, compromise, or ask an OPSEC question)?

Additionally, the following are specific OPSEC measures that the contractor shall follow to the greatest extent possible without sacrificing effectiveness or efficiency:

· Avoid repetitive or stereotyped tactics and procedures for executing operations or activities in terms of time, place, and event sequencing at test sites.

· Dispose of all Army products as if it is classified trash.

· Follow all applicable guidelines for Controlled Unclassified Information.

· Avoid bulletin board plan of the day or planning schedule notices that reveal when events will occur at test sites.

1.6.7.2.2. OPSEC Training. Per AR 530-1, Operations Security, new contractor and subcontractor personnel shall complete OPSEC Level I training within 30 calendar days after contract award date. Newly hired Contractor employees must complete Level 1 OPSEC training within 30 calendar days of reporting for duty. All Contractor employees must complete OPSEC awareness training annually thereafter.

1.6.7.2.3. Protection of Information. The Contractor shall comply with ATEC Regulation 73-1, System Test and Evaluation Policy.

1.6.7.2.4. Handling or Access to Classified Information. The Contractor is not required to handle and/or access classified information. However, any Controlled Unclassified Information (CUI) and/or “Controlled Unclassified Information” (CUI) information should be handled by US Citizens and not releasable to foreign nationals unless specified on the document.

1.6.7.2.5. Disclosure of Information. Contract performance may require the Contractor to access data and information proprietary to a Government agency, another Government Contractor, or of such a nature that its dissemination or use other than as specified by this Performance Work Statement (PWS), would be adverse to the interests of the Government or others. Neither the Contractor, nor Contractor personnel, shall divulge nor release data, information, photos, or other data relating to all taskings under this contract to include commercial or private industry customers identities, plans, products, or product performance IAW the Trade Secret Act developed or obtained during contract performance, except to authorized Government personnel, or upon written approval of the KO. Disclosure without authorization may subject the Contractor, Contractor’s employees, or subcontractors to criminal liability under Title 18 U.S.C. § 793-794,798, and 1905. The Contractor shall not use, disclose, or reproduce such data, which bears a restrictive legend, except as authorized. The Contractor shall direct to the Contracting Officer all inquiries, comments, or complaints arising from matters observed, experienced, or learned as a result of, or in connection with the performance of the contract, for which the resolution may require the dissemination of official information. Freedom of Information Act (FOIA) request inquiries received by the Contractor shall be directed to the Contracting Officer for evaluation under the current FOIA. The Government retains the authority to release or deny access to the information. The Contractor shall be responsible for search and submission of records under their control upon the Government’s request.

1.6.7.2.6. Controlled Unclassified Information. Neither the Contractor nor the Contractor’s employees and subcontractors shall disclose or cause to be disseminated any information that is considered Controlled Unclassified Information (CUI). CUI information shall be safeguarded IAW AR 25-55; automated systems CUI information shall be safeguarded IAW specific guidance provided by the USAYPG Security Officer.

1.6.7.2.6.1. General. The CUI marking is assigned to information at the time of its creation in a DOD User Agency. It is not authorized as a substitute for a security classification marking but is used on official government information that may be withheld from the public under exemptions 2 through 9 of the Freedom of Information Act.

1.6.7.2.6.1.1. Other Non-Security Markings: "Sensitive but Unclassified” are used by non-DOD User Agencies for the same type of information and should be safeguarded and handled IAW instruction received from such agencies. Use of the above markings does not mean that the information cannot be released to the public under FOIA; only that the Government must review the information prior to its release to determine whether a significant and legitimate government purpose is served by withholding the information or portions thereof.

1.6.7.2.6.2 Markings. An unclassified document containing CUI information will be marked "Controlled Unclassified Information" at the bottom of the front cover (if any), on the first page, on each page containing CUI information, on the back page, and on the outside of the back cover (if any).

1.6.7.2.6.2.1 Any CUI information released to a contractor by a DOD User Agency is required to be marked with the following statement prior to transfer, "This document contains information EXEMPT FROM MANDATORY DISCLOSURE UNDER THE FOIA. Exemptions apply."

1.6.7.2.6.2.2 Removal of the CUI marking can only be accomplished by the originator or other competent authority. When the CUI status is terminated, all known holders will be notified to the extent practical.

1.6.7.2.6.3 Dissemination. Contractors may disseminate CUI information to their employees and subcontractors who have a need for the information. Contractors must ensure employees and subcontractors are aware of the special handling instructions detailed below.

1.6.7.2.6.4 Storage. During working hours, CUI information shall be placed in an out-of-sight location if the work area is accessible to persons who do not have a need for the information. During nonworking hours, the information shall be stored to preclude unauthorized access. Filing such material with other unclassified records in unlocked files or desks is adequate when internal building security is provided during nonworking hours. When such internal security control is not exercised, locked buildings or rooms will provide adequate after-hours protection or the material can be stored in locked receptacles such as file cabinets, desks, or bookcases.

1.6.7.2.6.5 Transmission. CUI information may be sent via first-class mail or parcel post. Bulky shipments may be sent by fourth-class mail. DOD components, officials of DOD components, and authorized DOD contractors, consultants, and grantees send CUI information to each other to conduct official DOD business. Tell recipients the status of such information and send the material in a way that prevents unauthorized public disclosure. Make sure documents that transmit CUI material call attention to any CUI attachments. Normally, you may send CUI records over facsimile equipment. To prevent unauthorized disclosure, consider attaching special cover sheets, the location of sending and receiving machines, and whether authorized personnel are around to receive CUI information. CUI information may be passed to officials in other departments and agencies of the executive and judicial branches to fulfill a government function. Mark the records "Controlled Unclassified Information" and tell the recipient the information is exempt from public disclosure under the FOIA and requires special handling.

1.6.7.2.6.6 Disposition. When no longer needed, CUI information must be shredded using a National Security Agency-approved shredder.

1.6.7.2.6.7 Unauthorized Disclosure. Unauthorized disclosure of CUI information does not constitute a security violation, but the releasing agency should be informed of any unauthorized disclosure. The unauthorized disclosure of CUI information protected by the Privacy Act may result in criminal sanctions and disciplinary action may be taken against those responsible.

1.6.7.3 Information Security

1.6.7.3.1. Release of Proprietary Information. The Contractor shall follow all security guides, checklists, and other guidance on protection of test items and information. Information on test item performance, shall be considered proprietary in nature and will only be released through the Government Technical point of contact (POC) or only after receiving written approval from the Government Technical POC for each release action.

1.6.7.3.1.1 Contract performance may require the Contractor and subcontractor to access data and information proprietary to a Government agency, another Government Contractor, or of such a nature that its dissemination or use other than as specified by this Performance Work Statement (PWS), or applicable Task Order, would be adverse to the interests of the Government or others. Neither the Contractor, nor Contractor personnel, shall divulge nor release data or information developed or obtained during contract performance, except to authorize Government personnel, or upon written approval of the KO. The Contractor shall not use, disclose, or reproduce such data, which bears a restrictive legend, except as authorized.

1.6.7.3.2. Sensitive. Personnel under this contract will not be accessing the USAYPG or DoD network and shall not require investigations per AR 25-2 and/or AR 380-67, Personnel Security Program.

1.6.7.3.3. Physical Security Inspections. The Contractor shall be subject to announced and unannounced security inspections by pertinent U.S. Government security personnel. Inspection reports shall be provided to the Contractor through the COR.

1.6.7.4. Information System/Information Assurance (IA) Requirements. Contractor personnel are not required to meet Information Systems/Information Assurance (IA) requirements. Foreign national and host nation personnel shall not access USAYPG or DOD networks.

1.6.7.4.1. Accreditation. Currently, computer systems have no requirement to connect to the USAYPG or DoD network and have no requirement for accreditation. If at a future date any of the provided GFP systems will connect to the USAYPG network, the Contractor shall submit documentation to the IA Office for all new and existing IT systems and/or equipment to be incorporated into the USAYPG accreditation.

1.6.7.4.2. Privately-Owned Computers. The use of privately-owned computers for work performed in conjunction with this contract is prohibited without prior written consent of the USAYPG Information Assurance Manager and coordination with the Contracting Officer and COR.

1.6.7.4.3. Approved Software. The Contractor shall utilize to the maximum extent possible commercial versions of current Army-approved desktop licenses and software for electronic (softcopy) submissions. All other software that the Contractor may need shall be approved in writing by the USAYPG Network Enterprise Center (NEC) in coordination with the Contracting Officer and the COR. If, at a future date, any of the provided GFP systems will connect to the USAYPG network the Contractor shall utilize current Army-approved software purchase. If other software is required on these systems connecting to the USAYPG Network the contractor shall go through the Networthiness process IAW the Army Networthiness Certification Program policy memo dated 02 April 2003; AR 25- 1, Army Information Technology; and AR 25-2, Information Assurance. The contractor will advise the Contracting Officer and COR of the status and completion of this process.

1.6.7.5. Antiterrorism and iWatch.

1.6.7.5.1. Antiterrorism. The Contractor shall comply with Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.225-7043, Antiterrorism/Force Protection for Defense Contractors Outside the US. This clause applies to both contingencies and non-contingency support. The key Antiterrorism (AT) requirement is for non-local national contractor personnel to comply with theater clearance requirements and allows the combatant commander to exercise oversight to ensure the Contractor’s compliance with combatant commander and subordinate task force commander policies and directives.

1.6.7.5.2. Antiterrorism/Force Protection. The Contractor will comply with Antiterrorism/Force Protection (AT/FP) requirements IAW Army Regulation (AR) 525- 13, Antiterrorism, the United States Southern Command (USSOUTHCOM) and USAYPG Mission AT Plans, and any approved supplemental AT/FP guidance or AT/FP plan, regulation, or supplemental guidance that supersedes the above mentioned documents. The Contractor will comply with DFARS Clause 252.225-7043, Antiterrorism/Force Protection for Defense Contractors Outside the United States and PGI 225.370, Contracts requiring performance or delivery in a foreign country.

1.6.7.5.3. Requirements. These requirements include, annual AT Level 1 training (via the ATEC Training Tracker Module), Outside Continental United States (OCONUS) Travel Briefs; preparation of Organizational Consolidated Force Protection, Security, and Evacuation Plans; and the conduct of USSOUTHCOM and USAYPG Mission Random Antiterrorism Measures (RAM) Program.

1.6.7.5.4. Access and general protection/security policy and procedures. Contractor and all associated sub-contractor employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements (FAR clause 52.204-9, Personal Identity Verification of Contractor Personnel) as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.6.7.5.5. Random Access Measures (RAM) Performance. The Contractor shall implement RAM in consideration of local terrorist capabilities as directed by the USAYPG Mission Security Office and USSOUTHCOM, including measures from higher FPCON levels. The Contractor shall perform RAM and report monthly to the COR, NLT the fifth workday of the month for the previous month. The COR will provide guidance and RAM format 30 days after contract award.

1.6.7.5.6. AT Level 1 Training. All Contractor employees, to include subcontractor employees, requiring access to Army installations, facilities, and controlled access areas shall complete AT Level 1 awareness training within 30 calendar days after contract award, and annually thereafter.

1.6.7.5.6.1. Training Certificates. The Contractor shall submit certificates of completion of training for each Contractor and subcontractor employee to the Contracting Officer/COR within five (5) working days after completion of any training. AT Level 1 awareness training is available at the following website: http://jko.jten.mil/. Personnel that are unable to access the identified website will be trained by YPG Security Personnel via phone or teleconference.

1.6.7.5.6.2. New Personnel. Newly hired personnel shall complete AT Level 1 awareness training within 30 calendar days from date of hire, and annually thereafter. Certificates for these personnel shall be submitted no later than (NLT) 5 working days after completion of training.

1.6.7.5.7. AT Awareness Training for Contractor Personnel Traveling Overseas.

U.S. based Contractor employees and associated subcontractor employees shall make available and receive Government-provided area of responsibility (AOR) specific AT awareness training as directed by AR 525-13. Specific AOR training content will be as directed by the combatant commander with the unit ATO being the local point of contact.

1.6.7.5.7.1. AT/FP Policies. The Contractor shall adhere to AT/FP policies set forth by USSOUTHCOM at test sites located in Central and South America through country clearance requests. Host nation nationals shall fulfill visa requirements to the countries that they enter to include the United States. Panamanian and Surinamese personnel shall be briefed by the Contractor’s OPSEC Coordinator with threat levels provided by Department of State agencies in the countries where tests are executed.

1.6.7.5.7.2. Office of Defense Cooperation. The Contractor shall adhere to USSOUTHCOM Office of Defense Cooperation (ODC) protocols for contract security personnel operating in the USSOUTHCOM Area of Responsibility (AOR), as identified in the Foreign Clearance Guide (https://www.fcg.pentagon.mil). Contractors traveling through the USSOUTHCOM AOR need to consult the foreign clearance guide.

Further information can be obtained at the following website: http://www.southcom.mil/Pages/Theater-Clearances.aspx. In conjunction with the appropriate DOD representative, the Contractor shall develop credentialing standards for contract security personnel operating in the USSOUTHCOM AOR and establish appropriate procedures to send and receive terrorist threat information to and from USSOUTHCOM per AR 525-13.

1.6.7.5.7.3. Oversight and Monitoring. The Contractor shall be subject to USSOUTHCOM oversight and monitoring for antiterrorism vulnerabilities. The USSOUTHCOM ODC at the U.S. Embassy will perform security assessments according to the ODC SOP.

1.6.7.5.7.4. iWATCH Training. The contractor and all associated subcontracts shall brief all employees on the local iWATCH program (training standards provided by the requiring activity ATO). This locally developed training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 working days of contract start date and within 5 working days of new employees commencing performance with the results reported to the COR NLT 30 working days after contract award.

1.6.7.5.8 Antiterrorism Catch-all Provisions. The Contractor and all associated subcontractor employees shall comply with the applicable installation, facility, and area commander installation and/or facility access and local security policies and procedures to be provided by the Contracting Officer.

1.6.7.5.8.1. Background Checks. The contractor shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services or Security Office. Contractor workforce must comply with all personal identity verification requirements as directed by DOD, HQDA and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.6.7.5.8.2. Identify Verification. The Contractor workforce must comply with all personal identity verification requirements as directed by DOD; Headquarters, Department of the Army; and/or local policy.

1.6.7.6. Safety and Environmental.

1.6.7.6.1. Safety Plan. The Contractor's employees shall observe and comply with all local policies and procedures concerning fire, safety, environmental protection, sanitation, security, and possession of firearms or other lethal or illegal weapons or substance. As part of its proposal, the Contractor shall provide their company's Safety Plan to the Government. The Contractor shall comply with all OSHA, U.S. Army, U.S.

Army Yuma Proving Ground, State, and other applicable industry safety standards. Contractor personnel shall wear safety items required by OSHA during the performance of tasks requiring protective…