Attachment 1 PWS_Electronic Fingerprinting.pdf

Enclosure 4a, PWS Page 1 of 6 Pages

2015/Version 9

PERFORMANCE WORK STATEMENT (PWS)

Award/Mod Effective Version Date Award TBD

Contract Number: (completed by the KO at time of contract or TO award) Task Order Number: (completed by the KO at time of TO award or N/A) Contractor Name (completed by the KO at time of contract or TO award) Tracking Number: (completed by the KO when complete package is received) Follow-on to Previous Contract and Task Order Number:

HC104721P0002

1. Contracting Officer’s Representative (COR).

a. Primary COR. See DITCO Additional Text G1 - Points of Contact

b. Alternate COR. See DITCO Additional Text G1 - Points of Contact

2. Contract or Task Order Title. Electronic Fingerprinting

3. Background. As a result of the current Coronavirus-19 pandemic in 2020, Defense Information Systems Agency (DISA) Headquarters, Fort Meade, MD, along with many other fingerprint providers, suspended fingerprint services due to health concerns and the inability to ensure ink pads and other fingerprinting materials were virus free. As a result of the suspension of fingerprints at most military bases, police, sheriff stations, and commercial vendors, DISA experienced significant delays in granting interim security clearance determinations as they require fingerprint results. At that time, we moved to a fingerprint contract, which provided nationwide fingerprint services to our applicants and employees in a timely manner. We continued to utilize the contract option since 2020 as many places that previously provided fingerprinting services are no longer available.

Security requirements for employment at DISA for prospective employees, military, civilian, interns and contractors are required to submit fingerprints using the Department of Defense approved Secured Web Fingerprint Transmission (SWFT) system to support their background investigation. Applicants who are geographically dispersed around the United States and its territories are either, fingerprinted manually on fingerprint cards or when available; SWFT fingerprints are completed. DISA requires fingerprint services provided under this contract to be submitted via SWFT.

4. Objectives: The objective of this contract is to acquire electronic fingerprints via DoD SWFT for DISA employees, tentative new hires, inbound military personnel, and contractors requiring public trust, both in the local Fort Meade area and throughout the United States and its territories

5. Scope. The contractor shall provide a secure web registration process to collect biographic and demographic information to the end-user applicant for information that is required for fingerprint submission to Defense Counterintelligence and Security Agency (DCSA) and shall provide DISA with invoicing for transactions submitted. The contractor shall provide end-user applicants with the ability to schedule fingerprint appointments and be fingerprinted in any of the contractor’s locations. The contractor

Page 2 of 6 Pages shall submit electronic fingerprints to DCSA, who will process the fingerprints in accordance with federal rules and regulations.

The Government may require surge support during the base or any option period, and surge modifications will be within the scope of the contract and provide increased support for the defined task areas of this SOW. Surge support over the life of the contract will not exceed 40% of the contractor’s total proposed cost/price for the base and all option periods, excluding any six-month extension of services pursuant to FAR 52.217-8.

6. Performance Requirements.

6.1 Task 1 – Electronic Fingerprinting

The Contractor shall provide live-scan electronic fingerprint submissions to DCSA by collecting electronic fingerprints in the format required to meet Secure Web Fingerprint Transmission (SWFT) and Office of Personnel Management (OPM) standards.

The Contractor shall provide scheduling access to a web-based system on a 24 hour 7 days per week, 365 days per year basis.

The Contractor shall provide a live scan fingerprinting solution that includes all certified equipment (i.e., hardware, software/firmware, facilities, personnel, services, security, support, and all other expenses) required to produce safe and secure live scan electronic fingerprinting services.

6.2 The Contractor shall support nationwide fingerprinting service within the United States and its territories. Fingerprinting services shall be conducted at existing Contractor locations for DISA applicants and government personnel and DISA assigned contracting personnel throughout the period of performance. The Contractor shall submit fingerprints using the DOD approved SWFT requirement for prospective applicants, current employees and DISA contracting personnel who are geographically dispersed around the United States and its territories. Live scan fingerprinting shall allow DCSA to receive the electronic fingerprint file in the required format to meet DOD SWFT requirements.

6.3 The contractor shall maintain a web based data system, accessible remotely by DISA personnel, to enable DISA to obtain reports containing fingerprint information; dates and types of service; subject’s name; last 4 of SSN, Date of Birth (DOB); current status of fingerprints; status date; transmission code to National Background Investigations Bureau (NBIB).

6.4 The Contractor shall submit monthly invoice statements, which include the following:

6.4.1 Unique Invoice Number

6.4.2 Invoice Date

6.4.3 Type of Service Provided

6.4.4. Name of the subject

6.4.5 Last 4 of SSN of subject

6.4.6 Date the fingerprinting was completed

6.4.7 Price of services performed

6.5 The Contractor shall invoice only for fingerprints ordered and completed, or for appointments missed or not cancelled without 24 hours notice; and shall certify that the costs in the invoice are accurate and complete.

6.6 Electronic Submissions: Electronic fingerprints are submitted to the Fingerprint Transaction System (FTS) electronically via a Federal Bureau of Investigations (FBI) approved live scan system or fingerprint card scan system that utilizes FBI and DCSA-approved software. Currently, DCSA only accepts Type-4 fingerprint images for electronic submission. Visit the Criminal Justice Information Services/FBI website to select from a complete listing of FBI-approved vendors.

Page 3 of 6 Pages

Type-4 fingerprint images consist of the following:

10 Rolled Impressions 1 Plain Left and Right Simultaneous Four Finger Impressions 1 Plain Left and Right Thumb Impression

Information regarding FBI system requirements and approved devices can be found at the FBI Certified Products List: https://www.fbibiospecs.cjis.gov/Certifications

6.7 Third Party Vendors: If your Organization will only submit the eFPs, then the “Access” section of the SWFT “Access, Registration, and Testing Procedures” is relevant to your situation, which can be found on the SWFT PSA informational website. The “Registration and Testing” sections are not applicable, as your Organization will be utilizing another Organization’s/Third Party Vendor’s fingerprint scanning system.

However, your Organization must verify that the Organization/Third Party Vendor that will generate the eFPs for you had their equipment registered and approved for production with SWFT. Obtain the Organization/Commercial and Government Entity (CAGE) Code from the Organization/Third Party Vendor, then log into the SWFT system at: https://swft.nbis.mil, and run the “Scanner Registration Status by Org/CAGE Code” report in the Reports section. You can also run the “Scanner Registration Status by Hardware Vendor and Serial Number” report if you know the manufacturer and serial number of their scanning device or devices.

6.8 Fingerprint Scanners for SWFT and WebEnroll: For SWFT, the Federal Bureau of Investigation (FBI) maintains a list of products certified as tested and compliant with the FBI’s Next Generation Identification (NGI) initiatives and Integrated Automated Fingerprint Identification System (IAFIS) Image Quality Specifications (IQS). The list of FBI certified products is available on the FBI Biometric Specifications (BioSpecs) website under Certifications: https://www.fbibiospecs.cjis.gov/Certifications.

SWFT Users may choose to acquire any certified product, depending on their actual need. For WebEnroll users, not all FBI approved scanners are supported by WebEnroll. The list of supported scanners is on the SWFT PSA informational website under the eFP Enrollment (SWFT+) section titled “Supported Device List”.

Note: All eFPs need to be a .EFT file to be uploaded to SWFT.

6.9 Security Clearance Requirement: SWFT users require a minimum of Interim Secret eligibility; and must have received certificates for PII and Cyber Security training within the previous 12 months.

6.10 Reporting: The contractor shall provide a monthly report to identify all fingerprinting actions for the month, to include: date of service; subject’s full name; price per fingerprint/live-scan; total monthly cost.

6.11 Surge: The Government may require surge support during the base and four option periods. Surge modifications will be within the scope of the contract and provide increased support for the defined task areas of this PWS. Surge support over the life of the contract will not exceed 40% of the contractor’s total proposed cost/price for the base and all option periods, excluding any six-month extension of services pursuant to FAR 52.217-8. Systems engineering and program support includes the following task areas.

6.12 The Contractor shall coordinate with the following DISA JFHQ/DODIN Security Office technical points of contact to perform this work:

Karen M. Watson Thomas W. Russell 301-225-1232 301-225-4405 Karen.m.watson10.civ@mail.mil thomas.w.russell.civ@mail.mil http://www.fbibiospecs.cjis.gov/Certifications http://www.fbibiospecs.cjis.gov/Certifications

Page 4 of 6 Pages

7. Deliverables.

PWS

Task

Deliverable Title

Format Due Date Distributio n/Copies

Frequency and Remarks

6.1 Fingerprints Approved Secured

Web Fingerprint Transmission

(SWFT)

Fingerprints must be transmitted within 24 hours of being scanned.

DCSA As needed, and up to the amount of appointments received throughout the period of performance.

6.10 Monthly

Report

Contractor format approved by Government

The contractor shall deliver a soft copy to COR monthly on the 5th of the month when required.

Deliverabl e shall be provided to the

COR

Monthly report shall identify the fingerprint actions to include:

date of service;

subject’s full name, fingerprinting location/address; price per fingerprint/live-scan.

8. Performance Standards.

Performance Standard Acceptable Quality Level (AQL) Method of Calculation Electronic Fingerprint Reports received by DISA

Target Criteria:

98% of fingerprints taken are transmitted to DCSA within 24 hours and are accepted by

DCSA

Minimally Acceptable:

100% of fingerprint reports are received by DISA

Calculation:

Fingerprint reports are extracted from the DCSA system and are verified monthly.

9. Place of Performance.

9.1 All the work shall be performed at the contractor’s facilities.

9.2 No travel is authorized for this contract.

9.3 The contractor shall have electronic fingerprint locations within 50 miles of the following DISA locations within the continental US, and Hawaii and Alaska:

- 6910 Cooper Ave, Ft Meade MD 20755

- 1400 Defense Pentagon, Washington, DC 20301

- 1 Overcash Ave, Chambersburg, PA 17201

- 3990 E Broad St, Columbus, OH 43213

- 2001 Brainard Rd, Fort Huachuca, AZ 85613

- 1942 Gaffney Street, Pearl Harbor, Hawaii 96860-4582

- 5534 Pryor Dr, Scott AFB, IL 62225

- 401 E Moore Dr, Montgomery, AL 36115

- 7981 Georgia St, Hill AFB, UT 84056

- 8705 Industrial Blvd, Tinker Air Force Base, OK 73145

Page 5 of 6 Pages

The fifty (50) mile distance is calculated as driving miles not straight-line distance. The fifty (50) mile distance is determined using a Google Maps search in which the starting point is the locations listed below and ends at the address provided by the offeror.

The contractor shall have electronic fingerprint locations within 80 miles of the following DISA locations within the continental US, and Hawaii and Alaska:

- 88 Shreveport Rd, Barksdale AFB, LA 71110

- 6162 South Willow Dr, Greenwood Village, CO 80111

- 5800B Westover Ave, Anchorage, AK 99506

- 101 Habersham Lane, Robins AFB, GA 31098

- 33 Bastogne Dr, Fort Liberty, NC 28307

- 250 Peterson Blvd, Colorado Springs, CO 80914

- 55 Grenier St, Hanscom AFB, MA 01731

- 5222 Martin Rd SW, Huntsville, AL 35898

- 6801 Roosevelt Blvd, Jacksonville, FL 32212

- 9211 Marina Bay Dr, Tampa, FL 33621

- 5450 Carlisle Pike, Mechanicsburg, PA 17050

- 50 N.E. 9th Street, Miami, FL, 33132

- 13800 Gentilly Road New Orleans, Louisiana 70129

- 101 Meyer Ave, Offutt AFB, NE 68113

- 777 Duncan Rd, Pensacola, FL 32507

- 1334 Stewart Ave, Colorado Springs, CO 80914

- 2261 Hughes Ave, Lackland AFB, Texas 78236-9816

- 4301 Goodfellow Blvd St Louis, Missouri 63120

- 116 Lake View Parkway Suffolk, Virginia 23435-2697

- 205 Perry Street Robins AFB, Georgia 31098-1607

The eighty (80) mile distance is calculated as driving miles not straight-line distance. The eighty (80) mile distance is determined using a Google Maps search in which the starting point is the locations listed below and ends at the address provided by the offeror.

10. Period of Performance.

The period of performance is one (1) 12-month base period and four (4) 12-month option periods.

11. Security Requirements.

This requirement is UNCLASSIFIED. The Contractor shall not require access to nor be required to generate classified information to perform the requirement.

RELEASE OF INFORMATION

(a) Release of information shall be in accordance with Section I, DFARS Clause 252.204-7000;

Disclosure of Information.

(b) All technical data provided to the Contractor by the Government shall be protected from public disclosure in accordance with the markings contained thereon. All other information relating to the items to be delivered or services to be performed under this contract may not be disclosed by any means without prior approval of the appropriate DISA Security. Dissemination or public disclosure includes, but is not limited to, permitting access to such information by foreign nationals or by any other person or entity; publication of technical or scientific papers; advertising; or any other proposed public release. The Contractor shall provide adequate physical protection to such information to preclude access by any person or entity not authorized such access by the

Page 6 of 6 Pages

Government.

11.2 Security Contacts. DISA Security Personnel can be contacted for Industrial or Personnel Security related issues at (301) 225-1235 or via mail at:

Defense Information Systems Agency Defense Information Systems Agency ATTN: MP61, Industrial Security ATTN: MP62, Personnel Security Command Building Command Building 6910 Cooper Ave. 6910 Cooper Ave.

Fort Meade, MD 20755-7088 Fort Meade, MD 20755-7088

12. Section 508 Accessibility Standards.

Section 508 of the Rehabilitation Act, as amended by the Workforce Investment Act of 1998 (P.L. 105-

220) requires that when Federal agencies develop, procure, maintain, or use information and communication technology (ICT), it shall be accessible to people with disabilities. Federal employees and members of the public who have disabilities must have access to, and use of, information and data that is comparable to people without disabilities.

Item that contains ICT: Electronic Fingerprints

12.1 General. Where components of ICT are hardware and transmit information or have a user interface, such components shall conform to the requirements in Chapter 4.

12.2 General Where components of ICT are software and transmit information or have a user interface, such components shall conform to E207 and the requirements in Chapter 5

Exception from 12.2 General: Software that is assistive technology and that supports the accessibility services of the platform shall not be required to conform to the requirements in Chapter 5.