Attachment 1 - PWS for Egypt COMSEC Custodian v20221129.docx

PERFORMANCE WORK STATEMENT

FOR

COMMUNICATIONS SECURITY (COMSEC) MANAGERS

Egypt

AFLCMC/HNCCPF

LOA CASE Egypt

TABLE OF CONTENTS

1.0 DESCRIPTION OF SERVICES

Introduction Support Overview of Services Functional Requirements Work Situation Duration of Task/Period of Performance Travel Requirements Operations Security (OPSEC)/Controlled Unclassified Information (CUI) Mobilization/Demobilization

2.0 SERVICES SUMMARY (SS)

3.0 GENERAL INFORMATION

Management and Administration Policy Contractor Identification Access Personnel Management and Training Contractor Quality Control

4.0 EVACUATION/DECLARATION OF EMERGENCY

Evacuations Declaration of Emergency

1.0 DESCRIPTION OF SERVICES

1.1 Introduction. Pursuant to the Letter of Offer and Acceptance (LOA, Case Egypt), between the United States Department of Defense and the Egyptian Ministry of Defense, the contractor will provide assistance and support for Communications Security (COMSEC) material and equipment. This effort is done via Foreign Military Sales (FMS) to support various secure coalition interoperability programs between the United States and the Egyptian Ministry of Defense.

1.2 Support. Provide two (2) COMSEC Managers in support of various interoperability programs between the US and the Egyptian Ministry of Defense. The COMSEC Managers will maintain COMSEC equipment (C4I systems). The COMSEC managers will be based out of Cairo, Egypt and will conduct temporary duty (TDY) throughout Egypt in support of COMSEC duties as explained in section 1.3.

1.3 Overview of Services. This contract provides COMSEC managerial support to the Egyptian Ministry of Defense through FMS case Egypt. COMSEC managerial service will be in support of DOD-provided COMSEC equipment and material released to the Egyptian Ministry of Defense in support of United States Central Command (USCENTCOM)-validated interoperability programs that interface with the US Embassy – Egypt, the National Security Agency (NSA), the Department of the Air Force Security Assistance and Cooperation Directorate (AFSAC), as well as other agencies/offices as deemed necessary. Contractor personnel shall perform central receiving, temporary storage, and transfer services for DOD-provided COMSEC equipment, COMSEC documents, keying and other COMSEC related materials from U.S. COMSEC National Distribution Authorities (i.e. NSA), or where the material/equipment will be received from) to/from the The Egyptian Ministry of Defence to the appropriate U.S. National Distribution Authorities (NDA). Contractor personnel shall report to USCENTCOM/CCJ6-OC for coordination and instructions on all issues concerning COMSEC equipment, keys/keymat, and CCJ3-CI for associated programs released to the Egyptian Ministry of Defence. Additionally, contractor personnel will coordinate any cryptographic key material and equipment issues with USCENTCOM/CCJ6-OC.

1.3.1 COMSEC Managers shall provide the following COMSEC managerial duties:

1.3.1.1 Manage the U.S./ the Egyptian Ministry of Defence FMS COMSEC account in accordance with U.S. Government (USG) policy as outlined in NAG-14C, NAG-18A and NSA CSS Policy Manual No. 3-16 - Control of Communications Security Material and Committee on National Security Systems Instruction (CNSSI) 4001 – Controlled Cryptographic Items. (Contractor should check for updates to these guidelines to ensure compliance with most recent information). Perform duties related to the receipt, custody, issue/distribution, safeguarding, accounting, and destruction of classified and non-classified USG-provided COMSEC material and equipment. Maintain and submit up-to-date records of all required accounting reports. Be thoroughly familiar with the procedures for handling COMSEC material. In fulfilling these responsibilities, the COMSEC Managers will perform the following duties:

1.3.1.1.1 Protect COMSEC material and limit access to individuals with a valid need-to-know and clearance, if applicable.

1.3.1.1.2 Keep informed of any new requirements or modifications to existing requirements to be serviced by the COMSEC account.

1.3.1.1.3 Receive, receipt for, and ensure the safeguarding and accounting of all COMSEC material issued to the COMSEC account, and when applicable, produced within the element.

1.3.1.1.4 Maintain COMSEC accounting and related records as outlined in NAG-14C, NAG-18A, and NSA CSS Policy Manual 3-16.

1.3.1.1.5 Conduct an inventory semiannually and upon appointment of new COMSEC Managers, by physically sighting all COMSEC material issued to the COMSEC account, and reconcile this inventory with the Central Office of Record as mandated in NSA CSS Policy Manual 3-16.

1.3.1.1.6 Perform routine destruction of COMSEC material when required, or effect other disposition of material as directed by the COR or Controlling Authority. The COMSEC Managers shall establish Emergency & Precautionary Destruction Plans as part of the account’s Emergency Action Plan (EAP). Contractor shall conduct excercises of the COMSEC account EAP (s) per NSA CSS Policy Manual 3-16 on a semi-annual basis.

1.3.1.1.7 Submit transfer, inventory, destruction, and possession reports to the COR at least monthly or as directed.

1.3.1.1.8 To ensure the integrity of COMSEC material (i.e. key or equipment); inspect the implemented protective technologies upon initial receipt, during each inventory and prior to issuing/return of material to authorized Egyptian Ministry of Defence personnel.

1.3.1.1.9 Provide technical support to include troubleshooting and replacement of GSA locks when necessary for any/all GSA security containers used by the the Egyptian Ministry of Defence for the purposes of COMSEC material storage.

1.3.1.1.10 Ensure the prompt and accurate entry of all amendments to COMSEC publications held by the account.

1.3.1.1.11 Ensure that required page checks are accomplished on all keying material as specified in NAG-14C, NAG-18A, and NSA CSS Policy Manual 3-16, CNSSI 4001, and on all publications when they are received, returned from hand receipt, transferred, destroyed, when a change of Managers occurs, and when posting amendments which include replacement pages to ensure completeness of each publication.

1.3.1.1.12 Ensure all accountable COMSEC material shipped outside of the account’s organization is packaged and shipped as specified in NAG-14C, NAG-18A, and NSA CSS Policy Manual No. 3-16, CNSSI 4001. Ensure all material received is inspected for evidence of tampering and, if at an element where the size of the COMSEC account is so large as to prevent the COMSEC Managers from personally checking security packaging and markings, performing page checks and posting amendments, such actions may be performed by other individuals appropriately cleared and authorized, provided these individuals are properly instructed by the COMSEC Managers. If suspected physical incident is found, submit a report immediately in accordance with NAG-14C, NAG-18A, and NSA CSS Policy Manual 3-16, CNSSI 4001. All shipments of COMSEC material must be coordinated through the Line Mangers at Lackland.

1.3.1.1.13 Be aware at all times of the location of every item of accountable COMSEC material held by the account and the general purpose for which it is being used.

1.3.1.1.14 Establish procedures to ensure strict control of each item of keying material whenever operational requirements necessitate that material are turned over from one shift to another or from one individual to another.

1.3.1.1.15 Ensure that appropriate COMSEC material is readily available to properly cleared and authorized individuals whose duties require its use. If the material is classified, verify that the individuals are cleared to the level of the material. Issue material to users by means of a hand receipt (SF-153) as provided for in NAG-14C, NAG-18A, and NSA CSS Policy Manual 3-16, CNSSI 4001, and advise recipients of their responsibility for safeguarding the material until it is returned to the managers. Signed copies of SF-153 will be sent to Line Managers in Lackland.

1.3.1.1.16 Report immediately to the element commander or US Embassy in Egypt of any known or suspected COMSEC incidents, personnel incidents, or physical incidents, and submit a report in accordance with the procedures outlined in NAG-14C, NAG-18A, and NSA CSS Policy Manual 3-16, CNSSI 4001. USCENTCOM will be informed on all COMSEC incidents and courtesy copied on all official reports.

1.3.1.1.17 Government will verify the identification, clearance and need-to-know of any individual requesting access to the records and/or material associated with the COMSEC account.

1.3.1.1.18 Perform COMSEC audits and inspections of the Egyptian Ministry of Defence sub-accounts and COMSEC user sites and units that use and operate USG-provided COMSEC material and equipment, when required and at the direction of the Security Cooperation Office (SCO) at the U.S. Embassy in Egypt and USCENTCOM CCJ6-OC. After obtaining a prior approval of the Egyptian Ministry of Defense not less than fifteen (15) days prior to performing such audits and inspections.

Routinely check SECRET Internet Protocol Router Network (SIPRNet) emails for traffic, and send notifications of any unofficial physical security violations, based on sound judgment, to those parties responsible and/or accountable for USG Physical Security violations.

1.3.1.1.19 Serve as the primary advisor to the the Egyptian Ministry of Defence regarding all COMSEC issues and serve as liaison between the U.S. and Egyptian Ministry of Defence FMS COMSEC account, SCO, and USCENTCOM.

1.3.1.1.20 Provide COMSEC user training and assistance to Egyptian Ministry of Defence Military units and Military personnel on the proper handling and use of USG-provided COMSEC material and equipment. Train Egyptian Ministry of Defence personnel in the proper custodianship, safeguarding and operation of DOD-provided COMSEC equipment, encryption keys, and other COMSEC related materials, zeroing equipment, basic trouble-shooting, emergency destruction procedures, and system level assistance in order to satisfy requirements for secure interoperability. Government will request proper operational manuals for COMSEC equipment.

1.3.1.1.21 COMSEC Managers shall submit a monthly report outlining any activity/findings/corrective actions within 5 calendar days after the completion of the month being reported. The purpose of these reports is to provide AFSAC and USCENTCOM oversight of the COMSEC managerial duties performed within country. Contractor format is acceptable. Reports shall be emailed to AFLCMC/HNCC-PF, AFLCMC/HNCK, AFSAC, and CENTCOM personnel.

1.4 Functional Requirements.

1.4.1 The contractor shall provide United States citizens who are NSA certified COMSEC Managers at the Egyptian Ministry of Defence COMSEC facility.

1.4.1.1 Contractor personnel shall be U.S. Citizens.

1.4.1.2 Contractor should have a Key support Central Facility (online @ https://www.iad.gov/KeySupport/index.cfm) account within six months from their appointment date as a COMSEC Manager (IAW NSA CSS Policy Manual No. 3-16, paragraph 16).

1.4.1.3 Contractor personnel shall attend USCENTCOM Foreign Disclosure (FD) training course.

1.4.1.5 Contractor personnel shall be thoroughly familiar with the proper handling and safeguarding of Communications Security materials and equipment. A minimum of one COMSEC manager shall have knowledge of safe and lock replacement procedures.

1.4.1.6 Contractor shall be thoroughly familiar with civil codes.

1.4.1.7 Contractor personnel shall be able to research and understand National Security Agency (NSA) Information Assurance (IA)/COMSEC regulations and USCENTCOM operational directives.

1.4.1.8 Contractor personnel shall be thoroughly familiar with Operational Security strategies and methods.

1.4.1.9 Contractor personnel shall be familiar with the publications and directives that will be used to support daily and special operations.

1.4.1.10 Contractor personnel shall be able to develop, prepare, and deliver COMSEC training to Egyptian hand receipt/COMSEC responsible officers.

1.4.1.11 Contractor personnel shall be able to clearly articulate concerns, including recommended Courses of Actions (COAs) both verbally and in writing, to senior U.S. and Egyptian leadership.

1.4.1.12 Contractor personnel shall possess the ability to work independently without technical guidance.

1.4.1.13 Contractor personnel shall be experienced in theory of all aspects of the COMSEC Equipment/Systems.

1.4.1.14 Contractor personnel must have a background in C4ISR Systems and Networks.

1.4.1.15 Contractor personnel must be able to lift at least 60 pounds without assistance.

1.4.1.16 Contractor personnel must be able to draft messages in proper format.

1.4.1.17 Contractor personnel must have working knowledge and be able to perform basic troubleshooting of secure telephone systems (i.e. Secure Communications Internet Protocol (SCIP) devices, Secure Analog and Data Service devices, SECTERA Wireline Terminal (SWT) and Secure Telephone Equipment (STE)).

1.4.1.18 Contractor personnel must have background in Electronic Keying Management Systems (EKMS).

1.4.1.19 Contractor personnel must have good background in downloading and transferring of electronic key using all current fill devices.

1.4.1.20 Contractor personnel Must have strong background in all cryptographic/COMSEC equipment used by the Egyptian Ministry of Defense.

1.4.1.21 Contractor personnel must be able to perform Over-The-Air-Rekey (OTAR) and Over-The Air-Transfer (OTAT).

1.4.1.22 Contractor personnel must maintain ability to quickly execute emergency supersession when order is given.

1.4.1.23 Contractor personnel must have computer skills in Microsoft Office products to include Outlook, Word and Excel.

1.4.1.24 Contractor personnel must have some background in tactical and strategic communications systems and networks.

1.4.1.25 Contractor personnel must be able to maintain highest accountability and pass all COMSEC inspections/audits whether scheduled or unscheduled.

1.4.1.26 Contractor personnel may be required to work occasional overtime to support the Egyptian mission.

1.4.1.27 Contractor personnel shall have the ability to transfer knowledge of COMSEC operations to all qualified personnel, including the ability to express thought in both oral and written communications.

1.4.1.28 Contractor personnel shall possess a high degree of tact, diplomacy and the ability to work and cooperate harmoniously with Egyptian Ministry of Defence military and civilian personnel.

1.4.1.29 Government shall provide COMSEC managers all peripheral items required to conduct COMSEC operations. This includes equipment, services, and/or required supplies needed for day-to-day operation of the contractor in Egypt such as administrative equipment/supplies (i.e. mobile phones, internet, scanner, printer, laptop, office furniture, landlines, and office supplies, and any other items deemed necessary). Government shall provide tooling and equipment for the purposes of performing GSA Lock and Safe work. Government shall provide and maintain no less than three (3) current X-Series GSA locks on hand in-country for repair/replacement of any inoperable locks.

1.4.1.30 Contractor Performance Assessment Reporting System (CPARS) Applicability. FAR Part 42.1502 directs all Federal Agencies to collect and report past performance information on service contracts with a value of $1Mil or more. The CPARS assesses a Contractor’s performance and provides a written record on a given contract during a specified period of time. All CPARS are accomplished using the Naval Sea Logistics Center’s Contractor Performance Assessment Reporting System (CPARS) found on the web at http://www.cpars.csd.disa.mil/. This system requires the Contractor to provide a designated representative to receive the CPARS electronically. The Contractor shall submit their representative’s name, telephone number, and e-mail address with their proposal. The initial CPARS for this contract will be completed on the anniversary of contract award.

1.4.1.31 Security Clearance. Contractor shall be able to obtain and maintain a Secret security clearance. Contractor is responsible and shall ensure employees performing duties under this contract are submitted for Periodic Reinvestigations (PRs) as required by the DoD and AF Personnel Security Program requirements.

1.5 Work Situation. The contractor shall provide coverage at the specified government site between the hours of 0730 and 1530, or as agreed to by the using activity, but one COMSEC manager must be available on-call 24 hours a day/7 days a week. Normal duty days will be Sunday through Thursday, excluding American Embasy and selected Egyptian holidays. Work is normally conducted in an office environment on a 40 hour per week basis. Occasional work will be performed in a tactical and/or outdoor environment. Occasional overtime is anticipated. Contractor personnel are designated Mission Essential/Critical to the contract.

1.5.1 Recognized Holidays.

*Exact Calendar dates vary each year and will be announced by the Egyptian government.

If a holiday falls on a Friday, it will usually be observed on the preceeding workday. Country intends to observe the American holidays listed above.

1.5.2 In performing the tasks contained above, the contractor will interface with a variety of other Department of Defense (DOD) and USG organizations and offices, and other US contractors. Contractor personnel will not provide direction or otherwise interject themselves into relationships between the US and other government contractors, but are expected to make recommendations and offer solutions that adhere to USG policies. Services provided under this requirement are considered non-personal services.

1.5.3 Contractor personnel must be able to drive a vehicle and obtain an Egyptian Drivers License. (Please note: International Driver’s License is only valid for one (1) year). Egyptian Personnel Support Services (EPSS) program is available to transportation services to all contractors and their families who reside in the greater Cairo area in support of Egyptian Air Force cases. Contractor shall utilize these services. Contractor must obtain a courier card from Defense Courier Service (DCS) in order to ship and receive COMSEC Controlled Items (CCI).

1.5.4 If dependents accompany contractor, it will be at the contractor’s expense. Contractor personnel will not commence travel to Egypt until after notice has been forwarded to OMC-Egypt. Arrival notice must include name and date of arrival, flight number and airline, along with a complete listing of full names for contractor personnel and dependents accompanying them, if any; Contractor personnel will not travel with dependents unless they have orders for their dependents. Contractor personnel should request unrestricted multiple entries and the Government of Egypt should provide exit visas for contractor personnel and all accompanying dependents.

1.5.5 Contractor personnel are not subject to import or export duties on new personal items/equipment. Egypt will assess no personal income taxes.

1.5.6 Housing: Government quarters are not available. Egyptian Personnel Support Services (EPSS) program is available to provide housing to all contractors and their families who reside in the greater Cairo area in support of Egyptian Air Force cases. Contractor shall utilize these services.

1.5.7 Utilities: Utilities will be contractor’s responsibility.

1.5.8 U.S. Logistics support to be provided includes:

· Sponsorship/Visas

· Government ID cards (DOD CAC)

· Access to classified/unclassified U.S. Government networks for performance of duties

· Base Exchange and Class VI

· Commissary

· Diplomatic Post Office (DPO) services

· Emergency medical and dental services

· For contractor personnel in accompanied status, the following applies: IAW DODEA Regulation 1342.13, 20 Sep 06, Contractors on DOD (Military) Orders: Dependents will be enrolled on a space-guaranteed, tuition-paying basis. Schools charged at a rate set by the school’s operator.

1.5.9 Report to Instructions: Personnel will report to

Rank Name Location: TBD Email: TBD Cell phone: TBD Information will be provided prior to award of contract.

1.5.10 Certifying Official or Designee: The Certifying Official or designee will ensure the requirements are met to store and maintain COMSEC material in Egypt. The certifying official will be the:

USCENTCOM CCJ6-OC (or designated representative)

US CENTRAL COMMAND

ATTN: CCJ6-OC (COMSEC)

7115 S. Boundary Blvd MacDill AFB, FL 33621 Voice: 813-529-6254/6255

DSN: 312-529-6254/6255

Unclassified Fax: 812-529-6243

1.5.11 Alternate Certifying Official or Designee: US Central Command Coalition Interoperability and Engagements Branch, CCJ6-OI.

1.6 Duration of Task/Period of Performance. The overall period of performance for this effort will be 60 months from date of award.

1.7 Travel Requirements. TDY travel is anticipated for this requirement. Additional travel is required to support GSA Lock and Safe recurring training. All travel must be pre-approved by the Contracting Officer.

1.8 Operations Security (OPSEC)/Controlled Unclassified Information (CUI).

The contractor shall comply with DoDM 5200.01, Volume 4, DoD Information Security Program: Controlled Unclassified Information (CUI), Enclosures 3 & 4, for identification, protection and training requirements of CUI.

The contractor shall be responsible for training their personnel and accomplishment of the out-processing procedures identified in DoDM 5200.01, Volume 4, Enclosure 4.

The contractor shall comply with DoD 5400.7R/Air Force Manual 33302, DoD Freedom of Information Act (FOIA) Program, requirements. This regulation sets policy and procedures for the disclosure of records to the public.

Contractor shall employ sound Operations Security (OPSEC) principles and procedures in the performance of their duties and responsibilities IAW DOD and AF OPSEC publications.

Contractor shall ensure employees performing duties under this contract protect critical information as provided to employees through initial and continuing OPSEC security education and training.

Contractor personnel shall be thoroughly familiar with Operational Security (OPSEC) strategies and methods. OPSEC requirements are stipulated in an effort to reduce program vulnerability from successful adversary collection and exploitation of critical information. Contractor shall employ sound OPSEC principles and procedures in the performance of their duties and responsibilities and apply OPSEC in their management of this contract IAW DOD and AF OPSEC publications.

Security Clearance. Contractor shall be able to obtain and maintain a final Secret security clearance.

1.9 Mobilization/Demobilization. Mobilization shall include all activities and associated costs for transportation of the contractor’s personnel, equipment, and operating supplies to the work site. Mobilization will not be considered as work in fulfilling the contract requirements for commencement of work. Demobilization shall include all activities and costs for transportation of personnel, equipment, and supplies not required or included in the contract from the work site. Demobilization will only be authorized in the event of the completion of the contract with no anticipation of a follow-on contract, no continuing funds, or the unforeseen removal of contractor personnel from the worksite for their own safety through no fault of their own (based on the official direction agreed between U. S. and Egyptian Governments). All demobilization travel must be pre-approved by the Contracting Officer unless it occurs under an emergency situation. Payment by DFAS through Wide Area Workflow (WAWF) will be made as demobilization or mobilization occurs, after presentation of a proper invoice showing specific costs and supporting evidence of the charges.

2.0 SERVICES SUMMARY (SS). The Services Summary outlines the performance objectives that relate directly to standards of performance required to meet mission needs. The performance threshold briefly describes the minimum acceptable overall levels of service required for each required level of service. These thresholds are essential to mission success.

SS-3 Maintain COMSEC accounting and related records

3.0 GENERAL INFORMATION

3.1 Management and Administration. The contractor shall provide necessary resources and infrastructure to manage and administer the services required in the contract.

3.2 Policy. The contractor shall be familiar with applicable DOD acquisition and FMS policy, law, regulations, and guidance required to perform efforts as defined in this performance work statement.

3.3 Contractor Identification. Contractor employee shall identify themselves as a contractor employee when answering phones and corresponding by e-mail. The contractor employee shall wear visible contractor-provided identification either as part of or attached to their outer clothing all times while on duty which clearly identifies the individual as a contract employee.

3.4 Access. The US government and the Egyptian Ministry of Defence will provide the contractor access to facilities as required to perform duties in accordance with this contract. The contractor shall be subject to all appropriate military rules and regulations while working on a military installation.

3.5 Personnel Management and Training. The contractor shall be responsible for the employment, training, guidance, and supervision of qualified personnel to accomplish the services required under the contract. The contractor shall accomplish the assigned work by employing and utilizing qualified personnel with the appropriate combination of education, training, and experience.

3.6 Contractor Quality Control. The contractor shall use their own internal quality control program and procedures to identify, prevent, and ensure non-recurrence of defective services. The government shall receive quality services meeting the requirements of the contract through implementation of the Contractor’s Quality Control Program and Procedures.

3.7 Transition/Phase-in-Period. During this period, the contractor shall become familiar with all contract requirements, hire staff, submit and secure security clearances for all contractor staff, secure housing/transportation and report to the POC identified in PWS paragraph 1.5.9 for further in-processing and any other in-country requirements as required. Full performance will begin after the one (1) month phase-in.

4.0 EVACUATION/DECLARATION OF EMERGENCY

4.1 Evacuations. If the Chief of the Mission orders a mandatory evacuation of some or all personnel, the level of assistance provided to employees of the contractor shall be the same as the level of assistance provided to other U.S. Embassy Mission Essential staff/employees. In the event of a non-mandatory evacuation order, the contractor shall maintain personnel on location sufficient to meet contractual obligations under this contract until instructed to evacuate by the Contracting Officer, Contracting Officer’s representative, or Chief of the Mission.

In cases of emergencies, e.g. enemy or terrorist activity or natural disaster that causes an immediate possibility of death or serious injury to contractor personnel, notification shall be made by Embassy Regional Security Officer (RSO) or a representative of the Defense Attache’s Office. Notification may be verbal, written, or electronic. The Contractor’s Company must notify the CO/COR within 48 hours of emergencies resulting in stopping work and/or evacuation.

In the event that contractor personnel are evacuated from Egypt, the Alternate Certifying Official/COR will advise as whether the Egyptian Ministry of Defence wants a Stop Work Order issued or have the contractor representative telecommute from another location. The Certificate of Service will be sent to the Alternate Certifying Official/COR and a weekly Status Report will be required if telecommuting from another location.

Medical Evacuation Costs: Should contractor personnel require medical evacuation from Egypt for whatever reason, all costs will be borne by the contractor.

4.2 Declaration of Emergency. During a state of emergency as declared by National Command Authority or Commander-in-Chief, the contractor may be required to expand or curtail the level of service listed in the PWS IAW DODI 3020.37, Continuation of Essential DOD Contractor Services during Crisis. The American Embassy will provide specific instructions during the emergency as to which services are considered essential and to what level to include hours of operation.