Attachment 1 - PWS LEPS.pdf

Locally Employed Person Screening Cell (LEPSC)

Performance Work Statement (PWS)

07 July 2022

Part 1: General Information

1. General: This is a non-personal services contract under which the personnel rendering the services are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the Government and its employees.

1.1. Description of Services/Introduction: The contractor shall provide all necessary personnel, expertise and management to establish and maintain a Locally Employed Person Screening Cell (LEPSC), consisting of a minimum of one supervisor and three screeners that operate eight hours/day, five days/week. The LEPSC will provide a single point of screening for all non-government, locally employed laborers, and workers. The contractor shall have sufficient manpower and capabilities to execute a minimum of three (3) screenings a day.

The contractor must provide all equipment, supplies, and other items necessary to execute this contract, only excluding those items specified as government furnished property (GFP) and government furnished services

(GFS). The GFP will be considered Government property that is incidental to the place of performance in accordance with Federal Acquisition Regulation (FAR). The contractor shall perform to the standards outlined in this Performance Work Statement (PWS).

1.2. Purpose: The purpose of this contract is to assist the Provost Marshall in performance of screening of non-United States (U.S.) citizens seeking employment or access to the U.S. personnel, mission, network access, and facilities within the Kingdom of Saudi Arabia (KSA). The Saudi Resident Office (SRO) will task and provide quality assurance over the LEPSC in order to mitigate the insider threat and identify, detect, deter, neutralize and exploit all Foreign Intelligence and Security Services (FISS) and International Terrorism

Organizations (ITO).

1.3. Objectives: The contractor shall provide all means to locate, screen, hire, and maintain personnel capable of conducting the following tasks and requirements:

1.3.1. Screenings, background checks, and subsequent reports of locally employed persons (LEP).

1.3.2. Screening Process: The screening process shall be conducted in accordance with applicable United

States Central Command (USCENTCOM) and United States Army Central Command (USARCENT) security directives and the established standard operating procedures (SOP). The contractor shall develop its own SOPs, based on the local environment, host nation processes and any applicable U.S. or host nation requirements or laws.

1.3.3. Screening Preparation: The contractor will receive notification of newly hired contractor employees or other persons requiring access from the Provost Marshall, J3, or local program/command entities. The contractor will review/conduct research on available Secret Internet Protocol Router (SIPR) databases to define associated derogatory reporting prior to the conduct of the screening. The contractor shall work in concert with the Provost Marshall/J3 and Security Manager/J2 in order to accomplish required screening.

After an initial screening, LEPSC will rescreen LEP annually to confirm access requirement and eligibility. A monthly spreadsheet shall be maintained and distributed to local security managers, indicating each individual which has been screened, dates the screenings took place, and the result of the screening.

1.3.4. Screening Methodology: Screening interviews shall be conducted in accordance with the SOP, established and approved by U.S. Government representatives, with the overall intent of identifying applicants that pose a risk to U.S., Coalition, or Host Nation forces and employees. It is important that applicants understand the purpose of the interview and how the information from the interview will be

FA4885-22-R-0004

Attachment 1 Page: 1 of 26 used. Screeners shall structure their interviews to identity/address information of CI concern while creating a professional and respectful environment, utilizing rapport-building techniques to build trust with the applicant.

1.3.5. Reporting Results: The contractor will immediately provide results of any screening in which derogatory information develops to the SRO, security managers, and J3. The contractor will prepare a screening report that annotates general personally identifiable information (PII) and summarizes the results of the interview. The contractor will refer any applicant assessed to be of Counterintelligence (CI) value/ concern, in accordance with Army Regulation (AR) 381-12 to SRO for evaluation.

1.3.6. Safeguarding Information: The contractor will maintain a local database of all Other Country

Nationals (OCN), screened at the LEPSC. The contractor shall safeguard all information and information systems with applicable guidance and rules set forth by the U.S. Government, Department of Defense, and installation security offices. Information derived from the operation of the LEPSC is the property of the

U.S. Government and shall be safeguarded in accordance with applicable security classification guidance.

1.3.7. Restrictions: Screeners will not be armed or used to conduct source operations, CI investigations, or

Threat Awareness and Reporting (TARP) briefs. Regardless of any other direction the contractor shall not conduct any covert intelligence gathering, as the use of contractors to do so violates Army policy.

1.4. Knowledge, Skills, and Abilities:

1.4.1. Screeners should be the DoD Civilian equivalent of Air Force Office of Special Investigations

(AFOSI) (Air Force Specialty Code 7S071), Naval Criminal Investigative Service, Army Criminal

Investigations Division, USAF Air Force Specialty Code (AFSC) 3P0X1 (Security Forces) with four (4) years law enforcement or investigations experience, or USA MOS 35L/M, 180A, 18F, 35E (Strategic

Debriefer or individual with similar skill set) with a minimum four years of field experience. Deployed experience is preferred.

1.4.2. Screeners must have experience with screening, screening tasks and/or investigative questioning techniques.

1.4.3. Screeners must be proficient in the use of SIPR search engines and database retrieval tools, such as

Query Tree and M3.

1.5. Period of Performance: See the period of performance and delivery dates after the pricing schedule.

1.6. Hours of Operation: The contractor is responsible for providing service 8 hours/day, 5 days/week for the duration of the Period of Performance (PoP). Office business hours will be 0800-1600, Sunday through

Thursday, except USMTM recognized holidays (federal) or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government-directed facility closings. Local Saudi

Arabian holidays do not apply. The Contractor must, at all times, maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons.

1.7. OVERTIME: Over/extended time per person per skill level category is authorized for all support personnel to accommodate peak workload fluctuations and reduction of backlog. Because of the unique operational environment, an overtime allowance of 20 hours is required for on-call support. The contractor must obtain authorization from the Contracting Officer Representative or the Contracting Officer prior to working overtime.

The contractor shall ensure that overtime hours worked do not exceed awarded hours.

FA4885-22-R-0004

Page: 2 of 26

1.8. Place of Performance: The work to be performed under this contract will be performed at fixed and secured government facilities within the primary duty location at Al Nakhla Residential Resort, KSA.

Host nation interpreter services may be requested for meeting in Riyadh or other locations.

1.9. Quality Control Plan (QCP): The Contractor shall develop, implement, and maintain a QCP and program to ensure all work described in this contract is performed at or above the standard defined in the Performance

Requirements Summary (PRS). The QCP is developed by the contractor for its internal use to ensure that it performs and delivers high-quality service. The contractor’s QCP is the means by which the contractor ensures all work complies with the requirements of the contract. The QCP identifies and corrects potential and actual problem areas throughout the entire scope of the contract.

1.9.1. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The QCP shall be submitted within thirty (30) days of contract award. The contracting officer (KO) shall review and if necessary, provide proposed changes to the QC procedures.

The contractor shall submit QCP changes within five (5) days to the KO and Contracting Officer’s

Representative (COR) for review and approval prior to implementation.

1.9.2. The Quality Control Plan shall address as a minimum:

1.9.2.1. Inspection Program. Included shall be a quality control inspection program covering all general and specific tasks included in the contract scope of work. It shall specify tasks or areas to be inspected on a scheduled or unscheduled basis, the manner in which inspections are to be conducted, the titles of the individuals who will perform the inspections, and the percentage of the work that will be inspected on a recurring basis. In developing this inspection program, the Contractor shall identify the key activities and associated characteristics in each process that have a significant influence on specific services and provide for methods for evaluation of the selected characteristics.

1.9.2.2. Deficiency Identification. The QCP shall include a method of identifying deficiencies in the quality of services performed before the level of performance becomes unacceptable as defined in the

PRS. This shall contain processes for corrective action without dependence upon Government direction.

1.9.2.2.1. Deficiency Correction. The program shall contain process control and process performance measurement procedures that shall include how the Contractor shall implement preventive corrective actions. The Contractor shall demonstrate that it has designed quality into the delivery of services thereby mitigating the risk(s) associated with delivery of deficient or nonconforming services.

1.9.2.2.2. Documentation and Enforcement. The QCP shall include a method of documenting and enforcing quality control operations of both prime contractor and subcontractor work; including inspection and testing.

1.9.2.2.3. Trend Analysis. The QCP shall include a method of performing trend analysis and assessments through the use of metrics.

1.9.2.3. Surveillance Methods. The QCP shall contain specific surveillance techniques for all contract services. The surveillance methods shall be comprehensive and adaptable to the reporting system of the plan.

FA4885-22-R-0004

Page: 3 of 26

1.9.2.4. Operations Security (OPSEC) SOP/Plan Requirements: The Contractor shall implement and maintain an OPSEC program for preventing the disclosure of critical information or sensitive information which could jeopardize the Government’s ability to execute its mission or to adequately protect its personnel and/or equipment. The Contractor shall develop an OPSEC Standing Operating

Procedure (SOP)/plan within 90 calendar days of contract award to the Contracting Officer

Representative (COR) or Contracting Officer (KO) to be reviewed and approved by the Government

OPSEC Officer on the supporting installation. The SOP must contain a training plan that includes an initial OPSEC brief, continuous awareness, and annual OPSEC training. Awareness/training includes, but not limited to information disclosure via letters, conversations, photographs, resumes, electronic mail (e-mail), Social media/networking sites, dissemination of information and documents disposal.

OPSEC Program shall fully comply with the provisions of AR 530-1, Operations Security.

1.9.3. Quality Assurance (QA): The government shall evaluate the contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government must do to ensure that the contractor has performed in accordance with the performance standards and contract quality requirements are met. “Contract quality requirements” means the technical requirements in the contract relating to the quality of the product or service and those contract clauses prescribing inspection, and other quality controls incumbent on the contractor, to ensure the product or service conforms to the contractual requirements. It defines how the performance standards will be applied, the frequency of surveillance, the performance threshold, and deductions, if applicable.

1.9.4. Type of Contract: The Government anticipates the award of a Firm Fixed Price contract type.

1.9.5. Access and General Protection Policy and Procedures:

1.9.5.1. Force Protection Condition (FPCON): In addition to the changes otherwise authorized by the changes of clause of contract, should the US Government FPCON at any individual installation change, the Government may require changes in contractor security matters or process in accordance with DoDI 2000.16. During FPCONs Charlie and Delta, only contract services that have been deemed

“mission essential” by the Government will continue. Contract services will resume when the FPCON is reduced to Bravo or lower.

1.9.5.2. Physical Security: The contractor shall be responsible for safeguarding all government equipment, information, and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured in accordance with AR 190-13, “The

Army Physical Security Program.”

1.9.5.3. Escorts: Excluding the LEPSC office, the Contractor and all associated sub-contractor employees performing services under this contract shall be escorted at all times by a US Government representative while accessing controlled/restricted areas.

1.9.5.4. Personnel Security Clearance Requirements: Contractor personnel performing work under this contract must have an active SECRET security clearance in the Defense Information System for

Security (DISS) at time of the proposal submission, and must maintain a SECRET clearance for the life of the contract. The Contractor shall ensure that contractor employees and sub-contractor employees performing services under this contract comply with FAR 52.204-2, Security Requirements when the employee has access to information classified CONFIDENTIAL and SECRET. The

Contract will ensure the employee complies with the Security Agreement (DD Form 441), FA4885-22-R-0004

Page: 4 of 26 including the National Industrial Security Program Operating Manual Department of Defense (DOD

5220.22-M), and any revisions to DOD 5220.22-M, notice of which has been furnished to the

Contractor.

1.9.5.5. The contractor shall follow Defense Federal Acquisition Regulation Supplement (DFARS) clause 252.223-7004, Drug-free Work Force; and local USCENTCOM policies regarding drug testing.

The contractor shall conduct drug tests, ensuring all secret cleared contractor employees are tested at least once per year, each year of the contract, as well as when there is a reasonable suspicion that an employee uses illegal drugs. The drug testing shall be at the contractor’s expense. Positive drug test results shall be made available to both the KO and COR within 24 hours of known test results.

Records of drug testing shall be made available to the COR.

1.9.5.6. Background Checks: The Contractor shall ensure contractor employees and subcontractor employees performing services under this contract have passed a security check conducted by the

State Police Department of their U.S. residence. Security checks that have been completed as part of a personnel security clearance background investigation, or a previous background check that was a condition of employment, meet this requirement. Documentation of these checks will be made available to the KO or COR upon request. The Government retains the right to exclude any employee from performance of duties under this contract if a background security check reveals an employee is a security risk. The exclusion of an employee for security reasons will not relieve the Contractor from performance of services required under this contract. If the Government determines additional background checks are required, at a minimum, and upon request from the Government, the

Contractor shall provide to the KO or COR, the following information on any contractor or subcontractor employee performing services under this contract:

(1) Full Birth Name

(2) Married Name (if applicable)

(3) SSN or Local Equivalent (ID card number)

(4) Date of Birth

(5) Place of Birth

1.9.5.7. Background Check Notification Requirements: If a background check on any employee or subcontractor employee performing services under this contract, whether the check was conducted as a condition of employment or as part of the contract with the Government, reveals any information from any source (including host country law enforcement) of criminal activity by Contractor employees, subcontractors, or subcontractor employees, the Contractor shall immediately notify the KO and COR of that information. The Contractor shall make notification of:

(1) Traffic violations, other than parking, will be reported to the KO or COR only if the contract is for drivers for the Government;

(2) Any suspicious activity by Contractor employees, subcontractors, or subcontractor employees the Contractor believes may pose a risk to U.S. or host nation national security or imminent risk of deadly bodily harm to any person; and

(3) Any actions taken against Contractor employees, subcontractors, or subcontractor employees pursuant to this requirement.

1.9.5.8. Remedies. In addition to other remedies available to the Government, the Contractor’s failure to comply with the requirements of this paragraph my result in requiring the Contractor to remove a

Contractor employee or employees from the performance of the contract.

FA4885-22-R-0004

Page: 5 of 26

1.9.5.9. Subcontracts. The Contractor shall include the substance of the 1.9.5. Access and General

Protection Policy and Procedures section in all subcontracts.

1.10. Contractor Common Access Card (CAC) Eligible Requirements: Contractors shall always maintain their individual CAC and SIPR tokens. Before CAC issuance, the Contractor employee requires and shall maintain, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The Contractor employee will be issued a

CAC only if duties involve one of the following:

(1) Both physical access to a DOD facility and access, via logon, to DOD networks on-site or remotely;

(2) Remote access, via logon, to a DOD network using DOD-approved remote access procedures; or

(3) Physical access to multiple DOD facilities or multiple non-DOD federally controlled facilities on behalf of the DOD on a recurring basis for a period of 6 months or more.

At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the

Federal Bureau of Investigation (FBI) fingerprint check and a successfully scheduled NACI at the Office of

Personnel Management.

1.11. Federal Installation/Facility Access: Contractor and all associated sub-contractor employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The employee performing services under this contract shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, Security Office or the host nation equivalent.

1.12. Employment Eligibility: The Contractor shall ensure that all Contractor employees and sub- contractor employees performing services under this contract in the U.S. or its territories have been pre-screened for employment eligibility using the E-verify Program on the Department of Homeland Security website http://www.uscis.gov/e-verify. Personnel that have not met the employment eligibility requirement on this website are not authorized to perform services under this contract. Verification of the eligibility check will be made available to the KO or COR upon request. This requirement is not in lieu of and does not relieve the

Contractor from the I-9 Employment Eligibility Verification Forms for employment of personnel.

1.13. Access to Government Information Systems: All Contractor employees and subcontractor employees performing services under this contract who have access to a government information system must be registered in the Army Training Certification Tracking System (ATCTS), at commencement of services and must successfully complete the DoD Information Assurance Awareness training prior to access to the information system and then annually thereafter.

1.14. Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons.

NOTE: All references to keys include key cards. Contractor shall not duplicate keys provided by the

Government. The Contractor shall develop procedures covering key control that shall be included in the QCP.

Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas.

1.14.1. The Contractor shall report any occurrences of lost or duplicate keys/key cards to the KO and the

COR (and physical property manager, if applicable) within two (2) hours or the next business day if after hours and to request key or lock(s) replacement. This notification and request for key(s) and lock

FA4885-22-R-0004

Attachment 1 Page: 6 of 26 http://www.uscis.gov/e-verify replacement shall be submitted in writing. The total cost of the replacement shall be at the Contractor’s expense.

1.14.2. Only authorized Contractor personnel shall use Government issued key(s) and/or key card(s).

Contractor personnel shall follow security access requirements when entering secure areas. Contractor shall receive appropriate security clearance approval to allow visitor(s) access in secure areas.

1.14.3. Lock Combinations: The Contractor shall establish and implement methods to ensure all lock combinations are protected from unauthorized persons. The Contractor shall ensure lock combinations are changed when personnel with access to the combinations no longer have a need to know in accordance with local security procedures and policies. These procedures shall be included in the Contractor’s QCP.

1.15. Post Award Conference/Contract Periodic Progress Meetings: The Contractor’s supervisor shall attend the post award conference convened by the contracting activity or contract administration office in accordance with FAR Subpart 42.5. The KO, COR, with other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor’s performance. At these meetings the KO will apprise the contractor of how the government views the Contractor’s performance and the Contractor will apprise the

Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.16. Contracting Officer Representative: An USMTM COR will be identified by a separate letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: ensure the Contractor performs the technical requirements of the contract;

perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, specifications; monitor Contractor’s performance and notifies both the KO and Contractor of any deficiencies; coordinate availability of government furnished property; and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates, or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.16.1. A 2nd Government official point of contact (POC) will be appointed as an Assistant COR to enforce quality control and provide local performance evaluations of the LEPSC to the USMTM COR.

1.17. Key Personnel: The following personnel are considered key personnel by the government: The Contractor shall provide a contract manager/supervisor who shall be responsible for the performance of the work. The name of this person and an alternate, who shall act for the Contractor when the manager is absent, shall be designated in writing to the Contracting Officer. The Contract Manager and alternate shall have full authority to act for the contractor on all contract matters relating to daily operation of this contract. The Contract Manager or alternate shall be available between. Qualifications for all key personnel are listed below:

1.18. Special Qualifications or Certifications:

1.18.1. Contractor will accomplish all mandatory pre-deployment theater entrance training and certification prior to arriving to KSA. All mandatory training can be accomplished at any Combined

Readiness Center (CRC) in Continental United States (excludes Alaska and Hawaii) (CONUS). On-site, not including transportation, annual re-training or re-certification for the following mandatory training shall be fully funded by the contractor due to the potential of an excessive employee turnover rate.

FA4885-22-R-0004

Page: 7 of 26

1.18.2. The Contractor shall conduct Personnel Recovery Training in accordance with the current DoD, Department of the Army, and Head Quarters (HQ) Army Material Command PR training guidance found in

DoD 2310.2 Personnel Recovery, DA Policy AR 350. 1, and HQ AMC Policy, dated 31 March 2005 (or the latest current edition), Personnel Recovery Training. This is a mandatory pre-deployment theater entrance training and certification for all at-risk personnel performing authorized DOD missions. The

Contractor will certify compliance with all Personnel Recovery requirements for all U.S. National contractor personnel deployed or deploying to all overseas United States Combatant Command (COCOM).

1.18.3. Contractor employees must complete Level I OPSEC training within 30 calendar days of their reporting for duty. Contractor employees are required to implement and practice proper OPSEC measures.

All contractor employees must complete OPSEC awareness training, review the OPSEC SOP and policy annually. This training can be coordinated by the COR and provided by the government at no cost to the contractor.

1.18.4. Contractor employees will receive a tailored TARP brief, presented by a SRO Counterintelligence

(CI) Special Agent, upon arrival to KSA and annually thereafter in accordance with AR 381-12, 04 October

2010.

1.18.5. Contractor employees will complete Anti-terrorism and Force Protection (AT/ FP) training in accordance with AR 350- 1, 3 August 2007, Army Training and Leadership Development, Section VI, 1 -

22, AT/FP training are listed in chapter 5, AR 525- 13. Individual AT/FP training is valid for one year and must be documented. Contractor employees are required to complete AT Level I awareness training within

30 calendar days after contract start date and every subsequent year. The contractor shall submit certificates of completion for each affected contractor employee to the COR. AT Level I awareness training is available at the following website: https://atleve II.dtic.mil/al. In addition, the contractor will receive government provided area of responsibility (AOR) specific AT awareness training as directed by AR 525-

13. Specific AOR training content is directed by the combatant commander with the unit Anti-Terrorism

Officer being the local point of contact.

1.18.6. Contractor will develop and conduct annual security education, training, and awareness programs to address, at a minimum, physical security, acceptable use policies, malicious content and logic, and non-standard threats, such as social engineering.

1.18.7. Contractor employees will receive annual training from an Al Nakhla Program partner J/G2 on

Intelligence Oversight (IO) and comply with the requirements of AR 381- 10, 3 May 2007, U.S. Army

Intelligence Activities; DoD Regulation 5240. 1 – R; and Executive Order 12333. Executive Order 12333, “

United States intelligence Activities,” the listed documents are intended to provide the intelligence community with clear guidance on their roles and missions and facilitate their activities, while protecting the rights of the American people. DoD Regulation 5240.1-R implements E.0. 12333 and governs the activities of DOD intelligence components. The Army implements E.O. 12 333 and DoD 5240.1 – R through AR 381-10, US Army Intelligence Activities. AR 381-1 0 applies to Army military, civilian, and contractor personnel.

1.18.8. All contractor employees and associated sub-contractor employees must complete the DoD

Information Assurance (IA) training before issuance of network access and annually thereafter. All contractor employees working IA/IT functions must comply with DOD and Army training requirements in

DoD 8570.0 I, DOD 8570.01- M and AR 25-2 within six months of employment.

1.18.9. Any additional mandatory training; in Riyadh, Saudi Arabia; that may be required during contract performance will be provided by the government at no cost to the contractor.

FA4885-22-R-0004

Page: 8 of 26

1.19. Identification of Contractor Employees: Contractor employees shall identify themselves as Contractor personnel and shall avoid representing themselves as Government employees. This identification includes meeting attendance, answering Government telephones, email communications, and working in other situations where Contractor status is not obvious. Contractor personnel identification shall be easily identifiable through the display of badges, name tags, lanyards, etc.

1.19.1. Badging of Contractor Employees: Contract personnel and all associated subcontractors employees accessing U.S. facilities or activities, shall present a valid picture ID provided by the Government while accessing Government owned or contracted facilities and shall adhere to facility security policies and restrictions. If applicable, Government issued access badges will not be worn outside designated facility where visible to the general public.

1.19.2. Uniform: The Contractor shall provide a standard uniform for all Contractor and subcontractor employees performing services under this contract, and ensure they wear the uniform during appointed duty hours. The uniform may consist of the same type and color shirt and slacks for all workers. Company logo is optional.

1.20. Other Direct Costs (ODC): If the Contractor needs to procure miscellaneous supplies/services in direct support of this contract, the Contracting Officer’s Representative (COR) is authorized to approve purchases up to $500.00. All requirements above $500.00, require Contracting Officer (KO) approval.

1.21. Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the Contracting Officer. All materials supplied to the

Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.22. Non-Disclosure Requirements: Performance under this contract will require the Contractor to access data and information proprietary to a Government agency, another Government Contractor, or of such nature that its dissemination or use other than as specified in this work statement would be adverse to the interests of the

Government or others. Neither the Contractor, nor Contractor personnel, shall divulge, nor release data or information developed, or obtained under performance of this work statement, except to authorize Government personnel or upon written approval of the KO. The Contractor shall not use, disclose, or reproduce proprietary data, which bears a restrictive legend, other than as specified in this PWS. All documentation showing individual names or other personal information shall apply, and shall be controlled and protected under the provisions of the Privacy Act of 1974, Public Law 93-579, 5 United States Code (U.S.C.) Section 552a.

1.22.1. Non-Disclosure Statements: The Contractor shall provide signed non-disclosure agreements to the

Government prior to commencement of work under the contract. Disclosure of information by Contractor personnel may result in Contractor personnel removal from performance of duties under this contract.

1.22.2. Advertisement and Social Media: The Contractor shall NOT post information to public website or social media locations, personal or professional, that in any way disclose names, locations, hotel data, participants, discussions, pictures, etc. before, during or after the contract period of performance without the express consent of the Government. The use of propaganda violates DOD Commercial Use of Imagery

Guidelines stated at (http://www.defenseimagery.mil/products/DODimagery/commercialuse.html). The

FA4885-22-R-0004

Attachment 1 Page: 9 of 26 http://www.defenseimagery.mil/products/DODimagery/commercialuse.html) http://www.defenseimagery.mil/products/DODimagery/commercialuse.html)

Contractor shall not cite any information (e.g., contract information, pictures, locations, etc.) obtained through this contract on any marketing tools to include its company website.

1.23. Organizational Conflict of Interest (OCI): Contractor and subcontractor personnel performing work under this contract may receive, have access to, or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational

Conflict of Interests (OCI) as defined in FAR Subpart 9.5. The Contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.24. Phase-in/Phase-Out (PIPO) Period: To minimize any decreases in productivity and to prevent possible negative impacts on additional services, the Contractor shall have personnel on board, during the 45 days phase in/phase out periods. During the phase in period, the Contractor shall become familiar with performance requirements in order to commence full performance of services at the end of the phase-in period.

1.25. General Training Requirements:

1.25.1. Anti-Terrorism (AT) Level I Training: The Contractor shall complete AT Level I Training within

30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies, or 30 calendar days after employment of new personnel, all Contractor employees, including subcontractor employees, who are employed under the contract shall complete AT

Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies. The contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR or KO within 10 calendar days after completion of training by all employees and subcontractor personnel.

For Common Access Card (CAC) holders, AT Level I awareness training is available at https://jkodirect.jten.mil, course number “JS-US007-14”. For non-CAC holders, AT Level I awareness training is available at http://jko.jten.mil/courses/atl1/launch.html (this standalone version is intended for non-CAC users without a JKO account only). Training must have been completed within the last 12 months and maintained yearly thereafter. If training cannot be conducted on the website, the Contractor will coordinate with the local AT Officer at their assigned location for classroom training by a Level 2 trained

AT Officer and a copy of either the training certificate or the training attendance roster signed by the AT

Officer will be maintained by the Contractor. Verification of the training will be provided to the COR or

KO within 10 calendar days after completion of the training.

1.25.2. OPSEC Awareness: If the Contractor, or a subcontractor, or employees of either disclose any information that disrupts or harms the Government's operations or activities, then the Government retains the right to exclude any employee from performance of duties under this contract. The exclusion of an employee for security reasons will not relieve the Contractor from performance of services required under this contract. By way of example, personnel shall not sketch or take photos of government facilities or activities, unless related to service to be provided. All government paper products and removable digital storage material that is received, generated, or stored during the contract will be destroyed completely when no longer needed to preclude recognition of information.

FA4885-22-R-0004

Attachment 1

Page: 10 of 26 http://jko.jten.mil/courses/atl1/launch.html

1.25.3. Law of war training: Basic law of war training is required for all contractor personnel supporting

U.S. Armed Forces deployed outside the United States. The basic training normally will be provided through a military-run training center. The contracting officer may authorize the use of an alternate basic training source, provided the servicing DoD legal advisor concurs with the course content. An example of an alternate source of basic training is the web-based training provided by the Defense Acquisition

University at https://acc.dau.mil/CommunityBrowser.aspx?id=18014&lang=en-US.

1.25.4. IA Training/Information Technology (IT): All Contractor employees and subcontractor employees, requiring access to Government information systems shall complete the DOD IA Cyber Awareness

Training before issuance of network access and annually thereafter. All employees working IA/IT functions must comply with DOD and Army training requirements per DOD Directive (DODD) 8570.01, IA

Training Certification and Workforce Management, DOD 8570.01-M, Information Assurance Workforce

Improvement Program, and AR 25-2, Information Assurance, within 30 days of employment. Training is available at https://ia.signal.army.mil/DODIAA/default.asp.

1.25.5. TARP Training: Within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies, or 30 calendar days after employment of new personnel, all Contractor employees, including subcontractor employees, who are employed under the contract and require a security clearance, shall complete TARP training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies.

The Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the Government Representative within 10 calendar days after completion of training by all employees and subcontractor personnel. TARP training is available at the Army Learning

Management System (ALMS) https://www.lms.army.mil/. Training must have been completed within the last 12 months and maintained yearly thereafter. If training cannot be conducted on the website, the

Contractor will coordinate with the local CI Officer at their assigned location for classroom training and a copy of either the training certificate or the training attendance roster signed by the CI Officer will be maintained by the Contractor. Verification of the training will be provided to the Contracting Officer (KO) or Contracting Officer Representative (COR) within 10 calendar days after completion of the training.

1.25.6. OPSEC Training: All Contractor employees and sub-Contractor employees performing services under this contract will complete Level I OPSEC training within 30 calendar days of employment under this contract. OPSEC Level I training is available at https://jkodirect.jten.mil, course number “EUC-ECJ6-

110-N-LB”. Training must have been completed within the last 12 months and maintained yearly thereafter. If training cannot be conducted on the website, the Contractor will coordinate with the local

OPSEC Officer at their assigned location for classroom training by a Level 2 trained OPSEC Officer and a copy of either the training certificate or the training attendance roster signed by the OPSEC Officer will be maintained by the Contractor. Verification of the training will be provided to the COR or KO upon request.

1.25.7. iWATCH Training: The Contractor will ensure that all Contractor employees and sub-contractor employees performing services under this contract have been briefed on the iWATCH Program, or equivalent for their supporting DoD Agency, within 30 days of employment under the contract. The

Contractor will coordinate with the supporting DoD Agency AT Officer through the COR or KO for the briefing. This training will be updated as required by the supporting installation AT policies. A copy of the training attendance will be maintained by the Contractor and made available to the COR or KO upon request.

FA4885-22-R-0004

Attachment 1

Page: 11 of 26 http://www.lms.army.mil/ http://www.lms.army.mil/

Appendix A

1.25.8. Sexual Assault and Sexual Harassment Policy. The Contractor shall ensure all employees comply with the Sexual Assault and Sexual Harassment Policy outlined below.

1.25.9. Sexual Harassment Policy Compliance: The Contractor shall certify that all employees performing work under this contract have been fully trained per the requirements below. The COR shall be provided with the following information at a minimum: employee’s name, civil identification number and date trained. Proof of Sexual Harassment Policy Compliance is due within five (5) days after initial contract award and within 48 hours after arrival of new personnel on site.

1.25.10. The Contractor shall conduct training of all employees annually to prevent sexual assault and sexual harassment. This training must, at a minimum, ensure that all the Contractor employees understand the definitions and policy outlined below.

1.25.11. Each employee shall be in compliance with the training requirement and shall be reported to the

Contracting Officer Representative prior to the employee being allowed access to the worksite.

1.25.12. Sexual Assault and Sexual Harassment Policy Definitions. As used in this policy – “Sexual

Assault” means – A crime defined as intentional sexual contact, characterized by use of force, physical threat or abuse of authority or when the victim does not or cannot consent. Sexual assault includes rape, nonconsensual sodomy (oral or anal sex), indecent assault (unwanted, inappropriate sexual contact or fondling), or attempts to commit these acts. Sexual assault can occur without regard to gender or spousal relationship or age of victim. “Consent” will not be deemed or construed to mean the failure by the victim to offer physical resistance. Consent is not given when a person uses force, threat of force, or coercion or when the victim is asleep, incapacitated, or unconscious.

1.25.13. Sexual Harassment” means – Gender discrimination that involves unwelcomed sexual advances, requests for sexual favors and other verbal or physical conduct of a sexual nature between the same or opposite sex genders when such conduct has the purpose or effect of unreasonably interfering with an individual’s work performance or creates an intimidating, hostile, or offensive working environment.

Categories of sexual harassment are:

1.25.14. Verbal - Examples include telling sexual jokes; using sexually explicit profanity, threats, sexually oriented cadences, or sexual comments; whistling in a sexually suggestive manner; and describing certain attributes of one’s physical appearance in a sexual manner.

1.25.15. Nonverbal – Examples include staring at someone, blowing kisses, winking, or licking one’s lips in a suggestive manner. The term may also include printed material (for example, displaying sexually oriented pictures or cartoons); using sexually oriented screen savers on one’s computer; or sending sexually oriented notes, letters, faxes or email.

1.25.16. Physical Contact – Examples include touching, patting, pinching, bumping, grabbing, cornering, or blocking a passageway; kissing; and providing unsolicited back or neck rubs.

1.25.17. Policy. The Department of Defense has adopted a policy to prevent sexual assault and sexual harassment. Contractors and contractor employees in the Army Central Command (ARCENT) Area of

Responsibility (AOR) shall not –

1.25.18. Commit acts of sexual assault against any person on any camp, post, installation, or other United

States enclave within the ARCENT AOR; or

FA4885-22-R-0004

Page: 12 of 26

1.25.19. Sexually harass any person on any camp, post, installation, or other United States enclave within the ARCENT AOR.

1.26. Foreign Outside Continental United States (includes Alaska and Hawaii (OCONUS) Requirements: All

U.S. citizen or resident, and Third Country National (TCN) contractor personnel must comply with the training requirements listed in the Foreign Clearance Guide (FCG). Verification of the training shall be made available to the COR or KO upon request. Additionally, they must receive personal security training that includes at a minimum:

(1) Safety and security issues facing employees within the USCENTCOM AOR,

(2) Identifies safety and security contingency planning activities, and

(3) Identifies ways to utilize safety and security personnel and other resources appropriately.

1.26.1. Theater and Country Clearance Requirements: Contractor shall ensure all U.S. citizen or U.S.

resident Contractor employees and sub-contractor employees performing services under this who are traveling in the USCENTCOM AOR follow the requirements identified in the electronic FCG at https://www.fcg.pentagon.mil/fcg.cfm and must have all necessary passports, visas, and other documents required to enter, exit, or work in the USCENTCOM AOR; must have the appropriate DOD identity credential(s); must have the appropriate special area, country, and theater clearance as required in DOD

Directive 4500.54E. Contractor personnel shall return all U.S. Government issued identification, to include the CAC, to appropriate U.S. Government authorities within 5 days of the end of their travel or contractual duties.

1.26.2. Vetting: The Contractor and all associated sub-contractor companies, must have been vetted by the

US Embassy in the country which the contract will be performed. For the purposes of this contract, the company is considered vetted if the company is located in the country which the contract will be performed unless the company has been previously barred from performing services for the Government. If during a previous vetting process the company was barred from performing service forth Government, then that is grounds for termination of the contract. If the company is located outside of the country which the contract will be performed, the company must be vetted by the US Embassy in the country of performance. Vetting will coordinated through the US Embassy’s DOD Security Cooperation Office (SCO) in the country of performance. If during any previous vetting process in other countries, the company is found to be barred from performing services for the Government; this finding is grounds for termination of the contract.

1.26.3. Installation Access to DOD Facility or Host Nation Installation: Contractor and all subcontractor employees performing services under this contract shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) (U.S. citizen and residents only), and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and areas commander installation/facility access and local security policies and procedures (provided by the COR or KO), and status of forces agreements or other diplomatic agreements.