Attachment 1- Statement of Work 20260319.pdf

Page - 1 - of 23

STATEMENT OF WORK (SOW)

FOR

CLASSIFIED DESTRUCTION SERVICES

AT

Edwards AFB, CA

19 March 2026

Page - 2 - of 23

Classified IT Destruction Services

Table of Contents

1.0 SECTION I: DESCRIPTION OF SERVICES

1.1 General Scope

1.2 Background

1.3 Inherently Governmental Function

1.4 Period of Performance

1.5 Place of Performance

1.6 Specific Tasks

1.7 Historical Data

1.8 Minimum Qualifications

1.9 Deliverables

1.10 Contractor Travel

1.11 Small Business Subcontracting Program

1.12 Contractor Phase-In and Phase-Out Transition

2.0 SECTION II: PERFORMANCE EVALUATION

2.1 Performance Evaluation

2.2 Government Quality Assurance

2.3 Performance Assessment

2.4 Quarterly Progress Meetings

2.5 Government Point of Contact

2.6 Quality Control

2.7 Contractor’s Performance

3.0 SECTION IV: GENERAL INFORMATION

3.1 Hours of Operation

3.2 Contractor Personnel

3.3 Continuation of Essential DoD Contractor Services During Crisis

3.4 Conservation of Utilities

3.5 Environmental Protection

3.6 Miscellaneous Paragraph

3.7 Security

3.8 Safety

4.0 SECTION V APPENDICES & EXHIBITS

APPENDIX 1 Definitions, Abbreviations, and Acronyms APPENDIX 2 Anti-Terrorism Awareness Pamphlet

Page - 3 - of 23

SECTION I

1.0 DESCRIPTION OF SERVICES

1.1 General. This is a nonpersonal services contract to provide classified destruction. The government shall not exercise any supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the contractor who, in turn, is responsible to the government.

1.1.1 Description of Services/Objectives. The contractor shall provide all management, personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and nonpersonal services necessary to local onsite classified IT destruction. The destruction must meet NSA 9-12 requirements and/or granted AF waiver/approval to perform classified destruction. The destruction must include onsite inventory and disassembling of IT equipment to be destroyed except for those items specified as Government Furnished Property and services. The destruction must be conducted by cleared member as defined in this Statement of Work (SOW) except for those items specified as Government Furnished services. The contractor shall perform to the standards in this contract. This includes the planning, coordination, and surveillance of the activities necessary to ensure disciplined work performance and timely resources application to accomplish all tasking under the contract. The contractor shall be responsible for maintaining communication with the Government Point of Contact (GPOC), identified to the contractor by the Contracting Officer and to immediately notify both the CO and GPOC of any problems that would prevent timely performance of this contract. “and to immediately notify both the CO and the GPOC of any problems that would prevent the timely performance of this contract.

The contractor is responsible for and required to implement, and maintain management control systems necessary to plan, organize, direct, and control all activities under this contract.

1.2 Background.

1.3 Inherently Governmental Function. The contractor shall not perform inherently governmental functions as defined in FAR Subpart 7.5 in relationship to this SOW.

1.4 Period of Performance. This project is governed by a contract that will have a performance period of 7 days from the date of the award.

1.5 Place of Performance. The contractor shall perform the services in the SOW at Edwards Air Force Base, California.

1.6. Specific Tasks

The process typically involves gathering the classified materials, verifying contractor personals classification levels, and then destroying them using an approved method like shredding, burning, or pulverizing to 2 millimeters which will be the method they will be using. Documentation of the destruction is crucial for accountability and compliance.

1.6.1 Specific Tasks The contracted company will be responsible for the complete and secure destruction of designated materials, adhering to the following key tasks:

1. Disassembly: The contractor will disassemble items as necessary to facilitate efficient shredding and material separation.

2. Sorting: Disassembled components will be sorted by material type (e.g., paper, plastic, metal) to optimize the shredding process and ensure proper disposal or recycling where applicable.

3. Final Destruction: The contractor will utilize on-site shred trucks to perform the final destruction of all materials. This includes operating the shredding equipment in a safe and efficient manner and ensuring complete and irreversible destruction of the materials.

Page - 4 - of 23

The contractor will be responsible for providing all necessary labor, equipment (excluding the shred trucks), and supervision to complete the project in a timely and secure manner. Strict adherence to all security protocols and environmental regulations is required.

1.7 Historical Data. N/A

1.8 Minimum Qualifications. The minimum qualification required is demonstrated proficiency in planning, conducting, and completing classified destruction operations across all Special Access Program Facility (SAPF) areas. This includes a thorough understanding of relevant security regulations, destruction methods, and documentation requirements, as well as the ability to independently manage and execute classified destruction projects from initiation to completion, ensuring full compliance and accountability.

1.9 Deliverables. The destruction team will be equipped with hand tools powered by 12V batteries, ensuring operational efficiency within secure environments. All tools will be free of Bluetooth or other wireless communication capabilities to maintain data security integrity. The primary shredding equipment will be on the National Security Agency (NSA) approved equipment list for secure destruction. This selection ensures compliance with established standards for the destruction of classified materials.

1.9.1 Below is a list of deliverables under this contract.

Support Area Title Delivery Date/Description

Management Manpower Reporting See 1.9.2 below.

Management/ Technical Monthly Progress Report As coordinated with the customer Technical Weekly Status Report As negotiated Technical Report Planning Documents As required Technical Report Trip Report/ Meeting Minutes As required

1.9.2 Service Contractor Reporting of Information (SCR). If required of the contractor, SCR is addressed by contract clause.

1.9.3 Data. The Government shall possess unlimited rights to all deliverables produced under this contract, including the right to use, modify, reproduce, release, perform, display, or disclose these deliverables in whole or in part, in any manner, and for any purpose whatsoever, and to have or permit others to do so.

1.9.4 Inspection. Deliverables will be inspected by government personnel upon arrival of receipt. Progress meetings may be held as required.

Page - 5 - of 23

SECTION II

2.0 Performance Evaluation.

2.1 Performance Evaluation. Performance of a service shall be evaluated to determine whether it meets the performance requirements of this contract. Re-performance of unacceptable services at no additional cost is the preferred course of action when appropriate. In the case of issued Corrective Action Reports (CARs), the Contracting Officer shall take appropriate measures according to inspection of services clause in the contract.

Corrective Action Reports may categorize nonconformance as minor, major or critical IAW the following FAR

46.101 definitions:

“Minor nonconformance” means a nonconformance that is not likely to materially reduce the usability of the supplies or services for their intended purpose or is a departure from established standards having little bearing on the effective use or operation of the supplies or services.

“Major nonconformance” means a nonconformance, other than critical, that is likely to result in failure of the supplies or services, or to materially reduce the usability of the supplies or services for their intended purpose.

“Critical nonconformance” means a nonconformance that is likely to result in hazardous or unsafe conditions for individuals using, maintaining, or depending upon the supplies or services; or is likely to prevent performance of a vital agency mission.

2.2 Government Quality Assurance. The government shall inspect and evaluate the contractors’ performance to ensure services are received in accordance with requirements set forth in this contract. The GPOC will use the contractor’s work schedule, or modified version thereof, to record validation results. Results of the validation then becomes the official Air Force record of the contractor’s performance. Government surveillance of tasks methods other than those listed in the SOW (such as provided for by the Inspection of Services clause) may occur during the performance period of this contract. Such surveillance will be done according to standard inspection procedures or other contract provisions. Any action taken by the CO as a result of surveillance or otherwise in connection with nonconforming supplies or services of the contractor will be according to the terms of this contract and in accordance with FAR 46.102, FAR 46.407, DFARS 46.407 and DFARS PGI 46.407 which specify procedures for reductions of fee or for reductions to the price of a fixed-price contract when supplies are nonconforming or services are not performed or do not meet contract requirements.

2.2.1 The government will periodically evaluate the contractor’s performance in accordance with the Quality Assurance Surveillance Plan (QASP). The government may inspect each task as completed and increase the number of quality assurance inspections if deemed appropriate because of repeated failures discovered during

Page - 6 - of 23 surveillance inspections or because of repeated customer complaints. Likewise, the government may decrease the number of quality assurance inspections if performance dictates.

2.2.2 When an observation indicates defective contractor performance, the GPOC will require the contractor’s Contract Manager or representative at the site to initial the observation. The formal process is, when a performance threshold has not been met or contractor performance has not been accomplished, the GPOC will initiate and provide the CO with a Corrective Action Report (CAR) for issuance to the contactor. The contractor shall respond to the CAR IAW instructions provided and in the CAR. While the formal process of this paragraph addressing unacceptable contractor performance is always available, the Government reserves the right to initiate a less formal process involving the contractor, the GPOC and the CO meeting together at no additional cost to the Government regarding unacceptable contractor performance.

2.3 Performance Assessment

2.3.1 Periodic Surveillance. This method requires the GPOC to employ a “spot check” style of evaluation based on the contractor’s services. Periodic surveillance will be conducted on a scheduled basis (daily, weekly, monthly, quarterly, semi-annual or annually) and may be adjusted, based on quality trends.

2.3.2 Customer Complaints. The GPOC will receive and investigate all complaints. The GPOC will be responsible for validating customer complaints. The CO shall make final determination of the validity of customer complaint(s) in cases of disagreement with the GPOC and the contractor. Validated customer complaints shall be reperformed, if possible, within 3 business days of notification at no additional cost to the Government IAW the inspection clause of the contract and the direction of the Contracting Officer.

2.3.3 Review of Audits. GPOC reviews results of the contractor’s accepted quality management system audits and related quality metrics.

2.3.4 100 Percent Inspection. This method requires the GPOC to do 100 percent inspection on all tasks performed. Appropriate for tasks that occur infrequently. Usually only deals with Safety and/or Security, unless mandated by an Air Force Instruction (AFI) or industry standard.

2.4 Quarterly Progress Meetings. The CO, Government’s Program Manager (PM), /Functional Services Manager (FMS), GPOC, other government personnel as appropriate, and the contractor shall meet quarterly to discuss the contractor’s performance.

The following issues, at a minimum, shall be discussed:

- Opportunities to improve the contract,

- Any modifications required of the contract,

- Unsatisfactory inspections,

- Valid customer complaints against each performance objective observed, and

- Steps taken by the contractor to prevent occurrences in the future.

The contractor shall provide a summation of unsatisfactory inspections and customer complaints and provide insight into any identified trends.

2.4.1 Minutes. The minutes of these meetings will be reduced to writing, signed by the CO and any other signatures as deemed appropriate, distributed to the functional area and the contractor. Should the contractor not concur with the minutes, the contractor will provide a written notification within 5 working days to the CO identifying areas of non-concurrence for resolution.

Page - 7 - of 23

2.5 Government Point of Contact (GPOC). GPOCs are representatives of the CO and will participate in the administration of this contract. After the award of the contract, the contractor will be provided a letter identifying the GPOC and setting forth their duties and authorities. The GPOC is not authorized to change any of the terms and conditions of the contract/task order.

2.6 Quality Control. In compliance with the applicable contract inspection clause(s), develop and maintain an effective quality control program to ensure services are performed IAW this SOW applicable laws and regulations and IAW best commercial practices.

2.6.1 Quality Control Plan (QCP). The contractor shall be required to submit and maintain an acceptable QCP.

Within 7 days after contract award and within 14 days after any need for changes to an existing QCP, the contractor shall submit a QCP to the CO. The CO will notify the contractor of acceptance or required modifications to the plan. The contractor shall make appropriate modifications and obtain acceptance of the plan by the CO within 7 days. The contractor’s QCP shall contain, at a minimum, the following descriptive items:

a. The inspection system covers all services. Description shall include specifics as to the areas to be inspected on a scheduled and unscheduled basis, frequency of inspections, and the title and organizational placement of the inspector(s).

b. The methods to be used for identifying and preventing defects in the quality of services performed.

c. How the records will be kept. Records must document all inspections and corrective or preventive actions taken.

2.7 Contractor’s Performance. The government assesses a contractor’s performance on an ongoing basis, both positive and negative, and provides a record on a given contract during a specified period.

2.7.1 Past Performance Information (PPI). PPI can be provided to other government agencies, as requested.

2.7.2 Contractor Performance Assessment Report (CPARS). Depending on the estimated value of the contract, formal assessment and reporting of contractor performance is required and is documented using the CPARS system. An assessment usually provided on an annual basis is sent to the contractor’s representative for their comment. The contractor will have up to 60 days to review and comment on the assessment.

Page - 8 - of 23

SECTION IV

3.0 GENERAL INFORMATION

3.1. Hours of Operation. The contractor shall perform the services required under this contract during the following hours: 0800 – 1600 Monday through Friday, except Federal holidays or when the government facility is closed due to local or national emergencies, administrative closings, or similar government-directed facility closings. For other than firm fixed price contracts, the contractor will not be reimbursed when the government facility is closed for the above reasons. On occasion, an employee will be required to work on weekends and Federal holidays. The government will notify the contractor within 72 hours’ notice of such an occurrence.

3.2. Contract Personnel

3.2.1 Contract Manager (CM)

The contractor shall designate a Contract Manager (CM) and at least one alternate who are knowledgeable of applicable NSA/CSS destruction guidance, DoDM 5200.01 Volumes 1–4 (Information Security), 32 CFR Part 117 (formerly DoD 5220.22-M/NISPOM), and any relevant Facility Standard Operating Procedures (SOPs) or Technology Control Plans (TCPs). The CM must possess a current Secret clearance and be formally authorized to represent the contractor on all matters related to day-to-day contract performance. The contractor shall submit the name, contact information, and résumé of the CM to the Contracting Officer within two business days of contract award and maintain an up-to-date record for the duration of the contract. The CM or alternate must be available during normal duty hours to meet with government personnel and must be fluent in English with the ability to communicate effectively with both contractor staff and government representatives.

3.2.1.1. Personnel Roster. The contractor may be required to provide a personnel roster consisting of names and other pertinent personnel data to the requiring activity for the purposes of 100% accountability in real-world and exercise situations. The personnel roster shall be updated as individuals are removed and added.

3.2.2. Contractor Employees:

Certifications. Contractor employees shall have current and valid professional certifications and licenses required to perform the work in this SOW before contract award. All certification and licensing requirements by the Federal, State, and local agencies shall be complied with at the contractor's expense.

Contractor Qualifications. The contractor shall utilize employees possessing adequate training, skills, and knowledge to perform the requirements of this contract.

Employee Training. The contractor shall give all training required to meet the requirements of the SOW unless otherwise specified within the SOW or as otherwise approved by the CO. The contractor shall maintain training and experience records for each employee during the period of this contract that reflect that sufficient personnel are qualified to accomplish all tasks required by this contract. Provide the status of employee training upon the government’s request.

English Language. Employees who deal directly with customers will be required to communicate clearly and concisely with the customers in English. This requirement is strict to efficiently perform the contract tasks.

Page - 9 - of 23

3.2.3. Use of Government Employees. The contractor shall not employ any person who is an employee (either military or civilian) of the U.S. Government if employing that person would create a conflict of interest. In addition, the contractor shall not employ any person who is an employee (either military or civilian) of the Department of Defense if such employment would be contrary to the policies contained in DAFI 64-106 – Contracting – Contractor Labor Relations Activities - Chapter 3, Employment of Off-Duty Government Personnel.

3.2.3.1 Employment of Spouses/Dependents. The contractor shall not employ any person who is a spouse or dependent child of a Department of Defense employee (either military or civilian) when such employee would be placed in a conflict of interest or an appearance of a conflict of interest by virtue of such employment.

3.2.3.2. Off-duty Military Personnel. The contractor is cautioned that off-duty active military personnel hired under this contract may be subject to permanent change of station, change in duty hours, or deployment. Military Reservists and National Guard members may be subject to reorder to active duty. The abrupt absence of these personnel could adversely affect the contractor's ability to perform. However, their absence at any time shall not constitute an excuse for nonperformance under this contract.

3.2.3.3 Identification of Contractor Employees

Contractor personnel must identify themselves as contractors during all interactions where their status may not be immediately apparent, such as in meetings, when answering government telephones, or when engaging with external parties, to avoid any misrepresentation as government officials. Additionally, all documents, reports, and deliveries produced by contractor personnel must be clearly marked to reflect contractor authorship or involvement. While working within the 411 FLTS compound, all contractor personnel are required to obtain and visibly always wear a 411 FLTS visitor badge.

Organizational Conflict of Interest (OCI). Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent OCI as defined in FAR Part 9.5.

Any potential instance of OCI must be reported to the CO immediately.

Personal Conflict of Interest (PCI). The term "PCI" means that a contractor employee assigned to the contract has interests which (i) may diminish his/her capacity to give impartial, technically sound, objective assistance and advice in performing this contract, (ii) may otherwise result in a biased work product under this contract, or (iii) may result in an unfair competitive advantage. Any potential instance of PCI must be reported to the CO immediately.

Privately Owned Vehicles. Each contractor employee driving a privately owned vehicle on the installation must carry minimum liability insurance as required by the state. Contractor employees shall adhere to all posted speed limits and shall not use hand-held cellular telephones while driving on the installation for phone calls or texting. Use of seat belts is mandatory. Any contractor employee cited for driving under the influence will have their driving privileges immediately revoked for a period to be determined.

3.3. Continuation of Essential DoD Contractor Services During Crisis.

Per DoDI 1100.22, Policy and Procedures for Determining Workforce Mix, DFARS 237.76, and the Air Force implementation thereof, unless otherwise directed by the CO or COR, it is determined that the services as identified in this SOW ARE essential for performance during a crisis.

(1) All services in this SOW are designated as essential services for performance during crisis, IAW the included clause. Hereafter, the personnel identified by the contractor to perform these services shall be referred to as “Mission Essential Contractor Personnel.”

Page - 10 - of 23

(2) The requirement for continuation of essential services could be as currently scheduled in the SOW however, the schedule will be determined based on the crisis requirements. The CO or GPOC will contact the contractor’s Contract Manager or alternate by telephone or in person to request that essential services be required.

This will be followed up in writing and subsequently by modification to the contract to incorporate the requirements via full text or by reference. The contractor may file a proposal for cost or other impacts under the Changes clause or a Request for Equitable Adjustment.

(3) Within 30 days after award, the contractor shall provide a written list of all “Mission Essential Contractor Personnel” to the CO or GPOC. The list shall identify names and the base location where each employee will perform work under this contract.

(4) The contractor shall develop contingency plans for tasks designated as essential no later than 30 days after the start of the contract to provide reasonable assurance of the continuation of services during crisis conditions.

3.4. Conservation of Utilities. The contractor shall instruct employees in utility conservation practices. The contractor shall be responsible for operating under conditions that preclude the waste of utilities.

3.5 Environmental Protection. The contractor shall comply with all applicable federal, state, and local laws, regulations, and standards that are or may become applicable to the contractor’s activities in performance of this

SOW.

3.6. MISCELLANEOUS PARAGRAPHS:

3.6.1 Freedom of Information Act (FOIA). All official government records affected by this contract are subject to the provisions of the FOIA (5 U.S.C. 552/DoDM 5400.07_AFMAN33-302). Any request received by the contractor for access/release of information from these records to the public (including government/contractor employees acting as private citizens), whether oral or in writing, shall be immediately brought to the attention of the CO for forwarding to the Base FOIA Manager to ensure proper processing and compliance with the Act.

3.6.2. Controlled Unclassified Information (CUI)

(1) The contractor shall comply with DoD Instruction 5200.48_Department of the Air Force Instruction

16-1403 Controlled Unclassified Information (CUI), and the CUI requirements in this contract. The CUI regulation cited in this paragraph sets policy, assigns responsibilities, and prescribes procedures for CUI in the identification, creation, sharing, marking, safeguarding, storage, dissemination, decontrol, disposition, destruction, and records management of CUI documents and materials, and establishes the training required.

(2) Any Contractor employee CUI training required under DoDI 5200.48 _Department of the Air Force Instruction 16-1403 Controlled Unclassified Information, including initial and annual CUI training, shall be accomplished following coordination with the COR/cognizant local CUI authority.

3.6.3 Notification of Debarment/Suspension Status. The contractor shall provide immediate notice to the CO in the event of being suspended, debarred, or declared ineligible by any other federal department or agency, or upon receipt of a notice of proposed debarment from another DoD Agency, during the performance of this contract.

3.6.4 Correspondence. The government singularly identifies each project with a contract number at the time of the award. The contract number is a unique identifier to purposely and permanently represent an awarded project.

The government-issued contract number is to be referenced on all official communication starting upon notice of the award.

Page - 11 - of 23

3.6.5 Post-Award Conference. The contractor agrees to attend any post-award conference convened by the CO IAW FAR Part 42.5. These meetings shall be at no additional cost to the government.

3.6.6 Privacy Act. Working on this contract may require that personnel have access to information protected by the Privacy Act. Contractor personnel shall adhere to the Privacy Act, Title 5 of the U.S. Code, Section 552a, and applicable agency rules and regulations when handling such information.

3.6.7 Records. All records created and received by the contractor in the performance of this contract shall be maintained and readily accessible. Records shall remain the property of the government. The Contractor must maintain and dispose of records following the requirements established in Air Force Instruction 33-322, Records Management, and Information Governance Program, specifically Chapters 1,2, 3, 4, Section 6.1 of Chapter 6, and Attachment 1. The Contractor must turn over all records to the Government upon completion of the contract unless otherwise directed by the Contracting Officer. The Contractor may contact the Edwards AFB Records Management Office at 661-277-3015 for training on records management at no cost, as the contractor ensures compliance with federal, DoD, and Air Force record-keeping requirements.

3.6.8 Insurance. The contractor shall obtain the necessary insurance as required by FAR part 28.3. The minimum amounts of insurance will be maintained IAW FAR 28.307-2.

3.6.9 Subcontracting. The contractor shall ensure that any subcontractor providing services on behalf of the contractor has been approved by the CO prior to any such performance. The subcontractor shall not have a negative performance history or be suspended or otherwise prohibited from doing business with the government.

3.6.10 Data Rights. The government has unlimited rights to all documents/materials produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be government-owned and are the property of the government with all rights and privileges of ownership/copyright belonging exclusively to the government. These documents and materials may not be used or sold by the contractor without written permission from the CO. All materials supplied to the government shall be the sole property of the government and may not be used for any other purpose. This right does not abrogate any other government rights.

3.6.11 Fire Prevention. The contractor shall take all necessary precautions to prevent fires in the units and contractor-furnished and government-furnished facilities while performing any work under this contract. In the event fires do occur, the contractor shall immediately notify the Base Fire Department at 911. The contractor shall then notify the requiring activity and the CO. The contractor shall brief and document its employees monthly on fire safety issues and procedures for reporting fires.

3.6.12 Flightline Driving. Contractor personnel, before operating a vehicle on the airfield, must meet the requirements of DAFI 13-213, Airfield Driving, and must pass all required tests before issuance of an AF Form 483 and possess a valid state issued driver’s license and valid AF Form 483 while driving on the Airfield IAW DAFI 13-213 paras. 2.10, 3.3, & 3.4 Contractor shall maintain records of this training and make them available upon COR or CO request.

3.6.13 Hazardous Materials

(1) Before use, the contractor shall provide the Base Hazardous Material Pharmacy, through the CO, a list of all hazardous materials the contractor brings onto government property and shall submit and AF Form 3952 along with a Material Safety Data Sheet (MSDS) for each Hazardous Chemical listed in OSHA Hazard Communication Standard 29 CFR 1910.1200. The purpose of the inventory is to provide information for Emergency Planning and Community Right-to-Know Act (EPCRA) reporting.

Page - 12 - of 23

(2) Any products that meet the criteria of “Hazardous Waste” must be bar-coded and tracked until permanently removed from government property. Criteria for identifying hazardous waste are contained in Subpart C of 40 CFR Part 261. NOTE: Products containing chlorofluorocarbons (CFCs) or ozone-depleting substances shall not be allowed or approved for use.

(3) The contractor shall ensure that all contractor employees complete the local Air Force Hazardous Communication, HazMat, and hazardous waste training. The contractor shall appoint a primary and alternate HAZMART and Hazardous Waste monitor. Monitors are responsible for training all contractor personnel regarding hazardous material containers maintained on base and completing MSDSs immediately upon receipt of new chemicals, products, or materials.

3.6.14 Inclement Weather. If the base closes due to inclement weather, the contractor will be released by the installation commander, with the general population of the base at no decrement to contract price. The contractor will follow the local procedures for reporting inclement weather as advertised on local television and radio stations.

3.6.15 Section 508 Compliance. The contractor shall support the government in its compliance with Section 508 throughout the development and implementation of the work to be performed. Section 508 of the Rehabilitation Act of 1973, as amended (29 U.S.C. 794d) requires that when federal agencies develop, procure, maintain, or use electronic information technology, federal employees with disabilities have access to and use of information and data that is comparable to the access and use by Federal employees who do not have disabilities, unless an undue burden would be imposed on the agency. Section 508 also requires that individuals with disabilities, who are members of the public seeking information or services from a Federal agency, have access to and use of information and data that is comparable to that provided to the public who are not individuals with disabilities, unless an undue burden would be imposed on the agency.

3.7 Security

3.7.1 General

3.7.1.1 The contractor shall comply with all base security regulations and with actions dictated by Force Protection Condition (FPCON) changes/measures and/or Health Protection Condition (HPCON) changes/measures. For real-world situations/exercises, changes to force/health protection conditions could impact contractor performance of work and can include denial of access to the installation to perform work.

3.7.1.2 The contractor and its employees shall comply with all base traffic regulations.

4.7.1.3 Contractor employees are prohibited from possessing weapons, firearms, or ammunition on themselves or within contractor-owned or privately owned vehicles while on Edwards Air Force Base.

3.7.1.4. The contractor shall report suspicious activity (refer to Edwards AFB Contractor Antiterrorism Awareness pamphlet in APPENDIX 5) to Security Forces at 661-277-3340 in a timely manner.

3.7.2 Required Training

3.7.2.1 AT Level I Training Requirement. Contractor shall maintain and make available to the COR, within 30 days after award, records of Antiterrorism Awareness Level I required training of contractor employees and subcontractor employees who require routine physical access to the installation via 30 day pass, DBIDS Access

Page - 13 - of 23 card or Common Access Card (CAC), both initially and annually thereafter. Level I - Antiterrorism Awareness Training may be taken at https://jkodirect.jten.mil/Atlas2/page/login/Login.jsf for non-CAC holders. CAC holders may complete AT Level I training (Force Protection course ZZ133079) via my Learning at https://lms-jets.cce.af.mil/moodle/. Tracking for each contractor or subcontractor employee is the responsibility of the COR or unit Antiterrorism Representative.

3.7.2.2 Information Assurance Program and IA Training Requirement. Contract employees requiring a Common Access Card (CAC) shall receive documented Information Assurance (IA) training by the government prior to receiving access to the local area network (LAN). Authorized users will receive initial IA orientation and annual awareness training to ensure they know, understand, and apply the IA requirements of Air Force information and IAs. The minimum orientation and awareness requirements for users are outlined in DoD 8570.01-M. IA Program. The contractor shall comply with the established Command, Control, Communication, and Computers (C4) Systems IA program to integrate security education, training, and awareness covering the Communications Security (COMSEC), Computer Security (COMPUSEC), and Emissions Security (EMSEC) disciplines.

3.7.3 Security Clearance Requirements

All contractor personnel assigned to this contract must possess a Tier 3 (T3) security clearance and hold a current Special Access Program (SAP) briefing to access SAP-accredited facilities. Personnel must maintain the required security clearance and access level for the duration of the contract. These security requirements are outlined in the associated DD Form 254, if applicable. The unit security monitor is responsible for initiating the DD254 process.

3.7.4 Additional Security Requirements

Contractor personnel must comply with all applicable SCI and SAP security protocols, including need-to-know enforcement, restrictions on personal electronic devices, and adherence to SCIF/SAPF access procedures.

Required training, such as OPSEC, insider threat awareness, and SAP/SCI indoctrination, must be completed and kept current. Personnel are expected to report security incidents promptly and follow all visitor control and two-person integrity procedures where applicable. Noncompliance may result in removal from the contract or revocation of access.

3.7.4.1 Physical Security

The contractor is responsible for safeguarding all government-provided equipment, information, and property used in the performance of this contract. If work is performed within a government facility, all government spaces, materials, and equipment must be properly secured at the end of each work period, following 411 FLTS security protocols.

3.7.4.2 Key Control.

3.7.4.2.1 Procedures. The contractor shall establish and implement methods of making sure all keys/key cards issued to the contractor by the government are not lost or misplaced and are not used by unauthorized persons.

NOTE: All references to keys include key cards. No keys issued to the contractor by the government shall be duplicated. The contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include the turn-in of any issued keys by personnel who no longer require access to locked areas. The contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the CO.

3.7.2.4.2.2 Lost/Duplicated Keys. In the event keys, other than master keys, are lost or duplicated, the contractor shall, upon direction of the CO, re-key or replace the affected lock or locks; however, the government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due to the contractor. In the event a master key is lost or duplicated, all locks https://jkodirect.jten.mil/Atlas2/page/login/Login.jsf https://lms-jets.cce.af.mil/moodle/ https://lms-jets.cce.af.mil/moodle/

Page - 14 - of 23 and keys for that system shall be replaced by the government, and the total cost deducted from the monthly payment due the contractor.

3.7.2.4.2.3 Authorized Use. The contractor shall prohibit the use of government-issued keys/key cards by any persons other than the contractor’s employees. The contractor shall prohibit the opening of locked areas by contractor employees to permit entrance of persons other than contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the CO.

3.7.2.4.2.4 Lock Combinations. The contractor shall establish and implement methods of ensuring that all lock combinations are not revealed to unauthorized persons. The contractor shall ensure that lock combinations are changed when personnel having access to the combinations no longer have a need to know such combinations.

These procedures shall be included in the Contractor’s Quality Control Plan.

3.7.4.3 Restricted Area Badges. The contractor shall obtain a Restricted Area Badge for all personnel from the 411 FLTS security for entrance to restricted areas prior to commencing work under this contract. If not, the contractor shall be escorted by an authorized escort. The contractor shall receive Airfield Driving training if operating a vehicle on the flightline or in the restricted area.

3.7.5 Computer Security (COMPUSEC).

3.7.5.1 Local Area Network (LAN). The government will provide limited access to the existing LAN to include email capability. The contractor shall not use the LAN for purposes other than work required under this contract.

3.7.5.2 Permission Required

3.7.5.2.1 Common Access Card (CAC). The contractor’s Contract Manager or alternate shall complete all necessary documents for all contractor personnel requiring access to Edwards AFB. Common Access Cards (CACs) shall be required for all on-site contractor personnel. The contractor’s PM shall ensure the government representative in the local organization designated to authorize issuance of contractor’s CACs (i.e. Trusted Agent (TA) receives a Visitor Request for each employee through the MP ICAM (Mission Partner Identity, Credential Access Management) system which has replaced the Trusted Agent Security System (TASS). Contractor personnel shall electronically submit an application to the TA, once approved, set up an appointment at https://rapids-appointments.dmdc.osd.mil/, or go to the Military Personnel Section.

3.7.5.2.2 National Agency Check Investigations (NACI). The contractor shall have current favorable National Agency Check investigations for its employees, from the government, by contract start date, and throughout the life of the contract. These investigations shall be submitted by the government at no additional cost to the service provider.

3.7.6. Contractor Access To Air Force Installations. All contractor employees will be subject to a criminal history background check IAW DoDM 5200.08V3_AFMAN 31-101V3, Installation Perimeter Access Control, 412th Test Wing Integrated Defense Plan (IDP) 31, Volume I (the AFMAN and memorandum are both limited access documents but more details on the requirements/process in terms of background checks can be provided by the Contracting Officer upon request). Vehicle registration, proof of insurance, and a valid driver's license must be presented for vehicles. Installation Commanders may deny access and credentials based on information obtained during identity vetting that indicates the individual may present a threat to the good order, discipline, and morale of the installation.

3.7.6.1 Base Access. Contractor personnel requiring frequent base access to perform work at Edwards AFB will be granted access via an Air Force Materiel Command (AFMC) Form 496, Application for AFMC

Page - 15 - of 23

Identification Card. The prime contractor shall submit a written request on company letterhead to the 411 FLTS business office as well as the 411 security office with the following information (prior to submitting a request for Base access via an AFMC Form 496): 1) contract number, 2) location of work, 3) expiration date (must be on or before contract’s expiration date), and 4) names of employees/ subcontractor employees needing access to the base, to include each employee’s company name.

3.7.6.1.1 It is recommended that the prime contractor provide a copy of the request letter to each employee for verification purposes when the employee comes to the 411-security office to get their AFMC Form 496 signed.

Employees for whom no request letter can be found or provided will result in the employee being asked to return on another date/time so verification can be made.

3.7.6.1.2 Base passes will be limited to the length of the contract, not to exceed 3 years from the date the AFMC Form 496 is submitted to the 411-security office for signature.

3.7.6.1.3 The AFMC Form 496 will be reviewed/approved by the SPO (411 Security), then taken by the contractor employee to the Edwards AFB Pass & Registration Office in Building 3000 for the security portion and issuance of the Base pass.

3.7.6.1.4 Only employees who will be working on the contract consistently/frequently should be submitted for a long-term base pass.

3.7.6.2 Visitors/contractors with driver’s licenses and the ability to obtain base access without another form of identification as an identity proofing document. No States are subject to Real ID Act enforcement at this time.

The Department of Defense will accept standard State-issued driver's licenses and identification cards from all U.S. States and territories as proof of identity. Please visit the Department of Homeland Security's (DHS) website to get the latest information, https://www.dhs.gov/current-status-states-territories. Once the Real ID Act is enforced, the Contractor shall comply fully.

3.7.6.3 Contractor Participation in the Emergency Mass Notification System (EMNS/AtHoc) The contractor shall provide an after-hours contact number or after-hours email in the Emergency Mass Notification System (EMNS) for each of their personnel, whose normal place of duty is on a DoD installation or within a DoD facility.

The contractor shall comply with any additional requirements in DAFMAN 10-206 for emergency operational reporting. Foreign Nationals may participate and may remove themselves from the Emergency Mass Notification System at any time. To update information, personnel can access the globe icon on their system desktop screens and choose the “Access Self-Service” option.

3.7.6.4 Return of Credentials and Vehicle Passes. The contractor shall be responsible for the prompt return of credentials and vehicle passes for: 1) any employee who no longer requires access to the work site; 2) upon request by a CO; and 3) upon completion or termination of the contract. The prime contractor shall ensure that all base identification passes issued to employees and subcontractor employees are returned to the issuing office.

Failure to comply with these requirements may result in withholding of payment.

3.7.7 Required Identification. During performance of the contract, the contractor shall be responsible for obtaining the required identification for newly assigned personnel.

3.7.8. OPSEC. The Contractor shall comply with DOD, USAF, and locally established Operations Security (OPSEC) policies and procedures to protect sensitive and unclassified information and/or equipment, which is furnished to and operated by the Contractor, and prevent compromise of classified information and equipment.

Contractor shall maintain Operations Security (OPSEC) following DOD Directive & Manual 5205.02, DOD Operations Security (OPSEC) Program, AFI 10-701, Operations Security (OPSEC), and Edwards AFB OPSEC policies and procedures.

Page - 16 - of 23

3.7.8.1 OPSEC Training Requirement. Completion of OPSEC Training of contractor employees offered by the Government IAW AFI 10-701, paras. 4.1. and 4.2.3. and if offered, para 4.3, shall be required of all Contractor employees within 60 days of initiating work. Access to mission-critical information will not be allowed until OPSEC education has been completed and documented. This training provides Contractor employees with the requisite knowledge necessary to remain vigilant for possible threats, understand basic security procedures, understand the obligation to report security violations, and the continued obligation to safeguard information. The requiring unit Security Manager/OPSEC Coordinator will coordinate and track completed training with the Contractor.

3.7.8.2 OPSEC Contact. Contact the unit Security Manager/OPSEC Coordinator or Wing OPSEC Signature Manager at (661) 277-2066 for questions or reporting.

3.7.9 Notification Of Government Security Activity And Visitor Group Security Agreements. This contract contains a DD Form 254, DoD Contract Security Classification Specification, and requires performance at a government location in the United States. Before beginning operations involving classified information on an installation identified on the DD Form 254, the contractor shall take the following actions:

(1) Within thirty (30) days of contract award, notify the security police activity shown in the distribution block of the DD Form 254 as to:

(a) The name, address, and telephone number of this contract company’s representative and designated alternate in the U.S. or overseas area, as appropriate.

(b) The contract number and military contracting command;

(c) The highest classification category of defense information to which Contractor employees will have access.

(d) The Air Force installations in the U.S. (in overseas areas, identify only the APO number(s)) where the contract work will be performed.

(e) The date contractor operations will begin on base in the U.S. or in the overseas area;

(f) The estimated completion date of operations on base in the U.S. or in the overseas area; and

(g) Any changes to information previously provided.

**This requirement is in addition to visit request procedures contained in DoD 5220.22-M, National Industrial Security Program Operating Manual.

(2) Prior to beginning operations involving classified information on an installation identified on the DD Form 254 where the contractor is not required to have a facility security clearance, the contractor shall enter into a Visitor Group Security Agreement (or understanding) with the installation commander to ensure that the contractor’s security procedures are properly integrated with those of the installation. As a minimum, the agreement shall identify the security actions that will be performed:

(a) By the installation for the contractor, such as providing storage and classified reproduction facilities, guard services, security forms, security inspections under DoD 5220.22-M, classified mail services, security badges, visitor control, and investigating security incidents; and

(b) Jointly by the contractor and the installation, such as packaging and addressing classified transmittals, security checks, internal security controls, and implementing emergency procedures to protect classified material.

3.8. Safety

3.8.1 Safety Responsibility. It is the contractor's responsibility to ensure its employees and managers have a comprehensive understanding of and full compliance with OSHA requirements. Detailed information is available on the OSHA website at http://www.osha.gov. It is the contractor's sole responsibility for compliance with OSHA, Public Law 91-596. The contractor shall comply with all federal, state and local laws, and Air Force Instructions for the protection of their employees while working on an Air Force Installation or property. The

Page - 17 - of 23 protection of contractor employees is exclusively the obligation of the contractor. Contractors shall manage all work areas to ensure the safety of building occupants, base personnel, or visitors in or near the areas.

3.8.1.1 Required Safety and Health Plan. The contractor shall submit a Safety and Health…