Attachment 3 - Draft PWS.pdf

Defense Counterintelligence and Security Agency Personnel Vetting Fieldwork Services

DRAFT PERFORMANCE WORK STATEMENT

1. INTRODUCTION

1.1. Background

Defense Counterintelligence and Security Agency (DCSA) actively secures the trustworthiness of the federal workforce, the integrity of cleared contractors, and the security of critical technologies and supply chains through comprehensive vetting, industry collaboration, education, and counterintelligence support. By conducting the majority of the Federal Government's Personnel Vetting (PV) and background investigations (BI), DCSA ensures the trustworthiness of the U.S. workforce.

1.2. Requirement

DCSA requires PV investigative products and services, which are necessary to help fulfill the Federal PV mission. This requirement will be met through a combination of Federal fieldwork staff and Contractor personnel via a nonpersonal services contract. The Government will not exercise direct supervision or control over the Contractors performing the requirements outlined in this performance work statement (PWS). Contractor personnel will be accountable solely to the Contractor which, in turn is responsible to the Government.

The Contractor will adhere to standards outlined in this PWS and provide all personnel, equipment, supplies, facilities, transportation, tools, materials, training, supervision, and other items and services necessary to meet the requirements herein, except for those Government-furnished services, equipment and items specified in section 3.

The following sections of this PWS, as supplemented by attachments, technical exhibits, and all applicable publications, cover in significant detail the products required from the Contractor.

1.3. Objectives

The objectives of this requirement are as follows:

• Implement a flexible, cost-efficient business model with the capacity to adapt to iterative policy and process changes—such as those anticipated for Trusted Workforce 2.0 and the National Background Investigation Services’ (NBIS) with agility and urgency as dictated by Executive Agencies;

• Accommodate limitations in the Government’s ability to predict future PV requests (e.g., case/item volume, type, timing, location, and complexity);

• Retain a skilled Contractor investigative workforce trained to the National Training Standards that can rapidly meet a variable, unpredictable demand (see Technical Exhibits A, B, C, and E);

• Obtain consistent, quality investigative products at both the enterprise case level and the item level in accordance with strict timeliness mandates, Federal Personnel Vetting Investigative Standards (FPVIS), Department of Defense (DoD) cybersecurity policies, and DCSA protocols and procedures;

DCSA BI Fieldwork PWS and Exhibits A-M DRAFT

• Ensure investigative quality and integrity by implementing rigorous oversight of the professionalism, accuracy, and ethical conduct of the personnel completing PV investigative products; and

• Support the quality of investigations by ensuring the quality, integrity, compliance, and accuracy of the processes used to complete PV investigative products.

1.4. Scope

The Contractor will complete PV investigative products in accordance with the FPVIS. These products include, but are not limited to, conducting Enhanced Subject Interview (ESI)s, obtaining personal testimony from a variety of sources, conducting record searches, obtaining records from various repositories and reporting information obtained. Locations where performance is required are based on information provided by the individual subjects or developed during the investigation. Investigations will primarily leverage virtual capabilities as authorized by DCSA policies and procedures. DCSA may require in-person collection of information if the Federal Field requires additional support or other circumstances such as the subject requests an in-person interview. The Contractor will provide record checks (LAWE, EMPL, MEDI, etc.) for Data Providers that are not centralized through DCSA. The Government anticipates the majority of the record collection will be obtained through virtual means but there will be some instances that require in-person record collection.

This work also includes completion of investigations and issue resolution of continuous vetting alerts.

Successful performance and completion of these PV investigative products for the Government is required without fail or risk to national security or other agency missions.

The PV mission is evolving, and DCSA anticipates statutory, policy and technological changes during the life of this contract. These changes will have known and unknown impacts to current investigation standards, training standards and operating procedures. Additional uncertainty exists given limitations in the Government’s ability to predict future volumes of PV investigative products. The Contractor must be able to sustain mission support, while adapting to a changing mission environment throughout the life of the contract. Further, the Contractor will provide flexible approaches for conducting investigations for the Federal Government by adapting to emerging uses of collaboration and supporting technologies. The types of functions anticipated include, but are not limited, to the following: training support, user acceptance testing support, and program management.

The PWS will be updated at contract award to incorporate the specific requirements of the selected acquisition track.

• Initial Vetting (Track 1): The Contractor shall provide PV investigative products for initial vetting (Low, Moderate, High Tiers). Investigations will primarily leverage virtual capabilities as authorized by DCSA policies and procedures. DCSA may require in-person collection of information if the Federal Field requires additional support or other circumstances such as the subject requests an in-person interview.

• Other Vetting Scenarios (Track 2): The Contractor shall complete item-level PV investigative products to support the CV program, Upgrades, Re-establishment, and Transfer of Trust. This includes targeted issue resolution, ESIs, record checks, and time-based checks. Investigations will primarily leverage virtual capabilities as authorized by DCSA policies and procedures. DCSA may require in-person collection of information if the Federal Field requires additional support or other circumstances such as the subject requests an in-person interview.

1.5. General Information

1.5.1. Holidays and Other Closures. Government personnel observe the following days as holidays, and Government facilities may be closed on the following days:

New Year’s Day January 1* Martin Luther King’s Birthday Third Monday in January President’s Day Third Monday in February Memorial Day Last Monday in May Juneteenth National Independence Day June 19* Independence Day July 4* Labor Day First Monday in September Columbus Day Second Monday in October Veteran’s Day November 11* Thanksgiving Day Fourth Thursday in November Christmas Day December 25*

*If the date falls on a Saturday, the Government holiday is the preceding Friday. If the date falls on a Sunday, the Government holiday is the following Monday.

In addition to the days designated as holidays, the Government may observe other days designated by Federal Statute, Executive Order, or President’s Proclamation.

It is understood and agreed between the Government and the Contractor that observance of such days by Government personnel will not otherwise be a reason for an extension of performance, or entitlement of additional compensation beyond what is set forth within the contract. In the event that Contractor personnel work during a holiday, the Government will not provide the Contractor any form of holiday or other premium compensation.

In the event of Government closure due to furlough, emergency, or any other reason, the Contractor must contact the Contracting Officer (KO) or the Contracting Officer’s Representative (COR) to receive direction.

1.6. Place of Performance

PV investigative products will primarily leverage virtual capabilities as authorized by DCSA policies and procedures. However, DCSA may require in-person interviews if the Federal Field requires support or other circumstances (i.e., subject requests an in-person interview). The Contractor will provide for various languages spoken throughout the United States. During the life of the contract, there may be a need for fieldwork to be conducted internationally; however this will not be a requirement at notice to proceed. The Contractor will also be required to complete and provide non-automated record checks.

1.7. Contract Type

This is a single-award indefinite-delivery/indefinite-quantity (IDIQ) and firm-fixed unit-price (FFUP) contact. Task orders issued will be for FFUP investigative products priced by product type and/or by the estimated number of hours required to complete a task. The applicability of specific prices at the task-order level is described under section 1.17. of this document. Disincentives may also apply to contract prices, as described under section 6.6. of this document. Daily workload distribution is outlined in the Ordering Guide (Attachment XX) and is determined by ranking contractors based on price, timeliness, quality, and contractor capacity (estimated by the average inventory age of the products). Based on this ranking, a contractor may be awarded a higher amount of daily workload available for a given product.

Workload distributions will be determined every 6 months. Base contract pricing will be determined fair and reasonable prior to contract award but is subject to potential downward adjustment at the task order level. Before allocating additional work on the basis of price, DCSA shall confirm that the Contractor meets the applicable minimum quality, timeliness, and demonstrated-capacity standards. A lower unit price shall not excuse incomplete investigative coverage, deficient work, or noncompliance with required investigative standards.

Changes to the mission environment will potentially require the parties to negotiate prices for new work and/or re-negotiate prices for existing work, as underlying levels of effort increase or decrease. Both DCSA and the Contractor agree to negotiate in good faith using existing pricing as a starting point for such negotiations, as well as data other than certified cost or pricing data obtained at contract award, DCSA workload estimates and Service Contract Labor Standards (SCLS). Proposed price changes that do not align with the above, DCSA workload estimates, and/or SCLS requirements will require substantial and compelling rationale. Pricing negotiated post-award will be determined fair and reasonable by the KO prior to incorporation into the contract.

Updated Service Contract Act Wage Determinations will be incorporated biennially on the anniversary date of task order inception in accordance with Revolutionary Federal Acquisition Regulation Overhaul (RFO) 22.1004-1(d)(2).

Throughout the life of this contract, certain items (records/source interviews/etc.) may be centralized and removed from the requirements of assignable cases to be processed by DCSA directly. DCSA shall offset the reduction in level of effort from the assigned contractor’s pending contract payment for affected cases utilizing the Per Item CLINs (X15-X27). For example, a Basic record Search (CLIN X19) is a sub-component of a High Tier Investigation (CLIN X08). If on any specific High Tier Investigation DCSA decides to centralize the Basic Record Search, meaning that DCSA conducts that Basic Records Search and the contractor does not, then DCSA will subtract the contractor’s CLIN X19 price from the contractors CLIN X08 price to derive the total price due to the contractor for that specific High Tier Investigation (CLINs X08 – CLIN X19 = Case Price for that specific case).

Product unit pricing shall be initially set at the base contract level and adjusted throughout contract performance as appropriate, at the task order level.

1.8. Qualifications and Training Requirements

Contractor personnel performing under this contract that have access to NBIS and the investigative policies/procedures will complete all applicable training referenced in this PWS and as described in Technical Exhibits A, B, C, and E. A complete list of required training is located in Required Contractor Training (Technical Exhibit L).

1.8.1. Training Records

The Contractor will make available certificates of completion for all personnel to the COR or to the KO upon request. Required training will be completed within 120 calendar days of being cleared to work on the contract. Annual refresher training shall be completed each contract year thereafter (based on the original completion date) and will be reported to the COR in the monthly training deliverable.

1.8.2. Training Deliverable

A monthly training deliverable will be submitted to the COR by the 10th calendar day of each month to show all training completed during the reporting period. The report will include: Last name, first name, middle initial (separate fields); course title; date completed; test score, if applicable; and certificate number, if applicable.

1.9. Post-Award Orientation

The Contractor agrees to attend any post-award conference convened by the contracting activity or contract administration office in accordance with RFO subpart 42.302(a)(3).

1.10. Contracting Officer’s Representative(s)

1.10.1. COR(s) and Technical Monitor(s). The KO may appoint one or more CORs and Technical Monitor (TM)s to oversee all technical aspects of the contract and assist with contract administration. The KO will issue a letter of delegation to each COR and TM, copies of which will be provided to the Contractor, stating the responsibilities and limitations of each COR and TM.

1.10.2. Technical Direction. The COR may provide technical direction on contract performance. Technical direction may include any of the following:

• Daily work assignments specifying the types of PV work required, locations of the work, and other relevant details pertaining to the work;

• Instruction to the Contractor that approves approaches, solutions, or refinements; fills in details;

completes the general descriptions of work; and or shifts emphasis among work areas or tasks; and

• Evaluation and acceptance of reports or other deliverables.

Technical direction must be within the scope of work of the contract and any task order thereunder.

DCSA will issue technical direction in writing as required. If, in the Contractor’s opinion, any direction by the COR falls within any of the categories defined at 1.10.3., the Contractor will not proceed and will notify the KO in writing within three days of receiving the communication in question. Promptly thereafter, the KO will advise the Contractor and COR of one of the following:

• The direction is within the scope of the contract and does not constitute a change to the contract;

• The direction is beyond the scope of the contract, and DCSA intends to negotiate a modification to the contract formalizing the change; or

• The direction is beyond the scope of the contract and is thereby rescinded.

1.10.3. Limitations on Technical Direction. The COR and TM do not have the authority to issue any technical direction that does the following:

• Constitutes a change or assignment of additional work outside of the contract;

• Constitutes a change as defined in the clause at RFO 52.212-4(d);

• In any manner causes an increase or decrease in the awarded contract price, or the time required for contract performance;

• Changes any of the terms, conditions or specifications of the contract; or

• Interferes with the Contractor's right to perform under the terms and conditions of the contract.

1.10.4. Supervision of Contractor Personnel. The Government will not directly or indirectly supervise or direct Contractor employees. If the Contractor accepts the direction from any Government employee other than the KO/COR, it will not be considered contractually binding. The COR will only provide the Contractor with technical direction in accordance with the terms of the contract. Any action(s) taken by the Contractor in response to any direction given by any person acting on behalf of the DCSA or any Government official other than the KO or authorized COR will be at the Contractor’s risk.

1.11. Key Positions and Personnel Reporting

Contractor employees identified as key positions or personnel in the Contractor’s accepted proposal at time of award are identified in this contract. The Contractor will retain and maintain key positions and personnel as identified below.

1.11.1. Program Manager. The Contractor will provide a Program Manager who will be responsible for the performance of the work. The name of this person and an alternate who will act for the Contractor when the Program Manager is absent must be designated in writing to the KO. The Program Manager or alternate, will have full authority to act for the Contractor on all contract matters relating to daily operation of this contract. The Program Manager must have a minimum of five years of experience managing programs of similar size, scope and complexity. The Contractor must provide a resume to support that the individual proposed for this position meets the minimum qualification requirements and a letter of commitment on company letterhead with signature of the individual confirming his/her intention to serve in the stated position at contract award.

1.11.2. Facility Security Officer. The Contractor will provide a Facility Security Officer (FSO) in accordance with the National Industrial Security Program Operating Manual (NISPOM). The appointed FSO must meet the requirements specified in 32 CFR part 117 (NISPOM).

1.11.3. Information Technology (IT) Manager. The Contractor will provide an affirming officer for Cybersecurity Maturity Model Certification (CMMC). This individual should be a senior company official with the authority to ensure and verify the organization's compliance, such as a company officer, senior manager, or cybersecurity manager. This individual is held accountable for the accuracy of the compliance attestation, must have the authority to allocate resources to address security gaps, and must be comfortable with the personal liability that comes with the role. The Contractor must provide a resume to support the individual proposed for this position and a letter of commitment on company letterhead with signature of the individual confirming his/her intention to serve in the stated position at contract award.

1.11.4. Quality Control Manager. The Contractor will provide a Quality Control Manager who will be responsible for the Contractor’s Quality Control Plan.

1.11.5. Records Liaison Officer. The Contractor will provide a Records Liaison Officer who will be responsible for the tracking, coordination and resolution of record access issues for the Contractor. This individual will be responsible for reporting record access issues that the Contractor is unable to resolve to DCSA in accordance with paragraphs 3.1.2. and 3.1.3.

1.11.6. Threat Evaluation and Coordination Officer. The Contractor will provide a Threat Evaluation and Coordination Officer who will be the focal point for all foreign threat, terrorism (domestic and foreign), insider threat and serious/aggravated criminal threat issues related to PV investigative products. This person will also serve as the subject matter expert responsible for providing direct liaison, training, and operational coordination/management with DCSA elements on threat referral processes and threat case handling procedures for PV products.

1.11.7. Key Personnel Report. The Contractor will notify the Government, through the submission of a Change of Key Personnel Report to the COR and KO 10 days prior to removing, replacing, or diverting any of its key personnel.

1.12. Service Contract Reporting

In accordance with DFARS 252.204-7023 Alt. I, the Contractor will report ALL Contractor labor hours (including subcontractor labor hours) provided under this contract in the service contract reporting module found at https://sam.gov. Reporting inputs will include labor hours performed during the Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported at any time during the FY, all data must be reported no later than October 31.

Contractors may direct questions to the help desk at https://sam.gov.

1.13. Identification of Contractor Employees

Contractor personnel are not Government employees and do not represent a business concern or other organization owned in whole or in part by the Government, or substantially owned by one or more Government employees. At no time will any Contractor personnel represent themselves as a Government employee. The Government will not be liable for actions of the investigative personnel or other Contractor personnel performing under the awarded contract. Investigative personnel conducting performance of work under the awarded contract will identify themselves as contract investigative personnel in accordance with the DCSA investigative policies and procedures.

1.14. Contractor Travel

Travel may be required to successfully perform this work. Contractors will incorporate all appropriate costs, including any travel costs associated with completing normal investigative products, into their proposed unit prices.

1.15. Organizational Conflict of Interest

Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in RFO subpart 9.5.

Any Contractor that is a primary contractor with a DCSA investigative contract or contract which directly interfaces with performance of an investigative contract, where the PoP is concurrent with the PoP of this effort, is prohibited from proposing or being awarded the PV Fieldwork Services requirement as a primary contractor. This exclusion extends to include contracts presently awarded which will continue https://sam.gov/ through any point of the required PoP of the contract described herein, except where the Contractor is continuing to provide services under FAR 52.237-3 Continuity of Services. This exclusion extends throughout the life of this contract.

Due to the potential of an ensuing real or perceived OCI, the prime Contractor for this contract may not participate in any capacity under DCSA contract number HS002126DE001, or under any future DCSA solicitation or contract for the provision of personnel vetting support services.

The Contractor shall notify the KO immediately if it becomes aware of any other actual or potential OCI involving the Contractor’s work under this contract. Upon instruction from the KO, the Contractor shall submit a mitigation plan detailing how the Contractor will avoid or mitigate an identified significant real or potential OCI. The mitigation plan will be determined to be acceptable solely at the discretion of the KO, and in the event the KO determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may impose other remedies as deemed necessary and appropriate, including prohibiting the Contractor from participation in subsequent contracted requirements which may be implicated by the

OCI.

Subcontracting or entering into a teaming arrangement is not limited; however, KO and COR is to be notified in writing of such proposed subcontractor arrangements as they arise. A risk mitigation strategy must be submitted with the proposal or at any time during the life of this contract when a primary Contractor for another DCSA investigative or investigative support Contract is going to be added as a subcontractor or team-member. The Government reserves the right to approve or reject the proposed risk mitigation strategy before the subcontractor or team-member is added to the contract.

1.16. Period of Performance

Period of performance for this contract includes one five-year base period and five one-year option periods. Performance under any task order issued against this contract may extend through the date specified in paragraph (d) of RFO 52.216-22 Indefinite Quantity, which represents 36 months after the contract award date.

1.17. Ordering

Only a warranted KO is authorized to issue task orders against this contract; however, the COR will assign specific cases or items for Contractor performance up to the order amount (see 1.10.2). Any unliquidated order amount at the end of the task order performance period will be deobligated by the Government.

Pricing will be set at the task order level and will remain in effect under each task order for one year (unless downward adjustments are implemented) and apply to all work assignments placed within that year, regardless of when the work is completed. Moreover, any work added to a task order by modification will also be priced in accordance with the prices in effect at the time that the order was originally placed, as long as the modification and corresponding work assignments occur within a year of the task order being placed.

The Government makes no guarantees as to the amount of work that any individual Contractor will receive apart from those expressly stated within each contract. The number of investigative products assigned to Contractors will fluctuate. Products will first be assigned to the DCSA Federal staff based upon workload capacity, requirements, and circumstances. It is the Government’s intent to assign remaining products to the Contractors as outlined in 1.17.1. and 1.17.2. below; however, the

Government ultimately reserves the right to distribute workload in any way that is deemed to be in the best interest of the Government.

1.17.1. Workload Distribution

Daily workload distribution will be determined using a dynamic, performance-based points system for each product type.

• Evaluation Framework and Valuation:

o Price (evaluated at IDIQ award to ensure fair and reasonable pricing): 50 points o Timeliness of Product Delivery Ratings: 25 points o Quality of Product Ratings: 25 points o Average Age of Pending Inventory to Estimate Contractor Capacity: 25 points

• The resulting cumulative scores will determine the case type ranking for the next 6-month cycle.

• Track 1 Contractors will be ranked at the case type level (Low Tier, Moderate Tier, High Tier)

• Track 2 Contractors will be ranked cumulatively on the entire suite of items. Price will be weighed by volume of the items.

1.17.2. Allocation

Initial Period: After the ramp-up and phase-in period concludes (see 1.20. below), the initial period will begin. This period will be six (6) months. The available daily workload for each product will be allocated primarily based on lowest unit price. The Government will assign workload to the Contractor with the lowest price first, up to their maximum demonstrated resource capacity, before allocating remaining workload to Contractors. Resource Capacity is defined as the Contractor's maximum sustained daily output of investigative products that can be delivered in accordance with the PWS Quality Thresholds, without triggering backlog delays.

Semi-Annual Evaluations: DCSA will evaluate Contractor performance semi-annually to determine daily workload allocations for each product. These evaluations will utilize performance data from the first five months of each six-month cycle, with the sixth month reserved for final calculations. Separately, the Government will monitor standard performance metrics quarterly, commencing the first full quarter after the ramp-up transition period.

Concurrently, the Contractor shall conduct a semi-annual review of its pricing structure to maintain market competitiveness. The Contractor may propose downward adjustments to the pricing schedule by submitting an updated proposal at least thirty (30) days in advance of the proposed effective date.

Subject to the review and written approval of the KO, the lowered pricing will be formally executed via a bilateral task order modification.

Unsatisfactory Performance: DCSA reserves the unilateral right to reduce workload distribution at any time if a contractor's performance falls below acceptable thresholds for timeliness or quality at the individual product level.

1.18. Waivers

The Contractor will inform the KO as soon as possible if it is apparent or suspected that it will be unable to adhere to the terms of the contract. In the event that circumstances outside the Contractor’s control inhibit or prohibit satisfactory contract performance, the Contractor may submit a formal written waiver request for the KO’s consideration. Each request must include sufficient supporting detail including, but not limited to, the following:

• The section of the contract for which the waiver is requested;

• Identification of the contract term that cannot be met;

• A list of all items, cases or deliverables affected (if applicable);

• Explanation and circumstances leading to the waiver request;

• Explanation of efforts that will be undertaken by the Contractor to regain compliance (if applicable);

• Identification of any action requested from the Government to allow the Contractor to regain compliance (if applicable); and

• Timeframe for which the waiver is requested.

Submission of a waiver request does not excuse the Contractor from its obligation to comply with all terms and conditions of the contract. Contractors must meet all contract requirements until a waiver is granted by the KO.

1.18.1. Timeliness Waiver Exceptions

A waiver of timeliness may only be granted by the KO in writing, and strictly limited to the following exceptions:

• Government Control Exception: The item was transmitted via an approved electronic method and was received at the designated Government gateway prior to the deadline, but was delayed due to systemic Government infrastructure failure or direct action of Government personnel

• Excusable Delay Exception: The delay is caused by an occurrence beyond the reasonable control of the Contractor, and without its fault or negligence (as defined in RFO 52.212-4(f).

• KO deems it is in the best interest of the Government.

To request a timeliness waiver, the Contractor must submit a written Request for Timeliness Waiver with full particulars to the KO within forty-eight (48) hours of the initial delay event. The burden of proving that a delay meets the criteria for an exception rests solely on the Contractor. The KO retains sole, non-appealable discretion to determine whether the Contractor’s evidence satisfies the criteria for an exception.

1.19. Use of DCSA Emblem

The Contractor is authorized to utilize specific DCSA templates for business cards and facsimile cover sheets as indicated in “Authorization to Use the DCSA Emblem and Fax Cover Sheet” (see 7.1.8.).

1.20. Ramp-Up Period and Phase-In Period

1.20.1. Duration. The ramp-up period will last three months and begins upon award of the basic contract and ends once the Contractor has met all prerequisite requirements to the satisfaction of the Government (but no earlier than three months). The Government will not issue any task orders during the ramp-up period. Once the prerequisite requirements are met, the KO will issue a task order. At this point, the three-month phase-in period will commence, during which the Government may limit workload assignments until it has full confidence in the Contractor. Thus, Contractors will have 6 months

(three months for ramp-up tasks, followed by a firm three months for phase-in tasks) to reach full capability. Additional details regarding the ramp-up and phase-in periods are addressed below.

1.20.2. Prerequisite Requirements. Before commencement of case assignment in the phase-in period, the Contractor must satisfy the following prerequisite requirements to the satisfaction of the Government:

• Within 15 days of contract award, submit a Ramp-Up Timeline and Strategy for Government approval. The plan will identify the Contractor’s strategy, phases, and milestones for successful completion of the ramp-up period. At a minimum the plan should include strategies for staffing, gaining system access, securing equipment (i.e., laptops) needed for contract performance and understanding the workload and functional environment. Contractors may propose a performance start date within their ramp-up plans. The plan will also address the management structure, management functions, corporate resources, program management and staffing capabilities (including subcontractors) that will support the Contractor’s ability to complete the ramp-up period.

• Obtain common access cards (CACs), as applicable.

• Obtain credentials, as applicable.

• Complete all IT Security requirements and obtain approval from the Authorizing Official.

• Obtain IT access and account creation.

• Complete all security requirements within the DD Form 254 (DD 254).

• Complete all training referenced in this PWS and described in the requirements (see Technical

Exhibits A, B, C, and E).

• Submit a finalized quality control plan (QCP) for Government review and approval within 30 days of the contract effective date.

1.20.3. Performance. Upon completion of the ramp-up period and commencement of the phase-in period, DCSA will begin assigning cases to the Contractor via issuance of a task order. Case types and volume of work will be closely monitored and adjusted during the phase-in period as the Contractor demonstrates its ability to meet the performance standards as defined in section 5 (Specific Tasks). If, at the conclusion of the phase-in period, the Contractor fails to demonstrate readiness or meet the required performance standards, DCSA reserves the right to withhold all further case assignments and cease workload distribution under the task order.

1.20.4. Evaluation. Once the phase-in period begins, the Government will measure, monitor, and report timeliness performance standards in accordance with section 6; however, timeliness disincentives will be waived, no offsets will be deducted during this three-month period. Further, timeliness performance during this time will not factor into Contractor evaluations in the Contractor Performance Assessment Reporting System (CPARS). All other performance elements will be measured. Cases scheduled during the phase-in period and completed after the phase-in period has ended will be subject to timeliness disincentives, if applicable.

1.20.5. Start-up Costs. The Contractor is expected to fully fund its operations during the ramp-up period and will not receive funding or reimbursement from the Government to cover those costs. Therefore, the Contractor may incur substantial costs in implementing its PV fieldwork program.

1.20.6. Phase Out. The Contractor will submit a comprehensive Transition-Out Plan to the KO and COR for approval no later than 60 calendar days prior to contract expiration. This plan shall outline the schedule, methodology, and specific milestones for the transfer of program management, active tasks, tools, documentation, historical data, and lesson-learned materials. The Contractor will coordinate with the Government to execute all milestones identified in the approved Transition-Out Plan, ensuring zero degradation to daily operations.

1.21. Packaging, Labeling, and Shipping

1.21.1. Inspection and acceptance of products rendered under this contract will be made by the COR.

1.21.2. Shipping of case materials will be done on a limited basis, and requires a manifest and method of shipment that is in accordance with the Requirements for the Protection of Personally Identifiable Information (PII) (see Technical Exhibit E).

1.21.3. Unless otherwise specified, the Contractor will deliver all products/deliverables furnished hereunder, either electronically in NBIS or other system as designated by DCSA. Hard copy submission must be approved in advance by the COR.

1.21.4. Based on the determination of the COR, the Contractor will deliver some projects using special handling, including overnight delivery.

2. DEFINITIONS AND ACRONYMS

2.1. Definitions

Case Material. Case material is any document in any media created in the field that is not retained as part of the agency/permanent case file, including (but not limited to) interview notes, case papers, quality control personnel notes with written notations. Records relating to the maintenance and disposition of these files will be provided immediately upon request of the Government and available to DCSA at the conclusion of the Contract. The Contractor is responsible for establishing inventory and accounting procedures necessary to ensure completion of these tasks. Records will be retained in accordance with the Requirements for the Protection of Personally Identifiable Information (see Technical Exhibit E).

Contracting Officer (KO). A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the Government. The KO is the only individual who can legally bind the Government.

The KO has the overall responsibility for the awarded contract. The KO alone, without delegation, is authorized to take actions on behalf of the Government to amend, modify or deviate from the contract terms, conditions, and requirements. The KO may delegate certain other responsibilities to authorized representatives, COR or TM. The KO is the only person authorized to issue task orders. In the event, the Contractor effects any changes at the direction of any person other than the KO, the change will be considered to have been made without authority and no adjustment will be made to the contract price or any other term in the awarded contract.

Contracting Officer’s Representative (COR). An employee of the U.S. Government appointed by the KO to administer the contract. Such appointment will be in writing and will state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

Contractor. An Offeror, supplier or vendor awarded a contract to provide specific supplies or products to the Government. The term used in this contract refers to the prime.

Credential. An identification card and insert provided by DCSA to investigators that meet the clearance and training requirements of this Contract.

Deficiency. A service output that does not meet the standard of performance associated with the PWS.

Deliverable. Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

Employee/Personnel. The Contractor will provide all labor needed for the performance under the awarded contract. The term ‘employee’ or ‘personnel’ indicates individuals that have been cleared by DCSA to perform work for the Contractor under the awarded contract, regardless of that individual’s legal employment status with the Contractor.

Inactive. The term “inactive” means that the individual is not actively engaged on the contract due to reasons such as, but not limited to, annual leave, sick leave, military leave, Family Medical Leave Act, lack of work, or Contractor furlough. The term “inactive” does not include Contractor personnel that have been terminated, removed or suspended from the Contract.

Key Positions/Personnel. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract.

Personnel Investigations Processing System (PIPS). DCSA’s mainframe computer system used for processing BIs and PV products.

Phase-In Period. The three-month phase-in period after the ramp-up period, during which the Government may limit workload assignments until it has full confidence in the Contractor.

Physical Security. Actions that prevent the loss or damage of Government property.

Quality Assurance. The Government procedures to verify that products being completed by the Contractor are delivered according to acceptable standards.

Quality Assurance Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of Contractor performance.

Quality Control Plan (QCP). All necessary measures taken by the Contractor to assure that the quality of an end product will meet contract requirements.

Ramp-Up Period. The ramp-up period will last three months, and begins upon award of the basic contract and ends once the Contractor has met all prerequisite requirements to the satisfaction of the Government, but no earlier than three months. The Government will not issue any task orders during the ramp-up period. Once the prerequisite requirements are met, the KO will issue a task order.

Subcontractor. One that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subcontractor.

Technical Monitor. An employee of the U.S. Government appointed by the KO to administer the contract. Such appointment will be in writing and will state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

Trusted Workforce (TW) 2.0. The TW 2.0 initiative is the comprehensive personnel vetting reform effort designed to better support agencies' missions by reducing the timeframe to on board new personnel, enabling mobility of the Federal workforce and improving insight into behaviors to ensure the protection of people, property, information, and mission.

2.2. Acronyms

AVS Adjudication and Vetting Services AO Authorizing Official API Application Programming Interface AUP Acceptable Use Policy BI Background Investigation BIES Background Investigations Enterprise Systems BT Begin Time CAC Common Access Card CAF DoD Consolidated Adjudications Facility CE Continuous Evaluation CFR Code of Federal Regulations CMS Case Management System CND Computer Network Defense CM Continuous Monitoring CIAR Counterintelligence Awareness and Reporting CISO Chief Information Security Officer CJA Criminal Justice Agency CMMC Cybersecurity Maturity Model Certification CONUS Continental United States COR Contracting Officer’s Representative CPARS Contractor Performance Assessment Reporting System CRM Customer Responsibility Matrix CSP Cloud Service Provider CUI Controlled Unclassified Information CV Continuous Vetting C3PAO CMMC Third-Part Assessment Organization DCSA Defense Counterintelligence and Security Agency DFARS Defense Federal Acquisition Regulation Supplement DISS Defense Industrial System for Security DoD Department of Defense DODCAF DoD Central Adjudication Facility DOD Safe Department of Defense, Safe Access File Exchange DOW Department of War DPRIS Defense Personnel Records Information System EDR Endpoint Detection and Response EFI Expandable Focused Investigation EMPL Employment (Record Check) eOPF Electronic Official Personnel Folder ESI Enhanced Subject Interview ET End Time FAR Federal Acquisition Regulation FCI Federal Contract Information FedRamp Federal Risk and Authorization Management Program FF Fieldwork Finished FFUP Firm-Fixed Unit-Price FIN Federal Investigative Notice

FIPS Federal Information Processing Standards FIS Federal Investigative Standards FISMA Federal Information Security Management Act FOCI Foreign Ownership, Control, or Influence FOIA Freedom of Information Act FOIP Freedom of Information and Privacy Office FPVIS Federal Personnel Vetting Investigative Standards FSO Facility Security Officer FWS Field Work System FY Fiscal Year GFI Government-Furnished Items GCA Government Contracting Activity HRH High Risk Handling IA Information Assurance IDIQ Indefinite-Delivery/Indefinite-Quantity IL5 Impact Level 5 IT Information Technology ISI Information Security Incident ISSO Information Security Oversight Office IST Investigative Suite of Tools IVM Integrated Vetting and Monitoring Platform KO Contracting Officer LAWE Law Items LEA Law Enforcement Agency LH Labor Hour LMS Learning management System MEDI Medical (Record Check) MILR Military Record NAC Network Access Control NARA National Archives and Records Administration NBIS National Background Investigation Services NISP National Industrial Security Program NISPOM National Industrial Security Program Operating Manual NIST National Institute of Standards and Technology NI2 National Industrial Security System Increment 2 NIPR Non-classified Internet Protocol Router Network NLETS National Law Enforcement Telecommunications System NTS National Training Standards OCI Organizational Conflict of Interest OIG Office of the Inspector General OJT On-the-Job Training OLEE Office of Law Enforcement Engagement OMB Office of Management and Budget OPIS OPM PIPS Imaging System OPSEC Operations Security OTKS Occupational/Technical Knowledge and Skills PAS Privacy Act Statement PCLF Office of Privacy, Civil Liberties, and Freedom of Information

PDT Position Designation Tool PI Performance Indicator PIEE Procurement Integrated Enterprise Environment PII Personally Identifiable Information PIPS Personnel Investigations Processing System PIU Primary Investigative Unit PM Program Manager PMO Program Management Office PMR Program Management Review PSP Personnel Security Program PTQR Performance Timeliness and Quality Report PV Personnel Vetting PWS Performance Work Statement QASP Quality Assurance Surveillance Plan QCP Quality Control Plan RAPIDS Real-Time Automated Personnel Identification System RFO Revolutionary Federal Acquisition Regulation Overhaul RMF Risk Management Framework ROI Report of Investigation RSI Reimbursable Suitability Investigation RT Report Transmitted SAAR System Authorization Access Request SCA Service Contract Act SCLS Service Contract Labor Standards SEAD Security Executive Agent Directive SID Staff Identification (in PIPS) SMO Submitting Office (in DISS) SPRS Supplier Performance Risk System SRG Cloud Computing Security Requirements Guide STEPP Security Training, Education, and Professionalization Portal STIG Defense Information Systems Agency, Security Technical Implementation Guides STR Sponsorship Transfer Request SUBC Non-Confrontational Subject Contact TBC Time-Based Check TE Technical Exhibit TESI Triggered Enhanced Subject Interview TID Trigger Identifier TM Technical Monitor TO Task Order TW Trusted Workforce UC Unable to Contact U.S.C. United States Code USDI Under Secretary of Defense for Intelligence USPS United States Postal Service VAR Visit Authorization Request VDI Virtual Desktop Infrastructure VTC Video Tele-Conference

ZT Zero Trust ZTNA Zero Trust Network Access

3. GOVERNMENT-FURNISHED SERVICES, EQUIPMENT, AND ITEMS

3.1. Services

3.1.1. IT Helpdesk Support for applications. The Helpdesk will assist with issues relating to connectivity to DCSA systems.

3.1.2. Law Enforcement Records and Reports. To the extent necessary to perform its obligations under the awarded contract, the Contractor may request that DCSA help facilitate access to any Federal, state, or local law enforcement agency investigation reports or other law enforcement records. The Contractor is responsible for informing DCSA of all law enforcement agencies that decline to release such reports or records to it, or place constraints on the release of those records. The Contractor will report this information in accordance with Guidelines for Reporting Criminal Justice Agencies (see 7.1.6.) and using the Criminal Justice Agency (CJA) Notification Form in DoD 365 SharePoint (see 3.1.3.). DCSA will dialogue with the entity in an effort to facilitate Contractor’s access to the required reports or records.

Upon request from DCSA the Contractor will provide access protocols for identified repositories. DCSA will take reasonable steps to facilitate the Contractor’s access to the same records and databases of State and local law agencies to which DCSA has access for work requirements under the awarded contract. The Contractor is responsible for any fees that are associated with obtaining records to provide a complete report of investigation.

3.1.3. Criminal Justice Agency Notification Form. The Contractor will submit the information required in section 3.1.2. via SharePoint. The COR will provide the hyperlink. The Contractor will utilize and reference the existing submissions and Office of Law Enforcement Engagement (OLEE) determinations on the SharePoint site when conducting this work.

3.1.4. Automated Databases and Website Search Use. DCSA conducts certain record checks through automated systems. The Contractor is responsible for associated extension coverage on those items as scheduled by DCSA or when records are not available in the automated systems. DCSA authorizes the Contractor’s use of automated record systems in accordance with DCSA’s web-validation approval document, which is updated periodically. A list of participating Electronic Official Personnel Folder (eOPF) agencies may be updated periodically and made available to the Contractor. The Contractor is responsible for obtaining those items that are only available in hardcopy, which would be all other agencies. A copy of the current eOPF agencies and DCSA’s web validation approval document will be placed in the reading room. Some statewide law checks are completed by Federal staff.