Attachment 3 Performance Work Statement (PWS).pdf

May 25

PERFORMANCE WORK STATEMENT (PWS)

Fort Gordon Instructor & Training Support Services (ITSS)

Part 1 General Information

1. General: This is a non-personal services Multiple Award, Indefinite-Delivery Indefinite- Quantity (MAIDIQ) to provide CCoE Instructor and Training Support Services (CITSS) at the Cyber Center of Excellence (CCoE). The Government will not exercise supervision or control over contractor personnel. The Contractor is responsible for the conduct and performance of contractor personnel.

1.1 Description of Services: The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and non-personal services to perform CITSS as defined in this Performance Work Statement (PWS) except for those items specified as Government furnished property and services. The Contractor shall perform to the standards in this contract and awarded Task Orders (TO).

1.2 Background: The CCoE provides education and training support to the United States (U.S.) Army, foreign military, other services, and civilian personnel for military occupational specialties and professional development. The CCoE consists of the U.S. Army Signal School, U.S. Army Cyber Schools, and the Cyber Noncommissioned Officers Academy (CNOCA). The CCoE trains Signal, and Cyber Advanced Individual Training (AIT), functional training, and Professional Military Education (PME). Mobile Training Teams (MTT) may be required to support the Army’s Sustainable Readiness Model (SRM) and other operational requirements.

MTT training takes place on Active Component, Reserve Component and Department of Defense (DoD) installations/sites located in the Continental United States/Outside the Continental United States (CONUS/OCONUS). Training provided by the CCoE can be classroom training and/or hands-on performance-oriented training, simulation/virtual training and/or field exercise training or any other Training and Doctrine Command (TRADOC) approved training venue. Additionally, training provided at these locations requires a responsive organization of training support to include training and doctrine development.

1.3 Objectives: This MAIDIQ will acquire services for the CCoE in support of its training mission. The objectives are to develop and provide doctrinally sound performance-oriented training and training support to the schools for their training mission using the TRADOC approved Programs of Instruction (POI). Specific regulations, directives, Standard Operating Procedures (SOP), will be identified at the Task Order level.

1.4 Scope: This acquisition will equip the CCoE with comprehensive, performance-oriented training and training support services under one contract vehicle. These required services will support the development and execution of Military Occupational Specialty (MOS) training in Career Management Fields (CMF) 25, and 17, with technically competent Signal, Cyber Warfare Cyberspace Effects and Electromagnetic Warfare (EW) workforce, educated and trained to Army and Joint standards, to fulfill commanders' strategic, operational, and tactical requirements within the Cyberspace domain and the Electromagnetic Spectrum in support of (ISO) the full range of Multi-Domain Signal, Cyber and Electromagnetic Warfare Operations.

The CCoE is responsible for intra-service and functional education and training to develop knowledge, skills, and abilities related to Defensive Cyberspace Operations (DCO), Offensive Cyberspace Operations (OCO), Electromagnetic Warfare (EW), and cyberspace planning, integration, and synchronization. Specific requirements for training and training support will be identified at the task order level.

1.5 Place of Performance: Individual Task Orders will specify the place of performance;

however, while work is to be performed primarily at Fort Gordon GA, it does have elements in other locations, to include but not limited to, Fort Cavazos, TX, Joint Base Lewis McCord, WA, Camp Robinson AR, Fort McCoy, WI, and Fort Bragg, NC. During the government’s response to pandemics, or in response to DoD-mandated guidance, when feasible and upon approval by the Contracting Officer’s Representative (COR), work may be performed at alternate duty/remote locations. Working from an alternate duty/remote location will be at no additional expense to the government. Personal or company issued equipment may not be used to access the government network infrastructure unless pre-approved; examples include using a Virtual Private Network (VPN).

1.5.1 Travel: Contractor employees may be required to travel CONUS/OCONUS during the performance of this contract to attend meetings, conferences, and training. The Contractor will be authorized travel expenses consistent with the substantive provisions of the Joint Travel Regulation (JTR) and the limitation of funds specified in this contract. Government written approval/authorization shall be obtained prior to incurring any travel expenses. The contractor shall obtain written confirmation from the COR that concurs with the planned travel dates, expected duration, origin and destination, purpose, travelers and total estimated cost. It is the responsibility of the contractor to obtain all necessary travel documents to execute travel as required. Trip reports include Invoices and executive summary. The contractor shall submit invoices for reimbursement citing the appropriate Contract Line-Item Number (CLIN). All supporting documentation for travel must be legible, error free, and must state the exact amount the Government owes the vendor to be submitted with the monthly invoice in Wide Area Workflow (WAWF) as well as to the COR within 5 days of travel.

1.6 Hours of Operation: The contractor is responsible for conducting business between the hours of 0800 to 1700 Monday thru Friday except Federal holidays, Executive Orders, or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Contractor must at all times maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the qualified workforce are essential.

Shift Work may be required for instructors only and will be identified at the Task Order level.

(a) In the event shift work is required, anticipated shift schedule is as follows:

Day Shift 0800-1700 Swing Shift 1530-0030

Midnight Shift 2330-0830

(b) In the event that personnel assigned to this contract are required for early/late/weekend school retraining of students or needed for classroom observation the anticipated hours are:

Alternate Day Shift 0630-1030 and 1500-1900 Alternate Swing Shift 1300-1700 and 1900-2300 Alternate Midnight Shift 2100-0100 and 0300-0700 Weekend Shift 0830-1330 on Saturdays, with five hours shifted from weekday work.

(c) Specific operating hours and days may vary and will be identified at the Task Order level.

(d) Contractor personnel work schedules may be “flexed” to meet the training needs of the organization for weekend and extended duty periods during regular training and exercises, while still adhering to the standard 40-hour work week.

1.6.1 Federal Holidays: The days specified below are legal Federal holidays during which non-essential work will not be required of the contractor. If the holiday falls on a Saturday, it is observed on Friday; if the holiday falls on Sunday, it is observed on Monday.

New Year’s Day 1st day of January Martin Luther King Birthday 3rd Monday in January Presidents Day 3rd Monday in February Memorial Day Last Monday in May Juneteenth 19th day of June Independence Day 4th day of July Labor Day 1st Monday of September Columbus Day 2nd Monday in October Veterans Day 11th day of November Thanksgiving Day 4th Thursday of November Christmas Day 25th day of December

1.6.2 Weather Conditions: In the event of inclement weather, the contractor shall comply with the local installation’s Inclement Weather Policy.

1.7 Type of Contract: The Government will award a Firm-Fixed-Price (FFP) Multiple Award IDIQ contract. TOs under this IDIQ will be FFP with cost-reimbursable Contract Line Item Numbers (CLINs) for travel.

1.8 Quality Control: The contractor is responsible for the quality of the products/services delivered under the terms and conditions of this contract and all TOs. The contractor shall develop and maintain an effective Quality Control Plan (QCP) to ensure services are performed in accordance with this contract. The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The contractor shall include in the QCP a plan to report problems or potential problems to the COR that affect performance under the contract and/or Task Order. The report shall address, at a minimum, the nature and source of the problem, Government action required the impact on performance and/or cost, and corrective action needed. The initial QCP shall be delivered with the contractor’s Multiple Award Task Order Contract (MATOC) proposal. After award, the final QCP shall be delivered within 30 days of start date to the COR and within 5 working days when changes are made thereafter. After acceptance of the quality control plan the contractor shall receive the COR’s acceptance in writing of any proposed change to their QCP. The Government reserves the right to request a QCP be submitted at task-order level.

1.9 Nondisclosure, Personally Identifiable Information (PII) and Organizational Conflicts of Interest: PII may reside on systems used, accessed, or in the immediate work area where contractor personnel may be performing. The contractor shall ensure all assigned contract employees are briefed on Privacy Act requirements. All contractor personnel shall adhere to the Privacy Act, 5 U.S.C § 552a and applicable agency rules and regulations related to PII.

Some Task Orders may require contractor employees to sign a Non-Disclosure Agreement (NDA), provided by the Government. This requirement will be identified at the task order level.

1.9.1 Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive access to, or participate in, the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflicts of Interest (OCI) as defined in Federal Acquisition Regulation (FAR) Subpart 9.5. The contractor shall notify the Contracting Officer immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the Contracting Officer to avoid or mitigate any such OCI. The contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the Contracting Officer and in the event, the Contracting Officer unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated. The Contracting Officer may affect other remedies as he or she deems necessary, including prohibiting the contractor from participating in subsequent contracted requirements that may be affected by the OCI. The contractor shall not employ any person who is an employee of the U.S. Government if employing that person would create a conflict of interest as established in DoD 5500.7-R, JER. Additionally, the contractor shall not employ any person who is an employee of the Department of the Army (DA), either military or civilian, unless such person seeks and receives approval IAW DoD 5500.7-R, JER. If there is any doubt, it is highly recommended that the contractor obtains legal counsel, at its own expense, to determine if an actual or perceived conflict of interest exists.

1.9.2 Disclosure of Activities or Information: Neither the contractor nor its employees shall disclose nor cause to be disclosed any information, the release of which could result in or increase the likelihood of a breach of security or adversely affect the continuity of Government operations. In the performance of PWS services, the contractor may access data and information proprietary to a Government agency, or another Government contractor, or of such nature that its dissemination or use other than as specified in the performance of this PWS would be adverse to the interests of the Government or others. Neither the contractor, nor their personnel, shall divulge or release data or information developed or obtained under performance of this PWS, except to authorize Government personnel upon written approval from the Contracting Officer or COR. Additionally, the contractor shall not use, disclose, or reproduce proprietary data, which bears a restrictive legend, other than as specified in performance of PWS services. The contractor shall be responsible and liable for all unauthorized disclosures of classified and protected information, regardless of the likelihood of compromise or the degree of harm to national security that may result. The contractor shall refer outside requests for information to the Government. The contractor shall obtain prior permission from Fort Gordon, GA Public Affairs Office (PAO) for the use of any Fort Gordon, GA logos, and photos in any advertisements or announcements.

1.10 Key Personnel: Experienced, professional and/or technical personnel are essential for successful accomplishment of the work at the contract level. Such personnel shall not be removed or replaced within the performance of this contract unless fully documented in writing with prior approval of the COR.

(a) Program Manager ( PM) support requirements will be identified at the Task Order level. The PM is considered key personnel by the Government. The name of this person shall be designated in writing and submitted to the Contracting Officer. The Program Manager shall have full authority to act for the Contractor on all contract matters relating to daily operation at the Task Order level. PM minimum qualifications shall be established at the Task Order level.

(b) Task Orders may require key personnel. Such personnel shall be identified by name, and their qualifications shall be submitted for evaluation during the Task Order source selection process as stated in the Task Order request for proposal.

1.10.1 Personnel Experience and Training, Certifications and Licenses: The individual Task Orders will identify the education, training, certification, and license qualifications required for and/or directly related to Task Order performance. All contract instructors and training developers must complete the required Faculty and Staff certification course(s) in order to (IOT) obtain TRADOC certification. Any employee or supervisor who is not successfully performing the requirements of the individual Task Orders shall be replaced with a qualified individual. All contractor employees, prior to commencing any work under this contract and subsequent Task Orders issued shall have received all training required for the effective performance of the functions they will perform (unless directed otherwise by the Contracting Officer). The contractor shall obtain and maintain all certifications, inspections, and licenses required to perform the tasks within the PWS. Specific training, certifications, and licenses that are required to perform the tasks of this PWS are specified in individual Task Orders. Unless otherwise indicated in the Request for Task Order Proposal (RTOP), the CCoE will accept completion of Common Faculty Development Course (CFDC) within 90 days after Task Order award or a documented course reservation within 30 days of award. TRADOC instructor / developer certification expire every 5 years.

1.11 Citizenship: All contractor employees performing work under this PWS shall be citizens of the United States.

1.12 Employee Standards of Conduct: Contractors shall ensure that their written code of business ethics and conduct promotes an understanding of provisions within the Joint Ethics Regulation (JER) that govern their interactions with military and civilian employees. Upon receipt of allegations or other indications of misconduct or conduct that reflects negatively on the Army or RAs involving contractor personnel, the contractor will be notified and will be required to investigate the matter fully and report corrective actions (if necessary) to the COR and the Contracting Officer. The contractor is responsible for the conduct of its employees and shall take prompt, reasonable, and appropriate disciplinary action against employees for misconduct. The removal or barring of a contractor employee from a work site shall not relieve the contractor of the obligation to perform all requirements of the contract. Contractor personnel will be denied access to and/or removed and barred from sites when their presence is determined by competent authority to be detrimental to security, to the health, welfare, or well-being of persons, or to the accomplishment of work. The Government expressly reserves the right to remove and bar a contractor employee whose activity, on- or off-site, endangers persons or property, or whose presence on site presents an unacceptable risk to safety or security. If an employee is removed or barred from Post, the Contracting Officer shall advise the contractor of the reason(s).

1.12.1 Treatment of Students: Contractor employees must adhere to TRADOC Reg. 350-6, Initial Entry Training (IET) Policies & Administration, AR 350-1, Army Training and Leader Development, and other policies associated with individual courses, which will be provided by the Government with the Task Order. The contractor must treat all students in a professional manner and shall not accept personal remuneration for services rendered in the performance of duty. The contractor shall not engage in social activities with students unless specifically authorized by the Contracting Officer or COR.

1.12.2 Interaction with Other Support Contractors: The contractor shall normally interface directly with the Contracting Officer or COR. The contractor shall not direct other support contractor personnel and will not be directed by support contractors. The contractor shall fully cooperate with support contractors and Government employees in regard to the performance of work under this PWS. If the contractor believes that such cooperation would create an OCI or constitute a breach of a nondisclosure agreement entered into pursuant to this contract, the contractor should immediately report that concern to the Contracting Officer or COR.

1.12.3 Fraud, Waste, and Abuse: Contractor personnel shall be alerted to suspected situations of fraud, waste, and abuse against the Government that are observed during the performance of this PWS. The contractor shall take corrective action within the contractor’s area and immediately report these situations to the Contracting Officer or COR.

1.13 Contractor Organization: The contractor is encouraged to utilize an organizational structure that best fulfills the needs, requirements, resources, and efficiencies of the requiring activities (RA). The organizational structure developed by the contractor shall provide for a smooth and efficient interface with the Government.

1.14 Security Requirements: The contractor shall comply with the security regulations and requirements specified in Contracts Security Classification Specifications, DD Form 254 and addendums sheets. The contractor shall appoint a security officer, who shall (1) be responsible for handling all security aspects of the work performed under this contract; (2) assure compliance with all DoD and U.S. Army regulations regarding security, including but not limited to AR 380-67, AR 380-5, AR 25-2 and (3) assure compliance with any written instructions from the security or Operations Security (OPSEC) officer or Information Assurance Manager (IAM). The contractor shall identify and comply with all security requirements and shall identify personnel that no longer require access to Government Information Systems (IS) to the COR within 24 hours. SECRET Internet Protocol Network (SIPRNET) and Joint Worldwide Intelligence Communications System (JWICS). SIPRNET and JWICS access is required to perform this contract. The contractor is not authorized to access, download or further disseminate any classified information from SIPRNET or JWICS which is outside the scope of the defined contract requirements unless specifically authorized in writing by the Government Program Manager and the KO. In the event that any special access is required, the KO must modify the requirements and DD 254. Contractors requiring access to the SIPRNET must have a final Secret clearance or Interim TS clearance. Contractors requiring access to JWICS must have a final TS clearance and be indoctrinated for SCI access.

Approval by the COR is required prior to granting access. SIPRNET/JWICS may contain North Atlantic Treaty Organization (NATO) information, and a NATO awareness brief and acknowledgement is required for all personnel prior to being granted access to the SIPRNET/JWICS. The NATO awareness briefing is required to inform personnel how to protect NATO information in the event they come across it while accessing the SIPRNET/JWICS. All contractors shall turn their Common Access Card (CAC) into the COR on their last day of employment. Compliance with the DD Form 254, Department of Defense Contract Security Classification Specification is required. Specific clearance requirements for individuals will be identified at the Task Order level. Facility clearance requirement will be IAW para 4.1.1 of this PWS.

Defense Information System for Security (DISS) Contractors shall establish an owning relationship in DISS for each individual performing duty in support of this performance work statement/Task Order. Facility Security Officers (FSO) will send a Visit request (VR) using DISS for all contractors requiring access to facilities, classified information access to information systems and/or if required to maintain a clearance IAW the presiding contract. This will help ensure that employees are not denied entry to the installation. Those companies that do not have a FSO will send Visit Authorization Letter (VAL). No access will be given until the verification can be completed in DISS. Visit request is only valid for one year. The contractor shall be vetted on a reoccurring basis. For contractors, the minimum requirement for access to classified federal information systems is as follows: IT- I access, a T5 (SF86); IT- II access,T3 (SF 86); and IT- III access, a T1 (SF 85).

1.14.1 Installation Access: All contractor employees, including subcontractors, shall comply with applicable installation and facility security policies and procedures at all work and Temporary Duty (TDY) locations. All contractors and subcontractors will be issued a Common Access Card (CAC) or an Installation Pass issued through the Automated Installation Entry (AIE) Security System to access the installation. The Fort Gordon military installation is a limited access post. Unscheduled gate closures by the military police may occur at any time.

In accordance with Army Regulation 525-13, paragraph 5-19, all prospective contractors will undergo a verification process by the installation Provost Marshal Office, Director of

Emergency Services to determine the trustworthiness and suitability prior to being granted access to federal property. This will be accomplished using the National Crime Information Center (NCIC) Interstate Identification Index (III). This is the minimum baseline background check for entrance onto Army Installations for non-CAC holders to include entrance of visitors (Ref AR 190-13, paragraph 8-2). All personnel entering or exiting the installation may experience a delay due to vehicle inspections, registration checks, verification of seat belt use, etc. All vehicles and personnel are subject to search and seizure. The search and seizure provisions shall apply to contractor personnel while within Fort Gordon area of jurisdiction.

Contractor personnel shall comply with all entry control requirements and security policies/procedures in effect. Security procedures may change without notice. Alternate locations will have specific Installation Access procedures identified in the task order.

1.14.2 Access and General Protection/Security Policy Procedures: Contractor and all associated sub-contractor employees shall provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, or Security Office. The contractor workforce must comply with all personal identity verification requirements as directed by DoD, Headquarters, Department of the Army (HQDA) and/or local policy. In addition to the changes otherwise authorized by the changes clause of this contract, should the Force Protection Condition (FPCON) at any individual facility or installation change, the Government may require changes in contractor security matters or processes.

1.15 Special Requirements: Mandatory Training:

1.15.1 Antiterrorism (AT) Level I Training: All contractor employees, to include subcontractor employees, requiring access areas shall complete AT Level I awareness training within 30 calendar days after contract start date and annually thereafter. AT level I awareness training is available at the following website: https//Jkodirect.jten.mil/ for CAC holders. Non-CAC- holders may go to: http://jko.jten.mil/courses/atl1/launch.html. Completion certificate shall be provided to the COR.

1.15.2 IWATCH: All contractor employees, including subcontractors, assigned to this contract shall receive a brief on the local iWATCH program (provided in conjunction with the AT Level I Training). This training will be used to inform employees of the types of behavior to watch for and instruct employees to report suspicious activity to the COR. This training shall be completed within 30 days of reporting to duty and annually thereafter. iWATCH is available at https://www.mepcom.army.mil/Home/Contractors/. Documented completion shall be provided to the COR.

1.15.3 Operation Security (OPSEC) Training: Operation Security (OPSEC) Training: All contractor employees, including subcontractors, assigned to this contract shall complete Level I OPSEC training within 30 days of reporting for duty and then annually thereafter. Annual refresher OPSEC training shall be completed on-line at https://learn.atis.army.mil/moodle/course/. (Ref AR 530-1, Operations Security). Completion certificate shall be provided to the COR.

http://jko.jten.mil/courses/atl1/launch.html http://cdsetrain.dtic.mil/opsec/index.htm

1.15.4 Threat Awareness and Reporting Program (TARP) Training: All contractor employees, including subcontractors, assigned to this contract shall complete TARP training within 30 days of reporting for duty and then every year thereafter. The COR will ensure contractors are notified of available training (Ref AR 381-12). Completion certificate shall be provided to the COR. Online TARP training is available at https://learn.atis.army.mil/moodle/ .

1.15.5 Information Assurance (IA)/Information Technology (IT) Training: All contractor employees and associated subcontractors must complete the DoD Cyber Awareness Challenge Training (https://cs.signal.army.mil) before issuance of network access and annually thereafter.

Certificates of successful completion, for both initial awareness training and annual refresher training shall be provided to the COR. All contractor employees will successfully complete all required IA training as specified in AR 25-2 and as directed by the Government. All contractor employees working in IA/IT functions must comply with DoD and Army training requirements in DoDD 8570.01, DoD 8570.01-M, and AR 25-2. Contractors, to include subcontractors, requiring access to information systems to fulfill their duties must possess the required favorable security investigation. NOTE: Contractors that require access to the Fort Gordon network shall have a minimum of a National Agency Check with Inquiries (NACI) investigation initiated and favorable review before issuance of network access. The Information Assurance Security Office/ Information Assurance Network Officer (IASO/IANO) from the activity that the contractor is assigned to, will submit an electronic DD FORM 2875, System Authorization Access Request (SAAR) to CCoE G2 for verification that the contractor meets the requirements of AR 25-2 for accessing the Fort Gordon network (Ref AR 25-2). Completion certificate shall be provided to the COR.

1.15.6 Information Assurance (IA)/Information Technology (IT) Certification: Per DoDM 8140.03, DFARS 252.239.7001, and AR 25-2, the contractor employees’ supporting IA/IT functions shall be appropriately certified upon contract award. The baseline certification as stipulated in DoD 8570.01-M must be completed upon contract award. Certification shall be provided to the COR.

1.15.7 Access to Government Information Systems: All contractor employees who require access to a Government Information System (IS) shall successfully complete the DoD Cyber Awareness Challenge Training (formerly known as DoD Information Assurance Awareness Training) prior to access to the IS and then annually thereafter. All contractor employees working in IA/IT functions shall comply with DoD and Army training requirements in DoD 8570.01, DoD 8570.01-M and AR 25-2 upon contract award or within 30 calendar days of employment. Contractor personnel that do not have proper and current certifications shall be denied access to DoD IS for performing IA functions. Verification of the annual DoD Cyber Awareness training shall be provided to the Government upon request or to the IASO. DoD Cyber Awareness training is available at the following website: https://cyber.mil/training/cyber-awareness-challenge/. Completion certification shall be provided to the COR.

1.16 Identification of Contractors: Contract employees shall identify themselves as a contractor at all times while on the job, e.g., in the workplace, when attending meetings, in email, when answering government telephones, or when making phone calls.

https://learn.atis.army.mil/moodle/ https://cyber.mil/training/cyber-awareness-challenge/ https://cyber.mil/training/cyber-awareness-challenge/

1.16.1 ID Badges: The contractor shall provide each contract personnel an identification (ID) badge on contract start date or on employment start date. The ID badge shall be made of nonmetallic material, be easily readable, and shall contain the following minimum information:

Employee’s Name, Contract Company Name, Employee’s Photograph. Contract employees shall wear proper identification at Government workplaces at all times.

1.16.2 Display of ID Badges: Contractor personnel shall wear the ID badge at all times when performing work under this contract to include attending government meetings and conferences.

Unless otherwise specified in the contract, each contract personnel shall wear the ID badge in a conspicuous place on the front of exterior clothing and above the waist except when safety or health reasons prohibit such placement.

1.16.3 Answering Telephones: Contract personnel shall identify themselves as contract employees when answering and making calls on government telephones.

1.16.4 Utilizing Electronic Mail: When contractor personnel send email messages to government personnel while performing on this contract, the contract personnel e-mail addresses shall include the company name together with the person’s name (ex: Hohn Smith, Contractor, ABC Company).

1.17 Common Access Card CAC Badges: Each CAC badges shall be issued prior to any employees performing work under this contract Federal Information Processing Standards Publication 210-2 (FIPS PUB 201) Directive-12 (HSPD-12) and Federal Information and contractor personnel with routine physical access to a federally controlled facility be issued a common identification with specific security registration and identity proofing objectives.

Specifically, Fort Gordon meets this requirement by using the Common Access Card (CAC) for all such federal employees and contractors. When contract personnel require access to a government computer, the contract personnel shall be required to obtain a Common Access Card. To do so, the contract personnel shall request a CAC Card through the

COR.

1.17.1 DoD Credential - Common Access (CAC): Contractor employees (Applicant) are required to submit U.S. Army TASS Program – CAC/VOLAC Application, AHRC TASS FORM, 1 dated 1 May 2021, for issuance of a DoD CAC application to the Mission Partner Affiliation Sponsor (MPAS). Prior to the applicant contacting the MPAS to request a DoD credential, the applicant must be vetted through their employer and later through their MPAS verifying the applicant meets the requirements published in the following policies: Federal Information Processing Standards Publication 201-1, “Personal Identity Verification (PIV) of Federal Employees and Contractors,” DoD Regulation 5200.2-R, “Personnel Security Program”, and the Department of Defense Manual (DoDM) 1000.13, Volume 1 – “DoD Identification ID Cards:

ID Card Life-Cycle.”

The contractor employee’s name, social security number, date of birth, and email address will be entered into the Mission Partner Identity, Credential and Access Management (MP ICAM) database by the MPAS. Once the contractor employee’s information is entered, an Application number and PIN are generated and sent in two separate emails to the Applicant and MPAS.

The applicant then logs into the registration portal to complete the application by selecting “Apply for a DoD issued credential.” The applicant will have 30 days to complete the application, or the application will be automatically revoked. The applicant must complete the application in one sitting. There is no save option. The URL is: MP ICAM - Mission Partner Registration Web Application - DMDC (osd.mil). Once the Sponsor approves the application, the Applicant may obtain a DoD credential. For CAC issuance, the contractor must go to a RAPIDS Issuing Facility by locating a RAPIDS Issuing Facility and making an appointment online at https://idco.dmdc.osd.mil/idco/.

NOTE: The government issued CAC is the property of the U.S. Government and shall be returned to the MPAS upon expiration of the contract, replacement or termination of the contract employee. (CAC card must be turned in to the MPAS on contractor’s last day of employment.) Unauthorized possession of the CAC can be prosecuted criminally under section 701, title 18, United States Code.

1.18 Eligibility Verification for Employment: E-Verify is an Internet-based system that compares information from an employee's Form I-9, Employment Eligibility Verification, to data from U.S. Department of Homeland Security and Social Security Administration records to confirm employment eligibility. The U.S. Department of Homeland Security is working to stop unauthorized employment. By using E-Verify to determine the employment eligibility of their employees, companies become part of the solution in addressing this problem. All U.S.

employers must complete and retain a Form I-9 for each individual they hire for employment in the United States. This includes citizens and noncitizens. On the form, the employer must examine the employment eligibility and identity document(s) an employee presents to determine whether the document(s) reasonably appear to be genuine and relate to the individual and record the document information on the Form I-9. The list of acceptable documents can be found on the last page of the form. E-Verify is mandatory for employers with federal contracts or subcontracts that contain the Federal Acquisition Regulation E-Verify clause.

1.19 Physical Security: The contractor shall be responsible for the security of all GFP. The purpose of physical security is to prevent unauthorized entries or theft of Government property.

The contractor shall secure all Government Furnished Facilities when not occupied by contractor personnel. The contractor shall be responsible for safeguarding all government equipment, information, and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured. All contractor employees shall require a minimum of a National Agency Check (NAC) IAW AR 380-67, Department of the Army Personnel Security Program, and AR 190-13, The Army Physical Security Program, prior to starting employment under the terms of this contract.

1.20 Key Control: The contractor shall prohibit the use of keys issued by the Government by any person other than the contractor’s employees authorized to use the keys. The contractor shall report lost or stolen keys to the COR no later than the beginning of the next duty day. The contractor shall return all keys when no longer needed, at the end of the period of performance, or when their employee is no longer working on the Task Order.

https://mpartnerregweb.dmdc.osd.mil/mpartnerregweb/app/cac/pin https://mpartnerregweb.dmdc.osd.mil/mpartnerregweb/app/cac/pin https://idco.dmdc.osd.mil/idco/

1.21 Acceptable Use Policy (AUP): The contractor shall ensure understanding and compliance with the AUP (to be provided) regarding personnel responsibilities and limitations in using organizational or DoD Information Systems. The contractor shall provide explicit acknowledgment by reading and signing the AUP form and deliver the form to the Security Officer for record.

1.22 Service Contract Reporting Requirements: The contractor shall report ALL contractor labor hours (including subcontractor labor hours) required for performance of services provided under this contract via a secure data collection site. The contractor is required to fill in all required data fields using the following web address: https://www.sam.gov. Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year, beginning with 2018. Contractors may direct questions to the help desk at https://www.sam.gov.

1.23 Post Award Conference/Periodic Progress Meetings: The contractor agrees to attend any post award conference convened by the contracting activity or contract administration office. The Contracting Officer, COR, and other Government personnel, as appropriate, may meet periodically with the contractor to review the contractor's performance. At these meetings, the contracting officer will apprise the contractor of how the government views the contractor's performance and the contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.24 Contracting Officer’s Representative (COR): The COR will be identified by a separate letter at the Task Order level. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions:

assure that the contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance: maintain written and oral communications with the contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor contractor's performance and notifies both the Contracting Officer and contractor of any deficiencies; coordinate availability of government furnished property, and provide site entry of contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order. The COR is not authorized to make any commitments or changes that will affect price, quality, quantity, delivery, or any other term or condition of the contract. Only the Contracting Officer has authority to make a determination on the above regarding commitments or changes.

1.25 Other Direct Costs (ODC): N/A

1.26 Phase In: Specific phase-in requirements will be identified at the Task Order level. At full performance start date the Task Order(s), contractor shall be staffed at the sufficient level to https://www.sam.gov/ assume the service scope. If identified in the Request for Task Order Proposal (RTOP), the contractor shall provide a plan addressing the steps and actions necessary to facilitate a smooth transition from award to full operational status for each task order. The plan shall describe the contractor’s approach to develop and disseminate operational instructions, procedures, and control directives in preparation for the performance requirements. The incoming contractor shall coordinate with the incumbent contractor and Government COR to identify existing problems; unresolved actions and property accountability. During the phase-in period, a transition start meeting shall be conducted among the principle parties (Government, incoming contractor and, as applicable, incumbent contractor) to coordinate the handoff process between the incoming contractor and the incumbent or other agents. In addition, an operational readiness meeting shall be conducted among the principle parties (Government, incoming contractor and incumbent contractor) near the end of the transition period to ensure all outstanding planned actions have been closed as relates to the phase-in and the incoming contractor is prepared to fully assume operations.

(a) During the phase-in period, the contractor shall, at a minimum.

(b) Establish the Project Management Office.

(c) Recruit and hire necessary personnel.

(d) Obtain all required certifications and clearances, including personnel security clearances.

(e) Participate in joint inventories and sign for Government-furnished property (GFP) IAW the Government’s transition schedule.

(f) Develop and submit any required deliverables.

(g) Attend post-award meetings as required.

(h) Accomplish any necessary employee training to support the functions listed in the

PWS.

1.27 Phase-Out: The phase-out period shall apply to any contract follow-on requirements.

Prior to the completion of the contract, an observation period will occur at which time management personnel of the incoming workforce may observe operations and performance methods of the incumbent contractor. This will allow for orderly turnover of facilities, equipment, and records and will help to ensure continuity of service. The contractor shall not defer any requirements thereby avoiding responsibility or of transferring such responsibility to the succeeding contractor. The contractor shall fully cooperate with the succeeding contractor and the Government so as not to interfere with their work or duties. During the phase-out period, the contractor shall address the following issues: employee notification; retention of key personnel; turnover of work-in-progress, inventories, Government property; removal of contractor property; data and information transfer; and any other actions required to ensure continuity of operations. Full performance shall be maintained during the entire period.

1.28 Privacy Act: All contractor personnel assigned to this task shall have access to information that may be subject to the Privacy Act of 1974. The contractor shall ensure all assigned contractor personnel are briefed on Privacy Act requirements.

PART 2

DEFINITIONS & ACRONYMS

2 Definitions and Acronyms

2.1 Definitions:

Contractor – A supplier or vendor awarded a contract to provide specific supplies or service to the government. The term used in this contract refers to the prime.

Contracting Officer –A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the government. Note: The only individual who can legally bind the government.

Contracting Officer's Representative (COR) – An employee of the U.S. Government appointed by the Contracting Officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

Defective Service – A service output that does not meet the standard of performance associated with the Performance Work Statement.

Deliverable – Anything that can be physically delivered but may include non-manufactured things such as meeting minutes or reports.

Key Personnel – Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the PWS. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

Physical Security – Actions that prevent the loss or damage of Government property.

Quality Assurance – The government procedures to verify that services being performed by the contractor are performed according to acceptable standards.

Quality Control – All necessary measures taken by the contractor to assure that the quality of an end product or service shall meet contract requirements.

Subcontractor – One that enters into a contract with a prime contractor. The Government does not have privity of contract with the subcontractor.

Work Day – The number of hours per day the contractor provides services in accordance with the contract.

Work Week – Monday through Friday, unless specified otherwise.

2.2 ACRONYMS:

AAR After Action Reviews AC Active Component ACOR Alternate Contracting Officer's Representative ADDIE Analysis, Design, Development, Implementation, and

Evaluation AFARS Army Federal Acquisition Regulation Supplement AIE Automated Installation Entry AIT Advanced Individual Training ALM Army Learning Model AOC Area of Concentration AR Army Regulation AT Antiterrorism ATCTS Army Training Certification Tracking System AUP Acceptable Use Policy CAC Common Access Card CALL Center for Army Lessons Learned CATS Collective Army Training Strategy CCE Contracting Center of Excellence CCoE Cyber Center of Excellence C-CDID Cyber Capability Development and Integration Directorate CFDC Common Faculty Development Course CFR Code of Federal Regulations CITSS CCoE Instructor and Training Support Services CLIN Contract Line-Item Number CMF Career Management Fields CNCOA Cyber Noncommissioned Officers Academy CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTR Contracting Officer's Technical Representative COTS Commercial-Off-the-Shelf CTC Combined Training Center CVS Contractor Verification System DA Department of the Army DCO Defensive Cyberspace Operations DD250 Department of Defense Form 250 (Receiving Report) DD254 Department of Defense Contract Security Requirement List DFARS Defense Federal Acquisition Regulation Supplement DISS Defense Information System for Security DMDC Defense Manpower Data Center DOD Department of Defense DOTMLPF-P Doctrine, Organization, Training, Materiel, Leadership and Education, Personnel, and Facilities EW Electromagnetic Warfare FAR Federal Acquisition Regulation FEA Front End Analysis FPCON Force Protection Condition FSO Facility Security Officers GFP Government Furnished Property

HIPAA Health Insurance Portability and Accountability Act of 1996 HQDA Headquarters, Department of the Army IAM Information Assurance Manager IANO Information Assurance Network Officer IAW In Accordance With IASO Information Assurance Security Office ID Identification IET Initial Entry Training IMT Initial Military Training IOT In Order To IPR In-Process Review IS Information Systems IT Information Technology JER Joint Ethics Regulation JTR Joint Travel Regulation JWICS Joint Worldwide Intelligence Communications System MA Mission Analysis MAIDIQ Multiple Award, Indefinite-Delivery Indefinite-Quantity (IDIQ)MET Mission Essential Task METL Mission Essential Task List MI Military intelligence MOS Military Occupational Specialties MPAS Mission Partner Affiliation Sponsor MPICAM Mission Partner Identity Credential and Access Management

(ICAM)

MSR Monthly Summary Report MTT Mobile Training Teams MWAP Master Writing Assessment Plan NACI National Agency Check with Inquiries NATO North Atlantic Treaty Organization NCIC National Crime Information Center NDA Non-disclosure Agreement NLT No Later Than OCI Organizational Conflict of Interest OCO Offensive Cyberspace Operations OCONUS Outside the Continental United States ODC Other Direct Costs OIL Observations, Insights, and Lessons OPSEC Operations Security PDCV Post Deployment Collection Visits PIN Personal Identification Number PIPO Phase In/Phase Out PM Program Manager PME Professional Military Education POC Point of Contact POI Program of Instruction PRS Performance Requirements Summary PWS Performance Work Statement QA Quality…