Attachment 6 - Sample TO PWS Rev 1.docx

Electromagnetic Spectrum (EMS) Services Applied Engineering, Spectrum, and Electromagnetic Environmental Effects (E3) Engineering Analysis Support

SAMPLE PERFORMANCE WORK STATEMENT (PWS)

1. Contracting Officer’s Representative (COR).

a. Primary COR. See DITCO Additional Text G1 - Points of Contact

b. Alternate COR. See DITCO Additional Text G1 - Points of Contact

c. Property Administrator See DITCO Additional Text G1 - Points of Contact

2. TO Title. Electromagnetic Environmental Effects (E3) Support at Fort Meade (SAMPLE TO)

3. Background.

The U.S. Army is looking to a counter unmanned aerial system (CUAS) radar at one location on Fort Meade. The Fort Meade spectrum manager has requested an Electromagnetic Environmental (EME) survey and an Electromagnetic Effects (E3) analysis be conducted to evaluate the potential electromagnetic interference to the existing radio frequency (RF) operations at Fort Meade. The U.S. Army has requested that the Defense Information Systems Agency, (DISA) conduct this analysis.

4. Objectives:

The objective of this effort is to determine the potential for Electromagnetic Interference (EMI) from the proposed CUAS radar to existing and planned military, government, and commercial communications-electronics (C-E) systems.

5. Scope.

This TO will provide E3 and Spectrum Engineering Support. The contractor shall analyze equipment and systems for potential E3 problems and recommend solutions. The contractor shall provide E3 and spectrum engineering support in:

· RF Measurements

· Analyzing equipment and systems for potential E3 problems and recommending solutions The Government may require surge support during the base or any option period, and surge modifications will be within the scope of the contract and provide increased support for the defined task areas of this PWS. Surge support over the life of the contract will not exceed 10% of the contractor’s total proposed cost/price for the base and all option periods, excluding any six-month extension of services pursuant to FAR 52.217-8.

6. Performance Requirements.

6.1 Task 1 – TO Management (Firm-Fixed Price (FFP)). The contractor shall provide management, personnel, planning, and coordination support necessary to accomplish all work requirements specified at the contract and TO level. The contractor shall provide a program manager to oversee, coordinate, and provide leadership and the controls necessary to manage all TO activities. The contractor shall manage deliverable targets, maintain staffing at levels required to satisfy customer requirements, team, and/or subcontract as needed.

The contractor shall supply all programmatic and subject matter expertise required to accomplish all tasks specified in the TO.

Non-Disclosure Agreements obtained as a result from this TO shall be incorporated into the ID/IQ Monthly NDA Status Report (ID/IQ PWS Section 13), CDRL C0001.

Deliverables:

6.2. Task 1- E3 Analysis (FFP). The contractor shall conduct an Electromagnetic Compatibility (EMC) analysis to determine the potential for interference from the U.S. Army Counter Unmanned Aircraft Systems (CUAS) radar to existing and planned C-E equipment operating on Ft. Meade. Technical characteristics for the CUAS radar will be provided by the program office. The contractor shall generate the Ft. Meade Electromagnetic Environment (EME) that will be analyzed. The contractor shall document any analysis assumptions to include EME system characteristics and interference thresholds used. For interactions where interference is predicted, the contractor shall provide mitigation solutions to reduce the risk of interference. The contractor shall document the assumptions, methodology, results, and mitigations in a consulting report.

SPONSOR SCHEDULE:

Due to variances in requested schedules from sponsors, deliverables for this task will follow the sponsor schedule outlined below:

Deliverables:

6.3. EME Survey (FFP). The contractor shall conduct an EME survey of the proposed location on Ft. Meade for the U.S. Army CUAS radar. The contractor shall develop the test plan for the EME survey. The test plan should include information such as identifying the RF equipment required, methodology, and schedule. The RF test equipment will be provided by the government. The contractor shall conduct the measurements at the identified CUAS location, process the test data, and document the EME survey in a consulting report. The contractor shall identify any potential issues with installing the CUAS radar at the desired location. The consulting report shall include methodology, test equipment used, test results, and any observations from the testing.

SPONSOR SCHEDULE:

Due to variances in requested schedules from sponsors, deliverables for this task will follow the sponsor schedule outlined below:

Deliverables:

7. Performance Standards. The base contract Quality Assurance Surveillance Plan (QASP) is incorporated by reference.

Tasks 6.1, 6.2, 6.3 – Monthly status reports, Non-Disclosure Agreements, test plans, and Consulting Reports

Technical Requirements: Percentage of technical requirements contained in the PWS that were met by the contractor.

In addition, deliverables must be complete and free from major technical errors before being accepted by the Government. Meeting 95% of the requirements and being complete and free of major technical errors is an AQL.

All documents should contain only minor technical errors that require correction prior to final delivery to a sponsor. Minor technical errors should have no or minor impact on final conclusions drawn in the report.

All relevant data must be included in the report. Conclusions must be fully supported by data and information in the report. The report must be accurate. Reports shall reflect innovative solutions or unique insights to resolve problems.

Reports shall not require multiple returns to the contractor for editorial re-work prior to being accepted by PAE Transport, user, or sponsor. Re-work of the documents must not result in unacceptable schedule delays.

Reports must be presented in a logical, easy to read, and unambiguous manner. The flow of the information in the reports shall be relevant and support the conclusions provided in the analysis. All figures and tables provided in the analysis shall be properly marked and easy to read and comprehend.

PAE Transport approved report format should be used unless other provisions are stipulated at the beginning of the task.

Minimal report rework post-delivery is an AQL.

Schedule Requirement: AQL is report delivered on time. The delivery date is the date the contractor provides the final deliverable to the Government.

Technical Requirement:

Periodic inspection of delivered products through random sampling.

Customer input of delivered product compared to the number of re-performance or re-work needed.

Schedule Requirement: 100% inspection of actual delivery date compared to required delivery date.

8. Incentives. This TO is a FFP requirement. Performance will be documents in the Contractor Performance Assessment Reporting System (CPARS) at the IDIQ level.

· Positive Incentives:

· Quality services accepted by the government by allowing the contractor to invoice for the services rendered.

· Positive CPARS.

· Negative Incentives:

· Negative CPARS.

· Letters of concern, show cause letters, cure notices, and contract/TO termination.

· When unacceptable performance occurs, withholding of payment for services until corrective action is taken.

· As a part of the closeout process, the contractor shall, within thirty (30) days before the final day of performance, turn over all equipment, reports, and data, either received or generated during the performance of the TO. Failure to meet at this requirement at TO closeout assesses a 10% withholding of final payment until this action is completed.

9. Place of Performance.

Mission Location(s): 6910 Cooper Avenue, Fort George G. Meade, MD 20755-7901 with possible local travel to 2204 Turbot Landing, Annapolis MD 21402-5064.

**Please note, only unclassified work may be performed at the contractor’s locations. Classified and unclassified work shall be performed only at a Government location, as specified above. **

Place of Performance: Alternative work sites allow for regular telework or remote work flexibilities. Regardless of where work is performed, the contractor shall ensure that work is completed effectively and that mission needs and requirements are met, without degradation of services. Also, the contractor may be required to account for the physical location of their personnel should this information be requested by the COR. The contractor shall propose on-site rates for all work performed at an alternative work site. Incidental charges incurred while working at an alternative work site (e.g., electricity, internet) are not allocable to the contract and shall not be billed to the Government.

Local travel to and around the mission location (or place of performance if the PWS does not include a list of places of performance), (add mission location such as DISA HQ Ft. Meade include contractor’s facility as well if that is part of the place of performance) may be required throughout the period of performance; this travel will not be reimbursed. Long-distance travel within CONUS may be required to support the requirements of this PWS. Long distance (non-local) travel within CONUS must be pre-approved in writing by the COR prior to the Contractor incurring the cost in support of this contract. All long-distance travel within CONUS shall be planned and conducted in support of the individual tasks contained in this TO.

Secondary Place of Performance – Contingency Only. As determined by the Contracting Officer’s Representative (COR), contractor employees may be required to work at a secondary place of performance (e.g., home, the contractor's facility, or another approved activity within the local travel area) in cases of unforeseen conditions or contingencies (e.g., pandemic conditions, exercises, government closure due to inclement weather). Additionally, the contractor may be required to account for the physical location of their personnel should this information be requested by the COR. Non-emergency/non-essential contractors should not report to a closed government facility. Contractor shall prepare all deliverables and other contract documentation utilizing contractor resources. To the extent possible, the contractor shall use best efforts to provide the same level of support as stated in the PWS. In the event the services are impacted, reduced, compromised, etc., the Contracting Officer or the contractor may request an equitable adjustment pursuant to the Changes clause of the contract.

10. Period of Performance. The period of performance is 365 days from the date of award.

11. Security Requirements.

This section supplements Block 13 of the Government provided DD Form 254, Contract Security Classification Specification. The following security requirements shall apply to this effort.

NOTE: This Indefinite Delivery Contract’s security requirements/DD254 will cover all future TOs; DD254s will not be required for individual TOs.

The contractor shall coordinate visits with site Point of Contract (POC)s providing at least a 72-hour notice (or according to each site security requirements) prior to any site access. Contractor personnel without security clearances performing any task under this PWS must be escorted by cleared DISA personnel (civilian, military, or contractor).

References:

a. DISA End User Access Agreement

b. DISA Instruction 240-240-01, External Peripheral Devices Authorized for Network Connectivity

c. DISA Instruction 240-110-8, Information Security

d. DISA Instruction 240-110-34, Controlled Unclassified Information (CUI)

e. DISA Instruction 240-110-36, Personnel Security

f. DISA Instruction 240-110-38, Industrial Security

g. DISA Instruction 240-110-43, Counterintelligence

h. DISA Instruction 240-110-43, Insider Threat Program

i. DISA Instruction 630-230-19, Cybersecurity

j. DoD Manual 5200.01, Vol. 1 and 3, DoD Information Security Program, 17 January 2025

k. DoD Manual 5200.01, Vol. 2, DoD Information Security Program, 28 July 2020

l. DoD Instruction 5200.48, Controlled Unclassified Information (CUI), 6 March 2020

m. DoD Manual 5200.02, Procedures for the DoD Personnel Security Program (PSP), 3 April 2017, Change 1, 29 October 2020

n. 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM), 24 February 2021

o. DoD Directive 5240.06, Counterintelligence Awareness and Reporting (CIAR), 17 May 2011, Change 3, 31 August 2020

p. DoD Instruction O-5240.24, Counterintelligence (CI) Activities Supporting Research, Development, and Acquisition (RDA), 8 June 2011, Change 2, 15 July 2020

q. DoD Instruction 5205.16, “The DoD Insider Threat Program,” December 20, 2024

r. DoD Instruction 5230.24, Distribution Statements for DoD Technical Information, 10 January 2023

s. DoD Instruction 8510.01, Risk Management Framework for DoD Systems, 19 July 2022

t. DoD Manuel 5400.07, DoD Freedom of Information Act (FOIA) Program, 25 January 2017

u. Security Executive Agent Directive 3 (SEAD 3) Reporting Requirements for Personnel With Access To Classified Information or Who Hold Sensitive Position, 12 June 2017

v. Security Executive Agent Directive 4 (SEAD 4), National Security Adjudicative Guidelines, 8 June 2017

w. DISA Instruction 240-15-4 United States Security Authority for North Atlantic Treaty Organization Affairs

x. DISA Instruction 240-110-35 Sensitive Compartmented Information (SCI)

y. DoD Manual 5105.21, Vol. 1-3, Sensitive Compartmented Information (SCI) Administrative Security Manual, 19 October 2012, Change 2, 06 October 2020

11.1 Facility Security Clearance. Work performed under this contract/order is up to the Secret level. Therefore, the company must have a final Secret Facility Clearance from the Defense Counterintelligence and Security Agency (DCSA) Facility Clearance Branch.

11.1.2 Invalidated Facility Clearance. Companies with invalidated facility clearances (including those in partnerships, subcontracts, and Joint Ventures) are not eligible to bid on or be awarded any new or additional DISA classified contracts, subcontracts, or receive additional classified information except for information necessary for the completion of your current classified contracts. In addition, those companies with invalidated facility clearances will not be permitted access to all DISA networks. Performance on any DISA classified contracts, at any location, will not be authorized until it has been granted a Facility Security Clearance (FCL) at the appropriate level by DCSA.

11.2 Security Clearance. All personnel performing on or supporting a DISA contract/order in any way shall be United States citizens. The personnel security requirements for this contract/order cover the individuals supporting the Task Areas delineated in the table below. Contractor personnel must possess the interim or final security clearance eligibility delineated in the table below when performance starts.

SECRET

11.3 Investigation Requirements.

11.3.1 All personnel requiring Secret access under this contract/order shall undergo a favorably adjudicated Tier 3 (T3) Investigation formerly known as a National Agency Check, Local Agency Check and Credit Check or Access National Agency Check and Inquiries as a minimum investigation. Enrollment into Continuous Evaluation current within 5 years and, reflected in DISS, would meet the requirement for a current PR.

11.3.2 The contractor is required to have personnel cleared with an interim or final Top Secret or Secret (as specified in the table located in section 11.2) at contract start date. If contractor personnel are replaced during performance of the contract, replacement personnel should also have interim or final clearance Top Secret or Secret (as specified in the table located in section 11.2).

11.4 Visit Authorization. Visit requests shall be processed and verified through the DISS to the Security Management Office (SMO) DKABAA10. DISS visits for contracts/orders are identified as “Other” or “Temporary Additional Duty (TAD)/Temporary Duty (TDY)” and will include the Contract/Order Number of the contract/order in the Additional Information section. Contractors that do not have access to DISS may submit visit authorizations by e-mail in a password protected portable document format file (.pdf) to the COR/ACOR specified in PWS/SOW Section 1.0.

11.4.1 VAR Package. VAR Centers must receive VAR packages from the Security Manager (via email and require pre-approval from the assigned DISA COR) at a minimum of five business days in advance of the initial report date or renewal. For option years, VARs should be renewed 30-90 days prior to the expiration date unless modified sooner for changes such as name, COR/sponsor, contract modification, etc. As an option, a VAR can be approved for up to a maximum of three (3) years within the POP for contractors. The VAL/VAR/VTN should be sent via email to the appropriate COR. The VAL/VAR/VTN should be sent using in a locked “Zip” file in one e-mail and then followed up by another e-mail with the password to unlock the Zipped file, because it contains sensitive information covered by the Privacy Act.

Documents to include in the VAR Package (DISA Field Sites may have site specific VAR requirements):

1. Inter-office Memorandum (IOM)

2. DD Form 254 Prime and/or Sub (Good Standing approval emails for current option year)

3. PWS/SOW/Sub Memo

4. DISS verification of Visit Authorization by Security Manager

5. (Optional: see NOTE below) Contractor VAL signed by the Contractor Facility Security Officer (FSO)

NOTE: If DISS is not available, the VAL must contain the following information on company letterhead:

· Company name, address, telephone number, facility security clearance

· Commercial and Government Entity Code (CAGE CODE)

· Contract/Order Number

· Name, Social Security Number (SSN), date and place of birth, and citizenship of the employee intending to visit, email address, and phone number

· Certification of personnel security clearance and any special access authorizations required for the visit (type of investigation & date and adjudication date & agency)

· Name of COR/Alt COR

· Dates or period the VAL is to be valid (i.e., Start date / End date)

11.4.2 VTN Package. The Contractor FSO will forward a VTN letter to the DISA COR identified in the PWS/TO/Sub for all employees leaving the contract/TO/subcontract.

11.4.2.1 In addition, the DISA CORs and security managers shall inform the DISA Security Office when contractor personnel are removed for cause from a contract supporting DISA. This step is to identify contractor personnel removed for security related issues in case of a return to DISA without appropriate vetting. This step will also provide security with pertinent information to make an informed decision regarding potential contractor employees’ access to secure facilities and sensitive information. “For Cause” is information regarding an individual that falls into one or more of the actions or incidents that are within one of the 13 adjudicative guidelines as cited in the Security Executive Agent Directive (SEAD) 4:

a. Allegiance to the United States

b. Foreign Influence

c. Foreign Preference

d. Sexual Behavior

e. Personal Conduct

f. Financial Considerations

g. Alcohol Consumption

h. Drug Involvement and Substance Misuse

i. Psychological Conditions

j. Criminal Conduct

k. Handling Protected Information

l. Outside Activities

m. Use of Information Technology

Other actions:

· Incidents involving violence in the workplace or harassment.

· Misuse of time.

· Inspector General or General Counsel related inquiries.

· Failure to comply with security policies and procedures.

· Other reasons that prompted removal of a contractor.

The VTN must contain the following information on company letterhead:

· Company name, address, telephone number, facility security clearance

· CAGE CODE

· Contract/Order Number

· Name, SSN, date and place of birth, and citizenship of the employee, email address, phone number

· Date contractor Common Access Card (CAC) was collected

· Name of COR/Alt COR

· Termination Date

· Reason for Termination: <insert reason from the 13 adjudicative guidelines, other actions, or type “No longer working on contract”>

*Any VAL/VAR submitted without the above information will be denied. *

11.5 Security Contacts. DISA Security Personnel can be contacted for Industrial or Personnel Security related issues at the following:

Defense Information Systems Agency

Defense Information Systems Agency

ATTN: J-16, Industrial Security

ATTN: J-16, Personnel Security

Command Building

Command Building

6910 Cooper Ave.

6910 Cooper Ave.

Fort Meade, MD 20755-7088

Fort Meade, MD 20755-7088 disa.meade.j1.mbx.mp6-industrial-security@mail.mil disa.meade.j-1.list.mp6-personnel-security@mail.mil

For Center or Directorate-specific security related matters, contact the Directorate or Center Security Manager at:

Name: Michael Wilson Phone Number: 410-919-2712 E-mail: michael.wilson99.civ@mail.mil

11.6 Information Security and other miscellaneous requirements.

11.6.1 Contractor personnel shall comply with all local security requirements including entry and exit control for personnel and property at the Government facility.

11.6.2 Contractor employees shall be required to comply with all Government security regulations and requirements. Initial and periodic safety and security training and briefings will be provided by Government security personnel. Failure to comply with Government security regulations and requirements shall require the company to provide the Government with a written remediation/corrective action plan; furthermore, failure to comply with such requirements can be cause for removal and the contractor will not be able to provide service on this contract/order.

11.6.3. Contractor employees with an incident report in DISS who have had their access to classified suspended will not be permitted to fill positions requiring access to classified information on a DISA contract/order.

11.6.4 The Contractor shall not divulge any information, classified or unclassified, about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the DoD facility. Identification shall be worn and displayed as required.

11.6.5 The authority for the contractor personnel to regain access must be granted by DISA Chief of Security.

11.6.5.1 DISA retains the right to request removal of contractor personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government.

11.6.5.2 DISA retains the right to revoke access to DISA facilities and networks from contractor personnel who violate one or more of the National Security Adjudicative Guidelines, harassment, insider threat, counterintelligence, or violence in the workplace while assigned to a contract clearly conflict with the interest of the Government.

11.6.5.3 If contractor employee is accused of violating state or federal laws and/or Government professional conduct policies or regulations, then the Government may require that such contractor employee be removed from Government premises and/or that such contractor employee be removed from supporting this contract, pending the duration and outcome of a Government investigation if the Contracting Officer finds that the conduct or violation alleged has the potential to negatively interfere with contract performance or operations at a Government facility. Only the Contracting Officer can make such a request on behalf of the Government. Removal of contractor employees shall not negatively impact contract performance.

11.6.6 Contractor personnel will generate or handle documents that contain Unclassified or Controlled Unclassified Information (CUI) at the Government and/or contractor facility. Contractor personnel will generate or handle documents that contain Proprietary, Contract Sensitive, or similarly designated information at the Government and/or contractor] facility.) Contractor personnel will have access to, generate, and handle classified material up to SECRET SCI level only at the Government location(s) (Ref: Block 8 Place of Performance on DD254) and listed in the place of performance section of this document. All contractor deliverables shall be marked in accordance with DoDM 5200.01, Vol. 2, DoD Information Security Program: Marking of Information; DoDI 5200.48, Controlled Unclassified Information (CUI); and DoDM 5400.07, Freedom of Information Act Program, unless otherwise directed by the Government. The contractor shall comply with the provisions of 32 CFR Part 117, “National Industrial Security Program Operating Manual (NISPOM)” for handling classified material and producing deliverables. The contractor shall comply with DISA Instruction 630-230-19, Cybersecurity.

11.6.7 The Contractor shall afford the Government access to the contractor’s facilities, installations, operations, documentation, databases and personnel used in performance of the contract/order. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability and confidentiality of data or to the function of information technology systems operated on behalf of DISA or DoD, and to preserve evidence of computer crime.

11.6.8 Foreign Travel Requirements: DISA Contractors are required to submit their official and unofficial foreign travel and foreign contacts via the Corporate Management Information Systems (CMIS) which may require a dual reporting requirement in accordance with DISA Instruction 240-110-35; DISA Instruction 240-110-43; Security Executive Agent Directive 3 (SEAD 3) Reporting Requirements for Personnel with Access to Classified Information or Who Hold a Sensitive Position.

11.6.9 Mandatory Security Training. All DISA Contractors are required to complete the DoD initial and annual security training for the following in accordance with (IAW) 32 CFR Part 117, National Industrial Security Program Operating Manual (NISPOM):

· Security Awareness

· Level I Antiterrorism Awareness

· Derivative Classification

· Controlled Unclassified Information (CUI)

· Operational Security (OPSEC) Awareness for Military Members, DoD Employees, and Contractors

· DISA Counterintelligence and Awareness Reporting (CIAR) training IAW DISA Instruction 240-110-43 Counterintelligence; DoDD 5240.06 Counterintelligence Awareness and Reporting (CIAR); and DoDI O-5240.24 Counterintelligence (CI) Activities Supporting Research, Development, and Acquisition (RDA).

· DISA Insider Threat Awareness: Contractors supporting DISA are required to complete the DISA Annual Insider Threat Awareness Training through the DISA Virtual Campus IAW the standards in DoD Instruction 5205.16, “The DoD Insider Threat Program,” December 20, 2024, regardless of insider threat awareness training provided by their employer.

11.6.9.1 Contractors supporting DISA onsite are required to complete the DoD initial or annual training through the DISA mandatory training system.

11.6.9.2 Contractors supporting DISA offsite are required to meet the DoD initial or annual training requirement through their employers who are to provide this training and maintain training documentation. The contractor supervisor needs to certify in writing and email completion certificates to the COR and DISA Security Manager that off-site contractors completed the training before receiving credit. The DISA Security Manager will update CMIS records, if available.

11.6.10 Courier Authorization Card or Authorization Letter.

11.6.10.1 Collateral Courier Authorization Card or Authorization Letter. Contractors required to courier classified information or equipment, up to Top Secret shall receive a Government Issued Collateral Courier authorization card or authorization letter from the DISA Directorate Security Manager prior to couriering classified information or material in support of official duties. The contractor will only be issued a collateral courier card or letter to hand carry classified information or equipment if there are no other means of safely and securely transporting or sending the classified information or equipment. A courier card or letter can be issued if there is a requirement to courier periodically. All contractors will follow the 32 CFR Part 117 NISPOM, DoD Manual 5200.01 Information Security, and the collateral courier card standard operating procedures that are issued by the DISA Security Office. A collateral courier card or letter will only be issued up to the collateral clearance level required and the individual contractor will be verified in CMIS and DISS.

12. Government Furnished Property (GFP)/Government-Furnished Equipment (GFE)/ Government-Furnished Information (GFI).

A. GFP will be provided for this contract at the ID/IQ level, as indicated in the GFP attachment included at the solicitation, distributed at award, and incorporated via the GFP Module in PIEE. GFP shall be managed IAW the terms of FAR 52.245-1, corresponding GFP DFARS clauses and additional DITCO Instructions incorporated in award.

Contractors shall accept and/or report provided GFP via the Shipping and Receiving document in the GFP module upon acceptance and/or IAW Additional DITCO Instruction H9. Serially managed items are provided to the contractor by DoD and require all events identified in DFARS 252.245-7005 (and/or any subsequent DFARS or Agency GFP reporting requirements) to be reported by the contractor.

Contractors in possession of GFP shall provide the COR or PA an annual report of all GFP in its possession to include the item description, make, model, serial number, IUID, and last inventory date; the report should be minimally provided on an annual basis and 30 days prior to the expiration of any performance period (base and options) IAW with Additional DITCO Instruction H9.

Deliverable: This deliverable will be provided at the ID/IQ level.

B. Intellectual Property (IP) will be provided at the ID/IQ level only. IP will not be provided at the TO level. IP will be made available, and hand receipted to the contractor for use during the performance of the contract. Below is an estimated list of IP, this estimate is not considered a comprehensive list and more or less IP maybe provided in performance of the contract. IP shall be managed IAW the terms of H8, Defense Information System Agency Incidental Property Management (Apr 2021) or subsequent updates.

Estimated IP to be provided:

· Consulting Reports

· System Engineering Standards

· DISA on-site workspaces to accommodate contractor personnel as deemed necessary by the Government, including laptops, telephones, desks/chairs

· Selects from the DISA-maintained databases maintained under separate DISA contracts

· Spectrum analysis tools developed and maintained under separate DISA contracts

13. Other Pertinent Information or Special Considerations.

a. Identification of Potential Conflicts of Interest (COI). The contractor shall identify any possible organizational conflict of interest (OCI) as defined in Subpart 9.5 of the Federal Acquisition Regulation. If there is an OCI, the contractor must inform the KO and COR and provide an OCI Mitigation Plan that identifies how the OCI is to be mitigated.

b. Identification of Non-Disclosure Requirements. The contractor shall obtain and maintain Non-Disclosure Agreements (NDA) for each employee assigned to the contract and resultant TOs. Initial NDAs shall be signed within one week of contract award and one week after TO award, and NDAs shall be kept current through the entirety of the period of performance as employee turnover occurs. The contractor shall ensure that all employees assigned to the contract have executed NDAs on file as of the date of the Monthly NDA Status Report, which shall include names and NDA status of all current employees assigned to the contract. The Monthly NDA Status Report will be delivered at the ID/IQ level.

d. Training. Contractor employees may be required to take periodic mandatory training courses provided through the agency, such as record management training, Controlled Unclassified Information (CUI) training, and other training required by statute, regulation, DoD, or DISA policy. No other training of contractor personnel shall be provided by the Government unless authorized by the Contracting Officer.

Sample TO for Electromagnetic Spectrum (EMS) Services Applied Engineering, Spectrum, and Electromagnetic Environmental Effects (E3) Engineering Analysis Support

Sample TO for Electromagnetic Spectrum (EMS) Services Applied Engineering, Spectrum, and Electromagnetic Environmental Effects (E3) Engineering Analysis Support

14. Section 508 Accessibility Standards.

Page 1 of 3 Pages

Page 2 of 3 Pages

E206 Hardware

E206.1 General. Where components of ICT are hardware and transmit information or have a user interface, such components shall conform to the requirements in Chapter 4.

E302 Functional Performance Criteria

302.1 Without Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that does not require user vision.

302.2 With Limited Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited vision.

302.3 Without Perception of Color. Where a visual mode of operation is provided, ICT shall provide at least one visual mode of operation that does not require user perception of color.

302.4 Without Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that does not require user hearing.

302.5 With Limited Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited hearing.

302.6 Without Speech. Where speech is used for input, control, or operation, ICT shall provide at least one mode of operation that does not require user speech.

302.7 With Limited Manipulation. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that does not require fine motor control or simultaneous manual operations.

302.8 With Limited Reach and Strength. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that is operable with limited reach and limited strength.

302.9 With Limited Language, Cognitive, and Learning Abilities. ICT shall provide features making its use by individuals with limited cognitive, language, and learning abilities simpler and easier.

15. Cybersecurity Maturity Model Certification (CMMC)

This contract and its associated delivery/TOs are subject to the Federal CMMC policies and regulations including DFARS 204.75 Cybersecurity Maturity Model Certification, DFARS 252.204-7021 Contractor Compliance with the Cybersecurity Maturity Model Certification Level Requirements, and 32 CFR §170, Cybersecurity Maturity Model Certification (CMMC) Program. The CMMC Program is designed to ensure implementation of cybersecurity practices for defense contractors and to provide DoD with increased assurance that Federal Contract Information (FCI) and CUI will be adequately safeguarded when residing on or transiting contractor information systems.

The Program Management Office/COR has determined that a CMMC Level 2 (C3PAO) will be required for this TO. In accordance with CMMC policy codified at 32 CFR §170, Contractor compliance with CMMC Level 2 (C3PAO) must be met at the time of TO award, and continued compliance with the requirements of 32 CFR §170 is necessary for the life of this contract.

Enclosure 4a, PWS Page 1 of 11 Pages 2015/Version 9