Attachment A - Performance Work Statement.pdf

NPS-ER Attachment A Performance Work Statement 80GSFC22R0004

NASA Protective Services East Region

Contract

(NPS-ER)

Performance Work Statement

Attachment A October 2021

TABLE OF CONTENTS

CONTRACT OVERVIEW……………………………………………………………….……..1

1.0 PROGRAM MANAGEMENT

1.1 BUSINESS MANAGEMENT

1.2 SAFETY AND HEALTH

1.3 QUALITY PLAN

1.4 ENVIRONMENTAL MANAGEMENT

1.5 INFORMATION TECHNOLOGY (IT)

1.6 WORK MANAGEMENT

1.7 RECORDS MANAGEMENT

1.8 VEHICLE MANAGEMENT

2.0 INFORMATION SECURITY (INFOSEC) AND COMMUNICATIONS SECURITY

(COMSEC)

3.0 EMERGENCY MANAGEMENT

3.1 EMERGENCY PREPAREDNESS

3.2 EMERGENCY OPERATIONS

3.3 CONTINUITY OF OPERATIONS (COOP)

3.4 TEST, TRAINING & EXERCISE (TT&E)

4.0 PROTECTIVE SERVICES COMMUNICATION CENTER (PSCC)

5.0 RESOURCE PROTECTION

5.1 PHYSICAL SECURITY SUPPORT

5.2 LOCKSMITH SERVICES

5.3 ELECTRONIC SECURITY SYSTEM SERVICES

6.0 SECURITY OPERATIONS

SECURITY AND SECURITY POLICE SERVICES

TRAFFIC ENFORCEMENT

CRIMINAL VIOLATION ENFORCEMENT

6.3.1 Criminal Investigations

WEAPONS STORAGE AREAS (SECURITY ARMORY)

FLAG PROTOCOL

INTERNAL SECURITY EDUCATION AND TRAINING

6.6.1 Firearms Certification

NASA PHYSICAL AGILITY STANDARDS FOR ARMED PERSONNEL

6.7.1 NASA INITIAL PHYSICAL AGILITY AND TASK TEST (IPAT)

6.7.2 NASA BASIC PHYSICAL AGILITY AND TASK (BPAT) TEST

7.0 IDENTITY CREDENTIAL AND ACCESS MANAGEMENT (ICAM)

8.0 Reserved

9.0 NASA Protective Services Training

CONTRACT OVERVIEW

A. The purpose of the NASA Protective Services - East Region (NPS-ER) is to provide protective services including but not only: Communication Security (COMSEC); Security Operations (SECOPS); Information Security (INFOSEC); Program Security (SAP and SCI); Resource Protection; Physical Security (PHYSEC); Credentialing; 911 Phone Center and Protective Services Communications Center (PSCC); Emergency Management (EM); NASA Protective Services Training.

B. The primary objectives for the NPS-ER are to provide efficient and effective protection of human and property resources for NASA. Any law enforcement function described in this PWS shall be performed in accordance with the authority granted by the National Aeronautics and Space Act of 1958 and is ancillary to the security operations required by this contract. This authority shall be exercised as set forth in 14 CFR 1203b.103.

C. The Contractor shall ensure that necessary management emphasis is placed on safety and health through a comprehensive safety and mission assurance program. That emphasis shall be reflected in all company policies and through adherence to standard practices and procedures.

D. The Contractor shall support surges of activities and tasks that are considered above normal workload fluctuations. Special circumstances (e.g., launch and landing support for aerospace vehicles, mutual aid to surrounding community, emergency assistance to other NASA Centers) may necessitate the issuance of an Indefinite Delivery Indefinite Quantity (IDIQ) Task Order, as determined by the Contracting Officer (CO) of the various Center Annexes (Center Task Orders) to this PWS.

E. The Contractor shall establish and maintain team-oriented working relationships with the Government at all levels in the Protectives Services organization. Through frequent interaction, both formal and informal, the Contractor shall work with Government counterparts to ensure requirements are clearly communicated, mutually understood, and satisfied. The Contractor shall ensure timely, accurate, and thorough responses to the Government’s requests for information. The Contractor shall work cooperatively with other NASA contractors to ensure timely and effective execution of Program mission requirements.

F. The Term “See PWS” in a Center Annex (annex or annexes) refers to this PWS, this document and its appendices and attachments, that establishes requirements to which the Contractor shall adhere. Any additional requirements are identified in the appropriate line item in the annexes.

The contractor, as specified in the annexes, is responsible for performing the overall and day-to-day operations of NASA OPS East Region protective services including, fire, security policing, emergency management, information assurance, and training. These requirements include providing the necessary management, supplies, materials, and personnel (not otherwise provided by the Government) to perform the protective services for NASA on a 24-hour, 7 days per week basis.

G. The Contractor shall ensure compliance with the contract terms and conditions. The government considers the actions, and behaviors described in Attachment D-10 Deduction Schedule for Non-conforming Services, as non-conforming to the requirements of the contract and are of a serious nature requiring immediate corrective action by the contractor and evaluation by the government.

1.0 PROGRAM MANAGEMENT

A. The contractor shall provide an adequate hierarchical command structure and chain of command for security police officers with full authority to respond to the requirements of this contract. DRD PM-015, Management Plan. The Contractor shall define the Contractor’s staffing level and procedures, and staffing practices for assurance of effective staffing for the accomplishment of contract requirements by providing a Protective Services Staffing Plan as defined by the Task Monitor. The Contractor shall implement in accordance with approved proposal and update within 60 calendar days of contract award and annually.

B. The Contractor shall provide all labor, uniforms, materials (including ammunition and Simunition®), supervision, equipment (including all office supplies), transportation (including shipping expenses), and management, except as otherwise specified in the contract and annexes, as is necessary to successfully perform the requirements set forth herein. The Contractor shall comply with the Performance Standards set forth in Attachment D-2.

C. The Contractor shall provide a single point-of-contact, a Program Manager (PM), located at GSFC who is responsible for the administration of each annex (through a Site Managers (SM)) covered by this contract for the administration and technical supervision of Contractor employees. The PM shall be the primary representative and have full autonomous authority to act on matters pertaining to the services under the PWS and annexes, across all functions and acts as the primary interface between the Contractor, the CO, and Contracting Officer’s Representative (COR). The PM shall notify the CO and COR of any situations that may adversely impact the timely and cost-effective delivery of quality products and services under this contract.

D. The PM shall be available to the CO and COR 24 hours a day, 7 days a week, and shall return calls or messages within 60 minutes.

E. The Contractor shall provide a single point-of-contact, a Site Manager (SM), located at each ER Center covered by this contract for the administration and technical supervision of Contractor employees. The SM shall be the PM’s primary representative at each ER Center and operating location and have the PM’s full autonomous authority to act on matters pertaining to the services under this contract across all functions and acts as the primary interface between the PM, the Center CO, and Task Monitor. The SM shall notify the Center CO and Task Monitor of any situations that may adversely impact the timely and cost-effective delivery of quality products and services under the annexes to the contract.

F. The SM shall be available to the Center CO and Task Monitor 24 hours a day, 7 days a week, and shall return calls and messages within 60 minutes. The SM shall be on duty during the hours designated in the annexes.

G. The PM and SM shall attend meetings to discuss contract and business management as it relates to their annexes and other contract-related meetings when directed by the CO and/or COR, and the Task Monitor.

H. In the event the PM or the SM is absent, whether for vacation or medical reasons, the Contractor shall notify the involved Task Monitor and CO of the succession.

I. The Contractor shall not supplement exempt or non-exempt employees into vacant positions identified within an annex position requirement to avoid hiring unless otherwise specified within Collective Bargaining Agreements (CBAs), without submitting in writing. The Contractor shall submit to the involved Task Monitor a business continuity plan for all vacant positions for approval by the Government. DRD PM-016, Badged Employee and Remote IT User Listing.

J. Contractor personnel from various ER Centers and Component Facilities shall have the ability to seamlessly inter-operate during Agency related contingencies worldwide, and in the event of emergencies, or special projects.

K. The Contractor shall provide resumes of any key personnel being proposed to fill a vacancy that meets PM and SM qualifications. Contractor shall:

(1) Provide the resume of the proposed PM and all ER Site Managers 30 days before the personnel action for review and concurrence of the involved COR, Task Monitor, CO, and Center CO.

(2) Provide proposed lines of communications between the SM, PM, involved COR and CO, 60 days prior to transition.

(3) Provide current resumes for key personnel for each annex, and update when any changes are made.

(4) Ensure resumes do not exceed 4 pages, in Arial 12pt

L. Ensure compliance with Agency Standards in accordance with the following attachments:

(1) D-3, Vehicle Standards

(2) D-4, Uniforms

(3) D-5, Deduction Schedule for Non-Conforming Services

(4) D-6, Minimum Agency Medical Screening Standards for Armed Personnel

(5) D-7, Screening Standards for Armed Personnel

1.1 BUSINESS MANAGEMENT

The Contractor shall:

A. Provide a resource management system to track and report all contract work activity, including subcontracts and IDIQ Task Orders (TO). The resource management system shall provide timely and accurate visibility of contract status including workforce, price, and schedule performance. DRD PM-010, Monthly Task Order Price Report.

B. Apprise the COR, Task Monitor, CO, and Center CO of any contract human resource issues that could have an impact on the successful performance of contract requirements or may negatively reflect on the Government. Participate in periodic meetings scheduled by the involved Protective Service Office, CO, COR, or Task Monitor.

C. Provide notice to the Government in accordance with DRD PM -003, Advanced Notification of Workforce Reductions Report and DRD PM-004, Strike Contingency Plan.

D. Reserved.

E. Ensure the proper accountability, control, use, and maintenance of Government Furnished Equipment (GFE), (Federal Acquisition Regulations (FAR) Part 45) equipment that is owned by the government and delivered to or made available to the contractor.

F. Develop a planning process to prioritize the replacement of GFE, including the refurbishment of existing equipment and new equipment purchases, to ensure safe and reliable operation.

G. Provide a list of all equipment items and submit in accordance with DRD PM-005, Government Property Management.

H. Procure and maintain Contractor-owned property.

I. Be able to support local level procurement for GFE and Contractor-acquired property (FAR 52.245-1 Government Property, property acquired, fabricated, or otherwise provided by the Contractor for performing a contract, and to which the Government has title) within 60 days.

J. Serve as the property custodian for all Installation Accountable Property provided or acquired under this contract and annexes. The Contractor’s custodial responsibilities are defined in the Center property requirements and NASA Procedural Requirements (NPR) 4200.1G, NASA Equipment Management Procedural Requirements, and NPR 4200.2B, Equipment Management Manual for Property Custodians. When GFE property assigned to the Contractor is no longer needed and has been approved for excess by the Task Monitor, the Contractor shall prepare property for excess, complete the NASA forms to have the property processed for excess through official NASA systems for excessing controlled, Government property, and arrange for property excess.

K. Utilize the involved Center’s Transportation Officer, Central Supply, and Facility as its receiving agent.

L. Assist the Government in management and oversight of the facilities assigned under this contract and Annexes. Identify and track facility requirements by requesting facility services, maintenance, and repairs from the Government.

M. Reserved.

N. Provide estimated travel costs, coordinate, and obtain the involved Task Monitor’s approval for Government directed travel. All Government-directed travel shall meet the Government rates for per diem and travel. All authorized travel shall be conducted and reimbursed in accordance with the Federal Travel Regulations.

O. Provide continuous assessment and evaluation to identify protective service weaknesses and vulnerabilities and recommend appropriate corrective action. The Contractor shall participate in After Action Reviews and Lean Six Sigma Process Improvement events.

P. Provide responsive, customer-focused services through communication and coordination with the Government and other NASA contractors.

Q. Adhere to existing work processes at contract effective date and subsequently review for continued applicability unless otherwise specified in the contract. Update and maintain these processes or, where warranted, develop, and maintain new processes for improved effectiveness and efficiency. Coordinate with the Government on any content changes or new processes.

R. Maintain cognizance of proposed and implemented changes to all compliance documents including all applicable laws, regulations, policies, and directives. Identify impacts to Contractor requirements, processes, and practices.

S. Make trade-off recommendations to the Government for new or changing requirements to avoid cost impacts.

T. Refrain from including proprietary markings on any Contractor-developed documentation including but not limited to plans, processes, and procedures. Contractor proprietary marking may be included only on contractor internal documents.

U. Ensure employees possess and maintain the required security clearance level prior to performing any work on the NPS-ER. The required National Security Clearance level for the NPS-ER is TOP SECRET (TS)/Sensitive Compartment Information (SCI). The clearance level TS/SCI will be specified in the PWS annexes, and only those contract employees required to support this area will be required to possess and maintain a TS/SCI. All other contract employees will obtain and maintain National Security Clearance Level of SECRET.

V. Provide the Government, or authorized Government representatives, immediate access to the sites or areas where work under this contract is being performed to conduct audits, assessments, surveillance, and inspection activities or any other official purpose identified by the Government’s representatives in the performance of their official duties.

W. Provide contract administrative support (e.g., property, safety, fleet vehicle management, training operations) to ensure contract requirements are met. DRD PM-009, Training Plan Report(s).

X. Ensure all requirements for initiating employee clearances/background investigations are submitted to the Government within 15 days after employee’s appointment.

Y. Ensure no employees have access to classified or restricted areas until a minimum of an Interim Secret is adjudicated, granted, and annotated in Identity and Access Management (IdMAX). This does not relieve the Contractor from their performance requirements. DRD PM-017, Contractor Employee Clearance Document.

Z. Ensure employees are medically, physically, and psychologically fit for duty.

AA. Provide the funding for training, certifications, examinations, testing, and qualification, including travel and backfill labor, required to fulfill position requirements unless otherwise specified in the contract or annexes.

Note: Examples of Government-provided training; NASA Protective Services Training Academy (NPSTA) course, SATERN Training and Government provided computer-based training. Labor hours for training are included in the base of the contract. The involved Task Monitor and CO will make further determinations regarding government required training costs.

BB. The Contractor shall, upon uploading initial and revised documentation (e.g., DRDs, Plans, Standard Operating Procedures) use the annexes government provided electronic site for collaboration, review, and final use.

1.2 SAFETY AND HEALTH

The Contractor shall:

A. Be a vocal advocate for safety and establish and maintain a comprehensive safety and health program throughout all organizations of the Contract, including subcontractors, that complies with applicable Federal, state, local, NASA, and involved Center safety and health laws, regulations, policies, and directives. Maintain cognizance of proposed and implemented changes to the same. Provide timely notification to employees of any changes or modifications to policies, procedures, or systems used to control exposure to safety and health hazards.

B. Comply with applicable standards of the Federal Highway Administration and the Department of Transportation when operating motor vehicles. Personnel operating or utilizing vehicles shall have had the proper training or licensing for operating each vehicle type. For motorist and responder safeguards, the Contractor shall abide by National Traffic Incident Management procedures while operating on the roadway.

C. Incorporate safety and health measures in the performance of this contract to ensure the protection of the public, pilots, and NASA and contractor workforce, tenants, partners, and equipment and property as described in NASA FAR Supplement (NFS) 1852.22370, Safety and Health.

D. Maintain safe and healthful operating locations at all Centers participating under this contract and be proactive in the protection of personnel and property, in accordance with NFS 1852.223-75, Major Breach of Safety or Security. Conduct daily safety and health inspections of all Contractor occupied spaces. The Contractor shall document and report all safety and health findings and track to closure. Notify the involved Task Monitor of safety and occupational health concerns.

E. Comply with NFS 1852.223-70(c), Safety and Health Measures and Mishap Reporting, in regard to protecting Contractor employees in the event of a pandemic or natural disaster, including but not limited to procuring and distributing appropriate personal protective equipment to their employees.

F. The Contractor shall provide a Health and Safety Plan. The Contractor shall define and detail the Contractor’s Health and Safety Program for its employees. Implement the plan in accordance with approved proposal to each annex and update within 60 calendar days of contract award and annually.

G. Provide the authorized Government representatives, immediate access to personnel and sites or areas where work under this contract is being performed to complete safety, health, and mission assurance audits, assessments, surveillance, inspections, and investigative activities.

Provide all audit, assessment, surveillance, inspection, and investigation records to such Government representatives upon request.

H. Prepare for and participate in internal or external audits as requested (e.g., Institutional/Facility/Operational SMA Audit (IFOSA), Quality Audit, Assessment, and Review (QAAR), and Voluntary Protection Program (VPP).

I. Comply with NPR 8621.1D, NASA Procedural Requirements for Mishap and Close Call Reporting, Investigating, and Recordkeeping; NFS 1852.223-70, Safety and Health Measures and Mishap Reporting; and applicable Center requirements as defined in the annexes in the event that any activity during the performance of this contract results in a NASA mishap or close call. The Contractor shall use the NASA Mishap Information System (NMIS) to electronically report mishaps, close calls, and hazards as defined by NPR- 8621.1D. The Contractor shall encourage all employees located onsite to report hazardous conditions and/or situations which, if not corrected, have the potential to result in an injury to personnel or damage to equipment/property. Contract personnel may also report concerns anonymously about hazards through the NASA Safety Reporting System.

https://ops.fhwa.dot.gov/eto_tim_pse/index.htm https://ops.fhwa.dot.gov/eto_tim_pse/index.htm https://nsc.nasa.gov/mishaps/nasa-mishap-information-system https://nsc.nasa.gov/mishaps/nasa-mishap-information-system https://sma.nasa.gov/sma-disciplines/nsrs

J. Support NASA’s participation in the Occupational Safety and Health Administration’s (OSHA) Voluntary Protection Program (VPP) or its equivalent. See annexes for specific Center VPP requirements.

K. Support Center safety and health meetings including working groups and panels, as indicated in the annexes. The Contractor shall participate in safety and health meetings including working groups and panels as requested.

L. Develop, submit, and maintain DRD SA-002, Safety, Health and Environment (SHE) Plan, as required by NFS 1852.223-73, Safety and Health Plan. Refer to the DRD for requirements.

M. Submit Safety Statistics and Mishap Reporting per DRD SA-001 Mishaps and Safety Statistics Refer to the DRD for requirements.

N. The SM or other designee from the involved annex shall serve as the Contract liaison to report compliance of safety and health requirements. This appointment shall be in writing to the Task Monitor.

O. Comply with additional safety and health requirements identified in the involved annexes.

1.3 QUALITY PLAN

The Contractor shall:

A. Implement a Quality Management System (QMS) that is compliant with the American National Standards Institute/ International Organization for Standardization (ISO)/American Society for Quality 9001-2015, QMS – Requirements, and develop a Quality Management Plan in accordance with DRD QA-001 Quality Control Plan.

(1) Implement the QMS at contract start.

(2) Continually improve the QMS throughout the life of the contract and update the quality management plan accordingly. The Contractor shall assess potential sources of supply to determine the risk of receiving nonauthentic parts.

A. Assess potential sources of supply to determine the risk of receiving nonauthentic parts.

When feasible, obtain supplies through an Original Component Manufacturer (OCM)/Original Equipment Manufacturer (OEM), or through an OCM/OEM authorized distributor chain.

Note: OCM/OEM authorized distributor chain (e.g., franchised distributors), and authorized aftermarket manufacturers are considered to have low risk of supplying nonauthentic parts.

B. Mitigate all risks of procuring counterfeit parts from sources other than OCM/OEM or authorized distributor chains. If suspect or counterfeit parts are furnished under this agreement and are found on the site, such items shall be impounded by site.

C. Notify NASA Protective Services Office and S&MA personnel of nonconforming products or failures that affect safety, reliability, or functionality.

D. Identify a point-of-contact to support the Center Government-Industry Data Exchange Program (GIDEP) Coordinator, and the Contractor shall:

(1) Participate in the GIDEP in accordance with:

(a) SO300-BT-PRO-010, GIDEP Operations Manual

(b) SO300-BU-GYD-010, GIDEP Requirement Guide

(2) Review and disposition GIDEP Notices and NASA Advisories in the NASA Advisories, Notices, and Alerts Distribution and Response Tracking System (NANADARTS) to determine if they affect the Contractor's products or services provided to the Government. DRD PM-018, Government-Industry Data Exchange Program (GIDEP).

(3) Respond by documenting whether GIDEP Notices and NASA Advisories affects the Contractor's products and services provided to the Government.

(4) Be responsible for stating whether GIDEP Notices and NASA Advisories affects the subcontractor's products and services provided to the Government. For GIDEP Notices and NASA Advisories that affect the Contractor's products and services provided to the Government, the Contractor shall take action to eliminate or mitigate any negative effect and inform the Government of such actions to ensure GIDEP Notices and NASA Advisories adhere to closed-loop reporting.

(5) Generate GIDEP Notices in accordance with the GIDEP Operations Manual and GIDEP Requirements Guide whenever failed or nonconforming items available to other buyers are discovered.

1.4 ENVIRONMENTAL MANAGEMENT

The Contractor shall, consistent with the requirements of a annexes:

A. Ensure that all contract operations, activities, and assigned systems, facilities, and equipment are in compliance with Federal, state, and local environmental laws, regulations, ordinances, executive orders, permits, and licenses as well as all NASA environmental policy, plans, and requirements documents, including the most recent versions of the following documents:

• NPD 8500.1, NASA Environmental Management

• NPR 8510.1A, NASA Cultural Resources Management

• NPR 8530.1B, NASA Sustainable Acquisition

• NPR 8553.1C, NASA Environmental Management System

• NPR 8570.1B, NASA Energy Management Program

• NPR 8580.1, Implementing the National Environmental Policy Act and Executive Order 12114

B. The SM or other designee of the involved annex shall serve as the Contract liaison to report compliance of environmental requirements This appoint shall be in writing to the Task Monitor.

C. Implement internal policies, procedures, and oversight as necessary to ensure environmental compliance. (See, DRD SA-002, Safety, Health and Environment (SHE) Plan).

D. Participate in regulatory agency inspections and NASA internal inspections, audits, and Environmental and Energy Functional Reviews when requested by the Government.

Provide Government personnel or authorized Contractor representatives access to Contractor sites and work areas to conduct surveillance activities and to ensure compliance with environmental laws, regulations, and permits. Implement corrective actions to findings and deficiencies identified by the Government. Submit written corrective action plans and finding closure documentation when requested by the Government.

E. Ensure that environmental regulatory agency interactions or correspondence relating to NASA activities or contract activities are performed by or coordinated through the involved Center Environmental Office.

F. Respond to environmental data calls regarding contract operations and activities, and Contractor-assigned systems, facilities, and equipment when requested by the Government. Submit responses in the format outlined in the data call. Examples include, but are not limited to, environmental compliance records, regulatory agency requests for information, hazardous and controlled waste site information, waste management training records, air emission source inventories, storage tank inventories, and chemical usage and storage records.

G. Comply with additional environmental requirements identified in the annexes.

1.5 INFORMATION TECHNOLOGY (IT)

The Contractor shall:

A. Obtain all IT products and services needed to process NASA data only from NASA.

B. Comply with the information security requirements of NASA Policy Directive (NPD) 2810.1, NASA Information Security Policy; NPR 2810.1A, Security of Information Technology; and the IT Security Handbooks identified in the Applicable Documents List (ADL) in NASA Federal Acquisition Regulation Supplement 1852.204-76, Security

Requirements for Unclassified Information Technology Resources. DRD PM-012, Information Technology (IT) Systems Security Plan.

C. Comply with information protection requirements in accordance with NPD 1382.17J, NASA Privacy Policy; NPR 1382.1A, NASA Privacy Procedural Requirements; and the IT Security Handbooks identified in the ADL. Assess all information collections to ensure compliance with Federal regulations and privacy protection requirements using the NASA-provided assessment tool, Risk, Information Security Compliance System (RISCS). Access to RISCS may be granted through a NASA Access Management System (NAMS) request.

D. Manage information security and implement security controls in accordance with NPR 2810.1A, Security of Information Technology, and DRD PM-011, Information Technology Management Security Plan.

E. Ensure successful completion of all mandatory annual IT Security Training for all Contractor personnel as defined in IT Security Handbooks and ITSSP.

(1) NASA Information Security Awareness and Privacy Training.

(2) Other IT Security Training, as required by the Government and provided in the System for Administration, Training, and Educational Resources for NASA (SATERN).

F. Provide support to NASA IT Security Offices for Contractor IT security incidents or investigations.

G. Notify the Security Operations Center (SOC) followed by the Chief Information Security Officer (CISO) and the PSO, within one hour upon discovery of an incident involving Sensitive But Unclassified (SBU)/Controlled Unclassified Information (CUI), Personally Identifiable Information (PII), or Export Control information.

H. Submit an encrypted email with the initial assessment of event impacts and plan for mitigation within eight hours after acknowledgement after notifying the SOC, CISO and PSO of an incident involving SBU/CUI, PII, or Export Control information, and provide continued support and status until the incident is resolved.

I. Protect all sensitive information in accordance with NPR 1600.1, NASA Security Program Procedural Requirements Section 5.24, Sensitive But Unclassified (SBU) Controlled Information, and the follow-on Executive Order 13556, Controlled Unclassified Information

(CUI).

J. Encrypt sensitive information (e.g., SBU/CUI, PII, Export Control) at the file and electronic mail levels using a Government-approved solution.

K. Obtain all desktop and workstations used for office automation from the current NASA approved service providers. The Contractor shall request through the Task Monitor and the Office of the Chief Information Officer’s (OCIO) approval of any exemption from the use of the NASA-provided IT products and services.

L. Comply with NPR 2810.2, Possession and Use of NASA Information and Information Systems Outside of the United States and United States Territories, is followed by getting OCIO approval before taking any electronic devices outside the U.S. and Territories, including any personal devices that includes NASA data.

M. Comply with NPD 2540.1, Acceptable use of Government Office Property Including Information Technology.

N. Comply with the Use of Unauthorized Device (UD) memorandum and ensure that all IT devices have an approved Authorization to Operate (ATO) from a NASA Authorizing Official (AO) prior to the use of the IT device to store, process, or transmit NASA data. An UD includes but is not limited to a mobile phone, tablet, computer, USB drive, external drives, Internet of Things (IoT) device, wearable technology, or any other device that is capable of connecting to NASA's internal or non-public network or systems and does not have a valid ATO from a NASA AO, regardless of who provided or owns the device.

1.6 WORK MANAGEMENT

The Contractor shall, consistent with the requirements of an annex:

A. Provide an adequate staff, which is fully capable of executing contract responsibilities and responding to the requirements of this contract. (see Attachment D.1 Protective Services Position Description/Titles Guidelines, Attachment D-2, Center Annexes; Attachment D-3, Vehicle Standards; D-4, Uniforms; Attachment D-5, Deduction Schedule for Non- Conforming Services; Attachment D-6, Medical Screening Standards for Armed Personnel;

D-7, Screening Standards for Armed Personnel; Attachment D-8, Safety and Health Plan;

Attachment D-9, Government Property; Attachment D-10,Government Furnished IT Seats;

Attachment D-11, Glossary and Acronyms; Attachment D-12, Certifications and Training.

B. Achieve operational efficiencies and economies of scale - NASA expects considerable operational efficiencies and economies of scale resulting from implementation of a long-term NASA OPS East Region strategy for consolidation of identified protective services across the Agency. Such efficiencies that result in savings shall be realized across all ER annexes. Areas of emphases for potential operational efficiencies and economies of scale include but are not limited to:

(1) Standardization of the level of Protective Service activities across the ER Centers and Component Facilities.

(2) Standardization of NASA/Contractor process and procedures across ER Centers and Component Facilities.

(3) Standardization of Proficiency requirements and Training Standards within ER and consistent with OPS training guidance.

(4) Standardization of type of equipment, weapons, uniforms used within ER and the Agency.

(5) Consolidation of like services within ER at a single location for greater efficiency.

(6) Consolidation of contractor administrative services to a single location for greater efficiency.

(7) Consolidation of contractor Human Resources, training curriculum and records within ER and consistent with OPS training guidance.

(8) Economies of scale on contractor purchasing throughout ER (i.e. traffic cones and barriers.

(9) Standardization of ER specialized equipment, uniforms, personal protective equipment, vehicles, etc.

(10) Sharing of contractor resources across ER Centers and Component Facilities.

(11) Standardization of ER trainers, specialized capabilities, K-9 support, and armorer.

(12) Surge capability for disaster support throughout ER and the Agency.

(13) Contractor development, throughout ER, of a common information data base to track incidents, training, etc., consistent with OPS reporting and training guidance.

(14) Robust ER quality control.

C. Provide a work control system to track and report all contract work activity, including subcontracts DRD PM-008, Self-Assessment and Metrics Report.

D. Respond to changing service requirements and prioritize activities to best accomplish the intent of the contract. Strategies for responding to those changing levels of demand, whether they are triggered by NASA mission change, changes to the threat level, regulatory requirements, budgetary adjustments, or other factors, shall be coordinated with and approved by the involved Task Monitor and CO.

Note: Emergency Preparedness & Response: The Contractor’s obligations include resolution of unusual or emergency situations. The Contractor may be required to assist NASA within the general scope of work but in currently unidentified ways in preparation for or in response to emergencies.

Obligations under this requirement will only arise when one or more of the criteria at FAR 18.001, Emergency Acquisition Flexibilities, are met. If the emergency preparedness and response requirements result in changes to the contract, all contract adjustments will be processed in accordance with the Changes clause of this contract.

E. Remain cognizant of current protective services issues, trends, laws, regulations, and technologies.

F. Provide continuous assessment and evaluation to identify potential protective services weaknesses and vulnerabilities and recommend appropriate corrective action.

G. Develop, maintain, and update Standard Operating Procedures (SOPs) for specific annex and contract operations conducted under the NPS-ER contract (DRD PM-006 Standard Operating Procedure (SOP)). The Contractor shall develop annex specific SOPs and maintain/update annually or as required within 60 calendar days of notification by the Task Monitor. The Contractor shall ensure all employees understand and comply with approved SOPs.

H. Provide analytical support, developmental engineering, and independent study and analysis on an as-needed basis (to be issued under separate Task Order) to address evolving requirements resulting from NASA-specific threats and from the implementation of new federal mandates related to counterterrorism and homeland security. The contractor shall manage all emergency operations utilizing the National Incident Management System

(NIMS).

I. Be prepared to increase and enhance security safeguards and countermeasures in the event of an increased security threat based on the Department of Homeland Security National Threat Advisory or other credible threat indicators.

J. Perform work in such a manner that causes minimal or no interruption to/or interference with proper execution of Government business.

K. Ensure all contract personnel have a national security clearance commensurate with the highest level of classified information to which they have access. At a minimum, the following positions require a TS clearance: Site Managers and COMSEC personnel require TS/SCI clearance.

L. Report (including self-reporting) any security violation or derogatory information of an employee to the Contractor Facility Security Officer (FSO) and to the involved Center Chief of Protective Services within 24-hours of being notified of such violations. (Security Violations and Derogatory Information are defined in the National Industrial Security Program Operating Manual [NISPOM]).

M. Perform all services in compliance with applicable Federal and state laws and NASA regulations and policies. Specific reference is made to the provisions of law included in Part I, Chapter 44, Section 922 Title 18, United States Code (USC), concerning the prohibition of firearms possession for individuals convicted or indicted under charges of a felony or misdemeanor crime of domestic violence.

N. Implement policy and be responsible for maintaining professional employee conduct and integrity to include:

(1) Initiating and administering any disciplinary action to employees, as may be necessary, including removal from the contract.

(2) The Contractor shall take immediate disciplinary actions for personal neglect or dereliction of duties. This includes but is not limited to sleeping, listening to unauthorized electronic devices, watching television, and reading books, newspapers, and other material not connected with official duties (e.g., post orders).

O. Inform all contract employees that the misuse of Government Property, theft, unreasonable delays or failure to carry out assigned tasks, conducting personal affairs during duty hours, violation of security protocols or intentional deception, manipulation of security measures to prevent their intended use, refusing to render assistance or cooperate in upholding the intent of worksite security, and failure to cooperate in quality assurance and safety inspections or other investigations conducted by the Government, can be grounds for the removal of the employee from NASA property.

P. Implement and enforce a standard dress code policy to ensure contract employees wear either appropriate civilian attire or the prescribed duty uniform while on duty. Examples of improper appearance include but are not limited to: unclean or un-pressed clothing; dirty or un-shined shoes; incomplete, ill-fitting, or improperly worn uniforms; and any other facet of the uniform including missing PPE that would create an unsafe condition or an appearance that could reasonably create a negative perception of the Government, NASA, or the Office of Protective Services.

Q. Manage the total work effort associated with the protective services required to ensure adequate and timely completion of services. Included in this function will be a full range of management and administrative duties including program management, phase-in planning, scheduling, report preparation, risk management, establishing and maintaining records, and quality control.

R. Prohibit the display of corporate logos, trademarks, badges, patches, decals, or other wording, or any distinctive corporate markings on any credential, duty uniform, or part thereof, or security vehicle or part thereof, or security post, or document, including electronic communications with a NASA.GOV account, other than standard internal management documents and records, which would identify the Contractor’s company affiliation.

S. Obtain, track, maintain, and provide inventory accountability of all equipment, including all

GFE.

T. Provide support from positions covered in the PWS to other NASA Centers for emergencies (e.g., natural disasters, other emergencies) when directed by the COR (IDIQ Travel).

1.7 RECORDS MANAGEMENT

The Contractor shall, consistent with the requirements of an annex:

A. Ensure accurate and complete records of Government business are maintained in accordance with the NPR 1441.1E, NASA Records Management Program Requirements. Information includes electronic and paper records, including but not limited to legacy records inherited from previous contracts. Records of Government business shall be segregated from company-owned records and from non-record materials. Provide the Government access to

Government records in accordance with FAR Subpart 4.7, Contractor Records Retention.

The Government reserves the right to inspect, audit, and copy record holdings.

Note: Ensure all records of Government business are fully managed in an electronic format. Where a paper record is identified in this contract or in any applicable regulation the COR, Task Monitor, CO, or Center CO shall, as determined appropriate, be the approvers for continued use, management, and retention of paper records.

B. Develop, implement, and maintain a Records Management Program Plan in accordance with the following DRDs:

(1) DRD PM-013, Records Management

(2) DRD PM-014, Summary of Holdings (File Plan)

(3) DRD PM-019, Contract Records Close out Plan

C. The Contractor shall ensure the Records Management Program and File Plan requirements are adhered to.

1.8 VEHICLE MANAGEMENT

The Contractor shall, consistent with the requirements of an annex:

A. Perform vehicle management functions in accordance with NPR 6200.1D, NASA Transportation and General Traffic Management; NPD 6000.1D, Transportation Management; Center requirements; NASA Official Fleet Management Handbook; and EO 13834, Efficient Federal Operations as it relates to greenhouse effects.

B. Operate and maintain all GSA/NASA vehicles provided as GFE.

Note: Other than areas/amenities for vehicle washing, preventive maintenance (fluids, components, pressures, and safety checks) and refueling, there are no Government-furnished facilities for maintaining Contractor-provided vehicles.

C. Ensure all drivers have proper state licenses with applicable endorsements for equipment they operate.

D. Input the required fleet data into the Federal Automotive Statistical Tool (FAST) for any GSA-leased and Government-furnished vehicles annually, as scheduled by the NASA Agency Transportation Manager.

E. Comply with the vehicle manufacturer’s normal service schedule for all Government furnished vehicles and take full advantage of manufacturer warranty repairs when applicable.

F. Provide a Vehicle Utilization Plan per local policy.

G. Provide a GSA/NASA Vehicle Damage Report per local policy.

H. Provide vehicles properly marked and outfitted in accordance with the requirements of Attachment D-3, Vehicle Standards.

2.0 INFORMATION SECURITY (INFOSEC) AND COMMUNICATIONS SECURITY

(COMSEC)

Information Security and Communications Security concern the safeguarding and transmission of Classified National Security Information (CNSI) in accordance with Federal law, including but not limited to, Executive Order 13526, Classified National Security Information; the National Industrial Security Program Operating Manual (NISPOM, Information Security Oversight Office (ISOO); and NPR 1600.6, NASA Communication Security. Some of these tasks require a TOP SECRET/SCI security clearance and COMSEC briefing. As required by annexes, the Contractor shall provide COMSEC services in accordance with Presidential Decision Directives and the Committee on National Security Systems (CNSS) Directives, Instructions, Manuals, and Advisories, as well as NASA policies and procedures affecting intelligence, security, technology protection, and operations security.

The Contractor shall, consistent with the requirements of an annex:

A. Develop and implement a Security Education and Training Program Plan for all personnel at the individual Centers in accordance with NASA Procedural Requirements (NPR) 1600.1A and (NPR) 1600.2A. Required training/briefings include but are not limited to new employee initial security orientation, initial and refresher training for cleared personnel, classified custodian briefing, derivative classifier training, material/training to meet triennial security training for all un-cleared personnel, and security awareness information/products, as needed. The Security Training Program shall meet NASA Export Control NPR 2190.1C, paragraphs 2.6h and 2.11.

B. Serve as the liaison for security training records and ensure all contractor training records are maintained/updated in SATERN.

C. Ensure proper storage of various levels of classified documents and COMSEC materials in storage containers and devices according to applicable policies and procedures.

D. Provide COMSEC services to support Center requirements.

E. Support COMSEC voice and Secure Tele-conferencing Equipment (STE) or updated versions.

F. Develop, track, and administer required annual COMSEC Training for both civil servants and participating contractors.

G. Report any COMSEC violations in writing to the COMSEC Office Record within two hours.

H. Develop, implement, and maintain a training program that ensures all personnel granted a security clearance are trained to comply with Executive Order 13526 Classified National Security Information (EO 13526).

I. Develop and publish a quarterly security awareness newsletter to NASA Protective Services Office (PSO) for approval and distribute to all Center personnel. Attend the annual NASA COMSEC Conference (IDIQ Travel).

J. Provide COMSEC support for dignitary/VIP visits.

K. Provide support for the destruction of CUI/SBU/For Official Use Only material (this includes all forms of media and is not limited to paper, all types of film and memory storage devices).

L. Attend NASA COMSEC Office of Record training and certification.

3.0 EMERGENCY MANAGEMENT

Emergency Management (EM) personnel shall operate under the Four Tenets of Emergency Management framework: Emergency Preparedness, Emergency Operations, Continuity of Operations (COOP), and Test, Training and Exercise (TT&E). The four phases of emergency management, (preparedness, response, mitigation, and recovery) are described in each Centers’ Emergency Management Plan (CEMP).

The Contractor shall, consistent with the requirements of an annex:

A. Provide a professionally-managed, comprehensive emergency management program that complies with National Fire Protection Association (NFPA) 1600, Standard on Disaster/Emergency Management and Business Continuity Programs; NFPA 1561, Standard on Emergency Services Incident Management System and Command Safety; and NPR 8715.2, NASA Emergency Management Program Requirements; and Emergency Management Center plans.

B. Develop, maintain, and implement an Emergency Management Program Plan that includes each ER Center as specified in DRD PM-002, Comprehensive Emergency Management Plan

(CEMP).

C. Ensure Contractor personnel assigned to the Emergency Management Program are certified as an Emergency Response Official (ERO) and have completed ICS-100: Introduction to the Incident Command System; ICS-200: ICS for Single Resources and Initial Action Incidents.

Supervisors (PM and SM), and those assigned to work in the EOC and PSCC shall also complete ICS-300: Intermediate ICS for Expanding Incidents; ICS-400: Advanced ICS for Command and General Staff; IS-700: National Incident Management System (NIMS). While it is recommended for professional development, only the PM, SM, and ECO staff workers are required to complete IS-701: NIMS Multiagency Coordination System; IS-706: NIMS Intrastate Mutual Aid - An Introduction; IS-775: EOC Management and Operations; and IS- 800: National Response Framework, An Introduction.

3.1 EMERGENCY PREPAREDNESS

The Contractor shall, consistent with the requirements of an annex:

A. Comply with the requirements of the Center Emergency Management Directives and provide updates to subject document to the NASA Emergency Management Officer (NEMO).

B. Provide comprehensive planning in policy, procedures, directives, and all-hazard assessment requirements per DRD PM-001, Contingency and Emergency Plan.

C. Implement applicable emergency preparedness policies and directives from NASA Headquarters, Federal, state, and local directives. Provide for an integrated and coordinated Federal, state, and local response consistent with the National Incident Management System (NIMS); the National Response Framework (NRF); NFPA 1600; and NFPA 1561.

D. Implement protective measures and mitigation strategies in accordance with involved Center directives to safeguard Government-Furnished Facilities and GFE.

E. Maintain the capability to respond to and coordinate emergency management support to Agency or national emergencies.

F. As required by annexes, conduct operational readiness checks and coordinate repairs of applicable GFE hand-held, mobile, and fixed communication devices (e.g., high frequency radios, Emergency Mass Notification Systems, ERT and ERO notifications, ham radios, radios, cell phones, satellite, and facsimile system) in accordance with DRD PM-005, Government Property Management.

G. Conduct operational and process verification reviews of existing plans from center employees, partners, visitors, and tenants to ensure all CEMP requirements are adequately addressed.

3.2 EMERGENCY OPERATIONS

The Contractor shall provide operation support and staff the Emergency Operations Center (EOC), which comprises consoles and communications equipment.

The Contractor shall, consistent with the requirements of an annex:

A. Provide EOC support, interoperable communications processes and systems, damage assessments,…