B04 e) Attachment 0001 - HS002126QE023 PWS.pdf

Performance Work Statement

Michigan Fingerprint Channeling Data Collection & Analysis – Outreach

June 2026

Version October 2023 Page 2 of 20

Performance Work Statement Defense Counterintelligence and Security Agency

Data Collection & Analysis – Outreach Michigan Fingerprint Channeling

Part 1

General Information

1. General: This is a non-personal services contract to provide for digitizing fingerprints and transmitting to the State of Michigan to provide criminal history record information (CHRI). The Government shall not exercise direct supervision or control over the contract service providers performing the services herein.

Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.1. Description of Services/Introduction: The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and services necessary to perform fingerprint channeling for the purpose of obtaining CHRI from the State of Michigan as defined in this Performance Work Statement (PWS) except for those items specified as Government furnished property and services. The Contractor shall perform to the standards in this contract.

1.2. Background: The mission of the Defense Counterintelligence and Security Agency (DCSA) is continuously ensuring a trusted federal, industrial, and affiliated workforce, and enabling industry’s delivery of uncompromised capabilities by leveraging advanced technologies and innovation. The mission of the DCSA Data Collection & Analysis (DC&A) is to obtain data source records for inclusion in the Federal Personnel Vetting program, including: background investigations, continuous vetting, and adjudications programs. This acquisition will allow DCSA to complete its mission by obtaining CHRI throughout the DCSA personnel vetting mission.

DCSA has a recurring requirement for a simplified method of filling the repetitive needs for fingerprint channeling for the purpose of obtaining CHRI from the State of Michigan. DCSA is committed to conducting background investigations on individuals (employees or applicants) for federal employment, members of the military, consultants, volunteers, and/or vendor personnel for national security purposes. This requirement is for CHRI in support of background investigations as DCSA obtains criminal history records in order to meet the requirements of the Intelligence Reform and Terrorism Prevention Act of 2004.

The following authorities provide DCSA and its Agents the authorization to request and maintain information, depending on the purpose of the investigation: Executive Orders (E.O.s) 9397, 10450, 10577, 10865, 12333, and 12968, as amended; E.O.s 13467, 13488, and 13549; 5 U.S.C. sections 1103, 1302, 1303, 1304, 3301, 7301, 9101, and 11001; 22 U.S.C. sections 272b, 290a, and 2519; 31 U.S.C.

section 1537; 42 U.S.C. sections 1874(b)(3), 2165, 2201, and 20132; 50 U.S.C. section 3341; Public Law 108-136; 5 C.F.R. parts 2, 5, 731, 732, 736, and 1400; and Homeland Security Presidential Directive 12 (HSPD 12). Public Law 101-647, Crime Control Act of 1990.

1.3. Objectives: Digitizing fingerprints and transmitting to the State of Michigan in order to collect CHRI as a routine part of conducting background investigations on individuals (employees or applicants) for federal employment, members of the military, consultants, volunteers, and/or vendor personnel for national security purposes.

Version October 2023 Page 3 of 20

1.4. Scope: These are commercial, non-personal services which include digitizing and transmitting fingerprints to the State of Michigan to CHRI. The Contractor shall accomplish digitizing fingerprints and transmitting to the State of Michigan to provide CHRI in accordance with (IAW) the PWS.

1.5. Period of Performance: The period of performance (PoP) shall be for one (1) 12-month base period plus four (4) 12-month option periods as follows:

Base Period: 17 June 2026 through 16 June 2027 Option Period I: 17 June 2027 through 16 June 2028 Option Period II: 17 June 2028 through 16 June 2029 Option Period III: 17 June 2029 through 16 June 2030 Option Period IV: 17 June 2030 through 16 June 2031

1.6. General Information:

1.6.1. Quality Control: The Contractor shall develop and maintain an effective quality control program, including a Quality Control Plan (QCP), to ensure services are performed IAW this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control program is the means by which they assure themselves that their work complies with the requirement(s) of the contract. The QCP shall be delivered within 30 Calendar days of contract award via email to both the Contracting Officer (KO) and Contracting Officer’s Representative (COR) and within five (5) Business days when changes are made thereafter. After acceptance of the initial QCP the Contractor shall be required to solicit and receive the KO’s acceptance in writing of any proposed change to their quality control system and/or QCP.

1.6.2. Quality Assurance: The Government shall evaluate the Contractor’s performance under this contract IAW the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government must do to ensure that the Contractor has performed IAW the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.3. On-Site Working Conditions, Holidays and other Closures:

1.6.3.1. DCSA facilities are smoking restricted workplaces. Due to the nature of the work, facilities, and requirements, Contractor staff may only smoke outside in designated smoking areas.

1.6.3.2. The Government expects the Contractor will, at minimum, be available under this contract between 0800 to 1630 Eastern Standard Time (EST) Monday through Friday. The Contractor’s Program Manager (PM) and the Governments COR shall consult and coordinate on any proposed alternate work schedules that may be arranged depending on the operational tempo/needs of the mission.

1.6.3.3. Government personnel observe the following days as holidays and Government facilities and personnel will be unavailable to Contractor personnel on the following days:

New Year’s Day January 1st*

Martin Luther King’s Birthday Third Monday in January President’s Day Third Monday in February

Version October 2023 Page 4 of 20

Memorial Day Last Monday in May Independence Day July 4th* Juneteenth National Independence Day June 19*

Labor Day First Monday in September Columbus Day Second Monday in October

Veterans Day November 11th* Thanksgiving Day Fourth Thursday in November Christmas Day December 25th*

*If the date falls on a Saturday, the Government holiday is the preceding Friday.

If the date falls on a Sunday, the Government holiday is the following Monday.

1.6.3.4. In addition to the days designated as holidays, the Government observes the following days:

• Any other day designated by Federal Statute

• Any other day designated by Executive Order

• Any other day designated by the President’s Proclamation

1.6.3.5. It is understood and agreed upon between the Government and the Contractor that observance of such days by Government personnel shall not otherwise be a reason for an additional period of performance or entitlement of compensation except as set forth within the contract. In the event the Contractor's personnel work during the holiday, they may be reimbursed by the Contractor, however, no form of holiday or other premium compensation will be invoiced for or reimbursed either as a direct or indirect cost, other than what was agreed upon in the contract.

1.6.3.6. Reserved.

1.6.3.7. If Government personnel are unavailable due to furlough or for any other reason, the Contractor must contact the KO or the COR to receive direction. It is the Government's decision as to whether the contract price/cost will be affected and, generally, the following situations apply:

1.6.3.7.1. Contractor personnel who are able to continue contract performance must continue to work and the contract price shall not be reduced or increased.

1.6.3.7.2. Contractor personnel who are not able to continue contract performance (e.g., support functions) may be asked to cease their work effort. This may result in a reduction to the contract.

1.6.4. Hours of Operation: The Contractor is expected to be available to Government personnel, at mimimum, between the hours of 0800 to 1630 Eastern Standard Time (EST) Monday through Friday, except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings.

1.6.5. Place of Performance: The work to be performed under this contract will be conducted at the Contractor’s facility.

1.6.6. Type of Contract: The Government will award a Firm-Fixed-Price.

1.6.7. Security Requirements: All personnel performing under this order that will come in contact with, or have access to Personally Identifiable Information (PII), must be U.S. Persons and have record of a

Version October 2023 Page 5 of 20

U.S. Citizenship verification. There is no required level of investigation, but rather U.S. Citizenship verification. Any changes to the eligibility/clearance requirement or investigation requirement will be detailed in the orders. All PII must be handled IAW the Privacy Act of 1974.

1.6.7.1. Physical Security: The Contractor shall be responsible for safeguarding all Government information provided for Contractor use under this contract.

1.6.7.2. Key Control. Not Applicable.

1.6.8. Special Qualifications:

The following training is required for contractor personnel:

• Operations Security (OPSEC) Awareness Training: All contractor personnel shall complete OPSEC Awareness training IAW DoDM 5205.02.

• Privacy Act and Personally Identifiable Information (PII) Training: Contractor personnel performing activities associated with maintaining a system of records on behalf of a DoD component shall complete PII training IAW DoDI 5400.11, DoD 5400.11-R, and OMB Circular A- 130.

• DoD Mandatory Controlled Unclassified Information (CUI) Training: Contractor personnel with access to controlled unclassified information shall complete CUI training IAW DoDI 5200.48.

The Contractor shall submit, via email, certificates of completion for each affected Contractor and/or subcontractor employee, to the COR or to the KO. This training shall be completed and reported to the COR within 30 calendar days of contract award and annual refresher training for the remaining contract duration.

1.6.9. Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference and/or meeting convened by the KO or COR IAW FAR subpart 42.5. The KO, COR, and other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings, the KO will apprise the Contractor of how the Government views the Contractor's performance and the Contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues.

These meetings shall be at no additional cost to the Government.

1.6.10. Contracting Officer’s Representative: The COR will be identified by a separate, appointment/delegation letter. The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, and specifications; monitor Contractor's performance and notify both the KO and Contractor of any deficiencies; coordinate availability of Government furnished property; and provide site entry of Contractor personnel to Government facilities. A letter of designation/delegation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price and

Version October 2023 Page 6 of 20 estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.11. Key Personnel: The following personnel are considered key personnel by the Government:

Contract Manager. The Contractor shall provide a contract manager who shall be responsible for the performance of the work. The name of this person and an alternate who shall act for the Contractor when the manager is absent shall be designated in writing to the KO. The contract manager or alternate shall have full authority to act for the Contractor on all contract matters relating to daily operation of this contract. The contract manager or alternate shall be available between 0800 to 1630 Eastern Standard Time (EST) Monday through Friday, except Federal holidays or when the Government facility is closed for administrative reasons.

1.6.12. Contractor Manpower Reporting: Not applicable.

1.6.13. Identification of Contractor Employees: All contract personnel attending meetings, answering Government telephones, and working in other situations where their Contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. They must also ensure that all documents or reports produced by Contractors are suitably marked as Contractor products or that Contractor participation is appropriately disclosed.

1.6.14. Contractor Travel: No travel will be invoiced for or reimbursed under the terms of this contract.

1.6.15. Other Direct Costs: Not Applicable.

1.6.16. Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR subpart 9.5. The Contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI.

The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.17. Phase In/Phase Out Period: Not applicable.

Version October 2023 Page 7 of 20

Part 2 Definitions and Acronyms

2. Definitions and Acronyms:

2.1. Definitions:

2.1.1. Contractor. An offeror, supplier, or vendor awarded a contract to provide specific supplies or services to the Government. The term used in this contract refers to the prime contractor.

2.1.2. Contracting Officer. A person with authority to enter into, administer, and/or terminate contracts, and make related determinations and findings on behalf of the Government. Note: The only individual who can legally bind the Government.

2.1.3. Contracting Officer’s Representative. An employee of the U.S. Government appointed by the Contracting Officer to administer the contract. Such appointment shall be in writing and shall state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

2.1.4. Defective Service. A service output that does not meet the standard of performance associated with the Performance Work Statement.

2.1.5. Deliverable. Anything that can be physically or electronically delivered, and may include non-manufactured things such as meeting minutes or reports or completed training certificates/documentation.

2.1.6. Key Personnel. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract by the Key Personnel listed in the performance work statement. When key personnel are used as an evaluation factor in best value procurement, an offer can be rejected if it does not have a firm commitment from the persons that are listed in the proposal.

2.1.7. Physical Security. Actions that prevent the loss or damage of Government property.

2.1.8. Quality Assurance. The Government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

2.1.9. Quality Assurance Surveillance Plan. An organized written document specifying the surveillance methodology to be used for surveillance of Contractor performance.

2.1.10. Quality Control. All necessary measures taken by the Contractor to assure that the quality of an end product or service shall meet contract requirements.

2.1.11. Subcontractor. One that enters into a contract with a prime Contractor. The Government does not have privity of contract with the Subcontractor.

Version October 2023 Page 8 of 20

2.1.12. Work Day. The number of hours per day the Contractor provides services in accordance with the contract.

2.1.13. Work Week. Monday through Friday, unless specified otherwise.

Version October 2023 Page 9 of 20

2.2. Acronyms:

CFR Code of Federal Regulations CONUS Continental United States (excludes Alaska and Hawaii) COR Contracting Officer Representative COTS Commercial-Off-the-Shelf DCSA Defense Counterintelligence and Security Agency DD254 Department of Defense Contract Security Requirement List DFARS Defense Federal Acquisition Regulation Supplement DMDC Defense Manpower Data Center DOD Department of Defense FAR Federal Acquisition Regulation KO Contracting Officer OCI Organizational Conflict of Interest OCONUS Outside Continental United States (includes Alaska and Hawaii) ODC Other Direct Costs PIPO Phase In/Phase Out POC Point of Contact PRS Performance Requirements Summary PWS Performance Work Statement QA Quality Assurance QAP Quality Assurance Program QASP Quality Assurance Surveillance Plan QC Quality Control QCP Quality Control Program TE Technical Exhibit

Version October 2023 Page 10 of 20

Part 3 Government Furnished Property, Equipment and Services

3. Government Furnished Items and Services:

3.1. Services: Not Applicable.

3.2. Facilities: Not Applicable.

3.3. Utilities: Not Applicable.

3.4. Equipment: Not Applicable.

3.5. Materials: Not Applicable.

Version October 2023 Page 11 of 20

Part 4 Contractor Furnished Items and Services

4. Contractor Furnished Items and Responsibilities:

4.1. General: The Contractor shall furnish all supplies, equipment, facilities, materials, and services required to perform work under this contract that are not listed under Section 3 of this performance work statement.

4.2. Clearance: Not Applicable.

4.3. Materials: Not applicable.

4.4. Equipment: Not applicable.

Version October 2023 Page 12 of 20

Part 5 Specific Tasks

5. Specific Tasks:

5.1. Basic Services: The Contractor shall provide services for digitizing fingerprints and transmitting to the State of Michigan to provide criminal history record information (CHRI).

5.2. Tasks:

5.2.1 The Government will:

5.2.1.1 Provide the contractor with applicant subject information necessary to conduct the criminal history records check via a mailed hardcopy fingerprint (Standard Form 87 or FD-258).

5.2.1.2 Register the applicant via the contractor’s website or portal (if/when required).

5.2.2 The contractor shall:

5.2.2.1 Digitize the hardcopy fingerprint cards and electronically transmit the print and associated Personally Identifiable Information (PII) to the State repository, while properly safeguarding the confidentiality of data exchanged as per DCSA terms and conditions found within the PWS and provisions and clauses section of the contract.

5.2.3 The contractor shall be responsible for:

5.2.3.1 Ensuring the government receives a complete response to include “No Record” result on each applicant sent by DCSA to the vendor.

At minimum, any data the vendor returns to the government must contain: Identifiable descriptions and notations of arrests, indictments, informations, and other formal criminal charges;

5.2.3.1.1 Disposition information;

5.2.3.1.2 Information on sentencing, correction supervision, and release; and

5.2.3.1.3 Those records of a State or locality sealed pursuant to law if such records are accessible by State and local criminal justice agencies for the purpose of conducting background checks.

5.2.3.1.4 The contractor shall be responsible for any follow-up required with the State repository in the event a response is not received by DCSA on submitted applicants. The contractor shall provide a single, direct point of contact for this purpose.

5.2.3.1.5 The contractor, upon request, shall provide the status of each submission, including where in the process said request is at the prompting of the government.

5.2.3.2 Supporting documentation for invoicing purposes:

Version October 2023 Page 13 of 20

5.2.3.2.1 Shall contain an itemized list detailing the DCSA Case Number, DCSA Case Name or the subject’s last name, and corresponding CLIN information for each search provided.

5.2.3.2.2 Must be submitted electronically in an Excel spreadsheet at the time the invoice is submitted.

5.2.3.2.3 Neither the invoice, nor the supporting documentation shall contain any PII to include copies of reports, forms, and/or files.

5.2.3.2.3.1 Personally Identifiable Information (PII) includes any and all information that can be used to discern or trace a person's identity, such as name, social security number, biometric records, and/or which could be combined with other information and used to compromise the integrity of agency records relating to a person, by permitting access to unauthorized disclosure of these records. For example, a name alone would generally not constitute PII, but when linked to his or her social security number, date of birth, or mother's maiden name, would constitute PII. In other words, PII refers to any information, on any medium, that identifies a specific individual whether the information is on paper or electronic.

5.2.4 Bad Print Return Processing -

5.2.4.1 In the event a hardcopy fingerprint cannot be processed for any reason, the contractor shall, within one (1) business day, contact the COR and provide the specific reason for being unable to process with detailed instructions on how to correct or process a subsequent print/reprint.

5.2.5 Security -

5.2.5.1 Contractor will not have unsupervised access to Government systems and/or networks.

5.2.5.1.1 The contractor must notify the KO and COR in writing to request a visit. The contractor shall coordinate with the responsible DCSA OCIO or COR prior to any visit. The visiting contractor shall be escorted at all times by the responsible DCSA OCIO staff.

5.2.5.2 Controlled Unclassified Information (CUI) / Receive, Store, or Generate Controlled Unclassified Information (CUI):

5.2.5.2.1 Contractor will be provided and will abide by:

• DoD Regulation 5400.7, DoD Freedom of Information Act Program

• DoD 5200.01-M, Information Security Program. Guidance provided under separate cover.

• IAW DoDI 5200.48 (DoDI 5200.48) dated March 6, 2020, Contractors are required to ensure all personnel receive and complete Initial and Annual Refresher CUI education and training and maintain documentation of this training for audit purposes. Initial and Annual Refresher CUI security education, training, and awareness on the required topics identified in Section 2002:30 of Title 32 CFR, including protection and management of CUI, to DoD personnel and contractors through the Center for Development of Security Excellence (CDSE).

5.2.5.3 OPERATIONS SECURITY (OPSEC) REQUIREMENTS: The contractor shall comply with OPSEC requirements contained in the contract, addendum thereto, or identified herein. The contractor will comply with all security and OPSEC policies, directives, instructions or mandates as directed. OPSEC and

Version October 2023 Page 14 of 20 other security guidance issued to the Prime Contractor shall also apply to subcontractors working on this effort.

5.2.5.3.1 The contractor will ensure compliance with the Agency’s OPSEC Policy Statement, Critical Information and Indicators List (CIL), and unclassified document destruction procedures. Items of critical information are those facts, which individually, or in the aggregate, reveal sensitive details about the mission, operation, etc., and thus require protection from adversarial collection or exploitation.

5.2.5.3.2 Include OPSEC as part of the security awareness program. The contractor shall be familiar with OPSEC and will be required to take government furnished Initial and Annual refresher OPSEC training and will be reminded of their continued responsibility to protect sensitive information as directed by DoDM 5205.02. Sensitive unclassified information includes, but is not limited to, agency identified critical information, legacy “For Official Use Only” (FOUO), Controlled Unclassified Information (CUI), Privacy Act of 1974, Personally Identifiable Information (PII), Department of Defense Unclassified Controlled Nuclear Information (DoD UCNI), and company proprietary information.

5.2.5.3.3 The contractor shall take the necessary precautions to ensure employees with access to the sensitive and critical information are instructed not to disclose or disseminate any information relating to the conduct and performance of the contract to any individual not authorized to perform on this contract. Assigned personnel shall be knowledgeable of the designated critical information and measures in place to protect it.

5.2.5.3.4 Programs protected by a Program Protection Plan (PPP) and that have identified Critical Program Information (CPI) and/or Critical Technologies Information (CTI) must be identified and protected IAW DoDI 5200.39, CPI Identification and Protection within RDT&E. The contractor shall ensure that any program with CPI or CTI has the corresponding supplements and associated plan, such as an OPSEC plan, approved and in effect in support of the PPP.

5.2.5.3.5 The contractor shall comply with OPSEC content review policies within the Agency. A content review is an evaluation of all information, to include all CUI, intended for release outside the control of the organization or release to the public. OPSEC focuses on identifying and protecting the organization’s unclassified information that may individually, or in the aggregate, lead to the compromise of classified information and sensitive activities. The contractor will ensure that these reviews are conducted according to agency guidance IAW mandates from: DoDD 5205.02E, DoD OPSEC Program; DoDM 5205.02-M, DoD OPSEC Program Manual; DoDI 5230.09, Clearance of DoD Information for Public Release; DoDI 5230.29, Security and Policy Review of DoD Information for Public Release; DoDI 5400.04, Provision of Information to Congress; DoDM 5400.07, DoD FOIA Program; and DoDI 8170.01, Online Information Management and Electronic Messaging.

5.2.5.3.6 Further OPSEC guidance may be obtained by the Prime contractor by contacting the OPSEC PM by group e-mail: HYPERLINK "mailto:dcsa.quantico.dcsa-hq.mbx.operations-security@mail.mil"dcsa.quantico.dcsa-hq.mbx.operations-security@mail.mil.

5.2.5.4 All programs and materials developed at government expense during the performance period of this contract are the property of the US Government.

5.2.5.5 Contractor personnel shall utilize US Government or official company e-mail for transmitting official US Government business. Official US Government business shall NOT be transmitted via

Version October 2023 Page 15 of 20 personal, private, and/or commercial e-mail accounts, i.e., YAHOO, HOTMAIL, GMAIL, JUNO, AOL, COMCAST, KNOLOGY, VERIZON, etc.

5.3. Reports: The contractor must maintain a current and complete file of all documentation authorizing handling of CUI during the period of performance of the contract, unless otherwise instructed by the Contracting Officer (KO). Documentation will be made accessible during inspections or upon written request by the KO or the Contracting Officer’s Representative (COR).

Version October 2023 Page 16 of 20

Part 6 Applicable Publications

6. Applicable Publications (Current Editions):

• DoD Regulation 5400.7, DoD Freedom of Information Act Program;

• DoD 5200.01-M, DoD Information Security Program;

• DoDI 5200.48, Controlled Unclassified Information (CUI), dated March 6, 2020;

• Section 2002:30 of Title 32 CFR, Education and Training;

• DoDM 5205.02, Privacy Act of 1974;

• DoDI 5200.39, Critical Program Information (CPI) Identification and Protection within RDT&E;

• DoDD 5205.02E, DoD OPSEC Program;

• DoDM 5205.02-M, DoD OPSEC Program Manual;

• DoDI 5230.09, Clearance of DoD Information for Public Release;

• DoDI 5230.29, Security and Policy Review of DoD Information for Public Release;

• DoDI 5400.04, Provision of Information to Congress;

• DoDM 5400.07, DoD FOIA Program; and

• DoDI 8170.01, Online Information Management and Electronic Messaging.

6.1. The Contractor shall abide by all applicable regulations, publications, manuals, and local policies and procedures.

Version October 2023 Page 17 of 20

Part 7 Technical Exhibit Listing

7. Technical Exhibit List:

7.1. Technical Exhibit 1 – Performance Requirements Summary

7.2. Technical Exhibit 2 – Deliverables Schedule

Version October 2023 Page 18 of 20

Technical Exhibit 1: Performance Requirements Summary

The Contractor service requirements are summarized into performance objectives that relate directly to mission essential items. The performance threshold briefly describes the minimum acceptable levels of service required for each requirement. These thresholds are critical to mission success.

PRS

No.

Performance Objective

PWS

Reference Standard Performance

Threshold

Method of Surveillance

Digitization of hardcopy fingerprint cards and electronic transmission of print and associated PII to the State repository.

5.2.2.1 Results are to be

provided IAW PWS Section 5.2.2.1

Results are to be provided as described in the PWS 100% of the time.

100% inspection

File of all documentation authorizing handling of CUI for this contract.

5.3

Results are to be provided IAW PWS

Section 5.3

Maintained file of all current, required documentation including any and all updates.

Random Inspection

Complete response for each submitted applicant to include “No Record” results as well as any and all pertinent criminal history data.

5.2.3.1

Results are to be

Section 5.2.3.1

Results are to be provided as described in the PWS 100% of the time.

Periodic inspection, as needed

Contact COR, in writing, whenever hardcopy fingerprint(s) cannot be processed for any reason.

5.2.4.1

Results are to be

Section 5.2.4.1

100% response rate within one (1) business day when situation occurs.

Periodic inspection, as needed

Version October 2023 Page 19 of 20

Technical Exhibit 2: Deliverables Schedule

No. Deliverable PWS reference Frequency Medium / Format Submit To

1 Quality Control Plan (QCP) 1.6.1

Within 30 calendar days of contract award within 5 business days when changes are made thereafter

Email

COR

and

KO

Complete response for each submitted applicant to include “No Record” results as well as any and all pertinent criminal history data.

5.2.3.1 On demand

Website

Michigan State online respository

Report addressing any hardcopy fingerprint which cannot be processed, to include the reason for being unable to process and detailed instructions on how to correct or process a subsequent print/reprint.

5.2.4.1 Within one (1)

business day, as required

Email COR and

ACOR

Initial and annual refresher training certificates/documentation for all applicable personnel.

1.6.8, 5.2.5.2, and 5.2.5.3.2

Within 30 calendar days after contract award and of completed annual refresher training

Email COR

Status of each submission, including where in the process said request is.

5.2.3.1.5 Upon request Email COR and

ACOR

Version October 2023 Page 20 of 20

No. Deliverable PWS reference Frequency Medium / Format Submit To

Supporting documentation for invoicing purposes:

itemized list detailing the DCSA Case Number, DCSA

Case Name or the subject’s last name, and corresponding

CLIN information for each search provided.

5.2.3.2 Monthly

Excel spreadsheet attached to

WAWF invoice request

COR