EDA Program IDIQ PWS - DRAFT - 23 June 2025.pdf

PERFORMANCE WORK STATEMENT (PWS)

[INSERT ORGANIZATION]

OFFICE OF THE DIRECTOR OF INTELLIGENCE (SCJ2)

ENHANCED DOMAIN AWRENESS PROGRAM DEVELOPMENT AND

SUSTAINMENT

JUNE 9, 2025

Part 1

GENERAL INFORMATION

1. GENERAL: This Performance Work Statement (PWS) is designed to be executed under an indefinite Delivery/Indefinite Quantity (IDIQ) contract vehicle, which establishes a task order-driven approach to ensure flexibility, innovation, and cost efficiency. This is a non-personal services contract for the Enhanced Domain Awareness Program development and sustainment.

The personnel rendering the services are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the Government and its employees. The Contractor shall ensure that all contractor employees and subcontractor employees are medically, dentally, and psychologically fit for performance of their duties.

1.1 Description of Services and Introduction: The U.S. Southern Command (USSOUTHCOM) Directorate of Intelligence (J2) requires a structured approach to further develop, integrate, and sustain a scalable, federated data ecosystem that enhances interoperability, governance, and mission-driven analytics. Building on the proven success of using its cloud-based Enhanced Domain Awareness (EDA) webpage as an unclassified Common Intelligence Picture (CIP) capability, this effort modernizes EDA workflows by integrating Data Mesh principles, knowledge graph-driven data discovery, and Kubernetes-based instances of geospatial services.

The solution prioritizes real-time data transformation, secure access, and advanced analytical capabilities, to ensure decision-makers receive a unified, context-rich view of security challenges.

1.1.1 The contractor shall refine the processes, technology, and personnel necessary to transition EDA into a scalable, distributed intelligence ecosystem. Leveraging the existing EDA infrastructure, this effort enhances structured governance, metadata lineage, and data transformation capabilities using a data lake and data catalog. The contractor shall ensure seamless integration of structured and unstructured datasets, optimizing data discoverability and interoperability across mission domains.

1.1.2 This PWS outlines the foundational services required to support Combatant Command intelligence and operational missions through a cloud-based, data-centric platform. Designed for adaptability and modularity, the system enables secure data acquisition, real-time analytics, geospatial visualization, and ontology-driven knowledge discovery. By implementing a scalable, standards-based architecture, the platform supports joint, interagency, intergovernmental, and multinational collaboration, facilitating cross-domain intelligence sharing and mission agility across Combatant Commands (CCMDs), interagency partners, and coalition operations.

1.2 Background: USSOUTHCOM is a unified combatant command of the U.S. Department of Defense (DoD) who mission often calls for information sharing and mission integration with a diverse range of non-traditional partners, including non-fives, non-NATO, interagency and non- U.S. elements across non-classified information domains. The EDA webpage provides a more scalable, interoperable, and mission-driven capability designed to enhance intelligence integration, operational decision-making, and collaboration across a wide range or traditional and non-traditional partners. EDA is a forward leading capability providing momentum to DOD and IC efforts to transitions from legacy siloed systems to a federated, distributed intelligence architecture. Building on the momentum EDA has generated for the Command and its partners, its capability continues to evolve, integrating more advanced data analytics, geospatial intelligence, and ontology-driven data discovery to enhance situational awareness and mission-critical decision-making.

1.3 Objectives: The primary objective of the EDA program is to bridge the operational gaps between DoD, IC, interagency, and non-traditional international partners to enable real-time information sharing, dynamic data integration, and mission-tailored analytical capabilities. A key byproduct of this objective are the processes in which EDA is transforming the approach to decision-making by integrating data analytics and advanced analytic techniques, and by employing ontologies and knowledge graphs to enrich object-based intelligence (OBI), enabling the development of tradecraft-compliant, unclassified intelligence products that are more rapidly accessible and actionable across a broader array of stakeholders. This contract provides EDA with the skilled personnel for refining processes and further leveraging emerging technology to meet evolving mission demands, enhance data-driven decision-making, and ensure seamless interoperability across operational environments. As EDA scales, it will provide a more flexible, forward-leaning capability that accelerates the DoD and IC transition to a modernize intelligence architectures. This modernization will ensure Combatant Commands and interagency partners more rapidly synchronize intelligence, anticipate threats, and respond to evolving security challenges.

1.4 Scope: This contract covers the full spectrum of non-inherently governmental services and solutions required to support USSOUTHCOM and its mission partners, including other Combatant Commands, and organizations across the DoD and IC enterprise, as well as interagency and partner nations, as outlined in the Task Orders within this PWS. The Contractor shall provide non-personal services that establish a structured framework for the development, integration, deployment, and sustainment of a scalable, interoperable, and mission-driven data ecosystem. The PWS Task Orders include cloud-based web services, data transformation, identity and access management, knowledge graph development, and predictive analytics to enhance intelligence and operational decision-making. Additionally, the PWS Task Orders encompass technical infrastructure support, training, business process transition, and program management to ensure seamless adoption, compliance, and continuous modernization across Combatant Commands and interagency operations. As the EDA environment, software, and systems evolve during the performance period, the Contractor must demonstrate agility in adapting to these changes while ensuring all performance requirements are met in a timely and responsive manner.

1.5. Period of Performance: The period of performance shall be for one (1) base period of 12 (twelve) months, 12 (twelve) months option period years, and an option to extend, FAR 52.217- 8, services for six (6) months.

Base Period 22 August 2025 through 23 August 2026 Option 1 22 July 2026 through 23 July 2027 Option 2 22 August 2027 through 23 August 2028 Option 3 23 August 2028 through 22 August 2029 52.217-8 22 August 2030 through 23 August 2031

1.6. General Information:

1.6.1 Quality Control Plan (QCP): The Contractor shall develop, implement, and maintain a QCP and program to ensure all work described in this contract is performed at or above the standard defined in the Performance Requirements Summary (PRS). The QCP is developed by the contractor for its internal use to ensure that it performs and delivers high-quality service. The contractor’s QCP is the means by which the contractor ensures all work complies with the requirements of the contract. The QCP identifies and corrects potential and actual problem areas throughout the entire scope of the contract.

1.6.1.1 The contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The QCP shall be submitted within fifteen (15) days of contract award. After acceptance of the QCP, the contractor shall receive the contracting officer’s (KO) acceptance in writing or any proposed changes to the QC procedures. The contractor shall submit QCP changes within five (5) days to the KO and Contracting Officer’s Representative (COR) for review and approval prior to implementation.

1.6.1.2 The QCP shall address as a minimum:

1.6.1.2.1 Inspection Program. Included shall be a quality control inspection program covering all general and specific tasks included in the contract scope of work. It shall specify tasks or areas to be inspected on a scheduled or unscheduled basis, the way inspections are to be conducted, the titles of the individuals who will perform the inspections, and the percentage of the work that will be inspected on a recurring basis. In developing this inspection program, the Contractor shall identify the key activities and associated characteristics in each process that have a significant influence on specific services and provide for methods for evaluation of the selected characteristics.

1.6.1.2.2 Deficiency Identification. The QCP shall include a method of identifying deficiencies in the quality of services performed before the level of performance becomes unacceptable as defined in the PRS. This shall contain processes for corrective action without dependence upon Government direction.

1.6.1.2.3 Deficiency Correction. The program shall contain process control and process performance measurement procedures that shall include how the Contractor shall implement preventive corrective actions. The Contractor shall demonstrate that it has designed quality into the delivery of services thereby mitigating the risk(s) associated with delivery of deficient or nonconforming services.

1.6.1.2.4 Documentation and Enforcement. The QCP shall include a method of documenting and enforcing quality control operations of both prime contractor and subcontractor work, including inspection and testing.

1.6.1.2.5 Trend Analysis. The QCP shall include a method of performing trend analysis and assessments using metrics.

1.6.1.2.6 Surveillance Methods. The QCP shall contain specific surveillance techniques for all contract services. The surveillance methods shall be comprehensive and adaptable to the reporting system of the plan.

1.6.1.3 Operations Security (OPSEC) SOP/Plan Requirements: The Contractor shall implement and maintain an OPSEC program for preventing the disclosure of critical information or sensitive information which could jeopardize the Government’s ability to execute its mission or to adequately protect its personnel and/or equipment. The Contractor shall develop an OPSEC Standing Operating Procedure (SOP)/plan within 90 calendar days of contract award to the Contracting Officer Representative (COR) or Contracting Officer (KO) to be reviewed and approved by the Government OPSEC Officer on the supporting installation. The SOP must contain a training plan that includes an initial OPSEC brief, continuous awareness, and annual OPSEC training. Awareness/training includes, but not limited to information disclosure via letters, conversations, photographs, resumes, electronic mail (e-mail), social media/networking sites, dissemination of information and documents disposal. OPSEC Program shall fully comply with the provisions of AR 530-1, Operations Security.

1.6.2 Quality Assurance (QA): The Government shall evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). The QASP is primarily focused on what the Government must do to ensure that the Contractor has performed in accordance with the performance standards and contract quality requirements are met. Contract quality requirements are the technical requirements in the contract relating to the quality of the product or service and those contract clauses prescribing inspection, and other quality controls incumbent on the contractor, to ensure the product or service conforms to the contractual requirements. It defines how the performance standards will be applied, the frequency of surveillance, the performance threshold, and deductions, if applicable.

1.6.3 Recognized Holidays: The list below includes all identified Federal Holidays (http://www.opm.gov). Except as otherwise specified, routine work shall not be scheduled on holidays or holidays observed in lieu thereof.

New Year’s Day Labor Day Martin Luther King Jr.’s Day Columbus Day President’s Day Veteran’s Day Memorial Day Thanksgiving Day Juneteenth Independence Day Christmas Day

Independence Day

1.6.4. Hours of Operation: The Contractor shall be available and is responsible for conducting business at the specified place of duty for a minimum of 8 hours per scheduled workday, between the hours of 0600 – 1800 Monday through Friday, except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar government directed facility closings. For other than firm fixed price contracts, the contractor will not be reimbursed when the government facility is closed for the above reasons.

The Contractor must, at all times, maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS when the Government facility is not closed for the above reasons.

1.6.5 Place of Performance: Work will be conducted both offsite at contractor facilities and onsite at USSOUTHCOM Headquarters, as specified in the Task Order requirements.

1.6.6 Type of Contract: The government will award a contract under the IDIQ framework, with the specific contract type for each Task Order defined within the respective Task Order.

1.6.7 Access and General Protection Policy and Procedures:

1.6.7.1 FPCON: In addition to the changes otherwise authorized by the changes of clause of contract, should the US Government Force Protection Condition (FPCON) at any individual installation change, the Government may require changes in contractor security matters or process in accordance with DoDI 2000.16. During FPCONs Charlie and Delta, only contract services that have been deemed “mission essential” by the Government will continue. Contract services will resume when the FPCON is reduced to Bravo or lower.

1.6.7.2 Physical Security: The contractor shall be responsible for safeguarding all government equipment, information, and property provided for contractor use. At the close of each work period, government facilities, equipment, and materials shall be secured IAW Army Regulation (AR) 190-13, “The Army Physical Security Program.”

1.6.7.3 Personnel Security Clearance Requirements: Contractor personnel performing work under this contract must maintain an active security clearance as specified in the applicable Task Order.

1.6.7.3.1 The contractor shall follow DoD Federal Acquisition Regulation Supplement (DFARS) clause 252.223-7004, Drug-free Work Force; and local USSOUTHCOM policies regarding drug testing. The contractor shall conduct drug tests, ensuring all top secret cleared contractor employees are tested at least once per year, each year of the contract, as well as when there is a reasonable suspicion that an employee uses illegal drugs. The drug testing shall be at the contractor’s expense. Positive drug test results shall be made available to both the KO and COR within 24 hours of known test results. Records of drug testing shall be made available to the

COR.

1.6.7.4 Background Checks: The contractor shall ensure contractor employees and subcontractor employees performing services under this contract have passed a security check conducted by the Host Nation Police Department of their residence or the State Police Department of their U.S.

residence. Security checks that have been completed as part of a personnel security clearance background investigation, or a previous background check that was a condition of employment, meet this requirement. Documentation of these checks will be made available to the KO or COR upon request. The Government retains the right to exclude any employee from performance of duties under this contract if a background security check reveals an employee is a security risk.

The exclusion of an employee for security reasons will not relieve the contractor from performance of services required under this contract. If the Government determines additional background checks are required, at a minimum, and upon request from the Government, the contractor shall provide to the KO or COR, the following information on any contractor or subcontractor employee performing services under this contract:

• Full birth name

• Married name (if applicable)

• SSN or local equivalent (ID card number)

• Date of birth

• Place of birth (city, country)

1.6.7.4.1 Background Check Notification Requirements: If a background check on any employee or subcontractor employee performing services under this contract, whether the check was conducted as a condition of employment or as part of the contract with the Government, reveals any information from any source (including host country law enforcement) of criminal activity by Contractor employees, subcontractors, or subcontractor employees, the Contractor shall immediately notify the KO and COR of that information. The Contractor shall make notification of:

(1) Traffic violations, other than parking, will be reported to the KO or COR only if the contract is for drivers for the Government.

(2) Any suspicious activity by Contractor employees, subcontractors, or subcontractor employees the Contractor believes may pose a risk to U.S. or host nation national security or imminent risk of deadly bodily harm to any person; and

(3) Any actions taken against Contractor employees, subcontractors, or subcontractor employees pursuant to this requirement.

1.6.7.4.2 Remedies: In addition to other remedies available to the Government, the Contractor’s failure to comply with the requirements of this paragraph my result in requiring the Contractor to remove a Contractor employee or employees from the performance of the contract.

1.6.7.4.3 Subcontracts: The Contractor shall include the substance of this paragraph and the preceding paragraph in all subcontracts.

1.6.7.5 Uncleared Contractor Common Access Card (CAC) Credentialing and Access Procedures.

1.6.7.5.1 Contractor Common Access Card (CAC) Eligible Requirements: Before CAC issuance, the Contractor employee requires, at a minimum, a favorably adjudicated National Agency Check with Inquiries (NACI) or an equivalent or higher investigation in accordance with Army Directive 2014-05. The Contractor employee will be issued a CAC only if duties involve one of the following: (1) Both physical access to a DOD facility and access, via logon, to DOD networks on-site or remotely; (2) Remote access, via logon, to a DOD network using DOD-approved remote access procedures; or (3) Physical access to multiple DOD facilities or multiple non-DOD federally controlled facilities on behalf of the DOD on a recurring basis for a period of 6 months or more. At the discretion of the sponsoring activity, an initial CAC may be issued based on a favorable review of the FBI fingerprint check and a successfully scheduled NACI at the Office of Personnel Management.

1.6.7.5.1.1 Federal Installation/Facility Access: Contractor and all associated sub-contractor employees shall comply with applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative). The employee performing services under this contract shall also provide all information required for background checks to meet installation access requirements to be accomplished by installation Provost Marshal Office, Director of Emergency Services, Security Office, or the host nation equivalent.

1.6.7.5.1.2. Contractor Non CAC Eligible Requirements for DOD Facility and Installation:

Contractor and all associated subcontractor employees shall comply with adjudication standards and procedures using the National Crime Information Center Interstate Identification Index (NCIC-III) and Terrorist Screening Database (TSDB) (Army Directive 2014-05/AR 190-13), applicable installation, facility and area commander installation/facility access and local security policies and procedures (provided by government representative), or, at OCONUS locations, in accordance with status of forces agreements and other theater regulations. The employee performing services under this contract shall provide all information required for background checks to meet installation access requirements to the installation Provost Marshal Office, Director of Emergency Services, or Security Office.

1.6.7.6 Employment Eligibility: The Contractor shall ensure that all Contractor employees and sub-contractor employees performing services under this contract in the U.S., or its territories have been pre-screened for employment eligibility using the E-verify Program on the Department of Homeland Security website http://www.uscis.gov/e-verify. Personnel that have not met the employment eligibility requirement on this website are not authorized to perform services under this contract. Verification of the eligibility check will be made available to the KO or COR upon request. This requirement is not in lieu of and does not relieve the Contractor from the I-9 Employment Eligibility Verification Forms for employment of personnel.

1.6.7.7 Access to Government Information Systems: All Contractor employees and subcontractor employees performing services under this contract who have access to a government information system must be registered in the ATCTS (Army Training Certification Tracking System) at commencement of services and must successfully completed the DoD Information Assurance Awareness training prior to access to the information system and then annually thereafter.

1.6.7.8 Key Control: The Contractor shall establish and implement methods of making sure all keys/key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons. NOTE: All references to keys include key cards. Contractor shall not duplicate keys provided by the Government. The Contractor shall develop procedures covering key control that shall be included in the Quality Control Plan. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas.

1.6.7.8.1 The Contractor shall report any occurrences of lost or duplicate keys/key cards to the KO and the COR (and physical property manager, if applicable) within two (2) hours or the next business day if after hours and to request key or lock(s) replacement. This notification and request for key(s) and lock replacement shall be submitted in writing. The total cost of the replacement may be at the Contractor’s expense.

1.6.7.8.2. Only authorized Contractor personnel shall use Government issued key(s) and/or key card(s). Contractor personnel shall follow security access requirements when entering secure areas. Contractor shall receive appropriate security clearance approval to allow visitor(s) access in secure areas.

1.6.8 Post-Award Conference or Periodic Progress Meetings: The Contractor shall attend the post award conference convened by the contracting activity or contract administration office IAW Federal Acquisition Regulation (FAR) Subpart 42.5. The KO, COR, with other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings the KO will apprise the contractor of how the government views the Contractor's performance and the Contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the government.

1.6.9 Contracting Officer Representative (COR): The COR will be identified by a separate letter for each Task Order. The COR is responsible for monitoring all technical aspects of the assigned Task Order and assisting in contract administration. The COR is authorized to:

• Ensure the Contractor performs the technical requirements of the Task Order.

• Conduct inspections necessary to assess contract performance.

• Maintain written and oral communications with the Contractor concerning technical aspects of the Task Order.

• Issue written interpretations of technical requirements, including Government drawings, designs, and specifications.

• Monitor Contractor performance and notify both the Contracting Officer (KO) and the

Contractor of any deficiencies.

• Coordinate the availability of Government-furnished property.

• Provide site entry authorization for Contractor personnel.

A letter of designation will be issued to the COR for each Task Order, outlining their specific responsibilities and limitations. The COR is not authorized to modify the terms and conditions of the contract, alter cost or price estimates, or change delivery schedules. Any such modifications must be approved by the KO.

1.6.9.1 The COR retains all inherent government functions. The assigned COR will convey government product tasking to the Contractor’s on-site Strategic Advisor, ensure the Contractor’s products meet government requirements, and accept on behalf of the government, products delivered by the Contractor. The COR or designated technical task manager will address work schedules, project scheduling, and task management through the Contractor’s on-site Strategic Advisor.

1.6.9.2 Product tasking and acceptance of delivery by the government will follow existing USSOUTHCOM administrative processes and procedures and may be either verbal or written.

The COR, in coordination with the EDA Government Program Manager (PM), will determine and establish suspense dates for draft and final products at the time each product or project is tasked to the Contractor. Products shall be delivered in soft or hard copy, as determined by the government, using USSOUTHCOM, DoD, and other prescribed standard formats. Products delivered by the Contractor that are determined to be incomplete by the government, will be returned to the Contractor with guidance for product changes, additions, deletions, corrections, or modifications.

1.6.9.3 All products shall be drafted using established government organizational processes that include coordination with various command and staff elements, as well as other U.S. national agencies. The government will provide all contractor personnel with initial orientation training on organizational processes and product formats.

1.6.10 Key Personnel: The contractor shall provide key personnel as specified in the Task Order requirements.

1.6.11 Special Qualifications or Certifications: While Spanish or Portuguese language skills are highly desirable, due to the work performed in the AOR, the lack of these language skills will not hinder the contractor from performing the work as spelled out in this contract. Contractor shall have knowledge and training of Microsoft Office Specialist and/or Microsoft Technology Associate Certification (Network & Database). Certifications on this technology platforms are highly desirable, if existing, a copy of the professional certificate(s) shall be submitted to the COR upon contract award.

1.6.11.1 Education/Certifications: All Contractor employees and subcontractor employees must have the minimum education or the number of years in as listed in minimum knowledge and experience as specified in each of the Task Order requirements.

1.6.11.2 All Contractors shall be proficient using basic Microsoft Office software applications (e.g., Word, PowerPoint, Excel, and Access).

1.6.12 Identification of Contractor Employees: Contractor employees shall identify themselves as Contractor personnel and shall avoid representing themselves as Government employees. This identification includes meeting attendance, answering Government telephones, email communications, and working in other situations where Contractor status is not obvious.

Contractor personnel identification shall be easily identifiable through the display of badges, name tags, lanyards, etc. They must also ensure that all documents or reports produced by contractors are suitably marked as contractor products or that contractor participation is appropriately disclosed. Contractor personnel will be issues a USSOUTHCOM contractor picture identification badge which shall be worn and visible at all times while in Government facilities. All Contractor personnel shall comply with all applicable Federal, DoD, Command, and nit security procedures, measure, requirements, regulations, and directives. Government issued identification remains the property of the Government and shall be returned to the issuing office or other designated Government personnel upon transfer of Contractor personnel from

USSOUTHCOM.

1.6.12.1 Badging of Contractor Employees: If required by the Government, contract personnel and all associated subcontractor’s employees accessing U.S. facilities or activities, shall present a valid picture ID provided by the Government while accessing Government owned or contracted facilities and shall adhere to facility security policies and restrictions. If applicable, Government issued access badges will not be worn outside designated facility where visible to the public.

1.6.12.2. Contractor travel: The Contractor may be required to travel from contractor facilities or USSOUTHCOM Headquarters to other destinations worldwide. The Government will provide verbal or written notice of travel as soon as practicable and identify specific objective(s) of the travel. The Contractor, in coordination with the Government, shall make necessary travel arrangements and be responsible for obtaining passports and visas for Contractor personnel. The Government will provide Contractor personnel with documentation indicating the Contractors’ travel on behalf of the Government and will obtain country clearance in accordance with established DoD and Department of state procedures.

1.6.13 Data Rights: The Government has unlimited rights to all documents/material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership/copyright belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the Contracting Officer. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

1.6.14 Non-Disclosure Requirements: Performance under this contract may require the Contractor to access data and information proprietary to a Government agency, another Government Contractor, or of such nature that its dissemination or use other than as specified in this work statement would be adverse to the interests of the Government or others. Neither the Contractor, nor Contractor personnel, shall divulge, nor release data or information developed, or obtained under performance of this work statement, except to authorize Government personnel or upon written approval of the KO. The Contractor shall not use, disclose, or reproduce proprietary data, which bears a restrictive legend, other than as specified in this PWS. All documentation showing individual names or other personal information shall apply and shall be controlled and protected under the provisions of the Privacy Act of 1974, Public Law 93-579, 5 United States Code (U.S.C.) Section 552a.

1.16.14.1 Non-Disclosure Statements: The Contractor shall provide signed non-disclosure agreements to the Government prior to commencement of work under the contract. Disclosure of information by Contractor personnel may result in Contractor personnel removal from performance of duties under this contract.

16.14.2 Advertisement and Social Media: The Contractor shall NOT post information to public website or social media locations, personal or professional, that in any way disclose names, locations, hotel data, participants, discussions, pictures, etc. before, during or after the contract period of performance without the express consent of the Government. The use of propaganda violates DOD Commercial Use of Imagery Guidelines stated at (http://www.defenseimagery.mil/products/DODimagery/commercialuse.html). The Contractor shall not cite any information (e.g., contract information, pictures, locations, etc.) obtained through this contract on any marketing tools to include its company website.

1.6.14.3 At no time will the Contractor or associated sub-contractor employees transmit government documents or information using methods that do not meet the security requirements specified in the National Institute of Standards and Technology (NIST) Special Publication (SP) 800-171, "Protecting Controlled Unclassified Information in Nonfederal Information Systems and Organizations" such as personal electronic mail accounts, public digital data storage sites (cloud storage), social media platforms or instant messaging. Approved government sites such as U.S. Army Aviation and Missile Research Development and Engineering Center (ARMDEC) Safe Exchange at https://safe.amrdec.army.mil/SAFE/About.aspx , or All Partners Access Network (APAN) at https://community.apan.org/ , or other transmission means determined by the government must be used.

1.6.14.4 Organizational Conflict of Interest (OCI): Contractor and subcontractor personnel performing work under this contract may receive, have access to, or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications, or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR Subpart 9.5.The Contractor shall notify the KO immediately whenever it becomes aware that such access or participation may result in any actual or potential OCI and shall promptly submit a plan to the KO to avoid or mitigate any such OCI. The Contractor’s mitigation plan will be determined to be acceptable solely at the discretion of the KO and in the event the KO unilaterally determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may affect other remedies as he or she deems necessary, including prohibiting the Contractor from participation in subsequent contracted requirements which may be affected by the OCI.

1.6.15 Phase in/Phase out period: To minimize any decreases in productivity and to prevent possible negative impacts on additional services, the Contractor shall have personnel on board, http://www.defenseimagery.mil/products/dodimagery/commercialuse.html https://safe.amrdec.army.mil/SAFE/About.aspx https://community.apan.org/ during the fifteen (15) day phase in/ phase out periods. During the phase in period, the Contractor shall become familiar with performance requirements in order to commence full performance of services on the contract start date.

1.6.16 General Training Requirements:

1.6.16.1 Anti-Terrorism (AT) Level I Training: The Contractor shall complete AT Level I Training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies, or 30 calendar days after employment of new personnel, all Contractor employees, including subcontractor employees, who are employed under the contract shall complete AT Level I awareness training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies. The contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the COR or KO within 10 calendar days after completion of training by all employees and subcontractor personnel. For Common Access Card (CAC) holders, AT Level I awareness training is available at https://jkodirect.jten.mil, course number “JS-US007-14”. For non-CAC holders, AT Level I awareness training is available at http://jko.jten.mil/courses/atl1/launch.html (this standalone version is intended for non-CAC users without a JKO account only). Training must have been completed within the last 12 months and maintained yearly thereafter. If training cannot be conducted on the website, the Contractor will coordinate with the local AT Officer at their assigned location for classroom training by a Level 2 trained AT Officer and a copy of either the training certificate or the training attendance roster signed by the AT Officer will be maintained by the Contractor.

Verification of the training will be provided to the COR or KO within 10 calendar days after completion of the training.

1.6.16.2 OPSEC Awareness: If the Contractor, or a subcontractor, or employees of either disclose any information that disrupts or harms the Government's operations or activities, then the Government retains the right to exclude any employee from performance of duties under this contract. The exclusion of an employee for security reasons will not relieve the Contractor from performance of services required under this contract. By way of example, personnel shall not sketch or take photos of government facilities or activities, unless related to service to be provided. All government paper products and removable digital storage material that is received, generated, or stored during the contract will be destroyed completely when no longer needed to preclude recognition of information.

1.6.16.3 Information Assurance (IA) Training: Contractor employees, including subcontractors, requiring access to Government information systems shall complete the DOD IA Cyber Awareness Training. All employees working information technology (IT)/IA functions must comply with DOD and Army training requirements per DOD Directive (DODD) 8570.01, Information Assurance Training Certification and Workforce Management, DOD 8570.01-M, Information Assurance Workforce Improvement Program, and AR 25-2, Information Assurance, within 30 days of employment. Training is available at https://ia.signal.army.mil/DODIAA/default.asp.

https://ia.signal.army.mil/DoDIAA/default.asp

1.6.16.4 Information Assurance (IA)/Information Technology (IT) Training: All Contractor employees and subcontractor employees requiring access to Government information systems must complete the DoD IA awareness training before issuance of network access and annually thereafter. All employees working in IA/IT functions must comply with DoD and Army training requirements in Per DoD 8570.01, DOD 8570.01-M, and AR 25-2, within 30 days of employment. Training is available at https://ia.signal.army.mil/DoDIAA/default.asp.

1.6.16.5 Threat Awareness Reporting Program (TARP Training): Within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies, or 30 calendar days after employment of new personnel, all Contractor employees, including subcontractor employees, who are employed under the contract and require a security clearance, shall complete TARP training within 30 calendar days after contract start date or effective date of incorporation of this requirement into the contract, whichever applies.

The Contractor shall submit certificates of completion for each affected Contractor employee and subcontractor employee to the Government Representative within 10 calendar days after completion of training by all employees and subcontractor personnel. TARP training is available at the Army Learning Management System (ALMS) https://www.lms.army.mil/. Training must have been completed within the last 12 months and maintained yearly thereafter. If training cannot be conducted on the website, the Contractor will coordinate with the local Counterintelligence (CI) Officer at their assigned location for classroom training and a copy of either the training certificate or the training attendance roster signed by the CI Officer will be maintained by the Contractor. Verification of the training will be provided to the Contracting Officer (KO) or Contracting Officer Representative (COR) within 10 calendar days after completion of the training.

1.6.16.6 iWATCH Training: The Contractor will ensure that all Contractor employees and sub-contractor employees performing services under this contract have been briefed on the iWATCH Program, or equivalent for their supporting DoD Agency, within 30 days of employment under the contract. The Contractor will coordinate with the supporting DoD Agency AT Officer through the COR or KO for the briefing. This training will be updated as required by the supporting installation AT policies. A copy of the training attendance will be maintained by the Contractor and made available to the COR or KO upon request.

1.6.16.7 OPSEC Training: All Contractor employees and sub-Contractor employees performing services under this contract will complete Level I OPSEC training within 30 calendar days of employment under this contract. Training for OPSEC Level I is available at https://jkodirect.jten.mil, course number “EUC-ECJ6-110-N-LB”. Training must have been completed within the last 12 months and maintained yearly thereafter. If training cannot be conducted on the website, the Contractor will coordinate with the local OPSEC Officer at their assigned location for classroom training by a Level 2 trained OPSEC Officer and a copy of either the training certificate or the training attendance roster signed by the OPSEC Officer will be maintained by the Contractor. Verification of the training will be provided to the COR or KO upon request.

https://ia.signal.army.mil/DoDIAA/default.asp

1.6.16.8 Records Management Training: All Contractor employees and sub-Contractor employees will complete annual Records Management Training per DOD-I 5015.02, DOD Records Management Program, February 2015.

1.6.17 Overseas Training Requirements: N/A

1.6.18 Foreign (OCONUS) Requirements:

1.6.18.1 AT Awareness Training for Contractor Personnel Traveling: Upon award of the contract, or within 30 days of employment of new personnel performing services under this contract, the Contractor will coordinate with the supporting DoD Agency AT Officer through the COR or KO, for AOR specific AT Awareness Training for U.S. based Contractor employees and associated subcontractor employees. This training will be updated as required by the supporting installation AT policies. Verification of the training will be made available to the COR or KO upon request.

1.6.18.2 SERE Training: All Contractor employees and subcontractor employees must complete the computer based SERE 100.1 Code of Conduct training course prior to theater entry. Training is available at http://jko.jten.mil. Completed training meets the requirements for three (3) years.

Verification of the training will be made available to the COR or KO upon request.

1.6.18.3 Theater and Country Clearance Requirements: Contractor shall ensure all U.S. citizen or U.S. resident Contractor employees and sub-contractor employees performing services under this who are traveling in the USSOUTHCOM AOR follow the requirements identified in the electronic Foreign Clearance Guide (FCG) at https://www.fcg.pentagon.mil/fcg.cfm and must have all necessary passports, visas, and other documents required to enter, exit, or work in the USSOUTHCOM AOR; must have the appropriate DOD identity credential(s); must have the appropriate special area, country, and theater clearance as required in DOD Directive 4500.54E.

Contractor personnel shall return all U.S. Government issued identification, to include the Common Access Card, to appropriate U.S. Government authorities within 5 days of the end of their travel or contractual duties.

1.6.18.4 Synchronized Pre-deployment and Operational Tracker (SPOT) System. The Contractor shall register all personnel that will be performing on this contract in the USSOUTHCOM AOR at https://spot.dmdc.mil/. Contractor personnel must have a Synchronized Pre-deployment and Operational Tracker (SPOT)-generated letter of authorization signed by the contracting officer in order to travel to, from, or within the USSOUTHCOM AOR. The letter of authorization also will identify any additional authorizations, privileges, or Government support to which Contractor personnel are entitled under this contract. The Contractor shall submit written evidence of SPOT registration for all personnel performing on-site to the contracting officer and the COR. The EDA will be regenerated by the Contractor upon expiration of the LOA. Changes to the status of individual personnel relating to their in-theater arrival date and their duty location, to include closing out the trip with their proper status (e.g., mission complete, wounded, ect.) shall be annotated within the SPOT database in accordance with the timeliness established in the SPOT business rules. Information and standards for the SPOT system is posted on the U.S.

Government Foreign Clearance Guide website at https://www.fcg.pentagon.mil/fcg.cfm for the country of employment.

1.6.19 Intelligence Oversight Training: All contractor employees, to include subcontractor employees, requiring access to military installations, facilities, and controlled access areas shall complete Intelligence Oversight training. Initial training shall be completed within 30 calendar days of award and within 30 calendar days of new employee’s commencing performance then annually by the anniversary date thereafter. Certificates of completion for each affected contractor employee and subcontractor employee shall be made available to the contracting officers’ representative on request. The contractor shall report all questionable intelligence activities (QIA) and significant and highly sensitive matters (S/HSM) incidents to their appropriate unit Intelligence Oversight Officer (IOO) in accordance with DoD Directive

5148.13. Reporting procedures will be provided by the unit IOO after contract award. The contractor shall adhere to the policies and regulations governing intelligence and intelligence related activities to include the Command’s Intelligence Oversight policy. These policies will be provided during mandatory training after contract award. The training will familiarize contractor employees with the authorities, restrictions, and procedures established in DoD Directive 5148.13, DoD Directive 5240.01, DoD Manual 5240.01, DoD 5240.1–R, and all other applicable Intelligence Community Directives, DoD issuances, and Command policies governing applicable intelligence activities, including access or use United States Persons Information (USPI) on the civil liberties and privacy protections that apply to such information, and training on DoD Manual 5240.01, Procedure 4 dissemination of USPI. Members of the Command’s Intelligence Oversight Office or other designated representative(s) shall have access to the contractor’s facilities and relevant document/information to ensure compliance with the Department of Defense’s policies and regulations governing intelligence and intelligence-related activities.

THIS SECTION INTENTIONALLY LEFT BLANK

Part 2

DEFINITIONS AND ACRONYMS

2. Definitions and Acronyms

2.1. Definitions:

Name Description Active Directory Active Directory (AD) is a directory service created by

Microsoft that enables administrators to manage user access to network resources.

Artificial Intelligence/Machine Learning

AI refers to computer systems designed to mimic human cognitive abilities, and ML is a subset of AI that focuses on training algorithms using data to create models capable of performing specific tasks.

Application Programming Interface

A set of rules and protocols that allows different software applications to communicate with each other

Authority to Operate The Authority to Operate process aims at minimizing and managing risk responsibility. This process mostly comes from the Federal Information Security Management Act

(FISMA).

Analytic Tradecraft Summary Refers to the systematic process of transforming information from multiple sources into actionable intelligence. It encompasses structured analytic techniques that help analysts challenge judgments, identify mental mindsets, stimulate creativity, and manage uncertainty.

Amazon Web Services On-demand cloud computing services and APIs, a subsidiary of Amazon.

Amazon Web Services Elastic Block Store

A scalable, high-performance block storage service provided by Amazon Web Services (AWS). It is designed to be used with Amazon Elastic Compute Cloud (EC2) instances.

Boundary Cloud Access Point Establishes a protected boundary between the Defense Information Systems Network (DISN) and an approved commercial service provider.

Basic Formal Ontology Basic Formal Ontology (BFO) is a top-level ontology developed by Barry Smith and his associates to promote interoperability among domain ontologies. It is designed to support information retrieval, analysis, and integration across various scientific domains, containing classes and relations that represent content common to all areas of scientific investigation.

Common Access Card/Personal Identity Verification

A Common Access Card (CAC) is a smart card about the size of a credit card. It is the standard identification for active-duty uniformed Service personnel, Selected Reserve, DoD civilian employees, and eligible contractor personnel.

The CAC is used for PC, network and application login (user authentication) and building access. PIV (Personal Identity Verification)? Personal Identity Verification (PIV) is a security standard established by the US government to enhance both physical and network security using smartcards and cryptographic credentials.

Commercially Available Information

Data or other information that is customarily made available or…