CPOC Performance Work Statement - DRAFT - CPO - 14 June_(CUI).pdf

CUI

PRE-DECISIONAL

Performance Work Statement

Case Processing Operations Center Federal Investigative Records Enterprise

June 2024

Controlled by: DCSA Controlled by: FIRE CUI Category: CONTRACT Limited Dissemination Controls: FEDCON POC: mary.e.price79.civ@mail.mil mailto:mary.e.price79.civ@mail.mil

PRE-DECISIONAL Page 2 of 44

Defense Counterintelligence and Security Agency

Federal Investigative Records Enterprise Case Processing Operations Center

Performance Work Statement

1. INTRODUCTION

The Defense Counterintelligence and Security Agency (DCSA) requires Contractor provided Case Processing Operations Center (CPOC) services, which are considered necessary to deliver, in part, the Federal background investigation mission. The following sections of this Performance Work Statement (PWS), as supplemented by attachments and all applicable publications, cover in significant detail the services required from the Contractor.

This is a non-personal services contract to provide case processing operation center services related to Federal background investigations. The Government will not exercise direct supervision or control over the contract service providers performing the services herein. Such contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government.

1.1. Description of Services/Introduction: The Contractor shall provide all personnel, equipment, supplies, facilities, transportation, tools, materials, supervision, and other items and services necessary to perform the requisite CPOC services related to Federal background investigations, as defined in this PWS, except for those items specified as Government furnished equipment (GFE) and services in Section 3. The Contractor shall perform to the standards in this PWS.

1.2. Background: The Federal investigative mission relies on the efficient and effective delivery of background investigations to safeguard the integrity and trustworthiness of the Federal workforce.

Currently, DCSA provides the majority of the Government’s background investigations. This requirement is for mission critical functions necessary for the processing of background investigations for the background investigation mission needs.

1.3. Objectives: The overall objective of this requirement is to provide quality services in support of the background investigations for Federal Government applicants, employees, and Contractors performing sensitive work, as well as individuals being investigated due to Federal regulatory requirements. The specific functions required to carry out this objective are listed below.

1.4. Scope: This PWS establishes the requirements for Contractor provided CPOC services, which are directly related to Federal background investigation processing. The types of Contractor provided investigative services include the following:

o Facility Monitoring, to include: Telephone and Switchboard Services.

o Case Processing, to include: Application Ingestion, Case Maintenance, Item Level Processing, and

Post Closing.

• Expedited Work: The Contractor is responsible for fulfilling a limited number of expedited item/case requests that will have to be completed due to unforeseen urgency at no additional charge.

PRE-DECISIONAL Page 3 of 44 o Program Management o National Background Investigation System (NBIS) implementation, to include, but not limited to:

Training Support, Systems Design and Development, User Acceptance Testing Support, and Program Management.

o Implement a flexible, cost-efficient business model with the capacity to adapt to iterative policy and process changes—such as those anticipated for Trusted Workforce 2.0 and the NBIS system— with agility and urgency as dictated by Executive Agents;

o Accommodate limitations in the Government’s ability to predict future background investigation requests (e.g., case volume, type, timing, and complexity);

o Transition from the current background investigation case processing system to the NBIS system or any future system, with the understanding that DCSA will likely use multiple systems at some point during the life of these contracts (there may be situations where multiple systems are used simultaneously);

o Obtain consistent, quality investigative products at both the enterprise case level and the item level in accordance with strict timeliness mandates, Federal Investigative Standards (FIS), Department of Defense (DoD) cybersecurity policies, and DCSA protocols and procedures;

o Balance current case types with future emerging background investigative requirements—such as a growing population covered by continuous vetting, which may require on-demand targeted investigations;

o Support the quality of investigations by ensuring the quality, integrity, and accuracy of the personnel completing background investigations; and o Support the quality of investigations by ensuring the quality, integrity, compliance, and accuracy of the processes used to complete background investigations.

The Contractor will complete background investigation services in accordance with the FIS and Trusted Workforce 2.0. Background Investigation services will include, but are not limited to, conducting searches, receiving records from various repositories as well as inquiries for review and validation and schedule additional work as appropriate. Approaches for supporting investigation services will include collection of information as well as, potentially, emerging uses of collaboration and supporting technologies as provided for in the DCSA investigative policies and procedures.

This work also includes the functions that exist from scheduling an investigation through the delivery of completed of investigations, and continuous evaluation and/or vetting alerts. Continuous vetting, which provides checks on an individual more frequently and aims to promote delivery of real-time information, may replace periodic reinvestigations during the anticipated contract period of performance. Successful performance of these background investigation services for the Government is required without fail or risk to national security or other agency missions.

The background investigation mission is evolving, and DCSA anticipates statutory, policy and technological changes during the life of this contract. These changes will have known and unknown impacts to current standards and operating procedures. Additional uncertainty exists given limitations in the Government’s ability to predict future volumes of background investigations. The Contractor must be able to sustain mission support, while adapting to a changing mission environment throughout the life of the contract.

Further, the Contractor will provide flexible approaches for supporting investigation services for the Federal Government by adapting to emerging uses of collaboration and supporting technologies. At some point during the life of this contract, the Government anticipates a transition from the current background

PRE-DECISIONAL Page 4 of 44 investigations processing system to NBIS. If this occurs, the Contractor will perform functions related to the transition and implementation of the new NBIS system to ensure continuity of operations and compliance with all related guidance. The types of functions anticipated include, but are not limited, to the following: training support, user acceptance testing support, and program management.

1.5. Period of Performance: The period of performance shall be for a 12-month base period followed by four 12-month option periods with an optional six month extension. Each CLIN has a defined PoP.

1.6. General Information:

1.6.1. Quality Control: The Contractor shall develop and maintain an effective quality control program to ensure services are performed in accordance with this PWS. The Contractor shall develop and implement procedures to identify, prevent, and ensure non-recurrence of defective services. The Contractor’s quality control program is the means by which the Contractor assures that their work complies with the requirement of the contract. The Contractor shall provide its initial Quality Control Plan (QCP) with its proposal submission, in accordance with Section L, and an updated QCP to the Contracting Officer (KO) and Contracting Officer’s Representative (COR) within thirty (30) days of Contract Effective Date (see Technical Exhibit H – Deliverables Schedule). The Contractor shall submit an updated QCP to the COR within five (5) Business Days of the Government’s requests thereafter. The Contractor shall provide notice to the KO when changes are made to its QCP.

1.6.2. Quality Assurance: The Government will evaluate the Contractor’s performance under this contract in accordance with the Quality Assurance Surveillance Plan (QASP). This plan is primarily focused on what the Government must do to ensure that the Contractor has performed in accordance with the performance standards. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable defect rate(s).

1.6.3. On-Site Working Conditions, Holidays and other Closures:

1.6.3.1. DCSA facilities are smoking restricted workplaces. Due to the nature of the work, facilities, and requirements, Contractor staff may only smoke outside in designated smoking areas.

1.6.3.2. The Government expects the Contractor will establish normal operating hours under this contract between 5:30 a.m. to 6:00 p.m. Eastern Time (ET) Monday through Saturday. The Contractor’s Program Manager (PM) and the Government COR shall consult and coordinate on any proposed alternate work schedules that may be arranged depending on the operational tempo/needs of the mission.

1.6.3.3. Government personnel observe the following days as holidays and the Government facilities will be closed and unavailable to Contractor personnel on the following days:

New Year’s Day January 1st*

Martin Luther King’s Birthday Third Monday in January President’s Day Third Monday in February Memorial Day Last Monday in May

Juneteenth National Independence Day June 19* Independence Day July 4th*

Labor Day First Monday in September

PRE-DECISIONAL Page 5 of 44

Columbus Day Second Monday in October Veterans Day November 11th* Thanksgiving Day Fourth Thursday in November Christmas Day December 25th*

*If the date falls on a Saturday, the Government holiday is the preceding Friday. If the date falls on a Sunday, the Government holiday is the following Monday.

1.6.3.4. In addition to the days designated as holidays, the Government observes the following days:

• Any other day designated by Federal Statute

• Any other day designated by Executive Order

• Any other day designated by the President’s Proclamation

1.6.3.5. It is understood and agreed between the Government and the Contractor that observance of such days by Government personnel shall not otherwise be a reason for an additional period of performance, or entitlement of compensation except as set forth within the contract. In the event the Contractor's personnel work during the holiday, they may be reimbursed by the Contractor, however, no form of holiday or other premium compensation will be reimbursed either as a direct or indirect cost, other than their normal compensation for the time worked.

1.6.3.6. If Government personnel are unavailable due to furlough or any other reason, the Contractor must contact the KO or the COR to receive direction. It is the Government's decision as to whether the contract price/cost will be affected. Generally, the following situations apply:

1.6.3.6.1. Contractor personnel who are able to continue contract performance (either on-site or at a site other than their normal workstation), must continue to work and the contract price shall not be reduced or increased.

1.6.3.6.2. Contractor personnel who are not able to continue contract performance (e.g., support functions) may be asked to cease their work effort. This may result in a reduction to the contract.

1.6.3.7. Contractor personnel attendance at Government social events, such as the annual picnic, holiday parties, etc., is at the Contractor’s discretion. Contractor personnel shall obtain the approval of their company’s supervisor prior to the event. Contractor personnel shall coordinate attendance with the COR and ensure no delay in performance or degradation in services will occur as a result of Contractor personnel attendance at any Government social event. The Government is not responsible for reimbursing any expenses to the Contractor for attending any Government social event. It is expected attendance will not impact the performance of this contract. The Contractor agrees to continue to provide sufficient personnel to perform tasks already in operation or scheduled, and must be guided by the instructions issued by the KO or COR.

1.6.4. Hours of Operation: The Government expects the Contractor will establish normal operating hours under this contract between 5:30 a.m. and 6:00 p.m. The Contractor must maintain an adequate workforce for the uninterrupted performance of all tasks defined within this PWS. When hiring personnel, the Contractor shall keep in mind that the stability and continuity of the workforce are essential. The Contractor’s PM and the COR shall consult and coordinate on any proposed alternate work schedule that may be arranged depending on the operational tempo/needs of the mission. Overtime, to be paid by the

PRE-DECISIONAL Page 6 of 44

Government, is subject to approval by the Primary COR. Overtime, to be paid by the Government, must be submitted for in advance of any overtime worked, on a case-by-case basis, for approval/denial. This must be done in writing and cannot be done after the fact. Please note, employees subject to the Fair Labor Standards Act (FLSA) will have to be paid at time and a half for overtime. The employees exempt from the FLSA will be paid at their normal hourly rate. If not approved by the Government, the Contractor authorizes and works overtime at the Company’s expense.

1.6.5. Telework: Shall only be permitted on a case-by-case basis for the performance of unclassified work with prior written approval of the COR and KO. All telework employees will be tracked and identified on the staffing report quarterly. Contractors will follow their company’s telework policies if telework is permitted. All Contractor personnel teleworking on this contract will be responsible for safeguarding all GFE, information, and materials in accordance with the National Industrial Security Program Operating Manual (NISPOM) 32 CFR § 117, Requirements for the Protection of Personally Identifiable Information (PII) (see Technical Exhibit E), Background Investigation Operational Policy Memorandum 2-005:

Controlled Unclassified Information (CUI) Marking Guidance for Documents Containing PII (see 7.1.1.21.), and DoD Instruction 5200.48 Controlled Unclassified Information. The Government will bear no costs to support telework for Contract Personnel and is not required to furnish Government Property as workspace is available at the Government Facility.

1.6.6. Remote Work: Shall only be permitted on a case-by-case basis for the performance of unclassified work with prior written approval of the COR and KO. All remote work employees will be tracked and identified on the staffing report monthly. Contractors will follow their company’s remote work policies if remote work is permitted. All Contractor personnel performing remote work on this contract will be responsible for safeguarding all Government equipment, information, and materials in accordance with the NISPOM) 32 CFR § 117, Requirements for the Protection of PII (see Technical Exhibit E), Background Investigation Operational Policy Memorandum 2-005: Controlled Unclassified Information Marking Guidance for Documents Containing PII (see 7.1.1.21.), and DoD Instruction 5200.48 Controlled Unclassified Information. The Government will bear no costs to support remote work for Contract Personnel and is not required to furnish Government Property as workspace is available at the Government Facility.

1.6.7. Place of Performance: The work to be performed under this contract will be performed at Boyers, Pennsylvania, St. Louis, Missouri, or at an alternate approved location, as appropriate for the related effort.

1.6.8. Type of Contract:

The contract vehicle and CLIN structure are still to be determined (TBD) based on market research and input from industry. However, the contract type will most likely be firm-fixed-price (FFP). Positive or negative incentives may also apply to contract prices, as described under sections 6.5. and 6.6. of this document.

Changes to the mission environment will likely require the parties to negotiate prices for new work and/or renegotiate prices for existing work, as underlying levels of effort increase or decrease. If this occurs, both DCSA and the Contractor agree to negotiate in good faith using existing pricing, DCSA workload estimates, and Service Contract Labor Standards (SCLS) requirements as the initial basis for new pricing. Proposed price changes that do not align with existing pricing, DCSA workload estimates, and/or SCLS requirements will require the requesting party to submit compelling rationale explaining

PRE-DECISIONAL Page 7 of 44 the basis of its position. Moreover, any newly negotiated prices will need to be deemed fair and reasonable by the KO prior to incorporation into the contract.

1.6.8.1. Partial Offset: At times throughout the life of this contract, DCSA may warrant the need to have specific items completed by Federal Staff, in lieu of Contractor completion, in accordance with Section

5.3.3. The Contractor’s monthly invoice will be offset by the number of items completed in the prior month (month being invoiced) multiplied by $16.25.

1.6.9. Security Requirements: Contractor personnel performing work under this contract must meet the security requirements, as identified in Technical Exhibit C of the contract and must maintain the level of security required for the life of the contract.

1.6.9.1. Physical Security: The Contractor shall be responsible for safeguarding all Government equipment, information and property provided for Contractor use. At the close of each work period, Government facilities, equipment, and materials shall be secured. The Contractor shall safeguard and secure the identified equipment, information, property, facilities, and materials in accordance with the NISPOM 32 CFR § 117 and Technical Exhibit C.

1.6.9.2. Keys and Key Card Control, to include Common Access Cards (CAC) / Personal Identity Verification (PIV) cards: The Contractor shall establish and implement methods of making sure all keys and key cards issued to the Contractor by the Government are not lost or misplaced and are not used by unauthorized persons, in accordance with the security requirements. The Contractor shall immediately report any occurrences of lost key cards to the COR. NOTE: All references to keys include key cards. No keys issued to the Contractor by the Government shall be duplicated. The Contractor shall develop procedures covering key control that shall be included in the QCP. Such procedures shall include turn-in of any issued keys by personnel who no longer require access to locked areas. The Contractor shall immediately report any occurrences of lost or duplicate keys/key cards to the KO.

1.6.9.2.1. In the event keys, other than master keys, are lost or duplicated, the Contractor shall, upon direction of the KO, re-key or replace the affected lock or locks; however, the Government, at its option, may replace the affected lock or locks or perform re-keying. When the replacement of locks or re-keying is performed by the Government, the total cost of re-keying or the replacement of the lock or locks shall be deducted from the monthly payment due the Contractor. In the event a master key is lost or duplicated, all locks and keys for that system shall be replaced by the Government and the total cost deducted from the monthly payment due the Contractor.

1.6.9.2.2. The Contractor shall prohibit the use of Government issued keys/key cards by any persons other than the Contractor’s employees. The Contractor shall prohibit the opening of locked areas by Contractor employees to permit entrance of persons other than Contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the KO.

1.6.10. Special Qualifications: All Contractor personnel performing services under this effort shall receive a favorably adjudicated background investigation at the appropriate level. Levels of investigation may vary between Tier 3 and Tier 5, depending on the specific duties required, and ongoing reinvestigations or CV as applicable will be required.

PRE-DECISIONAL Page 8 of 44

1.6.11. Training: Contractor personnel performing under this contract shall complete all applicable Government training in accordance with Technical Exhibit L – Required Contractor Training. A list of all required/mandatory training to be completed by its employees providing support under this contract will be provided by the COR. Training may include training relation to the following: Information Technology (IT) Security, Cyber Security, Privacy and PII, Workplace Violence, Sexual Harassment, and DoD specific training requirements.

1.6.11.1. Training Records: The Contractor will make available certificates of completion for all personnel to the COR or to the KO upon request. Required training will be completed within 30 calendar days of being cleared to work on the contract. Annual refresher training shall be completed each contract year thereafter (based on the original completion date), and will be reported to the COR in the monthly training deliverable.

1.6.12. Post Award Conference/Periodic Progress Meetings: The Contractor agrees to attend any post award conference convened by the contracting activity or contract administration office in accordance with FAR subpart 42.5. The KO, COR, and other Government personnel, as appropriate, may meet periodically with the Contractor to review the Contractor's performance. At these meetings, the KO will apprise the Contractor of how the Government views the Contractor's performance and the Contractor will apprise the Government of problems, if any, being experienced. Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government.

1.6.13. Contracting Officer’s Representative: The COR will be identified by a separate, appointment letter.

The COR monitors all technical aspects of the contract and assists in contract administration. The COR is authorized to perform the following functions: assure that the Contractor performs the technical requirements of the contract: perform inspections necessary in connection with contract performance:

maintain written and oral communications with the Contractor concerning technical aspects of the contract: issue written interpretations of technical requirements, including Government drawings, designs, specifications: monitor Contractor's performance and notifies both the KO and Contractor of any deficiencies; coordinate availability of Government furnished property, and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates. The COR is not authorized to change any of the terms and conditions of the resulting order.

1.6.13.1. Technical Direction. The COR may provide technical direction on contract performance.

Technical direction may include any of the following:

• Daily work assignments specifying the types of background investigation work required, locations of the work, and other relevant details pertaining to the work;

• Instruction to the Contractor that approves approaches, solutions, or refinements; fills in details;

completes the general descriptions of work; and or shifts emphasis among work areas or tasks;

and

• Evaluation and acceptance of reports or other deliverables.

Technical direction must be within the scope of work of the contract and any task order thereunder. DCSA will issue technical direction in writing as required. If, in the Contractor’s opinion, any direction by the COR falls within any of the categories defined at 1.6.13.2., the Contractor will not proceed and will notify

PRE-DECISIONAL Page 9 of 44 the KO in writing within three days of receiving the communication in question. Promptly thereafter, the KO will advise the Contractor and COR of one of the following:

• The direction is within the scope of the contract and does not constitute a change to the contract;

• The direction is beyond the scope of the contract, and DCSA intends to negotiate a modification to the contract formalizing the change; or

• The direction is beyond the scope of the contract and is thereby rescinded.

1.6.13.2. Limitations on Technical Direction. The COR and ACOR do not have the authority to issue any technical direction that does the following:

• Constitutes a change or assignment of additional work outside of the contract;

• Constitutes a change as defined in the clause at FAR 52.212-4;

• In any manner causes an increase or decrease in the awarded contract price, or the time required for contract performance;

• Changes any of the terms, conditions or specifications of the contract; or

• Interferes with the Contractor's right to perform under the terms and conditions of the contract.

1.6.13.3. Supervision of Contractor Personnel. The Government will not directly or indirectly supervise or direct Contractor employees. If the Contractor accepts the direction of any Government employee other than the KO/COR, it will not be considered contractually binding. The COR will only provide the Contractor with technical direction in accordance with the terms of the contract. Any action(s) taken by the Contractor in response to any direction given by any person acting on behalf of the DCSA or any Government official other than the KO or authorized COR will be at the Contractor’s risk.

1.6.14. Key Positions and Personnel Reporting:

Contractor employees identified as key positions or personnel in the Contractor’s accepted proposal at time of award are identified in this contract. The Contractor will retain and maintain key positions and personnel as identified below.

1.6.14.1. Program Manager. The Contractor will provide a Program Manager who will be responsible for the performance of the work. The name of this person and an alternate who will act for the Contractor when the Program Manager is absent must be designated in writing to the KO. The Program Manager or alternate, will have full authority to act for the Contractor on all contract matters relating to daily operation of this contract. The Program Manager will have a minimum of five years of experience managing programs of similar size and scope and complexity. The Contractor must provide a resume to support the individual holding this position meets the minimum qualification requirements and a letter of commitment on company letterhead with signature of the individual confirming his/her intention to serve in the stated position at contract award.

1.6.14.2. Information Technology Manager. The Contractor will provide an IT Manager to serve as the Information System Security Manager or Information System Security Officer (this position can be the same position or two separate positions) and will meet the minimum training requirements therein. The Contractor must provide a resume to support the individual holding this position meets the minimum qualification requirements in accordance with the IT Requirements (see Technical Exhibit A) and a letter of commitment on company letterhead with signature of the individual confirming his/her intention to serve in the stated position at contract award.

PRE-DECISIONAL Page 10 of 44

1.6.14.3. Quality Control Manager. The Contractor will provide a Quality Control Manager who will be responsible for the Contractor’s QCP.

1.6.14.4. Key Personnel Report. The Contractor will notify the Government, through the submission of a Change of Key Personnel Report to the COR and KO 10 days prior to removing, replacing, or diverting any of its key personnel. The Change of Key Personnel Report shall include justification (including substitutions with resumes) with sufficient detail to permit the change on the Contract. The list of key personnel incorporated into the Contract award may be amended from time to time during the course of the performance to add or delete personnel, so long as all related contract requirements are met.

1.6.14.5. The Contractor shall furnish to the COR a list that includes the names, telephone numbers and addresses of the on-site Supervisors no later than five (5) days prior to the contract effective date. This list shall be updated and submitted to the COR as changes occur.

1.6.15. Contractor Manpower Reporting: The Contractor shall report ALL Contractor labor hours (including Subcontractor labor hours) required for performance of services provided under this contract for the DCSA via a secure data collection site. The Contractor is required to completely fill in all required data fields using the following web address: https://www.sam.gov. Reporting inputs will be for the labor executed during the period of performance during each Government fiscal year (FY), which runs October 1 through September 30. While inputs may be reported any time during the FY, all data shall be reported no later than October 31 of each calendar year. Contractors may direct questions to the help desk at:

https://www.sam.gov (see FAR Clause 52.204-14 – Service Contract Reporting Requirements).

1.6.16. Identification of Contractor Employees: All Contractor personnel attending meetings, answering Government telephones, and working in other situations where their Contractor status is not obvious to third parties are required to identify themselves as such to avoid creating an impression in the minds of members of the public that they are Government officials. While on duty, Contractor personnel with PIV/badge or identification distinguishing their Contractor status shall ensure such identification is prominently displayed at all times. All other use of Contractor identification shall comply with Technical Exhibit C - Background Investigation Security Requirements. The Contractor shall also ensure that all documents or reports produced by Contractor employees are suitably marked as Contractor products or that Contractor participation is appropriately disclosed.

1.6.17. Contractor Travel: The Government does not anticipate the Contractor incurring any travel costs during performance of this requirement. Funding for travel requirements is not currently included under this contract and if travel is required, funding will be added by the KO through a modification. If travel is added, reimbursement of transportation, lodging, meals, and incidental expenses are allowable subject to the limitations contained in FAR 31.205-46 and the limitation of funds specified in this contract. All travel requires prior Government approval/authorization and notification to the COR.

1.6.18. Organizational Conflict of Interest: Contractor and subcontractor personnel performing work under this contract may receive, have access to or participate in the development of proprietary or source selection information (e.g., cost or pricing information, budget information or analyses, specifications or work statements, etc.) or perform evaluation services which may create a current or subsequent Organizational Conflict of Interests (OCI) as defined in FAR subpart 9.5.

https://www.sam.gov/ https://www.sam.gov/

PRE-DECISIONAL Page 11 of 44

1.6.18.1. Due to the potential of an ensuing real or perceived OCI, the prime Contractor under this contract may not participate in any capacity under DCSA contract number HS002123D0001 and HS002123D0002, or under any future DCSA solicitation or contract for the provision of background investigation fieldwork services.

Moreover, the Contractor shall notify the KO immediately if it becomes aware of any other actual or potential OCI involving the Contractor’s work under this contract. Upon instruction from the KO, the Contractor shall submit a mitigation plan detailing how the Contractor will avoid or mitigate an identified significant real or potential OCI. The mitigation plan will be determined to be acceptable solely at the discretion of the KO, and in the event the KO determines that any such OCI cannot be satisfactorily avoided or mitigated, the KO may impose other remedies as deemed necessary and appropriate, including prohibiting the Contractor from participation in subsequent contracted requirements which may be implicated by the OCI.

1.6.18.2 Subcontracting or entering into a teaming arrangement is not limited; however, a risk mitigation strategy must be submitted with the proposal or at any time during the life of this contract when a primary Contractor for another DCSA investigative or investigative support Contract is going to be added as a subcontractor or team-member. The Government reserves the right to approve or reject the proposed risk mitigation strategy before the subcontractor or team-member is added to the contract.

1.6.19. Ramp-Up Period and Phase-In Period

1.6.19.1. Duration: The ramp-up period, which may last up to three months, begins upon award of the basic contract and ends once the Contractor has met all prerequisite requirements to the satisfaction of the Government. The Government will not issue any task orders during the ramp-up period. Once the prerequisite requirements are met, the KO will issue a notice to proceed (NTP) and a task order. At this point, the three-month phase-in period will commence, during which the Government may limit workload assignments until it has full confidence in the Contractor. Thus, the maximum amount of time Contractors will have from the date of award to reach full performance capability is 6 months (up to three months for ramp-up tasks, followed by a firm three months for the phase-in period). Additional details regarding the ramp-up and phase-in periods are addressed below.

1.6.19.2. Prerequisite Requirements: Before issuance of the NTP and commencement of case assignment in the phase-in period, the Contractor must satisfy the following prerequisite requirements to the satisfaction of the Government:

• Submit a Ramp-Up Timeline and Strategy for Government approval no later than (placeholder).

The plan will identify the Contractor’s strategy, phases, and milestones for successful completion of the ramp-up period. At a minimum the plan should include strategies for staffing, gaining system access, securing equipment (i.e., laptops) needed for contract performance and understanding the workload and functional environment. Contractors may propose an NTP date within their ramp-up plans. The plan will also address the management structure, management functions, corporate resources, program management and staffing capabilities (including subcontractors) that will support the Contractor’s ability to complete the ramp-up period.

• Obtain PIV cards and CACs, as applicable.

• Complete all IT Security requirements and obtain approval from the Authorizing Official.

• Obtain IT access and account creation.

PRE-DECISIONAL Page 12 of 44

• Complete all security requirements.

• Complete all training referenced in this PWS and described in the requirements (see Technical

Exhibits A, B, C, and E).

• Submit a QCP for Government review and approval within 30 days of the contract effective date.

1.6.19.3. Performance: Upon commencement of the phase-in period, DCSA will begin assigning work to the Contractor. Case types and volume of work will be closely monitored and adjusted during the phase-in period as the Contractor demonstrates its ability to meet the performance standards as defined in section 5.

1.6.19.4. Evaluation: Once the phase-in period begins, the Government will measure, monitor, and report timeliness performance standards in accordance with section 6; however, timeliness disincentives will be waived, no offsets will be deducted, and no incentives will be earned during this three-month period.

Further, timeliness performance during this time will not factor into Contractor evaluations in the Contractor Performance Assessment Reporting System (CPARS). All other performance elements will be measured.

1.6.19.5. Start-up Costs. The Contractor is expected to fully fund its operations during the ramp-up period and will not receive funding or reimbursement from the Government to cover those costs. Therefore, the Contractor may incur substantial costs in implementing its background investigation support services program.

PRE-DECISIONAL Page 13 of 44

2. DEFINITIONS AND ACRONYMS

2.1. Definitions

Alternate Contracting Officer Representative (ACOR). An employee of the U.S. Government appointed by the KO to administer the contract. Such appointment will be in writing and will state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

Case Material. Case material is any document in any media created in the field that is not retained as part of the agency/permanent case file, including (but not limited to) interview notes, case papers, quality control personnel notes with written notations. Records relating to the maintenance and disposition of these files will be provided immediately upon request of the Government and available to DCSA at the conclusion of the Contract. The Contractor is responsible for establishing inventory and accounting procedures necessary to ensure completion of these tasks. Records will be retained in accordance with the Requirements for the Protection of PII (see Technical Exhibit E).

Contracting Officer (KO). A person with authority to enter into, administer, and or terminate contracts, and make related determinations and findings on behalf of the Government. The KO is the only individual who can legally bind the Government.

The KO has the overall responsibility for the awarded contract. The KO alone, without delegation, is authorized to take actions on behalf of the Government to amend, modify or deviate from the contract terms, conditions, and requirements. The KO may delegate certain other responsibilities to authorized representatives, COR or ACOR. The KO is the only person authorized to issue task orders. In the event, the Contractor effects any changes at the direction of any person other than the KO, the change will be considered to have been made without authority and no adjustment will be made to the contract price or any other term in the awarded contract.

Contracting Officer’s Representative (COR). An employee of the U.S. Government appointed by the KO to administer the contract. Such appointment will be in writing and will state the scope of authority and limitations. This individual has authority to provide technical direction to the Contractor as long as that direction is within the scope of the contract, does not constitute a change, and has no funding implications. This individual does NOT have authority to change the terms and conditions of the contract.

Contractor. An Offeror, supplier or vendor awarded a contract to provide specific supplies or service to the Government. The term used in this contract refers to the prime.

Deficiency. A service output that does not meet the standard of performance associated with the PWS.

Deliverable. Anything that can be physically delivered, but may include non-manufactured things such as meeting minutes or reports.

Employee/Personnel. The Contractor will provide all labor needed for the performance under the awarded contract. The term “employee” or “personnel” indicates individuals that have been cleared by DCSA to perform work for the Contractor under the awarded contract, regardless of that individual’s legal employment status with the Contractor.

PRE-DECISIONAL Page 14 of 44

Inactive. The term “inactive” means that the individual is not actively engaged on the contract due to reasons such as, but not limited to, annual leave, sick leave, military leave, Family Medical Leave Act, lack of work, or Contractor furlough. The term “inactive” does not include Contractor personnel that have been terminated, removed or suspended from the Contract.

Key Positions/Personnel. Contractor personnel that are evaluated in a source selection process and that may be required to be used in the performance of a contract.

Personnel Investigations Processing System (PIPS). DCSA’s mainframe computer system used for processing background investigations.

Physical Security. Actions that prevent the loss or damage of Government property.

Quality Assurance. The Government procedures to verify that services being performed by the Contractor are performed according to acceptable standards.

Quality Assurance Surveillance Plan (QASP). An organized written document specifying the surveillance methodology to be used for surveillance of Contractor performance.

Quality Control Plan (QCP). All necessary measures taken by the Contractor to assure that the quality of an end product or service will meet contract requirements.

Subcontractor. One that enters into a contract with a prime Contractor. The Government does not have privity of contract with the subcontractor.

Trusted Workforce (TW) 2.0. The new policy framework initiative to update the security framework for the security clearance policy procedures and products.

Units of Work (UOW). The estimated level of effort required across all available case types. The averages are intended to be representative of the varying levels of effort involved in the different case types/items.

PRE-DECISIONAL Page 15 of 44

2.2. Acronyms

AO Authorizing Official AUP Acceptable Use Policy AVS Adjudication and Vetting Services BIES Background Investigations Enterprise Systems BOT Automated Processing Tools CAC Common Access Card CAS DoD Consolidated Adjudications Services CDRL Contract Data Requirements List CE Continuous Evaluation CFR Code of Federal Regulations CIL Critical Information and Indicators List CISO Chief Information Security Officer CJCSI Chairman of the Joint Chiefs of Staff Instruction CLIN Contract Line Item Number CM Continuous Monitoring COR Contracting Officer’s Representative CPARS Contractor Performance Assessment Reporting System CPI Critical Program Information CPOC Case Processing Operations Center CPRA Contactor Performance Reporting Application CSP Cloud Service Provider CUI Controlled Unclassified Information CV Continuous Vetting DAAPM DCSA Assessment and Authorization Process Manual DCSA Defense Counterintelligence and Security Agency DFARS Defense Federal Acquisition Regulation Supplement DISS Defense Industrial System for Security DoD Department of Defense DOD Safe Department of Defense, Secure Access File Exchange eOPF Electronic Official Personnel Folder EPP Endpoint Protection ET Eastern Time FAR Federal Acquisition Regulation FFP Firm Fixed Price FIPS Federal Information Processing Standards FIS Federal Investigative Standards FISMA Federal Information Security Management Act FLSA Fair Labors Standards Act FOCI Foreign Ownership, Control, or Influence FOIA Freedom of Information Act FWS Field Work System FY Fiscal Year GFE Government Furnished Equipment GFI Government-Furnished Items GCA Government Contracting Activity

PRE-DECISIONAL Page 16 of 44

IAM Information Assurance Management IDIQ Indefinite-Delivery/Indefinite-Quantity IT Information Technology ISI Information Security Incident IST Investigative Suite of Tools IWA In Accordance With KO Contracting Officer NAC Network Access Control NBIS National Background Investigation Services NISP National Industrial Security Program NISPOM National Industrial Security Program Operating Manual NIST National Institute of Standards and Technology NTP Notice to Proceed OCI Organizational Conflict of Interest OIG Office of the Inspector General OMB Office of Management and Budget OPSEC Operational Security ORA Designated Risk Acceptance PCLF DCSA Privacy, Civil Liberties, and FOIA PDT Position Designation Tool PIEE Procurement Integrated Enterprise Environment PII Personally Identifiable Information PIPS Personnel Investigations Processing System PIU Primary Investigative Unit PIV Personal Identity Verification PM Program Manager PMR Program Management Review P&P Processes and Procedures PPP Program Protection Plan POA&M Plan of Action and Milestones PTQR Performance Timeliness and Quality Report PWS Performance Work Statement QASP Quality Assurance Surveillance Plan QCP Quality Control Plan RAPIDS Real-Time Automated Personnel Identification System RMF Risk Management Framework SAAR System Authorization Access Request-DD2875 SCLS Service Contract Labor Standards SEAD Security Executive Agent Directive SRG Cloud Computing Security Requirements Guide STIG Defense Information Systems Agency, Security Technical Implementation Guides T2 Tier 2 T2R Tier 2 Reinvestigation TE Technical Exhibit TO Task Order TW Trusted Workforce

PRE-DECISIONAL Page 17 of 44

UAT User Acceptance Testing UOW Units of Work U.S.C. United States Code VAR Visit Authorization Request VDI Virtual Desktop Infrastructure VPN Virtual Private Network VRO Vetting Risk Operations

PRE-DECISIONAL Page 18 of 44

3. GOVERNMENT FURNISHED PROPERTY, EQUIPMENT, AND SERVICES

3. Government Furnished Items and Services:

3.1. Services: The Government will provide the following services:

• IT Equipment Helpdesk Support

• Telephone Service (specific to Boyers, PA and St. Louis, MO only)

• Telephone Technical Support

• Facility Access and Shuttle Service, as applicable

• Tools/BOTs

3.2. Facilities: The Government will provide workspace for the Contractor staff to provide the functions outlined in the PWS to include desk space, telephone service (landlines), computers (either Desktops, ThinClients, or Laptops), and other items necessary to maintain an office environment at the Boyers, PA and St. Louis, MO offices. An inventory list including Government-provided workspaces is provided as

7.1.27. All equipment provided for workspaces are not to leave the workspace unless received written authorization from COR and completed the proper release documentation through Logistics. All additional required space shall be at the Contractor’s expense.

3.3. Landlord/Facility Regulations:

3.3.1. The Government's workspace is leased; therefore, the Contractor shall comply with all facility rules and regulations imposed by the landlord. Examples of these rules include, but are not limited to, the following:

• CAC/PIV cards are required to enter the facility

• No photographic equipment, to include cell phones with cameras without prior approval from the facility/landlord

• No sandals or other types of open shoes

3.4. Equipment: In addition to the items provided in the inventory list in 7.1.27. – Workspace Inventory List, the Government will provide the following equipment:

• Imaging Scanners and Printers;

• Document Reproduction and paper;

• Microfilm Machines (readers);

• Office furniture/workstations;

• Desktop computers, ThinClients, or Laptops, modems, and software and applications to perform work within the Enterprise Systems suite environment.

• DCSA software to include but not limited to Virtual Private Network (VPN) Client, and a

Network Access Control Client

• DCSA will provide Virtual Desktop Infrastructure (VDI).

3.4.1. The Government will consider requests for GFE for telework or remote work on a case-by-case basis and is not a guarantee. This request must cover the need for the laptop, why the Contractor Supplied Equipment cannot be utilized, and any considerations given to the Government for supplying these laptops for the Contractor’s use. These requests must be approved by the COR. The GFE should only be used to access DCSA systems for processes such as but not limited to conducting military records searches, running the BOTs, Pennsylvania statewide searches and connect to Field Work System (FWS).

PRE-DECISIONAL Page 19 of 44

3.5. Materials: The Government will provide the following materials:

• Temporary Badge Material;

• DCSA forms, and preprinted envelopes

• PIV cards and CACs

3.6. Reporting GFE Issues: The Contractor shall report all disruptions, service-outages, and defects to the COR for all GFE listed in this section.

3.7. The Contractor shall report GFE within the appropriate module in the PIEE system.

3.8. Common Access Cards/Personal Identity Verification Cards: DCSA will provide CACs and/or PIVs for Contractor personnel that meet the necessary clearance requirements and have a need to access Federal facilities and/or systems. CACs will be issued, accounted for, and returned in accordance with the requirements of DoDM 1000.13, DoDI 5200.46, and DCSA Regulation 25-3, Personnel Security Program.

PIVs will be issued, accounted for and returned in accordance with the requirements of Homeland Security Presidential Directive 12 and Federal Information Processing Standard Publication 202. All time and/or travel costs associated with activating, reissuing, or updating of CACs and/or PIVs will be the sole responsibility of the Contractor.

3.9. Return of Government Furnished Items (GFI) for Inactive Personnel: If an employee is inactive for 30 consecutive calendar days, the GFI assigned to the employee will be turned into and held by the Contractor’s Security Manager.

If the employee is inactive 90 consecutive calendar days or more, all DCSA issued GFI will be mailed or hand-delivered to DCSA within 10…