Draft PWS.docx

International Acquisition and Engagements

PERFORMANCE WORK STATEMENT (PWS)

Contract Number:

Task Order Number:

Contractor Name

Tracking Number:

Follow-on to Previous Contract and Task Order Number:

1. Contracting Officer’s Representative (COR).

a. Primary COR. See DITCO Additional Text G1 - Points of Contact

b. Alternate COR. See DITCO Additional Text G1 - Points of Contact

c. Property Administrator See DITCO Additional Text G1 - Points of Contact

2. Contract or Task Order Title. International Acquisition and Engagements

3. Background. International Acquisition includes the cross-border procurement of defense articles and services, as well as cooperative research, development, production, and sustainment programs with allied and partner nations. These activities are critical for enhancing interoperability, sharing technology and cost burdens, and strengthening the defense industrial base of the U.S. and its partners. The Defense Information Systems Agency (DISA) plays a crucial role in these programs by providing vital IT articles and services to partner nations via various International Programs, thereby improving communication, information sharing, and operational effectiveness. Agency International Acquisition governance is codified by the Foreign Assistance Act (22 U.S.C. §2151), Arms Export Control Act (22 U.S.C. §2778), Defense Security Cooperation Agency (DSCA) Manual 5105.38-M, Security Assistance Management Manual (SAMM), Department of Defense (DoD) 7000.14-R, and DoD Financial Management Regulation (FMR).

4. Objectives: The objective of this contract is to provide non-personal services to DISA supporting International Acquisition to include Foreign Military Sales (FMS), Engagements, and Business Process Engineering activities, to include international agreements and technology release. The contractor will support the International Acquisition and Engagement office, Program Acquisition Executive (PAE) Offices, Program Management Offices (PMOs), and Resource Managers to fulfill partner nations' acquisition requirements. This requires highly integrated expertise in international acquisition protocols, including FMS, as well as knowledge of DISA and DoD specific systems and DSCA policies and processes.

5. Scope. The contractor shall provide international acquisition, programmatic, general portfolio management, and FMS financial services to meet international obligations. This includes support for FMS and Building Partnership Capacity (BPC) case development, execution, system acquisition and delivery, asset tracking, sustainment, and case closure, strategic international engagement activities and business process engineering. All tasks must be compliant with applicable Department of Defense (DoD) governance and guidelines.

The contractor shall execute the following task areas:

Task Area 1: International Acquisition Professional Services - Foreign Military Sales Task Area 2: International Acquisition Professional Services – Engagements and Business Process Engineering Surge Support: The Government may require surge support during any performance period. Surge modifications will be within the scope of this PWS and shall not exceed 20% of the contractor’s total proposed cost/price for the base and all option periods, excluding any extension of services pursuant to FAR 52.217-8.

Government Rights: The Government will have unlimited rights and exclusive ownership of all deliverables (e.g., briefs, reports, manuals, plans, research) created under this contract. These deliverables may not be used or sold by the contractor without written permission from the Contracting Officer.

Technology: Non-developmental items (NDI) and commercial-off-the-shelf (COTS) products and processes shall be used to the maximum extent practicable.

6. Performance Requirements. The following tasks establish the foundation of services and products for Agency International Acquisition and Engagements. The contractor shall provide operational, process, and financial management for the development, execution, reconciliation, and closure of FMS cases.

6.1 Task 1 – International Acquisition Professional Services - Foreign Military Sales

6.1.1 Subtask 1- FMS Program Management.

The contractor shall:

· Provide operational, process, and financial management for the development, execution, reconciliation, and closure of up to 60 FMS/BPC cases.

· Conduct a kick-off meeting within ten (10) business days after award to discuss programmatic requirements, schedules, roles, and responsibilities.

· Provide a draft Contract Management Plan at the kickoff meeting and a final version within 15 business days after the meeting.

· Submit a Monthly Status Report (MSR) detailing actions performed on all tasks.

· Meet with the COR and program manager monthly to discuss the status of each case.

6.1.2 Subtask 2- FMS Case Management.

The contractor shall:

· Develop and coordinate products, create documentation, and participate in reviews related to DISA’s FMS/BPC actions.

· Manage and track customer requests, official cases and lifecycle status within the Defense Security Assistance Management System (DSAMS), and applicable DISA and DSCA dashboards and tracking systems.

· Deliver coordinated FMS/BPC agency packages for Government review and submission for Letter of Offer and Acceptance (LOA) development.

· Develop recommendations to ensure case requirements are clearly planned, acquired, and delivered.

· With Government approval, implement process improvement measures.

· Develop FMS training resources and provide recommendations for Agency FMS strategic level planning.

· Coordinate FMS program portfolio reviews.

· Maintain electronic case and funding document files via SharePoint/shared drive.

6.1.3 Subtask 3 - FMS Financial Management.

The contractor shall:

· Prepare funding documents and load financial information into FMS/BPC-related financial systems, including but not limited to DISA accounting systems, Telecom Services Enterprise Acquisition Services (TSEAS) Inventory and Billing Information (TIBI), Defense Integrated Financial System (DIFS), Centralized Information System for International Logistics (CISIL) and various Security Cooperation systems.

· Maintain electronic case and funding document files via SharePoint/shared drive.

· Collect, analyze, and file vouchers for FMS/BPC contracts.

· Review financial plans and coordinate with the DISA Comptroller’s Office, Defense Finance and Accounting Service (DFAS) and other DoD agencies to identify discrepancies and validate transactions.

6.1.4 Subtask 4 - FMS Reconciliation and Financial Process.

The contractor shall:

· Retrieve and analyze reports from DoD financial and logistical systems to ensure full reconciliation of all FMS/BPC case transactions.

· The contractor shall retrieve FMS case-related funding documentation and financial reports from the accounting system(s), the Defense Integrated Financial System (DIFS), and the Centralized Integrated System-International Logistics (CISIL). This information must be reviewed and analyzed to ensure transactions are reconciled across all systems and that both the performance and cash sides of DIFS are aligned.

· Reconcile and clear financial discrepancies to align systems as required.

· Obtain voucher copies, enter information into the required system, and prepare funding packages for submission in accordance with DoD and Office of the Chief Financial Officer requirements.

· Prepare and coordinate voucher correction packages with DISA and Defense Finance and Accounting Service (DFAS) to ensure correct billing.

6.1.5 Subtask 5 – FMS Case Closure.

The contractor shall:

· Review the inventory of FMS/BPC cases in supply/service complete (SSC) status and provide recommendations on case closure actions.

· Research contract and funding discrepancies and draft follow-up letters for document finalization.

6.1.6 Subtask 6 - Operating Procedures and Internal Processes.

The contractor shall:

· Provide input and recommendations on business process development for Financial Improvement and Audit Readiness (FIAR) compliance efforts for approximately 60 cases monthly.

· Maintain a complete library of Standard Operating Procedures (SOPs) for all FMS/BPC tasks.

· Ensure a comprehensive and compliant records management system is in place.

· Develop and update business process flow charts and narratives.

· compliance efforts for approximately 60 cases.

Deliverables:

Copies Frequency and Remarks

Determined

Determined

Determined

COR copies of updated documents Quarterly

6.1.4 6.1.6

Determined

Determined

*Standard Distribution: 1 copy of the electronic transmittal letter without the deliverable to the Contracting Officer; 1 copy of the electronic transmittal letter with the deliverable to the Primary COR, Branch Chief, PM, Government SME

6.2 Task 2 – International Acquisition Professional Services – Engagements and Business Process Engineer Activity The contractor shall provide analytical, operational, and technical services for the planning and execution of the Government's international acquisition activities.

6.2.1 Subtask 1 – International Engagements

The contractor shall:

· Coordinate pre-engagement, dayof logistics, and post-engagement activity DISA international partner forums and foreign official visits to DISA HQ.

· Adhere to all applicable DoD and DISA policies, including International Traffic in Arms Regulations (ITAR) and Foreign Disclosure approval.

· Monitor and analyze activities of international organizations to identify strategic engagement opportunities for DISA.

· Record meeting minutes, noting all decisions and action items for Agency International Engagements, International Acquisition review and planning meetings.

· Track the progress of all action items and report any delays to the appropriate government personnel.

· Maintain and update agency database of international visits information and relevant international affairs information via designated portal. Maintain an organized record of all meeting materials (agendas, presentations, minutes, etc.) within designated site.

· Prepare quarterly and annual reports on the Agency's international activities internal and external to DISA HQ activities.

· Conduct monthly audits to recommend compliance improvements for DISA's international acquisition activities. Archive materials in accordance with DISA's records management policies.

6.2.2 Subtask 2 – Business Process Engineer Activity

The Business Process Engineer shall provide the necessary expertise to analyze, document, re-engineer business processes related to International Acquisition activity. This includes, but is not limited to, the following tasks:

· 6.2.2.1 Process Analysis and Documentation:

· Conduct comprehensive analyses of existing international acquisition processes, including but not limited to FMS, Technology Release and Foreign Disclosure (TRFD), International Engagements, International Agreements, Program International Acquisition and training coordination.

· Document current "as-is" business processes, workflows, and systems using industry-standard methodologies and tools.

· Identify bottlenecks, redundancies, and inefficiencies in current processes.

· 6.2.2.2 Process Re-engineering and Improvement:

· Design and propose "to-be" business processes that are more efficient, effective, and aligned with strategic objectives.

· Develop and present business case analyses for proposed process changes, including cost-benefit analysis and risk assessment.

· Collaborate with stakeholders to develop and implement new and improved business processes.

· 6.2.2.3 Performance Measurement and Management:

· Develop and implement performance metrics and key performance indicators (KPIs) to measure the effectiveness and efficiency of International Acquisition processes.

· Establish a system for continuous monitoring and reporting on process performance.

· Analyze performance data to identify trends and opportunities for further improvement.

· 6.2.2.4 Technology and Automation:

· Identify opportunities to leverage technology and automation to streamline and improve international acquisition processes.

· Develop functional requirements for new IT systems or enhancements to existing systems.

· Assist with the implementation and integration of new technologies.

· 6.2.2.5 Stakeholder Engagement and Communication:

· Lead cross-functional workshops and meetings with key stakeholders, including Program Management Offices (PMOs), contracting officers, financial managers, TSFD specialists, and DoD representatives.

· Develop and execute a communication plan to ensure all stakeholders understand process changes, their roles, and the anticipated benefits.

· Create and deliver training materials to ensure successful adoption of new processes and tools.

Deliverables:

6.2.1

Determined

6.2.1

Determined

6.2.1

Determined Draft - 3 days after meeting | Gov’t review & feedback – 5 days | Final – 2 days after government review

Documentation Contractor Determined

Determined

Determined

Determined

45 days from date of award

Determined

3 months from date of award

Determined

3 months from date of award

Determined

3 months from date of award

Determined

3- 12 months from date of award

*Standard Distribution: 1 copy of the electronic transmittal letter without the deliverable to the Contracting Officer; 1 copy of the electronic transmittal letter with the deliverable to the Primary COR, Branch Chief, PM, Government SME

7. Performance Standards

7. Contractor Qualifications/Requirements: The contractor shall provide resumes of proposed Key Personnel meeting minimum requirements for each task (Security Cooperation Services/Case Management and International Engagements). When performing work, the contractor personnel will clearly identify themselves as contractors, not DoD employees, and will not manage, supervise, or task DoD civilian employees or military personnel. The contractor personnel shall not commit U.S. Government resources in any way of expenditure.

7.2 Project Schedule & Timeline Estimates:

· Qualifications: The contractor shall provide resumes of proposed key personnel meeting the minimum requirements. When performing work, contractor personnel shall clearly identify themselves as contractors.

· Project Schedule: The contractor shall provide and maintain a comprehensive project schedule and timeline estimates.

· Work Schedule: The contractor shall provide a recurring schedule denoting the physical work location (DISA, Contractor Facility, or Telework) and intended work hours.

· Absence Notification: The contractor Project Manager shall notify the COR of any personnel absences.

The contractor shall provide a comprehensive project schedule and timeline estimate, including:

7.3 Total project duration and completion timeline, expressed in weeks/months.

7.4 Assessment of progress made to date, if work has already begun.

7.5 Identification of 3-5 key milestones with specific, measurable outcomes and target completion dates.

7.6 Clear statement of all assumptions made in developing the schedule and timeline.

7.7 Description of the approach to managing the project schedule, including tracking progress and implementing corrective actions.

7.8 The contractor shall provide a recurring schedule denoting the physical location (e.g., DISA, Contractor Facility, or Telework) and intended work hours under this contract. The COR shall periodically review the schedule to ensure full performance of this PWS and validate any permanent or ad-hoc changes to this schedule will not directly impact performance of this PWS.

The Government may require surge support during the base or any option period, and surge modifications will be within the scope of the contract and provide increased support for the defined task areas of this PWS. Surge support over the life of the contract will not exceed 20% of the contractor’s total proposed cost/price for the base and all option periods, excluding any six-month extension of services pursuant to FAR 52.217-8.

8. Incentives. N/A

9. Place of Performance.

Mission Location: The contractor shall complete work at the primary Government-provided facilities located at DISA Headquarters located at Ft. Meade, MD., contractor-provided office space, or a contractor-approved telework location within the National Capital Region (NCR).

· The contractor is required to perform work at Government facilities for a minimum of two (2) days per week.

· The contractor shall ensure compliance with all applicable information-security and non-disclosure policies at contractor approved telework locations

· The contractor shall provide the required services and staffing coverage during Normal Working Hours (NWHs) as observed by Agency. NWHs vary from 8 to 9 hours daily (not including a 30-minute lunch break). and should not exceed an 80-hour work week. The Agency’s established core working hours are 0900 – 1500, Monday through Friday.

Alternative work sites allow for regular telework or remote work flexibilities. Regardless of where work is performed, the Contractor shall ensure that work is completed effectively and that mission needs and requirements are met, without degradation of services. Also, the contractor may be required to account for the physical location of their personnel should this information be requested by the COR. The Contractor shall propose on-site rates for all work performed at an alternative work site. Incidental charges incurred while working at an alternative work site (e.g., electricity, internet) are not allocable to the contract and shall not be billed to the Government.

Local travel in and around the primary place of performance may be required throughout the period of performance; this travel will not be reimbursed. Long-distance travel within CONUS may be required to support the requirements of this PWS. Long-distance travel within CONUS must be pre-approved in writing by the COR prior to the contractor incurring the cost in support of this contract. The contractor shall provide a written request to COR with a breakout of travel costs (travel costs shall not exceed Joint Travel Regulations (JTR) rates) for approval at least five (5) days before the travel date.

The maximum number of seats available in the government site for this effort is TBD (space waiver tracking # TBD for Government use only).

Secondary Place of Performance – Contingency Only. As determined by the Contracting Officer’s Representative (COR), contractor employees may be required to work at a secondary place of performance (e.g., home, the contractor's facility, or another approved activity within the local travel area) in cases of unforeseen conditions or contingencies (e.g., pandemic conditions, exercises, government closure due to inclement weather). Additionally, the contractor may be required to account for the physical location of their personnel should this information be requested by the COR. Non-emergency/non-essential contractors should not report to a closed government facility. Contractor shall prepare all deliverables and other contract documentation utilizing contractor resources. To the extent possible, the contractor shall use best efforts to provide the same level of support as stated in PWS. In the event the services are impacted, reduced, compromised, etc., the Contracting Officer or the contractor may request an equitable adjustment pursuant to the Changes clause of the contract.

The contractor will not be provided with a designated space at a government facility. Performance of certain tasks on this PWS may periodically require the contractor to perform them at DISA HQ (e.g. Classified work, in-person events, etc.).

* Unclassified work may be performed at the government locations.

* Classified work can only be conducted at the government facility.

10. Period of Performance. One base year after Task Order Award and four (4) one (1) year options.

One six-month extension, if exercised per FAR 52.217-8 dates: from 18 October 2032 - 17 April 2032.

Recognized Federal Holidays: The contractor is not required to perform services on Federal Holidays (as specified on the U.S. Office of Personnel Management website), unless otherwise specified by the COR.

Unplanned Federal Government Closure: In the event an authorized official, by either executive or legislative order, declares Federal offices closed (treated as a holiday for pay and leave purposes), the order only applies to Federal employees (unless otherwise stated in the contract).

Recognized Federal Holidays: The contractor is not required to perform services on Federal Holidays (as specified on the U.S. Office of Personnel Management website), unless otherwise specified by the COR.

Unplanned Federal Government Closure: In the event an authorized official, by either executive or legislative order, declares Federal offices closed (treated as a holiday for pay and leave purposes), the order only applies to Federal employees (unless otherwise stated in the order).

11. Security Requirements. This section supplements Block 13 of the Government provided DD Form 254, Contract Security Classification Specification. The following security requirements shall apply to this effort.

NOTE: This requirement is a Task Order under an existing Indefinite Delivery Contract or Multiple Award Schedule (MAS) and the base Contract or MAS security requirements/DD254 covers all Tasks Orders. DD254s are not required for individual task orders.

The contractor shall coordinate visits with site Point of Contract (POC)s providing at least a 72-hour notice (or according to each site security requirements) prior to any site access.

Contractor personnel without security clearances performing any task under this PWS must be escorted by cleared DISA personnel (civilian, military, or contractor).

References:

a. DISA End User Access Agreement, 11 February 2021

b. DISA Policy Letter, Unauthorized Connections to Network Devices, 11 September 2013

c. DISA Instruction 240-110-8, Information Security

d. DISA Instruction 240-110-36, Personnel Security

e. DISA Instruction 240-110-38, Industrial Security

f. DISA Instruction 240-110-43, Insider Threat Program

g. DISA Instruction 630-230-19, Cybersecurity

h. DoD Manual 5200.01, Vol 1-3 Information Security Program, 24 February 2012

i. DoD Manual 5200.02, Procedures for the DoD Personnel Security Program, 3 April 2017

j. DoD Instruction 5200.48, Controlled Unclassified Information (CUI), 6 March 2020

k. DoD 5220.22-M, National Industrial Security Program Operating Manual, February 2006

l. Incorporating Change 18 May 2016

m. 32 CFR Part 117, “National Industrial Security Program Operating Manual (NISPOM”, 24 February 2021

n. Security Executive Agent Directive 4, National Security Adjudicative Guidelines, 8 June 2017

o. DoDM 5400.07, Freedom of Information Act Program

p. DoDI 5230.24, “Distribution Statements for DoD Technical Information,” January 10, 2023

11.1 Facility Security Clearance. The work to be performed under this contract/order is up to the Secret level. Therefore, the company must have final Secret. Facility Clearance from the Defense Counterintelligence and Security Agency Facility Clearance Branch.

11.1.2 Invalidated Facility Clearance. Companies with invalidated facility clearances (including those in partnerships, subcontracts, and Joint Ventures) are not eligible to bid on or be awarded any new or additional DISA classified contracts, subcontracts, or receive additional classified information except for information necessary for the completion of your current classified contracts. In addition, those companies with invalidated facility clearances will not be permitted access to all DISA networks. Performance on any DISA classified contracts, at any location, will not be authorized until it has been granted a Facility Security Clearance (FCL) at the appropriate level by DCSA.

11.2 Security Clearance. All personnel performing on or supporting a DISA contract/order in any way shall be U.S. citizens. The personnel security requirements for this contract/order cover the individuals supporting the Task Areas delineated in the table below. Contractor personnel must possess the interim or final security clearance eligibility delineated in the table below when performance starts.

Tasks 1:

International Acquisition Professional Services - Foreign Military Sales

clearance is required to handle SECRET level Security Cooperation FMS and Building Partnership Capacity (BPC) matters.

NIPRNet/ SIPRNet accessed are required to support FMS cases with programmatic and general portfolio management support services to include providing quality accounting, financial management, budget generation, execution reporting, variance analysis, problem resolution, data reconciliation, business process improvements, analytical services, as well as audit compliance support.

Task 2:

International Acquisition Professional Services – Engagements and Business Process Engineer

Review/Process Foreign Visit Request in Foreign Visitors System (FVS); (3) Attend Secret level meetings for International engagements held at DISA HQ.

11.3 Investigation Requirements

11.3.1 All personnel requiring Secret access under this contract/order shall undergo a favorably adjudicated Tier 3 (T3) Investigation formerly known as a National Agency Check, Local Agency Check and Credit Check or Access National Agency Check and Inquiries as a minimum investigation. Enrollment into Continuous Evaluation current within 5 years and, reflected in DISS, would meet the requirement for current PR.

11.3.2 The contractor is required to have personnel cleared with a final Secret (as specified in the table located in section 11.2) at contract start date. If contractor personnel are replaced during performance of the contract, replacement personnel should also have interim or final Secret (as specified in the table located in section 11.2).

11.4 Visit Authorization Letters (VAL). Visit requests shall be processed and verified through the Defense Information System for Security (DISS) to Security Management Office (SMO) DKABAA10. DISS visits for contracts/orders are identified as “Other” or “TAD/TDY” and will include the Contract/Order Number of the contract/order in the Additional Information section. Contractors that do not have access to DISS may submit visit authorizations by e-mail in a password protected .pdf to the Contracting Officer Representative (COR) or Alternate COR specified in PWS Section 1.0.

*Prior coordination with the DISA COR should be made via email to ensure the Visit Authorization Letter (VAL)/ Visit Authorization Request (VAR)/ Visit Termination Notification (VTN) process is agreed upon and properly secure.

11.4.1 VAR Package. VARs must be received via email and require pre-approval from the assigned DISA COR five (5) business days in advance of the report date. The VAL/VAR/VTN should be sent via email to the appropriate COR.

The VAL/VAR/VTN should be sent using in a locked “Zip” file in one e-mail and then followed up by another email with the password to unlock the Zipped file, because it contains sensitive information covered by the Privacy Act.

Documents to include in the VAR Package:

1. Inter-office Memorandum (IOM)

2. DD Form 254 Prime and/or Sub (Good Standing approval emails for current option year)

3. DISS verification of Visit Authorization by Security Manager

4. (Optional: see NOTE below) Contractor VAL signed by the Contractor Facility Security Officer (FSO)

NOTE: If DISS is not available, the VAL must contain the following information on company letterhead

· Company name, address, telephone number, facility security clearance

· CAGE CODE

· Contract/Order Number

· Name, SSN, date and place of birth, and citizenship of the employee intending to visit

· Certification of personnel security clearance and any special access authorizations required for the visit (type of investigation & date, adjudication date & agency)

· Name of COR/Alt COR dates or period the VAL is to be valid

· Dates or period the VAL is to be valid (i.e., Start date / End date)

11.4.2 VTN Package. The Contractor FSO will forward a VTN letter to the DISA COR identified in the PWS/TO/Sub for all employees leaving the contract/task order/subcontract.

11.4.2.1 In addition, the DISA CORs and security managers shall inform the DISA Security Office when contractor personnel are removed for cause from a contract supporting DISA. This step is being added to prevent contractor personnel being removed for security related issues from returning to DISA without appropriate vetting. This step will also provide security with pertinent information to make an informed decision regarding potential contractor employees’ access to secure facilities and sensitive information. “For Cause” is information regarding an individual that falls into one or more of the actions or incidents that are within one of the 13 adjudicative guidelines as cited in the Security Executive Agent Directive (SEAD) 4:

a. Allegiance to the United States

b. Foreign Influence

c. Foreign Preference

d. Sexual Behavior

e. Personal Conduct

f. Financial Considerations

g. Alcohol Consumption

h. Drug Involvement and Substance Misuse

i. Psychological Conditions

j. Criminal Conduct

k. Handling Protected Information

l. Outside Activities

m. Use of Information Technology

Other actions:

· Incidents involving violence in the workplace or harassment.

· Misuse of time.

· Inspector General or General Counsel related inquiries.

· Failure to comply with security policies and procedures.

· Other reasons that prompted removal of a contractor.

The VTN must contain the following information on company letterhead

· Company name, address, telephone number, facility security clearance

· CAGE CODE

· Contract/Order Number

· Name, SSN, date and place of birth, and citizenship of the employee, email address, phone number

· Date contractor CAC was collected

· Name of COR/Alt COR

· Termination Date

· Reason for Termination: <insert reason from the 13 adjudicative guidelines, other actions, or type “No longer working on contract”>

*Any VAL/VAR submitted without the above information will be denied. *

11.5 Security Contacts. DISA Security Personnel can be contacted for Industrial or Personnel Security related issues at (301) 225-1235 or via mail at:

For Center or Directorate-specific security related matters, contact the Directorate or Center Security Manager at:

Name: Tammie B. Francis Phone Number: 301-225-8759 E-mail: disa.meade.bd.mbx.bd-security-managers@mail.mil

11.6 Information Security and other miscellaneous requirements.

11.6.1 Contractor personnel shall comply with all local security requirements including entry and exit control for personnel and property at the government facility.

11.6.2 Contractor employees shall be required to comply with all Government security regulations and requirements. Initial and periodic safety and security training and briefings will be provided by Government security personnel. Failure to comply with Government security regulations and requirements shall require the company to provide the Government with a written remediation/corrective action plan; furthermore, failure to comply with such requirements can be cause for removal and the contractor will not be able to provide service on this contract/order.

11.6.3 Contractor employees with an incident report in DISS who have had their access to classified suspended will not be permitted to fill positions requiring access to classified information on a DISA contract/order.

11.6.4 The Contractor shall not divulge any information, classified or unclassified, about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the DoD facility. Identification shall be worn and displayed as required.

11.6.5 The authority for the contractor personnel to regain access must be granted by DISA Chief of Security.

11.6.5.1 DISA retains the right to revoke contractor personnel access to DISA facilities who violates one or more of Security Personnel Adjudicative guidelines, harassment or violence in the workplace while assigned to a contract clearly conflict with the interest of the Government.

11.6.5.2 DISA retains the right to revoke contractor personnel access to DISA facilities and networks, who violates one or more Security Personnel Adjudicative guidelines, harassment or violence in the workplace while assigned to a contract clearly conflict with the interest of the Government.

11.6.5.3 If contractor employee is accused of violating state or federal laws and/or Government professional conduct policies or regulations, then the Government may require that such contractor employee be removed from Government premises and/or that such contractor employee be removed from supporting this contract, pending the duration and outcome of a Government investigation if the Contracting Officer finds that the conduct or violation alleged has the potential to negatively interfere with contract performance or operations at a Government facility. Only the Contracting Officer can make such a request on behalf of the Government. Removal of contractor employee shall not negatively impact contract performance.

11.6.6 Contractor personnel will generate or handle documents that contain For Official Use Only information and/or Controlled Unclassified Information (CUI) at the [Contractor and Government] facility. Contractor personnel will have access to, generate, and handle classified material up to SECRET level only at the contractor location(s) listed in the place of performance section of this document. All contractor deliverables shall be marked in accordance with DoDM 5200.01, Vol. 1, DoD Information Security Program: Overview, Classification, and Declassification; DoDM 5200.01, Vol. 2, DoD Information Security Program: Marking of Information; DoDM 5200.01, Vol. 3, DoD Information Security Program: Protection of Classified Information; DoDI 5200.48, Controlled Unclassified Information (CUI); and DoDM 5400.07, Freedom of Information Act Program, unless otherwise directed by the Government. The contractor shall comply with the provisions of the DoD Industrial Security Manual for handling classified material and producing deliverables. The contractor shall comply with DISA Instruction 630-230-19, Cybersecurity.

11.6.7 The Contractor shall afford the Government access to the contractor’s facilities, installations, operations, documentation, databases, and personnel used in performance of the contract/order. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability, and confidentiality of data or to the function of information technology systems operated on behalf of DISA or DoD, and to preserve evidence of computer crime.

12. Government Furnished Property (GFP)/Government-Furnished Equipment (GFE)/ Government-Furnished Information (GFI).

A. GFP will be provided for this contract as indicated in the GFP attachment included at solicitation, distributed at award, and incorporated via the GFP Module in PIEE. GFP shall be managed IAW the terms of FAR 52.245-1, corresponding GFP DFARS clauses and additional DITCO Instructions incorporated in award.

B. Contractors shall accept and/or report provided GFP via the Shipping and Receiving document in the GFP module upon acceptance and/or IAW Additional DITCO Instruction H9. Serially managed items are provided to the contractor by DoD and require all events identified in DFARS 252.211-7007 (and/or any subsequent DFARS or Agency GFP reporting requirements) to be reported by the contractor.

C. Contractors in possession of GFP shall provide the COR or PA an annual report of all GFP in its possession to include the item description, make, model, serial number, IUID, and last inventory date; the report should be minimally provided on an annual basis and 30 days prior to the expiration of any performance period (base and options) IAW with Additional DITCO Instruction H9.

Deliverable:

*Standard Distribution: 1 copy of the transmittal letter with the deliverable to the Primary COR.

B. IP will be made available, and hand receipted to the contractor for use during the performance of the contract. Below is an estimated list of IP, this estimate is not considered an comprehensive list and more or less IP maybe provided in performance of the contract. IP shall be managed IAW the terms of H8, Defense Information System Agency Incidental Property Management (Apr 2021) or subsequent updates.

13. Other Pertinent Information or Special Considerations.

a. Identification of Possible Follow-on Work. N/A

b. Identification of Potential Conflicts of Interest (COI). N/A

c. Identification of Non-Disclosure Requirements. The contractor shall obtain and maintain Non-Disclosure Agreements (NDA) for each employee assigned to the contract/TO. Initial NDAs shall be signed within one week of contract/TO award, and NDAs shall be kept current through the entirety of the period of performance as employee turnover occurs. The contractor shall ensure that all employees assigned to the contract have executed NDAs on file as of the date of the Monthly NDA Status Report, which shall include names and NDA status of all current employees assigned to the contract.

Status Report Contractor determined format

status as of the end of the previous month)

d. Packaging, Packing and Shipping Instructions. N/A

e. Inspection and Acceptance Criteria. N/A

f. Property Accountability. Property Accountability. The contractor shall submit the Consolidated Product Listing for IGCE/RFQ/EPL/MI&RRl (below) in addition to complying with all requirements of DFARS 252.211-7003. See DITCO Additional Text H2, Requirement to Submit an Electronic Product List for additional information.

g. Transitioning.

1. Transition-In (Phase In). All key personnel/key positions must be onboard at start of the period of performance. 50 percent total staffing must be completed within two weeks of the start of the PoP and 100 percent within 30 days.

2. Transition-Out (Phase Out). You will need to collaborate with the MP at least 120 days or sooner, prior to the end of the contract, to develop a transition-out plan IAW FAR 52.237-3.

a. Training. Contractor employees may be required to take periodic mandatory training courses provided through the agency, such as records management training and other training required by statute, regulation, DoD, or DISA policy. No other training of contractor personnel shall be provided by the Government unless authorized by the Contracting Officer.

b. Key Personnel. This requirement will include key FTE personnel in accordance with DISA Instructional Text H3, which governs key personnel. For the purposes of this effort, the following labor categories are considered key personnel. The Contractor shall provide key personnel with the minimum qualifications shown in Figure I.

Figure I: Key Personnel Summary Key Key Personnel Position

Area Office/Portfolio Support

Certifications:

a. Project Management Professional (PMP) or

b. Program Management Professional (PMP) or

c. Program Management

d. Security Cooperation Workforce Level II

(1) At least three (3) years in Program & Financial Management with cost, schedule, and performance responsibilities.

(2) Familiarity with International Acquisition, Security Assistance/ Security Cooperation.

(3) Proficient in MS Office Suite or equivalent

Key Position for International Acquisitions & Engagements Branch

Financial Analyst (KEY) Education: A bachelor's degree in a business-related field such as Finance, Accounting, Business Analytics, or Economics is typically required

(1) At least three (3) years of financial management experience.

(2) Familiarity with Security Assistance/ Security Cooperation.

knowledge and experience with specific FMS-related financial systems like DSAMS (Defense Security Assistance Management System), CISIL (Centralized Integrated System for International Logistics), and SCIP (Security Cooperation Information Portal) understanding of DoD financial policies, including the Security Assistance Management Manual (SAMM) and Federal Acquisition Regulation (FAR) 6.1.3 6.1.4 6.1.5 Intermediate Financial Analyst- key personnel position for International Acquisitions Branch/ Foreign Military Sales (FMS)

Certifications:

A) Lean Six Sigma (Green or Black Belt) or B) Certified Business Analysis Professional (CBAP) or C) Project Management Professional (PMP).

(1) at least three (3) years of experience in business process analysis, process improvement, or a related role.

(2) Familiarity with International Acquisition, Security Assistance/Security Cooperation.

(3) Proficiency in process modeling and analysis tools (e.g., Visio, Lucidchart, BPMN).

(4) Experience with project management methodologies (e.g., Agile, Waterfall)

(5) Experience with data analysis and visualization tools (e.g., Tableau, Power BI)

Key Position for International Acquisitions & Engagements Branch.

h. Supply Chain Risk Management (SCRM). – N/A

i. Requirement to Inform Employees of Whistleblower Rights. N/A

14. Section 508 Accessibility Standards. N/A

Page 21 of 18 Pages