Draft PWS SS.pdf

PERFORMANCE WORK STATEMENT (PWS)

Commander, U.S. Pacific Fleet

Special Security Support Oahu, Hawaii

1. BACKGROUND

1.1. The Commander, U.S. Pacific Fleet (COMPACFLT), is responsible for maintaining the security and integrity of its Sensitive Compartmented Information (SCI) programs and facilities to protect highly sensitive National Defense Information. A recent surge in the number of Sensitive Compartmented Information Facilities (SCIFs), coupled with increasingly complex SCI security regulations, has strained COMPACFLT's Special Security Office, hindering its ability to provide comprehensive and timely SCI program management and security support.

2. OBJECTIVE

2.1. The primary objective is to address this critical shortfall and ensure the continued safeguarding of SCI. COMPACFLT requires qualified contractor personnel to provide non-personal security administration support services to COMPACFLT Special Security Program, providing comprehensive SCI program management and security support. These non-personal security administration support services addresses the increasing complexity of SCI security requirements and the growth of SCIFs. These support services are essential to ensuring all SCI activities adhere strictly to Department of Defense (DoD), Intelligence Community (IC), and COMPACFLT security policies and directives, mitigating associated risks.

Specifically, these support services will safeguard Top Secret // Sensitive Compartmented Information (TS//SCI) by preventing unauthorized access; efficiently manage personnel security processes; maintain the physical security of SCI facilities; provide timely operational support to COMPACFLT personnel; ensure proper dissemination and reporting of security incidents; manage the secure transmission of materials; and maintain up-to-date SCI data records, SOPs, and policies.

3. NON-PERSONAL SERVICES AND INHERENTLY GOVERNMENTAL SERVICES

3.1. Services rendered under this contract shall be non-personal in accordance with Federal Acquisition Regulation (FAR)

37.104. Contractor personnel rendering services are not subject, either by the contract’s terms or by the manner of its administration, to the supervision and control usually prevailing in relationships between the Government and its employees. Contractor personnel rendering services under this contract shall be under the direct supervision and control of the Contractor.

3.2. The Contractor shall not perform inherently Governmental functions as prescribed under FAR Subpart 7.5. Any performance objectives or other terms and conditions under this contract shall not be interpreted or implemented in any manner that may result in contractor personnel creating or modifying Federal policies, obligating funds of the Government, or overseeing the work of Government employees or other contractor personnel.

4. SCOPE

4.1. The scope of this Performance Work Statement (PWS) encompasses a comprehensive range of tasks to be performed by Contractor Personnel who are proficient in their respective areas of expertise. The Contractor shall provide special security-related customer service and assistance, assist with full spectrum access control for COMPACFLT managed SCIFs, mass ingress/egress, and conduct special security walk-throughs and inspections. They should be able to support a multi-faceted Security, Education, Awareness and Training (SETA) program. They should aid with drafting, maintaining, and updating security policies, and maintain COMPACFLT Special Security files. These personnel are responsible for performing duties based on the following categories:

4.1.1. Special Security. The Contractor shall provide non-personal support services to COMPACFLT's SCI Special Security Program. This includes administrative support, management of SCI and General Service (GENSER) classified material, facility and container inspections, and customer service. Specific tasks are detailed in Section 5.1, Performance Requirements for the Program Manager and SCI INFOSEC/PHYSEC/PERSEC Staff Support roles.

DRAFT

4.1.2. Physical Security. The Contractor shall provide non-personal support services to COMPACFLT’s SCI Physical Security Program, primarily working within COMPACFLT-managed SCIFs. Duties include maintaining a comprehensive, searchable database for all SCIFs, locks, SF-700s, alarm tests, physical security assessments, and SCI facilities. The Contractor shall conduct physical security assessments (PSAs) of buildings and workspaces to verify compliance with DoD, IC, and command physical security policy. PSAs shall include mitigation recommendations and be documented referencing applicable regulations.

4.1.3. Personnel Security. The Contractor shall provide non-personal support services to COMPACFLT’s SCI Personnel Security Program. Duties include the in-out processing of assigned and attached personnel, execution of non-disclosure agreements, delivery of indoctrinations and initial/debrief security briefings, and maintenance of all local personnel security records. Contract personnel shall create, update, establish, or disestablish security relationships in the authorized personnel security systems of record and ensure timely updates. The Contractor shall process clearance certifications and visit access requests (VARs). Upon receiving any derogatory, conflicting, or questionable information, the Contractor shall immediately notify the Government Special Security Officer (SSO) and Special Security Representative (SSR) Lead.

4.1.4. Logistics/Supply. The Contractor will provide non-personal support services to COMPACFLT’s supply/logistics department. The primary focus of this contract service will be property inventory, accountability, and assisting with receiving and issuance of supplies and materials. This support will ensure timely procurement and distribution of security-related supplies, maintain operational readiness and minimize disruptions to security protocols.

4.1.5. Policy management. The Contractor will provide non-personal support services to the policy management of TS/SCI and collateral information and materials safeguarding policies. The Contractor will provide non-personal support services by researching and preparing classified material-related policy, management, and report recommendations.

4.1.6. The Contractor shall comply with all applicable laws and regulations, including but not limited to Federal Law, Hawaii State Law(s), Occupational Safety and Health Administration (OSHA) regulations, and Navy and Army installation regulations.

5. PERFORMANCE REQUIREMENTS

5.1. Program Manager for SCI INFOSEC/PHYSEC/PERSEC Operations Support – Government Estimates One (1) Full Time Employee (FTE) Program Manager

5.1.1. SCI INFOSEC/PHYSEC/PERSEC Operations is responsible for overseeing and coordinating all aspects of information, physical, and personnel security within COMPACFLT's SCI environment. This includes, but is not limited to, the following:

5.1.1.1. The Contractor shall:

5.1.1.1.1. Serve as the primary point of contact for COMPACFLT personnel, visitors, and liaisons, providing expert guidance, assistance, and customer service regarding all aspects of SCI security policies, procedures, access requirements, and regulatory compliance to ensure a secure operational environment.

Serve as a primary point of contact for SCI INFOSEC, PHYSEC, and PERSEC related matters within COMPACFLT managed SCIFs.

5.1.1.1.2. Provide exceptional security-related customer service and assistance to employees, visitors, and liaisons, including navigating clearance processes, delivering tailored training, interpreting security policies, managing visit requests, facilitating inter-agency coordination, and responding effectively and professionally to security incidents, all while maintaining strict adherence to security regulations and prioritizing the protection of classified information.

5.1.1.1.3. Conduct full spectrum access control for COMPACFLT managed SCIFs, responsible for planning, implementing, and executing comprehensive access control procedures that address routine ingress/egress, emergency evacuations, drills, and other events, including but not limited to: clearance verification, physical security measures, personnel accountability, emergency response coordination, and post-event security assessments.

5.1.1.1.4. Draft, review, and update security policies, procedures, plans, SOPs, memos, and other guidance documents based on Commander’s and DoD directives to ensure relevancy, accuracy, thoroughness, and effective alignment with evolving security mission requirements.

5.1.1.1.5. Draft and establish security SOPs and training to integrate foreign partners after COMPACFLT XXX review and approval. Customize procedures and training to adhere to physical security standards, access controls, and storage requirements to prevent unauthorized disclosure of classified and controlled unclassified information.

5.1.1.1.6. Manage and maintain the COMPACFLT SCI special security files, encompassing both electronic and hard copy formats, ensuring accurate filing, proper classification, marking, handling, secure storage, and timely destruction of all SCI-related documentation in accordance with DoD, IC, and COMPACFLT regulations, policies, and procedures, while also overseeing file inventories, audits, and records, and implementing necessary corrective actions.

5.1.1.1.7. Conduct internal assessments using established checklists to evaluate the overall health of the SCI security program. Continuously ensure proper marking of classified information, identify vulnerabilities, recommend corrective actions, prevent security incidents, and report any incidents in accordance with local policy.

5.1.1.1.8. Manage Defense Courier Service (DCS) operations, including processing courier requests, preparing documentation and materials, administering pickup/drop-off of materials, creating courier cards and travel authorization letters, and maintaining a database for accountability and reporting of issued/destroyed cards.

5.1.1.1.9. Report any derogatory, conflicting, or questionable data from security entities, counterintelligence, criminal investigations or other source, to the government SSO and SSR within xx minutes of observation/notice and track reports of incidents. The Contractor's role ends there. All adjudication, investigation, and final determination regarding personnel security issues are inherently governmental and will be handled exclusively by Government personnel. The Contractor's responsibility is limited to reporting the information.

5.1.1.1.10. Execute a multi-faceted Security, Education, Awareness and Training (SETA) program, including initial newcomer orientation briefs, mandated annual security training, refresher training, awareness, and reference materials, etc. using various means and delivery methods.

5.1.1.1.11. Coordinate with physical, information, personnel, and cybersecurity (N6) staff to identify requirements for integration while preventing unauthorized disclosure when integrating foreign partners into the COMPACFLT staff.

5.1.1.1.12. Conduct regular physical security assessments (PSAs) of facility and workspaces to ensure compliance with DoD/IC and command policies, assisting with semi-annual alarm testing, and providing witness capabilities for the secure destruction of Top Secret, SCI, and other sensitive materials.

5.1.1.1.13. Maintain a sustainable and searchable database encompassing COMPACFLT SCIF information, including combination locks, Standard Forms 700, alarm testing, physical security assessments, co-utilization agreements, and accreditation reports, while executing essential SCIF management functions such as maintaining SCIF files and updating relevant security information as required.

5.1.1.1.14. Research, advise, and assist with the drafting of Physical Security enhancement procurements and recommendations for Government review and approval, including all Electronic Security Systems (ESS) components, X-Ray machines, metal detectors, and PED storage, while adhering to all federal, local, and USINDOPACOM Physical Security policies regarding procurements. The final decision to issue or modify any policy must remain with the government.

5.1.1.1.15. Maintain, repair, remove, and replace locks within COMPACFLT-managed SCIFs, including during duty and non-duty hours, recording the name of technician, and the date the action was requested or initiated and retaining active records.

5.1.1.1.16. Manage DISS accounts for Special Security Representatives (SSRs), while ensuring comprehensive SCI personnel security by verifying eligibility, need-to-know, and access requirements prior to entry or sponsorship; and maintaining SCI personnel security files and a searchable PERSEC repository/tracker.

5.1.1.1.17. Conduct in-briefings and out-briefings for personnel entering and exiting the SCI program, ensuring strict adherence to all applicable security regulations, procedures, and reporting requirements, including proper documentation and record-keeping.

5.1.1.1.18. Uphold a professional image through a clean and professional appearance and contribute to a secure and productive work environment by maintaining a consistently clean and organized workspace.

5.1.2. Performance Requirements

Performance Standard Frequency Acceptable Quality Level Surveillance Method

The Contractor shall provide expert guidance, assistance, and customer service regarding SCI security.

Daily during business hours

95% of daily inquiries are addressed accurately, professionally, and within 2 hours of initial contact.

Direct Observation, Customer Feedback, Review of Communication Records

The Contractor shall conduct full spectrum access control for COMPACFLT-managed SCIFs, addressing routine/emergency situations.

Daily during operational hours

100% compliance with access control procedures; zero unauthorized access incidents.

Direct Observation, Audit Logs, Physical Security Inspections

The Contractor shall assist with drafting, reviewing, and updating security policies, procedures, plans, SOPs, memos, and other guidance documents in accordance with Government direction.

As Required, At least Annually

Documents are accurate, thorough, relevant, and approved by the Government.

Document Review by Government Security Personnel

The Contractor shall assist COMPACFLT directorates with drafting and establishing security SOPs and training to integrate foreign partners.

As Required SOPs/Training are effective in preventing unauthorized disclosure and approved by the Government.

Review of SOPs/Training Materials, Feedback from Training Participants, Observation of Training Delivery

The Contractor shall manage and maintain the COMPACFLT SCI special security files (electronic and hard copy).

Daily during operational hours

100% accountability of SCI documentation;

zero instances of misfiling, unauthorized access, or improper destruction.

File Audits, Review of Inventory Logs, Direct Observation

The Contractor shall conduct internal assessments to evaluate the SCI security program, identifying vulnerabilities and recommending corrective actions.

Quarterly 90% of identified vulnerabilities have documented corrective actions initiated within 30 days of assessment report submission. Assessment reports are submitted to Government SSO/SSR within 5 business days following the end of each quarter.

Review of Assessment Reports, Tracking of Corrective Actions, Follow-up Inspections

The Contractor shall manage Defense Courier Service (DCS) operations. As Required 100% accuracy in processing courier requests and maintaining accountability of materials.

Audit of DCS Records, Review of Courier Request Forms

The Contractor shall report any derogatory, conflicting, or questionable data immediately to the government SSO and SSR.

Immediately Upon Discovery

100% of reportable information reported immediately upon discovery and not later than 1 hour.

Review of Incident Reports, Communication Logs

The Contractor shall execute a multi-faceted Security, Education, Awareness, and Training (SETA) program.

As Scheduled 100% of mandated personnel receive required training; Training materials are up-to-date and effective.

Review of Training Schedules, Training Materials, Attendance Records, Post-Training Surveys, and Observations.

The Contractor shall provide security assistance with integrating foreign partners into the COMPACFLT staff.

As Required Successful integration without any security breaches or incidents.

Review of Integration Plans, Observation of Processes, Feedback from Involved Parties

The Contractor shall support all compliance requirements of COMPACFLT’s SCI physical security program.

As Required, Continuously

Compliance with all physical security standards and regulations.

Physical Security Inspections, Review of Alarm Testing Records, Observation of Secure Destruction Procedures

The Contractor shall maintain a sustainable and searchable database encompassing COMPACFLT SCIF information.

Daily during operational hours

Database is accurate, up-to-date, searchable, and securely maintained.

Database Audits, User Feedback, Review of Data Integrity

The Contractor shall research and assist in the drafting of Physical Security enhancement procurements and recommendations.

As Required Accurate assessments and recommendations that align with security policies and standards.

Review of Procurement Recommendations, Assessments of Justifications

Maintain, repair, remove, and replace locks within COMPACFLT-managed SCIFs, including during duty and non-duty hours.

Daily during operational hours

Lock maintenance is performed promptly and effectively, ensuring the security of facilities and assets.

Review of Maintenance Logs, Physical Inspections of Locks

The Contractor shall manage DISS accounts for Special Security Representatives (SSRs) and ensure comprehensive SCI personnel security.

Daily during operational hours

Accurate and up-to-date personnel security records, 100% compliance with eligibility verification requirements.

DISS Account Audits, Personnel Security File Reviews

The Contractor shall administer and process SCI Visit Access Requests, including foreign visits.

As Required Processed correctly 99% of the time with zero unauthorized access incidents.

Observation, File Review, Government Audit

The Contractor shall conduct in-briefings and out-briefings for personnel entering and exiting the SCI program.

As Required Briefings are thorough and compliant with all applicable regulations and procedures.

Review of Briefing Materials, Attendance Records, Feedback from Personnel

The Contractor shall uphold a professional image through a clean and professional appearance and contribute to a secure and productive work environment by maintaining a consistently clean and organized workspace.

Daily during operational hours

Demonstrates professionalism. Workspace is clean and organized.

Direct Observation, Customer Feedback

The Contractor shall be available to work a Mon-Fri 8-hour shift during operational hours, and during LSEs (Large Scale Exercises), Crises, and Conflicts as required.

Daily during operational hours and as required

Arrives on time for shift and stays until end of shift. Will report to LSEs (Large Scale Exercises), Crises, and Conflicts as required by the Government.

Direct Observation, Reporting and attendance sheets

5.1.3. Deliverables

Deliverable Description/Content Format Recipient

Weekly Activity Report Summary of tasks performed, accomplishments, challenges, and planned activities for the upcoming week related to SCI security support.

Electronic Document (e.g., MS Word, PDF)

Government SSO/SSR

Updated Security Policies/SOPs Aid in drafting revised security policies, procedures, plans, SOPs, memos, and guidance documents incorporating changes to reflect evolving requirements or address identified vulnerabilities.

Electronic Document (e.g., MS Word)

Government Security Personnel

Internal Assessment Reports Results of internal assessments, including findings, identified vulnerabilities, and recommendations for corrective actions.

Electronic Document (e.g., MS Word, PDF)

Government SSO/SSR

Training Materials Presentation slides, handouts, exercises, and other materials used in the Security Education, Awareness, and Training (SETA) program.

Electronic Document (e.g., MS PowerPoint)

Government Security Personnel

Procurement Recommendations Justification for security procurements and recommendations for Government review and approval.

Electronic Document (e.g., MS Word)

Government Security Personnel

5.1.4. Qualifications

5.1.4.1. In-depth knowledge of applicable national, DoD, and COMPACFLT regulations governing SCI security (e.g., ICDs 704, 705, DoD Manual 5200.01), with demonstrated experience managing comprehensive SCI security programs.

5.1.4.2. In-depth knowledge of Intelligence Community Directives (ICDs) and National Industrial Security Program Operating Manual (NISPOM).

5.1.4.3. Knowledge of the Federal Enterprise Architecture (FEA) and Department of Defense (DoD) Enterprise Architecture framework (e.g., SIPR, NIPR and Joint Worldwide Intelligence Communications Systems (JWICS) networks}, and the Information Technology (IT)/Cybersecurity rules and regulatory authorities to develop and implement policies and planning concepts, and project management methods.

5.1.4.4. General knowledge and perspective of the operational, procedural, and technical standards that achieve interoperability with other non-DoD Federal Government agencies.

5.1.4.5. Proficient using basic Microsoft Office software applications (e.g., Word, PowerPoint, Excel, and Access).

5.1.4.6. Expertise in the full lifecycle of security policy management, encompassing development, drafting, review, implementation, and ongoing maintenance of comprehensive security policies, procedures, and guidance.

5.1.4.7. Comprehensive experience supporting SCIF accreditations and inspections, along with demonstrated ability to lead and execute security training and awareness programs to enhance personnel security knowledge and compliance.

5.1.4.8. Possess strong communication, interpersonal, analytical, and problem-solving skills necessary to effectively interact with various audiences, analyze complex situations, and develop effective solutions.

5.1.4.9. Must be eligible for Sensitive Compartmented Information (SCI) access.

5.1.4.10. Proactive and results-oriented, with proven ability to manage and prioritize multiple facilities-related tasks, anticipating potential issues and implementing preventative measures to ensure smooth and efficient building operations.

5.1.4.11. Must possess a valid U.S. driver’s license.

5.2. SCI INFOSEC/PHYSEC/PERSEC Staff Support – Estimated Two (2) Full Time Employees (FTE)

5.2.1. The SST SCI PERSEC/PHYSEC Support technician is responsible for assisting in the execution of SCI Personnel and Physical security programs within the COMPACFLT's SCI environment. This includes, but is not limited to, the following:

5.2.1.1. The Contractor shall:

5.2.1.1.1. Provide guidance, assistance, and customer service for COMPACFLT personnel, visitors, and liaisons, regarding all aspects of SCI security policies, procedures, access requirements, and regulatory compliance to ensure a secure operational environment. Serve as a point of contact for SCI INFOSEC, PHYSEC, and PERSEC related matters within COMPACFLT managed SCIFs.

5.2.1.1.2. Provide exceptional security-related customer service and assistance to employees, visitors, and liaisons, including navigating clearance processes, delivering tailored training, interpreting security policies, managing visit requests, facilitating inter-agency coordination, and responding effectively to security incidents, all while maintaining strict adherence to security regulations and prioritizing the protection of classified information.

5.2.1.1.3. Conduct full spectrum access control for COMPACFLT managed SCIFs, responsible for planning, implementing, and executing comprehensive access control procedures that address routine ingress/egress, emergency evacuations, drills, and other events, including but not limited to: clearance verification, physical security measures, personnel accountability, emergency response coordination, and post-event security assessments.

5.2.1.1.4. Manage and maintain personnel security records (electronic and hardcopy); process security paperwork including SCI nominations, systems access requests, polygraph requests, clearance verifications, and foreign travel forms.

5.2.1.1.5. Manage and maintain the COMPACFLT SCI special security files, encompassing both electronic and hard copy formats, ensuring accurate filing, proper classification, marking, handling, secure storage, and timely destruction of all SCI-related documentation in accordance with DoD, IC, and COMPACFLT regulations, policies, and procedures, while also overseeing file inventories, audits, and records, and implementing necessary corrective actions.

5.2.1.1.6. Assist in execution of a multi-faceted Security, Education, Awareness and Training (SETA) program, including initial newcomer orientation briefs, mandated annual security training, refresher training, awareness, and reference materials, etc. using various means and delivery methods.

5.2.1.1.7. Conduct in-person security briefings for personnel and visitors on COMPACFLT security procedures, including escort requirements, protection of SCI classified information, use of media and electronic devices, and prohibited items, and provide specialized briefings to COMPACFLT escorts on their specific responsibilities. DRAFT

5.2.1.1.8. Conduct in-briefings and out-briefings for personnel entering and exiting the SCI program, ensuring strict adherence to all applicable security regulations, procedures, and reporting requirements, including proper documentation and record-keeping.

5.2.1.1.9. Aid in drafting, reviewing, and updating security policies, procedures, and other guidance based on Commander's and DoD directives to ensure relevancy, accuracy, and thoroughness in meeting existing or evolving security mission requirements.

5.2.1.1.10. Assist COMPACFLT directorates with drafting and establishing security SOPs and training to integrate foreign partners. Customize procedures and training to adhere to physical security standards, access controls, and storage requirements to prevent unauthorized disclosure of classified and controlled unclassified information.

5.2.1.1.11. Provide security assistance with integrating foreign partners into the COMPACFLT staff by coordinating with physical, information, personnel, and cybersecurity (N6) staff to identify requirements for integration while preventing unauthorized disclosure.

5.2.1.1.12. Conduct internal assessments using established checklists to evaluate the overall health of the SCI security program. Continuously ensure proper marking of classified information, identify vulnerabilities, recommend corrective actions, prevent security incidents, and report any incidents in accordance with local policy.

5.2.1.1.13. Assist with Defense Courier Service (DCS) operations, including processing courier requests, preparing documentation and materials, administering pickup/drop-off of materials, creating courier cards and travel authorization letters, and maintaining a database for accountability and reporting of issued/destroyed cards.

5.2.1.1.14. Upon receipt of any derogatory, conflicting, or questionable data from security entities, counterintelligence, criminal investigations or other source, immediately notify the government SSO and SSR and track reports of incidents. The Contractor's role ends there. All adjudication, investigation, and final determination regarding personnel security issues are inherently governmental and will be handled exclusively by Government personnel. The Contractor's responsibility is limited to reporting the information.

5.2.1.1.15. Support COMPACFLT’s SCI physical security program by performing regular physical security assessments (PSAs) of facility and workspaces to ensure compliance with DoD/IC and command policies, assisting with semi-annual alarm testing, and providing witness capabilities for the secure destruction of Top Secret, SCI, and other sensitive materials.

5.2.1.1.16. Maintain a sustainable and searchable database encompassing COMPACFLT SCIF information, including combination locks, Standard Forms 700, alarm testing, physical security assessments, co-utilization agreements, and accreditation reports, and updating relevant security information as required.

5.2.1.1.17. Research and provide draft Physical Security enhancement procurements and recommendations for Government review and decision, including all Electronic Security Systems (ESS) components, X-Ray machines, metal detectors, and PED storage, while adhering to all federal, local, and USINDOPACOM Physical Security policies regarding procurements. The final decision to issue or modify any policy must remain with the government.

5.2.1.1.18. Maintain, repair, remove, and replace locks within COMPACFLT-managed SCIFs, including during duty and non-duty hours, recording the name of technician, and the date the action was requested or initiated and retaining active records until no longer needed and inactive records indefinitely or unless otherwise directed by the CPF SSO and other personnel as required.

5.2.1.1.19. Administer and process SCI Visit Access Requests, including foreign visits in accordance with the Defense Foreign Visitor Program, and maintain an accurate local electronic database for tracking and reporting.

5.2.1.1.20. Control SCI facility access by managing DISS accounts for SSRs, verifying personnel eligibility and need-to-know, administering access requirements, maintaining security files and a searchable PERSEC repository, ensuring the protection of sensitive information.

5.2.1.1.21. Maintain and update security clearance investigation and access badge rosters; conduct clearance verification; and manage personnel access to COMPACFLT facilities by creating, issuing, and tracking Security Access badges.

5.2.1.1.22. Uphold a professional image through a clean and professional appearance and contribute to a secure and productive work environment by maintaining a consistently clean and organized workspace.

5.2.2. Performance Requirements

Performance Standard Frequency Acceptable Quality Level Surveillance Method

The Contractor shall provide guidance, assistance, and customer service for COMPACFLT personnel, visitors, and liaisons regarding SCI security, and serve as a point of contact for SCI INFOSEC, PHYSEC, and PERSEC related matters.

Daily during operational hours

100% of inquiries addressed accurately and professionally.

Direct Observation, Customer Feedback Surveys, Review of Communication Logs

The Contractor shall provide expert guidance, assistance, and customer service regarding SCI security.

Daily during operational hours

95% of daily inquiries are addressed accurately, professionally, and within 2 hours of initial contact.

Direct Observation, Customer Feedback Surveys, Record of Complaints

The Contractor shall conduct full spectrum access control for COMPACFLT-managed SCIFs.

Daily during operational hours

100% compliance with access control procedures;

zero unauthorized access incidents; all emergency procedures are executed within specified timelines.

Direct Observation, Audit Logs, Physical Security Inspections, Emergency Drill Reports

The Contractor shall manage and maintain personnel security records and process security paperwork.

Daily during operational hours

Daily, 99% of all new security paperwork is entered into the system within 1 business day of receipt. 95% of records are audit-ready upon request.

Personnel Security File Audits (Random Sampling), Record Reviews (Accessibility Tests), Tracking of Processing Timelines

The Contractor shall manage and maintain the COMPACFLT SCI special security files.

Daily during business hours

100% accountability of SCI documentation; zero instances of misfiling, unauthorized access, or improper destruction.

File Audits, Review of Inventory Logs, Direct Observation, Annual inventory of files and records.

The Contractor shall conduct internal assessments to evaluate the SCI security program, identifying vulnerabilities and recommending corrective actions.

Quarterly 90% of identified vulnerabilities have documented corrective actions initiated within 30 days of assessment report submission. Assessment reports are submitted to Government SSO/SSR within 5 business days following the end of each quarter.

Review of Assessment Reports, Tracking of Corrective Actions, Follow-up Inspections

The Contractor shall assist in the execution of a multi-faceted Security, Education, Awareness and Training (SETA) program.

As Scheduled 100% of mandated personnel receive required training; training materials are up-to-date and effective

Review of Training Schedules, Training Materials, Attendance Records, Observation of Training

The Contractor shall conduct in-person security briefings for personnel and visitors on COMPACFLT security procedures.

As Required 100% of personnel and visitors receive required briefings; briefings are comprehensive and tailored to the audience

Review of Briefing Materials, Attendance Records, Direct observation of briefings

The Contractor shall conduct in-briefings and out-briefings for personnel entering and exiting the SCI program.

As Required Briefings are thorough and compliant with all applicable regulations and procedures.

Review of Briefing Materials, Attendance Records, Feedback from Personnel

The Contractor shall assist in drafting, reviewing, and updating security policies, procedures, and other guidance as directed by the Government

As Required, At least Annually

Documents are accurate, thorough, relevant, and approved by the Government.

Document Review by Government Security Personnel

The Contractor shall assist COMPACFLT directorates with drafting and establishing security SOPs and training to integrate foreign partners.

As Required SOPs/Training are effective in preventing unauthorized disclosure and approved by the Government.

Review of SOPs/Training Materials, Feedback from Training Participants, Observation of Training Delivery

The Contractor shall provide security assistance with integrating foreign partners into the COMPACFLT staff.

As Required Successful integration without any security breaches or incidents.

Review of Integration Plans, Observation of Processes, Feedback from Involved Parties

The Contractor shall assist with Defense Courier Service (DCS) operations.

As Required 100% accuracy in processing courier requests and maintaining accountability of materials.

Audit of DCS Records, Review of Courier Request Forms, random check on materials being transferred.

The Contractor shall immediately notify the government SSO and SSR upon receipt of any derogatory, conflicting, or questionable data.

Immediately Upon Discovery

100% of reportable information reported immediately upon discovery and not later than 1 hour.

Review of Incident Reports, Communication Logs, random sampling of paperwork.

The Contractor shall support all compliance requirements of COMPACFLT’s SCI physical security program.

As Required, Continuously

100% Compliance with all physical security standards and regulations.

Physical Security Inspections, Review of Alarm Testing Records, Observation of Secure Destruction Procedures, assessment of the overall effectiveness of the program.

The Contractor shall maintain a sustainable and searchable database Daily during Database is accurate, up-to-date, searchable, and Database Audits, User Feedback, Review of encompassing COMPACFLT SCIF information. operational hours securely maintained. Data Integrity, ensure records are maintained in accordance with requirements.

The Contractor shall research and provide draft Physical Security enhancement procurements and recommendations for Government review and decision.

As Required Accurate assessments and recommendations that align with security policies and standards.

Review of Procurement Recommendations, Assessment of Justification, inspection to ensure purchases meet requirements.

Maintain, repair, remove, and replace locks within COMPACFLT-managed SCIFs, including during duty and non-duty hours.

Daily during operational hours

Lock maintenance is performed promptly and effectively, ensuring the security of facilities and assets.

Review of Maintenance Logs, Physical Inspections of Locks

The Contractor shall administer and process SCI Visit Access Requests, including foreign visits.

As Required 100% of SCI Visit Access Requests (VARs), including foreign visits, are processed in accordance with applicable DoD, IC, and COMPACFLT regulations and guidance; Zero instances of unauthorized access or security breaches result from errors in VAR processing. VARS are submitted in DISS within 24 hours of receipt of all information.

Observation, File Review, Government Audit, DISS Audits and tracking

The Contractor shall control SCI facility access by managing DISS accounts for SSRs, verifying personnel eligibility and need-to-know, administering access requirements, maintaining security files and a searchable PERSEC repository, ensuring the protection of sensitive information.

Daily during operational hours

100% Accuracy of DISS management and eligibility verifications with no security lapses.

Audit of DISS accounts, File Review, Government Inspection

The Contractor shall maintain and update security clearance investigation and access badge rosters; conduct clearance verification;

and manage personnel access to COMPACFLT facilities by creating, issuing, and tracking Security Access badges.

Daily during operational hours

Maintain current roster, timely issuance/termination of badges, no unauthorized access.

Audit of DISS accounts, File Review, Government Inspection

The Contractor shall uphold a professional image through a clean and professional appearance and contribute to a secure and productive work environment by maintaining a consistently clean and organized workspace.

Daily during operational hours

Demonstrates professionalism. Workspace is clean and organized.

Direct Observation, Customer Feedback

The Contractor shall be available to work a Mon-Fri 8-hour shift during operational hours, and during LSEs (Large Scale Exercises), Crises, and Conflicts as required.

Daily during operational hours and as required

Arrives on time for shift and stays until end of shift.

Will report to LSEs (Large Scale Exercises), Crises, and Conflicts as required by the Government

Direct Observation, Reporting and attendance sheets

5.2.3. Deliverables

Deliverable Description/Content Format Recipient

Weekly Activity Report Summary of tasks performed, accomplishments, challenges, and planned activities for the upcoming week related to SCI security support.

Electronic Document (e.g., MS Word, PDF)

Government SSO/SSR

Updated Security Policies/SOPs Aid in drafting revised security policies, procedures, plans, SOPs, memos, and guidance documents incorporating changes to reflect evolving requirements or address identified vulnerabilities.

Electronic Document (e.g., MS Word) Government Security Personnel

Training Materials Presentation slides, handouts, exercises, and other materials used in the Security Education, Awareness, and Training (SETA) program.

Electronic Document (e.g., MS PowerPoint)

Government Security Personnel

Procurement Recommendations Justification for security procurements and recommendations for Government review and approval.

Electronic Document (e.g., MS Word) Government Security Personnel

SCI Nomination Packages Completed and accurate nomination packages for personnel requiring SCI access, submitted in accordance with DoD, IC, and COMPACFLT regulations.

Electronic and/or Hard Copy (as required)

Government Security Personnel

Foreign Travel Briefing Documentation

Documentation provided to personnel traveling to foreign countries, detailing security risks, reporting requirements, and other relevant information.

Electronic and/or Hard Copy (as required)

Government Security Personnel

Visit Access Request Log A log of all visit access requests processed, including visitor information, purpose of visit, dates, and security clearance verification details.

Electronic Database (e.g., MS Excel, Access)

Government Security Personnel

DISS Account Management Report

A report detailing all DISS account management activities, including account creations, modifications, terminations, and audits.

Electronic Document (e.g., MS Word, PDF)

Government Security Personnel

Badge Rosters Up-to-date rosters of all personnel authorized access to COMPACFLT facilities, including badge numbers, clearance levels, and access restrictions.

Electronic Document (e.g., MS Excel, PDF)

Government Security Personnel

5.2.4. Qualifications

5.2.4.1. Knowledge of applicable national, DoD, and COMPACFLT regulations governing SCI security (e.g., ICDs 704, 705, DoD Manual 5200.01), with demonstrated experience working with comprehensive SCI security programs.

5.2.4.2. Knowledge of Intelligence Community Directives (ICDs) and National Industrial Security Program Operating Manual (NISPOM).

5.2.4.3. Knowledge of the Federal Enterprise Architecture (FEA) and Department of Defense (DoD) Enterprise Architecture framework (e.g., SIPR, NIPR and Joint Worldwide Intelligence Communications Systems (JWICS) networks}, and the Information Technology (IT)/Cybersecurity rules and regulatory authorities to develop and implement policies and planning concepts, and project management methods.

5.2.4.4. General knowledge and perspective of the operational, procedural, and technical standards that achieve interoperability with other non-DoD Federal Government agencies.

5.2.4.5. Proficient using basic Microsoft Office software applications (e.g., Word, PowerPoint, Excel, and Access).

5.2.4.6. General knowledge of the lifecycle of security policy management, encompassing development, drafting, review, implementation, and ongoing maintenance of comprehensive security policies, procedures, and guidance.

5.2.4.7. Experience supporting SCIF accreditations and inspections, along with demonstrated ability to execute security training and awareness programs to enhance personnel security knowledge and compliance.

5.2.4.8. Possess strong communication, interpersonal, analytical, and problem-solving skills necessary to effectively interact with various audiences, analyze complex situations, and develop effective solutions.

5.2.4.9. Must be eligible for Sensitive Compartmented Information (SCI) access.

5.2.4.10. Proactive and results-oriented, with proven ability to manage and prioritize multiple facilities-related tasks, anticipating potential issues and implementing preventative measures to ensure smooth and efficient building operations.

5.2.4.11. Must possess a valid driver’s license.

6. PERIOD OF PERFORMANCE

6.1. The period of performance shall be for one (1) Period of 4 months and nine (9) days. The Period of Performance reads as follows:

6.1.1. Base Period - 15 January 2026 to 24 May 2026

7. PLACE OF PERFORMANCE

7.1. The work to be performed under this contract will be performed at COMPACFLT Headquarters at 250 Makalapa Drive, Pearl Harbor, Hawaii or other COMPACFLT-owned facilities.

8. WORKING CONDITIONS

8.1. Working conditions are in a climate controlled administrative workspace.

9. HOURS OF OPERATION

9.1.Core Government working hours are between 0700 and 1700 hours, Hawaii Standard Time (HST) Monday through Friday, except Federal holidays or when the Government facility is closed due to local or national emergencies, administrative closings, or similar Government directed facility closings. The Government generally does not anticipate use of any surge nor overtime hours.

9.2.Contractor personnel may be required to work outside normal hours due to changing mission requirements such as surges from exercises, scheduled maintenance, upgrades, major configuration changes, or other specific tasks identified. The Contractor shall ensure coordination of all contractor personnel, through an onsite lead/program manager, to ensure schedules are adjusted to support mission needs.

9.3.Teleworking is not permitted.

10. RECOGNIZED HOLIDAYS

10.1.Recognized Holidays: If the Federal holiday falls on a Saturday, the holiday is observed on the preceding Friday. If the Federal holiday falls on a Sunday, the holiday is observed on the following Monday. Contractor personnel are not required to perform services on the following recognized holidays:

10.1.1. New Year’s Day (January 1)

Birthday of Martin Luther King Jr. (Third Monday in January) Washington’s Birthday (Third Monday in January) Memorial Day (Last Monday in May) Juneteenth (June 19) Independence Day (July 4) Labor Day (First Monday in September) Columbus Day (Second Monday in October) Veterans Day (November 11) Thanksgiving Day (Fourth Thursday in November) Christmas Day (December 25)

11. QUALITY CONTROL (QC)

11.1.The Contractor is responsible for implementing and maintaining a Quality Control Plan to ensure that the work performed meets or exceeds contract requirements and results in the correction of potential and actual problems. The QCP shall be implemented on the first day of contract performance. In addition to the Contractor’s QCP, the Government will provide the Contractor with a copy of the Government’s Quality Assurance Surveillance Program (QASP). Notwithstanding the Government’s QASP, the Contractor is not relieved from having their own QCP program to address quality issues during the contract award period.

11.2.The Government’s QASP will address what deliverables are identified for surveillance and the method and surveillance periodicity to ensure the quality of deliverables as outlined in this PWS. The QASP addresses what will be reviewed and will outline actions to be taken by the Contractor, should review(s) and/or inspections identify areas requiring remedial action. Of special interest to the government are performance standards or metrics that address productivity, completion times, participant satisfaction, and handling/safeguarding Privacy Act data.

11.3.Periodic Progress Meetings: At the Government’s discretion, the Contractor shall participate in periodic progress meetings. At these meetings, the COR and Contracting Officer if requested will apprise the Contractor of how the Government views the Contractor’s performance and the Contractor will apprise the Government of problems, if any, being experienced.

Appropriate action shall be taken to resolve outstanding issues. These meetings shall be at no additional cost to the Government and may be in the form of telephone or video-conferencing and/or on-site meetings mutually agreed by both parties.

11.4. Performance Standards

Performance Standard Frequency Acceptable Quality Level Surveillance Method

Maintain an effective quality control program to ensure services are performed to satisfactorily meet the performance objectives of this Performance Work Statement (PWS)

A minimum of monthly 100% implementation Random inspection by the COR and/or KO DRAFT

11.5. DELIVERABLES

Description/Content Due Date Format Recipient

The Contractor shall submit a QCP to the Government for review and approval

Due within 30 business days after receipt of award

Microsoft Word, and Adobe PDF, signed and dated

COR and KO

12. CORRECTIVE ACTIONS

12.1. At any time, it is determined by the KO that the quality control system, personnel, instructions, controls, tests, or records are not providing results which conform to contract requirements, action shall be taken by the Contractor to correct the deficiency. If a Contract Deficiency Report (CDR) is issued the Contractor shall develop a Corrective Action Plan (CAP) which identifies the root cause, Corrective Action (CA) for the root cause, CA for the specific non-conformance and CA to the root cause to prevent recurrence and a corrective action including the timeline for completion no later than xx days from KO issued CDR.

13. QUALITY ASSURANCE

13.1. The Government will evaluate the Contractor’s performance under this contract in accordance with (IAW) the Quality Assurance Surveillance Plan (QASP). This plan is a Government only document primarily focused on what the Government must do to assure that the Contractor has performed IAW the requirements of the contract. It defines how the performance standards will be applied, the frequency of surveillance, and the minimum acceptable deficiency rate(s) as illustrated within the PWS and Performance Requirements Summary (PRS). All performance ratings will use (Exceptional, Very Good, Satisfactory, Marginal, or Unsatisfactory), as defined in FAR subpart 42.15, Contractor Performance Information. The Government reserves the right to conduct compliance surveillance of any contractual requirement of this acquisition.

14. (COR) CONTRACTING OFFICER’S REPRESENTATIVE

14.1. The COR Tracking (CORT) Tool [Wide Area Work Flow (WAWF) e-Business https://wawf.eb.mil/] for nomination, tracking, documentation, and management of CORs will be used. The COR will be identified by separate letter. The COR monitors all technical aspects of the task order and assists in contract administration. The COR is authorized to perform the following functions: Assure that the Contractor performs the technical requirements of the contract; perform inspections necessary in connection with contract performance; maintain written and oral communications with the Contractor concerning technical aspects of the contract; issue written interpretations of technical requirements, including Government drawings, designs, and specifications; monitor Contractor's performance and notify both the KO and Contractor of any deficiencies; coordinate availability of Government equipment furnished; and provide site entry of Contractor personnel. A letter of designation issued to the COR, a copy of which is sent to the Contractor, states the responsibilities and limitations of the COR, especially with regard to changes in cost or price, estimates or changes in delivery dates.