DRAFT PWS SSM Support Keflavik Iceland.pdf

P ERFORMANCE WORK STATEMENT

C onstruction Site Security Surveillance –

Keflavik AB, Iceland

1. Purpose: The purpose of this requirement is to provide construction security services as well as construction security surveillance services to support a secure construction project onboard Keflavik Air Base (KAB), Keflavik, Iceland in accordance with (IAW) the Intelligence Community Directive (ICD) 705 series and Department of Defense (DoD) policies.

2. Background: U.S. Government Intelligence Community-sponsored construction projects are subject to unique program considerations and security requirements. The infrastructure, equipment, and services being acquired will be critical to ensuring that this construction project comply with the requirements defined in the ICD 705, "Sensitive Compartmented Information Facilities", and DoDM 5105.21, Volumes 1-3, "Sensitive Compartmented Information Administrative Security Manual". In addition, the ICD 705 has several implementing documents to include Intelligence Community Standard (ICS) 705-1, ICS 705-2 and the "Technical Specifications for Construction and Management of Sensitive Compartmented Information Facilities", version 1.5.1, known as the “ICD 705 Tech Specs”.

These documents are available at www.esd.whs.mil/DD and www.odni.gov.

3. Scope: The Contractor shall review, develop, correct and update the Construction Security Plan (CSP), providing expert assessment and feedback on ICD 705 compliance along with any contractual/legal impacts. The Contractor will provide expertise throughout the design review process to ensure that accreditation requirements are accurately incorporated into the project design. The Contractor will also complete and/or provide input for all required documentation for submitting a Pre-Construction package to the Accrediting Official (AO).

At a minimum, the Contractor shall provide all personnel, equipment, training, and supplies required, IAW all applicable rules, laws and regulations as stated in this Performance Work Statement (PWS), to ensure that the facility is constructed in a manner to prevent technical compromise. Handwritten documentation will NOT be accepted on this project and it is the responsibility of the Contractor to develop a digital documentation process as well as provide all necessary equipment and materials for complete digital documentation.

4. Materials and Equipment: The Contractor shall procure, repair/maintain, and provide initial training to Contractor personnel for equipment and systems required to perform all tasks in accordance with this PWS. The Contractor shall ensure that all equipment is serviceable and maintained IAW the specific manufacturer’s requirements. All software, documents, and data generated during the performance of this contract shall become the property of the Government at the completion of the contract.

a. It is the sole responsibility of the Contractor to arrange for transportation, lodging, and any other needs of contract personnel covered by this contract. The Contractor shall comply with all applicable local regulations and standards.

5. Site Security Manager (SSM): The Contractor shall provide SSM services in support of the creation of a new SCIF as part of a building renovation in Keflavik, Iceland. The SSM is considered key personnel under this contract. The SSM will provide expert recommendations, advice, and input during all phases of the project: Design, Pre-construction, Site Initiation, Setup, and Accreditation to the government’s project Security Officer, Special Security Officer (SSO) Navy’s Regional Cognizant Security Authority (RCSA) and/or the AO. The SSM will provide expertise to the US government throughout the construction process and ensure that all design reviews and final plans are completed in accordance with the ICD 705, CNSSAM TEMPEST/1-13, and other DoD/IC Directives and Guidelines to ensure a final accreditation as a SCIF at construction completion. The SSM will prepare the FFC, TEMPEST Checklist, and other documentation items as required for final facility accreditation.

a. Services shall be conducted in three phases:

• Phase 1 – Final construction design review, submission to AO of pre-construction documentation and commenting on solicitation-related Requests For Information (RFI)

• Phase 2 – Source selection-related actions and preliminary secure construction site actions.

• Phase 3 – Secure construction site initiation, setup and construction security surveillance

b. A FTE is defined as 1,912 hours worked in a year. The Government estimates that the SSM will be needed at both a one-half full time equivalent (FTE) and later as one FTE.

During Phases 1 and 2, while working offsite, a one-half FTE will be required. It is estimated that, the contractor completes tasks Monday-Friday, 0800-1200 EST. During Phase 3, one FTE will be required onsite Monday-Friday, 0800-1600 local Iceland time (GMT). The SSM is expected to adjust these times as needed to attend meetings, travel or other events that occur outside these times. During Phases 1 and 2, the contractor will be primarily communicating and attending meetings virtually with staff located in the Central European Time zone.

• During phase 1, the Government estimates the SSM will be a one-half FTE.

• During phase 2, the Government estimates the SSM will be a one-half FTE.

• During phase 3, the Government estimates the SSM will be one FTE.

c. The phases of services are as follows:

Phase CLIN Periods of Performance Phase 1 BASE 0001 30 September 2024 – 20 May 2025 Phase 2 OPTION 0002 21 May 2025 – 30 April 2026 Phase 3 OPTION 0003 1 May 2026 – 30 April 2027 Phase 3 OPTION 0004 1 May 2027 – 30 April 2028 Phase 3 OPTION 0005 1 May 2028 – 30 April 2029 52.217-8 OPTION 0006 TBD (up to six month extension)

d. Within Phase 1, important milestones are defined as follows: Final construction design review comments; Pre-Construction package submission to the AO that includes the Pre-Construction FFC, Pre-Construction Checklist, Compartmented Area FFC, TEMPEST Checklist, Inspectable Materials Checklist and other related documents;

adjusting and re-submitting those documents based upon comments from the AO.

e. Within Phase 2, important milestones are defined as follows: Respond to security-related RFI’s from the Prime Contractor after award, Perform background checks of both vendors/suppliers and all project personnel; Review of building materials for inspectable/non-inspectable status for secure shipping requirements; Advise Government on secure procurement and secure shipping proposals from Prime Contractor; Secure construction site initiation (roughly six months prior to the start of the secure area construction).

f. Within Phase 3, secure construction site setup (roughly 1-3 months prior to the start of the secure area construction); Construction Security surveillance and administration;

Accreditation package compilation and submission to RCSA/AO.

6. SSM Qualifications:

a. Must be a U.S Citizen and possess a Top Secret (TS) security clearance.

b. The SSM shall have at least eight (8) years of security experience, specifically related to

SCIF construction, Intelligence Operations, Counter-Intelligence Operations, Counter- Surveillance Operations, Technical Surveillance Counter-Measures, Physical Security, or a combination of these areas.

c. The SSM shall have at least five (5) years of direct experience working on ICD-705 construction projects. Direct experience means working at the project location as a CST, SSM, or SME.

d. The SSM shall have at least two (2) years in a leadership/management role on an ICD-705 Construction Security project(s). Leadership/Management means SSM or CST-Lead.

e. The SSM shall demonstrate familiarity and knowledge of the sixteen (16) standard divisions of construction, and must have knowledge of technical listening devices commonly used by foreign intelligence services by citing on the SSM resume and providing the certificates of training.

f. The SSM shall hold a valid certificate for the successful completion of a Twenty (20) Hour or greater Site Security Manager (SSM) Training Course taken within the last 5 years.

g. Must hold a valid certificate for the successful completion of a Forty (40) Hour or greater CST Training Course taken within the last 5 years.

h. The SSM shall have an expert understanding of the ICD 705 Tech Specs as demonstrated by experience working on multiple ICD 705 projects.

i. The SSM shall have at least three (3) years’ experience working OCONUS.

7. SSM Tasks:

a. Ensure the ICD 705 standards are implemented and advise the RCSA/AO of any issues that would affect the future accreditation of the SCIF.

b. In consultation with the RCSA/AO, update the CSP regarding implementation of the

ICD 705 standards (to include a surveillance plan and actions required to document the project from start to finish.)

c. Develop and/or update the following documents for submission to the AO through the RCSA: Pre-Construction Checklist, Fixed Facility Checklist (FFC), Inspectable materials list, TEMPEST Checklist

d. Respond to Requests for Information from the design team, prospective construction contractors, and Prime Contractor (after award).

e. Utilize knowledge of all construction disciplines, to include civil, architectural, mechanical, electrical and electronic engineering principles.

f. Read and analyze designs and blueprints, and recognize the architect’s intended use.

g. Analyze designs and structural complexities, which are intended to mask an ulterior purpose not intended by the architect.

h. Exercise knowledge of TEMPEST construction principles, and make recommendations for applying countermeasures to meet the AO and Certified TEMPEST Technical Authority (CTTA) mitigation requirements.

i. Write detailed reports in English and complete the analyses of issues, findings, and security situations, which require staff action.

j. Interact with the design team and Naval Facilities Engineering Systems Command (NAVFAC) personnel, providing recommendations and courses of action (COA’s) for Government consideration.

k. Prepare necessary waiver requests and forward to the AO for processing.

l. Coordinate the vetting process for both vendor and personnel assigned to the construction project.

m. Review the plans of the proposed secure construction site layout and work with the architectural team and/or Prime contractor to ensure the proper positioning of the Access Control Facility, Secure Storage Area and limits access of un-cleared personnel to the site.

n. Perform background checks of vendors/supplier and all project personnel utilizing guidance in the CSP.

o. Advise the Government of the need to designate building materials as inspectable or non-inspectable for purposes of securely shipping non-inspectable material from CONUS, based on the anticipated inspection capabilities of the Construction Surveillance Technicians. Upon concurrence from the Government, inform the Prime Contract

8. Place of Performance:

a. Phases 1 and 2 - The majority of the SSM tasks will be performed virtually, to include attending periodic planning meetings via Microsoft Teams. In addition, the SSM will be required to attend any in-person gatherings, which may be held at Keflavik AB, Iceland, or another site as determined by NAVFAC.

b. Phase 3 – The SSM will primarily be onsite in Keflavik, Iceland. The SSM will be required to attend any in-person gatherings, which may be held at Naples, Italy, or another site as determined by NAVFAC. SSM will be required to obtain a VISA to work in Iceland prior to entering the country.

9. Travel: Travel to other facilities, both locally and OCONUS may be required. All temporary duty (TDY) travel requirements shall be pre-approved by the Government (subject to local policy procedures), and is on a strictly cost reimbursable basis. Costs for travel shall be billed in accordance with the regulatory implementation of Public Law 99-234 and FAR 31.205-46 Travel Costs. Phase 3 performance in Keflavik is not considered TDY. Rental cars and hotels are not authorized.

10. SUBSTITUTION AND ADDITION OF CONTRACTOR PERSONNEL

a. The Site Security Manager (SSM) is identified as key personnel on this contract.

Supporting documentation for all required training/certificates for the Key Personnel functions will be requested. The Contractor shall submit a resume and training certification IAW the position description below to the Government with their initial proposal. Key personnel must meet the requirements cited in the PWS to be considered technically qualified to perform on this contract.

b. The Government reserves the right to reject, at any time and without notice, any

Contractor employee proposed for use on this project, or already assigned to this project, who does not meet the position requirements of this PWS or is unable/unwilling to perform assigned work. The Contractor shall be responsible for the correction of unacceptable performance, including, but not limited to, unprofessional behavior, disorderly conduct, ineffective or improper communication with others, inappropriate dress, etc. The Contractor shall not deploy the rejected employee to the project location or, if already deployed, shall immediately instruct the rejected employee to leave the Government premises. The Contractor shall provide a substitute/replacement such that there is no lapse in performing the requirements of this PWS. The replacement shall take place at no additional cost to the Government.

c. The Contractor agrees to assign to the contract those persons whose resumes, personnel data forms or personnel qualification statements were submitted as required by the Instructions to Quoters section to fill the requirements of the contract. No substitution or addition of personnel shall be made except in accordance with this clause.

d. The Contractor agrees that, during the first 90 days of the contract performance period, no personnel substitutions will be permitted unless such substitutions are necessitated by an individual's sudden illness, death or termination of employment. In any of these events, the Contractor shall promptly notify the Contracting Officer and provide the information required.

e. If personnel for whatever reason become unavailable for work under the contract for a continuous period exceeding 30 working days, or are expected to devote substantially less effort to the work than indicated in the proposal, the Contractor shall propose a substitution of such personnel.

f. All proposed substitutions shall be submitted, in writing, to the Contracting Officer at least 15 days (30 days if a security clearance must be obtained) prior to the proposed substitution. Each request shall provide a detailed explanation of the circumstances necessitating the proposed substitution, a complete resume for the proposed substitute and any other information required by the Contracting Officer to approve or disapprove the proposed substitution. All proposed substitutes (no matter when they are proposed during the performance period) shall have qualifications that are equal to or higher than the qualifications of the person being replaced.

g. The Contracting Officer shall evaluate requests for substitution and addition of personnel and promptly notify the Contractor, in writing, whether the request is approved or disapproved.

h. If the Contracting Officer determines that suitable and timely replacement of personnel who have been reassigned, terminated or have otherwise become unavailable to perform under the contract is not reasonably forthcoming or that the resultant reduction of productive effort would impair the successful completion of the contract, the contract may be terminated by the Contracting Officer for default or for the convenience of the Government, as appropriate. Alternatively, at the Contracting Officer's discretion, if the Contracting Officer finds the Contractor to be at fault for the condition, s/he may equitably adjust (downward) the contract price to compensate the Government for any delay, loss or damage as a result of the Contractor's action.