DRAFT SOW - Access Control 06.22.2023.pdf

STATEMENT OF WORK (SOW)

SECTION C – DESCRIPTION/SPECIFICATION/WORK STATEMENT

SECURITY ADMIN, ACCESS CONTROL AND ESCORTING IN SUPPORT OF NSWCDD

C.1 BACKGROUND

The Naval Surface Warfare Center Dahlgren Division (NSWCDD) provides comprehensive and dedicated support to the Navy of research, development, test and evaluation, analysis, systems engineering, integration and certification of complex naval warfare systems and fleet support. Additional Contractor support of security administration, access control and escorting support services is required as NSWCDD continues to provide the military with testing and certification by utilizing its Potomac River Test Range in Dahlgren, VA and provides Fleet support at Dam Neck Activity (DNA) on Naval Air Station (NAS) Oceana Dam Neck Annex which is located in Virginia Beach, VA.

C.2 SCOPE

C.2.1 This Statement of Work (SOW) is to provide security support to NSWCDD and fleet support to DNA.

The intent is for the Contractor to provide a dedicated team of personnel for security administration, classified control center support, and access/visitor control. The Contractor shall provide non-personal services of day-to-day operations of NSWCDD (Code 105) for the tasks described in section C.4 listed to include: building and documentation support, personnel security, information security, physical security, and anti-terrorism/force protection (AT/FP), emergency management, operations security (OPSEC), electronic keying, classified control, international security, special security, general security, courier operations, classified disposal, mail processing, lock and key control, administrative security, escorting requirements and data management.

C.2.2 The primary work locations are at the NSWCDD which includes the primary location of Dahlgren, VA and DNA in Virginia Beach, VA. The Contractor shall provide all necessary supervision, management, non-personal support services, and administrative support and oversight for this effort.

C.2.3 Rough draft, disk, verbal, electronic (e-mail) or handwritten material will be provided to the Contractor for processing and completion in accordance with specific and applicable written guidelines.

C.2.4 The Contractor will be using software applications, including those that are unique to the Navy, e.g., Lenel Enterprise Control/Intrusion Detection System (IDS), Scattered Castles and Defense Information Security System (DISS), Live Scan Guardian, Classified Information Management System (CIMS), Defense Travel System (DTS). The Government shall provide any training in the use of these unique software applications required under this effort.

C.3 APPLICABLE DOCUMENTS

The following Department of Defense/Department of the Navy (DOD/DON) manuals, forms, instructions and processes apply to contract security support. Additional local instructions can be found in Plan of Action and Milestones (POA&Ms) as appropriate.

MANUALS (Found on the Internet or provided during Task Order performance):

DoD M5200.48 V1-3 Department of Defense Information Controlled Unclassified Information

DoD M5105.21 V1-3 Department of Defense Sensitive Compartmented Information (SCI) Administrative Security Manual DODI O-2000.16 V1-V2, DoD Antiterrorism (AT) Program Implementation SECNAV M5510.36 Department of the Navy Information Security Program SECNAV M5510.30 Department of the Navy Personnel Security Program SECNAV 5216.5 Navy Correspondence Manual DoD 5220.22-M, National Industrial Security Program Operating Manual NAVSEA M5510.1 Naval Sea Systems Command (NAVSEA) Security Program Manual NSWCDD 5510.4B Command Security Manual SECNAV M-5210.1, DoN Records Management Manual FORMS (Provided during Task Order performance) DD 2834 Destruction Certificate Authorization for Temporary Removal of Classified Badge Encoding Request Badge Request Form Base Visitor Pass Bomb Threat Data Card Camera Pass CDSA Fitness Device Registration for Visitors CDSADN Hard Drive Accountability and Control Log Contract Security Classification Spec Form Correspondence Control Sheet - Secret Material Accountability Create/Transfer/Destroy Top Secret Material DD Form 2501 Courier Authorization DD Form 2962 Personnel Security System Access Request (PSSAR) Declassification of Security Containers Electronic Spillage Action Form NATO/SIPRNet Access Request Form NSASP 5512/17l Lost Badge/Common Access Card (CAC) Report Form NSWCDD 5216/7 Transmittal or Request NSWCDD Contractor Request for North Atlantic Treaty Organization (NATO)/ Secret Internet Protocol Router Network (SIPR) Net Access NSWCDD PII Check-Out/In Log NSWCDL 5511/5 Temporary Removal of Classified Material OGE 450 Form Optional Form 89 Safe Maintenance Form SF-901 CUI Cover Sheet Privacy Impact Assessment Prohibited Strong Rooms Random Drug Testing Program Checklist for Supervisors Report Findings Report Security Incidents System Authorization Access Request Navy (SAAR-N) Security Daily Inspection Check List SF700 Security Container Information SF700 Continuation Sheet SF701 Activity Security Checklist SF702 Security Container Check Sheet Training Support Center (TSC) Badge Request Visitor Request Form

INSTRUCTIONS:

DoDI 5200.48, Controlled Unclassified Information (CUI) SECNAVINST 5211.5E Privacy Act Information OPNAVPUB P09B2-107, Standard Navy Distribution List OPNAVINST 5218.7A, Navy Official Mail Management DODINST 4525/6M, DOD Postal Manual NSWCDD Records Management policy NSWCDD 5530.1B, Physical Security Manual NSWCDD 5530.5A, Antiterrorism Plan NSWCDD 2281.1A, Handling Safeguarding Accounting and Disposition of Communication Security

(COMSEC)

NSWCDD 2281.2B, Emergency Action Plan for Communication Security NSWCDD 3030.1A, Continuity of Operations Plan NSWCDDDNAINST 3030.1C, Continuity of Operations Plan NSWCDD 3440.1A, Emergency Action Plan NSWCDDDNAINST 3440.2, Emergency Action Plan NSWCDD 5211.1E, Privacy Act/Personally Identifiable Information (PII) NSWCDD 5239.3D, Policy on Portable Electronic Devices NSWCDD 5510.6A, Foreign Disclosure and Foreign National Visitor Process NSWCDD 5530.4D, Security Administrative Inspection Program NSWCDD 3070.3B, Operations Security NSWCDDDNAINST 5239.5B, Policy and Procedures for Removing Information from Classified Systems CBTDIRSYSACTDNINST 3030.1 CDSA Dam Neck Continuity of Operations Implementation Plan CBTDIRSYSACTDNINST 3432.1B Operations Security (OPSEC) Instruction CBTDIRSYSACTDNINST 3440.1 Emergency Action Plan CBTDIRSYSACTDNINST 3300.1 CDSADN Antiterrorism Plan CBTDIRSYSACTDNINST 5239.2A Protected Distribution Systems CBTDIRSYSACTDNINST 5510.1A Information and Personnel Security Manual CBTDIRSYSACTDNINST 5530.14B Physical Security Manual SECNAVINST 3070.2 Operations Security OPNAVINST F3300.53C Navy Antiterrorism Program OPNAVINST 5530.14E Navy Physical Security and Law Enforcement Manual OPNAVINST 5530.13D Department of the Navy Physical Security Instruction for the Conventional Arms, Ammunition and Explosives (AA&E) OPNAVINST 5510.165A Navy Insider Threat Program

PROCESSES FOR DAHLGREN (Provided with POA&M):

Classified Mailroom SOP Personnel Security SOP NSWC Dahlgren Division SCIF SOP Physical Security SOP for Controlled Access Area (CAA) Physical Security SOP for Open Storage Secret (OSS) Physical Security SOP for Open Storage Top Secret (OSTS) Job Aid - Security Guidebook For Employees Ver1 Job Aid - CAC Replacement Request Template Job Aid - Checklist for Classified Discussions or Processing Job Aid - Classified Meetings Job Aid - Department Security Representatives Job Aid - Deputy Secretary of Defense (DEPSECDEF) MEMO - Unauthorized Disclosure of Aug 14 2014 Job Aid - Locking-Securing Procedures Job Aid - Lost CAC procedures

Job Aid - NSWCDD Electronic Spillage SOP Job Aid - OPSEC Job Aid - Sample and Mandatory Security Language for Classified Contracts Job Aid - Security Infractions and Violations Job Aid - Secure telephone Equipment (STE) and Omni Terminals Job Aid - Visitor Control Processes Job Aid - VoSIP (Voice Over Secure Internet Protocol) Capability Guidance Job Aid - Enclosure (2) of NAVSEA Memorandum 5510 Ser SEA 09P/008 of 3 Apr 11.

Job Aid - NAVSEA Memo 5239 Ser 09P/005 of 03 June 10, NAVSEA Electronic Spillage Reporting and Response Policy Job Aid - NAVSEAINST 5211.2A Privacy Act Personally Identifiable Information Program Job Aid - NAVSEA Memo 5510 Ser 09P/103 of 7 May 12, All-Shred Policy Job Aid - NSWCDD Instruction 5239.3D Policy on Portable Electronic Devices 16 DEC 2014 Job Aid - Designation of Information Technology (IT) Positions Standard Operating Procedures Job Aid - Miscellaneous Marking and Labeling Job Aid - CUI Desk Guide Job Aid - PII and Encryption Methods Job Aid - PII--User Job Aid - No Foreign (NOFORN) pamphlet Job Aid - Step plan action for writing classification guides NSWCDD Security Office Calendar of Training Events updated 10 May 16 Job Aid -Your Polygraph Examination Job Aid - NSWCDD Marking Guide Access Control SOP Preliminary Investigation SOP

PROCESSES FOR DNA (Provided with POA&M):

T3-105-3300.1 Random Entry/Exit Inspections T3-105-3300.2 Official and Unofficial Travel T3-105-3300.4 Ad Hoc CDSA Emergency Communication Updates T3- 105-3440.1 Muster Process T3-105-4330.1 On Site Contractors T3-105-4600.1 Processing DTS OCONUS Travel Orders T3-105-5130.1 Courier Cards and Letters T3-105-5239.1 Protected Distribution (PDS) Inspections T3-105-5239.2 Shipping Media to National Security Agency (NSA) for Destruction T3-105-5239.3 Local Media Destruction Procedures T3-105-5239.4 Classified Media Removal Control Log T3-105-5240.1 Contractor Common Access Cards T3-105-5510.2 Administration of Foreign Military Affiliates T3-105-5510.3 Foreign Visitor Process T3-105-5510.4 Classified Container and Door Combo Management T3-105-5510.6 Classified Meetings T3-105-5510.7 Classified and Unclassified Destruction T3-105-5510.8 Processing and Control of Classified Material T3-105-5510.9 DD254 Processing T3-105-5510.10 Classified Information Management System (CIMS) Compliance Program T3-105-5520.11 Procedures for Initiating and Submitting Fingerprints T3-105-5520.6 Procedures for Creating Local Joint Clearance and Access Verification System (JCAVS) Accounts and Managing Visits T3-105-5520.8 Visitor Coordination with Security T3-105-5530.2 Quarterdeck Security Logs

T3-105-5530.3 After Hours Building Inspections T3-105-5530.5 Requesting Base Passes T3-105-5530.6 Weekend Alarm Contingency Plan T3-105-5530.7 Alarm Monitoring Procedures T3-105-5530.9 Completing LENEL System Backups T3-5530.10 Strong Room Custodian Guide T3-105-5530.11 Alarm Testing Procedures T3-105-5530.12 Creating Access Lists in LENEL T3- 105-5520.1 Termination Procedures - Civilian T3-105-5520.2 New Civilian Hires T3-105-5520.3 Termination Procedures - Military T3-105-5520.4 Military Staff - Incoming T3-105-5520.5 Civilian Transfer - Incoming

C.4 REQUIREMENTS

C.4.1 SECURITY ADMINISTRATION SUPPORT

The Contractor shall perform general security administration duties necessary to meet the needs of NSWCDD.

The Contractor shall assist with performing a wide variety of complex security duties. The technical requirements described in this SOW shall require the Contractor to serve in the role as Department Contractor Security Coordinator and/or Contractor Special Security Representative (CSSR), responsible for the day-to-day support of NSWCDD collateral spaces and/or Sensitive Compartmented Information Facilities (SCIFs), in support of the Code 1051 Branch Head and/or the Special Security Officer to include the following:

C.4.1.1 General Security

C.4.1.1.1 Answer routine customer questions providing customer support and personally respond and take for action any call related to security. The Contractor shall maintain telephone contact with appropriate personnel in support of the work area being supported.

C.4.1.1.2 Maintain classified network accounts as required to support the department; SIPR and/or Joint Worldwide Intelligence Communications (JWICs).

C.4.1.1.3 Provide staff and customers with accurate and complete information on security processes, procedures, and documentation requirements.

C.4.1.1.4 Provide security support at meetings on and off NSWCDD location.

C.4.1.1.5 Assist with the development of and update security sustainment plans.

C.4.1.1.6 Participate in command security team and Board of Director (BOD) meetings.

C.4.1.1.7 Report security incidents immediately to the Command Investigators and Security Director and SSO (for incidents involving SCI or SCI Indoctrinated personnel. Provide statements if requested.

C.4.1.1.8 Develop, maintain and update security Standard Operating Procedures (SOPs).

C.4.1.2 Information Security

C.4.1.2.1 Serve as a classified control point.

C.4.1.2.2 Assist departments in identifying meeting spaces and the security requirements before, during and after sensitive and/or classified meetings.

C.4.1.2.3 Assist with the creation of security training.

C.4.1.2.4 Provide security education and training to all NSWCDD personnel, Contractor support personnel and visitors.

C.4.1.2.5 Provide courier card program assistance.

C.4.1.2.6 Assist with the department CUI/PII program.

C.4.1.2.7 Collect and submit derivative classification sampling as required to the Information Security Lead.

C.4.1.2.8 Assist with department camera pass program.

C.4.1.2.9 Assist with special programs to include NATO, Critical Nuclear Weapon Design Information (CNWDI), Restricted Data/Formerly Restricted Data (RD/FRD), and Naval Nuclear Propulsion Information and SCI.

C.4.1.3 Physical Security

C.4.1.3.1 Participate and perform walkthroughs, inspections and surveys. Provide findings of inspections to the Physical Security Lead and SSO for SCIFs.

C.4.1.3.2 Sanitize spaces for foreign national visits when required and review foreign national security plan for on-site foreign nationals.

C.4.1.3.3 Conduct annual department physical security surveys.

C.4.1.3.4 Complete Force Protection Conditions (FPCONs) and report attainment through the department.

C.4.1.3.5 Update Critical Asset Lists and Mission Essential Vulnerability Assessments (MEVAs) annually.

C.4.1.3.6 Run Lenel access reports for custodians to scrub access.

C.4.1.3.7 Submit security related work requests/trouble tickets in Facility Service Request Module (FSRM).

C.4.1.3.8 Perform combination changes for various secure locks and coordinate with facilities trouble tickets for lock issues.

C.4.1.3.9 Control access to classified areas via the Lenel System.

C.4.1.3.10 Instruct department personnel in security practices and procedures pertaining to classified spaces.

C.4.1.3.11 Notify Command Physical Security Lead and SSO of any alarm issues with SCIFs.

C.4.1.3.12 Assist with Random Anti-Terrorism Measures (RAMs) and reporting to include the scheduling and execution of administrative checks, preparing annual RAM schedule, conducting monthly RAMs and provide findings to the Physical Security Lead.

C.4.1.3.13 Perform physical security pre-accreditation actions for each restricted area, to include SCIF’s, inspecting above the false ceiling and below the false floor, and provide required paperwork to the Physical Security Lead and SSO (for SCIF’s). Use of a ladder is required to perform this tasking. Occasionally Contractor will lift up to 50 pounds while performing the inspection.

C.4.1.3.14 Instruct department personnel in security practices and procedures pertaining to classified spaces, including opening and closing, visitor control, classified meetings, and courier procedures.

C.4.1.3.15 Develop Open Storage Secret SOPs, instruction in security practices and procedures pertaining to classified spaces, including opening and closing, visitor control, storage of classified material and courier procedures, if there are differences not covered in the Command Security Manual, other Code 105 instructions or SOPs. All SOPs must be approved by the Security Director.

C.4.1.3.16 Assist in management of command key control (issuance, return & tracking) program. Complete annual key inventories and track the temporary, daily check out of keys. Complete Key Memos to NAVFAC for signature when new keys are required.

C.4.1.3.17 Maintain tracking of all combination locks in their area crossed referenced to custodian, location, type of container, classification (Strong Room (SR), vault, safe, date combination changed) using a tracking tool provided by the Government.

C.4.1.4 Personnel Security

C.4.1.4.1 Provide Personnel Security support by collecting and submitting fingerprints using the Live Scan Guardian fingerprint enrollment system or similar electronic fingerprint capture system.

C.4.1.5 Operations Security

C.4.1.5.1 Participate in quarterly OPSEC working group, assist with the updating of the department Critical Information List (CIL) and ensure OPSEC is included in department outdoor test plans.

C.4.1.6 Communications Security

C.4.1.6.1 Performs the task of a Local Element (LE) user which would include accepting responsibility of COMSEC material to include Controlled Cryptographic Items (CCI) equipment. Conducts inventory and destruction of COMSEC material, and ensures proper storage and adequate physical security is maintained for COMSEC material.

C.4.1.7 Emergency Management

C.4.1.7.1 Participate in the Emergency Management Working Group and complete all associated actions for the department from the meeting.

C.4.1.8 Special Security Representative

C.4.1.8.1 Serves as and is designated in writing as a Special Security Representative (SSR). Supports the government Special Security Officer (SSO) in the day to day running of Base Sensitive Compartmented Information Facilities (SCIFs) and reporting all issues to the Special Security Officer (SSO).

C.4.1.8.2 Prepare, update and maintain Fixed Facility Checklists (FFCs) to include required TEMPEST forms, space drawings, mission statements, and equipment lists for NSWCDD SCIFs.

C.4.1.8.3 Prepare, update and maintain Temporary Secure Working Area (TSWA) accreditation paperwork annually and submit to SSO prior to approval expiration.

C.4.1.8.4 Perform annual self-inspections and other required self-assessment actions per the DoDM 5105.21 and report findings to the Special Security Officer (SSO) and Assistant SSO (ASSO).

C.4.1.8.5 Ensure all SCI accountable material and all media, regardless of classification located within the SCIF is properly marked and entered into the SSO media tracker.

C.4.1.8.6 Assist with SCI level visits in SCIF spaces using DISS.

C.4.1.8.7 Maintain electronic SCIF folders, as well as assisting the government SSR with the compilation of hard copy records when required.

C.4.1.8.8 Maintain physical, personnel, and information security requirements for SCIFs through administrative inspections and spot checks.

C.4.1.8.9 Assist department employees with quarterly SCI personnel scrub list.

C.4.1.8.10 Retain current copy of SCIF SOP in each SCIF and train SCI briefed personnel within your cognizant department on SCIF SOP compliance.

C.4.1.8.11 Assign SCIF badge accesses and coordinate with space custodians to maintain SCIF access lists.

C.4.1.8.12 Perform combination changes of SCIFs and SCI safes, ensuring the SF-700 and SF-700 continuation sheet (if required) is fully and accurately completed and delivered to the SSO Office.

C.4.1.8.13 Promptly forward all correspondents received from department SCI cleared employees to the SSO and ASSO.

C.4.1.8.14 Assist personnel/police officers with quarterly alarm drills and forward all applicable documentation to SSO office.

C.4.1.8.15 Conduct quarterly bag checks (Administrative Inspections) and monthly unannounced after-hours inspections for cognizant buildings with SCIF spaces, forwarding documentation to SSO Office.

C.4.1.8.16 Operate DISS and/or Scattered Castles to verify SCI accesses of visitors to SCIFs.

C.4.1.8.17 All other SCIF related duties as assigned by the SSO, ASSO or SSR.

C.4.2 CLASSIFIED CONTROL CENTER (CCC) SUPPORT

C.4.2.1 Provide receipt, tracking and proper disposition of in-coming and out-going classified mail. Complete tracer action letters for outgoing classified material receipts not received within adequate time.

C.4.2.2 Assign Confidential, Secret and Top Secret serial numbers for packages.

C.4.2.3 Maintain log books and other record keeping (transmittals, records of receipt, courier receipts express receipts, etc.) for every package that is processed.

C.4.2.4 Package and wrap controlled unclassified information sensitive and classified material to be shipped.

C.4.2.5 Prepare material for customers to hand carry off site.

C.4.2.6 Open and forward First Class mail addressed to the Commanding Officer of NSWCDD.

C.4.2.7 Research mail sent to incorrect addresses and send notice to change address.

C.4.2.8 Verify classifications and stamp packages accordingly.

C.4.2.9 Prepare mailing labels, maintain files, and enter information in record log.

C.4.2.10 Advise customers on processes or procedures.

C.4.2.11 Ensure accountability and disposition of in-coming and out-going material.

C.4.2.12 Research, develop, write/edit, update and maintain technical documentation including SOPs, user guides, planning documents such as contingency plans, brochures and posters.

C.4.2.13 Processes Secret and below destruction shipments to NSA or destroy locally, signing destruction forms for classified materials or closes out media destruction tracker items after destruction.

C.4.2.14 Prepare Security Discrepancy Notice, OPNAV 5511/51, for Security Director review and signature.

C.4.2.15 Perform all Delivery Staging Area (DSA) mailroom tasks. Research, develop, write/edit, update and maintain technical documentation in support of the Department and Command Delivery Staging Area Operations task including the DSA SOP, User Guides, Planning documents including the Contingency plan, Brochures and Posters. This includes scheduling meetings and/or demonstrations.

C.4.2.16 Perform courier tasks in delivery of classified material between facilities and agencies.

C.4.2.17 Perform classified disposal.

C.4.3 ACCESS/VISITOR CONTROL SUPPORT

The Contractor shall perform the following for Access/Visitor Control:

C.4.3.1 Process and properly vet security eligibility levels of visitors and tenants using DISS. Process and submit outgoing visitor authorization requests for all staff employees. Process and submit shipyard visit requests for all staff employees.

C.4.3.2 Register building access badges in the Lenel system, add accesses per approved access request forms and process initial building access badges pins and/or pin resets.

C.4.3.3 Respectfully greet visitors, verify clearances and notify Point of Contact (POC).

C.4.3.4 Assist meeting coordinators by receiving list of visitors and verifying their clearances in advance to have badges prepared.

C.4.3.5 Utilize sufficient personnel to ensure escort services are provided and have appropriate coverage when needed.

C.4.3.6 Escort visitors without clearances within accredited secure spaces; OSS and below. If the visitor has a NSWCDD sponsor, civilian or Contractor, the Contractor shall notify the point of contact that the visitor is on site. Sign visitor into all secure spaces annotating all fields on visitor log. Maintain a visual on visitor at all time while within the facility. Escort the visitor to the exit at the end of the visit. Sign visitor out of secure spaces annotating time of departure.

C.4.3.7 Contractor may escort visitors within a vault or strong room with the authorization of the custodian.

If the custodian does not authorize the Contractor access, the Contractor must turn the visitor over to the custodian or custodian's representative.

C.4.3.8 Contractor may support occasional adhoc requests for escorting lasting no more than 15 minutes away from access control point.

C.4.3.9 Escort construction or other support personnel within construction and work zones and remain with them keeping visual contact as they work within our secured spaces. Some construction zones will require the Contractor to wear appropriate personal protective gear. The Contractor shall be required to provide Contractor employees with safety shoes/boots (this is not a direct charge ODC) and the Government will provide all other personal protective gear. Safety shoes/boots must be American National Standards Institute (ANSI) and/or American Society for Testing and Materials (ASTM) compliant.

C.4.3.10 Issue appropriate building access badges to all visitors entering buildings.

C.4.3.11 The Contractor shall assist with the Outlook calendar used for the scheduling of conference rooms.

C.4.3.12 During non-core hours if there is only one (1) access/control support person on duty, the Contractor shall assist visitors by notifying their contact of their arrival and issuing each visitor the appropriate badge.

C.4.3.13 Complete Mail Orderly Training and submit associated paperwork to the Official Mail Manager to receive mail.

C.4.3.14 Receive deliveries and notify appropriate persons; receive mail and distribute the mail pouches to the appropriate department, division and branch secretaries' offices, and like deliveries, notify the appropriate secretaries; shall receive shipments (such as UPS) and either notify the addressee or deliver small packages along with the distribution of the mail pouches if space is available. Unclaimed mail or packages shall be moved into the Government designated locked area for unclaimed packages at the end of the day or stored in accordance with the buildings operating procedure.

C.4.3.15 Assist with submitting trouble calls and escort un-cleared maintenance workers in the spaces required.

C.4.3.16 Ensure tenants and visitors are adhering to the Portable Electronic Device Policy.

C.4.3.17 Maintain a daily log/database documenting visitors (Visitor, Contractor or Government personnel), Points of Contact (POC), date and time of arrival/departure, employer, and the visitor badge number assigned. Dependent on Departments’ operating procedures security classification level of authorized access shall be documented. Authorization shall be established based on security classification level.

C.4.3.18 The Contractor shall be responsible for the receipt and transmission of unclassified facsimile for building personnel. The Contractor shall notify the recipient of the facsimile.

C.4.3.19 If the Building has a “no electronic device policy” the Contractor shall ensure all visitors entering the building are aware of and enforce the policy by pointing out the list of prohibited items posted on the entry door and the visitor check-in desk. Contact the local Information Systems Security Manager to review government and personal electronic devices prior to admittance to site.

C.4.3.20 Maintain authorized personnel list and enable badge access for those personnel meeting established Security and Program requirements.

C.4.3.21 Open, secure, and alarm zones in accordance with building standard operating procedures, Open Storage Secret and below, and properly annotate such on the SF702.

C.4.3.22 The Contractor shall maintain and operate repositories for classified and unclassified documents and magnetic media. The Contractor shall be responsible for receipt, logging, storage, and access control of all material located in the repository. As support for this facility, the Contractor shall preform as a TCP for classified documents.

C.4.3.23 The Contractor shall establish and maintain Standard Operating Procedures for access control duties.

C.4.3.24 Perform a virus scan on media entering the building as required.

C.4.3.25 Complete end-of-day security checks and annotate as appropriate on the SF701.

C.4.3.26 Provide personnel security support by assisting with the completion of SAAR-Ns, processing incoming and outgoing employee paperwork, filing employee self-reports, validating clearance inquiries from Naval Support Activity South Potomac (NSASP) Pass and ID office, conducting NATO and CNWDI indoctrinations, updating DISS to reflect special accesses, and verify position descriptions for clearance requirements.

C.4.3.27 Provide employees assistance with foreign clearance guide requirements, update Outside the Continental United States (OCONUS) travel spreadsheet and approve OCONUS travel orders through the

DTS.

C.4.3.28 Maintain control of all NSWCDD visitor badges and conduct daily inventories to verify badges have been returned. Report any lost badges to the Physical Security Lead.

C.4.3.29 Escort shred contract personnel.

C.4.3.30 Ensure visitors have been properly vetted through NSASP and access control or security and are issued the appropriate badge.

C.4.3.31 Before visitors arrive, escorts should make sure their own workspace is sanitized of all information that is classified, CUI, and PII.

C.4.3.32 When entering other areas, escorts should announce that un-cleared visitors are in the area; ensure co-workers turn over, cover, or store classified, CUI, or PII; walk with the visitors under escort; and visually observe the visitors under escort until they leave NSWCDD or another escort assumes the duty. Where it is possible, escorts should turn the “blue light” on when un-cleared visitors are in the area.

C.4.3.33 All classified, CUI, or PII information displayed on computer screens must be sanitized.

C.4.3.34 The escort is required to maintain constant visual contact on personnel escorting.

C.4.4 TASK ORDER MANAGEMENT

C.4.4.1 Progress Report

The Contractor shall submit a Contracting Management Report (CDRL A001).

C.4.4.2 In Process Reviews (IPR)

The Contractor shall conduct IPRs with the Government on a quarterly basis but shall be scheduled as needed with the Contracting Officers Representative (COR). (CDRL A002) Attendees at the IPRs shall include the personnel required to discuss contract activity, progress, status, and any issues affecting tasking or action items assigned. The Contractor's IPR presentation shall contain, at a minimum, the following written information in viewgraph form:

C.4.4.2.1 Contract Number, Period of Performance, Total Value

C.4.4.2.2 An organization chart listing all personnel who are currently working under the contract. The chart shall show areas of responsibility and lines of control. The chart shall include and identify Sub-contractor personnel.

C.4.4.2.3 Description of each task completed or currently being performed, to include the SOW or POA&M Number and a detailed description of technical efforts to date, schedules, progress made, problems encountered and resolved, recommendations, and planned efforts.

C.4.4.2.4 Identification of any administrative problems encountered in performance of the contract.

C.4.4.2.5 A graphic depiction of expenditures and work hours.

C.4.4.2.6 The format for the IPR presentation shall be mutually agreed upon by the Contractor and COR.

Agenda items shall address the status of action items from the previous IPR and pertinent issues.

Emergent/future interest items and meetings shall be discussed during the IPR. A listing of Action Items, Meeting Minutes with attached attendance listing which reflects those attending; organization/code;

telephone and e-mail address; shall be provided to the Government Representatives. (CDRL A003)

C.4.4.3 Plan of Action and Milestones (POA&M)

The Contractor shall develop a POA&M for each work element. (CDRL A004)

C.5 OTHER DIRECT COSTS

C.5.1 Travel

(a) During the performance of this effort, Contractor personnel may be required to travel to other sites, CONUS, to support program activities. Travel to these destinations may be required during each year of performance over the life of the Task Order and shall be specified in each POA&M. It is the responsibility of the Contractor to ensure personnel maintain passports current and effective for the total period of performance at no cost to the Government.

(b) All travel shall be conducted in accordance with Clause HQ B-2-0020, and shall be pre-approved by the COR. All travel requests shall be submitted to the specific Government work area Subject Matter Expert (SME), in writing or by electronic mail, and must show the appropriate order number, the number of people traveling, the number of days for the trip, the reason for the travel, and any high-cost or unusual costs expected. For local travel, also known as day travel, the travel itinerary will include “reasonable cost” wherever possible based on the start time of the scheduled event being supported.

(c) The Contractor is not authorized to perform any travel that is not in conjunction with this Task Order.

The Contractor shall document in a Trip Report (CDRL A005) actions performed during travel along with reconciling the travel for each period of performance.

(d) The numbers of trips and types of personnel traveling shall be limited to the minimum required to accomplish work requirements and shall be coordinated with the COR via the specific work area Program Manager during the development of each POA&M.

(e) The following travel is anticipated, but not limited to, in support of meetings:

NSWCDD Dam Neck Activity, Virginia Beach, VA NSWCDD Dahlgren, VA Fredericksburg, VA Washington, DC Chesapeake, VA Laurel, MD Wallops, VA

C.5.2 Materials and Equipment

During the performance of this Task Order, there will not be materials or equipment authorized for purchase.

C.6 GOVERNMENT FURNISHED EQUIPMENT AND MATERIALS

C.6.1 Government Furnished Office Space

The Government will provide office space in NSWCDD spaces on a full-time basis for Contractor personnel supporting this contract except for the Program Manager. On site office space shall include a desk, computer, chair, telephone, and printer access.

C.6.2 Government Furnished Materials

The Government will provide additional GFE and Government Furnished Information (GFI), as required by the individual tasking to the Contractor. Laptops will be provided as GFP and can be found in Attachment J.2.

The Contractor shall report the status of all GFE. (CDRL A006)

C.6.3 Courier Operations

The Contractor shall operate Government vehicles for the purpose of courier operations, support in security assist visits to satellite commands on and off base and delivery of destruction items to the NSA Classified Material Conversion (CMC) or other designated destruction facility. The Contractor is required to deliver and pick up material from designated areas.

C.7 MANDATORY REQUIREMENTS

The following mandatory requirements shall be maintained throughout the life of the contract.

C.7.1 Facility Security Clearance: The Prime Contractor shall possess a Facility Security Clearance at the TOP SECRET level.

C.7.2 Personnel Security Clearances (NSWCDD): All personnel providing support under this requirement must possess clearances at the SECRET level or higher. Interim SECRET clearances are acceptable.

C.7.3 Personnel Security Clearances for NSWCDD location: Security Coordinator and the Physical Security Coordinator labor categories and three (3) Access Control Clerks shall be able to obtain final TOP SECRET Clearances and must be SCI eligible (Tier 5 adjudication) within 18 months after award.

C.7.4 Personnel Security Clearances for DNA location: Lead Access Control Clerk, Shipping/Receiving Clerk, Security Coordinator, and Physical Security Coordinator labor categories must be able to obtain final TOP SECRET Clearances and must be SCI eligible (Tier 5 adjudication) within 18 months after award.

C.8 GENERAL REQUIREMENTS

C.8.1 CORE HOURS/COVERAGE

C.8.1.1 The Contractor shall provide required services and staffing coverage for NSWCDD during normal business hours. Coverage shall be Monday through Friday, between 0600 and 2000 for access control per section C.8.1.2 and 0700-1700 for the classified control center support. The hours for security coordinators and physical security will be Monday through Friday 0800-1600 hours. If variances are required from the normal operating hours, the Contractor shall obtain concurrence from the Government Contracting Officer’s Representative (COR)/Subject Matter Expert (SME) prior to working any varied hours. Assigned escort support services may be required to work after hours, weekends and/or holidays. Due to program requirements, there may be occasional call-backs for weekend or other evening hours outside of normal hours of operation for security coordinators.

C.8.1.2 Contractor employees are encouraged to work in accordance with the same schedules as the Government office that they are supporting. However, it is solely at the Contractor’s discretion, which Federal and State holidays they choose to observe.

C.8.2 ABSENCE/LATE ARRIVAL/TEMPORARY REPLACEMENT

C.8.2.1 The Government SME and office being supported shall be notified by the Contractor via telephone or email for any delayed arrival or absence of Contractor personnel.

C.8.2.2 Contractor shall arrange for temporary backfill personnel when Contractor personnel are away from the work site for more than five (5) consecutive days.

C.8.2.3 For shorter periods of absence, the need for the Contractor to provide a temporary backfill will be identified by the Government SME at the time the Contractor notifies the Government of the Contractor employee’s absence.

C.8.3 OVERTIME

C.8.3.1 Overtime may be required to complete emergent requirements. When required, overtime shall be requested by the Contractor Program Manager to the COR and Contracting Officer. Contracting Officer and COR must approve overtime request prior to overtime being worked. In accordance with 52.222-2 Payment for Overtime Premium, overtime shall be requested in writing. Overtime that is not approved in advance will not be authorized for payment.

C.8.4 TELEWORK

C.8.4.1 In accordance with SEA 5252.216-9122 Alt 1 - Level of Effort Clause Alternate I (May 2010) and concurrence from the Government SME and COR, teleworking at an alternative worksite is permitted in instances of base closure, NSWCDD closure or unique situations with no more than 10% of the work being performed at an alternative worksite. Telework is also dependent upon the type of work being performed.

C.8.4.2 Telework is permitted subject to Government requirements. In the event of telework, the Contractor shall track all Government Furnished Property, listing personnel, asset tag numbers and serial numbers for all

NMCI computer equipment in the Contractor’s possession for telework. (CDRL A006) All equipment shall be returned to the Government by the end of the Task Order or when equipment is no longer in use, whichever comes first.

C.8.5 WORK ETIQUETTE

All Contractor personnel performing on the Government site shall be responsible for maintaining satisfactory standards of performance, conduct, and integrity. Each employee is expected to maintain business standards of behavior in the workplace. Appropriate business attire suitable for dealing with the public shall be worn.

The Contractor shall demonstrate professional demeanor, mannerisms, and teamwork while getting the job done in a timely and efficient manner. The Contractor shall be able to communicate effectively and professionally both orally and in writing with all levels of personnel. Profanity or abusive language is strictly prohibited in Government spaces. Harassment in any form is also prohibited in Government spaces. The Government may require transfer or removal from this Task Order any employee who is identified as a potential threat to the health, safety, security, general well-being, or operational mission of the facility or its population.

C.8.6 SKILLS AND TRAINING

(a) The Contractor shall provide capable personnel with qualifications, experience levels, security clearances, and necessary licenses, certifications, and training required by Federal, State, and Local laws and regulations. Training necessary to ensure that personnel performing under this contract maintain the knowledge and skills to successfully perform the required functions is the responsibility of the Contractor. Training necessary to maintain professional certification is the responsibility of the Contractor.

(b) The Contractor shall maintain all licenses/certifications for operating Government vehicles (car, truck, van, forklift, and/or man-lift) both on-site at NSWCDD and off-site in the performance of duties associated with the tasking of this contract, throughout the performance of this contract. The license(s)/certification(s) shall be obtained and maintained at the Contractor's expense.

(c) The Contractor shall complete all mandatory training as prescribed by the Government for General, Safety, EMS, etc. topics. These training requirements are accessed through Government web based training (WBT), classroom training, or combination of both.

(d) The Contractor shall maintain a quarterly running Mandatory Training Completion Log.

C.9 SECURITY

C.9.1 Personnel providing direct support to this effort will be required to have at a minimum a DoD SECRET clearance at time of award and must be able to obtain the full clearance requirements if higher level of clearance and accesses is required per Section C.7. The Contractor will have access to information and compartments with a SECRET/TOP SECRET/SCI classification. All deliverables associated with this Task Order are unclassified unless otherwise specified. Access to classified spaces and material and generation of classified material shall be in accordance with the attached DD Form 254. The Department of Defense Contract Security Classification Specification (DD Form 254) provides the security classification requirements for this Task Order. The Contractor shall obtain facility and personnel security clearances as required by the Department of Industrial Security Program prior to starting to work on tasks requiring clearances. Access to classified spaces and material and generation of classified material shall be in accordance with the 32 CFR 117 published 12 December 2020, effective 24 Feb 2021 and the NSWCDD Command Security Manual. Some work accomplished under this Task Order will be classified up to the level of TOP SECRET/SCI. All data generated under this Task Order shall be classified in accordance with the guidance in the 32 CFR 117 and the NSWCDD Command Security Manual. All personnel providing support under this requirement must possess clearances at the SECRET level or higher. Interim SECRET clearances are acceptable. Contractor must comply with guidelines specified on the DD254. The Contractor shall submit completed clearance packages within ten (10) calendar days of identification of any increased security requirements.

C.9.2 The Contractor shall require access to Non-SCI intelligence is in order to update and format documentation in support of branches and program offices. Access to SCI (SI/TK/HCS-P/G/KLM/KLM-R) is required in order to access and reside in SCIF spaces, as well as to manage documentation various SCI program. Access to NATO is required to obtain a SIPRnet and/or JWICS account. CUI, to include and PII, generated and/or provided under this Task Order shall be safeguarded and marked as specified in DoD 5400.7- R Chapters 3 and 4. All above accesses are needed to support and provide the administrative and clerical support to NSWCDD. Access to U-NNPI is required for NMCI NNPI COI computers in NSWCDD and NSWCDD DNA spaces.

C.9.3 Facility Clearance: The Contractor shall possess and maintain a TOP SECRET facility clearance as verified within the National Industrial Security System (NISS).

C.9.4 Physical Security: No safeguarding of classified material is authorized at the Contractor facility.

Safeguarding will only be required at the actual performance site listed in Block 13 on the DD 254. Actual performance site’s security regulations and guidelines will apply.

C.9.5 Electronic Spillages (ES) are unacceptable and pose a risk to national security. An electronic spillage is defined as classified data placed on an information system (IS), media or hardcopy document possessing insufficient security controls to protect the data at the required classification level, thus posing a risk to national security (e.g., SCI) onto collateral, Secret onto Unclassified, etc. The Contractor’s performance as it relates to ES will be evaluated by the Government. ES reflects on the overall security posture of NSWCDD and a lack of attention to detail with regard to the handling of classified information of IS security discipline and will be reflected in the Contractor's performance rating. In the event that a Contractor is determined to be responsible for an ES, all direct and indirect costs incurred by the Government for ES remediation will be charged to the Contractor.

C.9.6 NSWCDD Security will continue to be responsible for the corrective action plan in accordance with the security guidance reflected on the DOD Contract Security Classification Specification - DD254.

NSWCDD Security will identify the Contractor facility and contract number associated with all electronic spillages during the investigation that involve Contractor support. NSWCDD Security will notify the Contracts Division with the Contractor facility name and contract number, incident specifics and associated costs for clean-up. The Contracting Officer will be responsible to work with the Contractor Facility to capture the costs incurred during the spillage clean up. The Contractor is also responsible for taking Information Security Awareness training annually, via their Facility Security Officer (FSO), as part of the mandatory training requirements. If a spillage occurs additional training will be required to prevent recurrence.

C.9.7 Portable Electronic Devices (PEDs)

C.9.7.1 Non-government and/or personally owned portable electronic devices (PEDs) are prohibited in all NSWCDD buildings with the exception of personally owned cell phones which are authorized for use in spaces up to and including Controlled Access Areas. The Contractor shall ensure the onsite personnel remain compliant with this PED policy. NSWCDD instruction defines PEDs as the following: any electronic device designed to be easily transported, with the capability to store, record, receive or transmit text, images, video, or audio data in any format via any transmission but are not limited to, pagers, laptops, radios, compact discs and cassette players/recorders. In addition, this includes removable storage media such as flash memory, memory sticks, multimedia cards and secure digital cards, micro-drive modules, ZIP drives, ZIP disks, CD-RWs, DVD-RWs, MP3 players, iPADs, digital picture frames, electronic book readers, kindle, nook, cameras, external hard dish drives, and floppy diskettes.

C.9.7.2 Personal Wearable Fitness Devices (PWFDs) marketed primarily as fitness or sleep devices are allowed in all Navy spaces where collateral non-SCI, classified information is processed, stored, or discussed up to and including secret. User must ensure PWFD is compliant with all requirements in NAVADMIN 216/15, Cyber Hygiene Authorization to use Personal Wearable Fitness Devices (e.g., FitBit, Jawbone UP, etc.) in Navy Spaces, dated 14 September 2015 and register PWFD in the NSWCDD Fitness Device Tracker.

C.9.7.3 Personnel requiring the use of Medical Portable Electronic Devices (MPEDS) must submit Form NSWCDD 5239/1 for SCIF authorization to the Special Security Officer (SSO). For SAFF, authorizations follow the guidance provided by the Government Special Access Program Security Officer (GSSO).

Authorizations for use in SAPFs that are co-utilized within NSWCDD SCIFS require coordination between both the GSSO and SSO. For authorizations to use MPED in Collateral Classified spaces, submit form to the Special Programs Branch, Code 1053.

C.9.7.4 PED’s belonging to an external organization shall not be connected to NSWCDD networks or infrastructure without prior approval from the NSWCDD Information Assurance and Compliance Branch. This approval will be granted using the TARIS form and action tracker process. Personally owned hardware or software shall not be connected or introduced to any NSWCDD hardware, network or information

C.9.7.5 Navy-issued peripheral:

Government procured headsets with or without microphones must be wired, use either a 3.5 millimeter (mm) audio jack or universal serial bus (USB) port, cannot contain active-noise cancelling functionality and may be used on systems and may be used on systems of classification up to and including collateral Top Secret. The headsets are considered unclassified when unplugged, and must be unplugged when not in use within classified spaces or when classified discussions are taking place in unclassified spaces.

C.9.7.6 Government procured Bluetooth earbuds and headsets that do not require a USB dongle or any other physical connection to enable wireless connectivity are allowed for use on government issued tablets, phones, and personal devices in telework environments or unclassified general office space where no classified discussion are occurring.

C.9.7.7 Web cameras may only be used on systems at the classification level of the space. For example, in a collateral SECRET open storage area an external web camera may be commented to the SECRET workstation only. No camera pass is required for these devices.

C.9.7.8 Government provided printers and/or scanners are authorized in a telework environment. Users must ensure that any paper or media containing CUI or unclassified information not authorized for public release is safeguarded by locking in a drawer, cabinet or room. CUI and unclassified information not approved for public release must be returned to the worksite for destruction.

C.9.7.9 Government issued peripherals may be used on personal devices.

C.9.7.10 While connected to any Navy network, whether on site or while in a telework environment, the use of headsets with microphones and web cameras are restricted to official government duties.

C.9.8 Operations Security (OPSEC)

C.9.8.1 Contractor personnel shall follow OPSEC concepts and principles in the conduct of this requirement to protect critical information, personnel, facilities, equipment, and operations from compromise.