encl2c_pws - Operational Planning Support 5 March 2025.docx

PERFORMANCE WORK STATEMENT (PWS)

Follow-on to Previous Contract and Task Order Number:

1. Contracting Officer’s Representative (COR). .

MANDATORY - ALL REQUESTED INFORMATION MUST BE COMPLETED

a. Primary COR. See DITCO Additional Text G1 - Points of Contact

b. Alternate COR. See DITCO Additional Text G1 - Points of Contact

c. Property Administrator See DITCO Additional Text G1 - Points of Contact

Anna Ervin

DISA Operations, Plans, & Exercises Directorate (J-3/5/7)

HC1047

6910 Cooper Ave Fort Meade, MD 20755

(301) 225 – 3415

Anna.ervin2.civ@mail.mil

2. Contract or Task Order Title. J-3/5/7 Operational Planning and Strategic Support

3. Background. The J-3/5/7 Directorate directs and synchronizes the Defense Information Systems Agency (DISA) Network (DISN) in support of Joint Cyberspace Operations. The Directorate exercises under the authority and direction of the DISA Director over assigned and attached DISA Network Operations (NetOps) forces in the execution of the cyber mission. The J-3/5/7 Directorate provides command and control capability for the DISA Director, along with situational awareness of the Agency’s infrastructure, computing, and enterprise services.

4. Objectives: The objective of this effort is to provide knowledgeable and skilled individuals for the Operational Planning Directorate with the goal of obtaining a team of personnel, experienced professionals who will support the operational planning requirements set forth across the agency.

5. Scope. Operational Planning is a deliberate process that determines how to use military capabilities in time and space to achieve objectives while considering the associated risks. It is the cornerstone to the agency’s planning operations and provides a unifying purpose around which actions and resources are focused.

DISA’s strategic goals and key objectives fundamentally represent a roadmap for achieving the Agency and Department’s vision of information superiority in defense of our nation. The Subject Matter Experts (SMEs) will have experience with supporting these requirements, by setting goals, developing methods, and ensuring progress in the organization reaches its goals. The SMEs will possess an intrinsic understanding of these operational capabilities needed to successfully execute DISA’s Operational Planning mission.

The Government may require surge support during the base or any option period, and surge modifications will be within the scope of the contract and provide increased support for the defined task areas of this PWS. Surge support over the life of the contract will not exceed 10% of the contractor’s total proposed cost/price for the base and all option periods, excluding any six-month extension of services pursuant to FAR 52.217-8.

· Task Area 1: Task Order Management

· Task Area 2: Operational Planning Support (J5)

· Task Area 3: Strategic Initiatives

· Task Area 4: Program Assessment (OAB)

6. Performance Requirements.

6.1: Task Area 1- Task Order Management

The Contractors Shall:

6.1.1 Provide a monthly status report monitoring the quality assurance, tasks, program reviews identified that align with the requirements of the task order.

6.1.2 Manage issuance of laptops to all onboarding contractors. This includes coordinating with the agency’s J4 Directorate to get the laptops transferred to vendor’s hand receipt and ensure all equipment is returned and accounted for at the end of the contract.

Deliverables:

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the Contracting Officer; 1 copy of the transmittal letter with the deliverable to the Primary COR.

6.2: Task Area 2 – Operational Planning Support

The Contractors Shall:

6.2.1 Provide expertise and input to operations planning, future operations planning, future cyber operations in support of DISA J-5 Planning Directorate. This includes providing technical expertise regarding the development of strategic and operational plans resulting from the joint planning process (JPP) that contain a variety of viable cyberspace options, including mission analysis, course of actions development, campaign plans, and order development.

6.2.2 Provide support to three concurrent DISA Joint Planning Groups (JPGs) and attend concurrent DoD or CCMD working groups that are feeding information to the DISA planning efforts.

6.2.3 Provide contingency planning support, as a cross-functional team member, to DISA, CCMD, USCYBERCOM or JFHQ-DODIN Joint Planning Group (JPG) or Operational Planning Team (OPT). This support will be provided as necessary to any evolving world crisis that requires DISA planning support. This contingency planning support will require expertise in the areas of Communications/Signal Requirements Planning; C4 Resiliency and Force Package Development Planning, and Cyber DCO/CSSP Planning.

6.2.4 Provide analysis of national and DOD level directives, including (but not limited to) National Military Strategy, National Defense Strategy, DISA Charter, DoD CIO Capability Programming Guidance.

6.2.5 Identify and describe a set of related activities that are linked to those strategic goals as identified in the agency strategic plan influenced/impacted by the J3/5/7.

6.2.6 Synchronize these activities with Agency strategy (imperatives, goals, tasks, and objectives) to ensure the sum of the steady state and initiatives result in successful accomplishment of the agency key objectives in sustainment as well as during contingency and crisis action planning.

6.2.7 Design and develop cyberspace plans and order documents for designated cyberspace operation efforts involving the collaboration among DOD cyberspace Areas of Operation and Sectors and other organizations with cyber-related missions and cyber de-confliction, synchronization, coordination and assessment policies; and processes and full-spectrum cyber coordination and reporting procedures.

6.2.8 Support deliberate and contingency planning to include the management and implementation of the Adaptive Planning and Execution Enterprise (APEX) process across the four operational activities and planning functions, and seven execution functions. This support ranges from strategic guidance and direction to completion of the agency’s missions into deliberate plans through internal and external collaboration and coordination with all mission partners.

6.2.9 Support the development, revisions, and coordination of campaign plans and orders.

6.2.10 Ensure synchronization of mission into deliberate plans through internal and external collaboration and coordination.

6.2.11 Provide expertise and input to Operational Planning Teams (OPT’s), Working Groups and other B2C2WG events where directed or requested in support of the Commander’s objectives and desired operational end-state.

6.2.12 Participate in COA development for cyberspace operations and planning efforts to deter attacks against the DODIN AOs and Sectors.

6.2.13 Support the development and depiction of various cyberspace Operational Environments, identify the desired outcomes associated with the environment, information requirements related to outcomes, indicators associated with monitoring progress and identification of data sources necessary to satisfy information requirements.

6.2.14 Coordinate, de-conflict, and facilitate communications with all applicable staff elements, subordinate headquarters/commands, service cyber components, CCMD, components, and agencies with cyber-related missions.

6.2.15 Conduct contingency campaign planning in support of anticipated campaigns or operations.

6.2.16 Conduct crisis action planning using a modified or truncated JPP to produce planning recommendations and products in a time constrained environment to meet the J-5 Director’s directed Timelines.

6.2.17 Support and attend weekly Joint Planning Groups (JPGs) and direct future planning

6.2.18 Provide in-depth deliberate planning expertise and guidance for the development of policy, plans, processes, procedures, and governing directives secure, operate and defend mission areas and provide input to address operational gaps, prioritize and validate requirements and be prepared to modify development-planning efforts based on the changing cyberspace environment.

Deliverables:

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the Contracting Officer; 1 copy of the transmittal letter with the deliverable to the Primary COR.

6.3: Task Area 3 – Strategic Initiatives

The Contractor Shall:

6.3.1 Provide expert strategic and technical communication to the Senior Leaders within the J-3/5/7 Directorate.

6.3.2 Provide principal expertise to identify, coordinate, review, and assess impact of emerging policies, directives, guidelines, DoD initiatives, governance processes, and technologies as they pertain to operations, contingency and crisis action planning. This includes support to the joint information environment, cyberspace operations command and control, IT service management concepts, practices, and applications with an emphasis on service operations.

6.3.3 Be familiar with commercial industry and government developed cyber security technologies that enable a layered defensive strategy across large enterprise networked environments.

6.3.4 Work with Senior Leadership to plan, develop, and implement the Directorate’s highest priorities and future concepts.

6.3.5 Develop information papers and assessment reports for decision authorities to make program/policy improvements.

6.3.6 Provide weekly status updates of assigned products to include Engagement Reports, Executive Summaries, After Action Reports, Meeting Minutes, Strategic Coordination Plans, Strategic Communication documents, Standard Operating Procedures (SOP)s, General Administration (GENADMIN)s, Tactics, Techniques, and Procedures (TTP) checklists, strategic calendar updates, talking points, and CONOPS.

6.3.7 Advise Senior Leaders across the J-3/5/7 on matters pertaining to the directorate’s strategy, talking points and the most effective methods of communicating information to specific audiences. This includes researching issues and monitoring the communications environment (media, senior official’s speeches/quotes/etc.) for DISA equities and provide senior leader awareness and support to government lead on the progress of organization strategy and coordinate with assessment division for implementing assessment plan.

6.3.8 Identify and describe a set of related activities that are linked to those strategic goals as identified in the agency strategic plan influenced/impacted by the Directorate. This includes synchronizing these activities with agency key objectives and ensure the sum total of the steady states and initiatives result in successful accomplishment of the agency key objectives in sustainment as well as during contingency and crisis action planning.

6.3.9 Develop policy, technical papers, white papers, and Concept of Operations (CONOPS). Participate in cyber panels, meetings, and working groups as a subject matter expert and advisor as it pertains to directorate’s engagements. Coordinate with all applicable staff elements, subordinate headquarters, Service Cyber Components, Combatant Command (CCMD), components, and agencies with cyber related missions. Provide support for security cooperation activities coordinated through Combatant Commands.

6.3.10 Advise the directorate on the integration and synchronization of the Directorate’s mission across all echelons and warfighting domains.

6.3.11 Develop concepts, strategies, and plans to enhance operational effectiveness of Command and Control within the full spectrum of Cyberspace/Communications Operations. This includes providing analysis and recommendations of new processes to complex, difficult, and time sensitive issues and problems.

6.3.12 Advise Senior Leadership on the establishment and orchestration of knowledge management in order to enable decisions and operations, to include: information management, comprehensive battle rhythm management, and technology enhancements. This includes participation in collaboration and discussions on the high side.

Deliverables:

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the Contracting Officer; 1 copy of the transmittal letter with the deliverable to the Primary COR.

6.4: Task Area 4 – Program Assessment (OAB)

The Contractor Shall:

6.4.1 Provide services to facilitate integration into the operational environment and to help expose and address any NetOps related issues.

6.4.2 Partner with the assigned program/service Program Executive Office (PEO) to determine what level of NetOps certification is needed and when appropriate, work with the PEO to being the program to the governance board. This may include drafting/managing the development of artifacts for specific programs/services.

6.4.3 Assist with Integrated Process Teams (IPT) meetings for programs, services, and capabilities assigned to gather documentation, identify, and record operational risks with the Integrator programs. This effort will involve documenting operational requirements for designated Integrators, as well as developing, organizing, and distributing presentation slide decks; participating in weekly OAB meetings; managing and updating the OAB Knowledge Management (KM) sites and pages; and preparing meetings/special projects. This will ensure the OAB can address DISA new programs, services, and capabilities and operational gaps are adequately documented.

6.4.4 Support the role of the Governance Board Secretariat with the following tasks:

· Establish and validate OAB invite lists.

· OAB Full Invite List

· OAB Go-No-Go Invite List

· OAB Informational Invite List

· In coordination with OAB integrators prepare OAB 101, Full OAB, Informational, and Go/No-Go Briefing PowerPoint slide decks.

· Coordinate OAB senior level pre-brief meeting invites with stakeholder executive assistants.

· Manage and maintain the OAB Outlook Calendar

· Schedule all OAB meetings as directed by the OAB Secretariate using the OAB calendar.

· Set all OAB Teams meetings to automatically record, transcribe, and generate the attendee list.

· Coordinate OAB meeting logistics, (i.e., OAB calendar invites, briefing location, room setup, equipment operations, Teams launch, bridge activation and cleanup afterwards.

· Take written and verbal conference room attendance, record votes, and publish meeting minutes per OAB Secretariat direction and/or process guide.

· Support and assist in the development and update of the OAB Charter, Process Guide and OAB Integrator tool videos.

· Attend DISA Knowledge Management Working Group (KMWG) and maintain the J37 knowledge management portal, site, and pages on SharePoint.

· Review OAB selected programs’ Concept of Operations (CONOPS) and Service Operations Annex (SOX) for completeness, accuracy, and clarity; submit a comments matrix for each reviewed document to the PM and OAB integrator.

· Attend and participate in J37 integrator weekly sync meetings.

· Monitor the DISA Enterprise Tasks Management System (ETMS) for J-37 assigned tasks on NIPRNet and SIPRNet and notify J37 leadership of assignments.

· Prepare Weekly Activity Reports (WAR) on NIPRNet and SIPRNet.

· Gather information from meetings, war reports and integrators to develop J37 SITREP’s; and make distribution of SITREP via SIPRNet.

· Maintain and distribute the OAB/J7 TTX PM packet as needed.

· Assist/Support the Secretariat and integrators with the new program vetting process and filing (OAB Request Form),

· Track acquisition stakeholder meetings and secure ARB, CEP, SPC, CFT documents. Identify, summarize, and document any issues/concerns of OAB integrators or J3 participates related to service operations risk. Distribute to the J37 when complete.

· OAB Integration tool administration for OAB Secretariat: Adding program cards, quarterly item’s view, checklist manager, data import/export, permissions group, document repository and OAB executive Dashboard view.

Deliverables:

Standard Distribution*

*Standard Distribution: 1 copy of the transmittal letter without the deliverable to the Contracting Officer; 1 copy of the transmittal letter with the deliverable to the Primary COR.

7. Performance Standards.

8. Incentives.

Both positive and negative incentives shall be applied. In general, positive incentives, in the form of favorable CPARS assessments, may be used to reward significantly outstanding performance on the contract. Negative CPARS assessments shall be used to document performance which fails to meet the stated performance standards. Negative performance shall also be considered by the Government when determining whether the exercise of an option is in the Government’s best interests.

9. Place of Performance.

Mission Location:

Alternative work sites allow for regular telework or remote work flexibilities. Regardless of where work is performed, the Contractor shall ensure that work is completed effectively and that mission needs and requirements are met, without degradation of services. Also, the contractor may be required to account for the physical location of their personnel should this information be requested by the COR. The Contractor shall propose on-site rates for all work performed at an alternative work site.

Local travel to and around the mission location may be required throughout the period of performance; this travel will not be reimbursed. Local travel is hereby defined to mean any and all travel within a 50-mile radius of the primary place of performance.

IMPORTANT NOTE: If work must be performed in DISA Headquarters facilities, a written waiver request must be submitted and approved by WSD. The maximum number of seats available in the government site for this effort is up to 12 FTEs (space waiver tracking #_______ for Government use only).

Secondary Place of Performance – Contingency Only. As determined by the Contracting Officer’s Representative (COR), contractor employees may be required to work at a secondary place of performance (e.g., home, the contractor's facility, or another approved activity within the local travel area) in cases of unforeseen conditions or contingencies (e.g., pandemic conditions, exercises, government closure due to inclement weather). Additionally, the contractor may be required to account for the physical location of their personnel should this information be requested by the COR. Non-emergency/non-essential contractors should not report to a closed government facility. Contractor shall prepare all deliverables and other contract documentation utilizing contractor resources. To the extent possible, the contractor shall use best efforts to provide the same level of support as stated in the PWS. In the event the services are impacted, reduced, compromised, etc., the Contracting Officer or the contractor may request an equitable adjustment pursuant to the Changes clause of the contract.

10. Period of Performance.

Base Period: 1 May 2025 – 30 April 2026 Option Period 1: 1 May 2026 – 30 April 2027 Option Period 2: 1 May 2027 – 30 April 2028 Option Period 3: 1 May 2028 – 30 April 2029 Option Period 4: 1 May 2029 – 30 April 2030

11. Security Requirements. This section supplements Block 13 of the Government provided DD Form 254, Contract Security Classification Specification. The following security requirements shall apply to this effort.

The contractor shall coordinate visits with site Point of Contract (POC)s providing at least a 72-hour notice (or according to each site security requirements) prior to any site access. Contractor personnel without security clearances performing any task under this PWS must be escorted by cleared DISA personnel (civilian, military, or contractor).

References:

a. DISA End User Access Agreement, 11 February 2021

b. DISA Policy Letter, Unauthorized Connections to Network Devices, 11 September 2013

c. DISA Instruction 240-110-8, Information Security

d. DISA Instruction 240-110-36, Personnel Security

e. DISA Instruction 240-110-38, Industrial Security

f. DISA Instruction 240-110-43, Insider Threat Program

g. DISA Instruction 630-230-19, Cybersecurity

h. DoD Manual 5200.01, Vol 1-3 Information Security Program, 24 February 2012

i. DoD Manual 5200.02, Procedures for the DoD Personnel Security Program, 3 April 2017

j. DoD Instruction 5200.48, Controlled Unclassified Information (CUI), 6 March 2020

k. 32 CFR Part 117, “National Industrial Security Program Operating Manual (NISPOM)”, 24 February 2021

l. Security Executive Agent Directive 4, National Security Adjudicative Guidelines, 8 June 2017

m. DoDM 5400.07, Freedom of Information Act Program

n. DoDI 5230.24, “Distribution Statements for DoD Technical Information,” January 10, 2023

o. DoD Instruction 8510.01, “Risk Management Framework for DoD Systems,” July 19, 2022

11.1 Facility Security Clearance. Work performed under this contract/order is up to the Top Secret and will require Sensitive Compartmented Information (SCI) access eligibility for some personnel. Therefore, the company must have a final Top Secret Facility Clearance from the Defense Counterintelligence and Security Agency (DCSA) Facility Clearance Branch.

11.1.2 Invalidated Facility Clearance. Companies with invalidated facility clearances (including those in partnerships, subcontracts, and Joint Ventures) are not eligible to bid on or be awarded any new or additional DISA classified contracts, subcontracts, or receive additional classified information except for information necessary for the completion of your current classified contracts. In addition, those companies with invalidated facility clearances will not be permitted access to all DISA networks. Performance on any DISA classified contracts, at any location, will not be authorized until it has been granted a Facility Security Clearance (FCL) at the appropriate level by DCSA.

11.2 Security Clearance. All personnel performing on or supporting a DISA contract/order in any way shall be U.S. citizens. The personnel security requirements for this contract/order cover the individuals supporting the Task Areas delineated in the table below. Contractor personnel must possess the interim or final security clearance eligibility delineated in the table below when performance starts.

11.2.1 Individuals supporting PWS Tasks / Subtasks that require(s) a final Top Secret security clearance will, immediately upon hire, require SCI access eligibility adjudicated by the Department of Defense (DoD) Consolidated Adjudication Facility or other federal adjudications facility to perform their duties. Processing for SCI eligibility will be coordinated with the supporting Government Security Manager and will begin immediately upon start of duty performance under this contract/order.

All SCI* work under this contract/order will be monitored by COR/ACOR.

*The COR/ACOR must be indoctrinated into SCI to monitor the work.

11.3 Investigation Requirements. All personnel requiring Top Secret and SCI access under this contract/order shall undergo a favorably adjudicated Tier 5 (T5) investigation (formerly known as a Single Scope Background Investigation (SSBI)) as a minimum requirement. Enrollment into Continuous Evaluation current within 5 years and reflected in Defense Information System for Security (DISS), would meet the requirement for a current Periodic Reinvestigation (PR).

11.3.1 All personnel requiring Secret access under this contract/order shall undergo a favorably adjudicated Tier 3 (T3) Investigation formerly known as a National Agency Check, Local Agency Check and Credit Check or Access National Agency Check and Inquiries as a minimum investigation. Enrollment into Continuous Evaluation current within 5 years and, reflected in DISS, would meet the requirement for a current PR.

11.3.2 The contractor is required to have personnel cleared with an interim or final Top Secret or Secret (as specified in the table located in section 11.2) at contract start date. If contractor personnel are replaced during performance of the contract, replacement personnel should also have interim or final clearance Top Secret or Secret (as specified in the table located in section 11.2).

11.4 Visit Authorization . Visit requests shall be processed and verified through the DISS to Security Management Office (SMO) DKABAA10. DISS visits for contracts/orders are identified as “Other” or “TAD/TDY” and will include the Contract/Order Number of the contract/order in the Additional Information section. Contractors that do not have access to DISS may submit visit authorizations by e-mail in a password protected .pdf to the COR/ACOR specified in PWS/SOW Section 1.0.

*Prior coordination with the DISA COR should be made via email to ensure the Visit Authorization Letter (VAL)/ Visit Authorization Request (VAR)/ Visit Termination Notification (VTN) process is agreed upon and properly secure.

11.4.1 VAR Package. VARs must be received via email and require pre-approval from the assigned DISA COR five business days in advance of the report date. The VAL/VAR/VTN should be sent via email to the appropriate COR. The VAL/VAR/VTN should be sent using in a locked “Zip” file in one e-mail and then followed-up by another e-mail with the password to unlock the Zipped file, because it contains sensitive information covered by the Privacy Act.

Documents to include in the VAR Package:

1. Inter-office Memorandum (IOM)

2. DD Form 254 Prime and/or Sub (Good Standing approval emails for current option year)

3. DISS verification of Visit Authorization by Security Manager

4. (Optional: see NOTE below) Contractor VAL signed by the Contractor Facility Security Officer (FSO)

NOTE: If DISS is not available, the VAL must contain the following information on company letterhead

· Company name, address, telephone number, facility security clearance

· CAGE CODE

· Contract/Order Number

· Name, SSN, date and place of birth, and citizenship of the employee intending to visit, email address, and phone number

· Certification of personnel security clearance and any special access authorizations required for the visit (type of investigation & date and adjudication date & agency)

· Name of COR/Alt COR

· Dates or period the VAL is to be valid (i.e., Start date / End date)

11.4.2 VTN Package. The Contractor FSO will forward a VTN letter to the DISA COR identified in the PWS/TO/Sub for all employees leaving the contract/task order/subcontract.

11.4.2.3 In addition, the DISA CORs and security managers shall inform the DISA Security Office when contractor personnel are removed for cause from a contract supporting DISA. This step is being added to prevent contractor personnel removed for security related issues from returning to DISA without appropriate vetting. This step will also provide security with pertinent information to make an informed decision regarding potential contractor employees’ access to secure facilities and sensitive information. “For Cause” is information regarding an individual that falls into one or more of the actions or incidents that are within one of the 13 adjudicative guidelines as cited in the Security Executive Agent Directive (SEAD) 4:

a. Allegiance to the United States

b. Foreign Influence

c. Foreign Preference

d. Sexual Behavior

e. Personal Conduct

f. Financial Considerations

g. Alcohol Consumption

h. Drug Involvement and Substance Misuse

i. Psychological Conditions

j. Criminal Conduct

k. Handling Protected Information

l. Outside Activities

m. Use of Information Technology

Other actions:

• Incidents involving violence in the workplace or harassment.

• Misuse of time.

• Inspector General or General Counsel related inquiries.

• Failure to comply with security policies and procedures.

• Other reasons that prompted removal of a contractor.

The VTN must contain the following information on company letterhead

· Company name, address, telephone number, facility security clearance

· CAGE CODE

· Contract/Order Number

· Name, SSN, date and place of birth, and citizenship of the employee, email address, phone number

· Date contractor CAC was collected

· Name of COR/Alt COR

· Termination Date

· Reason for Termination:

*Any VAL/VAR submitted without the above information will be denied.*

11.5 Security Contacts. DISA Security Personnel can be contacted for Industrial or Personnel Security related issues at (301) 225-4039 or via mail at:

For Center or Directorate-specific security related matters, contact the Directorate or Center Security Manager at:

Name: Craig Donnelly Phone Number: 301-225-8003 E-mail: craig.h.donnelly3.civ@mail.mil

11.6 Information Security and other miscellaneous requirements.

11.6.1 Contractor personnel shall comply with all local security requirements including entry and exit control for personnel and property at the Government facility.

11.6.2 Contractor employees shall be required to comply with all Government security regulations and requirements. Initial and periodic safety and security training and briefings will be provided by Government security personnel. Failure to comply with Government security regulations and requirements shall require the company to provide the Government with a written remediation/corrective action plan; furthermore, failure to comply with such requirements can be cause for removal and the contractor will not be able to provide service on this contract/order.

11.6.3. Contractor employees with an incident report in DISS who have had their access to classified suspended will not be permitted to fill positions requiring access to classified information on a DISA contract/order.

11.6.4 The Contractor shall not divulge any information, classified or unclassified, about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the DoD facility. Identification shall be worn and displayed as required.

11.6.5 The authority for the contractor personnel to regain access must be granted by DISA Chief of Security.

11.6.5.1 DISA retains the right to request removal of contractor personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government.

11.6.5.2 DISA retains the right to revoke contractor personnel access to DISA facilities and networks, who violates one or more of Security Personnel Adjudicative guidelines, harassment or violence in the workplace while assigned to a contract clearly conflict with the interest of the Government.

11.6.5.3 If contractor employee is accused of violating state or federal laws and/or Government professional conduct policies or regulations, then the Government may require that such contractor employee be removed from Government premises and/or that such contractor employee be removed from supporting this contract, pending the duration and outcome of a Government investigation if the Contracting Officer finds that the conduct or violation alleged has the potential to negatively interfere with contract performance or operations at a Government facility. Only the Contracting Officer can make such a request on behalf of the Government. Removal of contractor employee shall not negatively impact contract performance.

11.6.6 Contractor personnel will generate or handle documents that contain Controlled Unclassified Information (CUI) at the Government facility. Contractor personnel will generate or handle documents that contain Proprietary, Contract Sensitive, or similarly designated information at the Government facility. Contractor personnel will have access to, generate, and handle classified material up to TOP SECRET SCI level only at the Government location(s) (Ref: Block 8 Place of Performance on DD254) and listed in the place of performance section of this document. All contractor deliverables shall be marked in accordance with DoDM 5200.01, Vol. 3, DoD Information Security Program: Protection of Classified Information; DoDI 5200.48, Controlled Unclassified Information (CUI); and DoDM 5400.07, Freedom of Information Act Program, unless otherwise directed by the Government. The contractor shall comply with the provisions of the DoD Industrial Security Manual for handling classified material and producing deliverables. The contractor shall comply with DISA Instruction 630-230-19, Cybersecurity.

11.6.7 The Contractor shall afford the Government access to the contractor’s facilities, installations, operations, documentation, databases and personnel used in performance of the contract/order. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability and confidentiality of data or to the function of information technology systems operated on behalf of DISA or DoD, and to preserve evidence of computer crime.

11.6.8 Courier Card or Letter. Contractors required to courier classified information or equipment, up to Secret/Top Secret shall receive a Government Issued Collateral Courier card from the Government Security office prior to couriering classified information or material in support of official duties. The contractor will only be issued a collateral courier card to hand carry classified information or equipment if there are no other means of safely and securely transporting or sending the classified information or equipment. The contractors must also have a requirement to courier any classified information or equipment on a weekly basis. A courier letter can be issued by the Government SM if there is a requirement to courier periodically. All contractors will follow the 32 CFR Part 117, “National Industrial Security Program Operating Manual (NISPOM)”, 24 February 2021, DoD Manual 5200.01, Information Security, and the collateral courier card standard operating procedures that is issued by the DISA Security Office. A collateral courier card or letter will only be issued up to the clearance level of the individual contractor.

12. Government Furnished Property (GFP)/Government-Furnished Equipment (GFE)/ Government-Furnished Information (GFI).

A. GFP will be provided for this contract as indicated in the GFP attachment included at solicitation, distributed at award and incorporated via the GFP Module in PIEE. GFP shall be managed IAW the terms of FAR 52.245-1, corresponding GFP DFARS clauses and additional DITCO Instructions incorporated in award.

Contractors shall accept and/or report provided GFP via the Shipping and Receiving document in the GFP module upon acceptance and/or IAW Additional DITCO Instruction H9. Serially managed items are provided to the contractor by DoD and require all events identified in DFARS 252.245-7005 (and/or any subsequent DFARS or Agency GFP reporting requirements) to be reported by the contractor.

Contractors in possession of GFP shall provide the COR or PA an annual report of all GFP in it’s possession to include the item description, make, model, serial number, IUID, and last inventory date; the report should be minimally provided on an annual basis and 30 days prior to the expiration of any performance period (base and options) IAW with Additional DITCO Instruction H9.

Deliverable:

*Standard Distribution: 1 copy of the transmittal letter with the deliverable to the Primary COR.

13. Other Pertinent Information or Special Considerations. N/A

a. Identification of Possible Follow-on Work. Potential follow-on work will be based on future mission requirements

b. Identification of Potential Conflicts of Interest (COI). N/A

c. Identification of Non-Disclosure Requirements. The contractor shall obtain and maintain Non-Disclosure Agreements (NDA) for each employee assigned to the contract/TO. Initial NDAs shall be signed within one week of contract/TO award, and NDAs shall be kept current through the entirety of the period of performance as employee turnover occurs. The contractor shall ensure that all employees assigned to the contract have executed NDAs on file as of the date of the Monthly NDA Status Report, which shall include names and NDA status of all current employees assigned to the contract.

Deliverable:

*Standard Distribution: 1 copy of the transmittal letter with the deliverable to the Primary COR.

d. Packaging, Packing and Shipping Instructions. Preservation, packaging, and packing of deliverable items called for hereunder shall be in accordance with the Contractor's best commercial methods to prevent deterioration and damage during shipment, handling, and storage and to ensure safe arrival at destination..

e. Inspection and Acceptance Criteria. Wide Area Workflow invoices shall contain appropriate attachments supporting contractor billing.

f. Property Accountability. The contractor shall submit the Consolidated Product Listing for IGCE/RFQ/EPL/MI&RR in addition to complying with all requirements of DFARS 252.211-7003. See DITCO Additional Text H2, Requirement to Submit an Electronic Product List for additional information.

g. Transitioning.

1. Transition-In (Phase In). All key personnel/key positions must be onboard at start of the period of performance. 50 percent total staffing must be complete within two weeks of the start of the PoP and 100 percent within 30 days.

2. Transition-Out (Phase Out). You will need to collaborate with the MP at least 120 days or sooner, prior to the end of the contract, to develop a transition-out plan IAW FAR 52.237-3.

i. Training. Contractor employees may be required to take periodic mandatory training courses provided through the agency, such as records management training, Controlled Unclassified Information (CUI) training, and other training required by statute, regulation, DoD, or DISA policy. No other training of contractor personnel shall be provided by the Government unless authorized by the Contracting Officer.

14. Section 508 Accessibility Standards.

Enclosure 4a, PWS Page 1 of 11 Pages 2015/Version 9

Page 21 of 16 Pages