5___PWS__14_MAR_2014_1029__QATAR_COMSEC_FINAL__.docx

Attachment 1 Performance Work Statement

PERFORMANCE WORK STATEMENT

FOR

COMMUNICATIONS SECURITY (COMSEC) MANAGERS

Qatar QA-D-OAB

AFLCMC/WFMM

TABLE OF CONTENTS

1.0 DESCRIPTION OF SERVICES

1.1 Introduction

1.2 Support

1.3 Overview of Services

1.4 Functional Requirements

1.5 Work Situation

1.8 Operations Security (OPSEC)

1.9 Mobilization/Demobilization

2.0 SERVICES SUMMARY (SS)

3.0 GENERAL INFORMATION

3.1 Management and Administration

3.2 Policy

3.3 Contractor Identification

3.4 Access

3.5 Personnel Management and Training

3.6 Contractor Quality Control

4.0 DECLARATION OF EMERGENCY

1.0 DESCRIPTION OF SERVICES

1.1 Introduction. Pursuant to the Letter of Offer and Acceptance (LOA, Case QA-D-OAB), between the United States Department of Defense and Qatar, the contractor will provide assistance and support for Communications Security (COMSEC) material and equipment. This effort is done via Foreign Military Sales (FMS) to support various secure coalition interoperability programs between the United States and Qatar.

1.2 Support. Provide a primary and alternate COMSEC Manager in support of various Qatar interoperability programs between the US and Qatar. The COMSEC Managers will maintain COMSEC equipment (C4I systems) facilities in the following primary locations: Al-Udeid Air Base, Qatar.

1.3 Overview of Services. This contract provides COMSEC managerial support for Qatar through FMS case QA-D-OAB. COMSEC managerial service will be in support of DOD provided COMSEC equipment and material released to the Qatar Ministry of Defense (MOD) in support of the United States Central Command validated interoperability programs that interface with the US Embassy – Doha Qatar, Office of Military Co-operation (OMC) – Doha, Qatar, the National Security Agency (NSA), the Department of the Air Force Security Assistance and Cooperation Directorate (AFSAC), as well as other agencies/offices as deemed necessary. Contractor personnel shall perform accountability, training, central receiving, temporary storage, transfer services, and training for DOD-provided COMSEC equipment, COMSEC documents, keying and other COMSEC related materials from U.S. COMSEC National Distribution Authorities (i.e. National Security Agency (NSA), or where the material/equipment will be received from) to/from the Qatar MOD to the appropriate U.S. National Distribution Authorities (NDA). Contractor personnel shall report to USCENTCOM J3-C AND/OR J6-OC for coordination and instructions on all issues concerning COMSEC equipment, keys/keymat, and associated programs released to Qatar MOD. Additionally, contractor personnel will coordinate any cryptographic key material and equipment issues with USCENTCOM J3-C AND/OR J6-OC.

1.3.1 Primary COMSEC Manager shall provide the following COMSEC managerial duties:

1.3.1.1 Manage the U.S./Qatar FMS COMSEC account in accordance with U.S. Government (USG) policy as outlined in NAG-14C, NAG-18A and NSA CSS Policy Manual No. 3-16 (contractor should check for updates to these guidelines to ensure compliance with most recent information). Perform duties related to the receipt, custody, issue/distribution, safeguarding, accounting, training and destruction of classified and non-classified USG provided COMSEC material and equipment. Responsible for the maintenance of up-to-date records and the submission of all required accounting reports. Be thoroughly familiar with the procedures for handling COMSEC material. In fulfilling these responsibilities, the COMSEC Manager will perform the following duties:

1.3.1.1.1 Protect COMSEC material and deny access to individuals without a valid security clearance and a valid need-to-know.

1.3.1.1.2 Keep informed of any new requirements or modifications to existing requirements to be serviced by the COMSEC account.

1.3.1.1.3 Receive, receipt for, and ensure the safeguarding and accounting of all COMSEC material issued to the COMSEC account, and when applicable, produced within the element.

1.3.1.1.4 Maintain COMSEC accounting and related records as outlined in NAG-14C, NAG-18A, and NSA CSS Policy Manual 3-16.

1.3.1.1.5 Conduct an inventory semiannually and upon appointment of a new Primary COMSEC Manager, by physically sighting all COMSEC material issued to the COMSEC account, and reconcile this inventory with the Central Office of Record (COR) as mandated in NSA CSS Policy Manual 3-16.

1.3.1.1.6 Perform routine destruction of COMSEC material when required, or effect other disposition of material as directed by the COR or Controlling Authority. The COMSEC Manager shall establish Emergency & Precautionary Destruction Plans as part of the account’s Emergency Action Plan (EAP). Contractor shall conduct excercises of the COMSEC account EAP (s) per NSA CSS Policy Manual 3-16 on a semi-annual basis.

1.3.1.1.7 Submit transfer, inventory, destruction, and possession reports to the COR, at least monthly or as directed.

1.3.1.1.8 To ensure the integrity of COMSEC material (i.e. key or equipment); inspect the implemented protective technologies upon initial receipt, during each inventory and prior to issuing/return of material to authorized QATAR MOD personnel.

1.3.1.1.9 Ensure the prompt and accurate entry of all amendments to COMSEC publications held by the account.

1.3.1.1.10 Ensure that required page checks are accomplished on all keying material as specified in NAG-14C, NAG-18A, and NSA CSS Policy Manual 3-16 and on all publications when they are received, returned from hand receipt, transferred, destroyed, when a change of Primary Manager occurs, and when posting amendments which include replacement pages to ensure completeness of each publication.

1.3.1.1.11 Ensure that all accountable COMSEC material shipped outside of the account’s organization is packaged and shipped as specified in NAG-14C, NAG-18A, and NSA CSS Policy Manual No. 3-16. Ensure that all material received is inspected for evidence of tampering and, if at an element where the size of the COMSEC account is so large as to prevent the COMSEC Manager from personally checking security packaging and markings, performing page checks and posting amendments, such actions may be performed by other individuals appropriately cleared and authorized, provided these individuals are properly instructed by the COMSEC Manager. If suspected physical incident is found, submit a report immediately, in accordance with NAG-14C, NAG-18A, and NSA CSS Policy Manual 3-16.

1.3.1.1.14 Ensure that appropriate COMSEC material is readily available to properly cleared and authorized individuals whose duties require its use. If the material is classified, verify that the individuals are cleared to the level of the material. Issue material to users by means of a hand receipt (SF-153), as provided for in NAG-14C, NAG-18A, and NSA CSS Policy Manual 3-16, and advise recipients of their responsibility for safeguarding the material until it is returned to the manager.

1.3.1.1.15 Report immediately to USCENTCOM CCJ6 COMSEC Branch, the US Embassy in QATAR/OMC and the COR of any known or suspected incidents of a COMSEC incident, personnel incident, or physical incident, and submit a report in accordance with the procedures outlined in NAG-14C, NAG-18A, and NSA CSS Policy Manual 3-16. USCENTCOM CCJ6 will be informed on all COMSEC incidents and provided copies of all official reports.

1.3.1.1.16 Verify the identification, clearance and need-to-know of any individual requesting access to the records and/or material associated with the COMSEC account.

1.3.1.1.17 Perform COMSEC audits at QATAR sub-accounts and COMSEC user sites and units that use and operate USG provided COMSEC material and equipment, when required and at the direction of the OMC and USCENTCOM. Routinely check SECRET Internet Protocol Router Network (SIPR Net) emails for traffic, and send notifications of any unofficial physical security violations, based on sound judgment, to those parties that are responsible and/or accountable of USG Physical Security violations.

1.3.1.1.18 Serve as the primary advisor to the QATAR Armed Forces regarding all COMSEC issues and liaison between the U.S./QATAR FMS COMSEC account, OMC, and USCENTCOM.

1.3.1.1.19 Provide COMSEC user training and assistance to QATAR Military units and Military personnel on the proper handling and use of USG provided COMSEC material and equipment. Train QATAR MOD personnel in the proper custodianship, safeguarding and operation of DOD-provided COMSEC equipment, encryption key and other COMSEC related materials, zeroing equipment, basic trouble-shooting (when necessary), and emergency destruction procedures, in order to satisfy requirements for secure interoperability.

1.3.1.1.20 COMSEC Managers shall submit a monthly report outlining any activity/findings/corrective actions within 5 calendar days after the completion of the month being reported. The purpose of these reports is to provide AFSAC an oversight of the COMSEC managerial duties performed within country. Contractor format is acceptable and shall be delivered to the Primary Contracting Officer Representitive (COR), the Secondary COR, Contracting Officer and OMC.

1.3.1.1.21 COMSEC Managers shall maintain a current, written Emergency Protection Plan for the protection of such material during emergencies. This Emergency Plan must consider both natural disasters and hostile actions (such as enemy or terrorist attack, mob action, or civil uprising). Emergency Plans at OCONUS entities must include Emergency Destruction Procedures (EDPs).

1.3.1.1.21.1 COMSEC Managers Emergency Protection Plan shall include planning for hostile actions to safely evacuate or securely destroy COMSEC material, By contrast, planning for natural disasters should be directed toward maintaining security control over the material until the situation stabilizes.

1.3.1.1.21.2 COMSEC Managers Emergency Protection Plan shall be reviewed annually and updated as necessary, or whenever changes in the local environment dictate an update to the plan.

1.3.1.1.21.3 COMSEC Managers Emergency Protection Plan shall be coordinated with USCENTCOM J3-C and/or J6-OC personnel and all authorized personnel at the facility must be aware of the existence of the plan.

1.3.1.1.21.4 COMSEC Managers reasonable efforts should be made under deteriorating situations to evacuate COMSEC equipment.

1.4 Functional Requirements.

1.4.1 The contractor shall provide United States citizens who are NSA certified COMSEC Managers for the QATAR COMSEC program located at the COMSEC facility at Al-Udeid Air Base, Qatar.

1.4.1.1 Contractor personnel shall be U.S. Citizens.

1.4.1.2 Contractor personnel shall be a graduate of NSA COMSEC course (normally a three day course) within six months from their appointment date as a COMSEC Manager (IAW NSA CSS Policy Manual No. 3-16, paragraph 16).

1.4.1.3 Contractor personnel shall attend USCENTCOM Foreign Disclosure (FD) training course.

1.4.1.4 Contractor personnel shall be thoroughly familiar with the proper handling and safeguarding of Communications Security materials and equipment.

1.4.1.5 Contractor shall be thoroughly familiar with civil codes.

1.4.1.6 Contractor personnel shall be able to research and understand National Security Agency (NSA) Information Assurance (IA)/COMSEC regulations and USCENTCOM agency operational directives.

1.4.1.7 Contractor personnel shall be thoroughly familiar with Operational Security strategies and methods.

1.4.1.8 Contractor personnel shall be familiar with the publications and directives that will be used to support daily and special operations.

1.4.1.9 Contractor personnel shall be able to develop, prepare, and deliver COMSEC training to the Host Nation hand receipt/COMSEC responsible officers.

1.4.1.10 Contractor personnel shall be able to clearly articulate concerns, including recommended Courses of Actions (COAs) both verbally and in writing, to senior U.S. and Host Nation leadership.

1.4.1.11 Contractor personnel shall possess the ability to work independently without technical guidance.

1.4.1.12 Contractor personnel shall be experienced in theory of all aspects of the COMSEC Equipment/Systems.

1.4.1.13 Must have a strong background in C4ISR Systems and Networks.

1.4.1.14 Must be able to lift at least 60 pounds without assistance.

1.4.1.15 Must be able to draft messages in proper format.

1.4.1.16 Must have working knowledge and be able to perform basic troubleshooting of secure telephone systems (i.e. Secure Communications Internet Protocol (SCIP) devices, Secure Analog and Data Service devices, SECTERA Wireline Terminal (SWT) and Secure Telephone Equipment (STE)).

1.4.1.17 Must have background in COMSEC Management principles.

1.4.1.18 Must have good background in downloading and transferring of electronic key using all current fill devices.

1.4.1.19 Must have strong background in all cryptographic/COMSEC equipment used by QATAR.

1.4.1.20 Must be able to perform Over-The-Air-Rekey (OTAR) and Over-The Air-Transfer (OTAT).

1.4.1.21 Must maintain accountability to properly execute emergency supersession quickly when order is given.

1.4.1.22 Must have computer skills in Microsoft Office products to include Outlook, Word and Excel.

1.4.1.23 Must have strong background in tactical and strategic communications systems and networks.

1.4.1.24 Must be able to maintain highest accountability and pass all COMSEC inspections/audits whether scheduled or unscheduled.

1.4.1.25 Contractor may be required to work occasional overtime to support the Host Nation.

1.4.1.26 Knowledge of the learning process and how to transfer knowledge to less qualified personnel, including the ability to express thought in both oral and written communications. (Instructor Training Ability)

1.4.1.27 Contractor personnel shall possess a high degree of tact, diplomacy and the ability to work and cooperate harmoniously with the QATAR military and civilian personnel.

1.4.1.28 COMSEC managers will be provided by the FMS customer all peripheral items, to include internet services and international phone line in the COMSEC Vault, required to conduct COMSEC operations (i.e. laptops, cables, phones, office supplies, and any other items deemed necessary). The internet services is required to support the daily operations of the COMSEC account in their coordination and correspondence with USG agencies (NSA, DISA, and USCENTCOM) and Vendor/Manufactures, research of equipment usage and operations instructions and the requirement to submit monthly and quarterly reports and inventories to the above agencies.

1.4.1.29 Contractor Performance Assessment Reporting System (CPARS) Applicability. FAR Part 42.1502 directs all Federal Agencies to collect and report past performance information on service contracts with a value of $1Mil or more. The CPARS assesses a Contractor’s performance and provides a written record on a given contract during a specified period of time. All CPARS are accomplished using the Naval Sea Logistics Center’s Contractor Performance Assessment Reporting System (CPARS) found on the web at http://www.cpars.csd.disa.mil/. This system requires the Contractor to provide a designated representative to receive the CPARS electronically. The Contractor shall submit their representative’s name, telephone number, and e-mail address with their proposal. The initial CPARS for this contract will be completed on the anniversary of contract award.

1.4.1.30 Security Clearance. The contractor shall be able to obtain and maintain a final SECRET security clearance.

1.5 Work Situation. The contractor shall provide coverage at the specified government site between the hours of 0800 and 1600, or as agreed to by the using activity, but one COMSEC manager must be available on-call 24 hours a day/7 days a week. Normal duty days will be Sunday through Thursday, excluding American Embassy selected holidays. Work is normally conducted in an office environment on a 40 hour per week basis. Occasional overtime is anticipated. Contractor personnel are designated Mission Essential/Critical.

1.5.1 Recognized Holidays. Follow American Embassy selected holidays.

1.5.2 In performing the tasks contained above, the contractor will interface with a variety of other Department of Defense (DOD) and USG organizations and offices, and other US contractors. Contractor personnel will not provide direction or otherwise interject themselves into relationships between the US and other government contractors, but are expected to make recommendations and offer solutions that adhere to USG policies. Services provided under this requirement are considered non-personal services.

1.5.3 Must be able to drive a vehicle and obtain an International Drivers License. Private vehicle is required. Some locations may require the use of 4WD vehicle. QATAR will not furnish a driver for the vehicle.

1.5.4 This is an unaccompanied requirement. Dependents are not recommended. If dependents accompany contractor, it will be at the contractor’s expense.

1.5.5 Housing: Government quarters are not available. Contractor shall need to supply housing.

1.5.6 US Logistics support (ICASS) will not be available.

1.5.7 Report to Instructions: Personnel will report to the US Liaison Office (OMC) for direct oversight. The OMC is located at the American Embassy, P.O. Box 2399 Doha, Qatar (near Al-Thelam Street, Ad-Dawhah, Qatar). Check in with the OMC is required on a daily basis, more often if requested by the OMC, telephone number 011-974-4496-6749.

1.5.8 Certifying Official or Designee: The Certifying Official or designee will ensure the requirements are met to store and maintain COMSEC material at the COMSEC Facility located at the Qatar Air Lift Wing MX Squadron, Building 9451, Al-Udeid Air Base Qatar. The certifying official will be the:

Director, National Security Agency 15131 Account Registration Central Office of Record (COR) 9800 Savage Rd, Suite 6574 Fort George G. Mead MD, 20755 Voice: (410) 854-8526 Unclassified Fax: (410) 854-6631

1.5.9 Alternate Certifying Official or Designee: The Director, National Security Agency’s Deputy or designated Officer in charge in the absence of the Director.

1.6 Duration of Task/Period of Performance. The overall period of performance for this effort will commence upon contract award and continue for a 12 month (base period) and will be followed by two 24 month option periods (if exercised).

1.7 Travel Requirements. TDY travel is anticipated for this requirement. All travel must be pre-approved by the Contracting Officer.

1.8 Operations Security (OPSEC). Contractor shall employ sound Operations Security (OPSEC) principles and procedures in the performance of their duties and responsibilities IAW DOD and AF OPSEC publications.

1.9 Mobilization/Demobilization. Mobilization shall include all activities and associated costs for transportation of the contractor’s personnel, equipment, and operating supplies to the work site. Mobilization will not be considered as work in fulfilling the contract requirements for commencement of work. Demobilization shall include all activities and costs for transportation of personnel, equipment, and supplies not required or included in the contract from the work site. Demobilization will only be authorized in the event of the completion of the contract with no anticipation of a follow-on contract, no continuing funds, or the unforeseen removal of contractor personnel from the worksite for their own safety through no fault of their own (based on the official direction of U. S. Government). All demobilization travel must be pre-approved by the Contracting Officer unless it occurs under an emergency situation. Payment by DFAS through Wide Area Workflow (WAWF) will be made as demobilization or mobilization occurs, after presentation of a proper invoice showing specific costs and supporting evidence of the charges.

2.0 SERVICES SUMMARY (SS). The Services Summary outlines the performance objectives that relate directly to standards of performance required to meet mission needs. The performance threshold briefly describes the minimum acceptable overall levels of service required for each required level of service. These thresholds are essential to mission success.

SS-3 Maintain COMSEC accounting and related records

3.0 GENERAL INFORMATION

3.1 Management and Administration. The contractor shall provide necessary resources and infrastructure to manage and administer the services required in the contract.

3.2 Policy. The contractor shall be familiar with applicable DOD acquisition and FMS policy, law, regulations, and guidance required to perform efforts as defined in this performance work statement.

3.3 Contractor Identification. Contractor employee shall identify themselves as a contractor employee when answering phones and corresponding by e-mail. The contractor employee shall wear visible contractor-provided identification either as part of or attached to their outer clothing all times while on duty which clearly identifies the individual as a contract employee.

3.4 Access. The US and QATAR governments will provide the contractor access to facilities as required to perform duties in accordance with this contract. The contractor shall be subject to all appropriate military rules and regulations while working on a military installation.

3.5 Personnel Management and Training. The contractor shall be responsible for the employment, training, guidance, and supervision of qualified personnel to accomplish the services required under the contract. The contractor shall accomplish the assigned work by employing and utilizing qualified personnel with the appropriate combination of education, training, and experience.

3.6 Contractor Quality Control. The contractor shall use their own internal quality control program and procedures to identify, prevent, and ensure non-recurrence of defective services. The government shall receive quality services meeting the requirements of the contract through implementation of the Contractor’s Quality Control Program and Procedures.

4.0 EVACUATION/DECLARATION OF EMERGENCY

4.1 Evacuations. If the Chief of the Mission orders a mandatory evacuation of some or all personnel, the level of assistance provided to employees of the contractor shall be the same as the level of assistance provided to other U.S. Embassy Mission Essential staff/employees. In the event of a non-mandatory evacuation order, the contractor shall maintain personnel on location sufficient to meet contractual obligations under this contract until instructed to evacuate by the Contracting Officer, Contracting Officer’s representative, or Chief of the Mission.

The Contracting Officer or the Contracting Officer’s representative may issue oral instructions to the contractor in cases of emergencies, e.g. enemy or terrorist activity or natural disaster that causes an immediate possibility of death or serious injury to contractor personnel. Such oral instructions shall be confirmed in writing in 48 hours or as soon as practicable after the emergency incident has subsided.

Medical Evacuation Costs: Should contractor personnel require medical evacuation from QATAR for whatever reason, all costs will be borne by the contractor.

4.2 Declaration of Emergency. During a state of emergency, as declared by National Command Authority or Commander-in-Chief, the contractor may be required to expand or curtail the level of service listed in the PWS IAW DODI 3020.37, Continuation of Essential DOD Contractor Services during Crisis. The American Embassy will provide specific instructions during the emergency as to which services are considered essential and to what level to include hours of operation.