RFP_HC102818R0102.docx

HC102818R0102

Section SF 1449 - CONTINUATION SHEET

STATEMENT OF WORK

STATEMENT OF WORK (SOW)

as of Aug 1, 2018

1. Contracting Officer’s Representative (COR).

a. Primary COR.

Department of Defense Activity Address Code (DODAAC):

H98272

1 Overcash Avenue, Bldg 12 Chambersburg, PA 17201

b. Alternate COR.

2261 Hughes Ave. Ste 117 Lackland AFB, 78236

2. Task Order Title. Access control and physical security support for Defense Information Systems Agency (DISA) Computing Data Center locations managed by the Data Center Line of Business (LOB) as part of the DISA EcoSystem.

3. Background. The Data Center is the physical structure supporting computer processing for DISA. The Data Center LOB is responsible for physical security and access management at Data Center managed locations. This contracted effort is required to provide security, entry control, video surveillance, and other traditional security duties supporting all Data Center buildings aligned to the Data Center LOB.

4. Objectives. To provide required support services to the Data Center LOB in the planning and delivery of physical security, visitor control, and access management for DISA Data Center locations. Contractors must meet defined security clearance requirements in order to adequately support the security requirements of DISA critical facilities and resources.

5. Scope. To provide physical security, visitor control, and access management for the following DISA Data Center locations:

· Mechanicsburg, PA

· Montgomery, AL

· Ogden, UT

· Oklahoma City, OK

· San Antonio, TX.

The Government may require surge support during the base or any option period, and surge modifications shall be within the scope of the contract and provide increased support for the defined task areas of this SOW. Surge support over the life of the contract shall not exceed 20% of the contractor’s total proposed cost/price for the base and all option periods, excluding any six-month extension of services pursuant to FAR 52.217-8.

6. Specific Tasks.

Task 6.1. Security Specialist/Access Management.

This task requires 12 Full Time Equivalents (FTEs), each requiring Secret IT-II access clearance. Staffing of the 12 FTEs shall be as follows:

· 3 FTEs performing at Mechanicsburg, PA

· 3 FTEs performing at Montgomery, AL

· 3 FTEs performing at Ogden, UT

· 3 FTEs performing at Oklahoma City, OK

FTEs are required to perform onsite, 100% of the time covering the hours of 0600-2200 hours, Monday through Friday, excluding Federal Government Holidays. Contractor shall staff 2 FTEs during DISA core hours of 0730-1600 to ensure coverage to receive visitors, deliveries, and packages without leaving the security control desk unattended for periods greater than 10, unless otherwise authorized by site or security manager. The contractor shall provide on-call support, as needed, to ensure 24 hours/ day, 7 days/ week, 365 days/ year support is available in case of emergencies.

6.1.1: Provide visitor access validation support using the visitor In/Out-process listed below in items a-g for contractors, vendors, service providers, and all other visitors requesting access to a Data Center facility.

Contractor Shall:

a) Validate visitor identification

b) Ensure visitation documents are complete

c) Capture Common Access Control (CAC) information from visitor

d) Verify visitor clearance level

e) Verify Visitor Access Request (VAR)

f) Ensure proper badging is provided per process

g) Notify/coordinate with visitor POC

6.1.2: Respond appropriately to routine requests and inquiries related to physical security/entry control policy and processes.

6.1.3: Perform physical security checks of the facility on a recurring basis. Contractor Shall:

a) Check all doors and gates to ensure they are secured and operating properly

b) Monitor and walk-through administrative areas ensuring classified documents and media are secured and properly labeled according to security policy

c) Check that all security container controls/locks are functioning as expected and properly annotate the security container check-sheet used for tracking and auditing purposes

d) Report any issues/discrepancies to the Site/Security Manager immediately, following reporting process

6.1.4: Operate and monitor the automated facility entry access control system and closed-circuit television (CCTV) systems.

Contractor Shall:

a) Verify all video feeds are operational and recording as expected

b) Verify all doors, card readers, control panels, and intrusion detection systems are operational and reporting properly in the Access Control System

c) Report all component failures to the Site/Security Manager immediately, following reporting process

6.1.5: Perform testing of duress alarm system in accordance with the local host installation policy and procedures.

6.1.6: Open and Close Collateral Open Storage Areas (COSA) classified at the SECRET level including changing lock combinations following manufacturing guidelines and outlined security procedures.

6.1.7: Maintain documentation to include:

a) Visitor tracker/entry control logs

b) Visitor Access Requests (VAR)

c) Visitor Sponsor POC tracking

d) Security Blotters

e) Physical Security Checklist/Logs

f) Security documentation required for scheduled/adhoc audits

g) Other physical security related documentation

6.1.8: Perform patrol/inspection of facility (internal and external) and identify, document, and report any suspicious activities, packages, and vehicles. Notify Site/Security Manager immediately of any discrepancies, following reporting process.

6.1.9: Perform inspections of arriving/departing packages including boxes, cartons, handbags, briefcases, toolboxes, etc.

a) Identify any controlled substances, unauthorized electronic devices or media, and weapons

b) Reports all findings to the Site/Security Manager via written notice

6.1.10: Ensures appropriate marking of classified and unclassified documentation and controlled information when handling documents (ie: using appropriate cover sheets).

6.1.11: Monitor all classified shredders and verify they are operating properly and shredding materials to the appropriate size standards for the type of materials being shredded (i.e.: FOUO, Secret, Classified, etc.). Properly dispose of shredded materials in appropriate Government provided trash receptacle.

6.1.12: Contractor shall provide DD2875 System Access Request (SAR) security support. Access to Joint Personnel Adjudication System (JPAS) is required to complete this subtask.

Contractor Shall:

a) Validate SAR is properly filled out

b) Validate clearance is active and date of clearance is correct using JPAS

c) Reject SAR if items a & b are not accurate

d) Process all SARs within 2 hours of receiving the document with 99% accuracy

6.1.13: Contractor shall perform escort duties for visitors/vendors that are non-cleared and need assistance with visit logistics, as directed by the Site/Security Manager.

Task 6.2: Armed Security Access Control Support. This task requires 15 FTEs, each requiring Secret IT-II clearance access. All FTEs required under this task shall perform at San Antonio, TX. Task requires each of the 15 FTEs to be onsite 100% of the time; 24 hours a day, 7 days a week, 365 days a year. ALL FTES PERFORMING UNDER THIS TASK SHALL BE ARMED WHILE ON DUTY. Contractor shall ensure adequate coverage to receive visitors and deliveries/packages throughout the day without leaving the security control desk unattended for periods greater than 10 minutes.

6.2.1: Visitor support using the visitor In/Out-processes for DISA staff, contractors, vendors, service providers and other visitor requesting access to a DISA Data Center facility.

Contractor Shall:

a) Validate visitor identification

b) Ensure visitation documents are complete

c) Capture Common Access Control (CAC) information from visitor

d) Verify visitor clearance level

e) Verify Visitor Access Request (VAR)

f) Ensure proper badging is provided per process

g) Notify/coordinate with visitor POC

6.2.2: Respond appropriately to routine requests and inquiries related to physical security/entry control policy and processes.

6.2.3: Perform physical security checks of the facility on a recurring basis.

Contractor Shall:

a) Check all doors and gates to ensure they are secured and operating properly

b) Monitor and walk-through administrative areas ensuring classified documents and media are secured and properly labeled according to security policy

c) Check that all security containers controls/locks are functioning as expected and properly annotate the security container check-sheet used for tracking and auditing purposes

d) Report any issues/discrepancies to the Site/Security Manager immediately, following reporting process

6.2.4: Operate and monitor the automated facility entry access control system and closed-circuit television (CCTV) systems.

Contractor Shall:

a) Verify all video feeds are operational and recording as expected

b) Verify all doors, card readers, control panels, and intrusion detection systems are operational and reporting properly in the Access Control System

c) Report all component failures to the Site/Security Manger immediately, following reporting process.

6.2.5: Perform testing of Duress Alarm System in accordance with the local host installation policy and procedures.

6.2.6: Open and Close COSA classified at the SECRET level including changing lock combinations following manufacturing guidelines and outlined security procedures.

6.2.7: Maintain documentation including:

a) Visitor tracker/entry control logs

b) Visitor Access Requests (VAR)

c) Visitor Sponsor POC tracking

d) Security Blotters

e) Physical Security Checklist/Logs

f) Security documentation required for scheduled/adhoc audits

g) Other physical security related documentation

6.2.8: Perform patrol/inspection of facility (internal and external) and identify, document, and report any suspicious activities, packages, and vehicles. Notify Site/Security Manager immediately of any discrepancies, following reporting process.

6.2.9: Perform inspections of arriving/departing packages including boxes, cartons, handbags, briefcases, toolboxes, etc.

a) Identify any controlled substances, unauthorized electronic devices or media, and weapons.

b) Reports all findings to the Site/Security Manager via written notice

6.2.10: Ensures appropriate marking of classified and unclassified documentation and controlled information when handling documents (ie: using appropriate cover sheets).

6.2.11: Monitor all classified shredders and verify they are operating properly and shredding materials to the appropriate size standards for the type of materials being shredded (i.e.: FOUO, Secret, Classified, etc.). Properly dispose of shredded materials in appropriate Government provided trash receptacle.

6.2.12: Adhere to government and security requirements, processes, and regulations. Contractor shall provide DD2875 SAR security support. Access to JPAS is required to complete this subtask.

Contractor Shall:

a) Validate SAR is properly filled out

b) Validate clearance is active and date of clearance is correct using JPAS

c) Reject SAR if items a & b are not accurate

d) Process all SAR within 2 hours of receiving the document with 99% accuracy

6.2.13: Contractor shall perform escort duties for visitors/vendors that are non-cleared and need assistance with visit logistics, as directed by the Site/Security Manager.

6.2.14: Management/Supervision. The contractor shall provide a Point of Contact (POC) who shall perform management oversight responsibilities IAW a Quality Control Plan. The initial Quality Control Plan shall be delivered to the Government quality control POC within 30 days of contract award. The contractor POC shall frequently assess the guard schedule, morale or other issue, and be the main contact source for the Government POC and the posted guards for resolving any on-site guard or security related concerns.

In accordance with DODI 3020.17, the functions under this contract are considered to be mission essential and the contractor shall be required to continue to perform at the same level during national crisis. The contract shall maintain contingency plan(s) for these tasks to provide reasonable assurance of continuation during crisis conditions. The contractor shall identify to the Government any employees working under this contract having military mobilization recall commitments. The contractor shall notify the Government upon activation or recall of any such personnel. As directed by the Government Contracting Officer, the contractor may be required to reallocate man-hours for contingency support, priority changes, and special projects in accordance with the tasks listed in this PWS; but not to exceed total contract value. The contractor shall document these items in the first Monthly Status report.

Deliverable: Quality Control Plan

6.2.15: San Antonio guards shall wear firearms provided by the contractor as authorized by Texas Department of Public Safety, Private Security Bureau. Guards shall carry a minimum of a .38 caliber handgun and maximum of a .45 caliber. The ammunition carried shall be standard ball or hollow-point ammunition for the utilized weapon.

6.2.16: The security company shall be American owned and be currently registered with the Texas Commission on Private Security to provide security services in Texas.

6.2.17: The security provider shall be able to demonstrate the ability to perform required performance standards. Contractor shall not access any Sensitive Compartmented Information Facility (SCIF) area and shall only respond to the exterior in case of any alarm activation. However, in an emergency, guards may be allowed inside the SCIF escorted by a cleared government employee. Under no circumstances should guards enter the SCIF without a government employee escort.

Task 6.3. Contract Management. The contractor shall provide resource management to ensure qualified personnel are performing IAW the requirements of this SOW. The contractor shall provide all management and labor to ensure all contract requirements are met. All personnel assigned to or utilized by the contractor in the performance of this task order shall, at a minimum, meet the minimum qualifications as it relates to experience, education, and required certifications indicated in the SOW. The contractor shall ensure all personnel assigned to this task order are fully capable of performing in an efficient, reliable, and professional manner.

6.3.1: Monthly Status Report (MSR). The contractor shall provide a MSR that will capture accomplishments over the past month and planned objectives for the next month, issues or risks, deliverable updates, mandatory training updates, faces and spaces updates, vacancy reporting and updates to Government Furnished Equipment for personnel. The contractor shall submit the MSR to the COR within 5 calendar days of the end of the reporting period. The report will be provided in a Government generated template.

Deliverable: MSR

6.3.2: Visit Authorization Requests (VARs). Please see section 11, Security Requirements. In addition to Section 11, the contractor shall provide VARs, via password protected email, to the COR at contract award and at least 10 business days prior to the inclusion of a new employee.

Deliverables: VAR

6.3.3: Non-Disclosure Agreements (NDAs). The contractor shall provide a signed NDA for all hired employees via government NDA format. NDAs shall be submitted via email to the COR. See section 13.c for NDA template.

Deliverables: NDA

6.3.4: Personnel Qualifications (Minimum): It is important that the contractor staff onboard with the requisite education, training skills, and experience necessary to provide adequate support. The contractor shall take active measures to always remain current in staff relevancy in order to provide the full range services required. The contractor shall keep abreast and augment skills and expertise at a high level of proficiency.

a) Personnel utilized by the contractor in the performance of this contract shall, at a minimum, meet the experience, educational, or other background requirements outlined in the below Minimum Qualifications Matrix, and shall be fully capable of performing in an efficient, reliable, and professional manner. If the offeror does not identify the labor categories listed below by the same specific title, then a cross-reference list shall be provided in the offeror's quote identifying the difference.

b) The contractor shall have the personnel, organization, and administrative control necessary to ensure that the services performed meet all requirements specified in this SOW. All contractor employees performing on this requirement shall have work experience directly related to the tasks and functions to be assigned as listed in the minimum qualifications matrix below.

c) Minimum Qualifications Matrix

(1920/ year)

· 2 FTEs per location shall have at least 1 out of the past 5 years’ experience with data center security and/or physical security

-Secondary Use of Force Training Each FTE performing under SOW 6.2 must have within the last 5 years at least 3 years experience as an armed security guard

6.3.5: Mandatory Training. All contractor employees shall take approximately 20 annual mandatory training courses provided through the agency, such as Combating Trafficking in Persons General Awareness, Information Assurance, records management training and other training required by statute, regulation, DoD, or DISA policy.

6.3.6: Personnel Accountability. The contractor shall be required to account for the whereabouts of their personnel should this information be requested by the COR. The contractor shall utilize the Personnel Accountability Management (PAM) system to update status daily while performing onsite at a Government facility for health and welfare due to emergencies or exercises.

6.3.7: Cyber Threat Security. With regard to handling of Non-Public Information. In performance of this contract, the contractor may have access to DoD information. The contractor agrees (a) to use and protect such information from unauthorized disclosure in accordance with (IAW) DoD Instruction 8582.01: Security of Unclassified DoD Information on Non-DoD Information Systems; (b) to use and disclose such information only for the purpose of performing this contract, and to not use or disclose such information for any personal or commercial purpose; (c) to comply with other current Federal and DoD information protection and reporting requirements for specified categories of information (e.g., medical, proprietary, critical program information, personally identifiable information, export controlled); (d) to obtain permission of the government requiring activity before disclosing/discussing such information with a third party; (e) to return/electronically purge, upon government request, any DoD information no longer required for contractor performance; and (f) to advise the COR of any unauthorized release of such information.

7. Performance Standards.

100% inspection, Customer input

Incentives/Disincentives:

The Government shall review the Contractor's performance based on the quality assurance surveillance plan objectives. The Government will make determinations for option period awards based on contract performance, as measured by this surveillance plan and other inputs, as well as other considerations. The Contractor is incentivized to earn favorable Government reviews to support continuation of similar work, and to support contract awards with other Government agencies seeking DISA's input on Contractor's past performance.

The Contractor will be subject to a disincentive where staffing levels are not maintained as specified in Section 6, and Deliverables specified in Section 10.

Vacancies must be filled with fully functional resources to perform duties within 30 calendar days. If the contractor fails to meet the AQL in filling positions within 30 calendar days, the invoice will be decremented based on the number of unfilled positions and the number of days the position remains unfilled. Monthly disincentives will match the % of unfilled positions; the disincentive will be prorated according to the number of days in the month that any position is open beyond the 30 days allowed to fill.

For example, if the monthly invoice is for $90 for a 30-day month, and the contractor does not fill 1 out of 10 labor categories for 10 days of the 30-day month, then the invoice will be decremented by 10% for those 10 days. Thus, the invoice for the month will be decremented by: (90/30 = $3 daily charge)*.10*10 = $3.

As an additional disincentive, there will be a 1% reduction in the monthly invoice amount for any late deliverables, unless the contracting officer finds that any such late deliverables were caused by the government.

These specific disincentives do not limit the Government’s other remedies, including terminating the contract for default and reporting negative performance in PPIRS/CPARS.

8. Place of Performance. Work shall be performed on site at the following DISA Data Center locations.

Mechanicsburg, PA: 5450 Carlisle Pike Mechanicsburg, PA 17050 Montgomery, AL: Gunter Air Force Base- 401 East Moore Dr. Gunter, AL 36114 Ogden, UT: Hill Air Force Base- 7879 Wardleigh Rd. Hill AFB, UT 84056 Oklahoma City, OK: Tinker Air Force Base- 8705 Industrial Blvd Tinker AFB, OK 73145 San Antonio, TX: 3326 General Hudnell Dr. San Antonio, TX 78226

Travel shall not be required. Work shall be performed 100% on-site at Government locations.

9. Period of Performance. The contract shall be awarded with a base period of 1-year; two 1-year options AND one 6-month option.

Anticipated Period of Performance:

Base: 6/1/19-5/31/20 Option Period 1: 6/1/20-5/31/21 Option Period 2: 6/1/21-5/31/22 Option Period 3: 6/1/22-11/30/23

As directed by the Contracting Officer (KO), the contractor shall continue performance in emergency or mission essential conditions. Additionally, the contractor may be required to account for the whereabouts of their personnel should this information be requested by the COR.

After Hours Support (On-call/Ad-Hoc) – The contractor shall provide operational support after hours to support tasks in section 6 above, in response to emergent events. After hours is defined as support provided outside the regular work hours stated in section 9. Should ad-hoc/on-call support be required after-hours, the contractor shall be notified and have up to two-hours to initiate the request to begin support unless otherwise agreed to by the Government COR/ACOR. Should ad-hoc/on-call support be required, the contractor shall provide an after action report to the COR by close of business the first business day after occurrence that initiated the after hour support.

PoP Estimated # of After Hour Support Events per Year Estimated Completion Time per Event Estimated # Support Personnel per Event

1 June 2019 – 31 May 2020 8hrs 2 Personnel

1 June 2020 – 31 May 2021 8hrs 2 Personnel

1 June 2021 – 31 May 2022 8hrs 2 Personnel

1 June 2022 – 30 November 2023 8hrs 2 Personnel

Deliverable: After Action Report

10. Delivery Schedule.

11. Security Requirements. This section shall be considered a supplement to Block 13 of the Government provided DD Form 254, Contract Classification Specification. The following security requirements shall apply to this effort.

References:

a. DISA Form 786, DISA Statement of Information System Use and Acknowledgement of User Responsibilities

b. DISA Policy Letter, Unauthorized Connections to Network Devices, 11 September 2013

c. DISAI 240-110-8, Information Security

d. DISAI 240-110-36, Personnel Security

e. DISAI 240-110-38, Industrial Security

f. DISA Instruction 630-230-19, Cybersecurity

g. DoDM 5200.01, Vol 1-4 Information Security Program, 24 February 2012

h. DOD 5200.2-R, DoD Personnel Security Program

i. DOD 5220.22-M, National Industrial Security Program Operating Manual, February 2006 Incorporating Change 02 May 2016

j. DOD 5220.22-R, Industrial Security Regulation

11.1 Facility Security Clearance. The work to be performed under this contract is up to the Secret level. Therefore the company must have a final Secret Facility Clearance from the Defense Security Service Facility Clearance Branch.

11.2 Security Clearance and Information Technology (IT) Level. All personnel performing on or supporting a DISA contract in any way shall be U.S. citizens. The personnel security requirements for this contract cover the individuals supporting the Task Areas delineated in the table below. Contractor personnel must possess the interim security clearance and interim IT-level eligibility delineated in the table below when performance starts.

11.3 Investigation Requirements. All personnel requiring Secret or IT-II access under this contract/order shall undergo a favorably adjudicated Tier 3 investigation formerly known as a National Agency Check, Local Agency Check and Credit Check or Access National Agency Check and Inquiries as a minimum investigation. The Tier 3 investigation will be maintained current within 10-years and requests for Secret Periodic Reinvestigation will be initiated by submitting a Tier 3R Investigation prior to the 10-year anniversary date of the previous Tier 3 Investigation.

11.4 Visit Authorization Letters (VAL). Visit requests shall be processed and verified through the Joint Personnel Adjudication System (JPAS) to SMO DKABAA10 and SMO DKADAL. JPAS visits for contracts are identified as “Other” or “TAD/TDY” and will include the Contract/Order Number and ADP/IT-Access Level of the contract/order in the Additional Information section. Contractors that do not have access to JPAS may submit visit authorizations by e-mail in a password protected .pdf to the Contracting Officer Representative (COR) or Alternate COR specified in SOW Section 1.0

If JPAS is not available, the VAL must contain the following information on company letterhead:

· Company’s name, address, telephone number, assigned CAGE Code, facility security clearance

· CAGE Code

· Contract/Order Number

· Name, SSN, date and place of birth, and citizenship of the employee intending to visit

· Certification of personnel security clearance and any special access authorizations required for the visit (type of investigation & date, adjudication date & agency, and IT access level)Name of COR/Alt COR

· Dates or period the VAL is to be valid

11.5 Security Contacts. DISA Security Personnel can be contacted for Industrial Security related issues at (301)225-1235 or via mail at:

For Center or Directorate-specific security related matters, contact the Directorate or Center Security Manager at:

Security Manager Contact Information:

Name: Bruce Gray Phone Number: (301) 225-2839 E-mail: Bruce.Gray1.civ@mail.mil

11.6 Information Security and other miscellaneous requirements.

11.6.1 Contractor personnel shall comply with all local security requirements including entry and exit control for personnel and property at the government facility.

11.6.2 Contractor employees shall be required to comply with all Government security regulations and requirements. Initial and periodic safety and security training and briefings will be provided by Government security personnel. Failure to comply with Government security regulations and requirements shall require the company to provide the Government with a written remediation/corrective action plan; furthermore, failure to comply with such requirements can be cause for removal and the contractor will not be able to provide service on this contract/order.

11.6.3 Contractor employees with an incident report in JPAS who have had their access to classified information suspended will not be permitted to fill positions requiring access to classified information on a DISA contract/order.

11.6.4 The Contractor shall not divulge any information, classified or unclassified, about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the DoD facility. Identification shall be worn and displayed as required.

11.6.5 DISA retains the right to request removal of contractor personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government.

11.6.6 Contractor personnel will handle documents that contain For Official Use Only information at the Government facility. Contractor shall have access to and handle classified material only at the location(s) listed in the place of performance section of this document. All contractor deliverables shall be marked in accordance with DoDM 5200.1, Vol. 3, Vol. 4, Information Security, DoD 5400.7-R, Freedom of Information Act Program, unless otherwise directed by the Government. The contractor shall comply with the provisions of the DoD Industrial Security Manual for handling classified material and producing deliverables. The contractor shall comply with DISA Instruction 630-230-19.

11.6.7 The Contractor shall afford the Government access to the contractor’s facilities, installations, operations, documentation, databases and personnel used in performance of the contract. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability and confidentiality of data or to the function of information technology systems operated on behalf of DISA or DoD, and to preserve evidence of computer crime.

12. Government Furnished Property (GFP)/Government-Furnished Equipment (GFE)/Government-Furnished Information (GFI). The GFP provided to the contractor may include, but is not limited to, laptops and mobile devices to perform the services needed under this contract/order. The contractor shall manage GFP in accordance with Federal Acquisition Regulation (FAR) Part 45, Defense FAR Supplement (DFARS) Part 245 and associated clauses incorporated in this contract. The contractor shall include a complete list of all GFP within the contractor's Monthly Status Report for verification by the COR and/or Property Administrator. The list shall include the Make, Model, Serial Number, End Warranty Date, and Bar Code of every laptop and provide similar detailed information for each other piece of GFP.

13. Other Pertinent Information or Special Considerations.

a. Identification of Possible Follow-on Work. N/A

b. Identification of Potential Organizational Conflicts of Interest (OCI). Due to the nature of the DoD IA Program, OCI issues are a significant concern as they hold the potential to disrupt the performance of this contract and other contracts awarded and administered by DISA. The contractor shall identify all potential or actual OCIs and document an avoidance or mitigation strategy for each in an OCI Mitigation Plan for the Contracting Officer’s approval. The contractor has a continuing obligation during the performance of the contract to identify any new OCIs and to update its OCI Mitigation Plan as appropriate. Any newly identified OCIs must be brought to the Contracting Officer’s attention within 24 hours. Additional information regarding OCIs are found in the clauses incorporated in the contract.

c. Identification of Non-Disclosure Requirements. All DISA Contractors must execute a DISA-provided contractor non-disclosure agreement (NDA) for all services contracts regardless of award amount. The NDA must be signed within one week of contract/TO award. The DISA contractor is responsible for obtaining and maintaining NDAs for each contractor employee assigned to the contract/TO. Reference Attachment 6.

Deliverables: NDA

d. Packaging, Packing and Shipping Instructions. N/A

e. Inspection and Acceptance Criteria. N/A

f. Property Accountability. N/A

14. Section 508 Accessibility Standards. The following Section 508 Accessibility Standard(s) (Technical Standards and Functional Performance Criteria) are applicable (if box is checked) to this acquisition.

Technical Standards

|_| 1194.21 - Software Applications and Operating Systems |_| 1194.22 - Web Based Intranet and Internet Information and Applications |_| 1194.23 - Telecommunications Products |_| 1194.24 - Video and Multimedia Products |_| 1194.25 - Self-Contained, Closed Products |_| 1194.26 - Desktop and Portable Computers |X| 1194.41 - Information, Documentation and Support

The Technical Standards above facilitate the assurance that the maximum technical standards are provided to the Offerors. Functional Performance Criteria is the minimally acceptable standards to ensure Section 508 compliance. This block is checked to ensure that the minimally acceptable electronic and information technology (E&IT) products are proposed.

Functional Performance Criteria

|X| 1194.31 - Functional Performance Criteria

Guard Services

FFP

The contractor shall provide Security Specialists/ Access Management in support of section 6.1 and 6.2 of the Statement of Work (SOW).

This CLIN supports the following:

* 3 Full Time Equivalents (FTEs) at Mechanicsburg, PA

* 3 Full Time Equivalents (FTEs) at Oklahoma City, OK

* 3 Full Time Equivalents (FTEs) at Ogden, UT

* 3 Full Time Equivalents (FTEs) at Montgomery, AL

* 15 Full Time Equivalents (FTEs) at San Antonio, TX

Anticipated Labor Categories for Mechanicsburg, Montgomery, Ogden, and Oklhoma City:

Security Specialist, 3 yrs experience, Secret/ IT-II (quantity 2 per location) Security Specialist, 1 yr experience, Secret IT-II (quantity 1per location)

Anticipated Labor Category for San Antonio:

Armed Security Guard, 3 yrs experience, Secret/ IT-II (quantity 15)

Period of Performance is 12 months.

FOB: Destination

NET AMT

After Hour Support

After Hours Support (On-call/Ad-Hoc) – The contractor shall provide operational support after hours to support tasks in section 6 above, in response to emergent events. After hours is defined as support provided outside the regular work hours stated in section 9. Should ad-hoc/on-call support be required after-hours, the contractor shall be notified and have up to two-hours to initiate the request to begin support unless otherwise agreed to by the Government COR/ACOR. Should ad-hoc/on-call support be required, the contractor shall provide an after action report to the COR by close of business the first business day after occurrence that initiated the after hour support.

The contractor shall provide a FFP labor rate and category for EACH location. This labor rate and category will be incorporated in to the resultant contract.

NET AMT

FFP

The contractor shall provide Security Specialists/ Access Management in support of section 6.1 and 6.2 of the Statement of Work (SOW).

This CLIN supports the following:

* 3 Full Time Equivalents (FTEs) at Mechanicsburg, PA

* 3 Full Time Equivalents (FTEs) at Oklahoma City, OK

* 3 Full Time Equivalents (FTEs) at Ogden, UT

* 3 Full Time Equivalents (FTEs) at Montgomery, AL

* 15 Full Time Equivalents (FTEs) at San Antonio, TX

Anticipated Labor Categories for Mechanicsburg, Montgomery, Ogden, and Oklhoma City:

Security Specialist, 3 yrs experience, Secret/ IT-II (quantity 2 per location) Security Specialist, 1 yr experience, Secret IT-II (quantity 1per location)

Anticipated Labor Category for San Antonio:

Armed Security Guard, 3 yrs experience, Secret/ IT-II (quantity 15)

NET AMT

FFP

After Hours Support (On-call/Ad-Hoc) – The contractor shall provide operational support after hours to support tasks in section 6 above, in response to emergent events. After hours is defined as support provided outside the regular work hours stated in section 9. Should ad-hoc/on-call support be required after-hours, the contractor shall be notified and have up to two-hours to initiate the request to begin support unless otherwise agreed to by the Government COR/ACOR. Should ad-hoc/on-call support be required, the contractor shall provide an after action report to the COR by close of business the first business day after occurrence that initiated the after hour support.

The contractor shall provide a FFP labor rate and category for EACH location. This labor rate and category will be incorporated in to the resultant contract.

NET AMT

FFP

The contractor shall provide Security Specialists/ Access Management in support of section 6.1 and 6.2 of the Statement of Work (SOW).

This CLIN supports the following:

* 3 Full Time Equivalents (FTEs) at Mechanicsburg, PA

* 3 Full Time Equivalents (FTEs) at Oklahoma City, OK

* 3 Full Time Equivalents (FTEs) at Ogden, UT

* 3 Full Time Equivalents (FTEs) at Montgomery, AL

* 15 Full Time Equivalents (FTEs) at San Antonio, TX

Anticipated Labor Categories for Mechanicsburg, Montgomery, Ogden, and Oklhoma City:

Security Specialist, 3 yrs experience, Secret/ IT-II (quantity 2 per location) Security Specialist, 1 yr experience, Secret IT-II (quantity 1per location)

Anticipated Labor Category for San Antonio:

Armed Security Guard, 3 yrs experience, Secret/ IT-II (quantity 15)

NET AMT

FFP

After Hours Support (On-call/Ad-Hoc) – The contractor shall provide operational support after hours to support tasks in section 6 above, in response to emergent events. After hours is defined as support provided outside the regular work hours stated in section 9. Should ad-hoc/on-call support be required after-hours, the contractor shall be notified and have up to two-hours to initiate the request to begin support unless otherwise agreed to by the Government COR/ACOR. Should ad-hoc/on-call support be required, the contractor shall provide an after action report to the COR by close of business the first business day after occurrence that initiated the after hour support.

The contractor shall provide a FFP labor rate and category for EACH location. This labor rate and category will be incorporated in to the resultant contract.

NET AMT

FFP

The contractor shall provide Security Specialists/ Access Management in support of section 6.1 and 6.2 of the Statement of Work (SOW).

This CLIN supports the following:

* 3 Full Time Equivalents (FTEs) at Mechanicsburg, PA

* 3 Full Time Equivalents (FTEs) at Oklahoma City, OK

* 3 Full Time Equivalents (FTEs) at Ogden, UT

* 3 Full Time Equivalents (FTEs) at Montgomery, AL

* 15 Full Time Equivalents (FTEs) at San Antonio, TX

Anticipated Labor Categories for Mechanicsburg, Montgomery, Ogden, and Oklhoma City:

Security Specialist, 3 yrs experience, Secret/ IT-II (quantity 2 per location) Security Specialist, 1 yr experience, Secret IT-II (quantity 1per location)

Anticipated Labor Category for San Antonio:

Armed Security Guard, 3 yrs experience, Secret/ IT-II (quantity 15)

Period of Performance is 6 months.

NET AMT

FFP

After Hours Support (On-call/Ad-Hoc) – The contractor shall provide operational support after hours to support tasks in section 6 above, in response to emergent events. After hours is defined as support provided outside the regular work hours stated in section 9. Should ad-hoc/on-call support be required after-hours, the contractor shall be notified and have up to two-hours to initiate the request to begin support unless otherwise agreed to by the Government COR/ACOR. Should ad-hoc/on-call support be required, the contractor shall provide an after action report to the COR by close of business the first business day after occurrence that initiated the after hour support.

The contractor shall provide a FFP labor rate and category for EACH location. This labor rate and category will be incorporated in to the resultant contract.

Period of Performance is 6 months.

NET AMT

Surge Support

Techcnial Operations Support as described in the attached Performance Work Statement (PWS). Period of performance is June 1, 2019- December 31, 2022. The Government may require surge support during the base or any option period and surge modifications will be in-scope to provide increased support for the defined task areas of the PWS. Surge support is OPTIONAL and is not a guarantee. If the Government determines that an increased quantity of support is required for the task areas defined in the PWS, the Government reserves the right to exercise the surge option unilaterally. The contracting officer will provide written notice to the offeror at least 60 calendar days prior to any unilateral exercise of the surge option. In the event the Government does elect to exercise the surge option, surge support will be realigned under new or existing CLINs for the relevant task areas identified in the PWS, and an equal amount will be deducted from optional surge CLIN 9999.

NET AMT

INSPECTION AND ACCEPTANCE TERMS

Supplies/services will be inspected/accepted at:

DELIVERY INFORMATION

CLAUSES INCORPORATED BY REFERENCE