1. HC102825R0050 SOW.docx

STATEMENT OF WORK (SOW)

Award

1. Contracting Officer’s Representative (COR).

a. Primary COR. See DITCO Additional Text G1 - Points of Contact

b. Alternate COR. See DITCO Additional Text G1 - Points of Contact

2. Contract or Task Order Title. Defense Information Systems Agency (DISA) Access Control and Physical Security Support

3. Background. The Computing Data Center serves as the physical infrastructure supporting computer processing operations for the Defense Information Systems Agency (DISA). The Data Center Line of Business (LOB) holds responsibility for physical security and access management at all Data Center managed locations. The contracted services described herein are required to provide security, entry control, video surveillance, and other traditional security duties in support of all Data Center buildings aligned to the Data Center LOB as an integral component of the DISA EcoSystem.

4. Objectives: The contractor shall provide support services to the Data Center LOB in the planning and execution of physical security measures, visitor control protocols, and access management procedures at DISA Data Center locations. All contractor personnel must meet the defined security clearance requirements to ensure adequate support for the security of DISA's critical facilities and resources.

5. Scope. Maintain physical security, visitor control, and access management at DISA San Antonio, TX.

6. Performance Requirements.

6.1 Task 1. Armed Security Access Control Support. This task necessitates the provision of 15 full-time equivalent (FTE) personnel, each holding a Secret security clearance, to provide comprehensive armed security access control support services. All FTEs assigned to this task shall be physically located at the San Antonio, TX facility and maintain a 100% on-site presence, operating 24 hours a day, 7 days a week, 365 days a year. Contractor personnel performing this task are required to be always armed while on duty. The contractor shall be responsible for ensuring sufficient staffing levels to accommodate the receipt of visitors and deliveries/packages without leaving the security control desk and vehicle guard shack unattended for periods exceeding 10 minutes.

6.1.1 Visitor Access Management: The contractor shall provide comprehensive visitor support, adhering to the guidelines outlined in the Visitors Guide and the DISA SATX Physical Security Standard Operating Procedure (SOP). This support includes facilitating access for DISA staff, contractors, vendors, service providers, and other authorized visitors and new employees seeking entry to a DISA Data Center facility.

The contractor shall:

a) Verify the identity of all visitors.

b) Confirm the completeness and accuracy of all required visitation documentation.

c) Record Common Access Card (CAC) information for each visitor.

d) Perform escort duties for non-cleared visitors or vendors that need visit logistics assistance, as directed by the Site/Security Manager.

6.1.2 Physical Security Policy Compliance: The contractor shall respond to routine inquiries regarding physical security and entry control policies in accordance with the DISA SATX Physical Security Standard Operating Procedure (SOP).

6.2 Task 2. Facility Physical Security Checks.

The contractor shall:

a) Ensure all doors and gates are secured and operating correctly.

b) Monitor and conduct walk-throughs of administrative areas to ensure classified documents and media are secured and properly labeled in accordance with applicable security policies.

c) Report any security-related issues or discrepancies to the Site/Security Manager immediately, adhering to the established reporting procedures.

d) Conduct weekly inspections of areas above suspended ceilings and below raised floors and immediately report any identified issues or discrepancies to the Site/Security Manager.

6.3 Task 3. Access Control System (ACS) and Closed-Circuit Television (CCTV) Systems.

The contractor shall:

a) Operate and monitor the ACS and CCTV systems.

b) Verify the operational status and recording functionality of all video feeds.

c) Ensure all doors, card readers, control panels, and intrusion detection systems are operational and report accurately within the ACS.

d) Immediately report all failures of ACS and CCTV system components to the Site/Security Manager, adhering to the established reporting procedures.

6.4 Task 4. Security Containers.

The contractor shall:

a) Inspect all security container controls and locks to confirm proper operation, accurately document findings on the designated security container check-sheet for tracking and auditing purposes.

b) Maintain the secured container for secure spaces lock combinations and its inventory.

c) Ensure Activity Security Checklists (SF701) are available and controlled during emergency circumstances to allow access to secure areas.

6.5 Task 5. Management/Supervision. The contractor shall provide all management and labor to ensure all contract requirements are met. All personnel assigned to or utilized by the contractor in the performance of this contract shall meet the minimum qualifications as it relates to experience, education, and certifications indicated in the SOW. The contractor shall ensure all personnel assigned to this task order are fully capable of performing in an efficient, reliable, and professional manner.

6.5.1 The contractor shall designate a Point of Contact (POC) to execute management oversight responsibilities in accordance with a Quality Control Plan. The initial Quality Control Plan shall be delivered to the designated Government quality control POC within 30 calendar days of contract award. The contractor POC shall routinely assess the guard schedule, personnel morale, and any other pertinent issues, and shall serve as the primary point of contact for both the Government POC and the on-site security personnel for the resolution of any on-site guard or security-related concerns.

6.5.2 The contractor shall submit a Monthly Status Report (MSR) containing the following information:

a) Accomplishments from the past month

b) Planned objectives for the next month

c) Identified issues or risks

d) Deliverable updates

e) Mandatory training updates

f) Personnel updates (faces and spaces)

g) Vacancy reporting

h) Updates to provided incidental property

The contractor shall submit the MSR to the Contracting Officer Representative (COR) within 5 calendar days of the end of the reporting period, using a Government-provided template.

Deliverables:

SOW

Task#

Stakeholders.

At award

period 1 copy delivered via email to the COR and Government Stakeholders.

Monthly

6.6 Task 6. Inspections and Documentation.

6.6.1 Contractor shall Inspect arriving and departing packages (boxes, cartons, handbags, briefcases, toolboxes, etc.) to identify any controlled substances, unauthorized electronic devices or media, and weapons.

6.6.2 Contractor shall conduct patrols and inspections of the facility (both internal and external) to identify, document, and report any suspicious activities, packages, or vehicles. Any discrepancies shall be reported immediately to the Site/Security Manager, adhering to the established reporting process.

6.6.3 The contractor shall maintain the following documentation:

a) Visitor tracker/entry control logs

b) Security blotters

c) Physical security checklists/logs

d) Security documentation required for scheduled and ad hoc audits

e) Other physical security-related documentation

6.6.4 The contractor shall have one (1) day shift and one (1) alternate personnel to perform the following:

a) Verify visitor clearance level

b) Verify Visitor Access Request (VAR)

c) Ensure proper badging is provided per process

d) Notify/coordinate with visitor POC

e) Encoded vetted personnel with approved authorization access request in ACS

6.6.5 Cyber Threat Security: Handling Non-Public Information. In performing this contract, the contractor may access DoD information and shall agree to:

(a) Use and protect such information from unauthorized disclosure in accordance with DoD Instruction 8582.01: Security of Unclassified DoD Information on Non-DoD Information Systems.

(b) Use and disclose such information only for the purpose of performing this contract and not use or disclose it for any personal or commercial purpose.

(c) Comply with all applicable Federal and DoD information protection and reporting requirements for specified categories of information (e.g., medical, proprietary, critical program information, personally identifiable information, export controlled);

(d) Obtain permission from the required government activity before disclosing or discussing such information with a third party.

(e) Return or electronically purge any DoD information no longer required for contractor performance upon government request; and

(f) Advise the Contracting Officer Representative (COR) of any unauthorized release of such information.

6.6.6 The contractor shall not access any Sensitive Compartmented Information Facility (SCIF) area except to respond to exterior alarms. However, in emergency situations where life, limb, or eyesight is at risk, guards may enter the SCIF. In situations involving a risk of loss of life or personal endangerment, emergency responses will not be restricted. The Special Security Representative(s) (SSR) will debrief all non-SCIF personnel involved following the conclusion of the incident.

6.6.7 Cyber Threat Security. Regarding handling of Non-Public Information. In the performance of this contract, the contractor may have access to DoD information. The contractor agrees (a) to use and protect such information from unauthorized disclosure in accordance with (IAW) DoD Instruction 8582.01: Security of Unclassified DoD Information on Non-DoD Information Systems; (b) to use and disclose such information only for the purpose of performing this contract, and to not use or disclose such information for any personal or commercial purpose; (c) to comply with other current Federal and DoD information protection and reporting requirements for specified categories of information (e.g., medical, proprietary, critical program information, personally identifiable information, export controlled); (d) to obtain permission of the government requiring activity before disclosing/discussing such information with a third party; (e) to return/electronically purge, upon government request, any DoD information no longer required for contractor performance; and (f) to advise the COR of any unauthorized release of such information.

7. Performance Standards.

8. Incentives. Not Applicable.

9. Place of Performance.

Mission Location:

DISA San Antonio 3326 General Hudnell Dr Acc Rd.

San Antonio, TX 78226

Place of Performance: Work will be performed on-site at a Government Facility. Alternative work sites allow for regular teleworking or remote work flexibility. Regardless of where work is performed, the Contractor shall ensure that work is completed effectively and that mission needs and requirements are met, without degradation of services. Also, the contractor may be required to account for the physical location of their personnel should this information be requested by the COR. The Contractor shall propose on-site rates for all work performed at an alternative work site. Incidental charges incurred while working at an alternative work site (e.g., electricity, internet) are not allocable to the contract and shall not be billed to the government.

Secondary Place of Performance – Contingency Only. As determined by the Contracting Officer’s Representative (COR), contractor employees may be required to work at a secondary place of performance (e.g., home, the contractor's facility, or another approved activity within the local travel area) in cases of unforeseen conditions or contingencies (e.g., pandemic conditions, exercises, government closure due to inclement weather). Additionally, the contractor may be required to account for the physical location of their personnel should this information be requested by the COR. Non-emergency/non-essential contractors should not report to a closed government facility. The contractor shall prepare all deliverables and other contract documentation utilizing contractor resources. To the extent possible, the contractor shall use the best efforts to provide the same level of support as stated in the SOW. In the event the services are impacted, reduced, compromised, etc., the Contracting Officer or the contractor may request an equitable adjustment pursuant to the Changes clause of the contract.

10. Period of Performance.

The contract shall be awarded with a base period of 1-year plus 4 option years.

Anticipated Period of Performance:

Base: 3/1/2026 – 2/29/2027 Option Period 1: 3/1/2027 - 2/28/2028 Option Period 2: 3/1/2028 - 2/28/2029 Option Period 3: 3/1/2029 – 2/28/2030 Option Period 4: 3/1/2030 – 2/28/2031

As directed by the Contracting Officer (KO), the contractor shall continue performance in emergency or mission essential conditions. Additionally, the contractor may be required to account for the whereabouts of their personnel should this information be requested by the COR.

Recognized Federal Holidays: The contractor is not required to perform services on Federal Holidays (as specified on the U.S. Office of Personnel Management website), unless otherwise specified by the COR.

Unplanned Federal Government Closure: In the event an authorized official, by either executive or legislative order, declares Federal offices closed (treated as a holiday for pay and leave purposes), the order only applies to Federal employees (unless otherwise stated in the order).

11. Security Requirements. This section supplements Block 13 of the Government provided DD Form 254, Contract Security Classification Specification. The following security requirements shall apply to this effort.

The contractor shall coordinate visits with site Point of Contract (POC)s providing at least a 72-hour notice (or according to each site security requirements) prior to any site access. Contractor personnel without security clearances performing any task under this SOW must be escorted by cleared DISA personnel (civilian, military, or contractor).

References:

a. DISA End User Access Agreement, 11 February 2021

b. DISA Policy Letter, Unauthorized Connections to Network Devices, 11 September 2013

c. DISA Instruction 240-110-8, Information Security

d. DISA Instruction 240-110-36, Personnel Security

e. DISA Instruction 240-110-38, Industrial Security

f. DISA Instruction 240-110-43, Insider Threat Program

g. DISA Instruction 630-230-19, Cybersecurity

h. DoD Manual 5200.01, Vol 1-3 Information Security Program, 24 February 2012

i. DoD Manual 5200.02, Procedures for the DoD Personnel Security Program, 3 April 2017

j. DoD Instruction 5200.48, Controlled Unclassified Information (CUI), 6 March 2020

k. 32 CFR Part 117, “National Industrial Security Program Operating Manual (NISPOM)”, 24 February 2021

l. Security Executive Agent Directive 4, National Security Adjudicative Guidelines, 8 June 2017

m. DoDM 5400.07, Freedom of Information Act Program

n. DoDI 5230.24, “Distribution Statements for DoD Technical Information,” January 10, 2023

o. DoD Instruction 8510.01, “Risk Management Framework for DoD Systems,” July 19, 2022

11.1 Facility Security Clearance. Work performed under this contract/order is up to the Secret. Therefore, the company must have a final Secret Facility Clearance from the Defense Counterintelligence and Security Agency (DCSA) Facility Clearance Branch.

11.1.2 Invalidated Facility Clearance. Companies with invalidated facility clearances (including those in partnerships, subcontracts, and Joint Ventures) are not eligible to bid on or be awarded any new or additional DISA classified contracts, subcontracts, or receive additional classified information except for information necessary for the completion of your current classified contracts. In addition, those companies with invalidated facility clearances will not be permitted access to all DISA networks. Performance on any DISA classified contracts, at any location, will not be authorized until it has been granted a Facility Security Clearance (FCL) at the appropriate level by DCSA.

11.2 Security Clearance. All personnel performing on or supporting a DISA contract/order in any way shall be U.S. citizens. The personnel security requirements for this contract/order cover the individuals supporting the Task Areas delineated in the table below. Contractor personnel must possess the interim or final security clearance eligibility delineated in the table below when performance starts.

6 - Armed Security Guard Support

11.3 Investigation Requirements.

11.3.1 All personnel requiring Secret access under this contract/order shall undergo a favorably adjudicated Tier 3 (T3) Investigation formerly known as a National Agency Check, Local Agency Check and Credit Check or Access National Agency Check and Inquiries as a minimum investigation. Enrollment into Continuous Evaluation current within 5 years and, reflected in DISS, would meet the requirement for current PR.

11.3.2 The contractor is required to have personnel cleared with an interim or final Secret (as specified in the table located in section 11.2) at contract start date. If contractor personnel are replaced during the performance of the contract, replacement personnel should also have interim or final clearance Secret (as specified in the table located in section 11.2).

11.4 Visit Authorization . Visit requests shall be processed and verified through the DISS to the Security Management Office (SMO) DKABAA10. DISS visits for contracts/orders are identified as “Other” or “TAD/TDY” and will include the Contract/Order Number of the contract/order in the Additional Information section. Contractors that do not have access to DISS may submit visit authorizations by e-mail in a password protected .pdf to the COR/ACOR specified in SOW/SOW Section 1.0.

*Prior coordination with the DISA COR should be made via email to ensure the Visit Authorization Letter (VAL)/ Visit Authorization Request (VAR)/ Visit Termination Notification (VTN) process is agreed upon and properly secure.

11.4.1 VAR Package. VARs must be received via email and require pre-approval from the assigned DISA COR five business days in advance of the report date. The VAL/VAR/VTN should be sent via email to the appropriate COR. The VAL/VAR/VTN should be sent using in a locked “Zip” file in one e-mail and then followed up by another e-mail with the password to unlock the Zipped file, because it contains sensitive information covered by the Privacy Act.

Documents to include in the VAR Package:

1. Inter-office Memorandum (IOM)

2. DD Form 254 Prime and/or Sub (Good Standing approval emails for current option year)

3. DISS verification of Visit Authorization by Security Manager

4. (Optional: see NOTE below) Contractor VAL signed by the Contractor Facility Security Officer (FSO)

NOTE: If DISS is not available, the VAL must contain the following information on the company letterhead

· Company name, address, telephone number, facility security clearance

· CAGE CODE

· Contract/Order Number

· Name, SSN, date and place of birth, and citizenship of the employee intending to visit, email address, and phone number

· Certification of personnel security clearance and any special access authorizations required for the visit (type of investigation & date and adjudication date & agency)

· Name of COR/Alt COR

· Dates or period the VAL is to be valid (i.e., Start date / End date)

11.4.2 VTN Package. The Contractor FSO will forward a VTN letter to the DISA COR identified in the SOW/TO/Sub for all employees leaving the contract/task order/subcontract.

11.4.2.1 In addition, the DISA CORs and security managers shall inform the DISA Security Office when contractor personnel are removed for cause from a contract supporting DISA. This step is being added to prevent contractor personnel being removed for security related issues from returning to DISA without appropriate vetting. This step will also provide security with pertinent information to make an informed decision regarding potential contractor employees’ access to secure facilities and sensitive information. “For Cause” is information regarding an individual that falls into one or more of the actions or incidents that are within one of the 13 adjudicative guidelines as cited in the Security Executive Agent Directive (SEAD) 4:

a. Allegiance to the United States

b. Foreign Influence

c. Foreign Preference

d. Sexual Behavior

e. Personal Conduct

f. Financial Considerations

g. Alcohol Consumption

h. Drug Involvement and Substance Misuse

i. Psychological Conditions

j. Criminal Conduct

k. Handling Protected Information

l. Outside Activities

m. Use of Information Technology Other actions:

• Incidents involving violence in the workplace or harassment.

• Misuse of time.

• Inspector General or General Counsel related to inquiries.

• Failure to comply with security policies and procedures.

• Other reasons that prompted the removal of a contractor.

The VTN must contain the following information on company letterhead

· Company name, address, telephone number, facility security clearance

· CAGE CODE

· Contract/Order Number

· Name, SSN, date and place of birth, and citizenship of the employee, email address, phone number

· Date contractor CAC was collected

· Name of COR/Alt COR

· Termination Date

· Reason for Termination: <insert reason from the 13 adjudicative guidelines, other actions, or type “No longer working on contract”>

*Any VAL/VAR submitted without the above information will be denied.*

11.4.2.2 Visit Authorization Requests (VARs). Please see section 11, Security Requirements. In addition to Section 11, the contractor shall provide VARs, via password-protection email, to the COR at contract award and at least 10 business days prior to the inclusion of a new employee.

SOW

Task#

employee 1 copy delivered by password protected email to the COR. Password to follow in separate email.

At award or inclusion of new employee

11.5 Security Contacts. DISA Security Personnel can be contacted for Industrial or Personnel Security related issues at (301) 225-4039 or via mail at:

Defense Information Systems Agency

Defense Information Systems Agency

ATTN: J-16, Industrial Security

ATTN: J-16, Personnel Security

Command Building

Command Building

6910 Cooper Ave.

6910 Cooper Ave.

Fort Meade, MD 20755-7088

Fort Meade, MD 20755-7088

For Center or Directorate-specific security related matters, contact the Directorate or Center Security Manager at:

For Center or Directorate-specific security related matters, contact the Directorate or Center Security Manager at: Security Manager Contact Information:

Name: Bruce Gray Phone Number: (301) 225-2839

E-mail: Bruce.Gray1.civ@mail.mil

11.6 Information Security and other miscellaneous requirements.

11.6.1 Contractor personnel shall comply with all local security requirements including entry and exit control for personnel and property at the Government facility.

11.6.2 Contractor employees shall be required to comply with all Government security regulations and requirements. Initial and periodic safety and security training and briefings will be provided by Government security personnel. Failure to comply with Government security regulations and requirements shall require the company to provide the Government with a written remediation/corrective action plan; furthermore, failure to comply with such requirements can be cause for removal and the contractor will not be able to provide service on this contract/order.

11.6.3. Contractor employees with an incident report in DISS who have had their access to classified suspended will not be permitted to fill positions requiring access to classified information on a DISA contract/order.

11.6.4 The Contractor shall not divulge any information, classified or unclassified, about DoD files, data processing activities or functions, user identifications, passwords, or any other knowledge that may be gained, to anyone who is not authorized to have access to such information. The Contractor shall observe and comply with the security provisions in effect at the DoD facility. Identification shall be worn and displayed as required.

11.6.5 The authority for the contractor personnel to regain access must be granted by DISA Chief of Security.

11.6.5.1 DISA retains the right to request removal of contractor personnel regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government.

11.6.5.2 DISA retains the right to revoke contractor personnel access to DISA facilities and networks, who violates one or more Security Personnel Adjudicative guidelines, harassment or violence in the workplace while assigned to a contract clearly conflict with the interest of the Government.

11.6.5.3 If contractor employee is accused of violating state or federal laws and/or Government professional conduct policies or regulations, then the Government may require that such contractor employee be removed from Government premises and/or that such contractor employee be removed from supporting this contract, pending the duration and outcome of a Government investigation if the Contracting Officer finds that the conduct or violation alleged has the potential to negatively interfere with contract performance or operations at a Government facility. Only the Contracting Officer can make such a request on behalf of the Government. Removal of contractor employee shall not negatively impact contract performance.

11.6.6 Contractor personnel will generate or handle documents that contain Controlled Unclassified Information (CUI) at the Government facility. Contractor personnel will generate or handle documents that contain Proprietary, Contract Sensitive, or similarly designated information at the Government facility.) Contractor personnel will have access to, generate, and handle classified material up to CONFIDENTIAL/ SECRET level only at the Government location(s) (Ref: Block 8 Place of Performance on DD254) and listed in the place of performance section of this document. All contractor deliverables shall be marked in accordance with DoDM 5200.01, Vol. 1, DoD Information Security Program: Overview, Classification, and Declassification; DoDM 5200.01, Vol. 2, DoD Information Security Program: Marking of Information; DoDM 5200.01, Vol. 3, DoD Information Security Program: Protection of Classified Information; DoDI 5200.48, Controlled Unclassified Information (CUI); and DoDM 5400.07, Freedom of Information Act Program, unless otherwise directed by the Government. The contractor shall comply with the provisions of the DoD Industrial Security Manual for handling classified material and producing deliverables. The contractor shall comply with DISA Instruction 630-230-19, Cybersecurity.

11.6.7 The Contractor shall afford the Government access to the contractor’s facilities, installations, operations, documentation, databases and personnel used in performance of the contract/order. Access shall be provided to the extent required to carry out a program of IT inspection (to include vulnerability testing), investigation and audit to safeguard against threats and hazards to the integrity, availability and confidentiality of data or to the function of information technology systems operated on behalf of DISA or DoD, and to preserve evidence of computer crime.

12. Government Furnished Property (GFP)/Government-Furnished Equipment (GFE)/ Government-Furnished Information (GFI).

Incidental Property, IP, will be made available, and hand receipted to the contractor for use during the performance of the contract. Below is an estimated list of IP, this estimate is not considered a comprehensive list and more or less IP maybe provided in performance of the contract. IP shall be managed IAW the terms of H8, Defense Information System Agency Incidental Property Management (Apr 2021) or subsequent updates.

Estimated IP to be provided: Desktop computers, cell phone, Radio/mic with charging stations

13. Other Pertinent Information or Special Considerations.

13.1 DISA San Antonio guards shall have on their person firearms provided by the contractor as authorized by Texas Department of Public Safety, Private Security Bureau. Guards shall carry a minimum of a .38 caliber handgun and maximum of a .45 caliber. The ammunition carried shall be standard ball or hollow-point ammunition for the utilized weapon.

13.2 The security company shall be American owned and be currently registered with the Texas Commission on Private Security to provide security services in Texas.

13.3 Personnel Qualifications: The contractor shall provide staff with the requisite education, training, skills, and experience necessary to provide adequate support. The contractor shall ensure staff qualifications remain current and relevant to effectively deliver the full range of required services.

Years Relevant Experience

-Secondary Use of Force Training 3 of the past 5 years’ experience as an armed security guard

a. Identification of Possible Follow-on Work. Not Applicable

b. Identification of Potential Conflicts of Interest (COI). Not Applicable

c. Identification of Non-Disclosure Requirements. The contractor shall obtain and maintain Non-Disclosure Agreements (NDA) for each employee assigned to the contract. Initial NDAs shall be signed within one week of the contract award, and NDAs shall be kept current through the entirety of the period of performance as employee turnover occurs. The contractor shall ensure that all employees assigned to the contract have executed NDAs on file as of the date of the Monthly NDA Status Report, which shall include names and NDA status of all current employees assigned to the contract.

Deliverable:

*Standard Distribution: 1 copy of the transmittal letter with the deliverable to the Primary COR.

d. Packaging, Packing and Shipping Instructions. Not Applicable

e. Inspection and Acceptance Criteria. Not Applicable

f. Property Accountability. Not Applicable

g. Transitioning.

1. Transition-In (Phase In). All key personnel/key positions must be onboard at start of the period of performance. 50 percent total staffing must be complete within two weeks of the start of the PoP and 100 percent within 30 days.

2. Transition-Out (Phase Out). You will need to collaborate with the MP at least 120 days or sooner, prior to the end of the contract, to develop a transition-out plan IAW FAR 52.237-3.

h. Supply Chain Risk Management (SCRM). Not Applicable.

i. Training. All contractor employees shall take approximately 20 annual mandatory training courses provided through the agency, such as Combating Trafficking in Persons General Awareness, Information Assurance, records management training and other training required by statute, regulation, DoD, or DISA policy. Training such as records management training, Controlled Unclassified Information (CUI) training, and other training required by statute, regulation, DoD, or DISA policy. No other training of contractor personnel shall be provided by the Government unless authorized by the Contracting Officer.

j. Requirement to Inform Employees of Whistleblower Rights. Not Applicable.

14. Section 508 Accessibility Standards.

E206 Hardware E206.1 General. Where components of ICT are hardware and transmit information or have a user interface, such components shall conform to the requirements in Chapter 4.

E302 Functional Performance Criteria

302.1 Without Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that does not require user vision.

302.2 With Limited Vision. Where a visual mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited vision.

302.3 Without Perception of Color. Where a visual mode of operation is provided, ICT shall provide at least one visual mode of operation that does not require user perception of color.

302.4 Without Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that does not require user hearing.

302.5 With Limited Hearing. Where an audible mode of operation is provided, ICT shall provide at least one mode of operation that enables users to make use of limited hearing.

302.6 Without Speech. Where speech is used for input, control, or operation, ICT shall provide at least one mode of operation that does not require user speech.

302.7 With Limited Manipulation. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that does not require fine motor control or simultaneous manual operations.

302.8 With Limited Reach and Strength. Where a manual mode of operation is provided, ICT shall provide at least one mode of operation that is operable with limited reach and limited strength.

302.9 With Limited Language, Cognitive, and Learning Abilities. ICT shall provide features making its use by individuals with limited cognitive, language, and learning abilities simpler and easier.

Enclosure 4a, SOW Page 1 of 11 Pages 2015/Version 9

Page 21 of 12 Pages