Attachment_2_-_SOW_Sample_Task_0001_-_7-16-2015.pdf

ATTACHMENT 2

Page 1 of 32 HDTRA1-15-R-0022

Defense Threat Reduction Agency 8725 John J. Kingman Drive, MS 6201

Fort Belvoir, VA. 22060-6201

STATEMENT OF WORK (SOW)

Task Order 0001

Security and Counterintelligence Operations

July 16, 2015

1. BACKGROUND:

DTRA safeguards America and its allies from Weapons of Mass Destruction (WMD) including Chemical, Biological, Radiological, Nuclear and high yield Explosives (CBRNE), by providing capabilities to reduce, eliminate, and counter the threat and mitigate its consequences. In order to adapt and shape the dynamic Global Security Environment, DTRA develops new, and continues to expand existing, bilateral and multilateral engagements, supports the cooperative elimination of WMD threat abroad, improves the security and accountability of vulnerable nuclear, biological, and chemical material globally, continues to strengthen interagency and international partnerships, and continues to improve strategic global situational awareness to respond to emerging threats. Additionally, DTRA provides counter WMD capabilities to meet current threats and challenges by enhancing Combatant Commanders’ ability to eliminate and respond to WMD threats and vulnerabilities, to provide operational and technical support for a safe, secure, and effective nuclear deterrent, to develop a robust reach back capability to facilitate United States Government counter WMD operations, and to develop analytical tools and technology to detect, characterize, confront, defeat, protect against and remediate the full spectrum of CBRNE threats.

The United States Strategic Command (USSTRATCOM) Center for Combating Weapons of Mass Destruction (SCC-WMD) (Hereafter referred to as “Center”) supports Commander USSTRATCOM‘s accomplishment of Unified Command Plan (UCP) combating WMD roles and functions. In support of CDR USSTRATCOM, the Center synchronizes planning for DoD Combating WMD efforts; coordinates global combating WMD operations support; plans against global combating WMD capabilities that support campaigns to combat WMD in coordination with the geographic combatant commands and makes priority recommendations; and executes combating WMD operations, as directed.

This is a non-personal services contract to support the Defense Threat Reduction Agency/Strategic Command Center for Combating Weapons of Mass Destruction (DTRA/SCC- WMD), Security and Counterintelligence Office (J0XS). The Government shall not exercise any supervision or control over the contract service providers performing the services herein. The contract service providers shall be accountable solely to the Contractor who, in turn is responsible to the Government. Work under this effort may be performed at the DTRA’s locations in Albuquerque, New Mexico; Travis Air Force Base, California; Eglin Air Force Base, ATTACHMENT 1

Page 2 of 32 HDTRA1-15-R-0022

Florida; Kleber Kaserne, Kaiserslautern, Germany; and primarily, the Defense Threat Reduction Center (DTRC) in Fort Belvoir, Virginia. J0XS is responsible for Counterintelligence (CI) and Security management for DTRA. J0XS manages and implements DOD mandated J0XS CI programs. DTRA CI programs include, but are not limited to the following: Research and Technology Protection (RTP); Arms Control Treaties and International Agreements; CI Briefings and Debriefings; CI Research; Cyber CI; CI Escorts; CI Support; CI Services; CI Administration; Technical Surveillance Countermeasures (TSCM); Insider Threat; CI Analysts;

and CI Database Administration. DTRA Security programs include Physical, Industrial, Personnel, Operations (OPSEC), and Information Security; Antiterrorism/Force Protection;

Special Access Program (SAP), Insider Threat, Foreign Disclosure (FD), and the Special Security Office (SSO) under Intelligence Community Directives (ICD).

2. SCOPE: This SOW covers services for all duties and responsibilities within J0XS, to include its geographically separated locations in the following areas:

2.1 Incident management

2.2 Research

2.3 Finished documentation (e.g. reports, special studies, policy and procedures development, hazard and weakness vulnerability assessments, developing training programs and conducting cyber security vulnerability assessments).

2.4 Support to Insider Threat

2.5 Supply Chain Risk Management

2.6 Critical Infrastructure Protection

2.7 RDT&E testing and support to the DTRA/SCC-WMD CBRNE items of interest

2.8 Full Cyber Counterintelligence operations

2.9 Locksmith

2.10 Access Control Support

2.11 Janitorial Escort

2.12 Information Security

2.13 Operations Security

2.14 Industrial Security

Page 3 of 32 HDTRA1-15-R-0022

2.15 Operations and Staff Support

2.16 Special Security Office

2.17 Special Access Program

2.18 Foreign Disclosure

2.19 Alarm Monitors

3 REQUIREMENTS

The following tasks are indicative of the tasks the contractor shall perform. They are not all inclusive.

3.1 Operations Support and Senior Site Lead: The contractor shall:

3.1.1 Conduct duties relevant to all security disciplines and counterintelligence functions.

Write staff actions/reports and coordinate within organizational and with external entities.

Ensure that office staff actions are coordinated and on time.

3.1.2 Keep current on agency mission, new security requirements and how those requirements impact mission. Recommend cost effective means to implement guidance and reduce security risks.

3.1.3 Support the DTRA Security Awareness, Training and Education (SATE) initiative.

3.1.4 Provide critical substantive review or edit of J0XS related documents, plans, policies, procedures, resource and requirements documents, and agency responses to higher authority for signature by DTRA Director, Executive Director or J0XS leadership.

3.1.5 Manage the Enterprise Information System (EIS) by coordinating task actions with J0XS Personnel as well as other personnel throughout the Agency. As a Subject Matter Expert (SME), advise J0XS personnel on how to perform their EIS tasking functions correctly.

3.1.6 Develop Standard Operating Procedures (SOP) s for EIS and Staff Office duties.

SOPs should cover all responsibilities associated with the Operations and Staff contracted position and updated as needed. Develop and deliver training and briefings to other support personnel when necessary.

3.1.7 Provide a continuity book containing all pertinent information to sustain operations in an abnormal situation or environment. Include all reference materials such as current DTRA and J0XS policies, doctrines, and instructions.

Page 4 of 32 HDTRA1-15-R-0022

3.1.8 Participate in Staff Assistance Visits (SAV) to other inter-agency elements. Review relevant documentation, develop and prepare presentations and briefings as needed during the visits.

3.1.9 Provide support to J0XS’s CI and Security divisions. Assist with the updates and revisions of current J0XS policies, instructions, and memorandums.

3.1.10 The Senior Site Lead, known throughout this SOW as the Program Manager (PM), conducts duties and responsibilities normally associated with an on-site program manager.

3.1.10.1 Primary Point of Contact (POC) for all personnel actions, such as recruiting, retention, hiring replacements, and compliance with contractual agreements.

3.1.10.2 Provide up to 20 percent on duty time on-site as program manager duties that support the contract or contractor employees.

3.1.11 Requirement: Provide one (1) Level III to fill this position.

3.2 Special Security Office Support: The contractor shall:

3.2.1 Support the SSO by providing services for the receipt, accountability, transmission, reproduction, storage, safeguarding, and destruction of SCI and collateral classified information, records and reports (SCI Information Security) and by processing verifications of authorized personnel for access to appropriate material.

3.2.2 Escort and control access of SSO SCI Facilities (SCIF)s at a minimum from 0600 – 1800 Monday through Friday (excluding federal holidays or days when the DTRA facilities are closed) and occasional requirement for escort duties after 1800 hours (not to exceed an 8-hour workday).

3.2.3 Screen visitors and control access to all SCIFs using a local database, the Joint Personnel Adjudication System (JPAS) and the Scattered Castles database.

3.2.4 Develop and/or modify all SSO step-by-step processes.

3.2.5 Develop and/or modify the SSO SOP and Emergency Action Plan (EAP).

3.2.6 Submit weekly and monthly roll-up work accountability reports.

3.2.7 Conduct all required SCIF inspections, response tests and Intrusion Detection System (IDS) tests.

3.2.8 Conduct SCI indoctrinations and debriefings.

Page 5 of 32 HDTRA1-15-R-0022

3.2.9 Conduct classification marking reviews of all material leaving the SCIF and provide advice and guidance on the marking of SCI material.

3.2.10 Enter approved equipment being introduced to a SCIF into the equipment log.

3.2.11 Ensure that any equipment that is being removed from a SCIF has been properly sanitized and approved by the SSO Information Assurance Manager (IAM).

3.2.12 Process SCI permanent certifications (inbound and outbound).

3.2.13 Issue courier cards, courier briefings and prepare commercial airlines authorization letters.

3.2.14 Assist with the management of the foreign travel reporting program for the SSO.

3.2.15 Assist with the management of the contractor SCI nomination program for the SSO.

3.2.16 Coordinate meetings and conferences held in the SCIFs.

3.2.17 Provide administrative data entry.

3.2.18 Provide files and record Maintenance.

3.2.19 Provide internal mail distribution.

3.2.20 Provide Defense Courier Service (DCS) package pick-up.

3.2.21 Track completion rates of the required annual SCI refresher training(s)

3.2.22 Prepare Fixed Facility Checklists (FFC) and TEMPEST Addendums and modify as needed for each DTRA SCIF.

3.2.23 Required skills for contractor SCIF personnel: The contractor personnel shall:

3.2.23.1 Possess integrated security services skill sets in the following areas: SSO operations;

SCIF operations; SCI Personnel Security; SCI Information Security; SCI Physical Security; SCI TEMPEST actions and procedures; and, SCI Industrial Security. The contractor shall have recent, in-depth, government/contractor SSO operations experience, and recent, in-depth SCIF operations experience.

3.2.23.2 Provide mid-level contractor personnel that are thoroughly familiar with DoDM

5105.21 Volumes 1-3, to administer the receipt, control, and accountability of SCI. Be familiar with the ICD 705, Intelligence Community Standard (ICS) 705-1 and 705-2, for construction, accreditation, and technical requirements for SCIFs. Support delivery of services for SCIFs and perform the day-to-day SCI security oversight functions for the SSO and subordinate SCIFs.

Page 6 of 32 HDTRA1-15-R-0022

3.2.23.3 Possess strong customer service skills to handle customer’s questions, complaints, and requested support in a professional, personable and courteous manner. Areas of expertise include computer operations, SCIF procedures, use of secure telephones, removal of classified information, indoctrinating personnel, and accepting security clearances from external agencies to other security and non-security issues occurring during day-to-day SCIF operations.

3.2.24 Maintain the Support Program Communication Security (COMSEC) account by ensuring accountability of Crypto material, key, and key-loading equipment.

3.2.25 Maintain Crypto-cleared personnel and adhere to all applicable COMSEC regulations and guidelines.

3.2.26 Be prepared to receive, stage, transport, store, safeguard, install, initialize, and operate Cryptographically Controlled Items (CCI), COMSEC equipment, and associated Key Material (KEYMAT) of the relevant types required for the Support Program including but not limited to Secure Telephone Equipment (STE), KG-175A, etc.

3.2.27 Provide one (1) Security Specialist III and four (4) Security Specialists II in support of SCIF operations.

3.3 RESERVED

3.4 Foreign Disclosure Support: The contractor shall:

3.4.1 Assist in preventing collection of information about U.S. personnel and activities by adversary. Reduce unauthorized release of information to foreign nationals and Governments.

Assist in the development of FD policies and procedures. Assist in the development of FD processes and procedures to address DTRA mission, travel, and foreign visitors to DTRA facilities. This includes assisting with review of internal processes and information.

3.4.2 Possess proven skills to develop and present FD presentations to a diverse audience.

3.4.3 Provide specialized staff support to the J0XS, to include but not limited to processing J0XS related documentation, tasks specifically focused on the Agency FD Program and support activities associated with the National Disclosure Policy-1 (NDP-1).

3.4.3.1 Perform independent analysis and evaluation of current DTRA policies and procedures to determine compliance with national and DoD policies and requirements.

3.4.3.2 Assist with updating and/or revising current DTRA and J0XS policies and guidance for FD.

3.4.3.3 Support the DTRA Security Awareness Program by providing FD and Foreign Visit training, briefings, articles, and other products.

Page 7 of 32 HDTRA1-15-R-0022

3.4.3.4 Draft, write or edit FD related documents, plans, policies, procedures, resource and requirements, and Agency responses to higher authority for signature by DTRA Director, Deputy Director, or Chief, J0XS.

3.4.3.5 Write FD articles for posting on the DTRA net or DTRA Sentinel Newsletter, as requested.

3.4.4 Provide one (1) Security Specialist III and one (1) Security Specialist II with experience providing foreign disclosure duties and responsibilities to the DoD.

3.5 Personnel Security Support: The contractor shall:

3.5.1 Support DTRA/SCC-WMD Personnel Security (PS) Program in investigative and administrative actions needed to ensure that all personnel who require access to information or facilities are efficiently and effectively processed for the appropriate security clearance and/or SCI eligibility prior to granting access to DTRA/SCC-WMD facilities and information. This includes:

3.5.1.1 Request/Review/Initiate/Track Background Investigations.

3.5.1.2 Provide accurate and analytical establishment, maintenance, review, receipt, accountability, transmission, reproduction, storage, safeguarding, and destruction of collected personal history, case files, data entry, records, files, and reports according to PS policy and procedures.

3.5.1.3 Coordinate with the appropriate agencies for reciprocal recognition of existing investigations and adjudications prior to the initiation using consistent Personnel Security standards prior to initiation.

3.5.1.4 Review and process of hiring nomination packages to determine they are complete, detect anomalies, and process for designated position sensitivity levels.

3.5.2 Develop and deliver Personnel Security briefings and debriefings.

3.5.3 Develop and/or modify all Personnel Security step-by-step processes and SOPs for Government PM/COR approval.

3.5.4 Conduct continuous review of Personnel Security reportable items. Accurately establish, manage, administer, monitor, release, and place into historical DTRA/SCC personnel JPAS, eQIP and local Security Database records. Immediately report to the Government PM/COR if/when potential derogatory information becomes known on personnel that affects their continued eligibility to sensitive and classified positions.

Page 8 of 32 HDTRA1-15-R-0022

3.5.5 Develop, review, and maintain PS In/Out Processing Center administration duties.

Accurately review all PS In and Out Processing prior to allowing access to DTRA facilities and local area networks.

3.5.6 Develop, review and maintain step-by-step processes for visitor services and SOPs for Government PM/COR approval.

3.5.7 Accurately process request for visit authorizations (inbound and outbound).

3.5.8 Issue collateral courier cards and courier briefings.

3.5.9 Prepare applications for Pentagon and NCR badge for Government PM/COR review and signature.

3.5.10 Ensure all visitors are properly identified, cleared, and need to know is validated prior to granting access to DTRA/SCC-WMD facilities or local area networks by issuance of the appropriate DTRA/SCC-WMD badge, CAC or IDs.

3.5.11 Provide two (2) Security Specialist I for DTRA HQ; one (1) Security Specialist I for Albuquerque, New Mexico; and, one (1) Security Specialist I for Travis AFB, California.

3.6 Antiterrorism/Force Protection (AT/FP) Support: The contractor shall:

3.6.1 Assist in developing, presenting and facilitating Antiterrorism/Force Protection (AT/FP) training program. AT/FP Training sessions are conducted monthly and daily during Security Week to provide required training to all DTRA personnel assigned to the DTRC.

Anticipated training includes conducting annual Level I FP Awareness training; preparing and providing Level I country-specific threat briefings to overseas travelers; orchestrating attendance of FP Officers at the Level II Antiterrorism Officer course; and maintain statistical data on training at the HQ and subordinate commands. The contractor shall participate in Emergency Operations Center (EOC) exercises and assist with planning and executing of FP exercises.

3.6.2 Review Vulnerability Assessments of DTRA facilities to ensure they are conducted IAW requirements specified in DoDI 2000.16. Provide a supplement to the vulnerability assessment to ensure all DoD requirements are met.

3.6.3 Identify the potential terrorist threats to DTRA personnel and assets to assist in developing an effective antiterrorism program. Support the AT/FP Program by providing assistance in developing, presenting, and updating threats analysis. This includes providing the factors or terrorist operational capability, activity, intentions, and operating environment that Commanders at all levels who understand the threat can assess their ability to prevent, survive, and prepare to respond to an attack.

3.6.4 Prepare and deliver situational awareness support through analytical AT/FP program assistance. This includes assisting in the review of intelligence and open source information;

Page 9 of 32 HDTRA1-15-R-0022 recommending AT/FP informational, instructional and decision briefings; and assisting in preparing advisories to increase AT/FP awareness within the workforce.

3.6.5 Assist the government in drafting and developing AT/FP plans and procedures critical to deterrence, detection, defense, and response to terrorist incidents. Interpret higher level AT/FP policy and guidance; assist in developing and implementing DTRA AT/FP policy and guidance; and assist in the review of subordinate activity AT/FP plans. Plans drafted by the AT/FP team will include the following key elements, as directed by DoDI 2000.16, Standard 7:

3.6.5.1 Terrorism Threat Assessment

3.6.5.2 Vulnerability Assessment

3.6.5.3 Risk Assessment

3.6.5.4 AT Physical Security measures

3.6.5.5 Terrorist Incident Response measures

3.6.5.6 Terrorist Consequence Management measures

3.6.5.7 Attend AT/FP working Groups/Committees

3.6.6 Redacted

3.6.7 Possess experience in Antiterrorism/Force Protection as listed above and has taken an approved Antiterrorism Level II course as listed in DoDI 2000.16.

3.6.8 Support the AT/FP program by providing assistance in developing, presenting, and updating threat analysis. The threat analysis shall include the factors of terrorist operational capabilities, activities, intentions, and operating environment.

3.6.9 Prepare situational awareness briefings. Deliver situational awareness support through analytical AT/FP program assistance. This includes assisting in the review of intelligence and open source information and recommending AT/FP actions to appropriate leadership to mitigate risk; assisting in the development of AT/FP informational, instructional, and decision briefings; and assisting in preparing advisories to increase AT/FP awareness within the workforce.

3.6.10 Provide one (1) Security Specialist III to provide support to the AT/FP section.

3.7 Information Security Support: The contractor shall:

Page 10 of 32 HDTRA1-15-R-0022

3.7.1 Provide support in the development and execution of the Agency’s Information Security Program (ISP) to include classification/declassification program, security education and training programs. Develop relevant Security Classification Guides (SCG).

3.7.2 Develop and prepare draft SOPs, which incorporate specific implementing guidance and requirements and all essential guidance and ensure standardization throughout the J0XS.

The essential elements will be outlined and approved by the Government Project Officer (PO)/PM. The format will be in accordance with DTRA Instruction 5025.2. Each SOP will be revised and reviewed annually to ensure it is up to date and reflects current policy. Final SOPs will be delivered in hard copy and in an electronic format. The Government will provide resources data as required.

3.7.3 Review and manage the Automatic Declassification Program. Establish contacts and proven ability in the Automatic Declassification community. Review and manage the Mandatory Declassification Program. Establish policies and procedures for processing mandatory declassification review requests.

3.7.4 Support Agency-wide J0XS efforts.

3.7.5 Assist with the J0XS policy development, coordination and implementation.

3.7.6 Collaborate with subject matter experts and J0XS Division Chiefs to develop, coordinate and publish DTRA security procedures and documents.

3.7.7 Provide recommendations and options for intra- and inter-Agency coordination to the Chief, J0XS.

3.7.8 Develop presentations and briefs, as requested.

3.7.9 Develop products for the security education and awareness training program.

3.7.10 Provide one (1) Security Specialist II to support the DTRC’s information security program and one (1) Security Specialist II to support Eglin’s information security program.

3.7.11 Site Lead for ABQ. Only applicable to this location. The Security Specialist will act as the primary security specialist for the DTRA-ABQ Defense Nuclear Weapons School providing information security, physical security and OPSEC support. In addition, the Security Specialist will act as the On-Site Contract Manager (OSCM) for the Entry Control Officers and Security Escorts. Duties as the OSCM will include the following:

3.7.11.1 Oversee the day-to-day operations for the Entry Control Officers (ECO) ensuring compliance with all security requirements.

3.7.11.2 Conduct post inspections to determine ECOs suitability to perform duties, cleanliness of post, knowledge for security responsibilities, etc.

Page 11 of 32 HDTRA1-15-R-0022

3.7.11.3 Report any and all questionable situations to the COR or Field Office Chief.

3.8 Industrial Security Support: The contractor shall:

3.8.1 Assist in the development of directives, instructions, and SOPs for the management and execution of the Agency’s Industrial Security program and NATO program.

3.8.2 Assist in processing Contract Security Classification Specification, DD Form 254, in support of the Agency’s Industrial Security Program. Coordinate with the contracting office to close out DD Form 254s.

3.8.3 Provide one (1) Security Specialist II to support DTRC’s Industrial Security Program.

3.9 Operations Security Support: The contractor shall:

3.9.1 Assist in the protection of Agency critical information by implementing all aspects of DoD Directive 5205.02E, DoD Operations Security (OPSEC) Program, and DoD 5205.02M, DoD Operations Security (OPSEC) Manual.

3.9.2 Conduct security reviews of all contracting documents being considered for public release through the Agency’s Public Affairs Office.

3.9.3 Conduct security reviews of all contracting documents being considered for release to FedBizOpps website.

3.9.4 Assist in the development and maintenance of the Agency OPSEC Directive and Instruction.

3.9.5 Assist in the development of OPSEC plans in support of various programs, tests, and exercises sponsored and supported by the Agency.

3.9.6 Conduct face-to-face OPSEC training for new Agency personnel. Also, provide custom-tailored OPSEC training throughout the Agency as requested.

3.9.7 Conduct OPSEC assessments of sub-components.

3.9.8 Coordinate and support OPSEC surveys conducted by third-party organizations, such as the Joint Information Operations Warfare Center and the 1st Information Operations Command.

3.9.9 Redacted

Page 12 of 32 HDTRA1-15-R-0022

3.9.10 Redacted

3.9.11 Redacted

3.9.12 Redacted

3.9.13 Redacted

3.10 Locksmith Services: The Contractor shall:

3.10.1 Redacted

3.10.2 Prohibit the use of Government issued keys by any persons other than the contractor’s employees. The contractor shall prohibit the opening of locked areas by contractor employees to permit entrance of persons other than contractor employees engaged in the performance of assigned work in those areas, or personnel authorized entrance by the PM/COR.

3.10.3 Shall possess and maintain Locksmith certification with a Safe Inspection certification during the execution of this contract.

3.10.4 Install, repair, and maintain door locks, cipher locks, electromechanical locks, drill and repair Government safes, and perform combination changes including cutting and maintaining keys.

3.10.5 Assist in maintaining accountability of all security containers, maintains the Agency’s work order database, and coordinates all locksmith related wok orders.

3.10.6 Provide one (1) full time locksmith support during Agency work hours. Provide 24-hour emergency on-call locksmith services, with a two-hour response time during non-duty hours. The locksmith shall be stationed at the DTRA HQ facility and shall support the other local DTRA facilities.

3.11 Janitorial and Additional Escort Services: The contractor shall:

3.11.1 Provide Escorts for un-cleared janitorial and cafeteria personnel as required.

NOTE: Must maintain the confidentially of all official business conducted while performing their official duties. Must not allow un-cleared personnel to remove anything other than trash from an office space without prior approval from the space occupant or a supervisor.

3.11.2 Read and adhere to DTRC Physical Security SOP #3, Housekeeping Escort Procedures.

3.11.3 Additional Escort Services are required to escort the Agency Café Services contractor. Escorts for Café support employees will be provided each month. During each

Page 13 of 32 HDTRA1-15-R-0022 operational business day, the tentative escort schedule is as follows. This equates to approximately 4 hours per day and 1040 hours per year.

One 0630-0640 One 0655-0705 One 0730-0740 One 1030-1040 One 1055-1105 One 1155-1205 One 1205-1210 One 1340-1400

3.11.3.1 Provide four (4) full-time Cleared Escorts and two (2) part-time Cleared Escorts to conduct the Café Escort services.

3.11.4 Albuquerque Requirements:

3.11.4.1 Security Escort (SE) shall accompany un-cleared personnel within DTRA Albuquerque spaces. SE will announce any un-cleared personnel when entering a controlled access area or area where classified is readily visible or actively being used/displayed/processed.

3.11.4.2 Exercise good judgment at all times and provides effective, appropriate actions to counteract potential security infractions.

3.11.4.3 Ensure compliance with government regulations and procedures.

3.11.4.4 Shall report to Contract Officer Representative (COR) improper or suspicious behavior/activity within the work areas, courtyards, or in DTRA ABQ parking lots.

3.11.4.5 Follow DTRA security policy at all times.

3.11.4.6 Shall follow chain of command and notify the On Site Contract Manager / Security Specialist (OSCM/SS) concerning all questions, events, incidents, etc.

3.11.4.7 Will be required to move with escorted personnel to maintain positive visual control at all times

3.11.4.8 Prohibited Items - When wireless or Personal Electronic Devices (PED)s are identified, SE will challenge person in possession to ensure only authorized items are brought into DTRA spaces.

3.11.4.9 DTRA Policies - SE shall understand and enforce all DTRA security policies.

3.11.4.10 Security Incidents - Notify OSCM/SS of complete details for any security incidents, events, or occurrences within 10 minutes.

Page 14 of 32 HDTRA1-15-R-0022

3.11.4.11 Provide three (3) Full Time Cleared Escorts (Secret) and three (3) Part Time Cleared Escorts to support operations within Albuquerque, New Mexico.

3.11.5 Emergency Procedures –

3.11.5.1 Take proper action as specified in DTRA directives as required during emergencies (fire, bomb threat, medical, etc.).

3.11.5.2 When physically possible and under required conditions, ensure all escorted personnel have exited DTRA spaces.

3.11.5.3 Notify the COR regarding emergency as soon as the emergency situation permits.

3.11.5.4 Follow the instruction of emergency Control Officer (ECO) and/or Emergency Response personnel

3.11.5.5 Maintain poise and self-control at all times.

3.11.6 Physical Requirements:

3.11.6.1 Shall stand and walk for extended periods of time.

3.11.6.2 Shall function in all types of weather environments.

3.11.6.3 Shall be alert and orientated at all times while on duty.

3.11.6.4 Shall perform all necessary physical duties unaided (i.e., walking, standing, etc.).

3.12 Access Support (Front Lobby): The contractor shall:

3.12.1 Answer telephone calls, greet customers (both visitors and permanent parties), respond to security emails, take messages and route calls to a responsible Security Team Lead.

3.12.2 Accurately inventory and ensure all badges are present and/or accounted for at the beginning and end of each tour of duty and maintain a record of all badges issued. Immediately notify the PM/COR of unaccounted for badges. Possess a general knowledge of Microsoft Office (Word, Excel, PowerPoint, Access, and Outlook) programs and databases in order to perform the varied administration duties required by the Security Division.

3.12.3 Process all customers to the DTRC. Ensure that all visitors entering the DTRC are in possession of a valid DTRA security access badge. Verify the visitor’s identification from a picture ID, validate visitor clearance status and process badges utilizing the automated security database, JPAS and if applicable call to the SSO in less than five (5) minutes, except in unusual

Page 15 of 32 HDTRA1-15-R-0022 circumstances. Whenever a security clearance cannot be validated, the visitor shall be added to the system and issued an “Escort Required” badge.

3.12.4 Assist visitors in contacting their DTRA sponsor.

3.12.5 Brief sponsors of visitors issued “Escort Required” badges, on their responsibilities as escorts for unclear personnel.

3.12.6 Ensure all badges are properly turned in or invalidated when the individual no longer is granted or needs access. All turn-ins must be annotated in the security database(s) or the proper badge log.

3.12.7 Maintain accurate forms, databases and logs for all daily visits and badge inventories.

3.12.8 Be proficient in PowerPoint, Access, and Outlook programs and databases in order to perform the varied administration duties required by the Security Division.

3.12.9 Compose, edit and prepare memorandums, reports, forms, and other security-related material as required for final review by Security Team Lead.

3.12.10 Receive, verify, process, enter, and maintain accurate security related databases, logs, and file system for all incoming and outgoing visits. Maintain positive control of the log sheets used to issue temporary badges, to include making data entries to provide to the sponsor to sign as necessary to complete the log sheet.

3.12.11 Ensure all requests are validated by JPAS and for Need to Know with DTRA sponsor.

3.12.12 Provide access support (validating appropriate level of security clearance eligibility and need to know) before issuing badge.

3.12.13 Maintain the confidentiality of all official business conducted while performing duties in support of this contract.

3.12.14 Provide weekly reports and metrics to the PM/COR.

3.12.15 Provide two (2) General Clerks (Level II) to support access to the DTRC facility.

3.13 Entry Control Officer Services: (Kirtland Air Force Base, New Mexico) The contractor shall:

3.13.1 Exercise good judgment at all times and provides effective, appropriate actions to counteract potential security infractions.

Page 16 of 32 HDTRA1-15-R-0022

3.13.2 Ensure compliance with government regulations and procedures.

3.13.3 Report to COR/PM improper, or suspicious behavior/activity within the work areas, courtyards, or in DTRA Albuquerque (ABQ) parking lots.

3.13.4 Report if prohibited items, identified on the prohibited posters, are being brought into DTRA facilities.

3.13.5 Follow DTRA security policy at all times.

3.13.6 Answer telephone calls, acknowledge each person, respond to inquiries or take messages and/or contact appropriate sponsor or POC.

3.13.7 Follow chain of command and notify the OSCM/SS concerning all questions, events, incidents, etc.

3.13.8 Process and validate clearances of incoming personnel and issue badges.

3.13.9 Ensure that all personnel entering DTRA are in possession of a valid DTRA security access badge.

3.13.10 Establish positive identification by visually checking the badge photo with the individual possessing the badge. May require checking other forms of identification.

3.13.11 Conduct a hands-on badge check of all visitors, contractors, or unrecognized persons.

3.13.12 Verify the visitor’s identification from a Government issued picture ID, validate visitor clearance status, and process badges utilizing the automated security database, when a security clearance cannot be validated, the visitors information shall be added to the Visitor Register Log and issued an “Escort Required” Badge.

3.13.13 Ensure badges are available in advance based on lists or requests for conferences, meetings, VIP, etc.

3.13.14 Ensure all badges are properly turned in or invalidated when the individual no longer is granted or needs access. All turn-ins shall be annotated in the proper badge log.

3.13.15 Determine if security access badges are currently valid. If expired or otherwise invalid, dent entry, confiscate the badge and advise the individual to call the DTRA ABQ Visitor Control Office.

3.13.16 Check security access badge for obvious visual discrepancies. If discrepancies are noted, deny entry, detain the individual, and contact the DTRA ABQ Visitor Control Office or Chief, Albuquerque Field Office for further instructions.

Page 17 of 32 HDTRA1-15-R-0022

3.13.17 Determine condition of security access badges. If it is frayed, worn, or badly mutilated, instruct the individual to call the DTRA ABQ Visitor Control Office.

3.13.18 Deny access to DTRA ABQ personnel or visitors who forgets their badges until their clearance and identity can be verified by cross checking the individual’s identification card (Military or Civilian) against the DTRA ABQ Secure Access Browser application. The DTRA ABQ Visitor Control Office will resolve any problems once clearance and identity have been verified and contractor can issue the appropriate temporary badge and allow entry.

3.13.19 Issue a temporary badge with a “0” to visitors and other personnel without appropriate DTRA ABQ Facility access. These personnel must be escorted by a permanent DTRA employee to gain access to the facility, and must be escorted at all times while in DTRA ABQ facilities. Once clearance and identity have been verified, contact the permanent DTRA employee via phone and have them come to the Entry Control Point (ECP). Have both parties fill out their appropriate entries on the visitor log completely and legibly written/printed.

3.13.20 Brief sponsors of visitors issued “Escort Required” badges, on their responsibilities as escorts for unclear personnel as specified in the J0XS SOP entitled Escort Procedures and Responsibilities for Unclear Personnel in the ECP Reference Book.

3.13.21 Immediately contact OSCM/SS for any situation and issues prior to taking any action if no policy is in place or if uncertain of how to deal with them.

3.13.22 Provide four (4) full-time and three (3) part-time Security Guards (Level I) to support the Albuquerque Field Office access control efforts.

3.14 Security and CI Database Programmer Services: The contractor shall:

3.14.1 Redacted

3.14.2 Redacted

3.14.3 Redacted

3.14.4 Redacted

3.14.5 Redacted

3.14.6 Redacted

3.14.7 Redacted

3.14.8 Redacted

Page 18 of 32 HDTRA1-15-R-0022

3.14.9 Redacted

3.14.10 Redacted

3.14.11 Redacted

3.14.12 Redacted

3.14.13 Redacted

3.14.14 Redacted

3.14.15 Redacted

3.14.16 Redacted

3.15 Technical Surveillance Countermeasures (TSCM) Support: The contractor shall:

3.15.1 Redacted

3.15.2 Redacted

3.15.3 Redacted

3.15.4 Redacted

3.15.5 Redacted

3.15.6 Redacted

3.15.7 Redacted

3.15.8 Redacted

3.15.9 Redacted

3.15.10 Redacted

3.15.10.1 Redacted

3.15.10.2 Redacted

3.15.10.3 Redacted

3.15.10.4 Redacted

Page 19 of 32 HDTRA1-15-R-0022

3.15.11 Redacted

3.15.12 Redacted

3.15.13 Redacted

3.15.14 Redacted

3.15.15 Redacted

3.15.16 Redacted

3.15.17 Redacted

3.15.18 Redacted

3.15.19 Redacted

3.15.20 Redacted

3.15.21 Redacted

3.15.22 Redacted

3.15.23 Redacted

3.15.24 Redacted

3.15.25 Redacted

3.16 Insider Threat Support: The contractor shall:

3.16.1 Redacted

3.16.2 Redacted

3.16.3 Redacted

3.16.4 Redacted

3.16.4.1 Redacted

3.16.4.2 Redacted

3.16.4.3 Redacted

Page 20 of 32 HDTRA1-15-R-0022

3.16.4.4 Redacted

3.16.4.5 Redacted

3.16.4.6 Redacted

3.16.4.7 Redacted

3.16.4.8 Redacted

3.16.4.9 Redacted

3.16.5 Redacted

3.17 Counterintelligence Services: The contractor shall:

3.17.1 Redacted

3.17.2 Redacted

3.17.3 Redacted

3.17.4 Redacted

3.17.5 Redacted

3.18 Research and Technology Protection (RTP) Support: The contractor shall:

3.18.1 Redacted

3.18.2 Redacted

3.18.3 Redacted

3.18.4 Redacted

3.18.5 Redacted

3.18.6 Redacted

3.18.7 Redacted

3.18.8 Redacted

Page 21 of 32 HDTRA1-15-R-0022

3.18.9 Redacted

3.18.10 Redacted

3.18.11 Redacted

3.18.12 Redacted

3.18.13 Redacted

3.18.14 Redacted

3.19 Counterintelligence Analysis and Production Support: The contractor shall:

3.19.1 Redacted

3.19.2 Redacted

3.19.3 Redacted

3.19.4 Redacted

3.19.5 Redacted

3.19.6 Redacted

3.19.7 Redacted

3.19.8 Redacted

3.19.9 Redacted

3.19.10 Redacted

3.19.11 Redacted

3.19.12 Redacted

3.19.13 Redacted

3.19.14 Redacted

3.19.15 Redacted

3.19.16 Redacted

Page 22 of 32 HDTRA1-15-R-0022

3.19.17 Redacted

3.19.18 Redacted

3.19.19 Redacted

3.19.20 Redacted

3.19.21 Redacted

3.19.22 Redacted

3.19.23 Redacted

3.20 Biographic Database Implementation and Maintenance Support: The contractor shall:

3.20.1 Redacted

3.20.2 Redacted

3.20.3 Redacted

3.20.4 Redacted

3.20.5 Redacted

3.20.6 Redacted

3.20.7 Redacted

3.20.7.1 Redacted

3.20.7.2 Redacted

3.20.7.3 Redacted

3.20.7.4 Redacted

3.20.7.5 Redacted

3.20.8 Redacted

3.20.8.1 Redacted

3.20.8.2 Redacted

Page 23 of 32 HDTRA1-15-R-0022

3.20.9 Redacted

3.20.10 Redacted

3.20.10.1 Redacted

3.20.10.2 Redacted

3.20.10.2.1 Redacted

3.20.10.2.2 Redacted

3.20.10.2.3 Redacted

3.20.10.3 Redacted

3.20.10.4 Redacted

3.20.11 Redacted

3.21 Cyberspace Support to Counterintelligence: The contractor shall:

3.21.1 Redacted

3.21.2 Redacted

3.21.3 Redacted

3.21.4 Redacted

3.21.5 Redacted

3.21.6 Redacted

3.21.7 Redacted

3.22 RESERVED

3.23 Information Assurance. The contractor shall:

3.23.1 Facilitate the development of policies; write SOP’s and instructions. Review existing DTRA SSO, IA and Computer Network Defense (CDN) Policies and in accordance with the applicable regulation shall recommend updates to the DTRA SSO Policies. Conduct an assessment of the current policies during the transition period. Within 15 days after access, Page 24 of 32 HDTRA1-15-R-0022 recommend a listing of policies to be updated, and supply a schedule of planned updates.

Instructions shall incorporate all essential guidance and ensure standardization and compliance with DoD policy through the Agency.

3.23.1.1 Assist with the Office of the Chief Information Officer (J-6) Policy development, coordination implementation.

3.23.1.2 Collaborate with SMEs to develop, coordinate and publish DTRA security procedure documents.

3.23.1.3 Provide recommendations options for intra- and inter-Agency coordination.

3.23.1.4 Develop presentations and briefs as requested.

3.23.2 Perform self-assessments using the standard checklist in DD 5105.21-M1 and internal quality control measures to determine if the current security procedures are both thorough and efficient. Recommend changes, which are within the boundaries of existing security regulations to procedures that will improve the delivery of security services to DTRA.

3.23.3 Manage and administer local security databases to include those that track information on document control numbers, clearances, and visit requests. Provide systems reports on an as needed basis. Provide security support database management through program analysis, integration, functional application and operational implementation of the Security Access Database system to support personnel Security activities.

3.23.4 Integrate data tracking software/programming resolutions to support documents controls, security clearances, and visit requests.

3.23.5 Deliver database system reports on an as-needed basis.

3.23.6 Provide program analysis, integration, functional application and operational implementation of the Security Access Database system to support Personnel Security and various other IA and CND activities

3.23.7 Provide IT based system security reviews of DTRA IT infrastructure; participate in configuration change and engineering review boards, as needed.

3.23.8 Provide CND and IA program analysis and support to include white papers, briefings, research, SME interpretation, and coordination, as needed to the OCIO.

3.23.9 Provide IA, CND, and System Engineering surge support, as needed.

3.23.10 Minimum IAT II certification required.

3.23.11 Experience with Microsoft SQL Server 2008 experience required.

Page 25 of 32 HDTRA1-15-R-0022

3.23.12 Have knowledge of DISA technical security implementation guides (STIGs) and checklists for SQL Server and Microsoft Office Products.

3.23.13 Ability to create ad-hoc queries against database(s) for comparison of data (security, personnel, Active Directory, Learning Management System, etc.) for J0XS, J6, and other senior DTRA management to answer specific questions not covered by the pre-built reports in the SecureAccess personnel security database.

3.23.14 Knowledge of Microsoft Active Directory structure and data fields.

3.23.15 Experience with Visual Basic 2010 development.

3.23.16 Ability to perform duties with minimal supervision or outside expertise.

3.23.17 Ability to represent J0XS in a technical capacity with regard to changes to workstations and office products along with proposed changes to Agency processes to that may have an impact on IT services and procedures.

3.23.18 Provide one (1) Information Assurance III to support Personnel Security and Insider Threat program

3.24 Alarm Monitor: The contractor shall:

3.24.1 Possess the following skill-set: 9-1-1 type operator experience, military command and control such as Law Enforcement Desk Sergeant or Central Security Controller, knowledge of computer software to assess anomalies, Excel, PowerPoint, MS Word, Windows, Intrusion Detection Equipment (IDE) background/experience, and customer oriented personality to deal with the public with ability to make sound judgments under normal to emergency conditions.

3.24.2 Monitor the intrusion detection system and immediately assess the cause of the alarm through the appropriate utilization of the closed circuit television system; taking action as required to respond, report, correct or resolve any abnormalities.

3.24.3 Compile daily security forms and check sheets, ensuring all are properly completed, contacting and notifying appropriate personnel of any discrepancies.

3.24.4 Monitor alarms and coordinate appropriate responses to suspicious activities and other incidents; prepare written event reports, when necessary.

3.24.5 Maintain the daily events log for each shift recording daily or routine patrols and security checks. Maintain a detailed description tracking of any events and the actions taken during each tour.

Page 26 of 32 HDTRA1-15-R-0022

3.24.6 Maintain constant monitoring of the closed circuit television system to ensure coverage of all critical areas. Periodically scan areas to detect suspicious activities. Use cameras to supplement for inoperative alarms.

3.24.7 Possess and maintain all required federal and state Alarm Monitor training and certifications.

3.24.8 Provide two (2) Security Specialists II to perform as Alarm Monitors.

3.25 Security Installation Technician (Electronic Security Systems): The contractor shall:

3.25.1 Provide technical hands on installation, service, programming, test execution, and low voltage wiring services for Access Control Systems, IP Based Digital Video Security Systems, analog Closed Circuit Television (CCTV) systems, mass notification systems, intercom, and data transmission systems including wire, fiber, and RF.

3.25.2 Be familiar with different types of access control credentials such as magnetic stripe, proximity, and smart card technologies.

3.25.3 Have a basic understanding and knowledge of personal computers and their use, the use of standard software applications such as MS Word® and Excel and general use of the internet and email applications.

3.25.4 Have a background in performing installations of noted systems and have a technical background in electronics/electrical systems in general.

3.25.5 Have knowledge of and be able to interpret and follow installation drawings, schematics, technical manuals, system configuration sheets/designs, of other technical reference documents.

3.25.6 Have experience in pulling cables, terminating cables, connecting cable, mounting sensors, door control hardware, and dressing cables in a cabinet or rack, installing data transmission system, fiber systems, Ethernet, communications circuits, sensors, card reading and processing devices, workstations, servers, power supplies, AC and DC power applications, uninterrupted power supplies, surge protection, and other electronic security systems hardware and software.

3.25.7 Have a working knowledge and testing skills for using common tools of the trade including but not limited to hand tools, limited fabrication tools, meters and probes.

3.25.8 Demonstrate the ability to document and provide precision measurements, test data, and troubleshooting when required.

3.25.9 Able to work alone or as part of an installation team in support of this section.

Page 27 of 32 HDTRA1-15-R-0022

3.25.10 Provide one (1) Security Installation Technician II to serve as the Security Installation Technician for DTRA’s Physical Security Program.

4 GENERAL

4.1 Place of Performance: Services provided under the scope of this contract will be performed at one or more of the following DTRA locations: DTRC at Fort Belvoir, Virginia;

Herndon, Virginia; Eglin Air Force Base, Florida, Kirtland Air Force Base, Albuquerque, New Mexico; and Travis Air Force Base, California. Support requirements may create a need for travel within local areas, CONUS or OCONUS. For situational reasons to the benefit of the Agency (such as when the DTRC is physically closed but open virtually), contractor employees, primarily in the NCR, may be permitted to work off-site using Government Furnished Equipment (GFE) with PM/COR approval.

4.2 Support Hours: Contractor shall support the J0XS’s operations during the core Government hours 52 weeks an year. Each contractor employee shall establish and schedule an 8 ½ or 9-hour duty work period approved by the PM/COR. Contractor employees may temporarily alter work hours or schedules based on work tempo with approval from PM/COR.

Contractors in key personnel positions may be required to work alternate shifts necessitated by assigned tasks. The standard schedule must encompass the DTRA core hours of 9AM to 3PM (0900 – 1500), and include a one-half or one-hour unpaid lunch break. Standard work hours shall be Monday through Friday during normal duty hours except for the following Federal Holidays:

New Year’s Day Martin Luther King Jr. Day President’s Day Memorial Day Independence Day Labor Day Columbus Day Veterans Day Thanksgiving Christmas

Note: Contractor employees may participate in any additional Presidential-appointed holiday(s) or Federal Government day(s) off in conjunction with holidays at the discretion of the contractor with approval from the PM/COR. Contactor may be required to remain on duty when necessary due to DTRA mission requirements.

Note: The below list of functions, designated with an asterisk, supports operations that may operate outside the normal duty hours mentioned above. Contractor personnel working in these functions should be prepared to provide services during non-duty hours. During these operations, the contractor employee should consult with the Senior Site Lead and PM/COR to adjust duty hours to not exceed an eight ½-hour duty day or 40-hour workweek.

4.3 Security and Other Special Considerations: The contractor shall possess the appropriate facility clearances and all personnel assigned to the contract shall have the following clearance levels:

Page 28 of 32 HDTRA1-15-R-0022

TOP SECRET//SCI

Counterintelligence Analysts Counterintelligence Cyber Support* Counterintelligence Operations Support Counterintelligence Research and Technology Development* Information Security Industrial Security Antiterrorism/Force Protection* Technical Surveillance Countermeasures* Insider Threat Program* Special Security Office (SSO) Operations* Special Access Program* Locksmith* Security (SecureAccess) and CI (Biolink) Database Programmer* Information Assurance SCI Escorts Support Alarm Monitors

TOP SECRET

Foreign Disclosure* Operations Security* Operations and Staff Support*

SECRET

Personnel Security Entry Control Operations Access Control Janitorial Escort Support

Note: Asterisks denote personnel that may have to change their normal duty hours to support an on-going activity that takes place after-hours.

All contractor personnel with Top Secret//SCI clearance must comply with IC Directive (ICD) 704 eligibility to meet SCI access requirements of the contract.