Attachment12-SecurityandIntelligenceAppendix.doc

Appendix 12

Security and Intelligence Operations

Security and Intelligence Operations Functional Annex

Dated: 29 Jan 2008

A. General Information The Security and Intelligence Operations Directorate provides information assurance, security, and intelligence and counterintelligence services to protect the Agency and Ballistic Missile Defense System (BMDS) technologies, facilities, information and people from threats and the compromise of classified information. It is organized into five divisions, representing the following major functional areas:

· Security and Program Protection. Provides integrated operational security to deployed and emerging weapon systems around the world and protection to missile defense technologies, facilities, information and people.

· Special Programs. Provides an Agency Special Access Program Central Office for security management, administration, and oversight of activities.

· Intelligence. Identifies requirements and manages relationships for all aspects of intelligence support to ensure that intelligence products and services are substantively current, complete, and responsive.

· Counterintelligence. Manages the Agency Counterintelligence analysis and production activity.

· Information Assurance. Provides an independent assessment of information assurance.

Support to the Security and Intelligence Operations Directorate is divided into four principal functional areas:

· Area 1, Security and Program Protection: International Security; Organizational Security; Special Security; Information Safeguards; Program Protection; and Special Access Programs

· Area 2, Security Operations

· Area 3, Intelligence and Counterintelligence

· Area 4, Information Assurance The Directorate obtains expertise in information assurance, security, intelligence and counterintelligence services from contracts which will continue under the MiDAESS program. Task orders awarded under one or more of these contracts delineate specific task instructions and project requirements.

This annex contains statements of work and related information for each functional area.

Area 1

Security and Program Protection 1.A. General Information - (Area 1) Security and Program Protection.

Reserved.

1.B. Statement of Work - (Area 1) Security and Program Protection.

Security and Program Protection

1.C. Estimated Man-year Equivalents (MYEs)/Performance Locations - (Area 1) Security and Program Protection.

The next chart shows the primary locations and total MYEs in October 2008 and October 2010 to support Security and Program Protection. All positions are on-site. This workforce will shift locale due to Base Realignment and Closure (BRAC) between now and fiscal year 2010. The largest impact is movement of personnel from the Navy Annex in the National Capitol Region (NCR) to Huntsville, AL.

MYEs by Location with Anticipated BRAC Adjustments

The following chart shows the primary skill mix, experience level and man-year equivalents we anticipate are required to support Security and Program Protection.

Sample Skill Mix*

Level # Man Year Equivalents

Total

* Position/skill category descriptions and/or definitions have not been provided.

1.D. Deliverables/General Work Products - (Area 1) Security and Program Protection.

· Transition Plan

· Management Plan

· Monthly Status Reports

· Funds and Labor Hour Expenditure Reports

· Technical Reports, Studies, Presentations, and Briefing Materials

· Drafts of executive-level decision memoranda and guidance letters

This Draft RFP provides Contract Data Requirements List (CDRL) submittals common to all MiDAESS contracts. Specialized or tailored CDRL items will be included in final requests for proposal (RFPs) for each functional annex/area.

1.E. Anticipated Contract Awards - (Area 1) Security and Program Protection.

The Agency anticipates two full-and-open competitive awards covering the full range of requirements in Security and Program Protection. Each selected contractor must be able to perform all of the tasks provided in the Statement of Work at all locations listed in this annex.

We will determine the actual number of MYEs to be awarded on the first set of task orders based upon on-going manpower reviews and an analysis of existing contracts transitioning into the MiDAESS program. We plan to divide the first set of task orders into a near equal work share across all awardees. For example, if we make two contract awards, each awardee would get approximately 50% of the total work share for their first task order. We will award subsequent task orders based on evaluation criteria such as cost and ongoing performance as explained in this Draft Request for Proposal (DRFP), the final RFP and contract for Security and Program Protection and subsequent task order specific RFPs.

We anticipate a 177 MYEs ceiling on contractor support services at time of contract award with a possible expansion of the ceiling by 10% based upon additional taskings and available funding. We anticipate the first set of task orders to total approximately 177 MYEs.

1.F. Small Business - (Area 1) Security and Program Protection.

The applicable NAICS Code is 541690 and Size Standard is $6.5 million annual revenue for the tasks in “Statement of Work—Security and Program Protection.”

1.G. Security Requirements - (Area 1) Security and Program Protection.

We require a minimum of a SECRET security clearance for all employees and desire a limited number of personnel to possess a TOP SECRET Clearance with Special Compartmented Information (SCI) Access. All Special Access Program (SAP) security positions require TOP SECRET Clearances required for access to SAP information. The final RFP for Security and Program Protection will contain specific requirements for SCI and special access clearances.

1.H. Travel Requirements – (Area 1) Security and Program Protection.

Contract support services employees should expect to travel from 10% to 50% of their time to various locations of systems, specific components, manufacturing sites, integration sites, and test sites.

1.I. Government Furnished Information/Equipment/Support - (Area 1) Security and Program Protection.

· MDA will provide access to MDA facilities as required, including on-site work stations with computers and telephones

· Access to Planning, Programming, Budgeting, and Execution System (PPBES) information

· Government laptops and Blackberries may be provided on a need-justified basis

1.J. Unique Source Selection Criteria - (Area 1) Security and Program Protection.

This draft RFP includes source selection criteria we will use for Security and Program Protection.

The final RFP may include a Sample Problem specific to the Security and Intelligence Directorate. Below is a sample problem representative of the problem you will see in the final RFP.

Security and Intelligence Operations Sample Problem: MDA’s Director has decided that the 2009 International Missile Defense conference will be in Tel Aviv Israel in September 2009. The conference will have classified and unclassified sessions. Your company is responsible for all conference security. Describe how you would handle this task to include security, VIP protection, intelligence/ counterintelligence, disclosure, country interface and all other factors relevant to conference security.

1.K. Organizational Conflict of Interest - (Area 1) Security and Program Protection.

The MDA Director relies on the Director of Security and Intelligence Operations to provide unbiased analysis, judgment and recommendations for action. The potential for conflicts of interest, whether real or perceived, is significant for those prime and subcontractors providing support to the Director of Security and Intelligence Operations and also providing support elsewhere in the Missile Defense Agency. Careful analysis of conflicts of interest must be accomplished by each offeror. We will allow both prime and subcontractors to accomplish this work only after the Contracting Officer approves a thorough and comprehensive mitigation plan that ensures your work remains independent of other program work. See Section H, Clause H-08, Organizational Conflicts of Interest (OCI) (January 2008), for additional guidance.

Area 2

Security Operations 2.A. General Information - (Area 2) Security Operations.

Reserved.

2.B. Statement of Work - (Area 2) Security Operations.

Security Operations

2.C. Estimated Man-year Equivalents (MYEs)/Performance Locations - (Area 2) Security Operations.

The next chart shows the primary locations and total MYEs in October 2008 and October 2010 to support the Security Operations mission. All SOC/ACC positions are on-site. This workforce will shift locale due to Base Realignment and Closure between now and fiscal year 2011. The largest impact is movement of personnel from the Suffolk Building and Navy Annex in the National Capitol Region to Huntsville, AL.

All armed security positions are on Government sites. Currently, armed security contractors are deployed to support (a) the Sea-Based X-Band Radar (SBX) program aboard the vessel at sea and in Adak, Alaska and (b) the AN/TPY-2 radar in Shariki, Japan1 and temporarily in Juneau, Alaska.2 This requirement will be adjusted as Services assume responsibility for BMDS systems and additional support is defined to support test activities requiring armed security. Planning to support the deployment of BMDS systems to Poland3, the Czech Republic3, and future forward basing for the AN/TPY-2 radar includes a projection of U.S. Armed Contractor Security that will be subject to US Combatant Command (COCOM) concurrence and government-to-government negotiations.

MYEs by Location with Anticipated BRAC Adjustments

Security Operations Center/ Access Control

Armed Security

The following chart shows the primary skill mix, experience level and manyear equivalents we anticipate are required to support the SOC/ACC mission.

Level # Man Year Equivalents

Security Operations Center/Access Control

Sub-total

Armed Security

Sub-total

Total

2.D. Deliverables/General Work Products - (Area 2) Security Operations.

· Transition Plan

· Management Plan

· Monthly Status Reports

· Funds and Labor Hour Expenditure Reports

· Technical Reports, Studies, Presentations, and Briefing Materials

· Drafts of executive-level decision memoranda and guidance letters

This Draft RFP provides Contract Data Requirements List (CDRL) submittals common to all MiDAESS contracts. Specialized or tailored CDRL items will be included in final requests for proposal (RFPs) for each functional annex/area.

2.E. Anticipated Contract Awards - (Area 2) Security Operations.

We anticipate two full-and-open competitive awards covering the full range of requirements for the Security Operations. Tasks will be divided between (a) unarmed Security Operations Center (SOC)/Access Control Center (ACC) support for MDA facilities and (b) armed security for select BMDS sites. Each selected contractor must be able to perform all of the tasks provided in the Statement of Work at all locations listed in this annex.

We are continuing our search for additional small business opportunities in this area. Final determinations will be made after reviewing responses to our sources sought announcement

We will determine the actual number of MYEs to be awarded on the first set of task orders based upon on-going manpower reviews and an analysis of existing contracts transitioning into the MiDAESS program. We plan to divide the first set of task orders into a near equal work share across all awardees. For example, if we make two awards, each awardee would get approximately 50% of the total work share for their first task order. We will award subsequent task orders based on evaluation criteria such as cost and ongoing performance as explained in this Draft Request for Proposal (DRFP), the final RFP and contract for the Sector Operations Center / Access Control Center and subsequent task order specific RFPs.

We anticipate a 247 MYEs ceiling on contractor support services at time of contract award with a possible expansion of the ceiling by 10% based upon additional taskings and available funding. We anticipate the first set of task orders to total approximately 247 MYEs.

We will determine the actual number of MYEs for the armed security to be awarded on the first set of task orders based upon on-going manpower reviews, coordination with COCOMs and Services for individual BMDS components, and an analysis of existing contracts transitioning into the MiDAESS program. We will award subsequent task orders based on evaluation criteria such as cost and ongoing performance as explained in this Draft Request for Proposal (DRFP), the final RFP and contract for Armed Security Guards and subsequent task order specific RFPs.

2.F. Small Business - (Area 2) Security Operations.

The applicable NAICS Code is 561612 and Size Standard is $17 million for the tasks in “Statement of Work—Security Operations Center/Access Control Center.”

2.G. Security Requirements - (Area 2) Security Operations.

We will require Collateral SECRET Clearances for the Security Operations positions. If TOP SECRET clearances are required for support to sensitive test activities, those security requirements will be clearly defined in the task order.

2.H. Travel Requirements - (Area 2) Security Operations.

SOC/ACC contract support services employees should expect to travel from 10% to 25% of their time to various locations of systems, specific components, manufacturing sites, integration sites, and test sites.

Armed Security contractor support services employees should expect to travel up to 5% of their time to/from various operating locations and test sites.

2.I. Government Furnished Information/Equipment/Support - (Area 2) Security Operations.

· MDA will provide access to MDA facilities as required, including on-site work stations with computers and telephones

· Access to Planning, Programming, Budgeting, and Execution System (PPBES) information

· Government laptops and Blackberries may be provided on a need-justified basis

2.J. Unique Source Selection Criteria - (Area 2) Security Operations.

The draft RFP includes source selection criteria we will use for the Security Operations solicitation.

2.K. Organizational Conflict of Interest - (Area 2) Security Operations.

The MDA Director relies on the Director of Security and Intelligence Operations to provide unbiased analysis, judgment and recommendations for action. The potential for conflicts of interest, whether real or perceived, is significant for those prime and subcontractors providing support to the Director of Security and Intelligence Operations and also providing support elsewhere in the Missile Defense Agency. Careful analysis of conflicts of interest must be accomplished by each offeror. We will allow both prime and subcontractors to accomplish this work only after the Contracting Officer approves a thorough and comprehensive mitigation plan that ensures your work remains independent of other program work. See Section H, Clause H-08, Organizational Conflicts of Interest (OCI) (January 2008), for additional guidance.

Area 3

Intelligence and Counterintelligence 3.A. General Information - (Area 3) Intelligence and Counterintelligence.

Reserved.

3.B. Statement of Work - (Area 3) Intelligence and Counterintelligence.

Intelligence and Counterintelligence

3.C. Estimated Man-year Equivalents (MYEs)/Performance Locations - (Area 3) Intelligence and Counterintelligence.

The next chart shows the primary locations and total MYEs in October 2008 and October 2010 to support Intelligence and Counterintelligence. All positions are on-site. This workforce will shift locale due to Base Realignment and Closure between now and fiscal year 2010. The largest impact is movement of personnel from the Navy Annex in the National Capitol Region (NCR) to Huntsville, AL.

MYEs by Location with Anticipated BRAC Adjustments

The following chart shows the primary skill mix, experience level and manyear equivalents we anticipate are required to support Intelligence and Counterintelligence.

Level # Man Year Equivalents

Total

3.D. Deliverables/General Work Products - (Area 3) Intelligence and Counterintelligence.

· Transition Plan

· Management Plan

· Monthly Status Reports

· Funds and Labor Hour Expenditure Reports

· Technical Reports, Studies, Presentations, and Briefing Materials

· Drafts of executive-level decision memoranda and guidance letters

This Draft RFP provides Contract Data Requirements List (CDRL) submittals common to all MiDAESS contracts. Specialized or tailored CDRL items will be included in final requests for proposal (RFPs) for each functional annex/area.

3.E. Anticipated Contract Awards - (Area 3) Intelligence and Counterintelligence.

The Agency anticipates two full-and-open competitive awards covering the full range of requirements in Intelligence and Counterintelligence. Each selected contractor must be able to perform all of the tasks provided in the Statement of Work at all locations listed in this annex.

We will determine the actual number of MYEs to be awarded on the first set of task orders based upon on-going manpower reviews and an analysis of existing contracts transitioning into the MiDAESS program. We plan to divide the first set of task orders into a near equal work share across all awardees. For example, if we make two awards, each awardee would get approximately 50% of the total work share for their first task order. We will award subsequent task orders based on evaluation criteria such as cost and ongoing performance as explained in this Draft Request for Proposal (DRFP), the final RFP and contract for Intelligence and Counterintelligence and subsequent task order specific RFPs.

We anticipate a 52 MYEs ceiling on contractor support services at time of contract award with a possible expansion of the ceiling by 10% based upon additional taskings and available funding. We anticipate the first set of task orders to total approximately 52 MYEs.

3.F. Small Business - (Area 3) Intelligence and Counterintelligence.

The applicable NAICS Code is 541690 and Size Standard is $6.5 million annual revenue for “Statement of Work—Intelligence and Counterintelligence.”

3.G. Security Requirements - (Area 3) Intelligence and Counterintelligence.

We require a TOP SECRET clearance with SCI Access for all counterintelligence and intelligence contractor support positions.

3.H. Travel Requirements – (Area 3) Intelligence and Counterintelligence.

Contract support services employees should expect to travel from 10% to 50% of their time to various locations of systems, specific components, manufacturing sites, integration sites, and test sites.

3.I. Government Furnished Information/Equipment/Support - (Area 3) Intelligence and Counterintelligence.

· MDA will provide access to MDA facilities as required, including on-site work stations with computers and telephones

· Access to Planning, Programming, Budgeting, and Execution System (PPBES) information

· Government laptops and Blackberries may be provided on a need-justified basis

3.J. Unique Source Selection Criteria - (Area 3) Intelligence and Counterintelligence.

The draft RFP includes source selection criteria we will use for the Intelligence and Counterintelligence solicitation.

3.K. Organizational Conflict of Interest - (Area 3) Intelligence and Counterintelligence.

The MDA Director relies on the Director of Security and Intelligence Operations to provide unbiased analysis, judgment and recommendations for action. The potential for conflicts of interest, whether real or perceived, is significant for those prime and subcontractors providing support to the Director of Security and Intelligence Operations and also providing support elsewhere in the Missile Defense Agency. Careful analysis of conflicts of interest must be accomplished by each offeror. We will allow both prime and subcontractors to accomplish this work only after the Contracting Officer approves a thorough and comprehensive mitigation plan that ensures your work remains independent of other program work. See Section H, Clause H-08, Organizational Conflicts of Interest (OCI) (January 2008), for additional guidance.

Area 4

Information Assurance (IA) 4.A. General Information - (Area 4) Information Assurance.

Reserved.

4.B. Statement of Work - (Area 4) Information Assurance.

Information Assurance

4.C. Estimated Man-year Equivalents (MYEs)/Performance Locations - (Area 4) Information Assurance.

The first chart below shows the total MYEs, by location, in October 2008 and October 2010. This workforce will shift locale because of the Base Realignment and Closure (BRAC) between now and FY2010. The largest impact is movement of personnel from the Navy Annex and the Suffolk Building in the National Capitol Region (NCR) to Huntsville, AL. We will have a small Government team and a reduced complement of Security Operations and Access Control personnel within the NCR residing at Ft. Belvoir when facility construction is complete. The second chart lists a sample skill mix for the Security and Intelligence Operations contractor support staff.

We will not necessarily award all MYEs with the first set of task orders. Rather, we will determine the number of MYEs awarded with the first set of task orders based upon the results of on-going manpower reviews and an analysis of existing contracts transitioning into the MiDAESS program. We may accelerate the transition of security analysts from the NCR to Huntsville, AL as early as FY2009 and FY2010.

MYEs by Location with Anticipated BRAC Adjustments

Total

4.D. Deliverables/General Work Products - (Area 4) Information Assurance.

· Transition Plan

· Management Plan

· Monthly Status Reports

· Funds and Labor Hour Expenditure Reports

· Technical Reports, Studies

· Presentation and Briefing Materials

· Drafts of Executive-level decision memoranda and guidance letters

This Draft RFP provides Contract Data Requirements List (CDRL) submittals common to all MiDAESS contracts. Specialized or tailored CDRL items will be included in final requests for proposal (RFPs) for each functional annex/area.

4.E. Anticipated Contract Awards - (Area 4) Information Assurance.

The Agency anticipates one full-and-open competitive award covering the full range of requirements in Information Assurance. The selected contractor must be able to perform all of the tasks provided in the Statement of Work at all listed locations.

We will determine the actual number of MYEs to be awarded on the first set of task orders based upon on-going manpower reviews and an analysis of existing contracts transitioning into the MiDAESS program. We will award subsequent task orders based on evaluation criteria such as cost and ongoing performance as explained in this Draft Request for Proposal (DRFP), the final RFP and contract for Information Assurance and subsequent task order specific RFPs.

4.F. Small Business - (Area 4) Information Assurance.

The applicable NAICS Code is 541690 and Size Standard is $6.5 million annual revenue for the tasks in the “Statement of Work—Information Assurance.”

4.G. Security Requirements - (Area 4) Information Assurance.

At contract award we require a minimum of TOP SECRET security clearance for all employees and desire a limited number of personnel to possess an SCI clearance. Selected IA positions require TOP SECRET Clearances with special compartmented information (SCI) access. The final RFP for Information Assurance will include specific requirements for security clearances and special access.

4.H. Travel Requirements - (Area 4) Information Assurance.

Contractor support services employees should expect to travel from 10% to 50% of their time to various locations of systems, specific components, manufacturing sites, integration sites and test sites.

4.I. Government Furnished Information/Equipment/Support - (Area 4) Information Assurance.

· MDA will provide access to MDA facilities as required, including on-site work stations with computers and telephones

· Access to Planning, Programming, Budgeting, and Execution System (PPBES) information

· Government laptops and Blackberries may be provided on a need-justified basis

4.J. Unique Source Selection Criteria - (Area 4) Information Assurance.

The draft RFP includes source selection criteria we will use for the Information Assurance solicitation.

4.K. Organizational Conflict of Interest - (Area 4) Information Assurance.

The MDA Director relies on the Director of Security and Intelligence Operations to provide unbiased analysis, judgment and recommendations for action. The potential for conflicts of interest, whether real or perceived, is significant for those prime and subcontractors providing support to the Director of Security and Intelligence Operations and also providing support elsewhere in the Missile Defense Agency. Careful analysis of conflicts of interest must be accomplished by each offeror. We will allow both prime and subcontractors to accomplish this work only after the Contracting Officer approves a thorough and comprehensive mitigation plan that ensures your work remains independent of other program work. This area has been identified as one that will require more stringent OCI measures. See Section H, Clause H-08, Organizational Conflicts of Interest (OCI) (January 2008), for additional guidance.

PAGE