II_01_b_RFP Attachment 1 - PWS v2.pdf

Attachment 1 2032H323R00005

TRIP ANNUAL DATA COLLECTION

PERFORMANCE WORK STATEMENT (PWS)

1. BACKGROUND

On November 26, 2002, the President signed into law the Terrorism Risk Insurance Act (TRIA) of 2002 (Pub. L. 107-297, 116 Stat. 2322). The Act’s purposes, accomplished through the Terrorism Risk Insurance Program (“Program” or “TRIP”), are to address market disruption, ensure the continued widespread availability and affordability of commercial property and casualty insurance for terrorism risk, and to allow for a transition period for the private markets to stabilize and build capacity while preserving state insurance regulation and consumer protections.

The Terrorism Risk Insurance Act of 2002, as amended (TRIA), requires the Secretary of the Treasury (in consultation with the Attorney General and the Secretary of Homeland Security) to certify that that an “act of terrorism” has taken place to trigger application of the Terrorism Risk Insurance Program (Program). No act of terrorism may be certified by the Secretary if commercial property and casualty insurance losses arising from the event in question do not exceed in the aggregate $5,000,000.

Section 104(h)(1) of TRIA (formerly Section 111 of the Terrorism Risk Insurance Program Reauthorization Act of 2015) and 31 CFR 50.51 of the Program Rules require Treasury to issue an annual data call to insurers participating in TRIP to collect information relating to Treasury’s administration of the Program. The information requested shall address ”the lines of property and casualty insurance subject to the Program, the premiums earned for terrorism risk insurance within those lines and for those lines generally, the geographical location of exposures covered under terrorism risk insurance, the pricing of terrorism risk insurance, the take-up rate for terrorism risk insurance, the amount of private reinsurance obtained by participating insurers in connection with such policies, and other matters concerning the Program as may be identified by Treasury.” The annual data call has generally been identified since its inception in 2016 as the TRIP Section 111 Data Call.

2. OBJECTIVE

The purpose of this contract is to gain contractor support in performing the annual data call on behalf of TRIP to include data collection, validation, and analysis. Documents which may be required to accomplish the work in this Performance Work Statement (PWS) include, but are not limited to the following:

A. The Terrorism Risk Insurance Act of 2002, as amended.

B. Treasury Regulations implementing the Program are generally found at CFR Part 50. Notable sections include:

i. Treasury regulations establishing general provisions implementing the Program, including key definitions, and requirements for policy disclosures and mandatory availability, can be found in Subparts A, B, and C of 31 CFR Part 50.

ii. Treasury’s rules applying provisions of the Act to State residual market insurance entities and State workers’ compensation funds are at Subpart D of 31 CFR Part 50.

iii. Rules addressing data collection, including the production of claims data to the TRIP Claims System are at Subpart F of 31 CFR Part 50.

iv. Rules setting forth the process for the certification of an act of terrorism under TRIA are at Subpart G of 31 CFR Part 50.

v. Rules setting forth procedures for filing claims for payment of the Federal Share of Compensation for insured losses, as well as the final netting and commutation of claims payments, are at Subpart H of 31 CFR Part 50.

vi. Subpart I of 31 CFR Part 50 contains rules on audit and recordkeeping requirements for insurers.

vii. Subpart J to Part 50 addresses the recoupment of the Federal Share of Compensation while Subpart K of 31 CFR Part 50 contains Treasury’s rules implementing the litigation management provisions of section 107 of the Act.

viii. Subpart L to Part 50 comprises Treasury's regulations implementing the annual cap on insured losses of $100 billion and the pro rata payment of claims. Additional information can be found at https://home.treasury.gov/policy-issues/financial-markets-financial-institutions-and-fiscal-service/federal-insurance-office/terrorism-risk-insurance-program/annual-data-collection.

3. CURRENT ENVIRONMENT

The current TRIP Section 111 Data Call has been accomplished through the use of Excel spreadsheets furnished by TRIP Program (see PDF copies of forms located at https://home.treasury.gov/policy-issues/financial-markets-financial-institutions-and-fiscal-service/federal-insurance-office/terrorism-risk-insurance-program/annual-data-collection ).

Contractor shall construct the system so that insurers can report the requested data elements, on a group basis or an individual company basis for those companies not part of a group, through either the provision of an Excel workbook (as created by Treasury) or through the provision of the same data elements in a .scv file. Contractor will create the .scv file format for use by insurers that wish to report the data in that format. TRIP currently has approximately 1000 reporting insurers (groups and companies not part of a group) that submit data annually, through either Excel or .scv files.

https://home.treasury.gov/policy-issues/financial-markets-financial-institutions-and-fiscal-service/federal-insurance-office/terrorism-risk-insurance-program/annual-data-collection https://home.treasury.gov/policy-issues/financial-markets-financial-institutions-and-fiscal-service/federal-insurance-office/terrorism-risk-insurance-program/annual-data-collection https://home.treasury.gov/policy-issues/financial-markets-financial-institutions-and-fiscal-service/federal-insurance-office/terrorism-risk-insurance-program/annual-data-collection https://home.treasury.gov/policy-issues/financial-markets-financial-institutions-and-fiscal-service/federal-insurance-office/terrorism-risk-insurance-program/annual-data-collection https://home.treasury.gov/policy-issues/financial-markets-financial-institutions-and-fiscal-service/federal-insurance-office/terrorism-risk-insurance-program/annual-data-collection https://home.treasury.gov/policy-issues/financial-markets-financial-institutions-and-fiscal-service/federal-insurance-office/terrorism-risk-insurance-program/annual-data-collection

4. SCOPE OF WORK -

A. Data Collection

i. Contractor shall provide and manage a secure web-based system for the reporting of data by insurers participating in TRIP relating to terrorism risk insurance provided by those insurers as required by Section 111 of the Terrorism Risk Insurance Program Reauthorization Act of 2015.

ii. The TRIP Section 111 Data Call shall be performed annually, such that the system shall be ready to receive data by March 15 of the Base Period and in each Option Period, with data collection to close by May 15 of the Base Period and each Option Period, and statistical reports aggregating the collected data (on both an aggregate basis as well as an individual anonymized report basis) by June 1 of the Base Period and each Option Period, and any supplemental reports due no later than 15 days from receipt of request. Each year, the data collection will seek information from four categories of insurers, each of which has been required to respond to between 6 and 8 individual worksheets seeking information.

iii. The Contractor shall aggregate all data received from insurer companies to maintain insurer confidentiality in accordance with the requirements of TRIA. The information to be collected from individual insurers in the TRIP Section 111 Data Call is the confidential business information of those insurers, although some of the data elements to be collected are reported publicly by insurers in other settings.

iv. The system shall be set up as an internet portal designed to facilitate the collection of data. The general scope of the data to be collected will be identified to Contractor by Treasury in OMB Control Number 1505- 0257 and/or in separate correspondence. The system shall also be set up to readily permit revisions to the data collection elements over time and in accordance with Section 4(A)(ii). The data collection elements may be modified each year by Treasury, either based upon new statutory requirements or based upon Treasury’s judgment as respects necessary revisions to the data collection (which could result in either the collection of more or less data information on an annual basis).

v. Although Treasury will specify the data elements to be collected, Contractor shall assist Treasury concerning the information sought and provide suggestions, based upon its expertise, for improvements or revisions to any data elements as specified by Treasury in the first instance.

vi. Contractor shall install in its system for the TRIP Section 111 Data Call security protocols for the collection of confidential data from business entities and shall maintain that information confidentially, including to Treasury employees. Contractor shall disclose the information collected during the TRIP Section 111 Data Call only to Treasury or to third parties as may be authorized, in writing, by Treasury to receive data from the system.

vii. Contractor shall construct the system to permit the data collected in the TRIP Section 111 Data Call to be aggregated and/or analyzed across industry, industry segments, local jurisdictions, and other groupings as directed by Treasury.

a. Treasury aggregates data from the following insurance industry segments that participate in TRIP; the number following each category represents the approximate number of participants in each category that typically report on an annual basis. Market changes may cause the number to increase or decrease year over year or result in an insurer moving from one category to the other.

1. Non-Small Insurers (100)

2. Small Insurers (200)

3. Captive Insurers (600)

4. Alien Surplus Insurers (100)

b. Treasury currently collects data based on the following local jurisdictions:

1. A. All 50 states and the District of Columbia; and

2. U.S. Territories (Puerto Rico, Guam, Virgin Islands, Northern Mariana Islands, and American Samoa)

viii. Contractor shall construct the TRIP Section 111 Data Call system to collect data from insurers, as may be specified by Treasury, on an annual basis.

ix. Contractor shall construct the TRIP Section 111 Data Call system to collect data in such a way that data elements applicable to a particular insurer may be collected from multiple sources (e.g., both directly from the insurer in question as well as from other third-party sources that may have information relating to reporting insurers) and then aggregated and reported on a consolidated basis. For example, certain of the data (e.g., workers’ compensation information) may be reported by third-party sources, such as rating agencies. Contractor shall construct the system in such a way that it can receive this data from the third-party sources and incorporate it within the reports otherwise provided by responding insurers. In addition, Contractor shall construct the system in such a way that insurers can report the requested data elements through either the provision of an Excel workbook (as created by Treasury) or through the provision of the same data elements in a .scv file. Contractor will create the .scv file format for use by insurers that wish to report the data in that format.

x. Contractor shall coordinate with Treasury to perform reviews and procedures to ensure the control, quality, consistency, and integrity of data as it is collected during the TRIP Section 111 Data Call. Reviews and procedures reviews include, but are not limited to, ensuring that data elements that are connected reconcile with each other and reporting by insurers is consistent with prior year reporting to Treasury and separate reporting performed by insurers to state regulators.

xi. Contractor shall be available to reporting insurers to respond to questions concerning the data elements requested to possible that the data as reported by insurers to the Contractor’s system meets the specified data elements subject to collection. At a minimum, the Contractor shall provide a dedicated email address for insurers to submit questions. The dedicated email address shall be checked at least daily during each annual data call. Contractor shall keep Treasury informed of such inquiries and shall consult with Treasury to ensure appropriate and consistent responses.

xii. Contractor shall assist Treasury in conducting trainings for various industry segments. Assistance shall include, but not be limited to, participating in training webinars with industry segments to explain the collection, identify any changes from prior years, and respond to any industry questions.

xiii. Contractor shall assist Treasury in the design of statistical reports based upon the data collected during the annual TRIP Section 111 Data Call. Statistical reports include, but are not limited to, the aggregation of results from each reporting worksheet, as well as the generation of anonymized reports on an individual basis for certain worksheets, each based upon specifications provided by Treasury which seek to make available to Treasury all information reported during the data call in an aggregated and/or anonymized basis.

B. Program Management

i. Within five (5) days of award of the contract or exercise of an option period, the contractor shall schedule, coordinate, and attend a kick-off meeting. The contractor shall coordinate an agenda and take notes during the kick-off meeting. The kick-off meeting agenda will be supplied to the government at least 2 days prior to the kickoff meeting for government input. The kickoff meeting notes shall be supplied to the government no later than 3 days following the kickoff meeting for government review and acceptance.

ii. The contractor shall provide personnel who have the necessary technical, project management, and administrative expertise to support the planning and execution of the tasks contained in this Performance Work Statement (PWS).

iii. The Contractor shall provide Project Management (PM) support to ensure that the objectives, scope, deliverables, project schedule, milestones, project structure, development approach, and roles and responsibilities are defined and followed for this project. The resources, both human resources and other project resources, necessary to support the project shall be identified and provided. This project shall be managed and evaluated according to the specific objectives, deliverables, and milestones.

iv. Program Management Plan. The Program Management Plan describes the proposed management approach and is an evolutionary document and baseline for this contract. This document includes the following:

a. Include detailed Standard Operating Procedures (SOPs) for all tasks.

b. Include milestones, tasks, and subtasks required in this contract.

c. Provide for an overall Work Breakdown Structure (WBS), completed in Microsoft Project, and associated responsibilities and partnerships between Government organizations.

d. During completion of the PMP, the Contractor shall consult with and advise the COR in tailoring and mapping various project management artifacts/documents to ensure adequate visibility, accountability, and compliance.

e. Contractor shall provide the Government with an updated PMP within one week after the Kick-Off meeting. The Treasury will have an opportunity to comment and provide necessary changes, if necessary.

f. Contractor shall update and present the PMP monthly at the first IPT meeting of each month for Treasury approval.

g. Status Meetings: The Contractor will interact with the COR on an ongoing basis to discuss Data Form Reports or other issues within this Scope of Work.

h. Monthly Status Reports (MSR). The Contractor shall provide a MSR using MS Office Suite applications, by the 10th of each month via electronic mail to the Treasury COR. The report shall include the following:

1. Activities during reporting period, by task (Include:

On-going activities, new activities, activities completed; progress to date on all above-mentioned activities). Start each section with a brief description of the task.

2. Monthly result of deconfliction efforts.

3. Problems and corrective actions taken. Also include issues or concerns and proposed resolutions to address them.

4. Personnel gains, losses, and status.

5. Government actions required.

6. Schedule (Shows major tasks, milestones, and deliverables; planned and actual start and completion dates for each).

7. Any change request and level of efforts.

8. Accumulated invoiced cost for the previous month.

5. DELIVERABLES TABLE

BASE YEAR

Deliverable When Due Deliverable Format

Kick-Off Meeting No later than 10 days from award

Meeting via WebEx or other Technology

Kick-Off Meeting Agenda No later than 2 days prior to the kick-off meeting

Electronic document submitted to TRIP personnel, including COR

Kick-Off Meeting Notes No later than 3 days after the kick-off meeting

Electronic document submitted to TRIP personnel, including COR

Provide a secure, web-based data collection system for insurer input

No later than 120 days from award

Fully functioning web-based data collection system

TRIP Section 111 Data Call Annually, starting on February 1 and finishing on May 15

Open TRIP Data Call web-based system and receive data from insurers

TRIP Section 111 Statistical Reports Annually by June 1 Statistical reports of aggregated data in

Excel format

Supplemental Reports 15 days from request Statistical reports of supplemental data in Excel format

Updated aggregation reports by containing additional information generated through late reporting, if any, or corrected information submitted after the collection deadline.

Annually by November 15 Aggregation reports of additional data in Excel format

Data revisions to data collection elements As required. Update TRIP Section 111 Data Call documents and web-based system Provide suggestions for improvements or revisions to any data elements as specified by Treasury in the first instance.

As required. Electronic document with suggestions submitted to COR.

Perform reviews and procedures to ensure the control, quality, consistency, and integrity of data as it is collected during the TRIP Section 111 Data Call.

As required.

Electronic document with potential quality issues submitted to COR along with proposed modifications.

Contractor shall be available to reporting insurers to respond to questions concerning the data elements requested.

As required. Email or telephone call to insurers within 24 hours of receipt of issue.

Contractor shall assist Treasury in conducting trainings for various industry segments.

Four training sessions per fiscal year.

Participate in TRIP-sponsored webinars for insurers.

Contractor shall assist Treasury in the design of statistical reports based upon the data collected during the annual TRIP Section 111 Data Call.

As required.

Electronic document outlining recommendations of statistical report design.

Program Management Plan No later than 10 days after contract award.

Electronic document submitted to

COR.

Status Meetings As required. No more than 12 status meetings per year.

Teleconference or Video Conference meeting

Monthly Status Reports By the 10th of each month. Electronic Word document submitted to COR.

Quality Control Plan No later than 15 days after contract award

Electronic Word document submitted to the COR

OPTION YEAR 1

Deliverable When Due Deliverable Format Provide a secure, web-based data collection system for insurer input

No later than 120 days from award

Fully functioning web-based data collection system

TRIP Section 111 Data Call Annually, starting on February 1 and finishing on May 15

Open TRIP Data Call web-based system and receive data from insurers

TRIP Section 111 Statistical Reports Annually by June 1 Statistical reports of aggregated data in

Excel format

Supplemental Reports 15 days from request Statistical reports of supplemental data in Excel format

Updated aggregation reports by containing additional information generated through late reporting, if any, or corrected information submitted after the collection deadline.

Annually by November 15 Aggregation reports of additional data in Excel format

Data revisions to data collection elements As required. Update TRIP Section 111 Data Call documents and web-based system Provide suggestions for improvements or revisions to any data elements as specified by Treasury in the first instance.

As required. Electronic document with suggestions submitted to COR.

Perform reviews and procedures to ensure the control, quality, consistency, and integrity of data as it is collected during the TRIP Section 111 Data Call.

As required.

Electronic document with potential quality issues submitted to COR along with proposed modifications.

Contractor shall be available to reporting insurers to respond to questions concerning the data elements requested.

As required. Email or telephone call to insurers within 24 hours of receipt of issue.

Contractor shall assist Treasury in conducting trainings for various industry segments.

Four training sessions per fiscal year.

Participate in TRIP-sponsored webinars for insurers.

Contractor shall assist Treasury in the design of statistical reports based upon the data collected during the annual TRIP Section 111 Data Call.

As required.

Electronic document outlining recommendations of statistical report design.

Update Program Management Plan

No later than 10 days after option exercise.

Electronic document submitted to

COR.

Status Meetings As required. No more than 12 status meetings per year.

Teleconference or Video Conference meeting.

Monthly Status Reports By the 10th of each month. Electronic Word document submitted to COR.

Update Quality Control Plan No later than 15 days after option year exercise

Electronic Word document submitted to the COR

OPTION YEAR 2

Deliverable When Due Deliverable Format Provide a secure, web-based data collection system for insurer input

No later than 120 days from award

Fully functioning web-based data collection system

TRIP Section 111 Data Call Annually, starting on February 1 and finishing on May 15

Open TRIP Data Call web-based system and receive data from insurers

TRIP Section 111 Statistical Reports Annually by June 1 Statistical reports of aggregated data in

Excel format

Supplemental Reports 15 days from request Statistical reports of supplemental data in Excel format

Updated aggregation reports by containing additional information generated through late reporting, if any, or corrected information submitted after the collection deadline.

Annually by November 15 Aggregation reports of additional data in Excel format

Data revisions to data collection elements As required. Update TRIP Section 111 Data Call documents and web-based system Provide suggestions for improvements or revisions to any data elements as specified by Treasury in the first instance.

As required. Electronic document with suggestions submitted to COR.

Perform reviews and procedures to ensure the control, quality, consistency, and integrity of data as it is collected during the TRIP Section 111 Data Call.

As required.

Electronic document with potential quality issues submitted to COR along with proposed modifications.

Contractor shall be available to reporting insurers to respond to questions concerning the data elements requested.

As required. Email or telephone call to insurers within 24 hours of receipt of issue.

Contractor shall assist Treasury in conducting trainings for various industry segments.

Four training sessions per fiscal year.

Participate in TRIP-sponsored webinars for insurers.

Contractor shall assist Treasury in the design of statistical reports based upon the data collected during the annual TRIP Section 111 Data Call.

As required.

Electronic document outlining recommendations of statistical report design.

Update Program Management Plan

No later than 10 days after option exercise.

Electronic document submitted to

COR.

Status Meetings As required. No more than 12 status meetings per year.

Teleconference or Video Conference meeting.

Monthly Status Reports By the 10th of each month. Electronic Word document submitted to COR.

Update Quality Control Plan No later than 15 days after option year exercise

Electronic Word document submitted to the COR

OPTION YEAR 3

Deliverable When Due Deliverable Format Provide a secure, web-based data collection system for insurer input

No later than 120 days from award

Fully functioning web-based data collection system

TRIP Section 111 Data Call Annually, starting on February 1 and finishing on May 15

Open TRIP Data Call web-based system and receive data from insurers

TRIP Section 111 Statistical Reports Annually by June 1 Statistical reports of aggregated data in

Excel format

Supplemental Reports 15 days from request Statistical reports of supplemental data in Excel format

Updated aggregation reports by containing additional information generated through late reporting, if any, or corrected information submitted after the collection deadline.

Annually by November 15 Aggregation reports of additional data in Excel format

Data revisions to data collection elements As required. Update TRIP Section 111 Data Call documents and web-based system Provide suggestions for improvements or revisions to any data elements as specified by Treasury in the first instance.

As required. Electronic document with suggestions submitted to COR.

Perform reviews and procedures to ensure the control, quality, consistency, and integrity of data as it is collected during the TRIP Section 111 Data Call.

As required.

Electronic document with potential quality issues submitted to COR along with proposed modifications.

Contractor shall be available to reporting insurers to respond to questions concerning the data elements requested.

As required. Email or telephone call to insurers within 24 hours of receipt of issue.

Contractor shall assist Treasury in conducting trainings for various industry segments.

Four training sessions per fiscal year.

Participate in TRIP-sponsored webinars for insurers.

Contractor shall assist Treasury in the design of statistical reports based upon the data collected during the annual TRIP Section 111 Data Call.

As required.

Electronic document outlining recommendations of statistical report design.

Update Program Management Plan

No later than 10 days after option exercise.

Electronic document submitted to

COR.

Status Meetings As required. No more than 12 status meetings per year.

Teleconference or Video Conference meeting.

Monthly Status Reports By the 10th of each month. Electronic Word document submitted to COR.

Update Quality Control Plan No later than 15 days after option year exercise

Electronic Word document submitted to the COR

OPTION YEAR 4

Deliverable When Due Deliverable Format Provide a secure, web-based data collection system for insurer input

No later than 120 days from award

Fully functioning web-based data collection system

TRIP Section 111 Data Call Annually, starting on February 1 and finishing on May 15

Open TRIP Data Call web-based system and receive data from insurers

TRIP Section 111 Statistical Reports Annually by June 1 Statistical reports of aggregated data in

Excel format

Supplemental Reports 15 days from request Statistical reports of supplemental data in Excel format

Updated aggregation reports by containing additional information generated through late reporting, if any, or corrected information submitted after the collection deadline.

Annually by November 15 Aggregation reports of additional data in Excel format

Data revisions to data collection elements As required. Update TRIP Section 111 Data Call documents and web-based system

Provide suggestions for improvements or revisions to any data elements as specified by Treasury in the first instance.

As required. Electronic document with suggestions submitted to COR.

Perform reviews and procedures to ensure the control, quality, consistency, and integrity of data as it is collected during the TRIP Section 111 Data Call.

As required.

Electronic document with potential quality issues submitted to COR along with proposed modifications.

Contractor shall be available to reporting insurers to respond to questions concerning the data elements requested.

As required. Email or telephone call to insurers within 24 hours of receipt of issue.

Contractor shall assist Treasury in conducting trainings for various industry segments.

Four training sessions per fiscal year.

Participate in TRIP-sponsored webinars for insurers.

Contractor shall assist Treasury in the design of statistical reports based upon the data collected during the annual TRIP Section 111 Data Call.

As required.

Electronic document outlining recommendations of statistical report design.

Update Program Management Plan

No later than 10 days after option exercise.

Electronic document submitted to

COR.

Status Meetings As required. No more than 12 status meetings per year.

Teleconference or Video Conference meeting.

Monthly Status Reports By the 10th of each month. Electronic Word document submitted to COR.

Update Quality Control Plan No later than 15 days after option year exercise

Electronic Word document submitted to the COR

6. SECURITY BACKGROUND CHECK

There may be occasions where contractor personnel are required to provide support or attend meetings at government locations where a security background is required. When notified by the COR of support requirements at these locations, the Contractor shall provide full name (first, middle, and last) as well as birth date, social security number and citizenship status to the COR at least 3 business day prior to the required support date.

7. RECORDS MANAGEMENT

The Contractor must ensure that any information and documentation, including work papers, are kept in a locked, secure place when not in use by Contractor staff. Other information must be kept locked after regular working hours. Only Contractor staff with appropriate clearances shall have access to work papers. Records will be maintained for a minimum of 5 years.

8. QUALITY CONTROL PLAN

The Quality Assurance Surveillance Plan (QASP) shall be provided by the Government. The contractor shall propose a Quality Control Plan. At a minimum, the plan should include:

A. A description of the inspection system to cover all services in the PWS. The description must include specifics as to the areas to be inspected on both a scheduled and unscheduled basis, frequency of inspection, and the title and organizational placement of the inspectors.

B. A description of the methods used for identifying and preventing defects in the quality of service performed.

C. A description of the records to be kept to document inspections and corrective or preventive actions taken.

D. The records must be kept and made available to the contracting officer, when requested, throughout the contract performance period and for the period after contract completion until final settlement of any claims under this contract.

9. PERIOD OF PERFORMANCE

The Government anticipates that the period of performance will consist of a one-year base period and four one-year option periods.

10. PLACE OF PERFORMANCE

The work to be performed under this contract shall be at the Contractor’s facility.

Meetings will be conducted virtually.

11. TYPE OF CONTRACT

The Government anticipates the award of a firm-fixed price contract for this work.

12. SECURITY REQUIREMENTS

A. Contractor personnel performing work shall comply with requirements as established in Homeland Security Presidential Directive-12 (HSPD-12), Office of Management and Budget (OMB) guidance M-05-24, and Federal Information Processing Standards Publication (FIPS PUB) Number 201. This Contract is categorized as unclassified at the Moderate (Tier 2/MBI) Level. This Contract does not have the requirements to issue Task Orders (/work/other identified method of requesting work). This Contract does not have Tasks that require different levels of investigations. Contractor shall be responsible for acquiring and securing personnel clearances if required. The contractor shall comply with appropriate government regulations, including but not limited to the following:

i. NIST SP 800-53 Rev 5, Security and Privacy Controls for Federal Information Systems and Organizations, which can be found at https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800-53r5.pdf

ii. NIST SP 800-18 Rev. 1, Guide for Developing Systems Security Plans for Federal Information Systems

iii. NIST SP 800-53 Rev 5, Security and Privacy Controls for Federal Information Systems and Organizations, which can be found at https://nvlpubs.nist.gov/nistpubs/SpecialPublications/NIST.SP.800- 53r5.pdf

iv. NIST SP 800-160, Systems Security Engineering: Considerations for a Multidisciplinary Approach in the Engineering of Trustworthy Secure Systems2,

v. Guide for Applying the Risk Management Framework to Federal Information Systems

vi. NIST SP 800-60, Rev. 1, Guide for Mapping Types of Information, and Information Systems to Security Categories

vii. NIST SP 800-61, Rev. 2, Computer Security Incident Handling Guide

viii. Federal Information Security Management Act of 2002 (FISMA)

ix. Treasury Directive Publication (TD P) 85-01, Treasury Information

Technology Security Program, Volume I Policy, Part 1 Sensitive Systems

x. DO-910 v1.0, Department of the Treasury Departmental Offices Information Technology Security Policy Handbook

xi. NIST SP 800-30, Rev. 1, risk Management Guide for Information Technology Systems

xii. NIST SP 800-34, Contingency6 Planning Guide for Information Technology Systems

xiii. OMB Circular A-130, Appendix III, Security of Federal Automated Information Systems and Security Assessment and Authorization certification and accreditation process needed to assure its security and compliance with the Federal Information Security Management Act (FISMA) and NIST SP 800-53.

xiv. Treasury Directive P 15-71, Treasury Security Manual in the handling, protection, and safeguarding of government information in their possession. The TD P 15-71 will be followed as it specifies Treasury-specific personnel, physical, industrial and information security policy, processes and requirements that apply to this contract.

B. Personnel Security Requirements

i. Contractor shall be responsible for acquiring and securing personnel clearances if required.

ii. Department of Treasury, otherwise known as the Department, retains the right to request removal of Contractor personnel, regardless of prior clearance or adjudication status, whose actions, while assigned to this contract, clearly conflict with the interest of the Government. Lack of the ability to obtain or maintain the required investigation level is included in the reasons the Department may remove a contractor employee.

iii. The reason for removal shall be documented in writing by the

Contracting Officer. Additionally, the Contractor must notify the OSP of all terminations/resignations within 24 hours of occurrence. When and if such removal occurs, the Contractor is responsible for assigning qualified replacement personnel in a timely manner or ensuring that performance of the contract is not adversely affected.

iv. The Contractor shall return all Departmentally issued identification cards, building passes, keys, and any other government issued material of those terminated employees to the COR. If government issued material is not available to be returned, a report must be submitted to the COR referencing the number, name of individual to whom it was issued, the last known location, and disposition of the items. Failure to return government materials may result in remedial actions against the contractor.

v. If any current or prospective employee is found to be ineligible for access to Government facilities or information by the Department, the COR will notify the contractor that the employee shall not continue to work or to be assigned to work under the contract.

vi. The Department may require drug screening for probable cause at any time.

vii. The contractor must also ensure that, prior to the end of the contract, all Departmental information, systems, and equipment is returned to the appropriate Department personnel.

viii. All contractors must be vetted and approved by OSP prior to beginning work on any portion of this contract.

ix. Any employee assigned to support the Department shall comply with Personal Identity Verification One and Two (PIV-1, PIV-2) requirements as described in Homeland Security Presidential Directive 12 (HSPD-12), “Policy for a Common Identification Standard for Federal Employees and Contractors,” and “Federal Information Processing Standard 201, Personal Identity Verification Standards for Federal Employees and Contractors,” dated August 2013.

x. T2/Moderate Risk contract employees must be a U.S. Citizen or Lawful Permanent Resident Alien with at least three or more years of U.S. residency from the legal entry date in the U.S. Contractor personnel will have access to Department facilities, information and equipment limited to that which is needed to perform contract scope.

xi. The Contractor shall provide the CO the name of all entities to be used as subcontractors for each type of work to be performed prior to performing any work under this contract in accordance with the FAR Subpart 44.2.

xii. The Government reserves the right to accept or reject any subcontractors proposed.

xiii. The Contractor is responsible for obtaining the approval of the CO prior to release of any information received or generated under the contract per 48 CFR 252.204-7000. The CO should complete this item as required by internal agency directives to direct the prime contractor to the appropriate office that has public release authority. refer them to the CO.

xiv. Prime contractors should serve as focal point for their subcontractors’ public release requests and SBU (also known as Controlled Unclassified Information (CUI)) must be protected in accordance with EO 13556, 32 CFR 2002 (full implementation expected to be reached in November 2018), and Treasury Security Manual (TD P 15-71).

xv. For Official Use Only must be protected in accordance with the providing Agency’s directives.

xvi. Data contained within all Department computer systems are governed by Agency Security Regulations as well as the Federal Privacy Act of 1974. Contractor personnel assigned to this project will be held accountable for adherence to these regulations.

xvii. If the security classification or security requirements are changed by the Government after the date of this Contract, and if the changes cause an increase or decrease in security costs or otherwise affects any other term or condition of this Contract, any resulting financial burden will be the sole responsibility of the Contractor.

xviii. Contractors and their subcontractors must perform all initial, annual, contemporaneous, specialized and termination training required per Department guidance and TD P 15-71 as appropriate for their position.

This is in addition to any training their company requires them to have.

xix. Per the TD P 15-71, the Contractor shall report to the COR within 24 hours any adverse information coming to its attention concerning employees working under this contract, to include loss or suspension of favorable adjudication, or security issues involving the scope being completed for the contract. Reports based on rumor or innuendo should not be made. The subsequent termination of an employee does not obviate the requirement of the contractor to submit this report. The report shall include each employee’s name, social security number, and the adverse information.

xx. The Contractor shall also report within 24 hours any event the Contractor becomes aware of that would be deemed a potential security incident, violation or any compromise involving Treasury systems, material, or data or systems with Treasury material or data on them.

xxi. The Contractor shall comply with all Federal laws and regulations regarding computer security, information security and privacy.

xxii. While the Contractor’s personnel work in a federal government IT system, the Contractor is responsible for compliance with all laws, rules, and regulations governing conduct with respect to security – not only as they relate to its employees and agents, but also to other personnel who are government employees or agents of the government and to property at the site regardless of ownership.

xxiii. While on government premises and in possession of government property, the Contractor is responsible for such property and any damages or compromise thereto by Contractor’s employees.

xxiv. The Contractor and its employees shall exercise the utmost discretion in all matters relating to their duties and functions, and in the safeguarding of pre-decisional or sensitive information (privacy, etc.)

from inadvertent release.

xxv. At the completion of the contract, the Contractor shall send a written notice from the authorized principle of the company attesting that all file records pertaining to this contract in possession of the Contractor was destroyed.

xxvi. The contractor will avoid any improprieties located in FAR Part 3 and 52.203-16 regarding gratuities, kickbacks, conflicts of interest and other ethics issues.

xxvii. Work on this contract may require personnel to have access to private information covered by the Privacy Act, Title 5 of the U.S. Code, Section 552a (in addition to other types of non-public information). All Contractor personnel shall adhere to the requirements of the Privacy Act as well as any applicable Department or Federal rule/regulation regarding private information or other types of non-public information.

xxviii. As a condition for access for Government‐Owned Systems and data, all Contractor personnel must pass background investigations in accordance with OMB Circular A‐130 which requires screening of all individuals involved with sensitive applications or data in Federal automated information systems.

xxix. Contractor will abide by requirements set forth in the applicable guidance for the protection of unclassified information. If Contractor fails to follow requirements above, this may result in revocation of favorable public trust adjudication for offending employees and potential negative actions against the contract vehicle itself.

xxx. Per FAR 52.222-54, the contractor is required to comply with enrollment and verification requirements for all contractors except those previously verified by acceptable means.

xxxi. The contractor agrees and understands that the latest version (if superseded) of the U.S.C., CFRs, Executive Orders, Treasury policies and all other government issued documents that are referenced above will be followed.

13. KEY PERSONNEL

A. The following labor category is considered key personnel: Program Manager.

B. The Contractor must identify the employee(s) who will be designated as Key

Personnel under this contract. The Contractor must provide Treasury with the resumes of all personnel to be associated with this project that includes employment history, technical ability, and training and specific subject matter/system knowledge. Each must demonstrate experience with services of similar scope, size and complexity as the services defined in this performance work statement.

C. Labor Category Description: The labor category considered as Key Personnel must comply with the following definition:

Program Manager: Minimum qualifications: Bachelor’s Degree in relevant subject area and five (5) years’ experience as a Program Manager. Plans, organizes, and controls the overall activities of the program. Responsible for technical work, quality of work, and scheduling. Primary client interface conferring with client management on strategic issues and to maximize efficiency in achieving program requirements. Ensures that all program activities conform to the terms and conditions of the contract procedures and requirements, including cost, schedule, and quality parameters. Provides guidance, direction, and ultimate management for all projects, and reviews all services and products for conformance to client requirements.

14. NON-DISCLOSURE AGREEMENTS

Contractor personnel will have access to privileged and confidential materials of the United States Government. These printed and electronic documents are for internal use only, are not to be copied or released without permission, and remain the sole property of the United States Government. Some of these materials are protected by the Privacy Act of 1974 (revised by Pub.L. 93-5791) and 38 U.S. Code. Unauthorized disclosure of Privacy Act or Title 38 covered materials is a criminal offense. To protect this information from unauthorized release or use, the Contractor shall provide an executed non-disclosure agreement to the COR with a copy to the Contracting Officer (CO) prior to commencement of work. A copy of the Non-Disclosure Agreement applicable to this contract will be included as Attachment 1. Each subcontractor involved in this contract shall also complete and execute the Non-Disclosure Agreement as well and the Contractor shall also provide a copy of such Non-Disclosure Agreement to the CO prior to commencement of work by the subcontractor.

15. TRAVEL

Travel expenses are NOT authorized for this work

16. DATA RIGHTS

The Government has unlimited rights to all documents and other material produced under this contract. All documents and materials, to include the source codes of any software, produced under this contract shall be Government owned and are the property of the Government with all rights and privileges of ownership, including copyright, shall belong belonging exclusively to the Government. These documents and materials may not be used or sold by the Contractor without written permission from the CO. All materials supplied to the Government shall be the sole property of the Government and may not be used for any other purpose. This right does not abrogate any other Government rights.

17. INVOICING SCHEDULE

The contractor may invoice as follows: TBD

18. TECHNICAL EXHIBIT 1

Title I of the Terrorism Risk Insurance Act of 2002 Terrorism Risk Insurance Program Title I of the Terrorism Risk Insurance Act of 2002 Terrorism Risk Insurance Program As Amended by the Terrorism Risk Insurance Extension Act of 2005 (Pub. L. 109-144, 119 Stat. 2660), the Terrorism Risk Insurance Program Reauthorization Act of 2007 (Pub. L.

110-160, 121 Stat. 1839), and the Terrorism Risk Insurance Program Reauthorization Act of 2015 (Pub. L. 114-1, 129 Stat.3)

Sec. 101. Congressional findings and purpose.

Sec. 102. Definitions.

Sec. 103. Terrorism Insurance Program.

Sec. 104. General authority and administration of claims.

Sec. 105. Preemption and nullification of pre-existing terrorism exclusions.

Sec. 106. Preservation provisions.

Sec. 107. Litigation management. Sec. 108. Termination of Program.

SEC. 101. CONGRESSIONAL FINDINGS AND PURPOSE.

FINDINGS.—The Congress finds that— the ability of businesses and individuals to obtain property and casualty insurance at reasonable and predictable prices, in order to spread the risk of both routine and catastrophic loss, is critical to economic growth, urban development, and the construction and maintenance of public and private housing, as well as to the promotion of United States exports and foreign trade in an increasingly interconnected world; property and casualty insurance firms are important financial institutions, the products of which allow mutualization of risk and the efficient use of financial resources and enhance the ability of the economy to maintain stability, while responding to a variety of economic, political, environmental, and other risks with a minimum of disruption; the ability of the insurance industry to cover the unprecedented financial risks presented by potential acts of terrorism in the United States can be a major factor in the recovery from terrorist attacks, while maintaining the stability of the economy; widespread financial market uncertainties have arisen following the terrorist attacks of September 11, 2001, including the absence of information from which financial institutions can make statistically valid estimates of the probability and cost of future terrorist events, and therefore the size, funding, and allocation of the risk of loss caused by such acts of terrorism; a decision by property and casualty insurers to deal with such uncertainties, either by terminating property and casualty coverage for losses arising from terrorist events, or by radically escalating premium coverage to compensate for risks of loss that are not readily predictable, could seriously hamper ongoing and planned construction, property acquisition, and other business projects, generate a dramatic increase in rents, and otherwise suppress economic activity; and the United States Government should provide temporary financial compensation to insured parties, contributing to the stabilization of the United States economy in a time of national crisis, while the financial services industry develops the systems, mechanisms, products, and programs necessary to create a viable financial services market for private terrorism risk insurance.

PURPOSE.—The purpose of this title is to establish a temporary Federal program that provides for a transparent system of shared public and private compensation for insured losses resulting from acts of terrorism, in order to— protect consumers by addressing market disruptions and ensure the continued widespread availability and affordability of property and casualty insurance for terrorism risk; and allow for a transitional period for the private markets to stabilize, resume pricing of such insurance, and build capacity to absorb any future losses, while preserving State insurance regulation and consumer protections.

SEC. 102. DEFINITIONS.

In this title, the following definitions shall apply:

ACT OF TERRORISM.—

CERTIFICATION.—The term “act of terrorism” means any act that is certified by the Secretary, in consultation with the…